WO2018145238A1 - Authentication method and device for nfc equipment - Google Patents

Abstract

Disclosed in the embodiments of the present invention are an authentication method and device for near field communication (NFC) equipment, comprising: when detecting the approaching operations of NFC equipment to be verified, obtaining the approaching frequency of the NFC equipment to be verified within a preset duration and a time interval of the adjacent approaching operations, and detecting whether a verification result of each approaching operation meets requirements; and if the conditions are met, carrying out subsequent service operations after the NFC equipment to be verified passes the authentication. Therefore, even if secure information in the NFC equipment to be verified is cloned, an intruder could not learn the rule for the approaching operations, and the access permission could thus not be obtained, thereby improving the security for authentication of the NFC equipment.

Description

Authentication method and device for NFC device Technical field

The present invention relates to the field of security protection, and in particular, to an authentication method and apparatus for an NFC device.

Background technique

NFC technology is used more and more widely for convenience, for example, in mobile payment, business card interaction, data transmission, etc., NFC devices need to be authenticated before performing business operations, when one NFC device is close to another NFC device. The NFC device performs an authentication between the NFC devices. If the authentication is passed, the corresponding service operation can be performed. However, the applicant finds that the current authentication mode is not secure, and the security information (key and encryption algorithm) in the NFC device. After being cloned, the intruder can easily make illegal access.

Summary of the invention

The technical problem to be solved by the embodiments of the present invention is to provide an authentication method for an NFC device. The problem that the authentication method between the NFC devices in the prior art is not high is solved.

In order to solve the above technical problem, an embodiment of the present invention provides an authentication method for an NFC device, including:

The first NFC device detects a proximity operation of the second NFC device within a preset duration;

If the number of times the proximity operation is passed, the close operation is a preset number of times, and the time interval of the adjacent close operation meets the preset time interval, the first NFC device determines to the second NFC device authentication passed;

Performing a specified service operation between the first NFC device and the second NFC device.

Correspondingly, an embodiment of the present invention further provides an authentication device for an NFC device, including:

a detecting module, configured to detect a proximity operation of the second NFC device within a preset duration;

The authentication module is configured to: if the number of times the proximity operation is passed and the close operation is the preset number of times in the preset duration, and the time interval of the adjacent close operation meets the preset time interval, the first NFC device Determining that the second NFC device is authenticated;

And an execution module, configured to perform a specified service operation with the second NFC device.

Embodiments of the present invention have the following beneficial effects:

When the proximity operation of the NFC device to be verified is detected, the number of times of the NFC device to be verified within the preset duration, the time interval of the adjacent close operation, and the verification result of each approach operation are satisfied, if the above conditions are met. If the authentication of the NFC device to be verified is passed, the subsequent service operations can be performed, so that even if the security information in the NFC device to be verified is cloned, the intruder cannot know the rules of the operation, and still cannot obtain access rights. This can improve the security of NFC device authentication.

DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the embodiments or the description of the prior art will be briefly described below. Obviously, the drawings in the following description are only It is a certain embodiment of the present invention, and other drawings can be obtained from those skilled in the art without any creative work.

1 is a schematic flowchart of an authentication method of an NFC device according to an embodiment of the present invention;

2 is a schematic structural diagram of an authentication device of an NFC device according to an embodiment of the present invention;

FIG. 3 is another schematic structural diagram of an authentication device for an NFC device according to an embodiment of the present invention.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, but not all embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

FIG. 1 is a schematic flowchart of a method for authenticating an NFC device according to an embodiment of the present invention. In the embodiment of the present invention, the method includes:

S101. The first NFC device detects a proximity operation of the second NFC device within a preset duration.

Specifically, in the process that the second NFC device is close to the first NFC device, when the distance between the second NFC device and the first NFC device is less than a preset distance, the induction coil of the first NFC device can generate an induction due to the electromagnetic coupling effect. Current, the first NFC device can thereby detect the proximity operation of the second NFC device, and the first NFC device detects the first approach operation of the second NFC device to first approach the operation The time point is the starting time, and the proximity operation of the second NFC device within the preset time period is counted, and the second NFC device may approach the first NFC device multiple times within the preset time period.

S102. If the number of times the proximity operation is passed, the number of close operations is a preset number of times, and the time interval of the adjacent close operation meets the preset time interval, the first NFC device determines to authenticate the second NFC device. by.

Specifically, the first NFC device verifies whether the second NFC device passes the verification, and the method for verifying may be: the first NFC device acquires the device identifier or the account information of the second NFC device, and determines the acquired device. Whether the identification or account information is the same as the pre-stored device identification or account information. If they are the same, the current proximity operation verification is verified, and the first NFC device records the preset time and the time of the near operation and the number of close operations. If the number of close operations in the preset duration is equal to the preset number of times, the time interval of the adjacent close operation satisfies the preset time interval, and each time the proximity operation is verified, the first NFC device determines the second NFC device authentication. Passing, otherwise, determining that the second NFC device authentication fails.

S103. Perform a specified service operation between the first NFC device and the second NFC device.

Specifically, after the first NFC device determines that the second NFC device is authenticated, the first NFC device and the second NFC device perform a specified service operation, such as a payment operation or a file transmission.

It can be seen from the above embodiment that when the proximity operation of the NFC device to be verified is detected, the number of times of the NFC device to be verified within the preset duration, the time interval of the adjacent close operation, and the verification result of each approach operation are obtained. Whether the above conditions are met, if the NFC device to be verified is authenticated, the subsequent service operations can be performed, so that even if the security information in the NFC device to be verified is cloned, the intruder cannot know the proximity operation. Rules, still can not get access rights, which can improve the security of NFC device authentication.

Optionally, in some embodiments of the present invention, the detecting, by the first NFC device, the proximity operation of the second NFC device in the preset time comprises:

When the first NFC device detects that the current value of the coupled coil is greater than the preset current value, it indicates that the approaching operation of the second device is detected.

Specifically, the first NFC device and the second NFC device are each provided with an induction coil. When the induction coil of the second NFC device is close to the induction coil of the first NFC device, the first NFC device and the second NFC device are due to electromagnetic coupling effects. The induced current is generated in the induction coil. When the first NFC device detects that the induced current is greater than the preset value, it indicates that the second device is detected to operate.

Optionally, in some embodiments of the present invention, before the first NFC device detects the proximity operation of the second NFC device within a preset duration, the method further includes:

The first NFC device sets the preset number of times to 4, and sets a time interval between the first approach operation and the last approach operation to satisfy the requirement of two short ones long or two long ones short in the Morse code.

Specifically, the first NFC device sets the preset number of times to 4, and sets the time interval of each close operation in the 4 close operations to satisfy the requirement of two long segments or two short ones long in the Morse code. For example, the authentication condition set by the first NFC device is: the number of close operations is 4, the interval between the first close operation and the second close operation is 2 seconds, and the second close operation and the third time The time interval between the close operations is 2 seconds, the time interval between the third time time and the fourth close operation is 1 second; or the time interval between the first close operation and the second close operation is 1 Seconds, the time interval between the second close operation and the third close operation is 1 second, and the time interval between the third close operation and the fourth close operation is 2 seconds.

When it is necessary to explain, "long" in two long and one short and two short one long means a long time interval, "short" means a short time interval, two long time intervals or two short time intervals are not necessarily equal. , but must ensure that the long time interval is greater than the short time interval; since the user cannot accurately control the time interval of the adjacent two close operations, the condition that the first NFC presets the time interval in the device is that the adjacent two can be made The condition of the time interval near the operation is within the allowable error range.

Optionally, in some embodiments of the present invention, the method further includes:

When the first NFC device detects the first approach operation of the second NFC device, the first prompt tone is sent according to the preset time interval.

Specifically, when the first NFC device detects the first proximity operation of the second NFC device, the first prompt tone may be sent according to a preset time interval. For example, if the preset time interval is two short and one long, the first NFC device sends out. Two short and one long intermittent sounds, for example: the prior time interval is two long and one short, then the first NFC device sends two short and one short intermittent sounds, so that the user can be mentioned to prevent the user from being used. Forget the rules of approaching operations.

Optionally, in some embodiments of the present invention, performing the specified service operation between the second NFC device and the second NFC device further includes:

After the business operation is successfully executed, a second prompt sound is sent;

After the execution of the business operation fails, a third prompt sound is emitted.

FIG. 2 is a schematic structural diagram of an authentication device for an NFC device according to an embodiment of the present invention. The terminal used in the embodiment of the present invention is configured to perform an authentication method for an NFC device in FIG. The process can be described with reference to the embodiment of FIG. 1. The authentication device 2 includes a detection module 201, an authentication module 202, and an execution module 203.

The detecting module 201 is configured to detect a proximity operation of the second NFC device within a preset duration.

The authentication module 202 is configured to: if the proximity operation is verified, the number of times of the close operation is the preset number of times, and the time interval of the adjacent close operation meets the preset time interval, the first NFC The device determines to pass the authentication of the second NFC device.

The executing module 203 is configured to perform a specified service operation with the second NFC device.

Optionally, in some embodiments of the present invention, the detecting module 201 is configured to:

When the first NFC device detects that the current value of the coupled coil is greater than the preset current value, it indicates that the approaching operation of the second device is detected.

In some embodiments of the present invention, the authentication device 2 further includes:

The setting module is configured to set the preset number of times to be 4, and the time interval between setting the first approaching operation to the last approaching operation satisfies the requirement of two short ones long or two long ones and one short in the Morse code.

In some embodiments of the present invention, the authentication device 2 further includes:

The prompting module is configured to send a first prompt sound according to the preset time interval when detecting the first approaching operation of the second NFC device.

Optionally, in some embodiments of the present invention, the execution module is further configured to:

After the business operation is successfully executed, a second prompt sound is sent;

After the execution of the business operation fails, a third prompt sound is emitted.

The embodiment of the present invention and the method embodiment of FIG. 1 are based on the same concept, and the technical effects thereof are also the same. For the specific process, reference may be made to the description of the method embodiment 1, and details are not described herein again.

FIG. 3 is a schematic diagram of another structure of an authentication device for an NFC device according to an embodiment of the present invention. In the embodiment of the present invention, the authentication device 3 includes a processor 301, a memory 302, and a transceiver 303. The transceiver 303 is configured to transmit and receive data with and from an external device. The number of processors 301 in the authentication device 3 may be one or more. In some embodiments of the invention, processor 301, memory 302, and transceiver 303 may be connected by a bus system or other means. The authentication device 3 can be used to perform the method shown in FIG. For the meaning and examples of the terms involved in the embodiment, reference may be made to the corresponding embodiment of FIG. 1. Here No longer.

The program code is stored in the memory 302. The processor 301 is configured to call program code stored in the memory 302 for performing the following operations:

Detecting a proximity operation of the second NFC device within a preset duration;

Determining the authentication of the second NFC device if the number of times the proximity operation is passed, the number of close operations is a preset number of times, and the time interval of the adjacent close operation meets the preset time interval;

Performing a specified business operation with the second NFC device.

In some embodiments of the present invention, the performing, by the processor 301, the detecting the proximity operation of the second NFC device in the preset time comprises:

When it is detected that the current value of the coupling coil is greater than the preset current value, it indicates that the approaching operation of the second device is detected.

In some embodiments of the present invention, the processor 301 performs the detecting the proximity operation of the second NFC device within a preset duration, and is further configured to:

The preset number of times is set to 4, and the time interval between setting the first approach operation to the last approach operation satisfies the requirement of two short one long or two long one short in the Morse code.

In some embodiments of the present invention, the processor 301 is further configured to:

When the first NFC device detects the first approach operation of the second NFC device, the first prompt tone is sent according to the preset time interval.

In some embodiments of the present invention, the performing, by the processor 301, the performing the specified service operation between the first NFC device and the second NFC device further includes:

After the business operation is successfully executed, a second prompt sound is sent;

After the execution of the business operation fails, a third prompt sound is emitted.

或者其它操作系统的终端，诸如移动电话。也可以是其它终端，诸如具有触敏表面(例如，触摸屏显示器和/或触控板)的膝上型计算机或平板电脑或台式计算机。An embodiment of the present invention provides a terminal, where the terminal includes the foregoing authentication device, where the terminal includes but is not limited to

Or terminals of other operating systems, such as mobile phones. Other terminals may also be used, such as a laptop or tablet or desktop computer with a touch-sensitive surface (eg, a touch screen display and/or a touch pad).

In the discussion that follows, a terminal including a display and a touch-sensitive surface is described. It should be understood, however, that the terminal can include one or more other physical user interface devices, such as a physical keyboard, mouse, and/or joystick.

Terminals typically support a variety of applications, such as one or more of the following: a drawing application, a rendering application, a word processing application, a web page creation application, a disk editing application, a spreadsheet application, a gaming application, Telephony applications, video conferencing applications, email applications, instant messaging applications, workout support applications, photo management applications, digital camera applications, digital video camera applications, web browsing applications, digital music player applications Program, and/or digital video player application.

The various applications that can be executed on the terminal can use at least one shared physical user interface device, such as a touch-sensitive surface. One or more functions of the touch-sensitive surface and corresponding information displayed on the terminal may be adjusted and/or changed from one application to the next and/or adjusted and/or varied within the respective application. In this way, the shared physical architecture of the terminal, such as a touch-sensitive surface, can support a variety of applications with a user interface that is intuitive to the user.

One of ordinary skill in the art can understand that all or part of the process of implementing the foregoing embodiments can be completed by a computer program to instruct related hardware, and the program can be stored in a computer readable storage medium. When executed, the flow of an embodiment of the methods as described above may be included. The storage medium may be a magnetic disk, an optical disk, a read-only memory (ROM), or a random access memory (RAM).

The above disclosure is only a preferred embodiment of the present invention, and of course, the scope of the present invention is not limited thereto, and those skilled in the art can understand all or part of the process of implementing the above embodiments, and according to the present invention. The equivalent changes required are still within the scope of the invention.

Claims (10)

An authentication method for an NFC device, comprising: The first NFC device detects a proximity operation of the second NFC device within a preset duration; If the number of times the proximity operation is passed, the close operation is a preset number of times, and the time interval of the adjacent close operation meets the preset time interval, the first NFC device determines to the second NFC device authentication passed; Performing a specified service operation between the first NFC device and the second NFC device. The method of claim 1, wherein the detecting, by the first NFC device, the proximity operation of the second NFC device within a preset time comprises: When the first NFC device detects that the current value of the coupled coil is greater than the preset current value, it indicates that the approaching operation of the second device is detected. The method of claim 1, wherein the detecting, by the first NFC device, the proximity of the second NFC device within a preset duration comprises: The first NFC device sets the preset number of times to 4, and sets a time interval between the first approach operation and the last approach operation to satisfy the requirement of two short ones long or two long ones short in the Morse code. The method of claim 1 further comprising: When the first NFC device detects the first approach operation of the second NFC device, the first prompt tone is sent according to the preset time interval. The method of claim 1, wherein performing the specified service operation between the first NFC device and the second NFC device further comprises: After the business operation is successfully executed, a second prompt sound is sent; After the execution of the business operation fails, a third prompt sound is emitted. An authentication device for an NFC device, comprising: a detecting module, configured to detect a proximity operation of the second NFC device within a preset duration; The authentication module is configured to: if the number of times the proximity operation is passed and the close operation is the preset number of times in the preset duration, and the time interval of the adjacent close operation meets the preset time interval, the first NFC device Determining that the second NFC device is authenticated; And an execution module, configured to perform a specified service operation with the second NFC device. The authentication device according to claim 6, wherein the detecting module is configured to: When the first NFC device detects that the current value of the coupled coil is greater than the preset current value, it indicates that the approaching operation of the second device is detected. The authentication device according to claim 6, further comprising: The setting module is configured to set the preset number of times to be 4, and the time interval between setting the first approaching operation to the last approaching operation satisfies the requirement of two short ones long or two long ones and one short in the Morse code. The authentication device according to claim 6, further comprising: The prompting module is configured to send a first prompt sound according to the preset time interval when detecting the first approaching operation of the second NFC device. The authentication device according to claim 6, wherein the execution module is further configured to: After the business operation is successfully executed, a second prompt sound is sent; After the execution of the business operation fails, a third prompt sound is emitted.

Images