CN103973437B - The method, apparatus and system of RSA key mandate are obtained when a kind of terminal locking - Google Patents

Abstract

The invention discloses a method, device and system for obtaining RSA key authorization when a terminal is locked. The method includes: obtaining the first encrypted data imported into the terminal and the original data before encryption, and combining the first encrypted data with the original data. Match, if the match is successful, the RSA key authorization will be performed on the terminal, otherwise the RSA key authorization will not be performed on the terminal. The present invention enables the terminal to automatically perform RSA authorization without unlocking the terminal by matching the data information of the terminal and the server when the terminal is locked and cannot pop up the RSA authorization window, establishes an ADB connection, and then proceeds through the ADB connection. Exporting data or clearing the terminal lock password does not require flashing or other complicated ways to unlock, which is more convenient to use and meets the needs of users.

Description

A method, device and system for obtaining RSA key authorization when a terminal is locked

technical field

The invention relates to the field of data security protection of intelligent terminals, in particular to a method, device and system for obtaining RSA key authorization when a terminal is locked.

Background technique

Android system, also known as Android system, is a free and open source operating system based on Linux, mainly used in mobile devices and various intelligent terminals, such as smart phones and tablet computers, led by Google and the Open Handset Alliance develop. At present, Google has updated and added RSA key authorization in the new version of the Android system. The smart terminal installed with the Android system can only establish an ADB (Android Debug Bridge, Android Debug Bridge) connection normally if it is authorized by the RSA key. Among them, we can debug Android programs through ADB, which is a debugging tool for Android systems.

When the smart terminal is in the locked state or the locked screen state, the authorization pop-up window is blocked, so that the smart terminal cannot obtain user data without the user's permission, which plays a role in data security protection.

Although the RSA key authorization scheme is designed based on protecting user data. However, in actual use, it may be inconvenient for the user due to various reasons. For example, the user forgets the lock screen password. At this time, the mobile phone is sent to the after-sales service. The after-sales service needs to have other paths for RSA key authorization, and then help the user through ADB. Perform operations such as exporting data, clearing the lock screen password, etc. Therefore, there is a need for a method to perform RSA key authorization in other ways when the terminal is locked.

Contents of the invention

The purpose of the present invention is to provide a method, device and system for obtaining RSA key authorization when the terminal is locked, so as to solve the above technical problems.

For reaching this purpose, the present invention adopts following technical scheme:

In the first aspect, the present invention provides a method for obtaining RSA key authorization when the terminal is locked, including:

Obtain the first encrypted data imported into the terminal;

Obtain the original data before encryption;

matching the first encrypted data with the original data;

If the match is successful, RSA key authorization is performed on the terminal;

If the matching fails, the RSA key authorization will not be performed on the terminal;

Wherein, the original data is unique characteristic information of the terminal, and the first encrypted data is data generated by the server after encrypting the obtained unique characteristic information of the terminal.

Preferably, the step: matching the first encrypted data with the original data, specifically includes:

Decrypt the first encrypted data to obtain decrypted data information;

Comparing the decrypted data information with the original data to determine whether they are the same;

If they are the same, the match is successful;

Otherwise, the match fails.

Preferably, the step: matching the first encrypted data with the original data, specifically includes:

The terminal performs data encryption on the original data to generate second encrypted data;

comparing the second encrypted data with the first encrypted data to determine whether they are the same;

If they are the same, the match is successful;

Otherwise, the match fails;

Wherein, the data encryption method or algorithm adopted for generating the second encrypted data is the same as that used for generating the first encrypted data.

Preferably, before acquiring the first encrypted data imported into the terminal, it also includes: establishing a communication connection with the server;

The establishment of a communication connection with the server specifically includes:

The terminal establishes a physical connection for communication with the server through a data line;

Detect whether the USB debugging function of the terminal is enabled;

If so, establish initial data communication with the server, and import the first encrypted data from the server;

Otherwise, a communication connection abnormality prompt message is issued to remind the user that the USB debugging function is not enabled on the terminal and cannot connect to the server; continue to detect whether the USB debugging function of the terminal has been enabled;

Preferably, the method further includes: when the terminal is locked and the USB debugging function of the terminal is not enabled, if it is detected that the command input interface of the terminal inputs a control command to enable the USB debugging function of the terminal, immediately enable the USB debugging function of the terminal, specifically include:

Open the command input interface of the terminal;

Detecting whether the command input interface has a control command input to enable the USB debugging function; if so, enabling the USB debugging function of the terminal.

Preferably, the terminals include smart phones, e-book readers, MP3 players, MP4 players and tablet computers.

Preferably, the unique characteristic information includes: the device identification number and/or product serial number of the terminal and/or the international identity code of the mobile device and/or the user ID number of the bound terminal.

In the second aspect, the present invention provides a device for obtaining RSA key authorization when the terminal is locked, including: a memory, an RSA authorization function module, and a data processing module;

The memory is used to store the first encrypted data imported into the terminal and the original data before encryption; the data processing module is respectively connected to the memory and the RSA authorization function module for combining the first encrypted data with the The original data is matched, and a corresponding RSA authorization control instruction is output according to the matching result; the RSA authorization function module is used to determine whether to perform RSA key authorization on the terminal according to the received RSA authorization control instruction;

Wherein, the original data is unique characteristic information of the terminal, and the first encrypted data is data generated by the server after encrypting the obtained unique characteristic information of the terminal.

Preferably, the data processing module includes: an encryption and decryption conversion module and a data matching module;

The encryption and decryption conversion module is connected to the memory, and is used to decrypt the first encrypted data and obtain decrypted data information; the data matching module is connected to the encryption and decryption conversion module, and is used to combine the decrypted data information with the The original data is compared, and the corresponding RSA authorization control instruction is output according to the comparison result;

Said comparing said decrypted data information with said original data, and outputting a corresponding RSA authorization control instruction according to the comparison result, specifically includes:

The data matching module acquires the decrypted data information and the original data;

Comparing the decrypted data information with the original data to determine whether they are the same;

If they are the same, output an RSA authorization control command that agrees to authorize the RSA key to the terminal;

Otherwise, output an RSA authorization control instruction that refuses to authorize the RSA key to the terminal.

Preferably, the data processing module includes: an encryption and decryption conversion module and a data matching module;

The encryption and decryption conversion module is connected to the memory, and is used to encrypt the original data to generate second encrypted data; the data matching module is connected to the encryption and decryption conversion module, and is used to compare the second encrypted data with the The first encrypted data is compared, and a corresponding RSA authorization control instruction is output according to the comparison result;

Said comparing said decrypted data information with said original data, and outputting a corresponding RSA authorization control instruction according to the comparison result, specifically includes:

The data matching module acquires the second encrypted data and the first encrypted data;

The data matching module compares the second encrypted data with the first encrypted data to determine whether they are the same;

If they are the same, output an RSA authorization control command that agrees to authorize the RSA key to the terminal;

Otherwise, output an RSA authorization control instruction that refuses to authorize the RSA key to the terminal;

Wherein, the data encryption method or algorithm used to generate the second encrypted data is the same as that used to generate the first encrypted data.

Preferably, according to the RSA authorization control instruction, it is determined whether to perform RSA key authorization on the terminal; specifically includes:

If the RSA authorization function module receives an RSA authorization control instruction agreeing to authorize the RSA key to the terminal, then authorize the terminal with the RSA key;

If the RSA authorization function module receives an RSA authorization control instruction refusing to authorize the RSA key to the terminal, it does not authorize the RSA key to the terminal.

Preferably, the device further includes: a communication connection module, configured to establish a communication connection with the server;

The communication connection module includes a communication interface and a communication connection management module; the establishment of a communication connection with the server specifically includes:

Connect the communication interface and the USB interface of the server through a data line to establish a physical connection for data communication;

The communication connection management module detects whether the USB debugging function of the terminal has been opened;

If so, the terminal establishes preliminary data communication with the server, and imports the first encrypted data from the server;

Otherwise, the communication connection management module sends a communication connection abnormality prompt message, prompting the user terminal not to enable the USB debugging function, and unable to connect to the server; continue to detect whether the USB debugging function of the terminal has been turned on.

Preferably, the device further includes an instruction input interface and a control instruction processing module; the communication connection management module is connected to the control instruction processing module, and the control instruction processing module is connected to the instruction input interface;

When the terminal is locked and the USB debugging function of the terminal is not enabled, if it is detected that the command input interface inputs a control command to enable the USB debugging function of the terminal, immediately enable the USB debugging function of the terminal, specifically including:

Open the command input interface of the terminal;

The control instruction processing module detects and judges whether the control instruction input by the instruction input interface is the same as the preset control instruction for enabling the USB debugging function; if they are the same, the control instruction processing module controls to enable the USB debugging function of the terminal;

Wherein, the instruction input interface is used to provide an operation interface for the user to input a control instruction for enabling the USB debugging function.

Preferably, the terminals include smart phones, e-book readers, MP3 players, MP4 players and tablet computers.

Preferably, the unique characteristic information includes: the device identification number and/or product serial number of the terminal and/or the international identity code of the mobile device and/or the user ID number of the bound terminal.

Preferably, the command input interface includes a number dial or an emergency dial that can be opened when the terminal is locked.

In the third aspect, the present invention provides a system for obtaining RSA key authorization when the terminal is locked, including a terminal and a server;

The terminal includes: a memory, an RSA authorization function module and a data processing module;

The memory is used to store the first encrypted data imported into the terminal and the original data before encryption; the data processing module is respectively connected to the memory and the RSA authorization function module for combining the first encrypted data with the The original data is matched, and a corresponding RSA authorization control instruction is output according to the matching result; the RSA authorization function module is used to determine whether to perform RSA key authorization on the terminal according to the received RSA authorization control instruction;

Wherein, the original data is the unique characteristic information of the terminal, and the first encrypted data is the data obtained after the server encrypts the acquired unique characteristic information of the terminal.

Preferably, the server includes: an encryption module, an information storage module, and a characteristic information input interface;

The information storage module is used to store the acquired unique characteristic information of the terminal and the first encrypted data; the characteristic information input interface is used to provide an input interface for filling the unique characteristic information of the terminal; the encryption module is used to store the unique characteristic information of the filled terminal Data encryption is performed to generate first encrypted data.

Preferably, the data processing module includes: an encryption and decryption conversion module and a data matching module;

The encryption and decryption conversion module is connected to the memory, and is used to decrypt the first encrypted data and obtain decrypted data information; the data matching module is connected to the encryption and decryption conversion module, and is used to combine the decrypted data information with the The original data is compared, and the corresponding RSA authorization control instruction is output according to the comparison result;

Said comparing said decrypted data information with said original data, and outputting a corresponding RSA authorization control instruction according to the comparison result, specifically includes:

The data matching module acquires the decrypted data information and the original data;

Comparing the decrypted data information with the original data to determine whether they are the same;

If they are the same, output an RSA authorization control command that agrees to authorize the RSA key to the terminal;

Otherwise, output an RSA authorization control instruction that refuses to authorize the RSA key to the terminal.

Preferably, the data processing module includes: an encryption and decryption conversion module and a data matching module;

The encryption and decryption conversion module is connected to the memory, and is used to encrypt the original data to obtain second encrypted data; the data matching module is connected to the encryption and decryption conversion module, and is used to compare the second encrypted data with the The first encrypted data is compared, and a corresponding RSA authorization control instruction is output according to the comparison result;

Said comparing said decrypted data information with said original data, and outputting a corresponding RSA authorization control instruction according to the comparison result, specifically includes:

The data matching module acquires the second encrypted data and the first encrypted data;

The data matching module compares the second encrypted data with the first encrypted data to determine whether they are the same;

If they are the same, output an RSA authorization control command that agrees to authorize the RSA key to the terminal;

Otherwise, output an RSA authorization control instruction that refuses to authorize the RSA key to the terminal;

Wherein, the data encryption method or algorithm used to generate the second encrypted data is the same as that used to generate the first encrypted data.

Preferably, determining whether to perform RSA key authorization on the terminal according to the RSA authorization control instruction; specifically includes:

If the RSA authorization function module receives an RSA authorization control instruction agreeing to authorize the RSA key to the terminal, then authorize the terminal with the RSA key;

If the RSA authorization function module receives an RSA authorization control instruction refusing to authorize the RSA key to the terminal, it does not authorize the RSA key to the terminal.

Preferably, the server also includes a USB interface; the terminal also includes a communication connection module;

The communication connection module includes a communication interface and a communication connection management module for establishing a communication connection with the server, specifically including:

Connecting the communication interface and the USB interface through a data line to establish a physical connection for data communication;

The communication connection management module detects whether the USB debugging function of the terminal has been opened;

If so, the terminal establishes preliminary data communication with the server, and imports the first encrypted data from the server;

Otherwise, the communication connection management module sends a communication connection abnormality prompt message, prompting the user terminal not to enable the USB debugging function, and unable to connect to the server; continue to detect whether the USB debugging function of the terminal has been turned on.

Preferably, the terminal further includes an instruction input interface and a control instruction processing module; the communication connection management module is connected to the control instruction processing module, and the control instruction processing module is connected to the instruction input interface;

When the terminal is locked and the USB debugging function of the terminal is not enabled, if it is detected that the command input interface inputs a control command to enable the USB debugging function of the terminal, immediately enable the USB debugging function of the terminal, specifically including:

Open the command input interface of the terminal;

The control instruction processing module detects and judges whether the control instruction input by the instruction input interface is the same as the preset control instruction for enabling the USB debugging function; if they are the same, the control instruction processing module controls to enable the USB debugging function of the terminal.

Preferably, the unique characteristic information of the filling terminal specifically includes:

After the terminal establishes preliminary data communication with the server, the server sends an information acquisition instruction with a verification code to the terminal;

The terminal receives the information acquisition instruction, and verifies the verification code;

After passing the verification, obtain the unique characteristic information of the terminal from the memory and send it to the server;

The server receives the unique feature information of the terminal, and automatically fills in the feature information input interface.

Preferably, the unique characteristic information of the filling terminal specifically includes:

Open the command input interface of the terminal;

Inputting a control instruction for acquiring unique characteristic information of the terminal on the instruction input interface;

The control command processing module detects and judges whether the control command input on the command input interface is the same as the preset unique feature information acquisition command; if they are the same, the command input interface reads the unique feature information of the terminal from the memory information, and display the unique characteristic information of the terminal on the instruction input interface.

Manually fill the displayed unique characteristic information of the terminal into the characteristic information input interface.

Preferably, the terminal includes a smart phone, an e-book reader, an MP3 player, an MP4 player and a tablet computer.

Preferably, the unique characteristic information of the terminal includes: the device identification number and/or product serial number of the terminal and/or the international identity code of the mobile device and/or the user ID number of the bound terminal.

Preferably, the terminal further includes an unlocking interface for providing an instruction input interface opening key, and the instruction input interface is opened by triggering the instruction input interface opening key.

Preferably, the command input interface includes a number dial or an emergency dial that can be opened when the terminal is locked.

Beneficial effects of the present invention: the terminal obtains from the server the first encrypted data generated by the server according to the unique characteristic information of the terminal, and since the data encryption and decryption of the terminal and the server use the same algorithm, the data security is guaranteed, and other encrypted data not using this algorithm can be encrypted. The server or the terminal cannot obtain the data information of the terminal. At the same time, when both of them adopt this algorithm, when the terminal is locked and cannot pop up the RSA authorization window, by matching the data information of the terminal and the server, the terminal does not need to be unlocked. Under certain circumstances, it can also automatically perform RSA authorization, establish an ADB connection, and then export data or clear the terminal lock password through the ADB connection, without flashing or other complicated ways to unlock, which is more convenient to use and meets the needs of users.

Description of drawings

Fig. 1 is a flow chart of a method for obtaining RSA key authorization when a terminal is locked on a screen according to a first embodiment.

Fig. 2 is a flow chart of the method for judging whether the first encrypted data matches the unique feature information of the terminal according to the first embodiment.

Fig. 3 is a flow chart of a method for acquiring RSA key authorization when the terminal screen is locked according to the second embodiment.

Fig. 4 is a flow chart of a method for acquiring RSA key authorization when the terminal screen is locked according to the third embodiment.

FIG. 5 is a flowchart of a method for enabling a USB debugging function of a terminal in a screen-locked state according to a third embodiment.

Fig. 6 is a flowchart of a first method for generating first encrypted data by a server according to a fourth embodiment.

Fig. 7 is a flowchart of a second method for generating first encrypted data by the server in the fourth embodiment.

FIG. 8 is a flowchart of a system for acquiring RSA key authorization in a locked screen state according to the fifth embodiment.

In the figure: 10, server; 11, processor; 12, information storage module; 13, encryption module; 14, characteristic information input interface; 15, USB interface; 20, terminal; 21, communication connection module; 22, memory; 23 . Data processing module; 24. Control command processing module; 25. RSA authorization function module; 26. Command input interface; 27. Unlocking interface; 211. Communication interface; 212. Communication connection management module; 231. Encryption and decryption conversion module; , Data matching module.

Detailed ways

The technical solutions of the present invention will be further described below in conjunction with the accompanying drawings and through specific embodiments. It should be understood that the specific embodiments described here are only used to explain the present invention, but not to limit the present invention. In addition, it should be noted that, for the convenience of description, only parts related to the present invention are shown in the drawings but not all content.

The technical solutions of the present invention will be further described below in conjunction with the accompanying drawings and through specific embodiments.

In the embodiment of the present invention, the unique feature information of terminal 20 includes equipment ID (Identification, identity identification number), SN (Serial Number, product serial number), IMEI (International Mobile Equipment Identification Number, mobile equipment international identity code), binding One or more of the characteristic information such as the user ID number of the terminal 20, the unique characteristic information is used to identify and identify the terminal 20, that is, the terminal 20 and the unique characteristic information are in one-to-one correspondence, and the unique characteristic information corresponds to the unique Terminal 20, there is no confusion and repetition.

In the embodiment of the present invention, the terminal 20 is an intelligent terminal 20 with a data processing function, including a smart phone, an e-book reader, and an MP3 (Moving Picture Experts Group AudioLayer III, moving picture expert compression Standard audio layer 3) player, MP4 (Moving Picture ExpertsGroup Audio Layer IV, moving picture experts compressed standard audio layer 4) player, personal computer, tablet computer, etc.

In the embodiment of the present invention, the locking of the terminal 20 is a security protection function such as setting a password to restrict the use of the terminal 20, and locking and keeping personal information confidential. There may be various forms of expression, such as locking the screen to prohibit user operations, etc. When the terminal 20 needs to be unlocked, it needs to input a specified unlock password, such as a fixed unlock gesture or a digital password.

Among them, RSA is an encryption algorithm, which was proposed by Ron Rivest, Adi Shamir and Leonard Adleman in 1977. RSA is composed of the initial letters of their surnames. RSA is the first algorithm that can be used for encryption and digital signature at the same time, and it is also easy to understand and operate.

It should be noted that different terminals 20 can use different operation interfaces. For example, the expression forms of the command input interface 26 may be different; It may be to key in instructions through a keyboard; for those skilled in the art, the principles are the same or similar, and all belong to the protection scope of the present invention.

Embodiment one:

When the terminal 20 is in an unlocked state, when the terminal 20 is connected to the server 10, the RSA authorization window can be displayed normally, and the user can operate normally to perform RSA key authorization, thereby establishing an ADB connection normally. Normal data interaction can be carried out between.

However, when the terminal 20 is in the locked state, when the terminal 20 is connected to the server 10, the RSA authorization window is blocked, so that the server 10 cannot obtain the data of the terminal 20, in order to protect user data or privacy, it needs to be unlocked first. Perform related operations on the RSA authorization window to obtain RSA authorization. However, if the user forgets the unlock password of the terminal 20 and cannot unlock it, this embodiment can provide a method for obtaining RSA key authorization when the terminal 20 is locked, so that the terminal 20 can obtain the RSA key when the screen is locked. key authorization, to obtain the data of the terminal 20 or realize operations such as erasing the lock screen password of the terminal 20.

Please refer to FIG. 1 . FIG. 1 is a flowchart of a method for obtaining RSA key authorization when the terminal 20 is locked on the screen according to the first embodiment. The method includes:

Step S110 , the terminal 20 establishes a communication connection with the server 10 .

There are many ways to realize the communication connection between the terminal 20 and the server 10, and the most common ones are wired connection and wireless connection. Wireless connections include Bluetooth, NFC (Near Field Communication, near field communication) and the like. This embodiment adopts the wired connection mode, connects to the server 10 through the data line, what the data line adopts is the USB data line, connects the USB interface of the terminal 20 and the server 10 respectively through the data line, realizes communication connection and data communication.

Step S120, inputting a control instruction for acquiring the first encrypted data.

When the terminal 20 establishes a communication connection with the server 10, the screen of the terminal 20 will automatically enter the unlocking interface 27. If the terminal 20 is in a power saving state and does not enter the unlocking interface 27, the terminal 20 can also be triggered by buttons such as a power button and a HOME button. Enter the unlocking interface 27.

If the terminal 20 enters the unlocking interface 27 , the command input interface 26 of the terminal 20 is called out by touching the command input interface start key provided on the unlocking interface 27 . The setting of the touch mode of the command input interface opening key can be various, such as clicking the command input interface opening key to open the command input interface 26, dragging the icon of the command input interface opening key to open the command input interface 26, etc.

After the command input interface 26 is opened, relevant control commands can be input on the command input interface 26 . Input the control instruction for obtaining the first encrypted data. For example, the preset control instruction for obtaining the first encrypted data is "*#67766776001#". After the terminal 20 detects that the control instruction is entered correctly, the terminal 20 starts to import the first Encrypt data.

Step S130 , obtaining first encrypted data from the server 10 .

Before the terminal 20 and the server 10 establish an ADB connection, the server 10 cannot obtain user data from the terminal 20, and the terminal 20 cannot obtain data from the server 10. In this embodiment, it is set that the terminal 20 and the server 10 establish an ADB connection before A specific message channel controls the terminal 20 to transmit specific data with the server 10 through a specific control command, such as the unique characteristic information of the terminal 20, the first encrypted data of the server 10, and the like.

Specifically, in step S120, if the terminal 20 detects that the input of the control command for obtaining the first encrypted data is correct, the terminal 20 sends a request message for the first encrypted data to the server 10, and after the server 10 passes the verification, the terminal 20 starts to import from the server 10. First encrypt the data.

Step S140, judging whether the first encrypted data matches the unique feature information of the terminal 20.

After the first encrypted data is imported into the terminal 20, the data processing module 23 of the terminal 20 reads the unique feature information of the terminal 20 from the local memory 22, and matches the first encrypted data with the unique feature information.

Please refer to FIG. 2 . FIG. 2 is a flowchart of a method for judging whether the first encrypted data matches the unique feature information of the terminal 20 according to the first embodiment.

Step S140 specifically includes:

S141. The encryption/decryption conversion module 231 decrypts the first encrypted data to obtain decrypted data information.

The decryption method of the encryption/decryption conversion module 231 corresponds to the encryption method of the server 10, or the algorithms adopted by both are the same.

S142. Compare the decrypted data information with the unique characteristic information of the terminal 20, and determine whether the two are the same.

The first encrypted data is generated by the server 10 according to the unique characteristic information of the terminal 20 .

S143. If they are the same, it means that the first encrypted data matches the unique feature information of the terminal 20; go to step S150.

S144. Otherwise, it indicates that the first encrypted data does not match the unique feature information of the terminal 20; go to step S160.

The encryption and decryption conversion module 231 and the encryption module 13 of the server 10 adopt the same algorithm or method for encryption or decryption. That is, for an original data, it is encrypted by the encryption module 13 of the server 10 and transmitted to the terminal 20, and the encryption/decryption conversion module 231 of the terminal 20 can obtain the original data after decryption. If the acquired original data is wrong or different, it indicates that the terminal 20 and the server 10 do not match. Using this data encryption and decryption method for data communication can prevent the risk of data leakage.

Step S150 , if they match, perform RSA key authorization on the terminal 20 .

There are many algorithms or methods for data encryption, and manufacturers generally have their own unique data encryption methods. If the first encrypted data matches the unique characteristic information of the terminal 20, it indicates that the server 10 is an after-sales service equipment corresponding to the terminal 20, and sends an RSA authorization control instruction agreeing to perform RSA key authorization on the terminal 20, and performs RSA key authorization on the terminal 20. authorized.

Step S160 , if they do not match, do not perform RSA key authorization on the terminal 20 .

If the first encrypted data does not match the unique characteristic information of the terminal 20, it means that the server 10 is an after-sales service device that does not correspond to the terminal 20 or the unique characteristic information is obtained incorrectly, etc. 20 Perform RSA key authorization.

In this embodiment, the same type of terminal 20 corresponds to the same server 10, and the server 10 is the after-sales service equipment corresponding to the terminal 20. The after-sales service equipment is generally official, and there is no intentional disclosure of user privacy, so this embodiment is adopted The method can only take effect between the corresponding terminal 20 and the server 10, and will not cause the leakage of customer information. In the case that the user forgets the password, there is no need to clear the password through flashing or other complicated manual operations, which can greatly improve the user experience. It reduces the workload of after-sales personnel and greatly saves time.

For the above steps, it can be understood that, among them, step S120 is a step that can be omitted, that is, after the terminal 20 establishes a communication connection with the server 10, it can be set to automatically send a control signal to obtain the first encrypted data without receiving an input to obtain An instruction to obtain the first encrypted data from the server.

Embodiment two:

Please refer to FIG. 3 . FIG. 3 is a flowchart of a method for obtaining RSA key authorization when the terminal 20 is locked on the screen according to the second embodiment. The method includes:

Step S110 , the terminal 20 establishes a communication connection with the server 10 .

There are many ways to realize the communication connection between the terminal 20 and the server 10, and the most common ones are wired connection and wireless connection. Wireless connections include Bluetooth, NFC (Near Field Communication, near field communication) and the like. What this embodiment adopts is the wired connection mode, what use is to connect to server 10 by data wire, what data wire adopts is USB data wire, connect terminal 20 and USB interface 15 of server 10 respectively by data wire, realize communication connection and data communication.

Step S120, inputting a control instruction for acquiring the first encrypted data.

When the terminal 20 establishes a communication connection with the server 10, the screen of the terminal 20 will automatically enter the unlocking interface 27. If the terminal 20 is in a power saving state and does not enter the unlocking interface 27, the terminal 20 can also be triggered by buttons such as a power button and a HOME button. Enter the unlocking interface 27.

If the terminal 20 enters the unlocking interface 27 , the command input interface 26 of the terminal 20 is called out by touching the command input interface start key provided on the unlocking interface 27 . The setting of the touch mode of the command input interface opening key can be various, such as clicking the command input interface opening key to open the command input interface 26, dragging the icon of the command input interface opening key to open the command input interface 26, etc.

After the command input interface 26 is opened, relevant control commands can be input on the command input interface 26 . Input the control instruction for obtaining the first encrypted data. For example, the preset control instruction for obtaining the first encrypted data is "*#67766776001#". After the terminal 20 detects that the control instruction is entered correctly, the terminal 20 starts to import the first Encrypt data.

Step S130 , obtaining first encrypted data from the server 10 .

Before the terminal 20 and the server 10 establish an ADB connection, the server 10 cannot obtain user data from the terminal 20, and the terminal 20 cannot obtain data from the server 10. In this embodiment, it is set that the terminal 20 and the server 10 establish an ADB connection before A specific message channel controls the terminal 20 to transmit specific data with the server 10 through a specific control command, such as the unique characteristic information of the terminal 20, the first encrypted data of the server 10, and the like.

Specifically, in step S120, if the terminal 20 detects that the input of the control command for obtaining the first encrypted data is correct, the terminal 20 sends a request message for the first encrypted data to the server 10, and after the server 10 passes the verification, the terminal 20 starts to import from the server 10. First encrypt the data.

Step S140, judging whether the first encrypted data matches the unique feature information of the terminal 20.

After the first encrypted data is imported into the terminal 20, the data processing module 23 of the terminal 20 reads the unique feature information of the terminal 20 from the local memory 22, and matches the first encrypted data with the unique feature information.

Step S140 specifically includes:

S145. The encryption/decryption conversion module 231 encrypts the unique feature information of the terminal 20 to generate second encrypted data.

The encryption method of the encryption/decryption conversion module 231 is the same as that of the server 10, or the algorithms adopted by both are the same.

S146. Compare the second encrypted data with the first encrypted data, and determine whether they are the same.

Both the first encrypted data and the second encrypted data are encrypted by sampling the same algorithm. If the unencrypted original data used by both are the same, the first encrypted data and the second encrypted data should also be the same. If the unencrypted original data used by the two are different, the first encrypted data and the second encrypted data should also be different.

S147. If they are the same, match the first encrypted data with the unique feature information of the terminal 20; go to step S150.

S148. Otherwise, the encrypted data does not match the unique feature information of the terminal 20; go to step S160.

Wherein, the methods of encrypting data adopted by the server 10 and the terminal 20 are the same.

Step S150 , if they match, perform RSA key authorization on the terminal 20 .

If the first encrypted data matches the unique characteristic information of the terminal 20, it means that the server 10 is an after-sales service device corresponding to the terminal 20, and the terminal 20 sends an RSA authorization control command agreeing to authorize, and authorizes the terminal 20 with an RSA key.

Step S160 , if they do not match, do not perform RSA key authorization on the terminal 20 .

If the first encrypted data does not match the unique characteristic information of the terminal 20, it means that the server 10 is an after-sales service device that does not correspond to the terminal 20 or the unique characteristic information is obtained incorrectly, etc. 20 Perform RSA key authorization.

In this embodiment, the same type of terminal 20 corresponds to the same server 10, and the server 10 is the after-sales service equipment corresponding to the terminal 20. The after-sales service equipment is generally official, and there is no intentional disclosure of user privacy, so this embodiment is adopted The method can only take effect between the corresponding terminal 20 and the server 10, and will not cause the leakage of customer information. In the case that the user forgets the password, there is no need to clear the password through flashing or other complicated manual operations, which can greatly improve the user experience. It reduces the workload of after-sales personnel and greatly saves time.

For the above steps, it can be understood that, among them, step S120 is a step that can be omitted, that is, after the terminal 20 establishes a communication connection with the server 10, it can be set to automatically send a control signal to obtain the first encrypted data without receiving an input to obtain An instruction to obtain the first encrypted data from the server.

Embodiment three:

In the first embodiment and the second embodiment, if the terminal 20 does not enable the USB function debugging function, the terminal 20 and the server 10 cannot establish a USB communication connection, cannot establish a specific message channel, and cannot transmit unique characteristic information such as the terminal 20 , the first encrypted data of the server 10 and other data. Therefore, when the terminal 20 is in the locked state and the USB function debugging function is not enabled, a method capable of enabling the USB function debugging function in the locked state is required.

Please refer to FIG. 4 , which is a flowchart of a method for obtaining RSA key authorization when the terminal 20 is locked on the screen according to the third embodiment of FIG. 4 .

Step S110 , the terminal 20 establishes a communication connection with the server 10 .

The terminal 20 is connected to the server 10 through a data line, and the data line is a USB data line, and the terminal 20 and the USB interface 15 of the server 10 are respectively connected through the data line to realize communication connection and data communication.

Step S110 specifically includes:

Step S111 , the terminal 20 is connected to the USB interface 15 of the server 10 through a data cable.

Step S112 , the data cable is connected successfully, and it is detected whether the USB debugging function of the terminal 20 is enabled, and if enabled, proceed to step S113 ; otherwise, the establishment of data communication between the terminal 20 and the server 10 fails, and proceed to step S114 .

In step S113, the terminal 20 and the server 10 initially establish data communication, and proceed to step S120.

If the USB debugging function of the terminal 20 is turned on, after the terminal 20 and the server 10 initially establish data communication, they can transmit specific messages and data to each other according to some specific instructions preset in advance, such as the request message of the first encrypted data, the unique Feature information, first encrypted data, etc.

Step S114, sending out a USB connection abnormal prompt message, and returning to step S112.

If the USB debugging function of the terminal 20 is not turned on, the terminal 20 and the server 10 cannot establish data communication, and the terminal 20 and the server 10 cannot perform information interaction, the terminal 20 will send a USB connection abnormal prompt message, and the USB connection abnormal prompt message can be found on the unlock interface 27 or displayed on the screen to remind the user that the USB debugging function is not enabled, and at the same time return to step S112, and continue to detect whether the USB debugging function of the terminal 20 is enabled.

Step S120, inputting a control instruction for acquiring the first encrypted data. Specifically include:

Step S121 , open the instruction input interface 26 of the terminal 20 .

When the terminal 20 establishes a communication connection with the server 10 , the screen of the terminal 20 will automatically enter the unlocking interface 27 . If the terminal 20 is in the power-saving state and does not enter the unlocking interface 27 at this time, the terminal 20 can also be triggered to enter the unlocking interface 27 through buttons such as a power button and a HOME button.

If the terminal 20 enters the unlocking interface 27 , the command input interface 26 of the terminal 20 is called out by touching the command input interface start key provided on the unlocking interface 27 . The setting of the touch mode of the command input interface opening key can be various, such as clicking the command input interface opening key to open the command input interface 26, dragging the icon of the command input interface opening key to open the command input interface 26, etc.

Step S122, inputting a control instruction for acquiring the first encrypted data.

After the command input interface 26 is opened, relevant control commands can be input on the command input interface 26 . If a control command for obtaining the first encrypted data is input on the command input interface 26 at this time, after the control command processing module of the terminal 20 confirms that the input is correct, the terminal 20 will send a request message for the first encrypted data to the server 10 to obtain the first encrypted data. .

The command input interface 26 can be expressed in different forms according to different hardware environments. For example, if a terminal 20 with a peripheral keyboard is used, after entering the command input interface 26, the user can be allowed to use the keyboard to key in relevant commands; if a touch screen without a peripheral keyboard is adopted, In the terminal 20, the instruction input interface 26 is equipped with a touch keyboard to allow relevant instructions to be input through touch on the touch screen.

Wherein, the touch keyboard attached to the command input interface 26 is a number dial or an emergency dial.

Step S123 , importing the first encrypted data from the server 10 .

After receiving the request message of the first encrypted data, the server 10 obtains the first encrypted data from the information storage module 12 and imports the data into the terminal 10 after passing the verification.

Step S130 , obtaining first encrypted data from the server 10 .

Before the terminal 20 and the server 10 establish an ADB connection, the server 10 cannot obtain user data from the terminal 20. In this embodiment, the terminal 20 and the server 10 can be set to establish a specific message channel before the ADB connection is established, so that the terminal 20 and the server 10 is connected but specific data can be transmitted before the ADB connection is established, such as the unique characteristic information of the terminal 20, the first encrypted data of the server 10, and the like.

The terminal 20 imports the first encrypted data from the server 10, and stores the data in the local memory 22 after the first encrypted data is successfully imported.

Step S140, judging whether the first encrypted data matches the unique feature information of the terminal 20.

After the first encrypted data is imported into the terminal 20, the data processing module 23 of the terminal 20 reads the unique characteristic information of the terminal 20 from the local memory 22, and judges whether the first encrypted data matches the unique characteristic information of the terminal 20.

Step S150 , if they match, perform RSA key authorization on the terminal 20 .

If the first encrypted data matches the unique characteristic information of the terminal 20, it means that the server 10 is an after-sales service device corresponding to the terminal 20, and the terminal 20 sends an RSA authorization control command to authorize the terminal 20 with an RSA key.

Step S160 , if they do not match, do not perform RSA key authorization on the terminal 20 .

If the first encrypted data does not match the unique characteristic information of the terminal 20, it means that the server 10 is an after-sales service device that does not correspond to the terminal 20 or the acquisition of the unique characteristic information is wrong. RSA key authorization serves the purpose of protecting user data.

In step S114, because the USB debugging function of the terminal 20 is not enabled, the connection between the terminal 20 and the server 10 fails. At this time, if the USB debugging function of the terminal 20 is to be enabled, the following method can be implemented.

For the above steps, it can be understood that, among them, step S120 is a step that can be omitted, that is, after the terminal 20 establishes a communication connection with the server 10, it can be set to automatically send a control signal to obtain the first encrypted data without receiving an input to obtain An instruction to obtain the first encrypted data from the server.

Step S114 may also be replaced by: automatically enabling the USB debugging function of the terminal. No need to turn it on manually.

Please refer to FIG. 5 , which is a flow chart of a method for enabling the USB debugging function of the terminal 20 in a locked screen state according to a third embodiment.

Step S210, open the instruction input interface 26 of the terminal 20.

The operation steps are similar to step S121. If the terminal 20 is locked and the USB debugging function of the terminal 20 is not enabled, open the command input interface 26 of the terminal 20 under the unlock interface 27 .

Step S220 , input a control command to enable the USB debugging function on the command input interface 26 .

Input a control command to enable the USB debugging function on the command input interface 26, and the control command can be preset, for example, set the control command to "*#66776676".

Step S230, enabling the USB debugging function.

The terminal 20 detects whether the command input by the command input interface 26 is consistent with the preset control command for enabling the USB debugging function, and if so, immediately enables the USB debugging function.

Embodiment four:

Please refer to FIG. 6 , which is a flow chart of a first method for generating first encrypted data by the server 10 of the fourth embodiment. The method includes:

Step S300 , the server 10 establishes a communication connection with the terminal 20 .

Step S301 , the server 10 sends to the terminal 20 a feature information acquisition instruction with a verification code.

The server 10 sends a characteristic information acquisition instruction with a verification code to the terminal 20, and the terminal 20 receives the characteristic information acquisition instruction, and verifies the verification code attached to the instruction; after the verification is passed, the unique characteristic information of the terminal 20 is sent to the server 10; If the verification fails, the unique feature information of the terminal 20 will not be sent to the server 10 .

Step S302 , the server 10 receives the unique characteristic information of the terminal 20 and automatically fills the characteristic information input interface 14 .

Step S303, start the encryption function of the encryption module 13, perform data encryption on the unique characteristic information of the terminal 20 filled in the characteristic information input interface 14, and generate first encrypted data.

Please refer to FIG. 7 , which is a flowchart of a second method for generating first encrypted data by the server 10 in the fourth embodiment. The method includes:

Step S310, open the instruction input interface 26 of the terminal 20.

Step S311 , input a characteristic information acquisition instruction on the instruction input interface 26 .

The characteristic information acquisition instruction can be pre-set, such as setting the instruction input interface 26 to input "*#677666776001#", the terminal 20 detects that the above information is input on the instruction input interface 26, and the control instruction processing module 24 detects that the input is correct, and the instruction input The interface 26 reads the unique feature information of the terminal 20 from the local memory 22 .

Step S312 , after the terminal 20 detects that the command input is correct, it displays the unique feature information of the terminal 20 on the command input interface 26 or the unlocking interface 27 .

Steps S310, S311, and S312 are method steps for obtaining the unique characteristic information of the terminal 20. In addition, there are many ways to obtain the unique characteristic information of the terminal 20, such as through the packaging box of the product.

Step S313 , on the characteristic information input interface 14 of the server 10 , manually input the displayed unique characteristic information.

Step S314, the encryption module 13 activates the function of data encryption, performs data encryption on the keyed in unique feature information, and generates first encrypted data.

In this embodiment, the server 10 can manually input the unique characteristic information on the characteristic information input interface 14, and can also obtain the unique characteristic information from the terminal 20 through the data line to automatically fill the characteristic information input interface 14 and automatically generate the first encrypted data. The entire RSA key authorization process can be automatically completed to meet the diverse needs of users.

In this embodiment, the encryption module 13 is an after-sales service tool software installed on the server 10. This software has a human-computer interaction interface, that is, the feature information input interface 14 in this embodiment. In this interface, the input of feature information There are two ways, one is to automatically fill in feature information, and the other is to manually input feature information. After completing the input of feature information, click or trigger the encrypted data generation button of the software to start encrypting the input feature information. , to generate the first encrypted data.

Embodiment five:

Please refer to FIG. 8 . FIG. 8 is a flowchart of a system for obtaining RSA key authorization in a locked screen state according to a fifth embodiment. The system includes: a terminal 20 with RSA authorization function and a server 10 capable of data encryption.

The terminal 20 includes: a communication connection module 21 , a memory 22 , a data processing module 23 , a control instruction processing module 24 , an RSA authorization function module 25 , an instruction input interface 26 and an unlocking interface 27 . Wherein, the data processing module 23 includes an encryption/decryption conversion module 231 and a data matching module 232 .

Specifically, the communication connection module 21 includes a communication interface 211 and a communication connection management module 212 for managing the communication connection between the terminal 20 and the server 10 . Wherein, the communication interface 211 is a USB type interface. When establishing a communication connection with the server 10, the communication interface 211 is connected to the USB interface 15 of the server 10 through a data cable for data transmission, and the memory 22 is connected to the communication connection module 21 for storing the terminal and the first encrypted data obtained from the server 10. The algorithm adopted by the encryption/decryption conversion module 231 is the same as that adopted by the encryption module 13 of the server 10, and is used for encrypting/decrypting data. The data processing module 23 is used to perform relevant processing on the data of the terminal, such as judging whether the first encrypted data matches the unique characteristic information of the terminal, encrypting/decrypting the data, and so on. The control instruction processing module 24 is used to generate corresponding instructions and process related instruction information according to the input information. The input information includes input information for the instruction input interface 26. In this embodiment, the human-computer interaction interface includes the unlocking interface 27 and the instruction input interface. interface26. The RSA authorization function module 25 is connected to the data matching module 232 for determining whether to perform RSA key authorization on the terminal 20 according to the RSA authorization control instruction issued by the data matching module 232 .

Specifically, the command input interface 26 includes a number dial or an emergency dial that can be opened when the terminal 20 is locked. The number dial or the emergency dial provides input buttons for providing the user with a control command for starting the encryption and decryption conversion module 231 . The unlocking interface 27 includes an instruction input interface opening key, and the instruction input interface 26 is opened by triggering the instruction input interface opening key.

Specifically, the encryption/decryption conversion module 231 is used to decrypt the first encrypted data and obtain decrypted data information. The data matching module 232 is used for judging whether the first encrypted data matches the unique feature information of the terminal 20 . Wherein, the method for judging whether the first encrypted data matches the unique feature information of the terminal 20 specifically includes:

The data matching module 232 compares the decrypted data information with the unique characteristic information of the terminal 20, and judges whether the two are the same; if they are the same, it indicates that the first encrypted data matches the unique characteristic information of the terminal 20; An encrypted data does not match the unique characteristic information of the terminal 20 .

Specifically, the encryption and decryption conversion module 231 is connected to the memory 22 of the terminal 20, and can read the unique feature information of the terminal 20 from the memory 22 of the terminal 20; the encryption and decryption conversion module 231 can also be used to encrypt the unique feature information to generate the first Two encrypted data. The data matching module 232 judges whether the first encrypted data matches the unique characteristic information of the terminal, and further includes:

The data matching module 232 compares the second encrypted data with the first encrypted data, and judges whether the two are identical; if identical, it indicates that the first encrypted data matches the unique feature information of the terminal 20; otherwise, it indicates that the first encrypted data The encrypted data does not match the unique characteristic information of the terminal 20 .

Specifically, the communication connection module 21 includes a communication interface 211 and a communication connection management module 212 . The communication interface 211 is connected to the USB interface 15 of the server 10 through a data cable, and is used to establish a communication connection with the server 10 . The communication connection management module 212 is used for managing the communication connection between the terminal 20 and the server 10; specifically includes:

The communication connection management module 212 detects whether the USB debugging function of the terminal 20 has been opened; if so, the terminal 20 establishes a communication connection with the server 10; otherwise, the terminal 20 sends a communication connection abnormal prompt message, prompting the user terminal 20 to not open the USB debugging function and cannot connect The server 10; continue to detect whether the USB debugging function of the terminal 20 has been turned on.

Wherein, the RSA authorization function module 25 performs RSA key authorization only after receiving an RSA authorization control instruction from the data matching module 232 agreeing to perform RSA key authorization on the terminal 20 .

Specifically, the control instruction processing module 24 is configured to enable the USB debugging function of the terminal 20 when receiving a control instruction for enabling the USB debugging function of the terminal 20 .

Specifically, the server 10 includes: a processor 11 , an information storage module 12 , an encryption module 13 , a characteristic information input interface 14 and a USB interface 15 .

Wherein, the information storage module 12 is used for storing the unique feature information of the terminal 20 and the first encrypted data generated by the server 10; the feature information input interface 14 is used to provide an input interface for inputting the unique feature information of the terminal 20; the encryption module 13 is used for The information input on the feature information input interface 14 is encrypted to generate first encrypted data.

The characteristic information input interface 14 provides two ways of inputting information.

The first method is specifically:

The server 10 sends an information acquisition instruction with a verification code to the terminal 20; the terminal 20 receives the information acquisition instruction, and verifies the verification code; after the verification is passed, the terminal 20 sends the unique characteristic information of the terminal 20 to the server 10; the server 10 receives The unique feature information to the terminal 20 is automatically filled into the feature information input interface 14 of the encryption module 13 .

The second method is specifically:

Obtain the unique feature information of the terminal 20 from the instruction input interface 26 of the terminal 20 ; fill the unique feature information of the terminal 20 into the feature information input interface 14 .

Obtaining the unique characteristic information of the terminal 20 from the instruction input interface 26 of the terminal 20 specifically includes: opening the instruction input interface 26 of the terminal 20; inputting a unique characteristic information acquisition instruction on the instruction input interface 26; terminal 20 receiving the unique characteristic information acquisition instruction Afterwards, the unique characteristic information of the terminal is displayed on the instruction input interface 26 .

The human-computer interaction interface in this embodiment may be provided by an intelligent terminal with a touch screen, and the touch screen includes a resistive touch screen and a capacitive touch screen.

Those of ordinary skill in the art can understand that all or part of the steps for realizing the above-mentioned embodiments can be completed by hardware, and can also be completed by instructing related hardware through a program. The program can be stored in a readable storage medium, and the storage medium can include a memory. , disk or CD, etc.

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the present invention. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention shall be included in the protection of the present invention. within range.

Claims (26)

1. A method for obtaining RSA key authorization when a terminal is locked, is characterized in that, comprising: Obtain the first encrypted data imported into the terminal; Obtain the original data before encryption; matching the first encrypted data with the original data; If the match is successful, RSA key authorization is performed on the terminal; If the matching fails, the RSA key authorization will not be performed on the terminal; Wherein, the original data is the unique characteristic information of the terminal, the first encrypted data is data generated by the server after encrypting the acquired unique characteristic information of the terminal, and the terminal is in a locked state; Matching the first encrypted data with the original data specifically includes: The terminal performs data encryption on the original data to generate second encrypted data; comparing the second encrypted data with the first encrypted data to determine whether they are the same; If they are the same, the match is successful; Otherwise, the match fails; Wherein, the data encryption method or algorithm adopted for generating the second encrypted data is the same as that used for generating the first encrypted data. 2. The method according to claim 1, wherein the step: matching the first encrypted data with the original data, specifically comprises: Decrypt the first encrypted data to obtain decrypted data information; Comparing the decrypted data information with the original data to determine whether they are the same; If they are the same, the match is successful; Otherwise, the match fails. 3. The method according to claim 1 or 2, wherein, before acquiring the first encrypted data imported into the terminal, further comprising: establishing a communication connection with a server; The establishment of a communication connection with the server specifically includes: The terminal establishes a physical connection for communication with the server through a data line; Detect whether the USB debugging function of the terminal is enabled; If so, establish initial data communication with the server, and import the first encrypted data from the server; Otherwise, a communication connection abnormality prompt message is sent to remind the user that the USB debugging function is not enabled on the terminal and cannot connect to the server; continue to detect whether the USB debugging function of the terminal has been turned on. 4. The method according to claim 3, further comprising: when the terminal is locked and the USB debugging function of the terminal is not enabled, if it is detected that the command input interface of the terminal inputs a control command to enable the USB debugging function of the terminal, Immediately enable the USB debugging function of the terminal, including: Open the command input interface of the terminal; Detecting whether the command input interface has a control command input to enable the USB debugging function; if so, enabling the USB debugging function of the terminal. 5. The method according to claim 1, wherein the terminals include smart phones, e-book readers, MP3 players, MP4 players and tablet computers. 6. The method according to claim 1, wherein the unique characteristic information includes: the device identification number and/or product serial number of the terminal and/or the international identity code of the mobile device and/or the user bound to the terminal identity number. 7. A device for obtaining RSA key authorization when a terminal is locked, comprising: a memory, an RSA authorization function module and a data processing module; The memory is used to store the first encrypted data imported into the terminal and the original data before encryption; the data processing module is respectively connected to the memory and the RSA authorization function module for combining the first encrypted data with the The original data is matched, and a corresponding RSA authorization control instruction is output according to the matching result; the RSA authorization function module is used to determine whether to perform RSA key authorization on the terminal according to the received RSA authorization control instruction; Wherein, the original data is the unique characteristic information of the terminal, the first encrypted data is data generated by the server after encrypting the acquired unique characteristic information of the terminal, and the terminal is in a locked state; The data processing module includes: an encryption and decryption conversion module and a data matching module; The encryption and decryption conversion module is connected to the memory, and is used to encrypt the original data to generate second encrypted data; the data matching module is connected to the encryption and decryption conversion module, and is used to compare the second encrypted data with the The first encrypted data is compared, and a corresponding RSA authorization control instruction is output according to the comparison result; Said comparing said decrypted data information with said original data, and outputting a corresponding RSA authorization control instruction according to the comparison result, specifically includes: The data matching module acquires the second encrypted data and the first encrypted data; The data matching module compares the second encrypted data with the first encrypted data to determine whether they are the same; If they are the same, output an RSA authorization control command that agrees to authorize the RSA key to the terminal; Otherwise, output an RSA authorization control instruction that refuses to authorize the RSA key to the terminal; Wherein, the data encryption method or algorithm used to generate the second encrypted data is the same as that used to generate the first encrypted data. 8. The device according to claim 7, wherein the data processing module comprises: an encryption and decryption conversion module and a data matching module; The encryption and decryption conversion module is connected to the memory, and is used to decrypt the first encrypted data and obtain decrypted data information; the data matching module is connected to the encryption and decryption conversion module, and is used to combine the decrypted data information with the The original data is compared, and the corresponding RSA authorization control instruction is output according to the comparison result; Said comparing said decrypted data information with said original data, and outputting a corresponding RSA authorization control instruction according to the comparison result, specifically includes: The data matching module acquires the decrypted data information and the original data; Comparing the decrypted data information with the original data to determine whether they are the same; If they are the same, output an RSA authorization control command that agrees to authorize the RSA key to the terminal; Otherwise, output an RSA authorization control instruction that refuses to authorize the RSA key to the terminal. 9. The device according to claim 7 or 8, wherein the determining whether to perform RSA key authorization on the terminal according to the RSA authorization control instruction; specifically includes: If the RSA authorization function module receives an RSA authorization control instruction agreeing to authorize the RSA key to the terminal, then authorize the terminal with the RSA key; If the RSA authorization function module receives an RSA authorization control instruction refusing to authorize the RSA key to the terminal, it does not authorize the RSA key to the terminal. 10. The device according to claim 9, further comprising: a communication connection module, configured to establish a communication connection with the server; The communication connection module includes a communication interface and a communication connection management module; the establishment of a communication connection with the server specifically includes: Connect the communication interface and the USB interface of the server through a data line to establish a physical connection for data communication; The communication connection management module detects whether the USB debugging function of the terminal has been opened; If so, the terminal establishes preliminary data communication with the server, and imports the first encrypted data from the server; Otherwise, the communication connection management module sends a communication connection abnormality prompt message, prompting the user terminal not to enable the USB debugging function, and unable to connect to the server; continue to detect whether the USB debugging function of the terminal has been turned on. 11. The device according to claim 10, further comprising an instruction input interface and a control instruction processing module; the communication connection management module is connected to the control instruction processing module, and the control instruction processing module is connected to the instruction input interface; When the terminal is locked and the USB debugging function of the terminal is not enabled, if it is detected that the command input interface inputs a control command to enable the USB debugging function of the terminal, immediately enable the USB debugging function of the terminal, specifically including: Open the command input interface of the terminal; The control instruction processing module detects and judges whether the control instruction input by the instruction input interface is the same as the preset control instruction for enabling the USB debugging function; if they are the same, the control instruction processing module controls to enable the USB debugging function of the terminal; Wherein, the instruction input interface is used to provide an operation interface for the user to input a control instruction for enabling the USB debugging function. 12. The device according to claim 7, wherein the terminal comprises a smart phone, an e-book reader, an MP3 player, an MP4 player, and a tablet computer. 13. The device according to claim 7, wherein the unique characteristic information includes: the device identification number and/or product serial number of the terminal and/or the international identity code of the mobile device and/or the user bound to the terminal identity number. 14. The device according to claim 11, wherein the command input interface includes a number dial or an emergency dial that can be opened when the terminal is locked. 15. A system for obtaining RSA key authorization when a terminal is locked, characterized in that it includes a terminal and a server; The terminal includes: a memory, an RSA authorization function module and a data processing module; The memory is used to store the first encrypted data imported into the terminal and the original data before encryption; the data processing module is respectively connected to the memory and the RSA authorization function module for combining the first encrypted data with the The original data is matched, and a corresponding RSA authorization control instruction is output according to the matching result; the RSA authorization function module is used to determine whether to perform RSA key authorization on the terminal according to the received RSA authorization control instruction; Wherein, the original data is the unique characteristic information of the terminal, the first encrypted data is the data obtained after the server encrypts the acquired unique characteristic information of the terminal, and the terminal is in a locked state; The data processing module includes: an encryption and decryption conversion module and a data matching module; The encryption and decryption conversion module is connected to the memory, and is used to encrypt the original data to obtain second encrypted data; the data matching module is connected to the encryption and decryption conversion module, and is used to compare the second encrypted data with the The first encrypted data is compared, and a corresponding RSA authorization control instruction is output according to the comparison result; Said comparing said decrypted data information with said original data, and outputting a corresponding RSA authorization control instruction according to the comparison result, specifically includes: The data matching module acquires the second encrypted data and the first encrypted data; The data matching module compares the second encrypted data with the first encrypted data to determine whether they are the same; If they are the same, output an RSA authorization control command that agrees to authorize the RSA key to the terminal; Otherwise, output an RSA authorization control instruction that refuses to authorize the RSA key to the terminal; Wherein, the data encryption method or algorithm used to generate the second encrypted data is the same as that used to generate the first encrypted data. 16. The system according to claim 15, wherein the server comprises: an encryption module, an information storage module, and a characteristic information input interface; The information storage module is used to store the acquired unique characteristic information of the terminal and the first encrypted data; the characteristic information input interface is used to provide an input interface for filling the unique characteristic information of the terminal; the encryption module is used to store the unique characteristic information of the filled terminal Data encryption is performed to generate first encrypted data. 17. The system according to claim 16, wherein the data processing module comprises: an encryption/decryption conversion module and a data matching module; The encryption and decryption conversion module is connected to the memory, and is used to decrypt the first encrypted data and obtain decrypted data information; the data matching module is connected to the encryption and decryption conversion module, and is used to combine the decrypted data information with the The original data is compared, and the corresponding RSA authorization control instruction is output according to the comparison result; Said comparing said decrypted data information with said original data, and outputting a corresponding RSA authorization control instruction according to the comparison result, specifically includes: The data matching module acquires the decrypted data information and the original data; Comparing the decrypted data information with the original data to determine whether they are the same; If they are the same, output an RSA authorization control command that agrees to authorize the RSA key to the terminal; Otherwise, output an RSA authorization control instruction that refuses to authorize the RSA key to the terminal. 18. The system according to claim 17, characterized in that, the said RSA authorization control instruction determines whether to perform RSA key authorization on the terminal; specifically comprising: If the RSA authorization function module receives an RSA authorization control instruction agreeing to authorize the RSA key to the terminal, then authorize the terminal with the RSA key; If the RSA authorization function module receives an RSA authorization control instruction refusing to authorize the RSA key to the terminal, it does not authorize the RSA key to the terminal. 19. The system according to claim 18, wherein the server further comprises a USB interface; the terminal further comprises a communication connection module; The communication connection module includes a communication interface and a communication connection management module for establishing a communication connection with the server, specifically including: Connecting the communication interface and the USB interface through a data line to establish a physical connection for data communication; The communication connection management module detects whether the USB debugging function of the terminal has been opened; If so, the terminal establishes preliminary data communication with the server, and imports the first encrypted data from the server; Otherwise, the communication connection management module sends a communication connection abnormality prompt message, prompting the user terminal not to enable the USB debugging function, and unable to connect to the server; continue to detect whether the USB debugging function of the terminal has been turned on. 20. The system according to claim 19, wherein the terminal further comprises an instruction input interface and a control instruction processing module; the communication connection management module is connected to the control instruction processing module, and the control instruction processing module is connected to The command input interface; When the terminal is locked and the USB debugging function of the terminal is not enabled, if it is detected that the command input interface inputs a control command to enable the USB debugging function of the terminal, immediately enable the USB debugging function of the terminal, specifically including: Open the command input interface of the terminal; The control instruction processing module detects and judges whether the control instruction input by the instruction input interface is the same as the preset control instruction for enabling the USB debugging function; if they are the same, the control instruction processing module controls to enable the USB debugging function of the terminal. 21. The system according to claim 20, wherein the filling of the unique characteristic information of the terminal specifically includes: After the terminal establishes preliminary data communication with the server, the server sends an information acquisition instruction with a verification code to the terminal; The terminal receives the information acquisition instruction, and verifies the verification code; After passing the verification, obtain the unique characteristic information of the terminal from the memory and send it to the server; The server receives the unique feature information of the terminal, and automatically fills in the feature information input interface. 22. The system according to claim 20, wherein the filling of the unique characteristic information of the terminal specifically includes: Open the command input interface of the terminal; Inputting a control instruction for acquiring unique characteristic information of the terminal on the instruction input interface; The control command processing module detects and judges whether the control command input on the command input interface is the same as the preset unique feature information acquisition command; if they are the same, the command input interface reads the unique feature information of the terminal from the memory information, and display the unique characteristic information of the terminal in the instruction input interface; Manually fill the displayed unique characteristic information of the terminal into the characteristic information input interface. 23. The system according to claim 15, wherein the terminal comprises a smart phone, an e-book reader, an MP3 player, an MP4 player, and a tablet computer. 24. The system according to claim 15, wherein the unique characteristic information of the terminal includes: the device identification number and/or product serial number of the terminal and/or the international identity code of the mobile device and/or the bound terminal user ID number. 25. The system according to claim 21 or 22, wherein the terminal further comprises an unlock interface for providing an instruction input interface opening key, and the instruction input interface is opened by triggering the instruction input interface opening key. 26. The system according to claim 25, wherein the command input interface includes a number dial or an emergency dial that can be opened when the terminal is locked.