CN115311763A - A kind of identification method and system - Google Patents

Abstract

The invention relates to an identity recognition method and system, wherein the method comprises the following steps: s1: the electronic key sends an authentication request to the electronic lock; s2: the electronic lock randomly generates a driving signal after receiving the authentication request and sends the driving signal to the electronic key; s3: the electronic key converts the driving signal into a first response signal through the first superlattice password device, converts the first response signal into a reconstruction signal and sends the reconstruction signal to the electronic lock; s4: the electronic lock converts the driving signal into a second response signal through a second superlattice password device; s5: and the electronic lock is used for adjusting the reestablishing signal and the second response signal, if the adjustment is successful, the authentication is successful, otherwise, the authentication is failed. According to the method provided by the invention, the two authentication parties do not need to store fixed keys, and only by utilizing the non-replicability of the superlattice equipment and ensuring that the physical equipment is not damaged by an attacker, the safety of the whole system can be ensured, and the safety is greatly improved.

Description

An identification method and system

technical field

The invention relates to the technical field of information security, in particular to an identification method and system.

Background technique

At present, with the development of random electronic technology, electronic locks based on electronic authentication technology and communication technology have been widely used.

Usually, the traditional mechanical lock has the problems of poor safety and strong reproducibility, and the safety cannot be guaranteed. For electronic locks that use biometric information and digital passwords for authentication, the user can control the smart lock by entering the target password or identity information into the electronic lock in advance, accessing or verifying the biometric information through the password, and in the process of using the electronic lock Among them, it is easier to be monitored by hackers, which increases the risk of target password and biometric copying, forgery, and replay attacks. In addition, the current traditional authentication scheme based on physical unclonable functions needs to store the response pair in the authentication device. Once the attacker obtains the response pair, he can pretend to be the authenticator for authentication.

Contents of the invention

In order to solve the above technical problems, the present invention provides an identification method and system.

The technical solution of the present invention is: an identification method, comprising:

Step S1: the electronic key sends an authentication request to the electronic lock;

Step S2: After receiving the authentication request, the electronic lock randomly generates a drive signal and sends it to the electronic key;

Step S3: the electronic key converts the driving signal into a first response signal through the first superlattice cryptographic device, and then converts the first response signal into a reconstruction signal and sends it to the electronic lock;

Step S4: the electronic lock converts the driving signal into a second response signal through a second superlattice cryptographic device;

Step S5: The electronic lock performs an alignment on the reconstruction signal and the second response signal, and if the alignment is successful, the authentication is successful, otherwise the authentication fails.

Compared with the prior art, the present invention has the following advantages:

1. The present invention discloses an identification method, which uses the non-reproducibility and one-way non-cloning of superlattice devices. Compared with the traditional electronic lock system, the present invention increases the difficulty of counterfeiting and duplication, and effectively improves the Identity security.

2. Compared with the existing PUF-based authentication protocol, which needs to store the stimulus-response pair in the authentication device, in the method provided by the present invention, neither authentication party needs to store a fixed key, and utilizes the non-reproducibility of the superlattice device, The security of the entire system can be ensured only by ensuring that the physical device is not damaged by the attacker, which greatly improves the security.

Description of drawings

FIG. 1 is a flowchart of an identification method in Embodiment 1 of the present invention;

Fig. 2 is a schematic flow chart of an identity recognition method in an embodiment of the present invention;

FIG. 3 is a flowchart of an identification method in Embodiment 2 of the present invention;

FIG. 4 is a structural block diagram of an identity recognition system in Embodiment 3 of the present invention;

Fig. 5 is a structural block diagram of an identity recognition system in Embodiment 4 of the present invention.

Detailed ways

The invention provides an identity identification method, which effectively improves the security of identity identification by utilizing the non-reproducibility and one-way non-clonability of superlattice devices.

In order to make the purpose, technical solution and advantages of the present invention clearer, the present invention will be further described in detail below through specific implementation and in conjunction with the accompanying drawings.

Embodiment one

As shown in Figure 1, a kind of identification method that the embodiment of the present invention provides, comprises the following steps:

Step S1: the electronic key sends an authentication request to the electronic lock;

Step S2: After receiving the authentication request, the electronic lock randomly generates a drive signal and sends it to the electronic key;

Step S3: The electronic key converts the driving signal into a first response signal through the first superlattice cryptographic device, and then converts the first response signal into a reconstruction signal and sends it to the electronic lock;

Step S4: the electronic lock converts the driving signal into a second response signal through the second superlattice cryptographic device;

Step S5: The electronic lock performs an alignment between the reconstruction signal and the second response signal, and if the alignment is successful, the authentication is successful, otherwise the authentication fails.

In one embodiment, the electronic key and the electronic lock in the above steps S3 and S4 are respectively equipped with a first superlattice cryptographic device and a second superlattice cryptographic device, both of which have the same structure and the same manufacturing process, and are located at Adjacent locations on the same semiconductor wafer. In the embodiment of the present invention, the number of electronic keys or electronic locks is not limited. The number of electronic keys and electronic locks depends on the needs of users, and the same number of electronic keys and electronic locks as well as the corresponding superlattice cryptographic devices for electronic keys and electronic locks are produced in the same batch according to the requirements. As long as the matching electronic keys and electronic locks are The above authentication work can be completed. In the embodiment of the present invention, there is no limitation on which information communication technology is used between the electronic key and the electronic lock, and it may be Bluetooth communication technology, Wifi communication technology, NFC communication technology or USB interface communication.

Due to the unclonability and one-way unpredictability of the superlattice cryptographic device, compared with the traditional electronic lock system, the present invention uses the superlattice cryptographic device for identity authentication, which increases the difficulty of forgery and duplication, and effectively improves the identity security. identification security.

In one embodiment, the drive signal is randomly generated in the above step S2, specifically including:

The random sequence generated based on physical random sources (such as based on time and environmental temperature variables) is used as the driving signal, and it is ensured that the same random sequence will not appear repeatedly and is unpredictable.

In one embodiment, converting the first response signal into a reconstruction signal in the above step S3 specifically includes:

Performing error correction coding on the first response signal may use but not limited to BCH code, LDPC code, Polar code and other error correction codes to obtain a reconstructed signal.

In one embodiment, in step S5 above, the electronic lock coordinates the reconstruction signal and the second response signal, specifically including:

The electronic lock pair uses the reconstruction signal to correct the second response signal to obtain the first response signal. If the difference between the second response signal and the first response signal is less than the threshold, the authentication is successful; otherwise, the authentication fails.

In this step, the electronic lock first performs calculations based on the received reconstruction signal and the second response signal through a known error correction coding algorithm (that is, the error correction code used to convert the first response signal into a reconstruction signal in step S3), and it can be obtained Error bits (bits with differences) are output, and then the error bits of the second response signal are corrected. When the error correction is successful, the first response signal can be calculated. At this time, the authentication is successful and the electronic lock is unlocked; if the error correction If it fails, the first response signal cannot be obtained, then the authentication fails and the electronic lock cannot be unlocked.

Compared with the existing PUF-based authentication protocol, which needs to store the response pair in the authentication device, in the method provided by the present invention, both sides of the authentication do not need to store a fixed key, and using the non-reproducibility of the superlattice device, only need to ensure The security of the entire system can be guaranteed if the physical device is not damaged by the attacker, which greatly improves the security.

Fig. 2 shows a schematic flowchart of the identity authentication method provided by the present invention, wherein the authenticating end is an electronic lock end, and the authenticated end is an electronic key end.

The identity authentication method of the present invention is not only applicable to electronic locks and electronic keys, but also applicable to any equipment requiring identity authentication, such as radio frequency identification systems and NFC identification systems.

On the basis of the first embodiment, the first response signal and the second response signal that have been successfully tuned can be used as a common key for encrypted data transmission, thereby implementing other authentication factors for identity authentication.

Embodiment two

As shown in Figure 3, an identification method provided by an embodiment of the present invention includes the following steps:

Step S1: the electronic key sends an authentication request to the electronic lock;

Step S2: After receiving the authentication request, the electronic lock randomly generates a drive signal and sends it to the electronic key;

Step S3: The electronic key converts the driving signal into a first response signal through the first superlattice cryptographic device, and then converts the first response signal into a reconstruction signal and sends it to the electronic lock;

Step S4: the electronic lock converts the driving signal into a second response signal through the second superlattice cryptographic device;

Step S5: The electronic lock coordinates the reconstruction signal and the second response signal, if the synchronization is successful, the authentication is successful, otherwise the authentication fails;

The specific implementation details of the above steps S1 to S5 are the same as the steps S1 to S5 in the embodiment;

Step S6: If the authentication is successful, the first response signal and the coordinated second response signal are used as the common key of the electronic key and the electronic lock, and the two can transmit encrypted data based on the common key.

Based on the common key formed by the electronic key and the electronic lock, authentication factors such as passwords and biometrics can be used for identity authentication, and the interactive authentication information between the electronic lock and the electronic key is symmetrically encrypted and transmitted by the same key.

Embodiment Three

As shown in Figure 4, the embodiment of the present invention provides an identity recognition system, including the following modules:

Send an authentication request module 1, used for the electronic key to send an authentication request to the electronic lock;

Generate a driving signal module 2, which is used to randomly generate a driving signal after the electronic lock receives the authentication request, and send it to the electronic key;

Generate the first response signal and reconstruction signal module 3, for the electronic key to convert the driving signal into the first response signal through the first superlattice cryptographic device, and then convert the first response signal into the reconstruction signal and send it to the electronic lock;

Generate a second response signal module 4, which is used for the electronic lock to convert the driving signal into a second response signal through the second superlattice cryptographic device;

The harmonization module 5 is used for the electronic lock to harmonize the reconstructed signal and the second response signal. If the harmonization is successful, the authentication is successful; otherwise, the authentication fails.

Embodiment Four

As shown in Figure 5, an embodiment of the present invention provides an identity recognition system, including the following modules:

Send an authentication request module 1, used for the electronic key to send an authentication request to the electronic lock;

Generate a driving signal module 2, which is used to randomly generate a driving signal after the electronic lock receives the authentication request, and send it to the electronic key;

Generate the first response signal and reconstruction signal module 3, for the electronic key to convert the driving signal into the first response signal through the first superlattice cryptographic device, and then convert the first response signal into the reconstruction signal and send it to the electronic lock;

Generate a second response signal module 4, which is used for the electronic lock to convert the driving signal into a second response signal through the second superlattice cryptographic device;

The tuning module 5 is used for the electronic lock to tune the reconstructed signal and the second response signal. If the tuning is successful, the authentication is successful, otherwise the authentication fails;

Encrypted data transmission module 6: If the authentication of the harmonization module is successful, the first response signal and the second response signal after harmonization are used as the common key of the electronic key and the electronic lock, and the two can transmit encrypted data based on the common key.

The above embodiments are provided only for the purpose of describing the present invention, not to limit the scope of the present invention. The scope of the invention is defined by the appended claims. Various equivalent replacements and modifications made without departing from the spirit and principle of the present invention shall fall within the scope of the present invention.

Claims (8)

1. An identification method, characterized in that, comprising: Step S1: the electronic key sends an authentication request to the electronic lock; Step S2: After receiving the authentication request, the electronic lock randomly generates a drive signal and sends it to the electronic key; Step S3: the electronic key converts the driving signal into a first response signal through the first superlattice cryptographic device, and then converts the first response signal into a reconstruction signal and sends it to the electronic lock; Step S4: the electronic lock converts the driving signal into a second response signal through a second superlattice cryptographic device; Step S5: The electronic lock performs an alignment on the reconstruction signal and the second response signal, and if the alignment is successful, the authentication is successful, otherwise the authentication fails. 2. The identification method according to claim 1, wherein the first superlattice cryptography device has the same structure and the same manufacturing process as the second superlattice cryptography device, and is located on the same piece of semiconductor during manufacture. The proximity of the wafer. 3. The identification method according to claim 1, wherein the random generation of a driving signal in the step S2 specifically includes: A random sequence generated based on a physical random source is used as the driving signal. 4. The identification method according to claim 1, characterized in that, converting the first response signal into a reconstruction signal in the step S3 specifically includes: The reconstructed signal is obtained after performing error correction coding on the first response signal. 5. The identification method according to claim 1, wherein the electronic lock in the step S5 harmonizes the reconstruction signal and the second response signal, specifically comprising: The electronic lock pair uses the reconstruction signal to correct the second response signal, and if the difference between the second response signal and the first response signal is less than a threshold, the first response signal can be calculated, and this The authentication is successful; otherwise, the first response signal cannot be calculated, and the authentication fails at this time. 6. An identification method, characterized in that, according to any one of claims 1 to 5, the identification method further comprises the steps of: Step S6: If the authentication is successful, the first response signal and the coordinated second response signal are used as the common key of the electronic key and the electronic lock, and the two can be based on the common key. Encrypted data transmission. 7. An identification system, characterized in that it comprises the following modules: Send an authentication request module, used for the electronic key to send an authentication request to the electronic lock; A driving signal generation module, used for the electronic lock to randomly generate a driving signal after receiving the authentication request, and send it to the electronic key; Generating a first response signal and reconstruction signal module, used for the electronic key to convert the driving signal into a first response signal through the first superlattice cryptographic device, and then convert the first response signal into a reconstruction signal and send it to said electronic lock; generating a second response signal module, used for the electronic lock to convert the driving signal into a second response signal through a second superlattice cryptographic device; The coordination module is used for the electronic lock to coordinate the reconstruction signal and the second response signal. If the coordination is successful, the authentication is successful; otherwise, the authentication fails. 8. The identification system according to claim 7, further comprising the following modules: Encrypted data transmission module: if the authentication of the harmonization module is successful, the first response signal and the second response signal after harmonization are used as the common key of the electronic key and the electronic lock, and the two can Encrypted data transmission is based on the common key.

Images