WO2019166001A1 - Token generation and verification method and smart terminal - Google Patents

Abstract

Disclosed by the present application are a token generation and verification method and a smart terminal. The method comprises: a smart terminal generating a random number and a time stamp and encrypting a unique identifier using the random number and the time stamp as parameters; generating a dynamic token, and sending a static token, the random number, the time stamp, and the dynamic token to a server so that the server decrypts the static token and the dynamic token to verify the unique identifier.

Description

Token generation and verification method and intelligent terminal

This application claims priority to Chinese Patent Application No. 201810173001.4, entitled "Token Generation and Verification Method, Intelligent Terminal and Server", filed on March 1, 2018, the entire contents of which are hereby incorporated by reference. Combined in this application.

Technical field

The present application relates to the field of intelligent terminals, and in particular, to a token generation and verification method and an intelligent terminal.

Background technique

Tokens (Access Tokens) is a concept for the security of smart terminals. When a user logs in, the system creates an access token containing the system ID returned by the login process and the security group assigned to the user and user by the local security policy. List of privileges. All processes running as this user have a copy of the token, and the system uses tokens to control which security objects the user can access and control the user's ability to perform related system operations.

The traditional token generation and verification method is only for static tokens, which is easy to bring great risks to users and increase the risk of account theft.

technical problem

The embodiment of the present application provides a token generation and verification method and an intelligent terminal, which can ensure that the tokens of each access to the server are different.

Technical solution

The embodiment of the present application provides a method for generating and verifying a token, which includes: the smart terminal generates a random number and a timestamp, encrypts the unique identifier by using a random number and a timestamp as parameters, generates a dynamic token, and sends the dynamic token to the server. Static tokens, random numbers, timestamps, and dynamic tokens to cause the server to decrypt static tokens and dynamic tokens to verify unique identifiers.

In the method of the embodiment of the present application, the encrypting the unique identifier by using the random number and the timestamp as parameters, including:

Performing a logical operation on at least one byte of the timestamp to obtain the same time factor as the number of timestamps;

Calculating, by using the random number as a parameter, a first encryption factor and a second encryption factor;

Forming an encryption key by using the time factor, the first partial byte of the timestamp, the first partial byte of the random number, and the first encryption factor as elements;

Forming a key vector by using the time factor, a second partial byte of the timestamp, a second partial byte of the random number, and the second encryption factor as elements;

The unique identifier is encrypted using the encryption key and the key vector to generate the dynamic token.

In the method of the embodiment of the present application, the logic operation is performed on at least one byte of the timestamp to obtain the same time factor as the timestamp digit, including:

When the timestamp has a plurality of bytes, logically operate one byte or more bytes in the timestamp to obtain the same time factor as the number of timestamps;

When the timestamp has a single byte, a logical operation is performed on a partial digit or all digits in a single byte of the timestamp to obtain the same time factor as the number of digits of the timestamp.

In the method of the embodiment of the present application, the calculating, by using the random number as a parameter, the first encryption factor and the second encryption factor, including:

Dividing the random number into a first part and a second part according to a number of bytes;

Performing a logical operation on the first part of the random number to obtain a keyword, and performing a logical operation on the second part of the random number to obtain a reference value;

Performing a conditional operation on the keyword and the reference value to obtain a first encryption factor and a second encryption factor.

In the method of the embodiment of the present application, the time factor, the first part of the timestamp, the first part of the random number, and the first encryption factor are used as elements to form an encryption. Key, including:

The time factor, the first partial byte of the timestamp, the first partial byte of the random number, and the first encryption factor are combined in a first predetermined order to form an encryption key; wherein the encryption key The number of bytes is the number of bytes of the time factor, the number of bytes of the first partial byte in the timestamp, the number of bytes of the first partial byte of the random number, and the word of the first encryption factor The sum of the number of sections.

In the method of the embodiment of the present application, the time factor, a second partial byte of the timestamp, a second partial byte of the random number, and the second encryption factor are elements. Form the key vector, including:

The time factor, the second partial byte of the timestamp, the second partial byte of the random number, and the second encryption factor are combined in a second predetermined order to form a key vector; wherein the secret The number of bytes of the key vector is the number of bytes of the time factor, the number of bytes of the second partial byte in the timestamp, the number of bytes of the second partial byte of the random number, and the second The sum of the number of bytes of the encryption factor.

In the method of the embodiment of the present application, the encrypting the unique identifier by using the encryption key and the key vector to generate the dynamic token includes:

Encrypting the unique identifier with the encryption key and the key vector to obtain an encrypted ciphertext;

Encoding the encrypted ciphertext to generate the dynamic token.

In the method of the embodiment of the present application, before the smart terminal generates the random number and the timestamp, the smart terminal includes:

Receiving a static token generated by the server to obtain the unique identifier.

The embodiment of the present application further provides a method for generating and verifying a token, which includes: receiving a static token, a random number, a timestamp, and a dynamic token sent by the smart terminal, where the dynamic token is a random number and a timestamp. The parameter is obtained by encrypting the unique identifier of the smart terminal, and decrypting the dynamic token and the static token to verify the unique identifier.

In the method of the embodiment of the present application, before receiving the static token, the random number, the timestamp, and the dynamic token sent by the smart terminal, the method includes:

The server generates a static token;

Sending the static token to the smart terminal for authorization.

In the method of the embodiment of the present application, the decrypting the dynamic token and the static token to verify the unique identifier includes:

Decrypting the dynamic token with the random number and the timestamp as parameters to obtain a first identifier after the dynamic token is successfully decrypted;

Decrypting the static token to obtain a second identifier after the static token is successfully decrypted;

Determining whether the first identifier and the second identifier are the same;

If the first identifier and the second identifier are the same, the unique identifier verification is successful; otherwise, the verification fails.

In the method of the embodiment of the present application, the dynamic token is decrypted by using the random number and the timestamp as parameters, so that after the dynamic token is successfully decrypted, the first identifier is obtained. ,include:

Generating a decryption key and a decryption key vector according to the random number and the timestamp;

Decoding the dynamic token with the decryption key and the decryption key vector using a decoding algorithm to obtain a decrypted ciphertext;

A decryption algorithm is used on the decrypted ciphertext to obtain a first identifier.

In the method of the embodiment of the present application, before the decrypting the dynamic token and the static token to verify the unique identifier, the method includes:

Determining, by the server, whether the timestamp is less than or equal to a timestamp previously sent by the smart terminal;

If the timestamp is less than or equal to the timestamp sent by the smart terminal, it is determined whether the random number is equal to the random number sent by the smart terminal before, if the random number is before the smart terminal If the random numbers sent at one time are not equal, the step of decrypting the dynamic token and the static token to verify the unique identifier is continued.

The embodiment of the present application further provides an intelligent terminal, including: a communication circuit and a processor connected to each other, a communication circuit, configured to acquire a static token and a unique identifier, and the processor obtains a static token and a unique identifier through the communication circuit. And perform the following steps:

The intelligent terminal generates a random number and a time stamp;

Encrypting the unique identifier by using the random number and the timestamp as parameters to generate a dynamic token, where the unique identifier is generated by a server to identify an intelligent terminal that interacts with the server;

Sending a static token, the random number, the timestamp, and the dynamic token to the server to cause the server to decrypt the static token and the dynamic token to verify the unique identifier .

In the smart terminal according to the embodiment of the present application, the processor performs the step of encrypting the unique identifier by using the random number and the timestamp as parameters, including:

Performing a logical operation on at least one byte of the timestamp to obtain the same time factor as the number of timestamps;

Calculating, by using the random number as a parameter, a first encryption factor and a second encryption factor;

Forming an encryption key by using the time factor, the first partial byte of the timestamp, the first partial byte of the random number, and the first encryption factor as elements;

Forming a key vector by using the time factor, a second partial byte of the timestamp, a second partial byte of the random number, and the second encryption factor as elements;

The unique identifier is encrypted using the encryption key and the key vector to generate the dynamic token.

In the intelligent terminal according to the embodiment of the present application, the processor performs the step of performing a logical operation on at least one byte of the timestamp to obtain a time factor identical to the timestamp digit, including :

When the timestamp has a plurality of bytes, logically operate one byte or more bytes in the timestamp to obtain the same time factor as the number of timestamps;

When the timestamp has a single byte, a logical operation is performed on a partial digit or all digits in a single byte of the timestamp to obtain the same time factor as the number of digits of the timestamp.

In the smart terminal according to the embodiment of the present application, the processor performs the step of calculating, by using the random number as a parameter, a first encryption factor and a second encryption factor, including:

Dividing the random number into a first part and a second part according to a number of bytes;

Performing a logical operation on the first part of the random number to obtain a keyword, and performing a logical operation on the second part of the random number to obtain a reference value;

Performing a conditional operation on the keyword and the reference value to obtain a first encryption factor and a second encryption factor.

In the intelligent terminal according to the embodiment of the present application, the processor executes:

The step of forming an encryption key by using the time factor, the first partial byte of the timestamp, the first partial byte of the random number, and the first encryption factor as elements, including:

The time factor, the first partial byte of the timestamp, the first partial byte of the random number, and the first encryption factor are combined in a first predetermined order to form an encryption key; wherein the encryption key The number of bytes is the number of bytes of the time factor, the number of bytes of the first partial byte in the timestamp, the number of bytes of the first partial byte of the random number, and the word of the first encryption factor The sum of the number of sections;

And the step of forming a key vector by using the time factor, the second partial byte of the timestamp, the second partial byte of the random number, and the second encryption factor as elements, including:

The time factor, the second partial byte of the timestamp, the second partial byte of the random number, and the second encryption factor are combined in a second predetermined order to form a key vector; wherein the secret The number of bytes of the key vector is the number of bytes of the time factor, the number of bytes of the second partial byte in the timestamp, the number of bytes of the second partial byte of the random number, and the second The sum of the number of bytes of the encryption factor.

In the intelligent terminal according to the embodiment of the present application, the processor performs the step of encrypting the unique identifier by using the encryption key and the key vector to generate the dynamic token, including :

Encrypting the unique identifier with the encryption key and the key vector to obtain an encrypted ciphertext;

Encoding the encrypted ciphertext to generate the dynamic token.

In the smart terminal according to the embodiment of the present application, before the step of the processor executing the random number and the time stamp generated by the smart terminal, the method includes:

Receiving a static token generated by the server to obtain the unique identifier.

Beneficial effect

The embodiment of the present application provides a token generation and verification method and an intelligent terminal. The smart terminal generates a random number and a timestamp, encrypts the unique identifier by using a random number and a timestamp as parameters, and generates a dynamic token to the server. A static token, a random number, a timestamp, and a dynamic token are sent to cause the server to decrypt the static token and the dynamic token to verify the unique identifier. The random number is constantly changing, so the tokens are different for each access to the server. Even if the token is stolen, the token cannot be decrypted in a short time, thus improving the access security of the server.

DRAWINGS

1 is a schematic flowchart of a first embodiment of a method for generating and verifying a token according to the present application;

2 is an interaction diagram of a smart terminal and a server of the token generation and verification method of the present application;

3 is a schematic flowchart of a second embodiment of a method for generating and verifying a token according to the present application;

4 is a schematic flowchart of a third embodiment of a method for generating and verifying a token according to the present application;

5 is a schematic flowchart of a fourth embodiment of a method for generating and verifying a token according to the present application;

6 is a schematic flowchart of a server verifying a static token and a dynamic token according to a fourth embodiment of the token generation and verification method of the present application;

7 is a schematic flowchart of a fifth embodiment of a method for generating and verifying a token according to the present application;

8 is a schematic structural diagram of an embodiment of a smart terminal according to the present application;

FIG. 9 is a schematic structural diagram of an embodiment of a server according to the present application.

Embodiments of the invention

As shown in FIG. 1, the first embodiment of the token generation and verification method of the present application includes:

S2: The smart terminal generates a random number and a time stamp.

S3: The unique identifier is encrypted by using a random number and a timestamp as parameters to generate a dynamic token.

S4: Send a static token, a random number, a timestamp, and a dynamic token to the server to cause the server to decrypt the static token and the dynamic token to verify the unique identifier.

The unique identifier is generated by the server to identify the smart terminal that interacts with the server. The static token is a fixed combination of characters, the dynamic token is a random character combination, and the timestamp is able to represent a piece of data before a certain time. An existing, complete, verifiable sequence of characters used to uniquely identify a moment in time.

Referring to FIG. 2, the server generates a static token and sends a static token to the smart terminal for authorization. After receiving the static token sent by the server, the smart terminal acquires a unique identifier of the smart terminal generated by the server. The smart terminal generates a random number of preset digits. For example, the smart terminal generates an 8-byte random number, and obtains a corresponding timestamp, for example, a time at which the random number is generated, and the parameter is unique according to the obtained random number and timestamp. The identifier is encrypted using an encryption algorithm to generate a dynamic token. After the dynamic token is generated, the smart terminal sends the static token, the random number, the timestamp, and the dynamic token to the server, and the server decrypts the received static token and the dynamic token, and obtains the unique correspondence between the static token and the dynamic token. After the identifier, it is checked whether the static token and the unique identifier corresponding to the dynamic token are consistent. If the verification is successful, the smart terminal can access the server, otherwise the verification fails, and the smart terminal cannot access the server. The encryption algorithm may be symmetric encryption or asymmetric encryption, and may be selected according to actual requirements, and is not specifically limited herein.

Optionally, before step S2, the method includes:

S1: Receive a static token generated by the server to obtain a unique identifier.

After receiving the static token sent by the server, the intelligent terminal acquires a unique identifier sent together with the static token. In other embodiments, the smart terminal can also obtain a unique identifier by decrypting the static token sent by the server. The application generates a random number and a timestamp through the intelligent terminal, encrypts the unique identifier with the random number and the timestamp as parameters, generates a dynamic token, and sends a static token, a random number, a timestamp, and a dynamic token to the server, Causes the server to decrypt the static token and the dynamic token to verify the unique identifier. The random number is constantly changing, so the tokens are different for each access to the server. Even if the token is stolen, the token cannot be decrypted in a short time, thus improving the access security of the server.

As shown in FIG. 3, the second embodiment of the token generation and verification method of the present application is based on the first embodiment, and further defining step S3 includes:

S31: Perform logic operation on at least one byte in the timestamp to obtain the same time factor as the timestamp digit.

The number of bytes of the timestamp may be set by the system of the smart terminal, or may be set according to user requirements. When the timestamp has multiple bytes, one byte may be logically operated, or may be Performing logical operations on multiple bytes, the calculated number of bytes of the time factor is the same as the timestamp. When the timestamp has only one byte, some bits in the byte can be logically operated, or All bits are logically operated and the resulting time factor is the same as the number of bits in the timestamp.

Specifically, in an application example, the timestamp is set to 8 bytes, and the timestamp is divided into eight parts according to the number of bytes, that is, t1, t2, t3, t4, t5, t6, t7, and t8, wherein T1, t2, t3, t4, t5, t6, t7 and t8 each occupy one byte, logically operate on t1 and t2 to obtain the first part of the time factor, and perform logical operations on t3 and t4 to obtain the second part of the time factor. ..... logical operation of t8 and t1 to get the eighth part of the time factor, the eight parts of the time factor combine to form a complete time factor. The logical operation may be an AND operation, a non-operation, or other logic operation, which is not specifically limited herein.

S32: Calculate the first encryption factor and the second encryption factor by using a random number as a parameter.

The random number is divided into two parts according to the number of bytes, and the first part of the random number is logically operated to obtain a keyword, and the second part of the random number is logically operated to obtain a reference value, and the conditional operation is performed on the keyword and the reference value. The cryptographic factor, that is, the cryptographic factor is obtained by mathematically calculating the reference value according to the preset condition that the keyword satisfies. The first encryption factor is obtained by performing a mathematical operation on the first part of the random number, and the second encryption factor is obtained by performing a mathematical operation on the second part of the random number. The mathematical operation of the first part of the random number and the mathematical operation of the second part of the random number may be performed. The same, can also be different. Specifically, in an application example, the random number is 8 bytes and is divided into two parts of 4 bytes, the first part is a high random number part (high 4 bytes), and the second part is a low random number part. (lower 4 bytes), select the high random number part or select the low random number part, perform the exclusive OR operation on the selected random number part, take the remainder of the four to get the key, and perform the exclusive OR operation on the selected random number part first. After taking the remainder of ten to get the reference value. The encryption factor is a 2-byte number. The encryption factor is divided into four parts in hexadecimal. When the reference value is set to the first part of the encryption factor, when the keyword is equal to 3, the second part of the encryption factor is equal to the reference value. Add 1, the third part of the encryption factor is equal to the reference value plus 2, the fourth part of the encryption factor is equal to the reference value plus 3; when the keyword is equal to 2, the second part of the encryption factor is equal to the reference value plus 1, the encryption factor The third part is equal to the reference value plus 2, the fourth part of the encryption factor is equal to the reference value; when the key is equal to 1, the second part of the encryption factor is equal to the reference value plus 1, the third part of the encryption factor is equal to the reference value, encryption The fourth part of the factor is equal to the reference value plus one; when the key is equal to 0, the second part, the third part and the fourth part of the encryption factor are equal to the reference value; wherein, the reference value can also be set as the encryption factor In other parts, the four parts of the cryptographic factor can also be obtained by other mathematical operations (such as subtraction or multiplication) from the reference value and other numbers, and the number is not specifically limited.

Specifically, in an application example, when the keyword and the reference value are both equal to 0, the encryption factor is 4321 in hexadecimal; when the reference value is 0, and the keyword is 1, the encryption factor is hexadecimal. 0101; when the reference value is 3, the keyword is 3, the encryption factor is 3456 in hexadecimal; when the reference value is 3, the keyword is 0, the encryption factor is 3333 in hexadecimal, the reference value and the key Words can also be other values, which are not exemplified here.

In the above application example, the first encryption factor may be obtained by performing the above operation on the high random number portion, and the second encryption factor may be obtained by performing the above operation on the low random number portion. Of course, in other embodiments, other partial bytes of the random number may also be selected to perform the above operation to obtain an encryption factor.

S33: forming an encryption key by using a time factor, a first partial byte in the timestamp, a first partial byte in the random number, and a first encryption factor as elements.

The encryption key is composed of a time factor, a first partial byte in the time stamp, a first partial byte in the random number, and a first encryption factor. The number of bytes of the encryption key is the number of bytes of the time factor, and the first part of the time stamp. The number of bytes in the section, the sum of the number of bytes of the first partial byte and the number of bytes of the first encryption factor, the time factor, the first partial byte in the timestamp, the first partial byte in the random number, and the first The encryption factors may be combined to form an encryption key in a certain order, or may be arranged in combination to form an encryption key.

Specifically, in an application example, the encryption key is 16 bytes, the first part is a time factor, and the encryption key is 8 bytes, and the second part is the first part of the timestamp, which occupies the encryption key 2 The third part is the first part of the random number, which is 4 bytes of the encryption key, and the fourth part is the first encryption factor, which is 2 bytes of the encryption key.

S34: forming a key vector by using a time factor, a second partial byte in the time stamp, a second partial byte in the random number, and a second encryption factor as elements.

The key vector is composed of a time factor, a second partial byte in the time stamp, a second partial byte in the random number, and a second encryption factor. The number of bytes of the key vector is the number of bytes of the time factor, and the time stamp is the first. The number of bytes of the two-part byte, the sum of the number of bytes of the second partial byte and the number of bytes of the second encryption factor, the time factor, the second part of the timestamp, and the second of the random number The partial byte and the second encryption factor may be combined in a certain order to form a key vector, or may be arranged in combination to form a key vector.

Specifically, in an application example, the key vector is 16 bytes, the first part is a time factor, which occupies 8 bytes of the encryption key, and the second part is the second part of the timestamp, which occupies the encryption key. 2 bytes, the third part is the second part of the random number, accounting for 4 bytes of the encryption key, and the fourth part is the second encryption factor, which is 2 bytes of the encryption key.

Wherein, in the encryption key and the key vector, the positions of the time factor, the time stamp, the random number and the encryption factor may correspond one-to-one.

S35: Encrypt the unique identifier by using an encryption key and a key vector to generate a dynamic token.

The unique identifier is encrypted by an encryption algorithm by using an encryption key and a key vector to generate a dynamic token, wherein the encryption key and the key vector may be 16 bytes or other bytes, and the encryption algorithm The dynamic encryption token is obtained by first encrypting the encryption key and the key vector using an advanced encryption algorithm, and then encoding it using an encoding algorithm.

As shown in FIG. 4, the third embodiment of the token generation and verification method of the present application is based on the second embodiment, and further defining step S35 includes:

S351: encrypt the unique identifier by using an encryption key and a key vector to obtain an encrypted ciphertext.

The smart terminal encrypts the unique identifier by using the encryption key and the key vector to generate the encrypted ciphertext. The encryption algorithm may be an AES advanced encryption algorithm, such as AES 128, or other algorithms, which are not specifically limited herein.

S352: Encode the encrypted ciphertext to generate a dynamic token.

After obtaining the encrypted ciphertext, the intelligent terminal encodes the encrypted ciphertext using an encoding algorithm to generate a dynamic token, wherein the encoding algorithm may be a 64-bit encoding algorithm, such as Base64, or an encoding algorithm of other digits. No specific restrictions are made.

As shown in FIG. 5, the fourth embodiment of the token generation and verification method of the present application includes:

S7: Receive a static token, a random number, a timestamp, and a dynamic token sent by the smart terminal, where the dynamic token is obtained by encrypting the unique identifier of the smart terminal by using a random number and a timestamp as parameters.

S8: Decrypt the dynamic token and the static token to verify the unique identifier.

Referring to FIG. 2 and FIG. 6, in an application example, the server can be a static token and send a static token to the smart terminal for authorization. After the smart terminal generates the dynamic token, the smart terminal will authorize the static token. Random numbers, timestamps, and dynamic tokens are sent to the server. The server decrypts the dynamic token and the static token by using a random number and a timestamp, and respectively obtains two corresponding identifiers. If the two identifiers are consistent, the verification succeeds, otherwise the verification fails.

The decryption algorithm may be an AES advanced decryption algorithm or other algorithms, which is not specifically limited herein. The decryption algorithm corresponds to an encryption algorithm used by the intelligent terminal.

Optionally, before step S6, the method includes:

S5: The server generates a static token.

S6: Send a static token to the smart terminal for authorization.

Intelligent terminals and servers need to authorize smart terminals in a synchronous manner. The smart terminal uses a list of user characteristics to log in to the computer as a password. Only smart terminals and servers know the meaning of these features. Because the two are synchronized, the smart terminal presents the exact token to the server.

Synchronous smart terminals use timestamps and authorization synchronization as a core part of the authorization process. If the synchronization is time based, the smart terminal and server keep their timestamps the same. The token is generated using the timestamp and random number of the smart terminal, the token and the unique identifier are entered into the smart terminal, and then the smart terminal transmits them to the server to run the authorization service. The authorization service decrypts the token and compares it to the expected token. If the two match, the user's authorization operation is completed, allowing the smart terminal and resources to be used.

Based on timestamp-based synchronization, the intelligent terminal and server share the same key and key vector for encryption and decryption.

Optionally, before step S8, the method includes:

S801: The server determines whether the timestamp is less than or equal to a timestamp sent by the smart terminal.

S802: If the timestamp is less than or equal to the timestamp sent by the smart terminal, it is determined whether the random number is equal to the random number sent by the smart terminal before, and if the random number is not equal to the random number sent by the smart terminal, the continuation is continued. Perform the steps of decrypting the dynamic token and the static token to verify the unique identifier.

Before the server decrypts the dynamic token and the static token, the server determines whether the timestamp sent by the current time is less than or equal to the timestamp sent by the intelligent terminal. If the timestamp sent by the current time is smaller than the time sent by the smart terminal. If the time stamp is equal to the timestamp sent by the smart terminal, it is determined whether the random number is equal to the random number sent by the smart terminal the previous time. If the random number is equal to the random number sent by the intelligent terminal the previous time, the error is returned and the decryption is ended. If the random number is not equal to the random number sent by the smart terminal, the decryption algorithm is used to decrypt the dynamic token and the static token. To verify the unique identifier.

As shown in FIG. 7, the fifth embodiment of the token generation and verification method of the present application is based on the fourth embodiment, and further defining step S8 includes:

S81: Decrypt the dynamic token with the random number and the timestamp as parameters to obtain the first identifier after the dynamic token is successfully decrypted.

The server generates a decryption key and a decryption key vector according to the random number and the timestamp, decodes the dynamic token using the decoding algorithm with the decryption key and the decryption key vector, obtains the decrypted ciphertext, and uses the decryption algorithm for decrypting the ciphertext. Get the first identifier. If no decryption succeeds, an error is returned and the decryption is ended. The decryption process and the encryption process are corresponding processes. When the dynamic token is not encoded, the decoding process can also be omitted.

S82: Decrypt the static token to obtain a second identifier after the static token is successfully decrypted.

After the dynamic token decryption succeeds in obtaining the first identifier, the server decrypts the static token by using a decryption algorithm, and after the static token is successfully decrypted, the second identifier is obtained. If the static token is not successfully decrypted, an error is returned and the decryption is ended. The decryption algorithm of the static token may be the same as or different from the decryption algorithm of the dynamic token.

S83: Determine whether the first identifier and the second identifier are the same.

S84: If the first identifier and the second identifier are the same, the unique identifier is successfully verified; otherwise, the verification fails.

After both the dynamic token and the static token are successfully decrypted, the server determines whether the first identifier and the second identifier are the same. If the first identifier and the second identifier are not the same, the unique identifier verification fails, and the school ends. It is verified that if the first identifier and the second identifier are the same, the unique identifier is successfully verified.

As shown in FIG. 8, an embodiment of the smart terminal of the present application includes:

Interconnected communication circuit 10 and processor 20;

The communication circuit 10 is used to acquire a static token and a unique identifier.

The processor 20 is configured to acquire a static token and a unique identifier through the communication circuit 10 and execute an instruction to implement any one of the first to fourth embodiments of the token generation and verification method of the present application and any non-conflicting combination. The method provided.

Specifically, the processor 20 is configured to acquire a static token and a unique identifier through the communication circuit 10, and perform the following steps:

The intelligent terminal generates a random number and a time stamp;

Encrypting the unique identifier by using the random number and the timestamp as parameters to generate a dynamic token, where the unique identifier is generated by a server to identify an intelligent terminal that interacts with the server;

Sending a static token, the random number, the timestamp, and the dynamic token to the server to cause the server to decrypt the static token and the dynamic token to verify the unique identifier .

In some embodiments, the processor 20 performs the step of encrypting the unique identifier by using the random number and the timestamp as parameters, including:

Performing a logical operation on at least one byte of the timestamp to obtain the same time factor as the number of timestamps;

Calculating, by using the random number as a parameter, a first encryption factor and a second encryption factor;

Forming an encryption key by using the time factor, the first partial byte of the timestamp, the first partial byte of the random number, and the first encryption factor as elements;

Forming a key vector by using the time factor, a second partial byte of the timestamp, a second partial byte of the random number, and the second encryption factor as elements;

The unique identifier is encrypted using the encryption key and the key vector to generate the dynamic token.

In some embodiments, the processor 20 performs the step of performing a logical operation on at least one of the timestamps to obtain the same time factor as the number of timestamps, including:

When the timestamp has a plurality of bytes, logically operate one byte or more bytes in the timestamp to obtain the same time factor as the number of timestamps;

When the timestamp has a single byte, a logical operation is performed on a partial digit or all digits in a single byte of the timestamp to obtain the same time factor as the number of digits of the timestamp.

In some embodiments, the processor 20 performs the step of calculating the first encryption factor and the second encryption factor by using the random number as a parameter, including:

Dividing the random number into a first part and a second part according to a number of bytes;

Performing a logical operation on the first part of the random number to obtain a keyword, and performing a logical operation on the second part of the random number to obtain a reference value;

Performing a conditional operation on the keyword and the reference value to obtain a first encryption factor and a second encryption factor.

In some embodiments, the processor 20 executes:

The step of forming an encryption key by using the time factor, the first partial byte of the timestamp, the first partial byte of the random number, and the first encryption factor as elements, including:

The time factor, the first partial byte of the timestamp, the first partial byte of the random number, and the first encryption factor are combined in a first predetermined order to form an encryption key; wherein the encryption key The number of bytes is the number of bytes of the time factor, the number of bytes of the first partial byte in the timestamp, the number of bytes of the first partial byte of the random number, and the word of the first encryption factor The sum of the number of sections;

And the step of forming a key vector by using the time factor, the second partial byte of the timestamp, the second partial byte of the random number, and the second encryption factor as elements, including:

The time factor, the second partial byte of the timestamp, the second partial byte of the random number, and the second encryption factor are combined in a second predetermined order to form a key vector; wherein the secret The number of bytes of the key vector is the number of bytes of the time factor, the number of bytes of the second partial byte in the timestamp, the number of bytes of the second partial byte of the random number, and the second The sum of the number of bytes of the encryption factor.

In some embodiments, the processor 20 performs the step of encrypting the unique identifier with the encryption key and the key vector to generate the dynamic token, including:

Encrypting the unique identifier with the encryption key and the key vector to obtain an encrypted ciphertext;

Encoding the encrypted ciphertext to generate the dynamic token.

In some embodiments, before the step of the processor 20 to generate the random number and the timestamp, the processor 20 includes:

Receiving a static token generated by the server to obtain the unique identifier.

The processor 20 controls the operation of the smart terminal, and the processor 20 may also be referred to as a CPU (Central). Processing Unit, central processing unit). Processor 20 may be an integrated circuit chip with signal processing capabilities. Processor 20 can also be a general purpose processor, digital signal processor (DSP), application specific integrated circuit (ASIC), off-the-shelf programmable gate array (FPGA) or other programmable logic device, discrete gate or transistor logic device, discrete hardware component . The general purpose processor may be a microprocessor or the processor or any conventional processor or the like.

The intelligent terminal can further include a memory (not shown) for storing instructions and data necessary for the processor 20 to operate.

In other embodiments, the smart terminal can also set other components such as a display screen and a keyboard according to specific requirements, which are not specifically limited herein.

As shown in FIG. 9, an embodiment of the server of the present application includes:

Interconnected communication circuit 30 and processor 40; the communication circuit 30 is used to acquire static tokens, random numbers, timestamps, and dynamic tokens.

The processor 40 is configured to acquire a static token, a random number, a time stamp, and a dynamic token through the communication circuit 30 and execute an instruction to implement any one of the fifth to eighth embodiments of the token generation and verification method of the present application. The method provided by any combination of non-conflicting.

The processor 40 controls the operation of the server, and the processor 40 may also be referred to as a CPU (Central). Processing Unit, central processing unit). Processor 40 may be an integrated circuit chip with signal processing capabilities. The processor 40 can also be a general purpose processor, a digital signal processor (DSP), an application specific integrated circuit (ASIC), an off-the-shelf programmable gate array (FPGA) or other programmable logic device, discrete gate or transistor logic device, discrete hardware component. . The general purpose processor may be a microprocessor or the processor or any conventional processor or the like.

The server may further include a memory (not shown) for storing instructions and data necessary for the processor 40 to operate.

The server can be a private server or a cloud server.

The above description is only the embodiment of the present application, and thus does not limit the scope of the patent application, and the equivalent structure or equivalent process transformation of the specification and the drawings of the present application, or directly or indirectly applied to other related technologies. The fields are all included in the scope of patent protection of this application.

Claims (20)

1. A token generation and verification method, comprising:

   The intelligent terminal generates a random number and a time stamp;

   Encrypting the unique identifier by using the random number and the timestamp as parameters to generate a dynamic token;

   Sending a static token, the random number, the timestamp, and the dynamic token to a server to cause the server to decrypt the static token and the dynamic token to verify the unique identifier.
2. The method of claim 1, wherein the encrypting the unique identifier with the random number and the timestamp as parameters comprises:

   Performing a logical operation on at least one byte of the timestamp to obtain the same time factor as the number of timestamps;

   Calculating, by using the random number as a parameter, a first encryption factor and a second encryption factor;

   Forming an encryption key by using the time factor, the first partial byte of the timestamp, the first partial byte of the random number, and the first encryption factor as elements;

   Forming a key vector by using the time factor, a second partial byte of the timestamp, a second partial byte of the random number, and the second encryption factor as elements;

   The unique identifier is encrypted using the encryption key and the key vector to generate the dynamic token.
3. The method of claim 2, wherein the logical operation of at least one of the timestamps to obtain the same time factor as the number of timestamps comprises:

   When the timestamp has a plurality of bytes, logically operate one byte or more bytes in the timestamp to obtain the same time factor as the number of timestamps;

   When the timestamp has a single byte, a logical operation is performed on a partial digit or all digits in a single byte of the timestamp to obtain the same time factor as the number of digits of the timestamp.
4. The method according to claim 2, wherein the calculating the first encryption factor and the second encryption factor by using the random number as a parameter comprises:

   Dividing the random number into a first part and a second part according to a number of bytes;

   Performing a logical operation on the first part of the random number to obtain a keyword, and performing a logical operation on the second part of the random number to obtain a reference value;

   Performing a conditional operation on the keyword and the reference value to obtain a first encryption factor and a second encryption factor.
5. The method according to claim 2, wherein said encrypting is performed by said time factor, said first partial byte of said time stamp, said first partial byte of said random number and said first encryption factor being elements Key, including:

   The time factor, the first partial byte of the timestamp, the first partial byte of the random number, and the first encryption factor are combined in a first predetermined order to form an encryption key; wherein the encryption key The number of bytes is the number of bytes of the time factor, the number of bytes of the first partial byte in the timestamp, the number of bytes of the first partial byte of the random number, and the word of the first encryption factor The sum of the number of sections.
6. The method of claim 2, wherein said time factor, a second partial byte of said time stamp, a second partial byte of said random number, and said second encryption factor are elements. Form the key vector, including:

   The time factor, the second partial byte of the timestamp, the second partial byte of the random number, and the second encryption factor are combined in a second predetermined order to form a key vector; wherein the secret The number of bytes of the key vector is the number of bytes of the time factor, the number of bytes of the second partial byte in the timestamp, the number of bytes of the second partial byte of the random number, and the second The sum of the number of bytes of the encryption factor.
7. The method of claim 2, wherein the encrypting the unique identifier with the encryption key and the key vector to generate the dynamic token comprises:

   Encrypting the unique identifier with the encryption key and the key vector to obtain an encrypted ciphertext;

   Encoding the encrypted ciphertext to generate the dynamic token.
8. The method according to claim 1, wherein before the smart terminal generates the random number and the time stamp, the method comprises:

   Receiving a static token generated by the server to obtain the unique identifier.
9. A token generation and verification method, comprising:

   Receiving a static token, a random number, a timestamp, and a dynamic token sent by the smart terminal, where the dynamic token encrypts the unique identifier of the smart terminal by using the random number and the timestamp as parameters of;

   The dynamic token and the static token are decrypted to verify the unique identifier.
10. The method according to claim 9, wherein the receiving the static token, the random number, the timestamp and the dynamic token sent by the smart terminal comprises:

    The server generates a static token;

    Sending the static token to the smart terminal for authorization.
11. The method of claim 9 wherein said decrypting said dynamic token and said static token to verify said unique identifier comprises:

    Decrypting the dynamic token with the random number and the timestamp as parameters to obtain a first identifier after the dynamic token is successfully decrypted;

    Decrypting the static token to obtain a second identifier after the static token is successfully decrypted;

    Determining whether the first identifier and the second identifier are the same;

    If the first identifier and the second identifier are the same, the unique identifier verification is successful; otherwise, the verification fails.
12. The method of claim 11, wherein the decrypting the dynamic token with the random number and the timestamp as parameters to obtain a first identifier after the dynamic token is successfully decrypted ,include:

    Generating a decryption key and a decryption key vector according to the random number and the timestamp;

    Decoding the dynamic token with the decryption key and the decryption key vector using a decoding algorithm to obtain a decrypted ciphertext;

    A decryption algorithm is used on the decrypted ciphertext to obtain a first identifier.
13. The method of claim 10, wherein the decrypting the dynamic token and the static token to verify the unique identifier comprises:

    Determining, by the server, whether the timestamp is less than or equal to a timestamp previously sent by the smart terminal;

    If the timestamp is less than or equal to the timestamp sent by the smart terminal, it is determined whether the random number is equal to the random number sent by the smart terminal before, if the random number is before the smart terminal If the random numbers sent at one time are not equal, the step of decrypting the dynamic token and the static token to verify the unique identifier is continued.
14. An intelligent terminal comprising:

    Interconnected communication circuits and processors;

    The communication circuit is configured to acquire the static token and the unique identifier;

    The processor acquires the static token and the unique identifier through the communication circuit, and executes an instruction to implement the following steps:

    The intelligent terminal generates a random number and a time stamp;

    Encrypting the unique identifier by using the random number and the timestamp as parameters to generate a dynamic token, where the unique identifier is generated by a server to identify an intelligent terminal that interacts with the server;

    Sending a static token, the random number, the timestamp, and the dynamic token to the server to cause the server to decrypt the static token and the dynamic token to verify the unique identifier .
15. The intelligent terminal according to claim 14, wherein the processor performs the step of encrypting the unique identifier by using the random number and the timestamp as parameters, comprising:

    Performing a logical operation on at least one byte of the timestamp to obtain the same time factor as the number of timestamps;

    Calculating, by using the random number as a parameter, a first encryption factor and a second encryption factor;

    Forming an encryption key by using the time factor, the first partial byte of the timestamp, the first partial byte of the random number, and the first encryption factor as elements;

    Forming a key vector by using the time factor, a second partial byte of the timestamp, a second partial byte of the random number, and the second encryption factor as elements;

    The unique identifier is encrypted using the encryption key and the key vector to generate the dynamic token.
16. The intelligent terminal according to claim 15, wherein said processor performs said step of performing logical operations on at least one of said time stamps to obtain a time factor identical to said time stamp bits, including :

    When the timestamp has a plurality of bytes, logically operate one byte or more bytes in the timestamp to obtain the same time factor as the number of timestamps;

    When the timestamp has a single byte, a logical operation is performed on a partial digit or all digits in a single byte of the timestamp to obtain the same time factor as the number of digits of the timestamp.
17. The intelligent terminal according to claim 15, wherein the processor performs the step of calculating the first encryption factor and the second encryption factor by using the random number as a parameter, comprising:

    Dividing the random number into a first part and a second part according to a number of bytes;

    Performing a logical operation on the first part of the random number to obtain a keyword, and performing a logical operation on the second part of the random number to obtain a reference value;

    Performing a conditional operation on the keyword and the reference value to obtain a first encryption factor and a second encryption factor.
18. The intelligent terminal of claim 15, wherein the processor executes:

    The step of forming an encryption key by using the time factor, the first partial byte of the timestamp, the first partial byte of the random number, and the first encryption factor as elements, including:

    The time factor, the first partial byte of the timestamp, the first partial byte of the random number, and the first encryption factor are combined in a first predetermined order to form an encryption key; wherein the encryption key The number of bytes is the number of bytes of the time factor, the number of bytes of the first partial byte in the timestamp, the number of bytes of the first partial byte of the random number, and the word of the first encryption factor The sum of the number of sections;

    And the step of forming a key vector by using the time factor, the second partial byte of the timestamp, the second partial byte of the random number, and the second encryption factor as elements, including:

    The time factor, the second partial byte of the timestamp, the second partial byte of the random number, and the second encryption factor are combined in a second predetermined order to form a key vector; wherein the secret The number of bytes of the key vector is the number of bytes of the time factor, the number of bytes of the second partial byte in the timestamp, the number of bytes of the second partial byte of the random number, and the second The sum of the number of bytes of the encryption factor.
19. The intelligent terminal of claim 15, wherein the processor performs the step of encrypting the unique identifier with the encryption key and the key vector to generate the dynamic token, including :

    Encrypting the unique identifier with the encryption key and the key vector to obtain an encrypted ciphertext;

    Encoding the encrypted ciphertext to generate the dynamic token.
20. The intelligent terminal according to claim 14, wherein the processor before the step of generating the random number and the time stamp by the smart terminal comprises:

    Receiving a static token generated by the server to obtain the unique identifier.