CN105451038A - Code generation method, code authentication method, related device and system - Google Patents

Abstract

The invention discloses a password generation and authentication method, a related device and a system. The method obtains the identification code of the set-top box and the current time of the server through the server, and presets the set-top box through the server according to the identification code and the current time of the server. The algorithm generates a super password, and sends the super password to the set-top box; the set-top box receives the super password sent by the server, obtains the decryption information, and judges whether the super password matches the decrypted information, and if so, unlocks the Set-top box, because the identification code of the set-top box is unique and the current time of the server is constantly changing, the super password generated by the preset algorithm is unique and dynamically changed, so as to provide the set-top box with a unique and dynamically changing super password to prevent others from using fixed Change the super password to unlock the set-top box.

Description

A password generation, authentication method, related device and system

technical field

The present invention relates to the field of terminals, in particular to a password generation and authentication method, a related device and a system.

Background technique

At present, many smart terminals, such as mobile phones, computers, set-top boxes, etc., have more and more application functions, and the smart terminals carry more and more personal information of users. In order to protect personal privacy, users usually set the power-on password of the terminal or Encryption of an application, for example: users usually set a password for the set-top box, or set a password for the on-demand function of the set-top box, read personal information, etc., but once the user forgets the password, the set-top box cannot be turned on or read personal information No, in the prior art, a fixed and effective super password is usually used to unlock the set-top box. However, this super password is usually applicable to all set-top boxes of the same model, and the super password is valid for a long time, so it is easy to leak to others and be used by others. Cracked, not safe.

Contents of the invention

The technical problem to be solved by the embodiments of the present invention is to provide a password generation and authentication method, related device and system, which can provide a unique and dynamically changing super password to the set-top box, and prevent others from using the fixed super password to unlock the set-top box.

The present invention provides a password generation method applied to a server, including:

Obtain the identification code of the set-top box and the current time of the server;

Generate a super password through a server preset algorithm according to the identification code and the current time of the server;

The super password is sent to the set-top box, and the super password is used to unlock the set-top box when the set-top box is locked.

Optionally, before sending the super password to the set-top box, the method further includes: the server generates a time authority according to a time step of the current time change of the server; or the server generates a time authority according to a preset The time threshold generates a time authority; the time authority is used to limit the effective use time of the super password;

While sending the super password to the set-top box, the method further includes: sending the time authority to the set-top box.

Optionally, the server is an operator server or a third-party server, wherein the method further includes: recording a log of the set-top box;

When the method is applied to the third-party server, the method further includes: sending the log of the set-top box to the operator server.

The present invention also provides a password generating device applied to a server, including:

The first obtaining unit is used to obtain the identification code of the set-top box and the current time of the server;

A generating unit, configured to generate a super password through a server preset algorithm according to the identification code and the current time of the server;

A sending unit, configured to send the super password to the set-top box, and the super password is used to unlock the set-top box when the set-top box is locked.

Optionally, the generating unit is further configured to generate a time permission according to the time step of the current time change of the server; or generate a time permission according to a preset time threshold; the time permission is used to limit the effective use of the super password time;

The sending unit is further configured to send the time permission to the set-top box.

Optionally, the server is an operator server or a third-party server, wherein,

When the device is applied to the operator server, the device further includes: a storage unit configured to record a log of the set-top box;

When the device is applied to the third-party server, the sending unit is further configured to send the log of the set-top box to the operator server.

The present invention also provides a password authentication method applied to a set-top box, comprising:

Receiving the super password sent by the server, the super password is generated by the server through a server preset algorithm according to the identification code of the set-top box and the current time of the server;

Obtain decrypted information;

Judging whether the super password matches the decrypted information, if yes, unlocking the set-top box.

Optionally, after the set-top box is unlocked, the method further includes: resetting the unlock password of the set-top box, and the unlock password is used when the decryption information input by the user acquired by the set-top box is consistent with the unlock password to unlock the set-top box.

Optionally, before or after receiving the super password sent by the server, the method further includes: receiving the time permission sent by the front end, the time permission is used to limit the effective use time of the super password;

While acquiring the decryption information, the method also includes: acquiring the current time of the set-top box;

Before the judging whether the super password matches the decryption information, the method also includes:

Judging whether the current time of the set-top box is within the effective use time range allowed by the time authority, if so, performing the step of judging whether the super password matches the decryption information.

Optionally, the obtaining decryption information includes:

Obtain the decrypted information entered by the user.

Optionally, the obtaining decryption information includes:

Obtain the identification code of the set-top box and the current time of the set-top box;

According to the identification code and the current time of the set-top box, decryption information is generated through a terminal preset algorithm, and the set-top box preset algorithm is the same as the server preset algorithm.

The present invention also provides a password authentication device applied to a set-top box, comprising:

The receiving unit is used to receive the super password sent by the server, and the super password is generated by the server through a server preset algorithm according to the identification code of the set-top box and the current time of the server;

a second obtaining unit, configured to obtain decryption information;

A judging unit, configured to judge whether the super password matches the decrypted information, and if so, unlock the set-top box.

Optionally, the device further includes: a setting unit, configured to reset the unlock password of the set-top box, and the unlock password is used to unlock the set-top box when the decryption information input by the user acquired by the set-top box is consistent with the unlock password. set-top box.

Optionally, the receiving unit is also used to: receive the time permission sent by the front end, the time permission is used to limit the effective use time of the super password;

The second obtaining unit is also used to obtain the current time of the set-top box while obtaining the decrypted information;

The judging unit is also used to judge whether the current time of the set-top box is within the valid use time range allowed by the time authority before judging whether the super password matches the decrypted information, and if so, then Executing the step of judging whether the super password matches the decrypted information.

Optionally, the second obtaining unit is specifically configured to obtain decryption information input by the user.

Optionally, the second acquiring unit is specifically configured to:

Obtain the identification code of the set-top box and the current time of the set-top box;

According to the identification code and the current time of the set-top box, decryption information is generated through a terminal preset algorithm, and the set-top box preset algorithm is the same as the server preset algorithm.

The present invention also provides a password generation and authentication system, including a server and a set-top box, the server includes the above-mentioned password generation device; the set-top box includes the above-mentioned password authentication device.

In the above invention, the server obtains the identification code of the set-top box and the current time of the server, and according to the identification code and the current time of the server, generates a super password through the server preset algorithm, and sends the super password to the set-top box; the set-top box receives the super password sent by the server, Obtain the decrypted information, and judge whether the super password matches the decrypted information. If so, unlock the set-top box. Since the identification code of the set-top box is unique and the current time of the server is constantly changing, the super password generated by the preset algorithm is unique and dynamically changed. , thereby providing a unique and dynamically changing super password to the set-top box, preventing others from unlocking the set-top box with a fixed super password.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only These are some embodiments of the present invention. Those skilled in the art can also obtain other drawings based on these drawings without creative work.

Fig. 1 is a flow chart of an embodiment of a password generation method of the present invention;

Fig. 2 is a flowchart of an embodiment of a password authentication method of the present invention;

Fig. 3 is a flow chart of an embodiment of a password generation and authentication system of the present invention;

Fig. 4 is a flow chart of another embodiment of a password generation and authentication system of the present invention;

Fig. 5 is a schematic structural diagram of an embodiment of a password generating device of the present invention;

6 is a schematic structural diagram of an embodiment of a password authentication device according to the present invention;

Fig. 7 is a schematic structural diagram of a password generation and authentication system according to the present invention.

detailed description

The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some of the embodiments of the present invention, not all of them. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of the present invention.

It should be noted that the terms used in the embodiments of the present invention are only for the purpose of describing specific embodiments, and are not intended to limit the present invention. As used in the embodiments of the present invention and the appended claims, the singular forms "a", "said" and "the" are also intended to include the plural forms unless the context clearly indicates otherwise. It should also be understood that the term "and/or" as used herein refers to and includes any and all possible combinations of one or more of the associated listed items.

Please refer to FIG. 1 . FIG. 1 is a flowchart of an embodiment of a method for generating a password according to the present invention. A password generation method in this embodiment can be applied to a server, and the server can be an operator server or a third-party server. The password generation method includes:

Step S101: Obtain the identification code of the set-top box and the current time of the server.

Digital video conversion box (SetTopBox, STB), usually called a set-top box, is a device that connects a TV with an external signal source. It can convert compressed digital signals into TV content and display them on the TV. The external signal can come from Cable, satellite dishes, broadband internet, and terrestrial broadcasting. The set-top box can not only receive the image and sound content provided by analog TV, but also receive digital content including electronic program guide, Internet web pages, subtitles, etc., so that users can watch digital TV programs on existing TV sets, and through Network for interactive digital entertainment, education and commercialization activities. With the increase of value-added services inside the set-top box, users pay more and more attention to the information security and personal privacy of the set-top box. Therefore, generally, the user will set the power-on password of the set-top box or open the password for adding a certain value-added application.

When the user forgets the power-on password of the set-top box or the opening password of a certain value-added service, the set-top box or its application is locked and cannot be opened or used. At this time, the user can request the server to obtain the super password. The request method can be It is to make a phone call or send an email to the operator, or request a third party authorized by the operator to unlock the set-top box. After the operator or a third party checks the user information, the set-top box is unlocked.

Specifically, the operator or the third-party server obtains the set-top box identification code and the current time of the server. The set-top box identification code is used to identify the set-top box. The set-top box identification code may be the set-top box serial number (MCID).

It should be noted that the current time of the server obtained by the server can be obtained in specified units, such as hours. For example, if the current time of the server is 14:33:18 on August 13, 2015, the current time of the server obtained The hour can be obtained as 2015081314, or the day can be obtained as 20150813, where the time of the server is synchronized with the time of the set-top box.

Step S102: According to the identification code and the current time of the server, a super password is generated through the server preset algorithm.

Specifically, the combination of the set-top box's identification code and the server's current time can generate a character string through the server's preset algorithm, such as the MD5 encryption algorithm, and then query it through a dictionary, for example, using the character table of 8859-1 to convert the generated character string Obtain the super password, for example: the identification code of the set-top box is 123456789ABCDEF, and the obtained current time of the server is 10:23 on November 05, 2015, expressed as 201511051023. Then the combination of the STB identification code and the current server time is: 123456789ABCDEF201511051023, and the string generated by the MD5 encryption algorithm is: e93a81546c52f707ade5f45b924b5b83. You can only take the ASSIC code, that is, remove the characters after 0x7A, the characters before 0x30, and the characters between 0x3A and 0x40 including 0x3A and 0x40. For example, special characters are represented by empty characters, and e9 is the character after 0x7A. Go to e9, 3a is discarded, 81 is discarded after 0x7A, and so on, and finally 546c525b4b5b is obtained, and TlR[K[ is obtained by querying the 8859-1 character table. Assuming that only 8 characters are taken as the super password, if the query is obtained Characters are greater than 8 and then only get the first 8, if the characters obtained by query are less than 8, you can add character z afterwards, the super password of the above-mentioned example embodiment is: TlR[K[zz.

It should be noted that the combination of the identification code and the current time of the server can be a direct connection between the identification code and the current time of the server, or it can be connected through a certain symbol, such as "#", "&" or "-", etc. The encryption algorithm in the server preset algorithm described in the present invention can be a kind of in MD5, AES, 1DES, 3DES, CRPM and CSS etc., the present invention does not limit, and the dictionary used can be the character table of 8859-1, ASSIC , 8859 series, unicode, utf8, etc., there is no restriction if it is not invented, and the processing method of characters obtained through dictionary query, and the processing method of super passwords, etc., are not restricted if they are not invented.

Step S103: Send the super password to the set-top box.

Specifically, the server sends the super password to the set-top box through cable, broadband or network. This super password is used to unlock the set-top box when the set-top box is locked.

It should be noted that, optionally, before sending the super password to the set-top box, the server can generate the time authority according to the time step of the server's current time change, for example, if the server's current time is 14:33:18 on August 13, 2015 Seconds, and in step S101, the current time of the server obtained by the server can be obtained in hours as 2015081314, then the valid time permission is that the super password is valid before 15:00 on August 13, 2015; the time permission can also be generated according to the preset time threshold , For example, if the server's current time is 14:33:18 on August 13, 2015, and the preset time threshold is set to 3 hours, the super password will be valid before 17:33:18 on August 13, 2015. When the server sends the super password to the set-top box, it also sends the time permission to the set-top box, and the time permission is used to limit the effective time of the super password.

It should also be noted that the server in this embodiment can be an operator server or a third-party server. After the server sends the super password or time permission to the set-top box, the server records the log of the set-top box or accepts the set-top box. The log of the set-top box, which includes the sending record of the super password. When the server is applied to a third-party server, the third-party server also needs to send the log of the set-top box to the operator server.

In the above invention, the server obtains the identification code of the set-top box and the current time of the server, generates a super password through the server preset algorithm according to the identification code and the current time of the server, and sends the super password to the set-top box for unlocking the set-top box. The identification code is unique and the current time of the server is constantly changing, so the super password generated by the preset algorithm is unique and dynamically changed, so as to provide a unique and dynamically changing super password to the set-top box and prevent others from unlocking with a fixed super password set top box.

Please refer to FIG. 2 . FIG. 2 is a flow chart of an embodiment of a password authentication method in the present invention. A password authentication method in this embodiment can be applied to a set-top box, and the password authentication method includes:

Step S201: Receive the super password sent by the server.

Specifically, the set-top box receives the super password sent by the server through cable, broadband or network.

It should be noted that before or after the set-top box receives the super password sent by the server, the set-top box can also receive the time permission sent by the server, which is used to limit the effective time of the super password. Long generation, or the server can generate according to a preset time threshold.

Step S202: Obtain decryption information.

When the set-top box is in a locked state and cannot be unlocked, you can request a super password from the service provider or a third party, the set-top box can send an instruction to request the super password to the server, or the user can inform the operator or After the third party, the operator or the server of the third party generates the super password, it sends the super password to the set-top box, and the operator or the third party notifies the user of the super password by mail, phone or text message.

Specifically, the decryption information input by the user can be acquired on the set-top box locking interface; or the identification code of the set-top box and the current time of the set-top box can be obtained, and the decryption information can be generated through the preset algorithm of the set-top box according to the identification code and the current time of the set-top box, wherein the set-top box preset The algorithm is the same as the server preset algorithm.

Step S203: Determine whether the super password matches the decrypted information.

Specifically, compare the super password with the decrypted information, if they match, the super password matches the decrypted information, and the decrypted information is correct, then perform step S204, otherwise, the set-top box can remain locked, prompting the user to enter an incorrect password, or end the process, The present invention is not limited.

It should be noted that when the set-top box receives the time permission sent by the server, step S202 also includes: obtaining the current time of the set-top box while the set-top box obtains the decrypted information, and step S203 also includes: judging whether the current time of the set-top box is within the time permission allowed by the time permission Within the scope, specifically, by judging whether the current time of the set-top box is before the deadline allowed by the time authority, for example, when the current time of the set-top box is 15:22 on November 5, 2015, the deadline allowed by the time authority is 2015 At 18:00 on November 5th, the current time of the set-top box is within the range allowed by the time authority. Only when the super password matches the decrypted information and the current time of the set-top box is within the scope allowed by the time authority, the set-top box is unlocked; otherwise, the set-top box remains locked and prompts the user to enter an incorrect password.

Step S204: Unlock the set-top box.

Specifically, when the super password matches the decrypted information, the set-top box is unlocked; when step S203 includes judging whether the current time of the set-top box is within the scope allowed by the time authority, only when the super password matches the decrypted information and the current time of the set-top box is within The set-top box can only be unlocked within the scope allowed by the time authority.

Optionally, after the set-top box is unlocked, the unlock password can be reset. Specifically, after the unlocking is successful, a message box pops up, prompting the user to reset the unlocking password, and the set-top box receives the password information input by the user on the password reset interface, and sets it as the unlocking password, which is used to unlock the set-top box.

In the above invention, by receiving the super password sent by the server, the super password is generated by the server through the server preset algorithm according to the identification code of the set-top box and the current time of the server, and obtains the decrypted information, and then judges whether the super password matches the decrypted information. , the set-top box is unlocked. Since the identification code of the set-top box is unique and the current time of the server is constantly changing, the super password generated by the preset algorithm is unique and dynamically changed, so as to provide a unique and dynamically changing super password to the set-top box and prevent others from using the fixed The super password unlocks the set-top box.

Please refer to FIG. 3 . FIG. 3 is a flowchart of an embodiment of a password generation and authentication system according to the present invention. A password authentication method in this embodiment can be applied to a set-top box, and the password authentication method includes:

Step S301: Obtain the identification code of the set-top box and the current time of the server.

When the user forgets the power-on password of the set-top box or the opening password of a certain value-added service, the set-top box or its application is locked and cannot be opened or used. At this time, the user can request the server to obtain the super password. The request method can be It is to make a phone call or send an email to the operator, or request a third party authorized by the operator to unlock the set-top box. After the operator or a third party checks the user information, the set-top box is unlocked.

Specifically, the operator or the third-party server obtains the set-top box identification code and the current time of the server. The set-top box identification code is used to identify the set-top box. The set-top box identification code may be the set-top box serial number (MCID).

It should be noted that the current time of the server obtained by the server can be obtained in specified units, such as hours. For example, if the current time of the server is 14:33:18 on August 13, 2015, the current time of the server obtained The hour can be obtained as 2015081314, or the day can be obtained as 20150813, where the time of the server is synchronized with the time of the set-top box.

Step S302: According to the identification code and the current time of the server, a super password is generated through a server preset algorithm.

Specifically, the combination of the set-top box's identification code and the server's current time can generate a character string through the server's preset algorithm, such as the MD5 encryption algorithm, and then query it through a dictionary, for example, using the 8859-1 character table to convert the generated character string Obtain the super password, for example: the identification code of the set-top box is 123456789ABCDEF, and the obtained current time of the server is 10:23 on November 05, 2015, expressed as 201511051023. Then the combination of the STB identification code and the current server time is: 123456789ABCDEF201511051023, and the string generated by the MD5 encryption algorithm is: e93a81546c52f707ade5f45b924b5b83. You can only take the ASSIC code, that is, remove the characters after 0x7A, the characters before 0x30, and the characters between 0x3A and 0x40 including 0x3A and 0x40. For example, special characters are represented by empty characters, and e9 is the character after 0x7A. Go to e9, 3a is discarded, 81 is discarded after 0x7A, and so on, and finally 546c525b4b5b is obtained, and TlR[K[ is obtained by querying the 8859-1 character table. Assuming that only 8 characters are taken as the super password, if the query is obtained Characters are greater than 8 and then only get the first 8, if the characters obtained by query are less than 8, you can add character z afterwards, the super password of the above-mentioned example embodiment is: TlR[K[zz.

It should be noted that the combination of the identification code and the current time of the server can be a direct connection between the identification code and the current time of the server, or it can be connected through a certain symbol, such as "#", "&" or "-", etc. The encryption algorithm in the server preset algorithm described in the present invention can be a kind of in MD5, AES, 1DES, 3DES, CRPM and CSS etc., the present invention does not limit, and the dictionary used can be the character table of 8859-1, ASSIC , 8859 series, unicode, utf8, etc., there is no restriction if it is not invented, and the processing method of characters obtained through dictionary query, and the processing method of super passwords, etc., are not restricted if they are not invented.

Step S303: Send the super password to the STB.

Specifically, the server sends the super password to the set-top box through cable, broadband or network. This super password is used to unlock the set-top box when the set-top box is locked.

It should be noted that before sending the super password to the set-top box, the server can generate the time permission according to the time step of the server's current time change. For example, if the server's current time is 14:33:18 on August 13, 2015, and in In step S101, the current time of the server obtained by the server can be taken to an hour of 2015081314, and the valid time permission is that the super password is valid before 15:00 on August 13, 2015; the time permission can also be generated according to the preset time threshold, for example, if The current time of the server is 14:33:18 on August 13, 2015. If the preset time threshold is set to 3 hours, the super password will be valid before 17:33:18 on August 13, 2015. When the server sends the super password to the set-top box, it also sends the above-mentioned time authority to the set-top box.

Step S304: The set-top box receives the super password sent by the server.

Specifically, the set-top box receives the super password sent by the server through cable, broadband or network.

It should be noted that before or after the set-top box receives the super password sent by the server, the set-top box can also receive the time permission sent by the server, which is used to limit the effective time of the super password. Long generation, or the server can generate according to a preset time threshold.

Step S305: the STB obtains the decrypted information.

When the set-top box is in a locked state and cannot be unlocked, you can request a super password from the service provider or a third party, the set-top box can send an instruction to request the super password to the server, or the user can inform the operator or After the third party, the operator or the server of the third party generates the super password, it sends the super password to the set-top box, and the operator or the third party notifies the user of the super password by mail, phone or text message.

Specifically, the decryption information input by the user can be acquired on the set-top box locking interface; or the identification code of the set-top box and the current time of the set-top box can be obtained, and the decryption information can be generated through the preset algorithm of the set-top box according to the identification code and the current time of the set-top box, wherein the set-top box preset The algorithm is the same as the server preset algorithm.

Step S306: Determine whether the super password matches the decrypted information.

Specifically, the super password is compared with the decrypted information, if they match, the super password matches the decrypted information, the decrypted information is correct, and the set-top box is unlocked; otherwise, the set-top box remains locked and prompts the user to enter an incorrect password.

It should be noted that when the set-top box receives the time permission sent by the server, step S305 also includes: obtaining the current time of the set-top box while the set-top box obtains the decrypted information, and step S306 also includes: judging whether the current time of the set-top box is within the time permission allowed by the time permission Within the scope, specifically, the current time of the set-top box can be compared with the deadline allowed by the time authority to determine whether the current time of the set-top box is before the deadline allowed by the time authority, for example, when the current time of the set-top box is November 5, 2015 15:22, the deadline allowed by the time authority is 18:00 on November 5, 2015, then the current time of the set-top box is within the range allowed by the time authority. Only when the super password matches the decrypted information and the current time of the set-top box is within the scope allowed by the time authority, can the set-top box be unlocked; otherwise, the process ends, or the set-top box can remain locked and prompt the user to enter an incorrect password, which is not limited by the present invention.

Step S307: Unlock the set-top box.

Specifically, when the super password matches the decrypted information, the set-top box is unlocked; when step S203 includes judging whether the current time of the set-top box is within the scope allowed by the time authority, only when the super password matches the decrypted information and the current time of the set-top box is within The set-top box can only be unlocked within the scope allowed by the time authority.

Optionally, after the set-top box is unlocked, the unlock password can be reset. Specifically, after the unlocking is successful, a message box pops up, prompting the user to reset the unlocking password, and the set-top box receives the password information input by the user on the password reset interface, and sets it as the unlocking password, which is used to unlock the set-top box.

It should be noted that the server in this embodiment can be an operator server or a third-party server. After the server sends the super password or time permission to the set-top box, the server records the log of the set-top box, which includes The sending record of this super password. When the server is applied to a third-party server, the third-party server also needs to send the log of the set-top box to the operator server.

In the above invention, the identification code of the set-top box and the current time of the server are obtained through the server, and a super password is generated through the preset algorithm of the server according to the identification code and the current time of the server, and the super password is sent to the set-top box; the set-top box Receive the super password sent by the server, obtain the decrypted information, and judge whether the super password matches the decrypted information, and if so, unlock the set-top box. Since the identification code of the set-top box is unique and the current time of the server is constantly changing, it will The super password generated by the preset algorithm is unique and dynamically changing, so as to provide the set-top box with a unique and dynamically changing super password, and prevent others from unlocking the set-top box with a fixed super password.

Please refer to FIG. 4 . FIG. 4 is a flowchart of another embodiment of a password generation and authentication system according to the present invention. A password generation and authentication system in this embodiment can be applied to servers and set-top boxes, and the password generation and authentication system includes:

Step S401: Obtain the identification code of the STB and the current time of the server.

Specifically, the operator or the third-party server obtains the set-top box identification code and the current time of the server. The set-top box identification code is used to identify the set-top box. The set-top box identification code may be the set-top box serial number (MCID).

It should be noted that the current time of the server obtained by the server can be obtained in specified units, such as hours. For example, if the current time of the server is 14:33:18 on August 13, 2015, the current time of the server obtained The hour can be obtained as 2015081314, or the day can be obtained as 20150813, where the time of the server is synchronized with the time of the set-top box.

Step S402: According to the identification code and the current time of the server, a super password is generated through the server preset algorithm.

Specifically, the combination of the set-top box's identification code and the server's current time can generate a character string through the server's preset algorithm, such as the MD5 encryption algorithm, and then query it through a dictionary, for example, using the character table of 8859-1 to convert the generated character string Obtain the super password, for example: the identification code of the set-top box is 123456789ABCDEF, and the obtained current time of the server is 10:23 on November 05, 2015, expressed as 201511051023. Then the combination of the STB identification code and the current server time is: 123456789ABCDEF201511051023, and the string generated by the MD5 encryption algorithm is: e93a81546c52f707ade5f45b924b5b83. You can only take the ASSIC code, that is, remove the characters after 0x7A, the characters before 0x30, and the characters between 0x3A and 0x40 including 0x3A and 0x40. For example, special characters are represented by empty characters, and e9 is the character after 0x7A. Go to e9, 3a is discarded, 81 is discarded after 0x7A, and so on, and finally 546c525b4b5b is obtained, and TlR[K[ is obtained by querying the 8859-1 character table. Assuming that only 8 characters are taken as the super password, if the query is obtained Characters are greater than 8 and then only get the first 8, if the characters obtained by query are less than 8, you can add character z afterwards, the super password of the above-mentioned example embodiment is: TlR[K[zz.

It should be noted that the combination of the identification code and the current time of the server can be a direct connection between the identification code and the current time of the server, or it can be connected through a certain symbol, such as "#", "&" or "-", etc. The encryption algorithm in the server preset algorithm described in the present invention can be a kind of in MD5, AES, 1DES, 3DES, CRPM and CSS etc., the present invention does not limit, and the dictionary used can be the character table of 8859-1, ASSIC , 8859 series, unicode, utf8, etc., there is no restriction if it is not invented, and the processing method of characters obtained through dictionary query, and the processing method of super passwords, etc., are not restricted if they are not invented.

Step S403: Generate a time authority.

Specifically, the server can generate the time authority according to the time step of the server's current time change. For example, if the server's current time is 14:33:18 on August 13, 2015, and in step S101, the server's current time obtained by the server can be If the hour is 2015081314, the effective time permission is that the super password is valid before 15:00 on August 13, 2015; the time permission can also be generated according to the preset time threshold, for example, if the current server time is 14:00 on August 13, 2015 33 minutes and 18 seconds, if the preset time threshold is set to 3 hours, the super password will be valid before 17:33:18 on August 13, 2015. When the server sends the super password to the set-top box, it also sends the time permission to the set-top box, and the time permission is used to limit the effective time of the super password.

Step S404: Send the super password and time permission to the set-top box.

Specifically, the server sends the super password and the time authority to the set-top box through cable, broadband or network. This super password is used to unlock the set-top box when the set-top box is locked.

Step S405: Receive the super password and time authority sent by the server.

Specifically, the set-top box receives the super password and time authority sent by the server through cable, broadband or network.

Step S406: Obtain the decrypted information and the current time of the STB.

Specifically, the set-top box obtains the decryption information and the current time of the set-top box by obtaining the decryption information input by the user on the set-top box lock interface; or by obtaining the identification code of the set-top box and the current time of the set-top box, according to the identification code and the current time of the set-top box, through the set-top box preset The decryption information is generated by an algorithm, wherein the preset algorithm of the set-top box is the same as that of the server.

Step S407: Determine whether the super password matches the decrypted information.

Specifically, the super password is compared with the decrypted information, and if they are consistent, the super password matches the decrypted information, and the decrypted information is correct.

Step S408: Determine whether the current time of the set-top box is within the range allowed by the time authority.

Determine whether the current time of the set-top box is within the range allowed by the time authority. Specifically, you can compare the current time of the set-top box with the deadline allowed by the time authority to determine whether the current time of the set-top box is before the deadline allowed by the time authority. If yes , the current time of the set-top box is within the range allowed by the time permission.

It should be noted that step S407 and step S408 may be performed in any order, or may be performed simultaneously, which is not limited in the present invention.

Step S409: Unlock the set-top box.

Only when the super password matches the decrypted information and the current time of the set-top box is within the scope allowed by the time authority, the set-top box is unlocked; otherwise, the process ends, or the set-top box can remain locked and prompt the user for a wrong password, which is not limited by the present invention.

Step S410: reset the unlock password.

Specifically, after the set-top box is unlocked, the unlock password can be reset. Specifically, after the unlocking is successful, a message box pops up, prompting the user to reset the unlocking password, and the set-top box receives the password information input by the user on the password reset interface, and sets it as the unlocking password, which is used to unlock the set-top box.

Step S411: Send the STB log to the server.

Specifically, the set-top box will record the current operation of the set-top box at all times. When the set-top box is unlocked or the password is reset, it will feed back to the server whether the set-top box has been successfully unlocked, or send the log of the set-top box to the server, or send a message indicating that the password has been reset successfully to the set-top box. message to inform the server of the process or result of this operation.

Step S412: storing the set-top box log.

Specifically, the server can also record the operation log of the set-top box, and the server can also receive the log or message sent by the top box, and store the set-top box log.

It should be noted that the server in this embodiment can be an operator server or a third-party server. After the server sends the super password or time permission to the set-top box, the server records the log of the set-top box, which includes The sending record of this super password. When the server is applied to a third-party server, the third-party server also needs to send the log of the set-top box to the operator server.

In the above invention, the server obtains the identification code of the set-top box and the current time of the server, generates a super password through the server preset algorithm according to the identification code and the current time of the server, and sends the super password and time authority to the Set-top box; the set-top box receives the super password and time authority sent by the server, obtains the decrypted information and the current time of the set-top box, and judges whether the super password matches the decrypted information and whether the current time of the set-top box is within the scope allowed by the time authority, Only when the above judgments are "yes" can the set-top box be unlocked. Since the identification code of the set-top box is unique and the current time of the server is constantly changing, the super password generated by the preset algorithm is unique and dynamic. After adding the time permission, you can Provide a unique, dynamically changing and time-sensitive super password to the set-top box to prevent others from unlocking the set-top box with a fixed or expired super password.

Please refer to FIG. 5 . FIG. 5 is a schematic structural diagram of an embodiment of a password generating device according to the present invention. The password generating device 500 can be applied to a server, and the password generating device 500 includes:

The first obtaining unit 501 is configured to obtain the identification code of the set-top box and the current time of the server.

The generating unit 502 is configured to generate a super password through a server preset algorithm according to the identification code and the current time of the server.

The sending unit 503 is configured to send the super password to the set-top box, where the super password is used to unlock the set-top box when the set-top box is locked.

Optionally, the generating unit 502 is further configured to generate a time permission according to the time step of the current time change of the server; or generate a time permission according to a preset time threshold; the time permission is used to limit the validity of the super password Use time; the sending unit 503 is also configured to send the time permission to the set-top box.

Optionally, the server is an operator's server or a third-party server, wherein, when the password generating device 500 is applied to the operator's server, the password generating device 500 further includes: a storage unit 504 for recording the The log of the set-top box; when the password generating device is applied to the third-party server, the sending unit 503 is further configured to send the log of the set-top box to the operator server.

It should be noted that the functions of each functional module of the password generation device 500 in the embodiment of the present invention can be specifically realized according to the method in the above method embodiment, and the specific implementation process can refer to the relevant description of the above method embodiment, which will not be repeated here. repeat.

Please refer to FIG. 6 . FIG. 6 is a schematic structural diagram of an embodiment of a password authentication device according to the present invention. The password authentication device 600 can be applied to a set-top box, and the password authentication device 600 includes:

The receiving unit 601 is configured to receive the super password sent by the server, the super password is generated by the server through a server preset algorithm according to the identification code of the set-top box and the current time of the server.

The second obtaining unit 602 is configured to obtain decryption information.

A judging unit 603, configured to judge whether the super password matches the decrypted information, and if so, unlock the set-top box.

Optionally, the password authentication device 600 further includes: a setting unit 604, configured to reset the unlock password of the set-top box, and the unlock password is used when the decryption information input by the user obtained by the set-top box and the unlock password When consistent, unlock the set-top box.

Optionally, the receiving unit 601 is further configured to: receive the time permission sent by the front end, the time permission is used to limit the effective use time of the super password.

The second acquiring unit 602 is further configured to acquire the current time of the set-top box while acquiring the decryption information.

The judging unit 603 is further configured to, before judging whether the super password matches the decrypted information, judging whether the current time of the set-top box is within the effective use time allowed by the time authority, and if so, Then execute the step of judging whether the super password matches the decrypted information.

Optionally, the second obtaining unit 602 is specifically configured to obtain decryption information input by the user.

Optionally, the second acquiring unit 602 is specifically further configured to acquire the identification code of the set-top box and the current time of the set-top box; according to the identification code and the current time of the set-top box, generate decryption information through a terminal preset algorithm, and the set-top box The preset algorithm is the same as the server preset algorithm.

It should be noted that the functions of each functional module of the password authentication device 600 in the embodiment of the present invention can be specifically realized according to the method in the above-mentioned method embodiment, and the specific implementation process can refer to the relevant description of the above-mentioned method embodiment, and will not repeat.

Please refer to FIG. 7. FIG. 7 is a schematic structural diagram of a password generation and authentication system of the present invention. The password generation and authentication system includes a server 70 and a set-top box 71. The server 70 includes a password generation device 500 as shown in FIG. 5 ; The set-top box 71 includes the password authentication device 600 as shown in FIG. 6 .

The password generation device 500 is applied to the server 70, and is used to obtain the identification code of the set-top box 71 and the current time of the server 70; according to the identification code and the current time of the server 70, a super password is generated by the server 70 preset algorithm; A password is sent to the set-top box 71, and the super password is used to unlock the set-top box 71 when the set-top box 71 is locked.

The set-top box 71 includes a password authentication device 600, which is used to receive the super password sent by the server 70. The super password is generated by the server 70 according to the identification code of the set-top box 71 and the current time of the server 70 through the server 70 preset algorithm. ; Acquiring decryption information; and judging whether the super password matches the decryption information, and if so, unlocking the set-top box 71 .

Optionally, after the set-top box 71 is unlocked, the set-top box 71 is also used to reset the unlocking password of the set-top box 71, and the unlocking password is used when the decryption information input by the user obtained by the set-top box 71 and When the unlocking passwords are consistent, the set-top box 71 is unlocked.

Optionally, before the super password is sent to the set-top box 71, the server 70 is also used to generate a time permission according to the time step of the current time change of the server 70; or generate a time permission according to a preset time threshold. Time permission, sending the time permission to the set-top box 71, the time permission is used to limit the effective use time of the super password.

The set-top box 71 is also used to receive the time authority sent by the front end, and the time authority is used to limit the effective use time of the super password; obtain the current time of the set-top box 71 while the decryption information is obtained; Before whether the super password matches the decrypted information, judge whether the current time of the set-top box 71 is within the effective use time range allowed by the time authority, if so, perform the judgment of the super password and the decrypted information steps to match.

Optionally, the manner in which the set-top box 71 obtains the decryption information includes: obtaining the decryption information input by the user.

Optionally, the method for the set-top box 71 to obtain the decryption information also includes: obtaining the identification code of the set-top box 71 and the current time of the set-top box 71; according to the identification code and the current time of the set-top box 71, generating the decryption information through a terminal preset algorithm, The preset algorithm of the set-top box 71 is the same as the preset algorithm of the server 70 .

Optionally, the server 70 is an operator server or a third-party server, wherein,

When the device is applied to the operator server, the device further includes: a storage unit configured to record the log of the set-top box 71 .

When the device is applied to the third-party server, the sending unit is further configured to send the log of the set-top box 71 to the operator server.

It should be noted that the password generation in the embodiment of the present invention, the functions of the server 70 and the set-top box 71 in the authentication system can be implemented according to the method in the above-mentioned method embodiment, and the specific implementation process can refer to the relevant description of the above-mentioned method embodiment. I won't repeat them here.

In summary, the present invention acquires the identification code of the set-top box and the current time of the server through the server, generates a super password through the server preset algorithm according to the identification code and the current time of the server, and uses the super password and the time authority Send to the set-top box; the set-top box receives the super password and time authority sent by the server, obtains the decryption information and the current time of the set-top box, and judges whether the super password matches the decrypted information and whether the current time of the set-top box is allowed by the time authority Within the range, the set-top box will be unlocked only when the above judgments are "yes". Since the identification code of the set-top box is unique and the current time of the server is constantly changing, the super password generated by it through the preset algorithm is unique and dynamic. After authorization, a unique, dynamically changing and time-sensitive super password can be provided to the set-top box to prevent others from unlocking the set-top box with a fixed or expired super password.

Those of ordinary skill in the art can understand that all or part of the processes in the methods of the above embodiments can be implemented through computer programs to instruct related hardware, and the programs can be stored in a computer-readable storage medium. During execution, it may include the processes of the embodiments of the above-mentioned methods. Wherein, the storage medium may be a magnetic disk, an optical disk, a read-only memory (Read-Only Memory, ROM) or a random access memory (Random Access Memory, RAM) and the like.

What is disclosed above is only a preferred embodiment of the present invention, and of course it cannot limit the scope of rights of the present invention. Those of ordinary skill in the art can understand all or part of the process for realizing the above embodiments, and according to the rights of the present invention The equivalent changes required still belong to the scope covered by the invention.

Claims (17)

1. A password generation method, applied to a server, is characterized in that, comprising: Obtain the identification code of the set-top box and the current time of the server; Generate a super password through a server preset algorithm according to the identification code and the current time of the server; The super password is sent to the set-top box, and the super password is used to unlock the set-top box when the set-top box is locked. 2. The method according to claim 1, characterized in that, before the super password is sent to the set-top box, the method further comprises: the time step of the server changing according to the current time of the server Generate a time permission; or the server generates a time permission according to a preset time threshold; the time permission is used to limit the effective use time of the super password; While sending the super password to the set-top box, the method further includes: sending the time authority to the set-top box. 3. The method according to claim 2, wherein the server is an operator server or a third-party server, wherein the method further comprises: recording a log of the set-top box; When the method is applied to the third-party server, the method further includes: sending the log of the set-top box to the operator server. 4. A password generating device applied to a server, characterized in that it comprises: The first obtaining unit is used to obtain the identification code of the set-top box and the current time of the server; A generating unit, configured to generate a super password through a server preset algorithm according to the identification code and the current time of the server; A sending unit, configured to send the super password to the set-top box, and the super password is used to unlock the set-top box when the set-top box is locked. 5. The device according to claim 4, wherein the generating unit is further configured to generate a time authority according to the time step of the current time change of the server; or generate a time authority according to a preset time threshold; the time The authority is used to limit the effective use time of the super password; The sending unit is further configured to send the time permission to the set-top box. 6. The device according to claim 5, wherein the server is an operator server or a third-party server, wherein, When the device is applied to the operator server, the device further includes: a storage unit configured to record a log of the set-top box; When the device is applied to the third-party server, the sending unit is further configured to send the log of the set-top box to the operator server. 7. A password authentication method applied to a set-top box, characterized in that, comprising: Receiving the super password sent by the server, the super password is generated by the server through a server preset algorithm according to the identification code of the set-top box and the current time of the server; Obtain decrypted information; Judging whether the super password matches the decrypted information, if yes, unlocking the set-top box. 8. The method according to claim 7, characterized in that, after unlocking the set-top box, the method further comprises: resetting the unlock password of the set-top box, the unlock password is used when the set-top box obtains The set-top box is unlocked when the decryption information input by the user is consistent with the unlock password. 9. The method according to claim 8, characterized in that, before or after receiving the super password sent by the server, the method further comprises: receiving the time permission sent by the front end, the time permission is used to limit the password of the super password Valid use time of the password; While acquiring the decryption information, the method also includes: acquiring the current time of the set-top box; Before the judging whether the super password matches the decryption information, the method also includes: Judging whether the current time of the set-top box is within the effective use time range allowed by the time authority, if so, performing the step of judging whether the super password matches the decryption information. 10. The method according to any one of claims 7-9, wherein said obtaining decryption information comprises: Obtain the decrypted information entered by the user. 11. The method according to any one of claims 7-9, wherein said obtaining decryption information comprises: Obtain the identification code of the set-top box and the current time of the set-top box; According to the identification code and the current time of the set-top box, decryption information is generated through a terminal preset algorithm, and the set-top box preset algorithm is the same as the server preset algorithm. 12. A password authentication device applied to a set-top box, characterized in that it comprises: The receiving unit is used to receive the super password sent by the server, and the super password is generated by the server through a server preset algorithm according to the identification code of the set-top box and the current time of the server; a second obtaining unit, configured to obtain decryption information; A judging unit, configured to judge whether the super password matches the decrypted information, and if so, unlock the set-top box. 13. The device according to claim 12, characterized in that the device further comprises: a setting unit, configured to reset the unlock password of the set-top box, the unlock password is used when the set-top box obtains the user input The set-top box is unlocked when the decryption information is consistent with the unlock password. 14. The method according to claim 13, wherein the receiving unit is further configured to: receive the time permission sent by the front end, the time permission is used to limit the effective use time of the super password; The second obtaining unit is also used to obtain the current time of the set-top box while obtaining the decrypted information; The judging unit is also used to judge whether the current time of the set-top box is within the valid use time range allowed by the time authority before judging whether the super password matches the decrypted information, and if so, then Executing the step of judging whether the super password matches the decrypted information. 15. The device according to any one of claims 12-14, wherein the second acquiring unit is specifically configured to acquire decryption information input by a user. 16. The device according to any one of claims 12-14, wherein the second acquisition unit is specifically configured to: Obtain the identification code of the set-top box and the current time of the set-top box; According to the identification code and the current time of the set-top box, decryption information is generated through a terminal preset algorithm, and the set-top box preset algorithm is the same as the server preset algorithm. 17. A password generation authentication system, comprising a server and a set-top box, characterized in that, the server comprises the password generating device according to any one of claims 4-6; the set-top box comprises the device according to any one of claims 12-16. A password authentication device according to a claim.