CN118842596A - Industrial control host remote access control system and method based on multi-factor authentication - Google Patents

Abstract

The disclosed embodiment discloses a remote access control system and method for an industrial control host based on multi-factor authentication, which relates to the technical field of remote access to industrial control hosts. The system includes: a smart card, which is used to generate a smart card key according to current location information; a client, which is used to send the smart card key generated by the smart card, the user ID and identity key input by the user to the system end; the system end is used to obtain the verification value of the smart card key and the identity key according to the user ID, and verify the smart card key and identity key sent by the client according to the verification value of the smart card key and the identity key. If the verification is passed, the client is allowed to access the industrial control host. The remote access control system for industrial control hosts based on multi-factor authentication provided by this embodiment innovatively uses a smart card to generate a unique smart card key based on the current location information, so that the key has timeliness and dynamic change characteristics, which increases the difficulty of cracking.

Description

Industrial control host remote access control system and method based on multi-factor authentication

Technical Field

The present disclosure relates to the technical field of remote access control of industrial control hosts, and in particular to a remote access control system and method for industrial control hosts based on multi-factor authentication.

Background Art

The Industrial Control Host Remote Access Control System is a software and hardware solution for remote monitoring and management of industrial control systems (ICS). It allows operators and technicians to access the industrial control host through the Internet or a private network, thereby achieving remote monitoring, fault diagnosis and maintenance of industrial equipment and systems.

The industrial control host remote access control system based on multi-factor authentication is a remote access solution that enhances security. Multi-factor authentication (MFA) refers to the use of multiple independent authentication methods to verify the user's identity. Typically, these authentication methods include: Knowledge factor: something the user knows, such as a password or PIN code. Possession factor: something the user has, such as a mobile phone verification code, email verification code, etc. Biometric factor: a feature of the user himself, such as fingerprint, facial recognition, or iris scan.

Generally speaking, multi-factor authentication is mainly used for business trips, visiting customers, etc. The existing authentication technology is complex and has low security.

In summary, how to simplify the authentication process while improving security during multi-factor authentication is an issue that needs to be resolved.

Summary of the invention

In view of this, the embodiments of the present disclosure provide a system and method for remote access control of an industrial control host based on multi-factor authentication, which simplifies the authentication process while improving security through location verification.

In a first aspect, the embodiments of the present disclosure provide a remote access control system for an industrial control host based on multi-factor authentication, which adopts the following technical solutions:

Includes: client, smart card and system end;

The smart card is used to generate a smart card key according to the current location information and send it to the client;

The client is used to send the smart card key generated by the smart card, the user ID and identity key input by the user to the system end;

The system end is used to obtain the verification value of the smart card key and the identity key according to the user ID, and verify the smart card key and the identity key sent by the client according to the verification value of the smart card key and the identity key. If the verification passes, the client is allowed to access the industrial control host.

As an optional implementation, the smart card includes:

A first storage module, used to store preset algorithms and verification data;

Positioning module, used to obtain current location information;

The main control module is used to splice the current location information and the verification data, and use the preset algorithm to calculate the spliced data to obtain the smart card key and send it to the client.

As an optional implementation, the system end includes:

The second storage module is used to store preset location information, preset algorithm, verification data, user ID and identity key verification value corresponding to the user ID;

A smart card key verification value calculation module, used to calculate the smart card key verification value according to preset location information, preset algorithm and verification data;

The access control module is used to query the identity key verification value in the second storage module according to the user ID sent by the user terminal, and verify the smart card key and identity key sent by the user terminal according to the smart card key verification value and the identity key verification value. If the verification passes, the client is allowed to access the industrial control host.

As an optional implementation, the system end also includes: a preset algorithm and verification data update module, which is used to generate a new preset algorithm or verification data after each access control module verification is passed, and send it to the client, so that the client changes the preset algorithm or verification data stored in the first storage module according to the new preset algorithm or verification data, and after the client changes successfully, changes the preset algorithm or verification data in the second storage module according to the new preset algorithm or verification data.

As an optional implementation, the client also includes: a preset algorithm and verification data rewriting module, which is used to change the preset algorithm or verification data stored in the first storage module according to the new preset algorithm or verification data sent by the system end, and send the rewriting result to the system end.

As an optional implementation, the first storage module includes: a first preset algorithm storage unit, a first verification data storage unit, a second preset algorithm storage unit, and a second verification data storage unit;

The first preset algorithm storage unit is used to store the newly changed preset algorithm, and the second preset algorithm storage unit is used to store the last changed preset algorithm;

The first verification data storage unit is used to store the newly changed verification data, and the second verification data storage unit is used to store the last changed verification data;

The preset algorithm and verification data rewriting module writes the new preset algorithm into the first preset algorithm storage unit. After the writing is successful, the main control module reads the preset algorithm from the first preset algorithm storage unit when reading it again. After the writing fails, the main control module reads the preset algorithm from the second preset algorithm storage unit when reading it again.

The preset algorithm and the verification data rewriting module write the new verification data into the first verification data storage unit. After the writing is successful, the main control module reads the verification data from the first verification data storage unit when reading it again. After the writing fails, the main control module reads the verification data from the second verification data storage unit when reading it again.

As an optional implementation, the access control module is further used to obtain a location-free key instruction. If a location-free key instruction is obtained, the identity key verification value is queried in the second storage module according to the user ID sent by the user terminal, and the identity key sent by the user terminal is verified according to the identity key verification value. If the verification passes, the client is allowed to access the industrial control host.

As an optional implementation, the location-free key instruction is generated after the user applies for location-free verification to the administrator and the application is approved by the administrator.

In a second aspect, an embodiment of the present disclosure further provides a method for controlling remote access to an industrial control host based on multi-factor authentication, based on the above-mentioned remote access control system for an industrial control host based on multi-factor authentication, comprising:

Using the smart card to generate a smart card key according to the current location information, and sending the smart card key to the client;

Using the client, the smart card key generated by the smart card, the user ID and the identity key input by the user are sent to the system end;

The system end obtains the verification value of the smart card key and the identity key according to the user ID, and verifies the smart card key and the identity key sent by the client according to the verification value of the smart card key and the identity key. If the verification passes, the client is allowed to access the industrial control host.

As an optional implementation, using the system end to obtain the verification value of the smart card key and the identity key according to the user ID, and verifying the smart card key and the identity key sent by the client according to the verification value of the smart card key and the identity key, if the verification is successful, allowing the client to access the industrial control host includes:

Using the second storage module to store preset location information, preset algorithm, verification data, user ID and identity key verification value corresponding to the user ID;

Utilizing the smart card key verification value calculation module to calculate the smart card key verification value according to preset location information, preset algorithm and verification data;

The access control module is used to query the identity key verification value in the second storage module according to the user ID sent by the user terminal, and the smart card key and identity key sent by the user terminal are verified according to the smart card key verification value and the identity key verification value. If the verification passes, the client is allowed to access the industrial control host.

In summary, the technical effects of the industrial control host remote access control system based on multi-factor authentication provided by the present disclosure are:

The industrial control host remote access control system based on multi-factor authentication provided in this embodiment realizes multiple identity authentication by combining the client, smart card and system end, ensuring that only authorized users can access the industrial control host. The smart card is innovatively used to generate a unique smart card key based on the current location information, so that the key has timeliness and dynamic change characteristics, which increases the difficulty of cracking. The smart card key generated by the smart card, the user ID and identity key entered by the user are sent to the system end by the client, and the client performs comprehensive verification.

On the other hand, by updating the two storage units in turn, the original preset algorithm and verification data will not be affected when writing fails, thus increasing the stability of the system.

On the other hand, in the case of poor positioning module signal, for example, in an underground parking lot or indoors in a high-rise building, the user can apply to the administrator to not verify the position, thereby increasing convenience of use.

The above description is only an overview of the technical solution of the present invention. In order to more clearly understand the technical means of the present invention, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present invention more obvious and easy to understand, the following preferred embodiments are specifically cited and described in detail with reference to the accompanying drawings.

BRIEF DESCRIPTION OF THE DRAWINGS

In order to more clearly illustrate the technical solutions of the embodiments of the present disclosure, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

FIG1 is a schematic diagram of the structure of an industrial control host remote access control system based on multi-factor authentication provided by an embodiment of the present disclosure;

FIG2 is a flow chart of a method for controlling remote access to an industrial control host based on multi-factor authentication according to an embodiment of the present disclosure.

DETAILED DESCRIPTION

The embodiments of the present disclosure are described in detail below with reference to the accompanying drawings.

It should be clear that the following embodiments of the present disclosure are described by specific specific examples, and those skilled in the art can easily understand other advantages and effects of the present disclosure from the contents disclosed in this specification. Obviously, the described embodiments are only a part of the embodiments of the present disclosure, rather than all of the embodiments. The present disclosure can also be implemented or applied through other different specific embodiments, and the details in this specification can also be modified or changed in various ways based on different viewpoints and applications without departing from the spirit of the present disclosure. It should be noted that the following embodiments and features in the embodiments can be combined with each other in the absence of conflict. Based on the embodiments in the present disclosure, all other embodiments obtained by ordinary technicians in the field without making creative work are within the scope of protection of the present disclosure.

It should be noted that various aspects of the embodiments within the scope of the appended claims are described below. It should be apparent that the aspects described herein may be embodied in a wide variety of forms, and any specific structure and/or function described herein is merely illustrative. Based on the present disclosure, it should be understood by those skilled in the art that an aspect described herein may be implemented independently of any other aspect, and two or more of these aspects may be combined in various ways. For example, any number of aspects described herein may be used to implement the device and/or practice the method. In addition, other structures and/or functionalities other than one or more of the aspects described herein may be used to implement this device and/or practice this method.

It should also be noted that the illustrations provided in the following embodiments are only schematic illustrations of the basic concept of the present disclosure. The drawings only show components related to the present disclosure rather than being drawn according to the number, shape and size of components in actual implementation. In actual implementation, the type, quantity and proportion of each component may be changed arbitrarily, and the component layout may also be more complicated.

Additionally, in the following description, specific details are provided to facilitate a thorough understanding of the examples. However, it will be understood by those skilled in the art that the aspects described may be practiced without these specific details.

In order to solve the problem of how to simplify the authentication process and improve security while performing multi-factor authentication, referring to FIG1 , a first aspect of the present invention provides an industrial control host remote access control system based on multi-factor authentication, comprising: a client, a smart card and a system end; generally speaking, the client runs on the user's computer, the system end runs on the server, and the smart card is a separate hardware device that can be plugged into the user's computer using a USB interface or the like to interact with the client for data;

The smart card is used to generate a smart card key according to the current location information and send it to the client;

The client is used to send the smart card key generated by the smart card, the user ID and identity key input by the user to the system end;

The system end is used to obtain the verification value of the smart card key and the identity key according to the user ID, and verify the smart card key and the identity key sent by the client according to the verification value of the smart card key and the identity key. If the verification passes, the client is allowed to access the industrial control host.

The industrial control host remote access control system based on multi-factor authentication provided in this embodiment realizes multiple identity authentication by combining the client, smart card and system end, ensuring that only authorized users can access the industrial control host. The smart card is innovatively used to generate a unique smart card key based on the current location information, so that the key has timeliness and dynamic change characteristics, which increases the difficulty of cracking. The smart card key generated by the smart card, the user ID and identity key entered by the user are sent to the system end by the client, and the client performs comprehensive verification.

As an optional implementation, the smart card includes:

A first storage module, used to store preset algorithms and verification data;

Positioning module, used to obtain current location information;

The main control module is used to splice the current location information and the verification data, and use a preset algorithm to calculate the spliced data to obtain the smart card key, and send it to the client. For example, the current location information and the verification data can be spliced, and then the preset algorithm can be used to calculate the smart card key verification value.

As an optional implementation, the system end includes:

The second storage module is used to store preset location information, a preset algorithm, verification data, a user ID and an identity key verification value corresponding to the user ID; it can be known that, under normal circumstances, the preset algorithm stored in the second storage module is consistent with the preset algorithm stored in the first storage module. For example, the preset algorithm can adopt a hash algorithm and a similar verification algorithm.

Specifically, when a user makes an application for access approval while on a business trip and records location information in the application, after the application is approved, the location information recorded in the application will be stored in the second storage module as preset location information.

Verification data can be a random number or a timestamp, which is mainly used to increase security and will be changed after each verification.

The smart card key verification value calculation module is used to calculate the smart card key verification value according to the preset location information, the preset algorithm and the verification data; for example, the preset location information and the verification data can be spliced, and then the preset algorithm is used to calculate the smart card key verification value.

The access control module is used to query the identity key verification value in the second storage module according to the user ID sent by the user terminal, and verify the smart card key and identity key sent by the user terminal according to the smart card key verification value and the identity key verification value. If the verification passes, the client is allowed to access the industrial control host.

As an optional implementation, the system end also includes: a preset algorithm and verification data update module, which is used to generate a new preset algorithm or verification data after each access control module verification is passed, and send it to the client, so that the client changes the preset algorithm or verification data stored in the first storage module according to the new preset algorithm or verification data, and after the client changes successfully, changes the preset algorithm or verification data in the second storage module according to the new preset algorithm or verification data.

In this embodiment, after each verification, the preset algorithm or verification data is changed to improve the security of the system. At the same time, the system end is modified after the client end is successfully changed to avoid the problem of inconsistent data between the system end and the smart card due to special circumstances where the smart card is not successfully written.

As an optional implementation, the client also includes: a preset algorithm and verification data rewriting module, which is used to change the preset algorithm or verification data stored in the first storage module according to the new preset algorithm or verification data sent by the system end, and send the rewriting result to the system end.

As an optional implementation, the first storage module includes: a first preset algorithm storage unit, a first verification data storage unit, a second preset algorithm storage unit, and a second verification data storage unit;

The first preset algorithm storage unit is used to store the newly changed preset algorithm, and the second preset algorithm storage unit is used to store the last changed preset algorithm;

The first verification data storage unit is used to store the newly changed verification data, and the second verification data storage unit is used to store the last changed verification data;

The preset algorithm and verification data rewriting module writes the new preset algorithm into the first preset algorithm storage unit. After the writing is successful, the main control module reads the preset algorithm from the first preset algorithm storage unit when reading it again. After the writing fails, the main control module reads the preset algorithm from the second preset algorithm storage unit when reading it again.

The preset algorithm and the verification data rewriting module write the new verification data into the first verification data storage unit. After the writing is successful, the main control module reads the verification data from the first verification data storage unit when reading it again. After the writing fails, the main control module reads the verification data from the second verification data storage unit when reading it again.

In this embodiment, two storage units are updated in turn, so that the original preset algorithm and verification data are not affected when writing fails, thereby increasing the stability of the system.

As an optional implementation, the access control module is further used to obtain a location-free key instruction. If a location-free key instruction is obtained, the identity key verification value is queried in the second storage module according to the user ID sent by the user terminal, and the identity key sent by the user terminal is verified according to the identity key verification value. If the verification passes, the client is allowed to access the industrial control host.

As an optional implementation, the location-free key instruction is generated by the user applying for location-free verification to the administrator, and the administrator approves it. The location-free key instruction can be generated in this system, or generated in other OA systems or attendance systems and then sent to this system.

In this embodiment, in the case where the positioning module signal is not good, for example, in an underground parking lot or indoors in a high-rise building, the user can apply to the administrator to not verify the position, thereby increasing convenience of use.

On the other hand, referring to FIG. 2 , the present invention provides a method for controlling remote access to an industrial control host based on multi-factor authentication, based on the above-mentioned remote access control system for an industrial control host based on multi-factor authentication, comprising:

Step S1, using the smart card to generate a smart card key according to the current location information, and sending it to the client;

Step S2, using the client to send the smart card key generated by the smart card, the user ID and identity key input by the user to the system end;

Step S3, using the system end to obtain the verification value of the smart card key and the identity key according to the user ID, and verifying the smart card key and the identity key sent by the client according to the verification value of the smart card key and the identity key. If the verification passes, the client is allowed to access the industrial control host.

The multi-factor authentication-based remote access control method for industrial control hosts provided in this embodiment realizes multiple identity authentication by combining the client, smart card and system end, ensuring that only authorized users can access the industrial control host. The smart card is innovatively used to generate a unique smart card key based on the current location information, so that the key has timeliness and dynamic change characteristics, which increases the difficulty of cracking. The smart card key generated by the smart card, the user ID and identity key entered by the user are sent to the system end by the client, and the client performs comprehensive verification.

As an optional implementation, using the system end to obtain the verification value of the smart card key and the identity key according to the user ID, and verifying the smart card key and the identity key sent by the client according to the verification value of the smart card key and the identity key, if the verification is successful, allowing the client to access the industrial control host includes:

The second storage module is used to store preset location information, a preset algorithm, verification data, a user ID and an identity key verification value corresponding to the user ID; it can be known that, under normal circumstances, the preset algorithm stored in the second storage module is consistent with the preset algorithm stored in the first storage module. For example, a hash algorithm and a similar verification algorithm can be used.

Specifically, when a user makes an application for access approval while on a business trip and records location information in the application, after the application is approved, the location information recorded in the application will be stored in the second storage module as preset location information.

Verification data can be a random number or a timestamp, which is mainly used to increase security and will be changed after each verification.

The smart card key verification value calculation module is used to calculate the smart card key verification value according to the preset location information, the preset algorithm and the verification data; for example, the preset location information and the verification data can be spliced, and then the preset algorithm is used to calculate the smart card key verification value.

The access control module is used to query the identity key verification value in the second storage module according to the user ID sent by the user terminal, and the smart card key and identity key sent by the user terminal are verified according to the smart card key verification value and the identity key verification value. If the verification passes, the client is allowed to access the industrial control host.

For detailed description of this embodiment, reference may be made to the corresponding descriptions in the aforementioned embodiments, which will not be repeated here.

The basic principles of the present disclosure are described above in conjunction with specific embodiments. However, it should be noted that the advantages, strengths, effects, etc. mentioned in the present disclosure are only examples and not limitations, and it cannot be considered that these advantages, strengths, effects, etc. are required by each embodiment of the present disclosure. In addition, the specific details disclosed above are only for the purpose of illustration and ease of understanding, and are not limitations. The above details do not limit the present disclosure to the necessity of adopting the above specific details to be implemented.

In the present disclosure, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply that there is any such actual relationship or order between these entities or operations. The block diagrams of the devices, devices, equipment, and systems involved in the present disclosure are only illustrative examples and are not intended to require or imply that they must be connected, arranged, and configured in the manner shown in the block diagram. As will be appreciated by those skilled in the art, these devices, devices, equipment, and systems can be connected, arranged, and configured in any manner. Words such as "including", "comprising", "having", etc. are open words, referring to "including but not limited to", and can be used interchangeably with them. The words "or" and "and" used here refer to the words "and/or" and can be used interchangeably with them, unless the context clearly indicates otherwise. The words "such as" used here refer to the phrase "such as but not limited to", and can be used interchangeably with them.

Additionally, as used herein, "or" used in a list of items beginning with "at least one" indicates a separate list, so that, for example, a list of "at least one of A, B, or C" means A or B or C, or AB or AC or BC, or ABC (i.e., A and B and C). Furthermore, the word "exemplary" does not mean that the example described is preferred or better than other examples.

It should also be noted that in the system and method of the present disclosure, each component or each step can be decomposed and/or recombined. Such decomposition and/or recombination should be regarded as equivalent solutions of the present disclosure.

Various changes, substitutions, and modifications of the techniques described herein may be made without departing from the teachings defined by the appended claims. Furthermore, the scope of the claims of the present disclosure is not limited to the specific aspects of the processes, machines, manufactures, compositions of events, means, methods, and actions described above. Currently existing or later to be developed processes, machines, manufactures, compositions of events, means, methods, or actions that perform substantially the same functions or achieve substantially the same results as the corresponding aspects described herein may be utilized. Thus, the appended claims include such processes, machines, manufactures, compositions of events, means, methods, or actions within their scope.

The above description of the disclosed aspects is provided to enable any person skilled in the art to make or use the present disclosure. Various modifications to these aspects will be readily apparent to those skilled in the art, and the general principles defined herein may be applied to other aspects without departing from the scope of the present disclosure. Therefore, the present disclosure is not intended to be limited to the aspects shown herein, but rather to the widest scope consistent with the principles and novel features disclosed herein.

The above description has been given for the purpose of illustration and description. In addition, this description is not intended to limit the embodiments of the present disclosure to the forms disclosed herein. Although multiple example aspects and embodiments have been discussed above, those skilled in the art will recognize certain variations, modifications, changes, additions and sub-combinations thereof.

Claims (10)

1. An industrial control host remote access control system based on multi-factor authentication, which is characterized by comprising: the system comprises a client, a smart card and a system end;

the smart card is used for generating a smart card key according to the current position information and sending the smart card key to the client;

the client is used for sending the smart card key generated by the smart card, the user ID and the identity key input by the user to the system side;

The system end is used for acquiring verification values of the intelligent card key and the identity key according to the user ID, verifying the intelligent card key and the identity key sent by the client according to the verification values of the intelligent card key and the identity key, and allowing the client to access the industrial control host if the verification is passed.

2. The multi-factor authentication-based industrial control host remote access control system of claim 1, wherein the smart card comprises:

The first storage module is used for storing a preset algorithm and verification data;

the positioning module is used for acquiring current position information;

The main control module is used for splicing the current position information and the check data, calculating the spliced data by using a preset algorithm, obtaining a smart card key and sending the smart card key to the client.

3. The multi-factor authentication-based industrial control host remote access control system according to claim 2, wherein the system side comprises:

The second storage module is used for storing preset position information, preset algorithm, verification data, user ID and an identity key verification value corresponding to the user ID;

the smart card key verification value calculation module is used for calculating a smart card key verification value according to preset position information, a preset algorithm and verification data;

And the access control module is used for inquiring the identity key verification value in the second storage module according to the user ID sent by the user terminal, verifying the intelligent card key and the identity key sent by the user terminal according to the intelligent card key verification value and the identity key verification value, and allowing the client terminal to access the industrial control host if the verification is passed.

4. The multi-factor authentication-based industrial control host remote access control system of claim 3, wherein the system side further comprises: and the preset algorithm and check data updating module is used for generating a new preset algorithm or check data after each access control module passes the verification, and sending the new preset algorithm or check data to the client so that the client can change the preset algorithm or check data stored in the first storage module according to the new preset algorithm or check data, and after the client is successfully changed, changing the preset algorithm or check data in the second storage module according to the new preset algorithm or check data.

5. The multi-factor authentication-based industrial control host remote access control system of claim 4, wherein the client further comprises: the system comprises a first storage module, a first verification module, a second storage module, a first algorithm and verification data rewriting module, a second storage module and a second storage module, wherein the first storage module is used for storing the first verification data and the second verification data, the first storage module is used for storing the second verification data and the second verification data, and the second storage module is used for storing the second verification data and the first verification data and the second verification data.

6. The multi-factor authentication-based industrial control host remote access control system of claim 5, wherein the first storage module comprises: the system comprises a first preset algorithm storage unit, a first check data storage unit, a second preset algorithm storage unit and a second check data storage unit;

the first preset algorithm storage unit is used for storing a new modified preset algorithm, and the second preset algorithm storage unit is used for storing a last modified preset algorithm;

The first check data storage unit is used for storing the check data which is changed newly, and the second check data storage unit is used for storing the check data which is changed last time;

The method comprises the steps that a preset algorithm and verification data rewriting module writes a new preset algorithm into a first preset algorithm storage unit, after the writing is successful, the main control module reads from the first preset algorithm storage unit when the preset algorithm is read again, and after the writing fails, the main control module reads from a second preset algorithm storage unit when the preset algorithm is read again;

The preset algorithm and the verification data rewriting module write new verification data into the first verification data storage unit, after the writing is successful, the main control module reads the verification data from the first verification data storage unit when reading the verification data again, and after the writing is failed, the main control module reads the verification data from the second verification data storage unit when reading the verification data again.

7. The remote access control system of an industrial personal computer based on multi-factor authentication according to claim 6, wherein the access control module is further configured to obtain a location-free key instruction, if the location-free key instruction is obtained, query an identity key verification value in the second storage module according to a user ID sent by the user terminal, verify an identity key sent by the user terminal according to the identity key verification value, and if the verification is passed, allow the client terminal to access the industrial personal computer.

8. The multi-factor authentication-based remote access control system of an industrial personal computer of claim 7, wherein the location-free key instruction is generated after the manager approves the application for location-free verification from the manager.

9. The industrial control host remote access control method based on multi-factor authentication, which is based on the industrial control host remote access control system based on multi-factor authentication as claimed in any one of claims 1-8, comprises the following steps:

Generating a smart card key according to the current position information by using the smart card, and sending the smart card key to the client;

transmitting a smart card key generated by the smart card, a user ID and an identity key input by a user to a system end by using the client;

and acquiring verification values of the intelligent card key and the identity key according to the user ID by using the system terminal, verifying the intelligent card key and the identity key sent by the client terminal according to the verification values of the intelligent card key and the identity key, and allowing the client terminal to access the industrial control host if the verification is passed.

10. The automated test analysis method of WiFi and bluetooth functions according to claim 9, wherein obtaining verification values of a smart card key and an identity key according to the user ID by using the system side, verifying the smart card key and the identity key sent by the client according to the verification values of the smart card key and the identity key, and if the verification is passed, allowing the client to access an industrial control host includes:

Storing preset position information, a preset algorithm, verification data, a user ID and an identity key verification value corresponding to the user ID by using the second storage module;

Calculating a smart card key verification value according to preset position information, a preset algorithm and verification data by using the smart card key verification value calculation module;

And inquiring an identity key verification value in the second storage module according to the user ID sent by the user terminal by using the access control module, verifying the intelligent card key and the identity key sent by the user terminal according to the intelligent card key verification value and the identity key verification value, and allowing the client terminal to access the industrial control host if verification is passed.