WO2012109985A1 - Java-based mobile terminal authentication system and method, server and terminal - Google Patents

Abstract

The present invention provides a Java-based mobile terminal authentication system and method, server, and terminal. The mobile terminal obtains its own identity number via the internal Java program, encrypts the identity number according to an encryption algorithm, generates mapping data, and sends the identity number and the mapping data to the authentication server via the Java program; the authentication server receives the identity number and the mapping data and determines whether the identity number conforms to the authorization range of the database on the authentication server; an identity number which does so conform is then encrypted, and if the mapping data obtained through encryption is the same as the received mapping data, the mobile terminal is then notified of an authentication success. The present invention increases the legitimacy of mobile terminal identity number authentication, and avoids illegal access by a Java-based mobile terminal.

Description

JAVA-based mobile terminal authentication system and method, server and terminal

[Technical Field]

The present invention relates to the field of mobile communication technologies, and in particular, to a JAVA-based mobile terminal authentication system and method, a server, and a terminal.

 【Background technique】

With the continuous popularization of mobile terminal technologies, users have increasingly higher requirements for mobile terminal functions.

Taking a mobile phone as an example, the mobile phone will have an international mobile equipment identification code (International Mobile Equipment). Identity Number, IMEI), because IMEI is designed by the 3GPP organization as the unique identification code of the mobile device, therefore, the JAVA application needs the IMEI number of the mobile phone for legality authentication and user number statistics.

but, The IMEI number itself is a publicly available message on a mobile device that is simple in format and easy to copy in large quantities. Therefore, the IMEI is directly based on the basis of authentication and business statistics. There are inherent technical defects, and neither legal nor commercial can directly be used as the statistical basis for litigation.

How to improve the legality of authenticating the mobile terminal identification code and avoid the illegal access of the mobile terminal based on JAVA is one of the research directions in the field of mobile terminal technology.

 [Summary of the Invention]

The technical problem to be solved by the present invention is to provide a JAVA-based mobile terminal authentication system and method, a server and a terminal, so as to implement authentication of a JAVA-based mobile terminal and avoid illegal access of a JAVA-based mobile terminal.

The technical solution adopted by the present invention to solve the technical problem is to provide a JAVA-based mobile terminal authentication system, the system comprising at least one mobile terminal, and an authentication server.

The mobile terminal acquires an identification code of the mobile terminal by using an internal JAVA program, encrypts the identification code according to an encryption algorithm, generates mapping data, and uses the JAVA program to map the identification code and the mapping Data is sent to the authentication server;

The authentication server receives the identification code and the mapping data, and determines whether the identification code is an identification code in the database on the authentication server that meets the authorization range, and if so, encrypts the identification code, if Encrypting obtains the same mapping data as the received mapping data, and notifying the mobile terminal to pass authentication authentication.

The identifier is an IMEI number of the mobile terminal.

The length of the mapping data is greater than or equal to the length of the identification code.

If the authentication server does not store the same identification code, or encrypts the identification code, and cannot generate the same mapping data as the received mapping data, it determines that the authentication fails, and records the failed authentication. Identification code.

The technical solution adopted by the present invention to solve the technical problem is to provide a mobile terminal, where the terminal includes:

An identifier obtaining module, configured to acquire an identifier of the mobile terminal by using an internal JAVA program thereof;

a first encryption module, configured to encrypt the identification code according to an encryption algorithm to generate mapping data;

And a sending module, configured to send the identifier and the mapping data to the authentication server by using the JAVA program.

The identifier is an IMEI number of the mobile terminal.

The technical solution adopted by the present invention to solve the technical problem is to provide an authentication server, where the server includes:

a receiving module, configured to receive an identifier and mapping data from a JAVA-based mobile terminal;

a determining module, configured to determine whether the identification code is an identification code in the database on the authentication server that meets an authorization range;

a second encryption module, configured to encrypt the identifier when the identifier is an identifier of an authorized range in the database on the authentication server;

The determining module determines whether the second encryption module can encrypt the same mapping data as the received mapping data;

The notification module is configured to notify the mobile terminal to pass the authentication when the second encryption module can encrypt the same mapping data as the received mapping data.

The server further includes:

An information recording module, configured to: when the identification code does not belong to an identifier of an authorized range in a database on the authentication server, or the second encryption module cannot encrypt the same mapping data as the received mapping data, record the The identification code of the mobile terminal.

The technical solution adopted by the present invention to solve the technical problem is to provide a JAVA-based mobile terminal authentication method, and the method includes the following steps:

Providing an authentication server and at least one mobile terminal;

The mobile terminal acquires the identification code of the mobile terminal through its internal JAVA program, encrypts the identification code according to an encryption algorithm, generates mapping data, and uses the JAVA program to set the identification code and the mapping data. Sent to the authentication server;

The authentication server receives the identification code and the mapping data, and determines whether the identification code is an identification code in the database on the authentication server that meets the authorization range, and if so, encrypts the identification code, if Encrypting obtains the same mapping data as the received mapping data, and notifying the mobile terminal to pass authentication authentication.

Wherein, the method further comprises the following steps:

If the identification code does not belong to the identification code in the database on the authentication server that meets the authorization range, or the same mapping data as the received mapping data cannot be encrypted, it is determined that the authentication fails, and the identification of the unauthenticated authentication is recorded. code.

In the embodiment of the present invention, the mobile terminal encrypts the identification code, generates mapping data, and sends the identification code and the mapping data to the authentication server, and the authentication server first determines whether the identification code belongs to the database in the authentication server and meets the authorization scope. The identification code, if it belongs, encrypts the identification code according to a predetermined algorithm, determines whether the same mapping data as the received mapping data can be encrypted, and if so, determines that the mobile terminal passes the authentication, and the present invention is extremely The legitimacy of authenticating the mobile terminal identification code is improved, and the illegal access of the JAVA-based mobile terminal is avoided.

 [Description of the Drawings]

1 is a schematic structural diagram of a JAVA-based mobile terminal authentication system according to an embodiment of the present invention;

2 is a schematic diagram of a JAVA system of a mobile terminal according to an embodiment of the present invention;

3 is a flowchart of a JAVA-based mobile terminal authentication method according to an embodiment of the present invention;

4 is a schematic structural diagram of a mobile terminal according to an embodiment of the present invention;

FIG. 5 is a schematic structural diagram of an authentication server according to an embodiment of the present invention.

 【detailed description】

The invention will now be described in detail in conjunction with the drawings and embodiments.

FIG. 1 shows a structure of a JAVA-based mobile terminal authentication system according to an embodiment of the present invention. The system includes at least one mobile terminal 11 and an authentication server 12.

The mobile terminal 11 obtains the identification code of the mobile terminal 11 through its internal JAVA program. For convenience of description, the present invention takes the identification code as the IMEI number as an example, and may of course be other identification codes, which are not enumerated here.

Thereafter, the mobile terminal 11 encrypts the identification code, generates mapping data, and transmits the identification code and the mapping data to the authentication server 12 through the JAVA program.

In the embodiment of the present invention, the length of the mapping data is greater than or equal to the length of the identification code.

The authentication server 12 receives the identification code and the mapping data, and determines whether the identification code is an identification code in the database on the authentication server 12 that meets the authorization range. If yes, the identification code is encrypted, if it can be encrypted. Obtaining the same mapping data as the received mapping data, notifying the mobile terminal to pass the authentication authentication, if not, determining that the authentication has not passed, and recording the identification code that has not passed the authentication.

Preferably, the mobile terminal 11 is a mobile phone, and may of course be other mobile devices, which are not enumerated here.

The working process regarding the mobile terminal 11 will be described below with reference to FIG. 2 as follows:

The mobile terminal 11 stores an encryption algorithm F (IMEI, which has a reversible operation. y), whose input parameters are the IMEI number (ie the identification code) and an optional key y. The strength of the key y and the encryption algorithm F together determine the degree of confidentiality.

In the specific implementation process, the mobile terminal 11 expands the IMEI number to IMEI+X, X is mapping data, X=F(IMEI, y), and the length of the IMEI number is 15 bits. In the embodiment of the present invention, the length of X is greater than Equal to 15.

When the mobile terminal 11 needs to perform authentication, the JAVA application inside the mobile terminal 11 extracts the IMEI number from the mobile terminal platform, and the mobile terminal platform reads the IMEI number of the mobile terminal from its own memory, and performs an operation on the IMEI number to obtain Map data X. The mobile terminal platform then returns the IMEI+X to the JAVA application. The JAVA application transmits the IMEI+X to the authentication server 12 as a whole.

The working principle of the authentication server 12 provided by the embodiment of the present invention is described as follows:

The authentication server 12 receives the identification code and mapping data transmitted by the mobile terminal 11 through the JAVA application.

The authentication server 12 queries the local IMEI database for the same identification code. If the same identification code cannot be found in the local database, the mobile terminal itself does not belong to the authorized range, such as that manufactured by another manufacturer. The terminal device records the IMEI number that the authentication fails if the authentication system requires it. If the same identification code can be found, the identification code is encrypted, ie X' = F(IMEI, y).

If X=X', it means that the mobile terminal itself supports both the encryption algorithm F and the key y, so the mobile terminal can determine that it is an authorized terminal, and therefore can reply to the mobile terminal to pass the authentication. If X and X' are different, it means that the mobile terminal does not have the correct encryption algorithm F and the key y. The IMEI number is false, so the authentication fails, and the response to the mobile terminal is not passed, according to the service deployment. If the authentication system requires it, record the IMEI number for which the authentication failed.

FIG. 3 is a flowchart of a JAVA-based mobile terminal authentication method according to an embodiment of the present invention.

In step S301, an authentication server and at least one mobile terminal are provided.

In step S302, the mobile terminal acquires the identification code of the mobile terminal through its internal JAVA program.

In step S303, the mobile terminal encrypts the identification code, generates mapping data, and transmits the identification code and the mapping data to the authentication server through the JAVA program.

In step S304, the authentication server receives the identification code and the mapping data, and determines whether the identification code is an identification code in the database on the authentication server that meets the authorization range. If yes, step S305 is performed; otherwise, step S307 is performed.

In step S305, the authentication server encrypts the identification code to determine whether the same mapping data can be encrypted, and if yes, proceeds to step S306, otherwise proceeds to step S307.

In step S306, authentication is authenticated.

In step S307, it is determined that the authentication has not passed, and the identification code that has not passed the authentication is recorded.

Preferably, the length of the mapping data is greater than or equal to the length of the identification code.

Preferably, the mobile terminal is a mobile phone, and of course, other terminal devices, which are not enumerated here.

FIG. 4 shows the structure of a mobile terminal provided by an embodiment of the present invention.

The identifier acquisition module 41 acquires the identification code of the mobile terminal through its internal JAVA program.

The first encryption module 42 encrypts the identification code according to an encryption algorithm to generate mapping data.

The sending module 43 sends the identification code and the mapping data to the authentication server through the JAVA program.

Preferably, the identification code is an IMEI number of the mobile terminal.

FIG. 5 shows the structure of an authentication server provided by an embodiment of the present invention.

The receiving module 51 receives the to-be-authenticated data string from the JAVA-based mobile terminal. The data to be authenticated refers to the identification code and mapping data sent by the mobile terminal to the receiving module 51.

The determining module 52 determines whether the identification code is an identification code in the database on the authentication server that meets the authorization range.

If the identification code is an identification code in the database on the authentication server that meets the authorization range, the second encryption module 53 encrypts the identification code, and the determining module 52 determines whether the second encryption module can encrypt the same mapping. data.

If the second encryption module 53 can encrypt the same mapping data, the notification module 54 notifies the mobile terminal to pass the authentication.

When the determining module 52 determines that the identification code does not belong to the identification code of the authorized range in the database on the authentication server, or the second encryption module 53 cannot encrypt the same mapping data, the information recording module 55 records the mobile terminal. Identifier.

The invention greatly improves the legality of authenticating the identification code of the mobile terminal, avoids the illegal access of the mobile terminal based on JAVA, and is beneficial to the promotion of mobile terminals such as mobile phones.

In the above-described embodiments, the present invention has been exemplarily described, and various modifications of the present invention may be made without departing from the spirit and scope of the invention.

Claims (10)

A JAVA-based mobile terminal authentication system, characterized in that the system comprises at least one mobile terminal, and further comprises an authentication server, The mobile terminal acquires an identification code of the mobile terminal by using an internal JAVA program, encrypts the identification code according to an encryption algorithm, generates mapping data, and uses the JAVA program to map the identification code and the mapping Data is sent to the authentication server; The authentication server receives the identification code and the mapping data, and determines whether the identification code is an identification code in the database on the authentication server that meets the authorization range, and if so, encrypts the identification code, if Encrypting obtains the same mapping data as the received mapping data, and notifying the mobile terminal to pass authentication authentication. The JAVA-based mobile terminal authentication system according to claim 1, wherein the identification code is an IMEI number of the mobile terminal. The JAVA-based mobile terminal authentication system according to claim 1, wherein the length of the mapping data is greater than or equal to the length of the identification code. The JAVA-based mobile terminal authentication system according to claim 1, wherein if the identification code does not belong to an identification code in the database on the authentication server that meets the authorization range, or the identification code is encrypted, If the same mapping data as the received mapping data is obtained by encryption, it is determined that the authentication fails, and the identification code that has not passed the authentication is recorded. A mobile terminal, characterized in that the terminal comprises: An identifier obtaining module, configured to acquire an identifier of the mobile terminal by using an internal JAVA program thereof; a first encryption module, configured to encrypt the identification code according to an encryption algorithm to generate mapping data; And a sending module, configured to send the identifier and the mapping data to the authentication server by using the JAVA program.  The mobile terminal of claim 5, wherein the identification code is an IMEI number of the mobile terminal. An authentication server, characterized in that the server comprises: a receiving module, configured to receive an identifier and mapping data from a JAVA-based mobile terminal; a determining module, configured to determine whether the identification code is an identification code in the database on the authentication server that meets an authorization range; a second encryption module, configured to encrypt the identifier when the identifier is an identifier of an authorized range in the database on the authentication server; The determining module determines whether the second encryption module can encrypt the same mapping data as the received mapping data; The notification module is configured to notify the mobile terminal to pass the authentication when the second encryption module can encrypt the same mapping data as the received mapping data. The server of claim 7, wherein the server further comprises: An information recording module, configured to: when the identification code does not belong to an identifier of an authorized range in a database on the authentication server, or the second encryption module cannot encrypt the same mapping data as the received mapping data, record the The identification code of the mobile terminal. A JAVA-based mobile terminal authentication method, characterized in that the method comprises the following steps: Providing an authentication server and at least one mobile terminal; The mobile terminal acquires the identification code of the mobile terminal through its internal JAVA program, encrypts the identification code according to an encryption algorithm, generates mapping data, and uses the JAVA program to set the identification code and the mapping data. Sent to the authentication server; The authentication server receives the identification code and the mapping data, and determines whether the identification code is an identification code in the database on the authentication server that meets the authorization range, and if so, encrypts the identification code, if Encrypting obtains the same mapping data as the received mapping data, and notifying the mobile terminal to pass authentication authentication. The JAVA-based mobile terminal authentication method according to claim 9, wherein the method further comprises the following steps: If the identification code does not belong to the identification code in the database on the authentication server that meets the authorization range, or the same mapping data as the received mapping data cannot be encrypted, it is determined that the authentication fails, and the identification of the unauthenticated authentication is recorded. code.

Images