WO2019052027A1

WO2019052027A1 - Authentication method, control device, and central control service device

Info

Publication number: WO2019052027A1
Application number: PCT/CN2017/114743
Authority: WO
Inventors: 宋起涛; 兰海宇; 李屹
Original assignee: 深圳光峰科技股份有限公司
Priority date: 2017-09-14
Filing date: 2017-12-06
Publication date: 2019-03-21
Also published as: CN109510798A

Abstract

The present invention relates to an authentication method. The method comprises: establish a network connection between a central control service device and a control device; the control device generates a first key using an encryption algorithm according to a current timestamp and a control password corresponding to the central control service device, and sends the first key to the central control service device; the central control service device receives the first key, generates a second key using an encryption algorithm identical to that used by the control device according to a current timestamp and the control password saved in the central control service device, and compares the received first key with the generated second key to determine whether authentication succeeds. The present invention also provides the central control service device. According to the authentication method, the central control service device, and the control device, the keys are generated based on the current timestamps and the control password, and thus a higher security level is provided.

Description

Manual Name of Invention: Authentication Method and Control Equipment, Central Control Service Equipment Technical Field

[0001] The present invention relates to the field of central control, and in particular, to a control device, a central control service device, and a network connection authentication method thereof.

Background technique

[0002] At present, most of the central control service devices (for example, projectors) have network modules, such as LAN or Wi-Fi modules, and the central control service devices can be connected to the local area network or the Internet. For the convenience of control, the networked central control service The device supports network control protocols, such as the standard PJLINK protocol, that is, devices that are connected to the local area network or the Internet (such as computers, tablets, or mobile devices) can connect and control the corresponding central control service devices through the network protocol TCP/UPD or the like.

technical problem

[0003] In order to ensure network security and protect the security of the central control service device, an authentication mechanism is generally added in the network control protocol, that is, the device authorized by the central control service device can connect and control the central control service device. The existing authentication mechanism usually uses the control password for authentication. However, this authentication mechanism has the password being easily stolen and the authentication security is not high.

Problem solution

Technical solution

[0004] The present invention provides a control device, a central control service device, and a network connection authentication method thereof.

[0005] An authentication method is applied to a central control service device, and the central control service device is in communication with a control device

, the method includes:

Establishing a network connection with the control device;

Receiving an authentication command from the control device, where the authentication command includes a first key;

[0008] generating a second key according to the current interstitial stamp and the control password; and

[0009] Aligning whether the first key in the authentication command is consistent with the generated second key, if the agreement is successful, the authentication succeeds, and if not, the authentication fails.

[0010] In an embodiment, the first key and the second key are generated by using one of the following encryption algorithms: Standard MD5, crc32, SHA.

[0011] In an embodiment, the method further includes: if the authentication fails, disconnecting from the network connection of the control device.

[0012] In an embodiment, before receiving the authentication command, the method further includes: generating a current inter-time stamp, saving the current inter-time stamp in the central control service device, and transmitting the The current time stamp is applied to the control device.

[0013] In an embodiment, the authentication command includes a current inter-stamp generated in the control device, and the method further includes: if the central control service device can obtain its current time, Comparing the current time stamp in the authentication command with the current time of the central control service device, if the current time stamp exceeds the preset length range, the authentication fails; if the central control service device cannot If the current time interval is obtained, the current time stamp in the authentication command is compared with the time stamp of the last authentication. If the two are the same, the authentication fails.

[0014] A central control service device, the central control service device includes a first authentication unit and a first network module, where the first authentication unit includes a first receiving module, a first sending module, and an authentication execution The first receiving module is configured to receive an authentication command from the control device by using the first network module, where the authentication command includes a first key, and the authentication execution module is configured to use the control password and the current And generating a second key, and performing authentication according to whether the first key is consistent with the second key, where the first sending module is configured to send an authentication result to the control device.

[0015] In an embodiment, the central control service device is a projector.

[0016] In an embodiment, the authentication command includes a current inter-stamp generated in the control device, and the authentication execution module is further configured to perform, according to the current inter-frame stamp in the authentication command. Performing further authentication: if the central control service device can obtain its current time, compare the current time stamp in the authentication command with the current time of the central control service device, if the current time stamp exceeds If the preset length range is used, the authentication fails; if the central control service device cannot obtain its current time, the current time stamp in the authentication command is compared with the last authentication time stamp, if the two are consistent , the authentication failed.

[0017] An authentication method is applied to a control device, and the control device is in communication with the central control service device, and the method includes:

[0018] establishing a network connection with the central control service device;

[0019] generating a first key according to a current inter-turn stamp and a control password corresponding to the central control service device, and sending An authentication command including the first key to the central control service device;

[0020] receiving an authentication result from the central control service device, if the first key is consistent with the second key generated by the central control service device, the authentication result is successful; If the key is inconsistent with the second key generated by the central control service device, the authentication result is that the authentication fails.

[0021] In an embodiment, the current inter-time stamp is generated by the control device or received from the central control service device.

[0022] An authentication method, comprising:

[0023] establishing a network connection between the central control service device and the control device;

[0024] The control device generates a first key by using an encryption algorithm according to the current inter-frame stamp and a control password corresponding to the central control service device, and sends the first key to the central control service device;

[0025] the control device receives the first key, and generates a second key according to an encryption algorithm stored in the central control service device according to the current inter-point stamp and the control password stored in the central control service device, and receives the second key, and receives the second key. The first key is compared with the generated second key to determine whether the authentication is successful.

In an embodiment, the current inter-turn stamp is generated by a control device or generated by a central control service device.

[0027] In an embodiment, if the current inter-turn stamp is generated in the control device, the method further includes

[0028] the central control service device compares the current time stamp from the control device with the current time of the central control service device, and if the current time stamp exceeds a preset range, the authentication is performed. failure.

[0029] A control device, the control device includes a second authentication unit and a second network module, wherein the second authentication unit includes a second sending module and a key generating module, where the key generating module is used Generating a first key according to the current interstitial stamp and the control password, and then generating an authentication command according to the first key, where the second sending module is configured to send an authentication command to the central control service device, where the authentication The weight command includes the first key, and the current time stamp is generated by the control device or received from the central control service device. Advantageous effects of the invention

Beneficial effect

[0030] Compared with the prior art, the authentication method and the central control service device, the key is generated based on the current interleaving stamp and the control password, and has higher security.

Brief description of the drawing DRAWINGS

1 is a block diagram showing a network connection authentication system according to an embodiment of the present invention -

2 is a schematic block diagram of a first authentication unit according to an embodiment of the present invention.

3 is a block diagram of a second authentication unit according to an embodiment of the present invention.

4 is a flowchart of a network connection authentication method according to a first embodiment of the present invention.

5 is a flowchart of a network connection authentication method according to a second embodiment of the present invention.

[0036]

[0037] Main component symbol description

[0038] Central Control Service Equipment 1

[0039] The first processor 10

[0040] The first memory 12

[0041] First authentication unit 13

[0042] The first receiving module 130

[0043] The first sending module 132

[0044] Authentication Execution Module 134

[0045] First network module 14

Control device 2

[0047] Second processor 20

[0048] Second memory 22

[0049] Second authentication unit 23

[0050] The second receiving module 230

[0051] Second sending module 232

Key Generation Module 234

[0053] Second network module 24

The present invention will be further described in conjunction with the above drawings in the following detailed description.

Embodiments of the invention

[0055] The technical solution in the embodiment of the present invention will be clearly described below with reference to the accompanying drawings in the embodiments of the present invention. Throughout the description, it is apparent that the described embodiments are only a part of the embodiments of the invention, and not all of the embodiments. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present invention without departing from the inventive scope are the scope of the present invention.

[0056] It should be noted that when a component is referred to as being "fixed" to another component, it can be directly on the other component or the component can be in the middle. When a component is considered to be "connected" to another component, it can be directly connected to another component or possibly a central component. When a component is considered to be "set to" another component, it can be placed directly on another component or possibly with a centered component. The terms "vertical", "horizontal", "left", "right" and the like are used herein for illustrative purposes only.

[0057] The system implementations described below are merely illustrative, and the division of the modules or circuits is only a logical functional division, and the actual implementation may have another division manner. In addition, it is obvious that the word "comprising" does not exclude other elements or steps, and the singular does not exclude the plural. The plurality of units or devices recited in the system claims can also be implemented by the same unit or device in software or hardware. The first, second, etc. words are used to denote names and do not represent any particular order.

[0058] All technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art. The terminology used in the description of the present invention is for the purpose of describing particular embodiments and is not intended to limit the invention. The term "and/or" as used herein includes any and all combinations of one or more of the associated listed items.

Please refer to FIG. 1. FIG. 1 is a block diagram showing the structure of a network connection authentication system according to the present invention. The network connection authentication system 1000 comprises at least one central control service device 1 and at least one control device 2.

[0060] The central control service device 1 according to the embodiment of the present invention may be any electronic device having a network connection capability, such as a projector, a printer, a home appliance, and the like.

[0061] The control device 2 according to the embodiment of the present invention may be any electronic device having data processing capability and network connection capability, such as a computer, a mobile phone, a tablet, and a personal digital assistant (Personal Digital).

Assistant, PDA), etc. A central control service device 1 can be controlled by one or more control devices 2 to perform specific tasks under the control of one or more control devices 2; one control device 2 can also control one or more central control service devices 1 The predetermined operation is performed by controlling the one or more central control service devices 1. In an example of the present invention, the central control service device 1 is a projector, and the user can use a computer, The control device 2 of the mobile phone, tablet, etc. issues a control command to control the operation of the projector, thereby implementing remote control or replacing the remote controller for operation.

[0063] The central control service device 1 includes a first processor 10, a first memory 12, a first authentication unit 13, and a first network module 14.

[0064] The first memory 12 can be used to store computer programs and/or modules, by the first processor 10 running or executing computer programs and/or modules stored in the first memory 12, and invoking storage The data in the first memory 12 implements various functions of the central control service device 1 (e.g., projection of a projector). The first memory 12 may mainly include a storage program area and a storage data area, wherein the storage program area may store an operating system, an application required for at least one function (such as a projection function of the projector, a printing function of the printer, etc.) The storage data area can store data (such as projection data, print data, etc.) created according to the use of the central control service device 1. In addition, the first memory 12 may include a high-speed random access memory, and may also include a non-volatile memory such as a hard disk, a memory, a plug-in hard disk, a smart memory card (SMC), and a secure digital (Secure Digital, SD) card, flash card, at least one disk storage device, flash device, or other volatile solid-state storage device.

[0065] The first processor 10 may be a central processing unit (CPU), or may be another general-purpose processor, a digital signal processor (DSP), or an application specific integrated circuit (Application Specific Integrated). Circuit, ASIC), ready-to-use programmable gate array

(Field-Programmable Gate Array, FPGA) or other programmable logic device, discrete gate or transistor logic device, discrete hardware components, etc. The general purpose processor may be a microprocessor or the processor may be any conventional processor or the like. The first processor 10 is a control center of the central control service device 1, and is connected to the whole by using various interfaces and lines. Control various parts of the service device 1.

[0066] The central control service device 1 further includes a first authentication unit 13 and at least one first network module 14.

[0067] The first authentication unit 13 is configured to communicate with the control device 2 through the first network module 14 to connect a network connection between the central control service device 1 and the control device 2 Perform authentication. In some embodiments, the first authentication unit 13 generates a current inter-stamp, and the control device 2 generates a first key according to the current inter-turn stamp, control password encryption, and according to the first key. Generating an authentication command, the first authentication unit 13 parses the first key according to an authentication command from the control device 2, and then according to the The current inter-post stamp and control password stored locally generate a second key, and the generated second key is compared with the received first key from the control device 2 to determine whether the authentication is successful. In some embodiments, the control device 2 generates a current inter-time stamp, then generates a first key according to the current inter-turn stamp, control password encryption, and generates an authentication command according to the first key. The first authentication unit 13 parses out the first key and the current inter-page stamp according to the first key generation authentication command from the control device 2, and then according to the current inter-time stamp and control The password generates a second key, and the generated second key is compared with the received first key from the control device 2 to determine whether the authentication is successful.

[0068] The first network module 14 may be a wired communication device or a wireless communication device. The wired communication device includes a communication port, such as a universal serial bus (USB), a controller area network (CAN), a serial and/or other standard network connection, and an integrated circuit (Inter- Integmted Circuit, I2C) Bus, etc. The wireless communication device can employ any type of wireless communication system, such as Bluetooth, infrared, Wireless Fidelity (WiFi), cellular technology, satellite, and broadcast. The cellular technology may include mobile communication technologies such as second generation (2G), third generation (3G), fourth generation (4G) or fifth generation (5G).

[0069] The control device 2 includes a second processor 20, a second memory 22, a second authentication unit 23, and a second network module 24.

[0070] The second memory 22 can be used to store computer programs and/or modules, and the second processor 20 can execute or execute computer programs and/or modules stored in the second memory 22, and call storage. The data in the second memory 22 implements various functions of the control device 2 (e.g., projection of a projector). The second memory 22 may mainly include a storage program area and a storage data area, wherein the storage program area may store an operating system, an application required for at least one function (such as a projection function of the projector, a printing function of the printer, etc.), and the like. The storage data area can store data (such as projection data, print data, etc.) created according to the use of the control device 2. In addition, the second memory 22 may include a high-speed random access memory, and may also include a non-volatile memory such as a hard disk, a memory, a plug-in hard disk, a smart memory card (SMC), and a secure digital (Secure Digital, SD) card, flash card, at least one disk storage device, flash device, or other volatile solid-state storage device.

[0071] The second processor 20 may be a central processing unit (CPU), and may also be Other general-purpose processors, Digital Signal Processors (DSPs), Application Specific Integrated Circuits (ASICs), off-the-shelf programmable gate arrays

(Field-Programmable Gate Array, FPGA) or other programmable logic device, discrete gate or transistor logic device, discrete hardware components, etc. The general purpose processor may be a microprocessor or the processor may be any conventional processor or the like. The second processor 20 is a control center of the control device 2, and connects the entire control device 2 by using various interfaces and lines. Various parts of it.

[0072] The control device 2 further includes a second authentication unit 23 and at least one second network module 24.

[0073] The second authentication unit 23 is configured to communicate with the first authentication unit 13 through the second network module 24 to generate a first key required for authentication. The second authentication unit 23 is configured to generate a first key according to the current inter-turn stamp and the control password. In some embodiments, the current interim stamp is generated by the second authentication unit 23. In other embodiments, the current inter-frame stamp is generated by the first authentication unit 13 and then transmitted to the second authentication unit 23 by the first network module 14.

[0074] The second network module 24 corresponds to the first network module 14, and is a network of the same type. In some embodiments, the central control service device 1 includes one or more first network modules 14, and the control device 2 includes one or more second network modules 24, at least one first network module 14 and One of the second network modules 24 of the control device 2 is of the same type.

[0075] It can be understood by those skilled in the art that the schematic diagram is only an example of the network connection authentication system 1000, the central control service device 1, and the control device 2, and does not constitute a network connection authentication system 1000, and a central control service. The definition of the device 1, the control device 2, may include more or less components than the illustration, or combine some components, or different components, for example, the central control service device 1 / control device 2 may also be according to actual needs Including input and output devices, display devices, etc. The input and output device can include any suitable input device including, but not limited to, a mouse, a keyboard, a touch screen, or a contactless input, such as gesture input, voice input, and the like. The display device may be a liquid crystal display (LCD), a Light Emitting Diode (LED) display, an Organic Light-Emitting Diode (OLED) or other suitable display. .

[0076] wherein the first authentication unit 13 and the second authentication unit 23 respectively comprise a computer program that can be divided into one or more modules, the computer program being storable in the first memory 12 and the second memory 22 are executable by the first processor 10 and the second processor 20. In some implementations In an example, the first authentication unit 13 and the second authentication unit 23 may also include a controller independent of the first processor 10 and the second processor 20, and the computer is executed by the controller. program.

Referring to FIG. 2, it is a schematic diagram of a module of a first authentication unit 13 according to an embodiment of the present invention. The first authentication unit 13 includes a first receiving module 130, a first sending module 132, and an authentication executing module 134. The first receiving module 130 is configured to receive an authentication command from the second authentication unit 23 by using the first network module 14, where the authentication command includes the first key. The authentication execution module 134 is configured to perform authentication according to the authentication command. The first sending module 132 is configured to send an authentication result to the second authentication unit 23.

[0078] In an embodiment, the authentication command received from the second authentication unit 23 further includes a current timestamp, and the authentication execution module 134 generates a second according to the current timestamp and the control password. The key is then compared with the first key in the authentication command. If they are consistent, the authentication succeeds. If they are inconsistent, the authentication fails. If the authentication fails, the authentication execution module 134 controls the first network module 14 to disconnect the network connection with the second network module 24. If the authentication is successful, the first receiving module 130 is allowed to receive a control command from the control device 2, and the control command can control the central control service device 1 to perform a predetermined operation.

[0079] In an embodiment, the authentication execution module 134 generates and saves the current inter-page stamp, and the current inter-page stamp may be saved in the first memory 12, or may be saved independently of the first In a memory of the memory 12 and connected to the first authentication unit 13. The first sending module 132 sends the generated current inter-symbol to the second authenticating unit 23, and the second authenticating unit 23 generates a first key according to the current inter-turn stamp and the control password, and sends the first key to the The first receiving module 130. The authentication execution module 134 generates a second key according to the saved current interstitial stamp and the control password, and then compares the generated second key with the first key in the authentication command, if If the agreement is successful, the authentication succeeds. If they are inconsistent, the authentication fails. If the authentication fails, the authentication execution module 134 controls the first network module 14 to disconnect the network connection with the second network module 24. If the authentication is successful, the first receiving module 130 is allowed to receive a control command from the control device 2, and the control command can control the central control service device 1 to perform a predetermined operation.

Please refer to FIG. 3, which is a block diagram of a second authentication unit 23 according to an embodiment of the present invention. The second authentication unit 23 includes a second receiving module 230, a second sending module 232, and a key generating module 234. Place The second receiving module 230 is configured to receive, by the second network module 24, the current inter-frame stamp from the first authentication unit 13. The key generation module 234 is configured to generate a first key according to the received current interleaving stamp and the control password, and then generate an authentication command according to the first key. The second sending module 232 is configured to send the authentication command to the first authentication unit 13, where the authentication command includes the first key.

[0081] In an embodiment, the current inter-key stamp is generated by the key generation module 234, and the key generation module 234 generates a first key according to the generated current inter-turn stamp and the control password, and then An authentication command is generated according to the first key. The second sending module 232 is configured to send the authentication command to the first authentication unit 13, and the authentication command includes the first key and the current inter-frame stamp.

In the above embodiment, the generation of the key is generated by using an encryption algorithm. For example, the encryption algorithm may be a standard message digest algorithm, fifth edition (Message Digest).

Algorithm, MD5), Cyclic Redundancy Check (CRC32), Secure Hash Algorithm (SHA), etc.

[0083] The second receiving module 230 is further configured to receive an authentication result from the first authentication unit 13, and if the authentication result is successful, the second sending module 232 is further configured to send a control command to The first authentication unit 13. The control command is generated by the second processor 20, and the second processor 20 can generate the control command based on an input instruction of a user.

4 is a flowchart of an authentication method according to a first embodiment of the present invention.

[0085] It should be noted that the network connection manner of the present invention may be a plurality of network types as described in the foregoing embodiments. For convenience of description, a network connection based on the TCP/IP protocol is taken as an example for description.

[0086] Step 401: The central control service device 1 sets an IP, a TCP/UDP port, and controls a password. The IP is the IP address of the central control service device 1. The control password is a control password of the central control service device 1, and each central control service device 1 has a control password, and only the control device 2 that knows the control password can control the central control service device 1. The set IP, TCP/UDP port, and the control password are stored in the memory of the central control service device.

[0087] Step 402: Start the TCP service, and listen to whether the port has received the information.

[0088] Step 420 and step 403, the control device 2 establishes a network connection with the central control service device 1. In an embodiment, the step of establishing a network connection is: the control device sends a TC P connection request to the central control service device 1, and the port of the central control service device 1 receives the connection request, and returns to agree to the connection. of Response information, after receiving the response information, the control device sends the connection response information to the central control service device 1 again, and the central control service device 1 establishes the control information after receiving the response information of the control device 2 Network connection of device 2.

[0089] Step 421: The control device 2 generates a first key and an authentication command. Specifically, the control device 2 first generates a current inter-frame stamp, and then generates the first key according to a preset encryption algorithm according to the current inter-frame stamp and the control password of the central control service device. The encryption algorithm includes, but is not limited to, standard md5, crc32, SHA, and the like. The authentication command is a data packet generated on the basis of the first key and the current interstitial stamp, and may be in the form of a general TCP packet.

[0090] Step 404: The central control service device 1 receives the authentication command and parses the authentication command to obtain the current inter-time stamp and the first key.

[0091] Step 405: The central control service device 1 generates the second key by using the same encryption algorithm as the control end by using the current inter-postmark obtained by the parsing and the control password stored in the memory.

[0092] Step 406: The central control service device 1 compares the first key obtained by the parsing with the generated second key, and compares whether the current inter-timestamp is updated, and returns an authentication result. The authentication result includes authentication success and authentication failure. If the current time stamp is separated from the current time of the central control service device 1 by more than a preset range (for example, 20 seconds, 30 seconds, 1 minute, 5 minutes, etc.), the authentication fails. If the current inter-page stamp is separated from the current time of the central control service device 1 by a predetermined range, and the first key obtained by the parsing is consistent with the generated second key, the authentication succeeds, otherwise, The power failed. In some embodiments, the central control service device 1 is unable to obtain its current time, and the central control service device 1 can acquire the previous time that the central control service device 1 is stored on the central control service device 1 with the control device. During the period of authentication, and then comparing the current time stamp with the last authentication, if the two match, the authentication fails. False authentication behavior can be further prevented by the network from stealing the current interleaving of the control device by comparing the current inter-frame stamp.

[0093] Step 422: The control device 2 receives the authentication result, and performs the next operation according to the authentication result. Specifically, if the authentication result is that the authentication is successful, the next operation may be to send a control command to control the central control service device to perform a predetermined operation. If the authentication result is an authentication failure, the next step may be to detect the reason for the authentication failure and re-initiate the authentication process.

[0094] Step 407: The central control service device 1 performs a corresponding operation according to the authentication result. Specifically, if the authentication fails, the TCP connection is closed. If the authentication is successful, continue to listen to the port to accept from the control device Prepare 2 control commands.

5 is a flowchart of an authentication method according to a second embodiment of the present invention.

[0096] It should be noted that the network connection manner of the present invention may be a plurality of network types as described in the foregoing embodiments. For convenience of description, a network connection based on the TCP/IP protocol is taken as an example for description.

[0097] Step 501: The central control service device 1 sets an IP, a TCP/UDP port, and controls a password. The IP is the IP address of the central control service device 1. The control password is a control password of the central control service device 1, and each central control service device 1 has a control password, and only the control device 2 that knows the control password can control the central control service device 1. The set IP, TCP/UDP port, and the control password are stored in the memory of the central control service device.

[0098] Step 502: Start the TCP service, and listen to whether the port has received the information.

[0099] Step 520 and step 503, the control device 2 establishes a network connection with the central control service device 1. In an embodiment, the step of establishing a network connection is: the control device sends a TC P connection request to the central control service device 1, and the port of the central control service device 1 receives the connection request, and returns to agree to the connection. The response information, the control device sends the response information of the connection to the central control service device 1 again after receiving the response information, and the central control service device 1 establishes and reports the response information of the control device 2 Control the network connection of device 2.

[0100] Step 504: The central control service device 1 generates a current timestamp, and saves the current timestamp in the memory of the central control service device 1 and sends it to the control device 2.

[0101] Step 521: The control device 2 generates a first key and an authentication command. Specifically, the control device 2 generates the first key based on a preset encryption algorithm according to the received current inter-frame stamp and the control password of the central control service device. The encryption algorithms include, but are not limited to, standard md5, _CrC 32, SHA, and the like. The authentication command is a data packet generated on the basis of the first key and the current interstitial stamp, and may be in the form of a general TCP data packet.

[0102] Step 505: The central control service device 1 receives the authentication command and parses the authentication command to obtain the first key.

[0103] Step 506: The central control service device 1 generates a second key by using the same encryption algorithm stored in the memory and the control password stored in the memory.

[0104] Step 507, the central control service device 1 compares the obtained first key with the generated second key, and returns Back to the authentication result. The authentication result includes authentication success and authentication failure. If the first key obtained by the analysis is consistent with the generated second key, the authentication succeeds, and if they are inconsistent, the authentication fails.

[0105] Step 522: The control device 2 receives the authentication result, and performs the next operation according to the authentication result. Specifically, if the authentication result is that the authentication is successful, the next operation may be to send a control command to control the central control service device to perform a predetermined operation. If the authentication result is an authentication failure, the next step may be to detect the reason for the authentication failure and re-initiate the authentication process.

[0106] Step 508: The central control service device 1 performs a corresponding operation according to the authentication result. Specifically, if the authentication fails, the TCP connection is closed. If the authentication is successful, the listening port continues to be received to receive control commands from the control device 2.

[0107] The module/unit integrated with the central control service device 1 and the control device 2 described in the above embodiments may be stored in a computer if it is implemented in the form of a software functional unit and sold or used as a separate product. Read in the storage medium. Based on such understanding, the present invention implements all or part of the process in the authentication method described in the foregoing embodiments, and may also be completed by a computer program to instruct related hardware, and the computer program may be stored in a computer readable storage. In the medium, the computer program, after being executed by the processor, implements the steps described in the above method embodiments. The computer program includes computer program code, and the computer program code may be in the form of a source code, an object code, an executable file, or some intermediate form. The computer readable medium may include: any entity or device capable of carrying the computer program code, a recording medium, a USB flash drive, a removable hard disk, a magnetic disk, an optical disk, a computer memory, a Read-Only Memory (ROM). Random access memory (RAM

, Random Access Memory), electrical carrier signals, telecommunications signals, and software distribution media. It should be noted that the content contained in the computer readable medium may be appropriately increased or decreased according to the requirements of legislation and patent practice in a jurisdiction, for example, in some jurisdictions, according to legislation and patent practice, computer readable media Does not include electrical carrier signals and telecommunication signals.

The above description is only the embodiment of the present invention, and is not intended to limit the scope of the invention, and the equivalent structure or equivalent process transformation using the specification and the drawings of the present invention may be directly or indirectly applied to other related technologies. The scope of the invention is included in the scope of patent protection of the present invention.

Claims

Claim

An authentication method is applied to a central control service device, wherein the central control service device is in communication with the control device, and the method includes:

Establishing a network connection with the control device;

Receiving an authentication command from the control device, the authentication command includes a first key; generating a second key according to the current interleaving stamp and the control password; and

If the first key in the authentication command is consistent with the generated second key, if the matching is successful, the authentication succeeds. If not, the authentication fails.

The method according to claim 1, wherein the first key and the second key are generated by using an encryption algorithm as follows: standard MD5, crc32, SHA.

The method according to claim 1, wherein before receiving the authentication command from the control device, the method further comprises: generating a current inter-stamp, and saving the current inter-stamp in the central control Serving the device, and transmitting the current inter-page stamp to the control device. The method according to claim 1, wherein the authentication command includes a current inter-stamp generated in the control device, and the method further includes: if the central control service device can obtain its current defect In the case of comparing the current time stamp in the authentication command with the current time of the central control service device, if the current time stamp exceeds the preset length range, the authentication fails; If the service device cannot obtain its current time, it compares the current time stamp in the authentication command with the time stamp of the last authentication. If the two are consistent, the authentication fails.

A central control service device, wherein the central control service device includes a first authentication unit and a first network module, wherein the first authentication unit includes a first receiving module, a first sending module, and an authentication An execution module, the first receiving module is configured to receive an authentication command from the control device by using the first network module, where the authentication command includes a first key, and the authentication execution module is configured to use the control password and the current And generating a second key, and performing authentication according to whether the first key and the second key are consistent, and the first sending module is configured to send an authentication result to the control device.

The central control service device according to claim 5, wherein the central control service device is a projector. The central control service device according to claim 5, wherein the authentication command includes a current inter-turn stamp generated in the control device, and the authentication execution module is further configured to use the authentication command according to the Further authentication in the current inter-page stamp: if the central control service device can obtain its current time, compare the current inter-time stamp in the authentication command with the current time of the central control service device, If the current time stamp exceeds the preset length range, the authentication fails; if the central control service device cannot obtain its current time, the current time stamp in the authentication command is compared with the time of the last authentication. Poke, if the two are the same, the authentication fails.

An authentication method is applied to a control device, where the control device is in communication with the central control service device, and the method includes:

Establishing a network connection with the central control service device;

Generating a first key according to a current inter-time stamp and a control password corresponding to the central control service device

And sending an authentication command including the first key to the central control service device; receiving an authentication result from the central control service device, if the first key and the central control service device generate a second If the key is consistent, the authentication result is successful. If the first key is inconsistent with the second key generated by the central control service device, the authentication result is authentication failure.

The method of claim 8, wherein the current inter-time stamp is generated by the control device or received from the central control service device.

A control device, wherein the control device includes a second authentication unit and a second network module, wherein the second authentication unit includes a second sending module and a key generating module, and the key generating module And the second sending module is configured to send an authentication command to the central control service device, where the first sending key is generated according to the current interstitial stamp and the control password, and the second sending module is configured to send an authentication command to the central control service device. The authentication command includes the first key, and the current inter-time stamp is generated by the control device or received from the central control service device.