TWI880712B - Terminal device authenticity detection method, device, equipment, system and medium - Google Patents

Abstract

The present invention discloses a method, device, equipment, system and medium for detecting the authenticity of terminal equipment, and relates to the field of electronic information. The method includes: generating more than three challenge tasks through a target detection application, wherein the more than three challenge tasks include a first type of tasks and a second type of tasks, wherein the first type of tasks include at least two identical challenge tasks, and the second type of tasks include challenge tasks different from the first type of tasks; triggering a terminal device under test to execute more than three challenge tasks through the target detection application, and obtaining response signals corresponding to the challenge tasks generated by the terminal device under test and collected by a sensor; comparing the response signals corresponding to the first type of tasks with the response signals corresponding to the second type of tasks through the target detection application, and determining whether the terminal device under test is a real physical terminal device or a virtual terminal device according to the comparison result. According to the embodiment of the present invention, it is possible to distinguish between real physical terminal devices and virtual terminal devices.

Description

Method, device, equipment, system and medium for detecting authenticity of terminal equipment

The present invention belongs to the field of electronic information, and in particular relates to a method, device, equipment, system and medium for detecting the authenticity of terminal equipment.

With the continuous development of cloud technology, based on the monitoring and migration capabilities provided by cloud technology, cloud technology can be applied to the terminal equipment business field, and the functions of terminal equipment can be run through cloud servers to realize the concept of cloud terminal equipment. The software environment of cloud terminal equipment can be consistent with the software environment of real physical terminal equipment, and the injection and modification of interface parameters of cloud terminal equipment are also very convenient. However, there are some criminals who use the authenticity of the cloud terminal software environment and the convenience of adjusting interface parameters to launch attacks, reducing the security of terminal equipment business. Therefore, distinguishing whether the terminal equipment is a real physical terminal equipment or a virtual terminal equipment has become a major problem in the terminal equipment business field.

The embodiment of the present invention provides a method, device, equipment, system and medium for detecting the authenticity of a terminal device, which can distinguish between a real physical terminal device and a virtual terminal device.

In a first aspect, an embodiment of the present invention provides a method for detecting the authenticity of a terminal device, which is applied to a terminal device under test, wherein the terminal device under test has a sensor and a target detection application, and the method comprises: generating three or more challenge tasks through the target detection application, wherein the three or more challenge tasks include a first category of tasks and a second category of tasks, wherein the first category of tasks includes at least two identical challenge tasks, and the second category of tasks includes at least two identical challenge tasks with the first category of tasks. Different challenge tasks; trigger the terminal device under test to execute more than three challenge tasks through the target detection application, and obtain the response signal corresponding to the challenge task generated by the terminal device under test collected by the sensor; compare the response signal corresponding to the first type of task with the response signal corresponding to the second type of task through the target detection application, and determine whether the terminal device under test is a real physical terminal device or a virtual terminal device based on the comparison results.

In a second aspect, an embodiment of the present invention provides a method for detecting the authenticity of a terminal device, which is applied to a terminal device under test, wherein the terminal device under test has a sensor and a target detection application, and the method comprises: receiving three or more challenge tasks generated and sent by a background server of the target detection application, wherein the three or more challenge tasks include a first category of tasks and a second category of tasks, wherein the first category of tasks includes at least two identical challenge tasks, and the second category of tasks includes tasks that are different from the first category of tasks. The target detection application triggers the terminal device under test to execute more than three challenge tasks, and obtains the response signal corresponding to the challenge task generated by the terminal device under test collected by the sensor; the response signal is sent to the background server, so that the background server compares the response signal corresponding to the first type of task with the response signal corresponding to the second type of task, and determines whether the terminal device under test is a real physical terminal device or a virtual terminal device according to the comparison result.

In a third aspect, an embodiment of the present invention provides a method for detecting the authenticity of a terminal device, which is applied to a background server of a target detection application. The terminal device under test has a sensor and a target detection application. The method comprises: generating and sending three or more challenge tasks to the terminal device under test, wherein the three or more challenge tasks include a first category of tasks and a second category of tasks, wherein the first category of tasks includes at least two identical challenge tasks, and the second category of tasks includes at least two identical challenge tasks. The tasks include challenge tasks different from the first type of tasks; receiving response signals sent by the terminal device under test, the response signals are collected by the sensor when the target detection application triggers the terminal device under test to execute more than three challenge tasks; comparing the response signals corresponding to the first type of tasks with the response signals corresponding to the second type of tasks, and determining whether the terminal device under test is a real physical terminal device or a virtual terminal device according to the comparison results.

In a fourth aspect, an embodiment of the present invention provides a terminal device authenticity detection device, which is applied to a terminal device under test, wherein the terminal device under test has a sensor and a target detection application, and the detection device includes: a challenge task generation module, which is used to generate more than three challenge tasks, wherein the more than three challenge tasks include a first category of tasks and a second category of tasks, wherein the first category of tasks includes at least two identical challenge tasks, and the second category of tasks includes at least two identical challenge tasks, and the second category of tasks includes at least two identical challenge tasks. The information collection module is used to trigger the terminal device under test to execute more than three challenge tasks and obtain the response signals corresponding to the challenge tasks generated by the terminal device under test collected by the sensor; the data processing module is used to compare the response signals corresponding to the first type of tasks with the response signals corresponding to the second type of tasks, and determine whether the terminal device under test is a real physical terminal device or a virtual terminal device based on the comparison results.

In a fifth aspect, an embodiment of the present invention provides a terminal device authenticity detection device, which is applied to a terminal device under test, wherein the terminal device under test has a sensor and a target detection application, and the detection device includes: a receiving module, which is used to receive more than three challenge tasks generated and sent by a background server of the target detection application, wherein the more than three challenge tasks include a first category of tasks and a second category of tasks, wherein the first category of tasks includes at least two identical challenge tasks, and the second category of tasks includes at least two identical challenge tasks with the first category of tasks. Different challenge tasks; information collection module, used to trigger the tested terminal device to execute more than three challenge tasks, and obtain the response signal corresponding to the challenge task generated by the tested terminal device collected by the sensor; sending module, used to send the response signal to the background server, so that the background server can compare the response signal corresponding to the first type of task with the response signal corresponding to the second type of task, and determine whether the tested terminal device is a real physical terminal device or a virtual terminal device according to the comparison result.

In a sixth aspect, an embodiment of the present invention provides a terminal device authenticity detection device, which is applied to a background server of a target detection application, wherein the terminal device under test has a sensor and a target detection application, and the detection device comprises: a challenge task generation module, which is used to generate more than three challenge tasks, wherein the more than three challenge tasks include a first category of tasks and a second category of tasks, wherein the first category of tasks includes at least two identical challenge tasks, and the second category of tasks includes challenge tasks different from the first category of tasks; a sending module; A group is used to send more than three challenge tasks to the terminal device under test; a receiving module is used to receive the response signal sent by the terminal device under test, and the response signal is collected by the sensor when the target detection application triggers the terminal device under test to execute more than three challenge tasks; a data processing module is used to compare the response signal corresponding to the first type of task with the response signal corresponding to the second type of task, and determine whether the terminal device under test is a real physical terminal device or a virtual terminal device according to the comparison result.

In the seventh aspect, the embodiment of the present invention provides a terminal device, including: a processor and a memory storing computer program instructions; when the processor executes the computer program instructions, the authenticity detection method of the terminal device of the first aspect is implemented.

In the eighth aspect, an embodiment of the present invention provides a terminal device, comprising: a processor and a memory storing computer program instructions; and a method for detecting the authenticity of the terminal device of the second aspect when the processor executes the computer program instructions.

In the ninth aspect, an embodiment of the present invention provides a server, comprising: a processor and a memory storing computer program instructions; when the processor executes the computer program instructions, the method for detecting the authenticity of the terminal device of the third aspect is implemented.

In the tenth aspect, an embodiment of the present invention provides a terminal device authenticity detection system, including the terminal device of the eighth aspect and the server of the ninth aspect.

In the eleventh aspect, an embodiment of the present invention provides a computer-readable storage medium, on which computer program instructions are stored, and when the computer program instructions are executed by a processor, the terminal device authenticity detection method of the first aspect, the terminal device authenticity detection method of the second aspect, or the terminal device authenticity detection method of the third aspect is implemented.

The embodiments of the present invention provide a method, apparatus, device, system and medium for detecting the authenticity of a terminal device. The terminal device under test can execute more than three pre-generated challenge tasks, wherein the more than three challenge tasks include the same challenge tasks, i.e., first-category tasks, and challenge tasks different from the first-category tasks, i.e., second-category tasks. The terminal device under test is determined to be a real physical terminal device or a virtual terminal device based on a comparison of response signals generated by the terminal device under test executing the first-category tasks and the second-category tasks, which are collected by the sensor of the terminal device under test. The physical unclonable function can make the real physical terminal device produce a unique output that cannot be cloned for the challenge task, and the response signal can reflect the characteristics of the physical unclonable function. The characteristics of the physical unclonable function reflected by the response signals generated by the real physical terminal device when executing the same challenge task and different challenge tasks have certain regularities, while the characteristics of the physical unclonable function reflected by the response signals generated by the virtual terminal device when executing the same challenge task and different challenge tasks are difficult to have regularities or the regularities are different from those of the virtual terminal device. The real physical terminal device is different. Moreover, the third party simulating the virtual terminal device cannot know the content of the challenge task and the time when the virtual terminal device executes the challenge task, nor can it simulate the response signal generated by the real physical terminal device executing the same challenge task and different challenge tasks to reflect the characteristics of the physical unclonable function. Therefore, it can accurately determine whether the terminal device under test is a real physical terminal device or a virtual terminal device based on the response signal, and realize the distinction between real physical terminal devices and virtual terminal devices.

1002: Server

20,51: Tested terminal equipment

21,521,601,801:Challenge mission generation module

22,511,602,702: Information collection module

23,522,603,804: Data processing module

24,512: Target detection applications

25,513:Sensor

26,514: Central processing unit and memory chips

52:Backend server

53: Cloud application services

600,700,800: Device for testing the authenticity of terminal equipment

701,803: receiving module

703,802: Send module

900,1001: terminal equipment

901:Memory

902: Processor

903: Communication interface

904:Bus

steps

C1,C2,C3,C4,C5: Challenging missions

R1, R2, R3: Non-relevant information

In order to more clearly explain the technical solution of the embodiment of the present invention, the following will briefly introduce the diagrams required for use in the embodiment of the present invention. For ordinary technicians in this field, other diagrams can be obtained based on these diagrams without making any progressive labor.

Figure 1 is a flow chart of a method for detecting the authenticity of a terminal device provided in an embodiment of the first aspect of the present invention;

Figure 2 is a flow chart of a method for detecting the authenticity of a terminal device provided by another embodiment of the first aspect of the present invention;

Figure 3 is a schematic diagram of an example of the terminal device authenticity detection method provided by an embodiment of the present invention being applied to the terminal device under test;

Figure 4 is a flow chart of a method for detecting the authenticity of a terminal device provided in an embodiment of the second aspect of the present invention;

Figure 5 is a flow chart of a method for detecting the authenticity of a terminal device provided in an embodiment of the third aspect of the present invention;

Figure 6 is a flow chart of a method for detecting the authenticity of a terminal device provided by another embodiment of the third aspect of the present invention;

FIG7 is a schematic diagram of an example of the architecture of the terminal device authenticity detection method provided by an embodiment of the present invention applied to the tested terminal device and the background server;

Figure 8 is a flowchart of an example of the process of detecting the authenticity of the terminal device provided by an embodiment of the present invention;

Figure 9 is a schematic diagram of the structure of a terminal device authenticity detection device provided in an embodiment of the fourth aspect of the present invention;

Figure 10 is a schematic structural diagram of a terminal device authenticity detection device provided in an embodiment of the fifth aspect of the present invention;

Figure 11 is a schematic diagram of the structure of a terminal device authenticity detection device provided in the first embodiment of the sixth aspect of the present invention;

Figure 12 is a schematic diagram of the structure of the terminal device provided in the first embodiment of the seventh aspect of the present invention;

Figure 13 is a schematic diagram of the structure of a terminal device authenticity detection system provided in the first embodiment of the tenth aspect of the present invention.

The features and exemplary embodiments of various aspects of the present invention will be described in detail below. In order to make the purpose, technical solutions and advantages of the present invention clearer, the present invention will be further described in detail below in combination with the drawings and specific embodiments. It should be understood that the specific embodiments described here are only intended to explain the present invention, not to limit the present invention. For those skilled in the art, the present invention can be implemented without some of these specific details. The following description of the embodiments is only to provide a better understanding of the present invention by showing examples of the present invention. It should be noted that the acquisition, storage, use, and processing of information and data in the embodiments of the present invention are authorized by users or relevant institutions and comply with the relevant provisions of national laws and regulations.

With the continuous development of cloud technology, based on the monitoring and migration capabilities provided by cloud technology, cloud technology can be applied to the terminal equipment business field, and the functions of terminal equipment can be run through cloud servers to realize the concept of cloud terminal equipment. The software environment of cloud terminal equipment can be consistent with the software environment of real physical terminal equipment, and the injection and modification of interface parameters of cloud terminal equipment are also very convenient. However, there are some criminals who use the authenticity of the cloud terminal software environment and the convenience of adjusting interface parameters to launch attacks, reducing the security of terminal equipment business. Therefore, distinguishing whether the terminal equipment is a real physical terminal equipment or a virtual terminal equipment has become a major problem in the terminal equipment business field.

The present invention provides a method, device, equipment, system and medium for detecting the authenticity of a terminal device. By triggering the terminal device under test to perform a challenge task, response information that can reflect the characteristics of the physical unclonable function (PUF) of the terminal device under test is obtained, and the response information of the terminal device under test is used to determine whether the terminal device under test is a real physical terminal device or a virtual terminal device. The physical unclonable function is formed based on the unique physical changes that occur naturally in the process of device manufacturing in the device. It is technically almost impossible to forge or clone the physical unclonable function of the device. Virtual terminal devices cannot simulate response signals that can reflect the characteristics of the physical unclonable function of real physical terminal devices. The response signals can effectively distinguish between real physical terminal devices and virtual terminal devices.

The method for detecting the authenticity of the terminal device in the embodiment of the present invention can be implemented by the terminal device under test, or can be implemented by the interaction between the terminal device under test and the server, which is not limited here.

For ease of understanding, a brief description of the terminal device under test and the server is first given here. The terminal device under test includes terminal devices that need to be distinguished as real physical terminal devices or virtual terminal devices. The terminal device under test may include mobile phones, tablets, smart watches and other devices, and the specific type of the terminal device under test is not limited here. The terminal device under test may be a real physical terminal device or a virtual terminal device. A real physical terminal device is a real terminal device with physical hardware and whose functions are implemented by physical hardware. For example, the central processing unit (CPU), memory, sensors, etc. required to run the program are physical hardware. A virtual terminal device is a terminal device whose function is realized by running a virtual device. For example, the central processing unit, memory, sensor, etc. required to run the program are virtual devices simulated by devices such as servers. A virtual terminal device can be a cloud terminal device or a virtual device obtained by model simulation. The terminal device under test has a target detection application, and a detection method for the authenticity of the terminal device can be introduced through the target detection application, so that the terminal device under test executes the detection method for the authenticity of the terminal device on the side of the terminal device under test. The terminal device under test also has a sensor. The sensor in the real physical terminal device is a real physical sensor, and the sensor in the virtual terminal device is a virtual sensor. The sensor can sense the signal of the terminal device under test. The type of signal that the sensor can sense is related to the type of sensor. The type of sensor is not limited here. The sensors available for the IoT device can be within the protection scope of the present invention. In some examples, the sensor may include but is not limited to one or more of the following categories: magnetic sensor, voice sensor, gravity sensor, gyroscope, screen sensor.

In the embodiment of the present invention, the authenticity detection method of the terminal device is implemented by the interaction between the terminal device under test and the server, and the server is the background server of the target detection application. The background server can execute the authenticity detection method of the terminal device on the background server side.

The following describes the terminal device authenticity detection method, device, equipment, system and medium provided by the present invention.

The first aspect of the present invention provides a method for detecting the authenticity of a terminal device, which is applied to a terminal device under test, and the method for detecting the authenticity of the terminal device can be independently executed by the terminal device under test. The terminal device under test has a sensor and a target detection application. FIG1 is a flow chart of a method for detecting the authenticity of a terminal device provided by an embodiment of the first aspect of the present invention. As shown in FIG1, the method for detecting the authenticity of the terminal device may include steps S101 to S103.

In step S101, more than three challenge tasks are generated by applying target detection.

The target detection application has the function of generating challenge tasks. Challenge tasks are tasks that can be executed by the terminal device under test. In some examples, the challenge tasks may include calculations. For example, the challenge tasks may include multiplication operations on two matrices. The target detection application may randomly select a specified calculation to generate a challenge task. In some examples, a task list may be pre-set, and the task list may include multiple challenge tasks. Three or more challenge tasks may be randomly selected from the task list to generate. The three or more challenge tasks include a first category of tasks and a second category of tasks. The first category of tasks includes at least two identical challenge tasks. The second category of tasks includes challenge tasks that are different from the first category of tasks. That is to say, the three or more challenge tasks generated by the target detection application include the same challenge tasks and different challenge tasks. For example, three challenge tasks C1, C2, and C3 are generated through the target detection application, among which the task content of challenge task C1 and challenge task C2 is the same, and the task content of challenge task C3 is different from that of challenge task C1. Then the first category of tasks includes challenge task C1 and challenge task C2, and the second category of tasks includes challenge task C3. It should be noted that the first category of tasks and the second category of tasks are relative. For example, five challenge tasks C1, C2, C3, C4, and C5 are generated through the target detection application, among which the task content of challenge task C1 and challenge task C2 is the same, the task content of challenge task C3 is different from that of challenge task C2, the task content of challenge task C4 and challenge task C5 is the same, the task content of challenge task C4 is different from that of challenge task C1, and challenge task C3 is different from that of challenge task C1. The content of Challenge Task C1 and Challenge Task C2 are different from each other, Challenge Task C3 is a second-class task relative to Challenge Task C1, Challenge Task C2, Challenge Task C4, and Challenge Task C5, Challenge Task C4 and Challenge Task C5 are first-class tasks relative to each other, and Challenge Task C4 is a second-class task relative to Challenge Task C1 and Challenge Task C2.

In step S102, the target detection application triggers the terminal device under test to execute more than three challenge tasks, and obtains the response signal corresponding to the challenge task generated by the terminal device under test collected by the sensor.

The target detection application can trigger the terminal device under test to execute the challenge task generated above. When the terminal device under test executes the challenge task, the internal program triggers a response signal, which is affected by the circuit layout and other aspects of the terminal device under test. The circuit layout and other aspects of each terminal device have unique characteristics. Correspondingly, the response signal generated by each terminal device executing the challenge task also has unique characteristics. The response signals generated by different tested terminal devices for the same challenge task have clearly distinguishable differences, and the response signals generated by the same tested terminal device for different challenge tasks also have clearly distinguishable differences. The response signals generated by the same tested terminal device for the same challenge task are basically the same, and even if there are differences, the differences are within the acceptable error range. In some examples, the response signal in the above embodiment may include an electromagnetic signal.

The sensor of the terminal device under test can collect the response signal, and the target detection application can obtain the response signal from the sensor so as to further process the response signal.

In step S103, the target detection application compares the response signal corresponding to the first type of task with the response signal corresponding to the second type of task, and determines whether the terminal device under test is a real physical terminal device or a virtual terminal device based on the comparison result.

The response signal can reflect the physical unclonable function. The response signal includes information that can reflect the characteristics of the physical unclonable function, and also includes other information in addition to the information that reflects the characteristics of the physical unclonable function. The difference between the response signals generated by the real physical terminal device and the virtual terminal device is mainly reflected in the difference in the characteristics of the physical unclonable function reflected by the response signal. In the embodiment of the present invention, the real physical terminal device and the virtual terminal device can be judged by the unclonable uniqueness of the characteristics of the physical unclonable function reflected by the response signal.

In some examples, in the process of comparing the response signals corresponding to the first type of tasks with the response signals corresponding to the second type of tasks, the response signals may first be subjected to a general denoising process to eliminate the influence of background noise on the characteristics of the physical non-clonable function embodied by the response signals.

The physical unclonable function utilizes the inherent differences of real physical terminal devices to make the real physical terminal devices produce unique outputs that cannot be cloned for the challenge task. The physical unclonable function is based on the unique physical changes that occur naturally during the manufacturing process of real physical devices in the real physical terminal devices. Therefore, it is almost technically difficult to forge or clone the physical unclonable function of the real physical terminal device. The response signal generated by the same real physical terminal device executing the same challenge task reflects the same characteristics of the physical unclonable function, that is, the difference between the characteristics of the physical unclonable function reflected by the response signal generated by the same real physical terminal device executing the same challenge task is very small and within the acceptable error range. The characteristics of the physical unclonable function embodied by the response signals generated by the same real physical terminal device when executing different challenge tasks are inconsistent, that is, the differences between the characteristics of the physical unclonable function embodied by the response signals generated by the same real physical terminal device when executing the same challenge task are large and are not within the acceptable error range. The regularity of the characteristics of the physical unclonable function reflected by the response signals generated by the virtual terminal device when executing the same challenge task and different challenge tasks is different from the regularity of the characteristics of the physical unclonable function reflected by the response signals generated by the real physical terminal device when executing the same challenge task and different challenge tasks. The virtual terminal device cannot simulate the characteristics of the physical unclonable function reflected by the response signals generated by the real physical terminal when executing the challenge task. Through the response signals corresponding to the first type of tasks and the response signals corresponding to the second type of tasks, it can be determined whether the terminal device under test is a real physical terminal device or a virtual terminal device.

In the embodiment of the present invention, the terminal device under test can execute more than three pre-generated challenge tasks, wherein the more than three challenge tasks include the same challenge tasks, i.e., first-type tasks, and challenge tasks different from the first-type tasks, i.e., second-type tasks. The terminal device under test is determined to be a real physical terminal device or a virtual terminal device based on the comparison of response signals generated by the terminal device under test executing the first-type tasks and the second-type tasks collected by the sensor of the terminal device under test. The physical unclonable function can make the real physical terminal device produce a unique output that cannot be cloned for the challenge task, and the response signal can reflect the characteristics of the physical unclonable function. The characteristics of the physical unclonable function reflected by the response signals generated by the real physical terminal device when executing the same challenge task and different challenge tasks have certain regularities, while the characteristics of the physical unclonable function reflected by the response signals generated by the virtual terminal device when executing the same challenge task and different challenge tasks are difficult to have regularities or the regularities are different from those of the virtual terminal device. The real physical terminal device is different. Moreover, the third party simulating the virtual terminal device cannot know the content of the challenge task and the time when the virtual terminal device executes the challenge task. It is also impossible to simulate the characteristics of the physical unclonable function reflected by the response signal generated by the real physical terminal device executing the same challenge task and different challenge tasks. Therefore, it can accurately determine whether the terminal device under test is a real physical terminal device or a virtual terminal device based on the response signal, and realize the distinction between real physical terminal devices and virtual terminal devices.

In some embodiments, the response signal may include irrelevant information, which is used to express the characteristics of the physical unclonable function, and can be based on the difference between the irrelevant information corresponding to the first type of task, and the difference between the irrelevant information corresponding to the first type of task and the irrelevant information corresponding to the second type of task, to distinguish between the real physical terminal device and the virtual terminal device. FIG2 is a flow chart of a method for detecting the authenticity of a terminal device provided by another embodiment of the first aspect of the present invention. The difference between FIG2 and FIG1 is that step S103 in FIG1 can be specifically refined into steps S1031 to S1034 in FIG2.

In step S1031, the common characteristic factors affecting the sensor are obtained.

The common characteristic factors of the sensors include the common characteristic factors that may affect this type of sensor. For example, if the sensor includes a magnetic sensor, the common characteristic factors of the sensor may include the geographical location of the terminal device under test; if the sensor includes a voice sensor, the common characteristic factors of the sensor may include the content of the voice sentence input into the terminal device under test; if the sensor includes a gravity sensor and/or a gyroscope, the common characteristic factors of the sensor may include the posture information of the terminal device under test, etc.

The response signal collected by the sensor contains information affected by the common characteristic factors of the sensor. This information is part of the response signal. The common characteristic factors are not unique to each sensor. The part of the response signal affected by the common characteristics has little effect on distinguishing between real physical terminal devices and virtual terminal devices.

In step S1032, the response signal is separated based on the common characteristic factors to obtain relevant information and irrelevant information.

The correlation information is calculated based on the common characteristic factors. The correlation information reflects the influence of the common characteristic factors on a type of sensor. The correlation information can be calculated based on the common characteristic factors, and the correlation information can be separated from the response signal. The remaining part of the response signal is the irrelevant information. For example, if the sensor includes a magnetic sensor, and the common characteristic factors include the geographical location, the geomagnetic information of the tested terminal device at the geographical location can be calculated based on the geographical location of the tested terminal device. The calculated geomagnetic information can be determined as the correlation information, and the geomagnetic information can be separated from the response signal. The remaining part of the response signal is the irrelevant information.

The characteristic of relevant information is linear. The characteristic of irrelevant information is nonlinear. Relevant information can reflect the unique characteristics of the sensor itself, thereby reflecting the unique characteristics of the terminal device under test. Relevant information can also include two parts. One part is the nonlinear characteristic information generated by the slight difference of the sensor itself, and the other part is the nonlinear characteristic information in the response signal collected by the sensor due to the random noise in the input of the terminal device under test when performing the challenge task. Relevant information is used to express the characteristics of the physical non-clonable function. Relevant information cannot be simulated by modeling simulation means.

In some examples, before step S1031, the response signal may be subjected to general denoising to obtain a response signal subjected to general denoising. General denoising may be used to remove background noise. In some examples, a differential signal may be used to remove background noise in the response signal. In step S1032, the response signal subjected to denoising may be separated to obtain relevant information and irrelevant information.

In step S1033, the non-relevant information corresponding to the first type of tasks is compared, and the non-relevant information corresponding to the first type of tasks and the non-relevant information corresponding to the second type of tasks are compared to obtain a comparison result.

Irrelevant information can express the characteristics of physical unclonable functions. The irrelevant information in the response signals generated by the real physical terminal device executing the same challenge task is consistent, and the irrelevant information in the response signals generated by executing different challenge tasks is inconsistent. Therefore, by comparing the irrelevant information corresponding to the first type of task, and comparing the irrelevant information corresponding to the first type of task with the irrelevant information corresponding to the second type of task, the comparison results that can judge the authenticity of the terminal device under test can be obtained. The comparison results can indicate whether the irrelevant information corresponding to the first type of task is consistent, and whether the irrelevant information corresponding to the first type of task is consistent with the irrelevant information corresponding to the second type of task.

In step S1034, based on the comparison result, it is determined whether the terminal device under test is a real physical terminal device or a virtual terminal device.

When the difference between the non-relevant information corresponding to the first type of task is within the preset error range, and the difference between the non-relevant information corresponding to the second type of task and the non-relevant information corresponding to the first type of task is outside the preset error range, it is determined that the terminal device under test is a real physical terminal device.

The default error range is the acceptable error range for judging the consistency of irrelevant information. Its value can be set according to the scene, demand, experience, etc., and is not limited here. If the difference between the irrelevant information in the response signals corresponding to any two challenge tasks is within the default error range, it can be considered that the irrelevant information in the response signals corresponding to the two challenge tasks is consistent. Similarly, if the difference between the irrelevant information in the response signals corresponding to any two challenge tasks is outside the default error range, it can be considered that the irrelevant information in the response signals corresponding to the two challenge tasks is inconsistent.

The non-correlated information in the response signal generated by the same real physical terminal device executing the same challenge task is consistent, and the non-correlated information in the response signal generated by the same real physical terminal device executing different challenge tasks is inconsistent. Therefore, if the difference between the non-correlated information corresponding to the first type of task is within the preset error range, and the difference between the non-correlated information corresponding to the second type of task and the non-correlated information corresponding to the first type of task is outside the preset error range, it can be determined that the terminal device under test meets the characteristics of a real physical terminal device, and the terminal device under test is a real physical terminal device.

When the difference between the irrelevant information corresponding to the first type of task is outside the preset error range, and/or the difference between the irrelevant information corresponding to the second type of task and the irrelevant information corresponding to the first type of task is within the preset error range, the terminal device under test is determined to be a virtual terminal device.

The difference between the non-correlated information corresponding to the first type of task is outside the preset error range, indicating that the non-correlated information in the response signal generated by the tested terminal executing the same challenge task is inconsistent. The difference between the non-correlated information corresponding to the second type of task and the non-correlated information corresponding to the first type of task is within the preset error range, indicating that the non-correlated information in the response signal generated by the tested terminal executing different challenge tasks is consistent. If at least one of the above two situations occurs, it can be determined that the tested terminal device does not meet the characteristics of a real physical terminal device, the tested terminal device is a virtual terminal device, and the operation of the tested terminal device may be a data injection attack or other abnormal behavior.

For example, the terminal device under test executes challenge task C1, challenge task C2, and challenge task C3 respectively, wherein the task contents of challenge task C1 and challenge task C2 are the same, and the task contents of challenge task C3 and challenge task C2 are different. The irrelevant information in the response signal generated by the terminal device under test executing challenge task C1 collected by the sensor is R1, the irrelevant information in the response signal generated by the terminal device under test executing challenge task C2 collected by the sensor is R2, and the irrelevant information in the response signal generated by the terminal device under test executing challenge task C3 collected by the sensor is R3. If the difference between the irrelevant information R1 and the irrelevant information R2 is within the preset error range, and the difference between the irrelevant information R2 and the irrelevant information R3 is outside the preset error range, it can be determined that the terminal device under test is a real physical terminal device. If the difference between the irrelevant information R1 and the irrelevant information R2 is outside the preset error range, and/or the difference between the irrelevant information R2 and the irrelevant information R3 is within the preset error range, it can be determined that the terminal device under test is a virtual terminal device.

In some embodiments, when multiple tested terminal devices are virtual terminal devices, it can be further determined whether the multiple virtual terminal devices are simulated by the same cloud platform, so as to take corresponding security protection measures. When multiple tested terminal devices are determined to be virtual terminal devices within a preset time period, the characteristics of the physical unclonable function of the multiple tested terminal devices are obtained through the target detection application according to the response signals corresponding to more than three challenge tasks executed by each tested terminal device; if the difference between the characteristics of the physical unclonable function of the multiple tested terminal devices is within the preset characteristic error range, it is determined that the multiple tested terminal devices are simulated based on the same cloud platform.

When multiple virtual terminal devices are discovered, they may belong to the same cloud terminal device pool, and the virtual terminal devices in the cloud terminal device pool are generated based on the same cloud platform. The same cloud platform simulates and generates a large number of virtual terminal devices, which may lead to the risk of using a large number of virtual terminal devices to carry out abnormal attacks. Identifying virtual terminal devices generated by the same cloud platform can facilitate the subsequent monitoring of the services of virtual terminal devices generated by the same cloud platform. The characteristics of the physical unclonable function of the virtual terminal devices simulated by the same cloud platform are very similar. The characteristics of the physical unclonable function that can characterize the characteristics of the virtual terminal devices themselves can be obtained based on the response signals obtained when the virtual terminal devices execute the challenge tasks. If the characteristics of the physical unclonable functions of multiple virtual terminal devices are consistent, it can be determined that the multiple virtual terminal devices are simulated based on the same cloud platform. The consistency of the characteristics of the physical unclonable function may include the situation where the characteristics of the physical unclonable function are similar and the situation where the characteristics of the physical unclonable function are the same. The default feature error range is the acceptable error range for judging the consistency of the characteristics of the physical unclonable function. Its value can be set according to the scenario, requirements, experience, etc., and is not limited here. The differences between the characteristics of the physical unclonable functions of multiple virtual terminal devices are within the preset characteristic error range, indicating that the characteristics of the physical unclonable functions of multiple virtual terminal devices are consistent.

In some examples, when the authenticity detection method of the terminal device is independently executed by the terminal device under test, the terminal device under test may include functional modules such as a challenge task generation module, an information collection module, and a data processing module. FIG3 is a schematic diagram of an example of the terminal device authenticity detection method provided by an embodiment of the present invention applied to the terminal device under test. As shown in FIG3, the terminal device under test 20 may include a challenge task generation module 21, an information collection module 22, and a data processing module 23. The functions of the challenge task generation module 21, the information collection module 22, and the data processing module 23 may be integrated in the target detection application 24. The terminal device under test 20 may also include a sensor 25, a central processing unit, a memory, and other chips 26. The information collection module 22 can communicate and interact with the challenge task generation module 21, the data processing module 23, the sensor 25, the central processing unit and the memory chip 26. The challenge task generation module 21 is used to generate the challenge task and transmit the challenge task number to the information collection module 22; the central processing unit and memory chips 26 can be used to execute the challenge task under the triggering of the information collection module 22; the sensor 25 can be used to collect the response signal; the information collection module 22 can be used to initiate the challenge task to the central processing unit and memory chips 26, obtain the response signal from the sensor 25 and transmit the response signal to the data processing module 23; the data processing module 23 can be used to distinguish the real physical terminal device and the virtual terminal device according to the response signal.

The authenticity detection method of the terminal device can be implemented by the interaction between the terminal device under test and the background server. The second aspect of the present invention provides a terminal device authenticity detection method, which is applied to the terminal device under test that interacts with the background server. The terminal device under test has a sensor and a target detection application. FIG4 is a flow chart of the authenticity detection method of the terminal device provided by an embodiment of the second aspect of the present invention. As shown in FIG4, the authenticity detection method of the terminal device may include steps S301 to S303.

In step S301, three or more challenge tasks generated and sent by the background server of the target detection application are received.

The background server generates more than three challenge tasks and sends them to the terminal device under test. The more than three challenge tasks include first-category tasks and second-category tasks. The first-category tasks include at least two identical challenge tasks. The second-category tasks include challenge tasks different from the first-category tasks.

In step S302, the target detection application triggers the terminal device under test to execute more than three challenge tasks, and obtains the response signal corresponding to the challenge task generated by the terminal device under test collected by the sensor.

In step S303, a response signal is sent to the background server, so that the background server compares the response signal corresponding to the first type of task with the response signal corresponding to the second type of task, and determines whether the terminal device under test is a real physical terminal device or a virtual terminal device according to the comparison result.

Compared with the method for detecting the authenticity of the terminal device in the first embodiment, the method for detecting the authenticity of the terminal device in the second embodiment of the present invention is to hand over some steps originally executed by the terminal device under test in the first embodiment to the background server for execution. Except for the execution body, the details of the steps are basically the same. The specific contents of the above steps S301 to S303 can refer to the relevant descriptions in the above embodiments, and will not be repeated here.

In an embodiment of the present invention, the background server can generate more than three challenge tasks, and the terminal device under test can execute the three or more challenge tasks. The three or more challenge tasks include the same challenge tasks, i.e., first-category tasks, and challenge tasks different from the first-category tasks, i.e., second-category tasks. The terminal device under test can send a response signal generated by the terminal device under test executing the challenge task collected by the sensor to the background server, and the background server determines whether the terminal device under test is a real physical terminal device or a virtual terminal device based on the response signal. The physical unclonable function can make the real physical terminal device produce a unique output that cannot be cloned for the challenge task, and the response signal can reflect the characteristics of the physical unclonable function. The characteristics of the physical unclonable function reflected by the response signals generated by the real physical terminal device when executing the same challenge task and different challenge tasks have certain regularities, while the characteristics of the physical unclonable function reflected by the response signals generated by the virtual terminal device when executing the same challenge task and different challenge tasks are difficult to have regularities or the regularities are different from those of the real physical terminal device. Moreover, the third party simulating the virtual terminal device cannot know the content of the challenge task and the time when the virtual terminal device executes the challenge task, nor can it simulate the characteristics of the physical unclonable function reflected by the response signals generated by the real physical terminal device executing the same challenge task and different challenge tasks. Therefore, it can accurately determine whether the terminal device under test is a real physical terminal device or a virtual terminal device based on the response signal, realize the distinction between real physical terminal devices and virtual terminal devices, and also improve the anti-attack ability of the terminal device authenticity detection method.

In some examples, the response signal includes non-correlated information, and the non-correlated information is used to express the characteristics of the physical unclonable function. When the difference between the non-correlated information corresponding to the first type of task is within a preset error range, and the difference between the non-correlated information corresponding to the second type of task and the non-correlated information corresponding to the first type of task is outside the preset error range, the terminal device under test is a real physical terminal device. When the difference between the non-correlated information corresponding to the first type of task is outside the preset error range, and/or the difference between the non-correlated information corresponding to the second type of task and the non-correlated information corresponding to the first type of task is within the preset error range, the terminal device under test is a virtual terminal device. For the specific content, please refer to the relevant description in the above embodiment, which will not be elaborated here.

In some examples, the response signal is separated into relevant information and irrelevant information by the background server, and the relevant information is calculated by the background server based on the common characteristic factors of the sensors. For the specific content, please refer to the relevant description in the above embodiment, which will not be repeated here.

In some examples, the response signal separated into relevant information and irrelevant information is the response signal after general denoising processing by the background server. For the specific content, please refer to the relevant description in the above embodiment, which will not be repeated here.

In some examples, when it is determined that multiple terminal devices under test are virtual terminal devices, if the difference between the characteristics of the physical unclonable function of the multiple terminal devices under test is within the preset characteristic error range, the multiple terminal devices under test are simulated based on the same cloud platform, and the characteristics of the physical unclonable function are obtained by the background server according to the response signals corresponding to more than three challenge tasks executed by the multiple terminal devices under test. For the specific content, please refer to the relevant description in the above embodiment, which will not be repeated here.

The authenticity detection method of the terminal device can be implemented by the interaction between the terminal device under test and the background server. The third aspect of the present invention provides a terminal device authenticity detection method, which is applied to the background server interacting with the terminal device under test, and the background server is the background server for target detection application in the terminal device under test. Figure 5 is a flow chart of the authenticity detection method of the terminal device provided by an embodiment of the third aspect of the present invention. As shown in Figure 5, the authenticity detection method of the terminal device may include steps S401 to S403.

In step S401, more than three challenge tasks are generated and sent to the terminal device under test.

The three or more challenge tasks include first-category tasks and second-category tasks. The first-category tasks include at least two identical challenge tasks. The second-category tasks include challenge tasks that are different from the first-category tasks.

In step S402, a response signal sent by the terminal device under test is received.

The response signal is collected by the sensor when the target detection application triggers the terminal device under test to perform more than three challenging tasks.

In step S403, the response signal corresponding to the first type of task is compared with the response signal corresponding to the second type of task, and the terminal device under test is determined to be a real physical terminal device or a virtual terminal device according to the comparison result.

Compared with the method for detecting the authenticity of the terminal device in the first embodiment, the method for detecting the authenticity of the terminal device in the third embodiment of the present invention is that the background server executes some steps of the first embodiment that were originally executed by the terminal device under test. Except for the different execution subjects, the details of the steps are basically the same. The specific contents of the above steps S401 to S403 can refer to the relevant descriptions in the above embodiments, and will not be repeated here.

In an embodiment of the present invention, the background server can generate more than three challenge tasks, and the terminal device under test can execute the three or more challenge tasks. The three or more challenge tasks include the same challenge tasks, i.e., first-category tasks, and challenge tasks different from the first-category tasks, i.e., second-category tasks. The terminal device under test can send a response signal generated by the terminal device under test executing the challenge task collected by the sensor to the background server, and the background server determines whether the terminal device under test is a real physical terminal device or a virtual terminal device based on the response signal. The physical unclonable function can make the real physical terminal device produce a unique output that cannot be cloned for the challenge task, and the response signal can reflect the characteristics of the physical unclonable function. The characteristics of the physical unclonable function reflected by the response signals generated by the real physical terminal device when executing the same challenge task and different challenge tasks have certain regularities, while the characteristics of the physical unclonable function reflected by the response signals generated by the virtual terminal device when executing the same challenge task and different challenge tasks are difficult to have regularities or the regularities are different from those of the real physical terminal device. Moreover, the third party simulating the virtual terminal device cannot know the content of the challenge task and the time when the virtual terminal device executes the challenge task, nor can it simulate the characteristics of the physical unclonable function reflected by the response signal generated by the real physical terminal device executing the same challenge task and different challenge tasks. Therefore, it can accurately determine whether the terminal device under test is a real physical terminal device or a virtual terminal device based on the response signal, realize the distinction between real physical terminal devices and virtual terminal devices, and also improve the anti-attack ability of the terminal device authenticity detection method.

In some embodiments, the response signal includes irrelevant information, and the irrelevant information is used to express the characteristics of the physical unclonable function. Based on the difference between the irrelevant information in the response signal corresponding to the first type of task, and the difference between the irrelevant information in the response signal corresponding to the first type of task and the irrelevant information in the response signal corresponding to the second type of task, the real physical terminal device and the virtual terminal device can be distinguished. FIG6 is a flow chart of a method for detecting the authenticity of a terminal device provided by another embodiment of the third aspect of the present invention. The difference between FIG6 and FIG5 is that step S403 in FIG5 can be specifically refined into steps S4031 to S4034 in FIG6.

In step S4031, the common characteristic factors affecting the sensors are obtained.

In step S4032, the response signal is separated based on the common characteristic factors to obtain relevant information and irrelevant information.

The correlation information is calculated based on the shared characteristic factors.

In some examples, before step S4032, the response signal may be subjected to general denoising to obtain a response signal subjected to general denoising. Correspondingly, in step S4032, the response signal subjected to general denoising may be separated according to common characteristic factors to obtain relevant information and irrelevant information.

In step S4033, the non-relevant information corresponding to the first type of tasks is compared, and the non-relevant information corresponding to the first type of tasks and the non-relevant information corresponding to the second type of tasks are compared to obtain a comparison result.

In step S4034, based on the comparison result, it is determined whether the terminal device under test is a real physical terminal device or a virtual terminal device.

When the difference between the non-relevant information corresponding to the first type of task is within the preset error range, and the difference between the non-relevant information corresponding to the second type of task and the non-relevant information corresponding to the first type of task is outside the preset error range, it is determined that the terminal device under test is a real physical terminal device.

When the difference between the irrelevant information corresponding to the first type of task is outside the preset error range, and/or the difference between the irrelevant information corresponding to the second type of task and the irrelevant information corresponding to the first type of task is within the preset error range, the terminal device under test is determined to be a virtual terminal device.

The specific contents of the above steps S4031 to S4034 can be found in the relevant descriptions in the above embodiments, and will not be elaborated here.

In some embodiments, the backend server can also obtain the characteristics of the physical unclonable functions of the multiple tested terminal devices according to the response signals corresponding to more than three challenge tasks executed by each tested terminal device when it is determined that the multiple tested terminal devices are virtual terminal devices; if the difference between the characteristics of the physical unclonable functions of the multiple tested terminal devices is within the preset characteristic error range, it is determined that the multiple tested terminal devices are simulated based on the same cloud platform. For the specific content, please refer to the relevant description in the above embodiment, which will not be repeated here.

In some examples, when the authenticity detection method of the terminal device is implemented by the interaction between the terminal device under test and the background server, the terminal device under test may include functional modules such as an information collection module, and the background server may include functional modules such as a challenge task generation module and a data processing module. FIG7 is a schematic diagram of an example of the architecture of a terminal device authenticity detection method provided by an embodiment of the present invention applied to a terminal device under test and a background server. As shown in FIG7 , the terminal device under test 51 may include an information collection module 511, which may be integrated in a target detection application 512. The terminal device under test 51 may also include a sensor 513, a central processing unit, a memory and other chips 514; the background server 52 of the target detection application 512 may include a challenge task generation module 521 and a data processing module 522. The background server 52 may be a cloud server, and the background server 52 may communicate with the terminal device under test 51 via a cloud application service 53. The information collection module 511 can communicate and interact with the challenge task generation module 521, the data processing module 522, the sensor 513, and the central processing unit and memory chip 514. The terminal device 51 under test can make a detection request to the background server 52 through the cloud application service 53; the challenge task generation module 521 is used to generate a challenge task and transmit the challenge task number to the information collection module 511; the central processing unit and the memory chip 514 can be used to execute the challenge task under the triggering of the information collection module 511; the sensor 513 can be used to collect the response signal; the information collection module 511 can be used to initiate the challenge task to the central processing unit and the memory chip 514, obtain the response signal from the sensor 513 and transmit the response signal to the data processing module 522; the data processing module 522 can be used to distinguish the real physical terminal device and the virtual terminal device according to the response signal.

For ease of understanding, an example is used here to illustrate the authenticity detection process of the terminal device under test implemented by the interaction between the terminal device under test and the background server. FIG8 is a flowchart of an example of the authenticity detection process of the terminal device provided by the embodiment of the present invention. As shown in FIG8, the terminal device under test includes an execution part and an information collection module. The execution part mainly includes sensors, central processing units, and memory for executing challenge tasks; the background server includes a challenge task generation module and a data processing module. The authenticity detection process of the terminal device may include steps a1 to a8.

Step a1, the challenge task generation module randomly generates challenge tasks C1, C2 and C3, and transmits challenge tasks C1, C2 and C3 to the information collection module.

Challenge Mission C1 is the same as Challenge Mission C2, but Challenge Mission C3 is different from Challenge Mission C2.

In step a2, the information collection module takes challenge tasks C1, C2, C3 and random noise as input to trigger the execution part to execute challenge tasks C1, C2 and C3.

Step a3, the execution part collects the response signals generated by executing the challenge tasks C1, C2 and C3, and transmits the response signals to the information collection module.

Step a4, the information collection module sends the response signal to the data processing module.

Step a5: The data processing module dynamically calculates the response signal and removes background noise.

Step a6, the data processing module separates the response signal to obtain the relevant part and the irrelevant part, thereby obtaining the irrelevant information R1, R2 and R3.

The irrelevant part is irrelevant information. The irrelevant information R1 corresponds to the challenge task C1, the irrelevant information R2 corresponds to the challenge task C2, and the irrelevant information R3 corresponds to the challenge task C3.

Step a7, the data processing module compares the non-correlated information R1, R2 and R3, determines whether R1=R2≠R3 is satisfied, and obtains the detection result of the terminal device under test.

R1=R2 means that the difference between irrelevant information R1 and irrelevant information R2 is within the preset error range, and R2≠R3 means that the difference between irrelevant information R2 and irrelevant information R3 is outside the preset error range. The test results can indicate whether the tested terminal device is a real physical terminal device or a virtual terminal device.

Step a8, the data processing module sends the detection results to the information collection module.

The specific contents of the above steps a1 to a8 can be found in the relevant descriptions in the above embodiments, and will not be elaborated here.

The fourth aspect of the present invention provides a terminal device authenticity detection device, which corresponds to the terminal device authenticity detection method provided in the first aspect of the present invention and can be applied to the terminal device under test. The terminal device under test has a sensor and a target detection application. FIG9 is a structural schematic diagram of the terminal device authenticity detection device provided in an embodiment of the fourth aspect of the present invention. As shown in FIG9, the terminal device authenticity detection device 600 may include a challenge task generation module 601, an information collection module 602 and a data processing module 603.

The challenge task generation module 601 can be used to generate more than three challenge tasks, wherein the more than three challenge tasks include first-category tasks and second-category tasks, wherein the first-category tasks include at least two identical challenge tasks, and the second-category tasks include challenge tasks different from the first-category tasks.

The information collection module 602 can be used to trigger the terminal device under test to execute more than three challenge tasks, and obtain the response signal corresponding to the challenge task generated by the terminal device under test collected by the sensor.

The data processing module 603 can be used to compare the response signal corresponding to the first type of task with the response signal corresponding to the second type of task, and determine whether the terminal device under test is a real physical terminal device or a virtual terminal device based on the comparison result.

In an embodiment of the present invention, the terminal device under test can execute more than three pre-generated challenge tasks, wherein the more than three challenge tasks include the same challenge tasks, i.e., first-category tasks, and challenge tasks different from the first-category tasks, i.e., second-category tasks. The terminal device under test is determined to be a real physical terminal device or a virtual terminal device based on a comparison of response signals generated by the terminal device under test executing the first-category tasks and the second-category tasks, which are collected by the sensor of the terminal device under test. The physical unclonable function can make the real physical terminal device produce a unique output that cannot be cloned for the challenge task, and the response signal can reflect the characteristics of the physical unclonable function. The characteristics of the physical unclonable function reflected by the response signals generated by the real physical terminal device when executing the same challenge task and different challenge tasks have certain regularities, while the characteristics of the physical unclonable function reflected by the response signals generated by the virtual terminal device when executing the same challenge task and different challenge tasks are difficult to have regularities or the regularities are different from those of the real physical terminal device. Moreover, the third party simulating the virtual terminal device cannot know the content of the challenge task and the time when the virtual terminal device executes the challenge task, nor can it simulate the characteristics of the physical unclonable function reflected by the response signal generated by the real physical terminal device executing the same challenge task and different challenge tasks. Therefore, it can accurately determine whether the terminal device under test is a real physical terminal device or a virtual terminal device based on the response signal, realize the distinction between real physical terminal devices and virtual terminal devices, and also improve the anti-attack ability of the terminal device authenticity detection method.

In some examples, the response signal includes irrelevant information, and the irrelevant information is used to express the characteristics of the physical unclonable function. When the difference between the irrelevant information corresponding to the first type of task is within the preset error range, and the difference between the irrelevant information corresponding to the second type of task and the irrelevant information corresponding to the first type of task is outside the preset error range, the terminal device under test is a real physical terminal device; when the difference between the irrelevant information corresponding to the first type of task is outside the preset error range, and/or the difference between the irrelevant information corresponding to the second type of task and the irrelevant information corresponding to the first type of task is within the preset error range, the terminal device under test is a virtual terminal device.

In some examples, the data processing module 603 can be specifically used to: obtain common characteristic factors affecting the sensor; separate the response signal according to the common characteristic factors to obtain relevant information and irrelevant information, the relevant information is calculated according to the common characteristic factors, and the irrelevant information is used to express the characteristics of the physical unclonable function; compare the irrelevant information corresponding to the first type of task, and compare the irrelevant information corresponding to the first type of task with the irrelevant information corresponding to the second type of task to obtain a comparison result; determine whether the terminal device under test is a real physical terminal device or a virtual terminal device according to the comparison result.

In some examples, the data processing module 603 can also be used to: before separating the response signal to obtain relevant information and irrelevant information based on the common characteristic factors, perform universal denoising on the response signal to obtain a response signal after universal denoising.

In some embodiments, the data processing module 603 can also be used to: when it is determined that multiple terminal devices under test are virtual terminal devices, obtain the characteristics of the physical unclonable function of the multiple terminal devices under test according to the response signals corresponding to more than three challenge tasks executed by each terminal device under test; if the difference between the characteristics of the physical unclonable function of the multiple terminal devices under test is within the preset characteristic error range, determine that the multiple terminal devices under test are simulated based on the same cloud platform.

The fifth aspect of the present invention provides a terminal device authenticity detection device, which corresponds to the terminal device authenticity detection method provided in the second aspect of the present invention and can be applied to the terminal device under test. The terminal device under test has a sensor and a target detection application. FIG10 is a structural schematic diagram of the terminal device authenticity detection device provided in an embodiment of the fifth aspect of the present invention. As shown in FIG10, the terminal device authenticity detection device 700 may include a receiving module 701, an information collection module 702 and a sending module 703.

The receiving module 701 can be used to receive more than three challenge tasks generated and sent by the background server of the target detection application. The more than three challenge tasks include first-category tasks and second-category tasks. The first-category tasks include at least two identical challenge tasks, and the second-category tasks include challenge tasks different from the first-category tasks.

The information collection module 702 can be used to trigger the terminal device under test to execute more than three challenge tasks, and obtain the response signal corresponding to the challenge task generated by the terminal device under test collected by the sensor.

The sending module 703 can be used to send a response signal to the background server, so that the background server can compare the response signal corresponding to the first type of task with the response signal corresponding to the second type of task, and determine whether the terminal device under test is a real physical terminal device or a virtual terminal device according to the comparison result.

In the embodiment of the present invention, the background server can generate more than three challenge tasks, and the terminal device under test can execute the three or more challenge tasks. The three or more challenge tasks include the same challenge tasks, i.e., the first type of tasks, and challenge tasks different from the first type of tasks, i.e., the second type of tasks. The terminal device under test can send the response signal generated by the terminal device under test executing the challenge tasks collected by the sensor to the background server, and the background server determines whether the terminal device under test is a real physical terminal device or a virtual terminal device according to the response signal. The physical unclonable function can make the real physical terminal device produce a unique output that cannot be cloned for the challenge task, and the response signal can reflect the characteristics of the physical unclonable function. The characteristics of the physical unclonable function reflected by the response signals generated by the real physical terminal device when executing the same challenge task and different challenge tasks have certain regularities, while the characteristics of the physical unclonable function reflected by the response signals generated by the virtual terminal device when executing the same challenge task and different challenge tasks are difficult to have regularities or the regularities are different from those of the real physical terminal device. Moreover, the third party simulating the virtual terminal device cannot know the content of the challenge task and the time when the virtual terminal device executes the challenge task, nor can it simulate the characteristics of the physical unclonable function reflected by the response signals generated by the real physical terminal device executing the same challenge task and different challenge tasks. Therefore, it can accurately determine whether the terminal device under test is a real physical terminal device or a virtual terminal device based on the response signal, realize the distinction between real physical terminal devices and virtual terminal devices, and also improve the anti-attack ability of the terminal device authenticity detection method.

In some examples, the response signal includes irrelevant information, which is used to express the characteristics of the physical unclonable function. When the difference between the irrelevant information corresponding to the first type of task is within the preset error range, and the difference between the irrelevant information corresponding to the second type of task and the irrelevant information corresponding to the first type of task is outside the preset error range, the terminal device under test is a real physical terminal device. When the difference between the irrelevant information corresponding to the first type of task is outside the preset error range, and/or the difference between the irrelevant information corresponding to the second type of task and the irrelevant information corresponding to the first type of task is within the preset error range, the terminal device under test is a virtual terminal device.

In some examples, the response signal is separated into relevant information and irrelevant information by the background server, the relevant information is calculated by the background server based on the common characteristic factors of the sensors, and the irrelevant information is used to express the characteristics of the physical non-clonable function. The comparison result is obtained by the background server comparing the irrelevant information corresponding to the first type of task, and comparing the irrelevant information corresponding to the first type of task with the irrelevant information corresponding to the second type of task.

In some examples, the response signal separated into relevant information and irrelevant information is the response signal after general denoising processing by the background server.

In some examples, when it is determined that multiple terminal devices under test are virtual terminal devices, if the difference between the characteristics of the physical unclonable function of the multiple terminal devices under test is within the preset characteristic error range, the multiple terminal devices under test are simulated based on the same cloud platform, and the characteristics of the physical unclonable function are obtained by the background server according to the response signals corresponding to more than three challenge tasks executed by the multiple terminal devices under test.

The sixth aspect of the present invention provides a terminal device authenticity detection device, which corresponds to the terminal device authenticity detection method provided in the third aspect of the present invention and can be applied to the background server of the target detection application. FIG11 is a structural schematic diagram of the terminal device authenticity detection device provided in an embodiment of the sixth aspect of the present invention. As shown in FIG11, the terminal device authenticity detection device 800 may include a challenge task generation module 801, a sending module 802, a receiving module 803 and a data processing module 804.

The challenge task generation module 801 can be used to generate more than three challenge tasks, wherein the more than three challenge tasks include first-category tasks and second-category tasks, wherein the first-category tasks include at least two identical challenge tasks, and the second-category tasks include challenge tasks different from the first-category tasks.

The sending module 802 can be used to send more than three challenge tasks to the terminal device under test. The terminal device under test has a sensor and a target detection application.

The receiving module 803 can be used to receive the response signal sent by the terminal device under test. The response signal is collected by the sensor when the target detection application triggers the terminal device under test to perform more than three challenge tasks.

The data processing module 804 can be used to compare the response signal corresponding to the first type of task with the response signal corresponding to the second type of task, and determine whether the terminal device under test is a real physical terminal device or a virtual terminal device based on the comparison result.

In the embodiment of the present invention, the background server can generate more than three challenge tasks, and the terminal device under test can execute the three or more challenge tasks. The three or more challenge tasks include the same challenge tasks, i.e., the first type of tasks, and challenge tasks different from the first type of tasks, i.e., the second type of tasks. The terminal device under test can send the response signal generated by the terminal device under test executing the challenge tasks collected by the sensor to the background server, and the background server determines whether the terminal device under test is a real physical terminal device or a virtual terminal device according to the response signal. The physical unclonable function can make the real physical terminal device produce a unique output that cannot be cloned for the challenge task, and the response signal can reflect the characteristics of the physical unclonable function. The characteristics of the physical unclonable function reflected by the response signals generated by the real physical terminal device when executing the same challenge task and different challenge tasks have certain regularities, while the characteristics of the physical unclonable function reflected by the response signals generated by the virtual terminal device when executing the same challenge task and different challenge tasks are difficult to have regularities or the regularities are different from those of the real physical terminal device. Moreover, the third party simulating the virtual terminal device cannot know the content of the challenge task and the time when the virtual terminal device executes the challenge task, nor can it simulate the characteristics of the physical unclonable function reflected by the response signal generated by the real physical terminal device executing the same challenge task and different challenge tasks. Therefore, it can accurately determine whether the terminal device under test is a real physical terminal device or a virtual terminal device based on the response signal, realize the distinction between real physical terminal devices and virtual terminal devices, and also improve the anti-attack ability of the terminal device authenticity detection method.

In some examples, the response signal includes irrelevant information, and the irrelevant information is used to express the characteristics of the physical unclonable function. When the difference between the irrelevant information corresponding to the first type of task is within the preset error range, and the difference between the irrelevant information corresponding to the second type of task and the irrelevant information corresponding to the first type of task is outside the preset error range, the terminal device under test is a real physical terminal device; when the difference between the irrelevant information corresponding to the first type of task is outside the preset error range, and/or the difference between the irrelevant information corresponding to the second type of task and the irrelevant information corresponding to the first type of task is within the preset error range, the terminal device under test is a virtual terminal device.

In some examples, the data processing module 804 can be specifically used to: obtain common characteristic factors affecting the sensor; separate the response signal according to the common characteristic factors to obtain relevant information and irrelevant information, the relevant information is calculated according to the common characteristic factors, and the irrelevant information is used to express the characteristics of the physical unclonable function; compare the irrelevant information corresponding to the first type of task, and compare the irrelevant information corresponding to the first type of task with the irrelevant information corresponding to the second type of task to obtain a comparison result; determine whether the terminal device under test is a real physical terminal device or a virtual terminal device according to the comparison result.

In some examples, the data processing module 804 can also be used to: before separating the response signal to obtain relevant information and irrelevant information based on the common characteristic factors, perform universal denoising on the response signal to obtain a response signal after universal denoising.

In some embodiments, the data processing module 804 can also be used to: when it is determined that multiple terminal devices under test are virtual terminal devices, obtain the characteristics of the physical unclonable function of the multiple terminal devices under test according to the response signals corresponding to more than three challenge tasks executed by each terminal device under test; if the difference between the characteristics of the physical unclonable function of the multiple terminal devices under test is within the preset characteristic error range, determine that the multiple terminal devices under test are simulated based on the same cloud platform.

The seventh aspect of the present invention also provides a terminal device. FIG12 is a schematic diagram of the structure of the terminal device provided in an embodiment of the seventh aspect of the present invention. As shown in FIG12, the terminal device 900 includes a memory 901, a processor 902, and a computer program stored in the memory 901 and executable on the processor 902.

In some examples, the processor 902 may include a central processing unit (CPU), or an application specific integrated circuit (ASIC), or may be configured to implement one or more integrated circuits of the embodiments of the present invention.

The memory 901 may include a read-only memory (ROM), a random access memory (RAM), a magnetic disk storage medium device, an optical storage medium device, a flash memory device, an electrical, optical or other physical/tangible memory storage device. Therefore, generally, the memory includes one or more tangible (non-transitory) computer-readable storage media (e.g., a memory device) encoded with software including computer-executable instructions, and when the software is executed (e.g., by one or more processors), it is operable to perform the operations described with reference to the method for detecting the authenticity of the terminal device in the embodiment according to the first aspect of the present invention.

The processor 902 runs the computer program corresponding to the executable program code by reading the executable program code stored in the memory 901, so as to implement the method for detecting the authenticity of the terminal device in the first aspect of the embodiment.

In some examples, the terminal device 900 may also include a communication interface 903 and a bus 904. As shown in FIG12 , the memory 901, the processor 902, and the communication interface 903 are connected through the bus 904 and communicate with each other.

The communication interface 903 is mainly used to realize the communication between the modules, devices, units and/or equipment in the embodiment of the present invention. The input device and/or output device can also be connected through the communication interface 903.

The bus 904 includes hardware, software, or both, coupling the components of the terminal device 900 to each other. By way of example and not limitation, bus 904 may include an Accelerated Graphics Port (AGP) or other graphics bus, an Enhanced Industry Standard Architecture (EISA) bus, a Front Side Bus (FSB), a Hyper Transport (HT) interconnect, an Industry Standard Architecture (ISA) bus, an InfiniBand interconnect, a Low Pin Count (LPC) bus, a memory bus, a Micro Channel Architecture (MCA) bus, a Peripheral Component Interconnect (PCI) bus, a Peripheral Component Interconnect Express (PCI) bus, or a 10-bit x86 bus. Express (PCI-E) bus, Serial Advanced Technology Attachment (SATA) bus, Video Electronics Standards Association Local Bus (VLB) bus or other suitable bus or a combination of two or more of the above. Where appropriate, bus 904 may include one or more buses. Although the embodiments of the present invention describe and illustrate specific buses, the present invention contemplates any suitable bus or interconnect.

The eighth aspect of the present invention also provides a terminal device, which includes a memory, a processor, and a computer program stored in the memory and executable on the processor. The memory includes one or more tangible (non-transitory) computer-readable storage media (e.g., a memory device) encoded with software including computer-executable instructions, and when the software is executed (e.g., by one or more processors), it is operable to perform the operations described in the method for detecting the authenticity of the terminal device in the embodiment according to the second aspect of the present invention. The processor runs the computer program corresponding to the executable program code by reading the executable program code stored in the memory, so as to implement the method for detecting the authenticity of the terminal device in the above-mentioned second aspect embodiment.

In some examples, the terminal device may also include a communication interface and a bus. The memory, processor, and communication interface are connected via the bus and communicate with each other.

The connection and entity selection of the memory, processor, communication interface, bus in the terminal device of the eighth aspect of the present invention can be found in the relevant description of the terminal device of the seventh aspect, and will not be elaborated here.

The ninth aspect of the present invention also provides a server, which includes a memory, a processor, and a computer program stored in the memory and executable on the processor. The memory includes one or more tangible (non-transitory) computer-readable storage media (e.g., memory devices) encoded with software including computer-executable instructions, and when the software is executed (e.g., by one or more processors), it can be operated to perform the operations described with reference to the method for detecting the authenticity of the terminal device in the embodiment according to the third aspect of the present invention. The processor runs the computer program corresponding to the executable program code by reading the executable program code stored in the memory, so as to implement the method for detecting the authenticity of the terminal device in the above-mentioned third aspect embodiment.

In some examples, the server may also include a communication interface and a bus. The memory, processor, and communication interface are connected via the bus and communicate with each other.

The memory, processor, communication interface, bus connection and entity selection in the server of the ninth aspect of the present invention can be found in the relevant description of the terminal device of the seventh aspect, and will not be elaborated here.

The tenth aspect of the present invention provides a terminal device authenticity detection system. FIG13 is a schematic diagram of the structure of the terminal device authenticity detection system provided by the tenth aspect of the present invention. As shown in FIG13, the terminal device authenticity detection system includes the terminal device 1001 in the eighth aspect embodiment and the server 1002 in the ninth aspect embodiment. The specific contents of the terminal device 1001 and the server 1002 can refer to the relevant descriptions in the above embodiments, and can achieve the same technical effects. To avoid repetition, they will not be repeated here.

The eleventh aspect of the present invention also provides a computer-readable storage medium, on which a computer program instruction is stored. When the computer program instruction is executed by the processor, the terminal device authenticity detection method in the first aspect embodiment, the terminal device authenticity detection method in the second aspect embodiment, or the terminal device authenticity detection method in the third aspect embodiment can be implemented, and the same technical effect can be achieved. To avoid repetition, it is not repeated here. Among them, the above-mentioned computer-readable storage medium may include a non-transient computer-readable storage medium, such as a read-only memory (ROM), a random access memory (RAM), a disk or an optical disk, etc., which is not limited here.

The embodiment of the present invention also provides a computer program product. When the instructions in the computer program product are executed by the processor of the electronic device, the electronic device can execute the terminal device authenticity detection method in the first embodiment, the terminal device authenticity detection method in the second embodiment, or the terminal device authenticity detection method in the third embodiment, and can achieve the same technical effect. To avoid repetition, it will not be repeated here.

It should be made clear that each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can refer to each other, and each embodiment focuses on the differences from other embodiments. For the device embodiment, terminal device embodiment, server embodiment, system embodiment, computer-readable storage medium embodiment, and computer program product embodiment, the relevant parts can refer to the description part of the method embodiment, and the method embodiments can also refer to each other. The present invention is not limited to the specific steps and structures described above and shown in the figures. After understanding the spirit of the present invention, technical personnel in this field can make various changes, modifications and additions, or change the order between the steps. In addition, for the sake of brevity, a detailed description of known method technologies is omitted here.

Aspects of the present invention are described above with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems) and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and/or block diagrams, and combinations of blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device to produce a machine that enables processing via the computer or other programmable data processing device. It may be programmed that the instructions executed by the processor of the data processing device enable implementation of the functions/actions specified in one or more blocks of the flowchart and/or block diagram. Such a processor may be, but is not limited to, a general-purpose processor, a special-purpose processor, a special application processor, or a field-programmable logic circuit. It is also understood that each box in the block diagram and/or flowchart and the combination of boxes in the block diagram and/or flowchart can also be implemented by dedicated hardware that performs the specified function or action, or can be implemented by a combination of dedicated hardware and computer instructions.

Those skilled in the art should understand that the above embodiments are exemplary and not restrictive. Different technical features appearing in different embodiments can be combined to achieve beneficial effects. Based on the study of the drawings, the specification and the scope of the patent application, those skilled in the art should be able to understand and implement other variations of the disclosed embodiments. In the scope of the patent application, the term "including" does not exclude other devices or steps; the quantifier "one" does not exclude multiple; the terms "first" and "second" are used to identify names rather than to indicate any specific order. Any diagrammatic marks in the claims should not be construed as limiting the scope of protection. The functions of multiple parts appearing in the claims can be implemented by a single hardware or software module. The appearance of certain technical features in different subordinate claims does not mean that these technical features cannot be combined to achieve beneficial effects.

S101, S102, S103: Steps

Claims (23)

A method for detecting the authenticity of a terminal device, characterized in that it is applied to a terminal device under test, the terminal device under test having a sensor and a target detection application, and the method comprises: the terminal device under test generates three or more challenge tasks through the target detection application, the three or more challenge tasks include a first category of tasks and a second category of tasks, the first category of tasks includes at least two identical challenge tasks, and the second category of tasks includes challenge tasks different from the first category of tasks; the terminal device under test generates three or more challenge tasks through the target detection application, the three or more challenge tasks include a first category of tasks and a second category of tasks; the first category of tasks includes at least two identical challenge tasks, and the second category of tasks includes challenge tasks different from the first category of tasks; The terminal device triggers the terminal device under test to execute the three or more challenge tasks through the target detection application, and obtains the response signal corresponding to the challenge task generated by the terminal device under test collected by the sensor; the terminal device under test compares the response signal corresponding to the first type of task with the response signal corresponding to the second type of task through the target detection application, and determines whether the terminal device under test is a real physical terminal device or a virtual terminal device according to the comparison result. A method as described in claim 1, wherein the response signal includes irrelevant information, the irrelevant information is used to express the characteristics of a physical unclonable function; the difference between the irrelevant information corresponding to the first type of task is within a preset error range, and the difference between the irrelevant information corresponding to the second type of task and the irrelevant information corresponding to the first type of task is within the preset error range. When the difference between the irrelevant information corresponding to the first type of task is outside the preset error range, and/or the difference between the irrelevant information corresponding to the second type of task and the irrelevant information corresponding to the first type of task is within the preset error range, the terminal device under test is a virtual terminal device. The method of claim 1, wherein the terminal device under test compares the response signal corresponding to the first type of task with the response signal corresponding to the second type of task through the target detection application, and determines whether the terminal device under test is a real physical terminal device or a virtual terminal device according to the comparison result, including: the terminal device under test obtains common characteristic factors affecting the sensor; the terminal device under test separates the response signal according to the common characteristic factors to obtain relevant information and irrelevant information. The relevant information is calculated based on the common characteristic factors, and the irrelevant information is used to express the characteristics of the physical unclonable function; the terminal device under test compares the irrelevant information corresponding to the first type of task, and compares the irrelevant information corresponding to the first type of task with the irrelevant information corresponding to the second type of task to obtain a comparison result; the terminal device under test determines whether the terminal device under test is a real physical terminal device or a virtual terminal device according to the comparison result. As described in claim 3, before the terminal device under test separates the response signal from the relevant information and the irrelevant information according to the common characteristic factors, the method further includes: the terminal device under test performs universal denoising processing on the response signal to obtain the response signal after the universal denoising processing. The method of claim 1, further comprising: when it is determined that the plurality of the tested terminal devices are virtual terminal devices, the tested terminal devices obtain the characteristics of the physical unclonable functions of the plurality of the tested terminal devices through the target detection application according to the response signals corresponding to the three or more challenge tasks executed by each of the tested terminal devices; if the difference between the characteristics of the physical unclonable functions of the plurality of the tested terminal devices is within a preset characteristic error range, the tested terminal device determines that the plurality of the tested terminal devices are simulated based on the same cloud platform. A method for detecting the authenticity of a terminal device, characterized in that it is applied to a terminal device under test, the terminal device under test having a sensor and a target detection application, and the method comprises: the terminal device under test receives three or more challenge tasks generated and sent by a background server of the target detection application, the three or more challenge tasks include a first category of tasks and a second category of tasks, the first category of tasks includes at least two identical challenge tasks, and the second category of tasks includes challenge tasks different from the first category of tasks; the terminal device under test The device triggers the tested terminal device to execute the three or more challenge tasks through the target detection application, and obtains the response signal corresponding to the challenge task generated by the tested terminal device collected by the sensor; the tested terminal device sends the response signal to the background server, so that the background server compares the response signal corresponding to the first type of task with the response signal corresponding to the second type of task, and determines whether the tested terminal device is a real physical terminal device or a virtual terminal device according to the comparison result. A method as described in claim 6, wherein the response signal includes irrelevant information, the irrelevant information is used to express the characteristics of a physical unclonable function, the difference between the irrelevant information corresponding to the first type of task is within a preset error range, and the difference between the irrelevant information corresponding to the second type of task and the irrelevant information corresponding to the first type of task is within the preset error range. When the difference between the irrelevant information corresponding to the first type of task is outside the preset error range, and/or the difference between the irrelevant information corresponding to the second type of task and the irrelevant information corresponding to the first type of task is within the preset error range, the terminal device under test is a virtual terminal device. As described in claim 6, the response signal is separated into relevant information and irrelevant information by the background server, the relevant information is calculated by the background server according to the common characteristic factors of the sensors, reflecting the influence of the common characteristic factors on a class of the sensors, the irrelevant information is used to express the characteristics of the physical unclonable function, and when the sensor includes a magnetic sensor, the relevant information includes the geomagnetic information of the tested terminal device at the geographical location calculated according to the geographical location of the tested terminal device; the comparison result is obtained by the background server comparing the irrelevant information corresponding to the first type of tasks, and comparing the irrelevant information corresponding to the first type of tasks with the irrelevant information corresponding to the second type of tasks. The method as claimed in claim 8, wherein the response signal separated into the relevant information and the irrelevant information is the response signal after general denoising processing is performed by the background server. The method of claim 6, wherein, when it is determined that the plurality of the tested terminal devices are virtual terminal devices, if the difference between the characteristics of the physical unclonable function of the plurality of the tested terminal devices is within a preset characteristic error range, the plurality of the tested terminal devices are simulated based on the same cloud platform, and the characteristics of the physical unclonable function are obtained by the background server according to the response signals corresponding to the three or more challenge tasks executed by the plurality of the tested terminal devices. A method for detecting the authenticity of a terminal device, characterized in that the method is applied to a background server of a target detection application, and the terminal device under test has a sensor and the target detection application. The method comprises: the background server generates and sends three or more challenge tasks to the terminal device under test, wherein the three or more challenge tasks include a first category of tasks and a second category of tasks, wherein the first category of tasks includes at least two identical challenge tasks, and the second category of tasks includes at least two different challenge tasks from the first category of tasks. The backend server receives a response signal sent by the tested terminal device, and the response signal is collected by the sensor when the target detection application triggers the tested terminal device to execute the three or more challenge tasks; the backend server compares the response signal corresponding to the first type of task with the response signal corresponding to the second type of task, and determines whether the tested terminal device is a real physical terminal device or a virtual terminal device according to the comparison result. The method of claim 11, wherein the response signal includes non-correlated information, the non-correlated information is used to express the characteristics of the physical unclonable function; the difference between the non-correlated information corresponding to the first type of task is within a preset error range, and the difference between the non-correlated information corresponding to the second type of task and the non-correlated information corresponding to the first type of task is within the preset error range. When the difference between the irrelevant information corresponding to the first type of task is outside the preset error range, and/or the difference between the irrelevant information corresponding to the second type of task and the irrelevant information corresponding to the first type of task is within the preset error range, the terminal device under test is a virtual terminal device. The method as claimed in claim 11, wherein the background server compares the response signal corresponding to the first type of task with the response signal corresponding to the second type of task, and determines whether the terminal device under test is a real physical terminal device or a virtual terminal device according to the comparison result, including: the background server obtains the common characteristic factors affecting the sensor; the background server separates the response signal according to the common characteristic factors to obtain relevant information and irrelevant information, the relevant information is calculated according to the common characteristic factors, and reflects the influence of the common characteristic factors on a type of the sensor; The non-relevant information is used to express the characteristics of the physical non-clonable function. When the sensor includes a magnetic sensor, the relevant information includes the geomagnetic information of the terminal device under test at the geographical location calculated according to the geographical location of the terminal device under test; the background server compares the non-relevant information corresponding to the first type of task, and compares the non-relevant information corresponding to the first type of task with the non-relevant information corresponding to the second type of task to obtain a comparison result; the background server determines whether the terminal device under test is a real physical terminal device or a virtual terminal device according to the comparison result. As described in claim 13, before the background server separates the response signal into relevant information and irrelevant information based on the common characteristic factors, it also includes: the background server performs universal denoising processing on the response signal to obtain the response signal after universal denoising processing. The method of claim 11, further comprising: when it is determined that the plurality of the tested terminal devices are virtual terminal devices, the backend server obtains the characteristics of the physical unclonable function of the plurality of the tested terminal devices according to the response signals corresponding to the three or more challenge tasks executed by each of the tested terminal devices; if the difference between the characteristics of the physical unclonable function of the plurality of the tested terminal devices is within a preset characteristic error range, it is determined that the plurality of the tested terminal devices are simulated based on the same cloud platform. A detection device for detecting the authenticity of a terminal device, characterized in that it is applied to a terminal device under test, the terminal device under test has a sensor and a target detection application, and the detection device comprises: a challenge task generation module, which is used to generate more than three challenge tasks, the more than three challenge tasks include a first category of tasks and a second category of tasks, the first category of tasks includes at least two identical challenge tasks, and the second category of tasks includes challenges different from the first category of tasks. Task; an information collection module, used to trigger the terminal device under test to execute the three or more challenge tasks, and obtain the response signal corresponding to the challenge task generated by the terminal device under test collected by the sensor; a data processing module, used to compare the response signal corresponding to the first type of task with the response signal corresponding to the second type of task, and determine whether the terminal device under test is a real physical terminal device or a virtual terminal device based on the comparison result. A terminal device authenticity detection device is characterized in that it is applied to a terminal device under test, the terminal device under test has a sensor and a target detection application, and the detection device comprises: a receiving module, which is used to receive more than three challenge tasks generated and sent by a background server of the target detection application, wherein the more than three challenge tasks include a first category of tasks and a second category of tasks, the first category of tasks includes at least two identical challenge tasks, and the second category of tasks includes challenge tasks different from the first category of tasks; The signal collection module is used to trigger the terminal device under test to execute the three or more challenge tasks and obtain the response signal corresponding to the challenge task generated by the terminal device under test collected by the sensor; the sending module is used to send the response signal to the background server, so that the background server compares the response signal corresponding to the first type of task with the response signal corresponding to the second type of task, and determines whether the terminal device under test is a real physical terminal device or a virtual terminal device according to the comparison result. A detection device for detecting the authenticity of a terminal device, characterized in that it is applied to a background server of a target detection application, the terminal device under test has a sensor and the target detection application, and the detection device comprises: a challenge task generation module, used to generate more than three challenge tasks, the more than three challenge tasks include a first category of tasks and a second category of tasks, the first category of tasks includes at least two identical challenge tasks, and the second category of tasks includes challenge tasks different from the first category of tasks; a sending module, used to send the challenge tasks to the terminal under test; The device sends the three or more challenge tasks; the receiving module is used to receive the response signal sent by the terminal device under test, and the response signal is collected by the sensor when the target detection application triggers the terminal device under test to execute the three or more challenge tasks; the data processing module is used to compare the response signal corresponding to the first type of task with the response signal corresponding to the second type of task, and determine whether the terminal device under test is a real physical terminal device or a virtual terminal device according to the comparison result. A terminal device, characterized in that it includes: a processor and a memory storing computer program instructions; when the processor executes the computer program instructions, the method for detecting the authenticity of the terminal device as described in any one of claims 1 to 5 is implemented. A terminal device, characterized in that it includes: a processor and a memory storing computer program instructions; When the processor executes the computer program instructions, the method for detecting the authenticity of the terminal device as described in any one of claims 6 to 10 is implemented. A server, characterized in that it includes: a processor and a memory storing computer program instructions; when the processor executes the computer program instructions, the method for detecting the authenticity of the terminal device as described in any one of claim items 11 to 15 is implemented. A terminal device authenticity detection system, characterized in that it includes the terminal device as described in claim 20 and the server as described in claim 21. A computer-readable storage medium, characterized in that a computer program instruction is stored on the computer-readable storage medium, and when the computer program instruction is executed by a processor, a method for detecting the authenticity of a terminal device as described in any one of claims 1 to 15 is implemented.

Images