CN109698978B - An access authentication system and method for engineering menu - Google Patents
An access authentication system and method for engineering menu Download PDFInfo
- Publication number
- CN109698978B CN109698978B CN201811612021.3A CN201811612021A CN109698978B CN 109698978 B CN109698978 B CN 109698978B CN 201811612021 A CN201811612021 A CN 201811612021A CN 109698978 B CN109698978 B CN 109698978B
- Authority
- CN
- China
- Prior art keywords
- password
- preset time
- preset
- verified
- access
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
- H04N21/441—Acquiring end-user identification, e.g. using personal code sent by the remote control or by inserting a card
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/083—Network architectures or network communication protocols for network security for authentication of entities using passwords
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0861—Network architectures or network communication protocols for network security for authentication of entities using biometrical features, e.g. fingerprint, retina-scan
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0876—Network architectures or network communication protocols for network security for authentication of entities based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
- H04N21/441—Acquiring end-user identification, e.g. using personal code sent by the remote control or by inserting a card
- H04N21/4415—Acquiring end-user identification, e.g. using personal code sent by the remote control or by inserting a card using biometric characteristics of the user, e.g. by voice recognition or fingerprint scanning
Landscapes
- Engineering & Computer Science (AREA)
- Signal Processing (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Biomedical Technology (AREA)
- Health & Medical Sciences (AREA)
- General Health & Medical Sciences (AREA)
- Multimedia (AREA)
- Power Engineering (AREA)
- Human Computer Interaction (AREA)
- Theoretical Computer Science (AREA)
- Telephonic Communication Services (AREA)
- Selective Calling Equipment (AREA)
Abstract
The invention provides an access authentication system and method of an engineering menu, comprising the following steps: a mobile terminal and a set-top box; the mobile terminal is used for determining whether target identity information corresponding to the identity information exists in prestored information when the identity information input by the operation and maintenance personnel is acquired, if so, determining first current system time of the equipment, determining a password to be verified corresponding to the password acquisition request according to the first current system time and a preset encryption algorithm, and displaying the password to be verified; the set top box is used for determining the second current system time of the equipment when the password to be verified displayed by the mobile terminal input by the operation and maintenance personnel is obtained, and determining the access password of the preset engineering menu according to the second current system time and the encryption algorithm; and determining whether the password to be verified corresponds to the access password, if so, displaying the engineering menu, and otherwise, outputting the engineering menu without the right to access. The scheme can improve the safety of the set top box.
Description
Technical Field
The invention relates to the technical field of set top boxes, in particular to an access authentication system and method for an engineering menu.
Background
With the rapid development of the digital television market, set-top boxes have been widely deployed in various households. The set-top box is not only a user terminal but also a network terminal, and can lead the analog television to change from passive receiving analog television to interactive digital television (such as video on demand and the like), and can access the Internet, thus leading the user to enjoy all-round information services of television, data, language and the like.
At present, the engineering menu of the set-top box usually adopts a static password mode. When the set-top box is abnormal, the user can contact operation and maintenance personnel, and the operation and maintenance personnel can access the engineering menu by using the static password corresponding to the set-top box engineering menu to maintain and manage the set-top box.
However, the access to the engineering menu of the set-top box adopts a static password mode, the relevant password cannot be modified in time, and after an unauthorized person obtains the static password for accessing the engineering menu, the access permission to the engineering menu can be kept all the time, so that the safety of the set-top box is reduced.
Disclosure of Invention
The embodiment of the invention provides an access authentication system and method of an engineering menu, which can improve the security of a set top box.
In a first aspect, the present invention provides an access authentication system for an engineering menu, including: a mobile terminal and a set-top box;
the mobile terminal is used for determining whether target identity information corresponding to the identity information exists in prestored information when the identity information input by operation and maintenance personnel is acquired, if so, determining first current system time of equipment, determining a password to be verified corresponding to the password acquisition request according to the first current system time and a preset encryption algorithm, and displaying the password to be verified;
the set top box is used for determining a second current system time of the equipment when the password to be verified displayed by the mobile terminal and input by the operation and maintenance personnel is obtained, and determining an access password of a preset engineering menu according to the second current system time and the encryption algorithm; and determining whether the password to be verified corresponds to the access password, if so, displaying the engineering menu, and otherwise, outputting the engineering menu without access right.
Preferably, the first and second electrodes are formed of a metal,
the mobile terminal is further configured to store at least one preset time point and at least one preset time period, where the preset time point corresponds to one preset time period; determining a first preset time period in which the first current system time is located from the at least one preset time period; determining a first preset time point corresponding to the first preset time period from the at least one preset time point; and determining the password to be verified corresponding to the password obtaining request according to the first preset time point and a preset encryption algorithm.
Preferably, the first and second electrodes are formed of a metal,
and the mobile terminal is used for encrypting the first preset time point by using a preset encryption algorithm to obtain the password to be verified corresponding to the password obtaining request.
Preferably, the first and second electrodes are formed of a metal,
the set top box is further used for storing the at least one preset time point and the at least one preset time period; determining a second preset time period in which the second current system time is located from the at least one preset time period; determining a second preset time point corresponding to the second preset time period from the at least one preset time point; encrypting the second preset time point by using the encryption algorithm, and determining an access password of a preset engineering menu; and determining whether the password to be verified is the same as the access password, if so, displaying the engineering menu, and otherwise, outputting the engineering menu without access right.
Preferably, the first and second electrodes are formed of a metal,
the identity information includes: and any one or more of the name, the identification number, the ID identification, the preset secret password and the biological characteristics of the operation and maintenance personnel.
In a second aspect, an embodiment of the present invention provides an access authentication method for an engineering menu, including:
through a mobile terminal, when a password acquisition request input by an operation and maintenance person is acquired, whether target identity information corresponding to the identity information exists in prestored information is determined;
determining, by the mobile terminal, a first current system time of the device when it is determined that the target identity information exists;
determining a password to be verified corresponding to the password obtaining request according to the first current system time and a preset encryption algorithm through the mobile terminal, and displaying the password to be verified;
determining a second current system time of the equipment when the password to be verified input by the operation and maintenance personnel is obtained through the set top box;
determining an access password of a preset engineering menu according to the second current system time and the encryption algorithm through the set top box;
and determining whether the password to be verified corresponds to the access password or not through the set-top box, if so, displaying the engineering menu, and otherwise, outputting the engineering menu without access right.
Preferably, the first and second electrodes are formed of a metal,
prior to the determining the first current system time of the device, further comprising:
storing at least one preset time point and at least one preset time period, wherein the preset time point corresponds to one preset time period;
after the determining the first current system time of the device, before determining the password to be verified corresponding to the password obtaining request according to the first current system time and a preset encryption algorithm, the method further includes:
determining a first preset time period in which the first current system time is located from the at least one preset time period;
determining a first preset time point corresponding to the first preset time period from the at least one preset time point;
then the process of the first step is carried out,
the determining the password to be verified corresponding to the password obtaining request according to the first current system time and a preset encryption algorithm comprises the following steps:
and determining the password to be verified corresponding to the password obtaining request according to the first preset time point and a preset encryption algorithm.
Preferably, the first and second electrodes are formed of a metal,
determining the password to be verified corresponding to the password obtaining request according to the first preset time point and a preset encryption algorithm, wherein the determining comprises:
and encrypting the first preset time point by using a preset encryption algorithm to obtain the password to be verified corresponding to the password obtaining request.
Preferably, the first and second electrodes are formed of a metal,
before determining the access password of the preset engineering menu according to the second current system time and the encryption algorithm, the method further includes:
storing the at least one preset time point and the at least one preset time period;
after the determining the second current system time of the device, before the determining the access password of the preset engineering menu according to the second current system time and the encryption algorithm, further comprising:
determining a second preset time period in which the second current system time is located from the at least one preset time period;
determining a second preset time point corresponding to the second preset time period from the at least one preset time point;
then the process of the first step is carried out,
the determining an access password of a preset engineering menu according to the second current system time and the encryption algorithm comprises the following steps:
encrypting the second preset time point by using the encryption algorithm, and determining an access password of a preset engineering menu;
the step of determining whether the password to be verified corresponds to the access password, if so, displaying the engineering menu, otherwise, outputting an unauthorized access engineering menu comprises the following steps:
and determining whether the password to be verified is the same as the access password, if so, displaying the engineering menu, and otherwise, outputting the engineering menu without access right.
Preferably, the first and second electrodes are formed of a metal,
the identity information includes: and any one or more of the name, the identification number, the ID identification, the preset secret password and the biological characteristics of the operation and maintenance personnel.
In the embodiment of the invention, when the mobile terminal acquires a password acquisition request input by an operation and maintenance person, the mobile terminal can acquire the identity information of the operation and maintenance person first to verify the identity of the operation and maintenance person, and when and only when the identity of the operation and maintenance person is determined to be legal, the first current system time of the equipment is determined to determine the password to be verified required by the operation and maintenance person by using the first system time and a preset encryption algorithm; after the operation and maintenance personnel acquire the temporary password to be verified determined by the mobile terminal, the password to be verified can be input into the set top box, so that when the set top box acquires the password to be verified, the second current system time of the set top box equipment is determined, the second current system time and an encryption algorithm are utilized to determine the access password of the preset engineering menu, and finally, whether the operation and maintenance personnel have the authority to access the engineering menu can be determined according to the access password and the password to be verified.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below, and it is obvious that the drawings in the following description are some embodiments of the present invention, and for those skilled in the art, other drawings can be obtained according to these drawings without creative efforts.
Fig. 1 is a schematic structural diagram of an access authentication system for an engineering menu according to an embodiment of the present invention;
fig. 2 is a schematic structural diagram of an access authentication system for an engineering menu according to another embodiment of the present invention;
fig. 3 is a flowchart of an access authentication method for an engineering menu according to an embodiment of the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the embodiments of the present invention clearer and more complete, the technical solutions in the embodiments of the present invention will be described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some, but not all, embodiments of the present invention, and based on the embodiments of the present invention, all other embodiments obtained by a person of ordinary skill in the art without creative efforts belong to the scope of the present invention.
As shown in fig. 1, an embodiment of the present invention provides an access authentication system for an engineering menu, including: a mobile terminal and a set-top box;
the mobile terminal 101 is configured to determine whether target identity information corresponding to the identity information exists in prestored information when the identity information input by an operation and maintenance worker is acquired, if so, determine a first current system time of the device, determine a password to be verified corresponding to the password acquisition request according to the first current system time and a preset encryption algorithm, and display the password to be verified;
the set top box 102 is configured to determine a second current system time of the device when the password to be verified displayed by the mobile terminal 101 and input by the operation and maintenance staff is obtained, and determine an access password of a preset engineering menu according to the second current system time and the encryption algorithm; and determining whether the password to be verified corresponds to the access password, if so, displaying the engineering menu, and otherwise, outputting the engineering menu without access right.
In the embodiment of the invention, when the mobile terminal acquires a password acquisition request input by an operation and maintenance person, the mobile terminal can acquire the identity information of the operation and maintenance person first to verify the identity of the operation and maintenance person, and when and only when the identity of the operation and maintenance person is determined to be legal, the first current system time of the equipment is determined to determine the password to be verified required by the operation and maintenance person by using the first system time and a preset encryption algorithm; after the operation and maintenance personnel acquire the temporary password to be verified determined by the mobile terminal, the password to be verified can be input into the set top box, so that when the set top box acquires the password to be verified, the second current system time of the set top box equipment is determined, the second current system time and an encryption algorithm are utilized to determine the access password of the preset engineering menu, and finally, whether the operation and maintenance personnel have the authority to access the engineering menu can be determined according to the access password and the password to be verified.
It should be noted that the mobile terminal may be a smart phone, a tablet computer, a notebook computer, etc., but is not limited thereto.
In an embodiment of the present invention, the mobile terminal is further configured to store at least one preset time point and at least one preset time period, where the preset time point corresponds to one preset time period; determining a first preset time period in which the first current system time is located from the at least one preset time period; determining a first preset time point corresponding to the first preset time period from the at least one preset time point; and determining the password to be verified corresponding to the password obtaining request according to the first preset time point and a preset encryption algorithm.
In the embodiment of the invention, after the first current system time of the device is determined, the mobile terminal can determine the first preset time period in which the first current system time is located according to the stored preset time period, and then determine the first preset time point corresponding to the first preset time period according to the stored preset time point, so that the password to be verified required by the operation and maintenance personnel is determined according to the first preset time point.
For example, the mobile terminal may pre-store a preset time point 11, 12, 13, 11 points "11121311" and a corresponding preset time period 1 point to 1 point 30 points;
the method comprises the steps that a preset time point is 12 months, 1 day, 7 points, 10 points and 12010710, and corresponding preset time periods are from 8 points to 9 points;
in the 8 th hour and 20 th hour of the first current system time of the self device, the first preset time period in which the first current system time is located at the time of the preset time period 8 to 9 may be determined from the preset time period 1 to 1, 30 minutes and the preset time period 8 to 9 minutes, and the first preset time period corresponds to the preset time point "12010710", so that the preset time point "12010710" may be determined as the first preset time point.
In an embodiment of the present invention, the mobile terminal is configured to encrypt the first preset time point by using a preset encryption algorithm, and obtain a password to be verified corresponding to the password obtaining request.
In the embodiment of the invention, the mobile terminal can adopt a preset encryption algorithm to encrypt the first preset time point to obtain the password to be verified corresponding to the password obtaining request input by the operation and maintenance personnel, and the password to be verified cannot be determined because the external part cannot know the encryption algorithm of the password to be verified, the first preset time point and other parameters, so that the safety of the set top box can be improved.
In an embodiment of the present invention, the set-top box is further configured to store the at least one preset time point and the at least one preset time period; determining a second preset time period in which the second current system time is located from the at least one preset time period; determining a second preset time point corresponding to the second preset time period from the at least one preset time point; encrypting the second preset time point by using the encryption algorithm, and determining an access password of a preset engineering menu; and determining whether the password to be verified is the same as the access password, if so, displaying the engineering menu, and otherwise, outputting the engineering menu without access right.
In the embodiment of the invention, similarly, the set-top box may store the same preset time point and the corresponding preset time period as the mobile terminal, so that after the second current system time is determined, the second preset time period where the second current system time is located may be determined from the stored preset time period, the second preset time point corresponding to the second preset time period may be determined from the stored preset time points, and then the second preset time point is encrypted by using the same encryption algorithm as the mobile terminal to obtain the access password of the engineering menu, since both the password to be verified and the access password have timeliness, when the password to be verified and the access password are determined to be the same, the engineering menu may be displayed for operation of the operation and maintenance personnel, and when the password to be verified and the access password are different, it may be determined that the password to be verified has failed, so that prompt information for unauthorized access to the engineering menu may be output, therefore, the operation and maintenance personnel can know that the password to be verified is over-time, and need to obtain a new password to be verified again from the mobile terminal.
In an embodiment of the present invention, the identity information includes: and any one or more of the name, the identification number, the ID identification, the preset secret password and the biological characteristics of the operation and maintenance personnel.
In the embodiment of the invention, the identity information of the operation and maintenance personnel can be the name, the identity card number, the preset ID (for example, GS001) and the secret password set by the operation and maintenance personnel, and can also be the biological characteristics of the operation and maintenance personnel, such as the fingerprint, the facial characteristics, the iris, the pulse, the voiceprint and the like, so that multiple identity verification modes are provided for verifying the identity of the operation and maintenance personnel, and the safety of the set top box is improved.
In order to more clearly illustrate the technical solution and advantages of the present invention, the following describes in detail how the access authentication system using the engineering menu verifies the identity of the operation and maintenance staff accessing the engineering menu, taking a mobile terminal as a smart phone as an example, as shown in fig. 2, the detailed description may specifically include:
a smartphone 201 for performing:
d0: storing at least one preset time point and at least one preset time period, wherein the preset time point corresponds to one preset time period.
For example, the smartphone may pre-store a preset time point "1 point" and a corresponding preset time period "3 points to 4 points", a preset time point "2 points" and a corresponding preset time period "5 points to 6 points", a preset time point "3 points" and a corresponding preset time period "7 points to 8 points".
D1: and when a password acquisition request input by the operation and maintenance personnel is acquired, acquiring the identity information of the operation and maintenance personnel.
Specifically, when the smart phone obtains a password obtaining request input by an operation and maintenance person, the smart phone may first obtain any one or more identity information of the operation and maintenance person in biological features such as a name, an identity card number, a preset ID, a preset secret password, a face image, an iris, a fingerprint, a palm print, a voiceprint, and the like, so that the identity of the operation and maintenance person is verified through the obtained identity information.
For example, the smart phone obtains the identity information "fingerprint" of the operation and maintenance personnel.
D2: it is determined whether target identity information corresponding to the identity information exists in the pre-stored information, and if so, D3 is performed.
For example, after the smart phone acquires the "fingerprint" of the operation and maintenance person, the identity of the operation and maintenance person can be verified, that is, whether the "target fingerprint" corresponding to the "fingerprint" exists in the pre-stored information is determined, and if the "target fingerprint" exists in the pre-stored information, the identity of the operation and maintenance person is legal, so that the first current system time of the device can be determined to be "3 points and 20 minutes".
D3: a first current system time of the device is determined.
D4: and determining a first preset time period in which the first current system time is located from at least one preset time period.
For example, the smartphone may determine that the first current system time "3 o ' clock 20 minutes" is in the first preset time period "3 o ' clock to 4 o ' clock", "5 o ' clock to 6 o ' clock", and "7 o ' clock to 8 o ' clock", from the preset time periods "3 o ' clock to 4 o ' clock".
D5: and determining a first preset time point corresponding to the first preset time period from at least one preset time point.
For example, the smartphone may determine the first preset time point "1 point" corresponding to the first preset time point "3 points to 4 points" from the preset time points "1 point", "2 points", and "3 points".
D6: and encrypting the first preset time point by using a preset encryption algorithm to obtain a password to be verified corresponding to the password acquisition request, and displaying the password to be verified.
For example, after determining the first preset time point "1 point", the smart phone may encrypt the first preset time point "1 point" by using a preset encryption algorithm "XX 12G", obtain a password to be authenticated "123456", and display the password to be authenticated "123456", so that the operation and maintenance staff can know the password.
A set-top box 202 for performing:
s0: storing at least one preset time point and at least one preset time period.
For example, the set top box and the smart phone store the same preset time point "1 point" and the corresponding preset time period "3 points to 4 points", the preset time point "2 points" and the corresponding preset time period "5 points to 6 points", the preset time point "3 points" and the corresponding preset time period "7 points to 8 points", so as to calculate the same password by using the same encryption algorithm as the smart phone, simplify the complexity of the password to be verified and the access password determined by the user who verifies the password, and shorten the verification time of the password to be verified, so that when the password to be verified and input by the user who verifies the password passes verification, the preset engineering menu is displayed to the user as soon as possible, and the operation and management of the user are facilitated.
S1: and when the password to be verified displayed by the smart phone 202 and input by the operation and maintenance personnel is obtained, determining the second current system time of the equipment.
For example, when the set-top box acquires the password to be verified, which is '123456' input by the operation and maintenance personnel, the second current system time of the device is determined to be '3 o' clock and 22 minutes ', so that the access password of the engineering menu is calculated by using the second current system time of' 3 o 'clock and 22 minutes'.
S2: and determining a second preset time period of the second current system time from at least one preset time point.
For example, the set-top box may determine that the second current system time "3 o ' clock 22 minutes" is in the second preset time period "3 o ' clock to 4 o ' clock", from the preset time points "3 o ' clock to 4 o ' clock", "5 o ' clock to 6 o ' clock", and "7 o ' clock to 8 o ' clock".
S3: and determining a second preset time point corresponding to a second preset time period from the at least one preset time point.
For example, among the preset time points "1 point", "2 points", and "3 points" of the set-top box, a second preset time point "1 point" corresponding to the second preset time point "3 points to 4 points" may be determined.
S4: and encrypting the second preset time point by using an encryption algorithm, and determining an access password of the preset engineering menu.
For example, after determining the second preset time point "1 point", the set-top box may encrypt the second preset time point "1 point" by using the same encryption algorithm "XX 12G" as the smartphone, so as to obtain the access password "123456" of the engineering menu.
S5: and determining whether the password to be authenticated is the same as the access password, if so, executing S6, otherwise, executing S7.
For example, the set-top box can determine that the password to be verified "123456" and the access password "123456" are the same password compared with the password to be verified "123456" and the access password "123456", so that an engineering menu can be displayed for operation and maintenance personnel to operate.
When the password to be verified is different from the access password, the password to be verified is possibly overdue, so that the engineering menu can be input without access right, and the reason why the engineering menu cannot be accessed can be known outside conveniently.
S6: and displaying the project menu.
S7: and outputting the project menu without access right.
As shown in fig. 3, an embodiment of the present invention provides an access authentication method for an engineering menu, including:
step 301: through a mobile terminal, when a password acquisition request input by an operation and maintenance person is acquired, whether target identity information corresponding to the identity information exists in prestored information is determined;
step 302: determining, by the mobile terminal, a first current system time of the device when it is determined that the target identity information exists;
step 303: determining a password to be verified corresponding to the password obtaining request according to the first current system time and a preset encryption algorithm through the mobile terminal, and displaying the password to be verified;
step 304: determining a second current system time of the equipment when the password to be verified input by the operation and maintenance personnel is obtained through the set top box;
step 305: determining an access password of a preset engineering menu according to the second current system time and the encryption algorithm through the set top box;
step 306: determining whether the password to be verified corresponds to the access password or not through the set top box, if so, executing a step 307, otherwise, executing a step 308;
step 307: displaying the project menu;
step 308: and outputting the project menu without access right.
In the embodiment of the invention, when a password acquisition request input by an operation and maintenance person is acquired through a mobile terminal, identity information of the operation and maintenance person is acquired first to verify the identity of the operation and maintenance person, and if and only if the identity of the operation and maintenance person is determined to be legal, a first current system time of equipment is determined to determine a password to be verified required by the operation and maintenance person by using a first system time and a preset encryption algorithm; after the operation and maintenance personnel acquire the temporary password to be verified determined by the mobile terminal, the password to be verified can be input into the set top box, so that when the set top box acquires the password to be verified, the second current system time of the set top box equipment is determined, the second current system time and an encryption algorithm are utilized to determine the access password of the preset engineering menu, and finally, whether the operation and maintenance personnel have the authority to access the engineering menu can be determined according to the access password and the password to be verified.
In an embodiment of the present invention, before the determining the first current system time of the device, the method further includes:
storing at least one preset time point and at least one preset time period, wherein the preset time point corresponds to one preset time period;
after the determining the first current system time of the device, before determining the password to be verified corresponding to the password obtaining request according to the first current system time and a preset encryption algorithm, the method further includes:
determining a first preset time period in which the first current system time is located from the at least one preset time period;
determining a first preset time point corresponding to the first preset time period from the at least one preset time point;
then the process of the first step is carried out,
the determining the password to be verified corresponding to the password obtaining request according to the first current system time and a preset encryption algorithm comprises the following steps:
and determining the password to be verified corresponding to the password obtaining request according to the first preset time point and a preset encryption algorithm.
In an embodiment of the present invention, the determining, according to the first preset time point and a preset encryption algorithm, a password to be verified corresponding to the password obtaining request includes:
and encrypting the first preset time point by using a preset encryption algorithm to obtain the password to be verified corresponding to the password obtaining request.
In an embodiment of the present invention, before determining an access password of a preset engineering menu according to the second current system time and the encryption algorithm, the method further includes:
storing the at least one preset time point and the at least one preset time period;
after the determining the second current system time of the device, before the determining the access password of the preset engineering menu according to the second current system time and the encryption algorithm, further comprising:
determining a second preset time period in which the second current system time is located from the at least one preset time period;
determining a second preset time point corresponding to the second preset time period from the at least one preset time point;
then the process of the first step is carried out,
the determining an access password of a preset engineering menu according to the second current system time and the encryption algorithm comprises the following steps:
encrypting the second preset time point by using the encryption algorithm, and determining an access password of a preset engineering menu;
the step of determining whether the password to be verified corresponds to the access password, if so, displaying the engineering menu, otherwise, outputting an unauthorized access engineering menu comprises the following steps:
and determining whether the password to be verified is the same as the access password, if so, displaying the engineering menu, and otherwise, outputting the engineering menu without access right.
In an embodiment of the present invention, the identity information includes: and any one or more of the name, the identification number, the ID identification, the preset secret password and the biological characteristics of the operation and maintenance personnel.
The embodiments of the invention have at least the following beneficial effects:
1. in an embodiment of the invention, when acquiring a password acquisition request input by an operation and maintenance person, a mobile terminal may acquire identity information of the operation and maintenance person first to verify the identity of the operation and maintenance person, and when and only when the identity of the operation and maintenance person is determined to be legal, a first current system time of a device is determined to determine a password to be verified required by the operation and maintenance person by using the first system time and a preset encryption algorithm, because the identity of the operation and maintenance person who acquires the password to be verified is verified and the system time of the mobile terminal is changed, the password to be verified determined by the mobile terminal is not fixed, so that an unauthorized person can be prevented from always keeping an access authority to an engineering menu of a set-top box after acquiring the password to be verified, and the security of the set-top box can be improved; after the operation and maintenance personnel acquire the temporary password to be verified determined by the mobile terminal, the password to be verified can be input into the set top box, so that when the set top box acquires the password to be verified, the second current system time of the set top box equipment is determined, the second current system time and an encryption algorithm are utilized to determine the access password of the preset engineering menu, and finally, whether the operation and maintenance personnel have the authority to access the engineering menu can be determined according to the access password and the password to be verified.
2. In an embodiment of the present invention, after determining the first current system time of the device, the mobile terminal may determine, according to the stored preset time period, a first preset time period in which the first current system time is located, and then determine, according to the stored preset time point, a first preset time point corresponding to the first preset time period, so as to determine, according to the first preset time point, a password to be verified that is required by the operation and maintenance staff, where the password to be verified that is determined by the mobile terminal is not constant but is time-efficient because the system time of the mobile terminal is changed, so that an unauthorized person can be prevented from keeping an access right to an engineering menu of the set top box by using a static password, and thus security of the set top box can be improved.
2. In an embodiment of the present invention, the mobile terminal may use a preset encryption algorithm to encrypt the first preset time point, so as to obtain the password to be verified corresponding to the password obtaining request input by the operation and maintenance staff, and since the external cannot know the encryption algorithm of the password to be verified and the parameters such as the first preset time point, the password to be verified cannot be determined, so that the security of the set top box can be improved.
3. In an embodiment of the present invention, when acquiring a password acquisition request input by an operation and maintenance person, a mobile terminal may determine that the operation and maintenance person is at the front end of an apparatus, so as to acquire identity information of the operation and maintenance person, so as to determine whether the identity of the operation and maintenance person is legal through the acquired identity information and stored information, and determine a first current system time of the apparatus when and only when the identity of the operation and maintenance person is determined to be legal, so as to determine a corresponding password to be verified by using the first current system time.
4. In an embodiment of the invention, the identity information of the operation and maintenance personnel can be the name, the identity card number, the preset ID, the secret password set by the operation and maintenance personnel, and can also be the biological characteristics of the operation and maintenance personnel, such as fingerprints, facial characteristics, irises, pulses, voiceprints and the like, so that multiple identity verification modes are provided for verifying the identity of the operation and maintenance personnel, and the security of the set top box is improved.
It is noted that, herein, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising a" does not exclude the presence of other similar elements in a process, method, article, or apparatus that comprises the element.
Finally, it is to be noted that: the above description is only a preferred embodiment of the present invention, and is only used to illustrate the technical solutions of the present invention, and not to limit the protection scope of the present invention. Any modification, equivalent replacement, or improvement made within the spirit and principle of the present invention shall fall within the protection scope of the present invention.
Claims (8)
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201811612021.3A CN109698978B (en) | 2018-12-27 | 2018-12-27 | An access authentication system and method for engineering menu |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201811612021.3A CN109698978B (en) | 2018-12-27 | 2018-12-27 | An access authentication system and method for engineering menu |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN109698978A CN109698978A (en) | 2019-04-30 |
| CN109698978B true CN109698978B (en) | 2021-04-06 |
Family
ID=66232195
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201811612021.3A Active CN109698978B (en) | 2018-12-27 | 2018-12-27 | An access authentication system and method for engineering menu |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN109698978B (en) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113221150B (en) * | 2021-05-27 | 2025-08-01 | 北京城市网邻信息技术有限公司 | Data protection method and device |
Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101330379A (en) * | 2007-06-22 | 2008-12-24 | 华为技术有限公司 | A key distribution method and device |
| CN101616003A (en) * | 2008-06-25 | 2009-12-30 | 鸿富锦精密工业（深圳）有限公司 | Password protection system and method |
| CN104426659A (en) * | 2013-09-02 | 2015-03-18 | 中国移动通信集团公司 | Dynamic password generating method, authentication method, authentication system and corresponding equipment |
| CN105451038A (en) * | 2015-11-16 | 2016-03-30 | 深圳市创维软件有限公司 | Code generation method, code authentication method, related device and system |
| CN105719131A (en) * | 2016-01-27 | 2016-06-29 | 努比亚技术有限公司 | Server, client and paying-for-another method of e-payment |
| CN107154847A (en) * | 2016-03-06 | 2017-09-12 | 北京火河科技有限公司 | Towards the method for generating cipher code, verification method and its smart machine of offline environment |
| CN107426628A (en) * | 2017-07-11 | 2017-12-01 | 国创科视科技股份有限公司 | A kind of video data protection system and processing method |
| US9967513B2 (en) * | 2009-03-13 | 2018-05-08 | Cox Communications, Inc. | Password control for multi-room digital video recorder |
| CN108289074A (en) * | 2017-01-09 | 2018-07-17 | 腾讯科技（深圳）有限公司 | User account login method and device |
-
2018
- 2018-12-27 CN CN201811612021.3A patent/CN109698978B/en active Active
Patent Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101330379A (en) * | 2007-06-22 | 2008-12-24 | 华为技术有限公司 | A key distribution method and device |
| CN101616003A (en) * | 2008-06-25 | 2009-12-30 | 鸿富锦精密工业（深圳）有限公司 | Password protection system and method |
| US9967513B2 (en) * | 2009-03-13 | 2018-05-08 | Cox Communications, Inc. | Password control for multi-room digital video recorder |
| CN104426659A (en) * | 2013-09-02 | 2015-03-18 | 中国移动通信集团公司 | Dynamic password generating method, authentication method, authentication system and corresponding equipment |
| CN105451038A (en) * | 2015-11-16 | 2016-03-30 | 深圳市创维软件有限公司 | Code generation method, code authentication method, related device and system |
| CN105719131A (en) * | 2016-01-27 | 2016-06-29 | 努比亚技术有限公司 | Server, client and paying-for-another method of e-payment |
| CN107154847A (en) * | 2016-03-06 | 2017-09-12 | 北京火河科技有限公司 | Towards the method for generating cipher code, verification method and its smart machine of offline environment |
| CN108289074A (en) * | 2017-01-09 | 2018-07-17 | 腾讯科技（深圳）有限公司 | User account login method and device |
| CN107426628A (en) * | 2017-07-11 | 2017-12-01 | 国创科视科技股份有限公司 | A kind of video data protection system and processing method |
Non-Patent Citations (1)
| Title |
|---|
| 基于电子签章技术的电子合同平台设计与实现;罗清彩;《中国优秀硕士学位论文全文数据库 信息科技辑》;20100715;全文 * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN109698978A (en) | 2019-04-30 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US10755507B2 (en) | Systems and methods for multifactor physical authentication | |
| US20250298877A1 (en) | Biometric authentication | |
| CN109767534B (en) | Access control access method, system, management terminal and access control terminal based on block chain | |
| US8862888B2 (en) | Systems and methods for three-factor authentication | |
| US8970348B1 (en) | Using sequences of facial gestures to authenticate users | |
| US11509477B1 (en) | User data validation for digital identifications | |
| US10432618B1 (en) | Encrypted verification of digital identifications | |
| US10826900B1 (en) | Machine-readable verification of digital identifications | |
| US10257495B1 (en) | Three dimensional composite images of digital identifications | |
| US11044244B2 (en) | Authenticating devices via one or more pseudorandom sequences and one or more tokens | |
| US10331291B1 (en) | Visual verification of digital identifications | |
| CN105787324A (en) | Computer information security system | |
| US11615199B1 (en) | User authentication for digital identifications | |
| US11321444B2 (en) | Authentication management method and system | |
| US12468911B2 (en) | Information access handover | |
| CN109698978B (en) | An access authentication system and method for engineering menu | |
| JP5901824B1 (en) | Face authentication system and face authentication program | |
| EP3607722B1 (en) | Online verification method and system for verifying the identity of a subject | |
| WO2013118302A1 (en) | Authentication management system, authentication management method, and authentication management program | |
| KR101949934B1 (en) | Apparatus and Method for Monitering Equipment Using Augmented Reality Image | |
| US9946860B1 (en) | Systems and methods for allowing administrative access | |
| US10447691B2 (en) | Method for generating an authenticating document | |
| US12579858B2 (en) | System and method for anonymized authenticated voting | |
| KR102291942B1 (en) | A method of saving and using OTP backup codes or temporal user OTP codes by using multi-dimensional barcode | |
| JP2012003657A (en) | Biological information registration method and system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| TA01 | Transfer of patent application right | ||
| TA01 | Transfer of patent application right |
Effective date of registration: 20210316 Address after: 250100 West District, North First Floor, S06 Building, 1036 Langchao Road, Jinan High-tech Zone, Shandong Province Applicant after: SHANDONG YUNMAN INTELLIGENT TECHNOLOGY Co.,Ltd. Address before: 250100 First Floor of R&D Building 2877 Kehang Road, Sun Village Town, Jinan High-tech Zone, Shandong Province Applicant before: SHANDONG INSPUR BUSINESS SYSTEM Co.,Ltd. |
|
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| TR01 | Transfer of patent right | ||
| TR01 | Transfer of patent right |
Effective date of registration: 20230412 Address after: West Area, North 1st Floor, S06 Building, 1036 Langchao Road, Jinan Area, China (Shandong) Pilot Free Trade Zone, Jinan City, Shandong Province, 250000 Patentee after: Shandong Langchao Ultra HD Intelligent Technology Co.,Ltd. Address before: 250100 West District, North First Floor, S06 Building, 1036 Langchao Road, Jinan High-tech Zone, Shandong Province Patentee before: SHANDONG YUNMAN INTELLIGENT TECHNOLOGY Co.,Ltd. |