CN110224713B - Safety protection method and system based on high-safety intelligent child watch - Google Patents

Abstract

The invention discloses a safety protection method based on an intelligent child watch.A third-party verification end is arranged on a server connected with the intelligent child watch, and when a background needs to read related information of the intelligent child watch in the server, a reading authority needs to be acquired from the third-party verification end; the server does not record ID information in watch equipment, and only records a signature timestamp and permission information corresponding to the intelligent child watch; compared with the prior art, the invention has the advantages that by arranging the third party verification unit and the ID setting unit, the parent information of the children and the accurate positions of the children cannot be obtained because the server side is attacked by the client, and meanwhile, a hacker can not eavesdrop and monitor under the condition that the parents and the children are completely unaware of the eavesdropping and monitoring by adopting the mode that the answering call needs identity authentication and the SIM card communication is disconnected at regular time to obtain and analyze the communication record.

Description

A safety protection method and system based on a high-security smart children's watch

technical field

The invention relates to the field of information security, in particular to a high-security smart children's watch and a security protection method thereof.

Background technique

All the information of children's smartphones is actually on the backend server. After adding the networking function of ordinary watches, various manufacturers use the backend server as a hub to connect parents' mobile phones and children's watches. Because some manufacturers do not pay enough attention to servers, or even some manufacturers do not have their own servers at all, outsourcing the most critical service content of children's phone watches to other service providers has doubts about the security. Hackers use servers as nodes to attack, and vendors with weak servers are easily controlled. Hackers can use the vulnerability to query the server connected to the smart watch, and then they can view customer information, and directly view the child's geographic location according to the corresponding ID, monitor the child's geographic coordinates, daily activity tracks, and environmental recordings in real time.

For the malicious, the attack code is not complicated for professionals, and some websites have even published the code. In reality, parents' mobile phone numbers are bound to their children's children's phone watches. Therefore, the hacker only needs to know the parent's mobile phone number, and can use this mobile phone number to deduce the ID number of the children's phone watch. The ID number of each children's phone watch is unique. After obtaining the ID number, you can directly enter the attack program to attack the children's phone watch, and the precise location of the attacked phone watch can be quickly displayed.

In addition, by exploiting the vulnerability, hackers can not only accurately grasp the location of the watch, but also fully obtain the daily walking route of children. This means that the location information originally only mastered by parents may be obtained by criminals due to the existence of security loopholes. In addition, hackers can monitor children's environment, eavesdropping on children's conversations and surrounding sounds. That is to say, as long as the watch is in normal use, hackers can eavesdrop and monitor without parents and children knowing, which is equivalent to placing a location bug at home. The hacker controlled the smart phone to make outgoing calls through the program. The attacked children's phone watch was always in a black screen state without any signs, and the connected party could hear all the sounds on the side of the children's phone watch.

At the same time, preschool children who are in the stage of rapid development have a superficial understanding of the things around them, let alone how to protect themselves. Today's hot market and frequent product images have made this protection measure lose its secrecy. As long as criminals find a children's smart watch, they will try to discard it, and even children themselves will take off the watch for various reasons. In the prior art, in order to overcome this problem, when the wearable device is not in use, its appearance, color, material, etc. should follow the principle of concealment; avoid distracting children's limited attention in terms of shape, and at the same time, it is aimed at social recognition. Preschool children with imperfect knowledge and lack of safety awareness do not let others notice whether the child is wearing a wearable device.

SUMMARY OF THE INVENTION

The present invention aims to solve at least one of the technical problems existing in the prior art. To this end, the present invention discloses a security protection method based on a smart children's watch. A third-party verification terminal is set on a server connected to the smart children's watch. When the background needs to read the relevant information of the smart children's watch in the server At the time, the read permission needs to be obtained from the third-party verification terminal; the ID information in the watch device is not recorded in the server, only the corresponding signature time stamp and permission information of the smart children's watch are recorded.

Preferably, the third-party verification terminal is a home computer, and the third-party verification terminal includes a password generator consistent with the smart children's watch. When the background needs to read the relevant information of the smart children's watch in the server, The third-party verification terminal sends the license and the signature key generated by the password generator to the server, and the signature key is associated with the smart children's watch and the server to share the verification key, and the server passes the above verification password. The signature timestamp information in the key is used for authorization verification.

Preferably, the ID information of the smart children's watch is dynamically changing information, and the smart children's watch generates dynamic ID information through a password generator, a SIM card PIN code and a timestamp.

Preferably, when the smart children's watch receives a communication request, it needs to verify the biometric information before being allowed to connect, and the biometric information includes: one or more of face information, fingerprint, voiceprint, and iris. combination.

Preferably, when the screen of the smart children's watch is turned off, a fixed period is set to disconnect the SIM card, and the smart children's watch queries the communication records of the smart children's watch during the period of disconnecting the SIM card. If a suspicious communication record is detected Then an alarm message is sent to the server.

The invention also discloses a high-security smart children's watch, comprising: a smart watch, a server, and a third-party verification terminal; on the server side, a third-party verification terminal is set for the server connected to the smart children's watch, when the background needs to read When obtaining the relevant information of the smart children's watch in the server, it is necessary to obtain the read permission from the third-party verification terminal; wherein, the server does not record the ID information in the watch device, but only records the information of the smart children's watch. Corresponding signature timestamp and license information.

Further, the third-party verification terminal is a home computer, and the third-party verification terminal contains a password generator consistent with the smart children's watch, when the background needs to read the relevant information of the smart children's watch in the server. , the third-party verification terminal sends the license and the signature key generated by the cipher generator to the server, the signature key is associated with the smart children's watch and the server shares the verification key, and the server passes the above verification The signature timestamp information in the key is used for authorization verification.

Further, in the ID setting module, the ID information of the smart children's watch is dynamically changing information, and the smart children's watch generates dynamic ID information through a password generator, a SIM card PIN code and a time stamp.

Further, the communication verification module of the smart children's watch, when the smart children's watch receives a communication request, it needs to verify the biological information, and then allows to connect, and the biological information includes: face information, fingerprint, voiceprint, iris A combination of one or more of.

Further, in the communication anti-hijacking module, when the screen of the smart children's watch is turned off, a fixed period is set to disconnect the SIM card, and the smart children's watch queries the communication records of the smart children's watch during the period of disconnecting the SIM card, If a suspicious communication record is detected, an alarm message is sent to the server.

Compared with the prior art, by setting the third-party verification unit and the ID setting unit, the present invention will not obtain the parent information of the child and the precise location of the child because the server is attacked by the client. The method of disconnecting SIM card communication regularly to obtain communication records and analyze them will not allow hackers to conduct eavesdropping and monitoring without parents and children completely unaware.

Description of drawings

The present invention can be further understood from the following description in conjunction with the accompanying drawings. The components in the figures are not necessarily to scale, emphasis instead being placed upon illustrating the principles of the embodiments. In the figures, like reference numerals designate corresponding parts throughout the different views.

FIG. 1 is a flowchart of a security protection method based on a smart child terminal of the present invention.

Detailed ways

In order to make the objectives, technical solutions and advantages of the present invention clearer, the present invention will be further described in detail below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. . Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, but not all of the embodiments. It should be noted that the detailed description set forth in connection with the appended drawings is intended as a description of various configurations and is not intended to represent the only configurations in which the concepts described herein may be practiced. Apparatus embodiments and method embodiments described herein are described in the following detailed description and illustrated in the accompanying drawings by various blocks, modules, units, components, circuits, steps, processes, algorithms, etc. (collectively referred to as "elements") are shown. These elements may be implemented using electronic hardware, computer software, or any combination thereof. Whether these elements are implemented as hardware or software depends on the specific application and design constraints imposed on the overall system. If terms such as "first" and "second" in the description and claims of the present invention and the accompanying drawings are used for description, such description is used to distinguish different objects, rather than to describe a specific order.

It is to be understood that, when used in this specification and the appended claims, the terms "comprising" and "comprising" indicate the presence of the described features, integers, steps, operations, elements and/or components, but do not exclude one or The presence or addition of a number of other features, integers, steps, operations, elements, components, and/or sets thereof. It is also to be understood that the terminology used in this specification of the present invention is for the purpose of describing particular embodiments only and is not intended to limit the present invention. As used in this specification and the appended claims, the singular forms "a," "an," and "the" are intended to include the plural unless the context clearly dictates otherwise. It should further be understood that, as used in this specification and the appended claims, the term "and/or" refers to and including any and all possible combinations of one or more of the associated listed items .

It should be understood that the specific embodiments described herein are only used to explain the present invention, but not to limit the present invention.

In the following description, suffixes such as 'module', 'component' or 'unit' used to represent elements are used only to facilitate the description of the present invention and have no specific meaning per se. Thus, "module", "component" or "unit" may be used interchangeably.

The terminal may be implemented in various forms. For example, the terminal described in the present invention may include, for example, a mobile phone, a tablet computer, a notebook computer, a palmtop computer, a Personal Digital Assistant (PDA), a Portable Media Player (PMP), a navigation device, a Mobile terminals such as wearable devices, smart bracelets, and pedometers, as well as stationary terminals such as digital TVs and desktop computers.

In the following description, a mobile terminal will be used as an example, and those skilled in the art will understand that, in addition to elements specially used for mobile purposes, the configurations according to the embodiments of the present invention can also be applied to stationary type terminals.

Example 1

As shown in Figure 1, a security protection method based on smart children's terminals is set up with a third-party verification terminal on the server connected to the smart children's watch. When the background needs to read the relevant information of the smart children's watch in the server , the read permission needs to be obtained from the third-party verification terminal; the ID information in the watch device is not recorded in the server, only the corresponding signature time stamp and permission information of the smart children's watch are recorded.

Preferably, the third-party verification terminal is a home computer, and the third-party verification terminal includes a password generator consistent with the smart children's watch. When the background needs to read the relevant information of the smart children's watch in the server, The third-party verification terminal sends the license and the signature key generated by the password generator to the server, and the signature key is associated with the smart children's watch and the server to share the verification key, and the server passes the above verification password. The signature timestamp information in the key is used for authorization verification.

Preferably, the ID information of the smart children's watch is dynamically changing information, and the smart children's watch generates dynamic ID information through a password generator, a SIM card PIN code and a timestamp.

Preferably, when the smart children's watch receives a communication request, it needs to verify the biometric information before being allowed to connect, and the biometric information includes: one or more of face information, fingerprint, voiceprint, and iris. combination.

Preferably, when the screen of the smart children's watch is turned off, a fixed period is set to disconnect the SIM card, and the smart children's watch queries the communication records of the smart children's watch during the period of disconnecting the SIM card. If a suspicious communication record is detected Then an alarm message is sent to the server.

The invention also discloses a high-security smart children's watch, comprising: a smart watch, a server, and a third-party verification terminal; on the server side, a third-party verification terminal is set for the server connected to the smart children's watch, when the background needs to read When obtaining the relevant information of the smart children's watch in the server, it is necessary to obtain the read permission from the third-party verification terminal; wherein, the server does not record the ID information in the watch device, but only records the information of the smart children's watch. Corresponding signature timestamp and license information.

Further, the third-party verification terminal is a home computer, and the third-party verification terminal contains a password generator consistent with the smart children's watch, when the background needs to read the relevant information of the smart children's watch in the server. , the third-party verification terminal sends the license and the signature key generated by the cipher generator to the server, the signature key is associated with the smart children's watch and the server shares the verification key, and the server passes the above verification The signature timestamp information in the key is used for authorization verification.

Further, in the ID setting module, the ID information of the smart children's watch is dynamically changing information, and the smart children's watch generates dynamic ID information through a password generator, a SIM card PIN code and a time stamp.

Further, the communication verification module of the smart children's watch, when the smart children's watch receives a communication request, it needs to verify the biological information, and then allows to connect, and the biological information includes: face information, fingerprint, voiceprint, iris A combination of one or more of.

Further, in the communication anti-hijacking module, when the screen of the smart children's watch is turned off, a fixed period is set to disconnect the SIM card, and the smart children's watch queries the communication records of the smart children's watch during the period of disconnecting the SIM card, If a suspicious communication record is detected, an alarm message is sent to the server.

The described smart children's watch is not limited to a watch-shaped smart terminal carried by children, but also includes other portable children's smart communication devices, such as mobile phones, smart glasses, etc. These equivalent changes and modifications also fall within the scope of the claims of the present invention. range.

It should also be noted that the terms "comprising", "comprising" or any other variation thereof are intended to encompass a non-exclusive inclusion such that a process, method, article or device comprising a series of elements includes not only those elements, but also Other elements not expressly listed, or which are inherent to such a process, method, article of manufacture, or apparatus are also included. Without further limitation, an element qualified by the phrase "comprising a..." does not preclude the presence of additional identical elements in the process, method, article of manufacture, or device that includes the element.

It will be appreciated by those skilled in the art that the embodiments of the present application may be provided as a method, a system or a computer program product. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.

While the invention has been described above with reference to various embodiments, it should be understood that many changes and modifications can be made without departing from the scope of the invention. It is therefore intended that the foregoing detailed description be regarded as illustrative and not restrictive, and that it is to be understood that the following claims, including all equivalents, are intended to define the spirit and scope of the present invention. The above embodiments should be understood as only for illustrating the present invention and not for limiting the protection scope of the present invention. After reading the contents of the description of the present invention, the skilled person can make various changes or modifications to the present invention, and these equivalent changes and modifications also fall within the scope defined by the claims of the present invention.

Claims (8)

1. A safety protection method based on a smart children's watch, characterized in that a third-party verification terminal is set to the server connected to the smart children's watch, when the background needs to read the relevant information of the smart children's watch in the server. , the read permission needs to be obtained from the third-party verification terminal; the ID information in the watch device is not recorded in the server, only the signature time stamp and license information corresponding to the smart children's watch are recorded, and the third-party verification terminal is a home computer , the third-party verification terminal contains a password generator consistent with the smart children's watch, when the background needs to read the relevant information of the smart children's watch in the server, the third-party verification terminal sends the permission information and all The signature key generated by the cipher generator is sent to the server, the signature key is associated with the smart children's watch and the server, and the server performs authority verification through the signature timestamp information in the signature key. 2. a kind of safety protection method based on smart children's watch as claimed in claim 1 is characterized in that, the ID information of described smart children's watch is information of dynamic change, and described smart children's watch passes through described password generator, The SIM card PIN code and the signature timestamp generate dynamic ID information. 3. A kind of safety protection method based on smart children's watch as claimed in claim 2, it is characterized in that, when described smart children's watch receives the communication request, after needing to verify biological information, then permit to connect, the biological The information includes: one or a combination of face information, fingerprint, voiceprint, and iris. 4. A security protection method based on a smart children's watch according to claim 3, wherein when the screen of the smart children's watch is turned off, a fixed period is set to disconnect the SIM card, and the smart children's watch is set to disconnect the SIM card. During the disconnection of the SIM card, the communication records of the smart children's watch are inquired, and if a suspicious communication record is detected, an alarm message is sent to the server. 5. A high-security intelligent safety protection system, characterized in that it includes: a smart children's watch, a server, and a third-party verification terminal; on the server side, a third-party verification terminal is set for the server connected to the smart children's watch, when the When the background needs to read the relevant information of the smart children's watch in the server, it needs to obtain the read permission from the third-party verification terminal; wherein, the server does not record the ID information in the watch device, only records the smart watch The signature timestamp and license information corresponding to the children's watch, the third-party verification terminal is a home computer, and the third-party verification terminal includes a password generator consistent with the smart children's watch. When the background needs to read the When the relevant information of the smart children's watch is used, the third-party verification terminal sends the permission information and the signature key generated by the cipher generator to the server, and the signature key is associated with the smart children's watch and the server. The server performs authority verification through the signature timestamp information in the above signature key. 6. A high-security intelligent safety protection system according to claim 5, wherein the smart children's watch comprises an ID setting module, the ID information of the smart children's watch is dynamically changing information, and the ID sets The module generates dynamic ID information through the password generator, SIM card PIN code and the signature time stamp. 7. A high-security intelligent safety protection system as claimed in claim 6, wherein the smart children's watch comprises a communication verification module, and when the communication verification module receives a communication request, it needs to verify the biological information, The connection is permitted again, and the biometric information includes: one or a combination of face information, fingerprint, voiceprint, and iris. 8 . The high-security smart security protection system according to claim 7 , wherein the smart children’s watch comprises a communication anti-hijacking module, and the smart children’s watch is set to set a fixed period to interrupt when the screen is turned off. 9 . Open the connection of the SIM card, the communication anti-hijacking module inquires the communication record of the smart children's watch during the disconnection of the SIM card, and sends an alarm message to the server if a suspicious communication record is detected.

Images