CN103886233B - Method, device and system for improving equipment security by binding hardware - Google Patents

Abstract

The present invention discloses a method, device and system for improving the security of a device by binding hardware. By binding the user's biometric features to external hardware or internal hardware and utilizing the non-copyable characteristics of the hardware physical feature function, the security of the device can be greatly improved, thereby protecting the privacy and interests of the user. The method of improving the security of a device by binding hardware of the present invention includes: collecting the user's biometric features and obtaining the hardware features of the hardware to be bound; binding the biometric features to the hardware features according to set rules; when the user enters the device, comparing the acquired biometric features and hardware features with the biometric features and hardware features stored in the device, and obtaining a comparison result; and controlling the device according to the comparison result.

Description

Method, device and system for improving device security by binding hardware

technical field

The invention relates to the field of equipment security, in particular to a method, device and system for improving equipment security by binding hardware.

Background technique

Now the security of electronic products and communication equipment is becoming more and more important, and various manufacturers are also working hard on equipment security. The use of human biometrics, such as fingerprints, voiceprints or irises, is widely used as a system access module. For example, Apple's latest iphone5 uses a fingerprint module to enter the system.

The security of existing electronic products and communication equipment is mainly protected by digital passwords, hardware security devices or human biometrics. Digital passwords are easy to use, and users only need to make simple settings to encrypt the device; hardware security devices, such as U-shield, are encryption methods that bind digital passwords and hardware, but this is just a simple superposition; human biological Features, because the analog signal features of people in these simulated worlds can be used as unique features to identify people, thus biometrics, such as people's fingerprints, eye iris, speaking voice or face shape, can be used to protect the exclusive use and privacy of users.

However, because digital passwords are relatively easy to crack, the security of electronic products and communication equipment cannot be guaranteed; for hardware security devices, due to the simple superimposition of digital passwords and hardware, when the hardware security device is lost or replaced by a more powerful and expensive hardware device When attacking, it is easy to be broken; and although the biometric feature has its uniqueness, the biometric feature may be copied, such as the copy of the fingerprint. Once the user's biometric feature is copied, the user's device may be invaded. data will be exposed. Since more and more users choose to associate communication tools, shopping tools, or payment tools with communication devices, the hacking of user devices is likely to bring huge losses to users.

Contents of the invention

The present invention provides a method, device and system for improving device security by binding hardware. By binding the user's biological characteristics with external hardware or internal hardware, and using the non-reproducible characteristics of hardware physical feature functions, it can Significantly improve the security of equipment, thereby protecting the privacy and interests of users.

The method for improving device security by binding hardware provided by the embodiment of the present invention includes:

Collect the user's biological characteristics and obtain the hardware characteristics of the hardware to be bound;

Binding the biometric feature with the hardware feature according to set rules;

When the user enters the device, compare the obtained biometric and hardware features with the stored biometric and hardware features of the device, and obtain the comparison result;

The device is controlled based on the comparison result.

Optionally,

The biometric features include fingerprint features and/or facial features and/or iris features and/or voiceprint features.

Optionally,

The collection of user biometrics includes:

Collect the user's fingerprint features through the fingerprint module,

and / or

Collect the user's facial features and/or iris features through the camera,

and / or

The user's voiceprint characteristics are collected through the microphone.

Optionally,

The hardware to be bound includes external hardware or internal hardware of the device.

Optionally,

The hardware to be bound is external hardware;

The hardware feature corresponding to the external hardware is hardware data or parameters;

The external hardware is issued or certified by a third party.

Optionally,

The method also includes:

Provide user-related information to authorized fourth parties.

Optionally,

The user-related information is provided for use by the permitted fourth party to the application or service provider.

Optionally,

Before the step of providing user-related information to the licensed fourth party, it also includes:

Encrypt the user-related information materials.

Optionally,

The hardware to be bound is the internal hardware of the device;

The hardware feature corresponding to the internal hardware of the device is a physically unclonable function (Physically Un-clonable Function, PUF) of the internal hardware.

Optionally,

The internal hardware of the device is the memory of the device.

Optionally,

The device includes: a mobile phone or a tablet computer.

The device for improving device security by binding hardware provided by the embodiment of the present invention includes:

The collection and acquisition module is used to collect the biological characteristics of the user and obtain the hardware characteristics of the hardware to be bound;

A binding module, configured to bind the biometric feature with the hardware feature according to set rules;

A comparison module, configured to compare the acquired biometric and hardware characteristics with the stored biometric and hardware characteristics of the device when the user enters the device, and obtain a comparison result;

A control module, configured to control the device according to the comparison result.

Optionally,

The collection and acquisition module includes a collection unit and an acquisition unit;

The collection unit is used to collect the biological characteristics of the user;

The obtaining unit is used to obtain hardware features of the hardware to be bound.

Optionally,

The acquisition unit includes:

fingerprint module and/or camera and/or microphone, wherein,

The fingerprint module is used to collect the fingerprint characteristics of the user;

The camera is used to collect facial features and/or iris features of the user;

The microphone is used to collect the voiceprint features of the user.

The system for improving device security by binding hardware provided by the embodiment of the present invention includes:

At least two devices for improving device security by binding hardware as claimed in claims 12 to 14;

The user and the device have a mutual mapping relationship, and the device is bound to an application or service;

between at least two of said users,

or

between at least two of said means,

or

between at least two of said users and at least two of said devices,

or

The binding between one user and at least two devices is realized through the binding of the mutual mapping relationship.

In the embodiment of the present invention, first collect the user's biological characteristics and obtain the hardware characteristics of the hardware to be bound; then bind the biological characteristics and the hardware characteristics according to the set rules; then when the user enters the device, the acquired The biological characteristics and hardware characteristics of the device are compared with the biological characteristics and hardware characteristics stored in the device, and a comparison result is obtained; finally, the device is controlled according to the comparison result. By binding the user's biological characteristics with external hardware or internal hardware, the method, device and system of the present invention have the following advantages:

1. Using the method of binding the hardware with the user's biological characteristics and the non-replicable characteristics of the hardware's physical characteristic function, the security of the device can be greatly improved, thereby protecting the privacy and interests of the user;

2. Since the hardware and the user's biological characteristics are bound to each other, it is convenient to realize the secure binding between multiple users, thereby facilitating the interaction between multiple users.

Description of drawings

FIG. 1 is a flow chart of the first embodiment of the method for improving device security by binding hardware in the present invention;

Fig. 2 is a flow chart of the second embodiment of the method for improving device security by binding hardware in the present invention;

FIG. 3 is a flow chart of a third embodiment of a method for improving device security by binding hardware in the present invention;

FIG. 4 is a schematic structural diagram of an embodiment of an apparatus for improving device security by binding hardware according to the present invention.

detailed description

The present invention provides a method, device and system for improving device security by binding hardware. By binding the user's biological characteristics with external hardware or internal hardware, and using the non-reproducible characteristics of hardware physical feature functions, it can Significantly improve the security of equipment, thereby protecting the privacy and interests of users.

Please refer to Figure 1, the first embodiment of the method for improving device security by binding hardware in the embodiment of the present invention includes:

101. Collecting the biological characteristics of the user and obtaining the hardware characteristics of the hardware to be bound;

Before the device binds the user's biological characteristics and hardware, it can first collect the user's biological characteristics and obtain the hardware characteristics of the hardware to be bound.

The biometric features mentioned above may specifically include one or more of fingerprint features, face features, iris features, and voiceprint features. The camera collects the user's facial features and/or iris features, and/or collects the user's voiceprint features through the microphone.

The above-mentioned hardware to be bound may include external hardware or internal hardware of the device. The external hardware may specifically include a USB shield or Lakala issued by the bank, and the internal hardware of the device may specifically include device memory, speakers, or CPU.

102. Bind biometric features with hardware features according to set rules;

After collecting the user's biological characteristics and obtaining the hardware characteristics of the hardware to be bound, the biological characteristics can be bound to the hardware characteristics according to the set rules.

103. When the user enters the device, compare the acquired biological characteristics and hardware characteristics with the stored biological characteristics and hardware characteristics of the device, and obtain a comparison result;

After the biometrics and hardware features are bound according to the set rules, if the user needs to enter or access the device, the device will compare the obtained biometrics and hardware features with the stored biometrics and hardware features of the device, and obtain the comparison result .

104. Control the device according to the comparison result.

If the result of the comparison is that the obtained biometric feature and hardware feature match or match the stored biometric feature and hardware feature of the device, the user can enter the device, otherwise the device can feed back information to the user. The above-mentioned feedback information to the user may specifically include feeding back an error cause and a solution, and the like.

By binding the user's biological characteristics with external hardware or internal hardware, and using the non-replicable characteristics of the hardware's physical feature function, the embodiment of the present invention can greatly improve the security of the device by binding the hardware to improve the security of the device. , thus protecting the privacy and interests of users.

The first embodiment of the method for improving device security by binding hardware is introduced above, and the second embodiment of the method for improving device security by binding hardware is introduced below, please refer to FIG. 2 , in the embodiment of the present invention A second embodiment of the method for improving device security by binding hardware includes:

201. Collect the biological characteristics of the user and obtain the external hardware characteristics of the external hardware to be bound;

Before the device binds the user's biometrics and external hardware, it can first collect the user's biometrics and obtain the hardware characteristics of the external hardware to be bound.

The biometric features mentioned above may specifically include one or more of fingerprint features, face features, iris features, and voiceprint features. The camera collects the user's facial features and/or iris features, and/or collects the user's voiceprint features through the microphone.

The above-mentioned external hardware is issued or certified by a third party, and its corresponding external hardware features are hardware data or parameters, such as USB-shield or Lakala issued by a bank.

It should be noted that during the use of the above-mentioned external hardware, there may be behaviors of collecting user-related usage habits or application data information. This behavior is generally only used by the issuer who issued the external hardware. After the external hardware is bound to the user's biometric feature, the user can limit this behavior, which can further protect the user's privacy.

202. Bind biometric features with external hardware features according to set rules;

After collecting the biometrics of the user and obtaining the external hardware features to be bound to the external hardware, the biometrics can be bound to the external hardware features according to the set rules.

Specifically, the above-mentioned setting rules may be: bind the external hardware features with the user's biometric features after appropriate transformation.

203. When the user enters the device, compare the acquired biological characteristics with the external hardware characteristics with the stored biological characteristics and external hardware characteristics of the device, and obtain the comparison result;

After binding the biometrics and external hardware features according to the set rules, if the user needs to enter or access the device, the device will compare the obtained biometrics with the external hardware features with the biometrics stored in the device and the external hardware features, and Get the comparison result.

204. Control the device according to the comparison result;

If the result of the comparison is that the acquired biometrics and external hardware characteristics match or match the stored biometrics and external hardware characteristics of the device, the user can enter the device, otherwise the device can feed back information to the user. The above-mentioned feedback information to the user may specifically include feeding back an error cause and a solution, and the like.

By binding the user's biometric feature with external hardware and utilizing the non-replicable feature of the hardware's physical feature function, the embodiment of the present invention can greatly improve the security of the device by binding the external hardware to improve the security of the device, and then Protect the privacy and interests of users.

205. Encrypt relevant user information;

User-related information can be collected by external hardware or stored inside the device. Since these user-related information involves the user's privacy and security, before transmitting or using user-related information, users can Relevant information is encrypted.

206. Provide user-related information to the permitted fourth party.

User-related information can specifically be the user's browsing traces of web products, location information, or download records, etc., because this information is a reflection of user habits and preferences, so it can provide guidance for merchants or application service providers, so this information is a valid value information. The fourth party who has obtained permission can obtain the user-related information provided by the device, and then the fourth party can provide the user-related information to the application or service provider for use, and the fourth party can submit the user-related information to the user according to the benefits generated by the user-related information. The user issues a share or discount.

It should be noted that, in the process of providing the user-related information to the application or service provider through the licensed fourth party, it may take place in an encrypted channel, that is, the user equipment directly provides the application or service provider with an encrypted channel. User-related information, so as to ensure that user-related information will not be leaked to the fourth party.

The application process of the embodiment of the present invention is described below with a specific example:

The device in this example is a mobile phone, the user's biometric feature is the iris feature, and the external hardware is a payment authenticator issued by a third party. When the above payment authenticator is connected to the mobile phone, it can realize direct payment without password. The mobile phone of the present invention has bound the iris feature with the payment verifier. When the user uses it, the payment verifier is connected to the mobile phone through the earphone interface, the Micro interface or a special interface, and then the mobile phone enters the iris feature. After the verification is passed, the user can Realize direct payment without password. Since the mobile phone has bound the iris feature with the payment verifier, even if someone other than the user gets the mobile phone and the payment verifier at the same time, they cannot use the password-free direct payment function, thereby ensuring the security of the user's account. In addition, the payment verifier can collect the user's usage information during the user's use. The above-mentioned usage information can include the goods paid by the user, location information and browsing traces. These information are generally only used secretly by the issuer of the payment verifier. In the present invention, user-related information may be provided to a licensed fourth party or a third party issuing a payment verifier in an authorized manner. It should be noted that the above-mentioned fourth party can provide user-related information to service or application developers in a paid manner, and return the paid income to the user who provided the user-related information by sharing or providing discounts. The above-mentioned services or applications The developer can directly receive user-related information from the user device, in this example, a mobile phone, through an encrypted channel without going through a fourth party. This method can reduce the risk of user-related information leakage.

By binding the user's biological characteristics with external hardware, and permitting or authorizing the use of user information collected by external hardware, the method of improving device security by binding external hardware in the embodiment of the present invention can greatly improve the security of the device , while protecting the user's privacy and interests, the user's income can be increased by sharing or providing discounts.

The second embodiment of the method for improving device security by binding hardware is introduced above, and the third embodiment of the method for improving device security by binding hardware is introduced below, please refer to FIG. 3 , in the embodiment of the present invention A third embodiment of the method for improving device security by binding hardware includes:

301. Collect the biological characteristics of the user and obtain the internal hardware characteristics of the internal hardware to be bound;

Before the device binds the user's biometrics and internal hardware, it can first collect the user's biometrics and obtain the internal hardware characteristics of the internal hardware to be bound.

The biometric features mentioned above may specifically include one or more of fingerprint features, face features, iris features, and voiceprint features. The camera collects the user's facial features and/or iris features, and/or collects the user's voiceprint features through the microphone.

The internal hardware feature corresponding to the internal hardware of the device is a Physically Unclonable Function (PUF) of the internal hardware, and the above-mentioned internal hardware of the device may specifically be the memory of the device.

It should be noted that if the internal hardware of the device is the memory of the device, the PUF of the memory can be obtained in the following way: Because a single memory unit is under physical boundary conditions (under abnormal use conditions, such as initialization phase or processing physical stimulation) , there will be a result of 0 or 1 with a certain probability, but statistically, under the common boundary conditions of enough memory units, the statistical results will have consistent characteristics, so this method can be used to obtain the PUF of the memory, Randomly select a memory unit on the memory, and use error correction to generate a unified result on the selected memory unit to obtain the PUF of the memory.

302. Bind the biological characteristics with the internal hardware characteristics according to the set rules;

After collecting the biometrics of the user and obtaining the internal hardware features of the internal hardware to be bound, the biometrics can be bound to the internal hardware features according to the set rules.

303. When the user enters the device, compare the acquired biometric features and internal hardware features with the stored biometric features and internal hardware features of the device, and obtain a comparison result;

After the biometrics are bound to the internal hardware features according to the set rules, if the user needs to enter or access the device, the device will compare the obtained biometrics with the internal hardware features with the stored biometrics and internal hardware features of the device, and Get the comparison result.

304. Control the device according to the comparison result.

If the result of the comparison is that the obtained biometric feature and hardware feature match or match the stored biometric feature and hardware feature of the device, the user can enter the device, otherwise the device can feed back information to the user. The above-mentioned feedback information to the user may specifically include feeding back an error cause and a solution, and the like.

The application process of the embodiment of the present invention is described below with a specific example:

Assuming that there are several user equipments that have bound the user's biological characteristics with internal hardware features, each user equipment can be bound to each other. For the bound user equipment, since each user equipment has its own open service or application, so The binding of services or applications can be achieved through the binding of user equipment, and the binding between services and applications is based on user equipment, so it has high security and will bring great convenience to users .

The device described in the method of the present invention may specifically include: a mobile phone or a tablet computer.

By binding the user's biological characteristics with the internal hardware and utilizing the non-replicable characteristics of the internal hardware's physical feature function, the embodiment of the present invention can greatly improve the security of the device by binding the internal hardware to improve the security of the device. In order to protect the privacy and interests of users.

The third embodiment of the method for improving device security by binding hardware in the present invention is described above. The following describes an embodiment of a device for improving device security by binding hardware. Please refer to FIG. 4. In this embodiment of the present invention, by binding Embodiments of hardware to improve device security include:

The collection and acquisition module 401 is used to collect the biological characteristics of the user and obtain the hardware characteristics of the hardware to be bound;

A binding module 402, configured to bind the biometric feature with the hardware feature according to a set rule;

A comparison module 403, configured to compare the acquired biometric features and hardware features with the stored biometric features and hardware features of the device when the user enters the device, and obtain a comparison result;

A control module 404, configured to control the device according to the comparison result.

Optionally,

The acquisition module 401 includes an acquisition unit 4011 and an acquisition unit 4012;

The collection unit 4011 is used to collect the biological characteristics of the user;

The acquiring unit 4012 is configured to acquire hardware features of the hardware to be bound.

Optionally,

Acquisition unit 4011 includes:

fingerprint module and/or camera and/or microphone, wherein,

The fingerprint module is used to collect the fingerprint characteristics of the user;

The camera is used to collect the user's facial features and/or iris features;

The microphone is used to collect the user's voiceprint features.

In the embodiment of the present invention, the collection and acquisition module 401 first collects the biological characteristics of the user and obtains the hardware characteristics of the hardware to be bound; then the binding module 402 binds the biological characteristics and the hardware characteristics according to the set rules; then when When the user enters the device, the comparison module 403 compares the acquired biological characteristics and hardware characteristics with the biological characteristics and hardware characteristics stored in the device, and obtains the comparison result; finally, the control module 404 controls the device according to the comparison result; The acquisition module 401 includes an acquisition unit 4011 and an acquisition unit 4012; the acquisition unit 4011 is used to acquire the biological characteristics of the user; the acquisition unit 4012 is used to acquire the hardware characteristics of the hardware to be bound. By binding the user's biological characteristics with external hardware or internal hardware, the method and device of the present invention have the following advantages:

1. Using the method of binding the hardware with the user's biological characteristics and the non-replicable characteristics of the hardware's physical characteristic function, the security of the device can be greatly improved, thereby protecting the privacy and interests of the user;

2. Since the hardware and the user's biological characteristics are bound to each other, it is convenient to realize the secure binding between multiple users, thereby facilitating the interaction between multiple users.

The above describes the embodiment of the device for improving device security by binding hardware in the present invention. The following describes the system embodiment for improving device security by binding hardware. In the embodiment of the present invention, the device for improving device security by binding hardware systems, including:

At least two devices for improving device security by binding hardware as in the embodiment of the present invention;

The user and the device have a mutual mapping relationship, and the device is bound to an application or service;

between at least two of said users,

or

between at least two of said means,

or

between at least two of said users and at least two of said devices,

or

The binding between one user and at least two devices is realized through the binding of the mutual mapping relationship.

Since the system of the embodiment of the present invention includes the device of the embodiment of the present invention, it also specifically has the advantages of the device of the embodiment of the present invention, which will not be repeated here. It should be noted that the main advantage of the system of the present invention is that the binding between multiple users, or between one user and multiple devices, or between multiple users and multiple devices can be realized through the binding of their mutual mapping relationship , in this way, the convenience of users can be greatly improved. For example, if two devices are bound, when the two users corresponding to the device need to interact with each other, it can be considered that the two users have been bound. determined, without the need for additional judgment or binding process.

In the several embodiments provided in this application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only illustrative. For example, the division of the units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components can be combined or May be integrated into another system, or some features may be ignored, or not implemented. In another point, the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces, and the indirect coupling or communication connection of devices or units may be in electrical, mechanical or other forms.

The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place, or may be distributed to multiple network units. Part or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, each unit may exist separately physically, or two or more units may be integrated into one unit. The above-mentioned integrated units can be implemented in the form of hardware or in the form of software functional units.

If the integrated unit is realized in the form of a software function unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the essence of the technical solution of the present invention or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium , including several instructions to make a computer device (which may be a personal computer, a server, or a network device, etc.) execute all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage media include: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), magnetic disk or optical disk, and other media that can store program codes.

The above is only a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Anyone skilled in the art can easily think of changes or substitutions within the technical scope disclosed in the present invention. Should be covered within the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims (15)

1. A method for improving device security by binding hardware, comprising: Collect the user's biological characteristics and obtain the hardware characteristics of the hardware to be bound; Binding the biometric feature with the hardware feature according to set rules; When the user enters the device, compare the obtained biometric and hardware features with the stored biometric and hardware features of the device, and obtain the comparison result; The device is controlled based on the comparison result. 2. The method for improving device security by binding hardware according to claim 1, characterized in that, The biometric features include fingerprint features and/or facial features and/or iris features and/or voiceprint features. 3. The method for improving device security by binding hardware according to claim 2, wherein said collection of user's biometric features comprises: Collect the user's fingerprint features through the fingerprint module, and / or Collect the user's facial features and/or iris features through the camera, and / or The user's voiceprint characteristics are collected through the microphone. 4. The method for improving device security by binding hardware according to claim 1, characterized in that, The hardware to be bound includes external hardware or internal hardware of the device. 5. The method for improving device security by binding hardware according to claim 4, characterized in that, The hardware to be bound is external hardware; The hardware feature corresponding to the external hardware is hardware data or parameters; The external hardware is issued or certified by a third party. 6. The method for improving device security by binding hardware according to claim 5, characterized in that the method further comprises: Provide user-related information to authorized fourth parties. 7. The method for improving device security by binding hardware according to claim 6, characterized in that, The user-related information is provided for use by the permitted fourth party to the application or service provider. 8. The method for improving device security by binding hardware according to claim 6, characterized in that before the step of providing user-related information to a permitted fourth party, the method further includes: Encrypt the user-related information materials. 9. The method for improving device security by binding hardware according to claim 4, characterized in that, The hardware to be bound is the internal hardware of the device; The hardware feature corresponding to the internal hardware of the device is a physically unclonable function (Physically Un-clonable Function, PUF) of the internal hardware. 10. The method for improving device security by binding hardware according to claim 9, characterized in that, The internal hardware of the device is the memory of the device. 11. The method for improving device security by binding hardware according to any one of claims 1 to 10, wherein the device comprises: a mobile phone or a tablet computer. 12. A device for improving device security by binding hardware, characterized in that it comprises: The collection and acquisition module is used to collect the biological characteristics of the user and obtain the hardware characteristics of the hardware to be bound; A binding module, configured to bind the biometric feature with the hardware feature according to set rules; A comparison module, configured to compare the acquired biometric and hardware characteristics with the stored biometric and hardware characteristics of the device when the user enters the device, and obtain a comparison result; A control module, configured to control the device according to the comparison result. 13. The device for improving device security by binding hardware according to claim 12, characterized in that, The collection and acquisition module includes a collection unit and an acquisition unit; The collection unit is used to collect the biological characteristics of the user; The obtaining unit is used to obtain hardware features of the hardware to be bound. 14. The device for improving device security by binding hardware according to claim 13, wherein the acquisition unit comprises: fingerprint module and/or camera and/or microphone, wherein, The fingerprint module is used to collect the fingerprint characteristics of the user; The camera is used to collect facial features and/or iris features of the user; The microphone is used to collect the voiceprint features of the user. 15. A system for improving device security by binding hardware, characterized in that it comprises: At least two devices for improving device security by binding hardware as claimed in claims 12 to 14; The user and the device have a mutual mapping relationship, and the device is bound to an application or service; between at least two of said users, or between at least two of said means, or between at least two of said users and at least two of said devices, or The binding between one user and at least two devices is realized through the binding of the mutual mapping relationship.