CN114584983A - Identity authentication method, system and device - Google Patents

Abstract

The identity authentication method, system and device provided by the present invention include: receiving wireless transmission power information sent by a device to be authenticated, and combining the first transmission loss value and the second transmission loss value to determine the device to be authenticated, the gateway device and the device to be authenticated Whether the device and the device to be connected are in an unobstructed state, it can be determined by judging whether the transmission loss value of the power information during the transmission process meets the preset condition. If the transmission loss value meets the preset condition, the device information of the device to be authenticated is added. The trust list of the device to be connected, so that the device to be connected is connected with the device to be authenticated according to the trust list. The identity authentication method, system and device provided by the present invention reduce the risk of information leakage and prevent the connection It simplifies the identity authentication process, reduces the difficulty of identity authentication, makes the operation easier, and greatly reduces the cost of large-scale deployment of IoT devices.

Description

A kind of identity authentication method, system and device

technical field

The invention relates to the technical field of identity authentication, in particular to an identity authentication method, system and device.

Background technique

Unauthenticated connection is a very commonly used technology in life. You can directly control some devices at home through mobile phones, which is of great help to people's lives, because this technology often does not have any authentication mechanism for the connection of devices. Therefore, such technology can only be applied to low-cost "read-only" sensor products, such as temperature and humidity sensors, even if illegal connection will not cause "accidents", but there is still the risk of information leakage or unavailability, and manual authentication , although it can eliminate security loopholes when connecting, but the operation is too complicated.

SUMMARY OF THE INVENTION

Therefore, the technical problem to be solved by the present invention is to overcome the risk of information leakage and the defect of overly complicated operation in the prior art, so as to provide an identity authentication method, system and device.

In a first aspect, the present invention provides an identity authentication method, comprising the following steps: receiving wireless transmit power information sent by a device to be authenticated, the wireless transmit power information being sent to the device to be authenticated by a gateway device and a device to be connected; Combine the wireless transmission power information of the gateway device and the RSSI threshold value of the gateway device to determine the first transmission loss value between the gateway device and the device to be authenticated; combine the wireless transmission of the device to be connected power information, the RSSI threshold value of the device to be connected, determine the second transmission loss value between the device to be connected and the device to be authenticated; if the first transmission loss value, and the second transmission loss value If the loss value satisfies the first preset condition, the device information of the device to be authenticated is added to the trust list of the device to be connected, so that the device to be connected is connected to the device to be authenticated according to the trust list.

Optionally, in the identity authentication method provided by the present invention, in combination with the wireless transmit power information of the gateway device and the RSSI threshold value of the gateway device, determine the first connection between the gateway device and the device to be authenticated. The transmission loss value includes: according to the wireless transmit power information of the gateway device, determining the actual value of RSSI received by the device to be authenticated from the gateway device; calculating the first RSSI value according to the actual value of RSSI and the RSSI threshold of the gateway device A transmission loss value.

Optionally, in the identity authentication method provided by the present invention, the wireless transmission power information of the device to be connected and the RSSI threshold value of the device to be connected are combined to determine the relationship between the device to be connected and the device to be authenticated. The second transmission loss value between the two includes: according to the wireless transmit power information of the device to be connected, determining that the device to be authenticated receives the actual RSSI value of the device to be connected; according to the actual value of RSSI and the device to be connected Calculate the second transmission loss value of the power information of the device to be connected according to the RSSI threshold.

Optionally, in the identity authentication method provided by the present invention, if the first transmission loss value and the second transmission loss value satisfy a first preset condition, the device information of the device to be authenticated is added to the A trust list of devices to be connected, including: if the first transmission loss value is less than or equal to a first preset value, and the second transmission loss value is less than or equal to a second preset value, determining the first transmission loss value and the second transmission loss value meet the first preset condition, and the device information of the device to be authenticated is added to the trust list of the device to be connected; the first preset value is in the unobstructed state, the gateway The wireless transmission power information sent by the device is the maximum transmission loss value of the transmission loss value within the first preset range; the second preset value is in the unobstructed state, the wireless transmission power information sent by the device to be connected is in the second preset value. Set the maximum transmission loss value within the range.

Optionally, in the identity authentication method provided by the present invention, if the first transmission loss value and the second transmission loss value satisfy a first preset condition, the device information of the device to be authenticated is added to the The trust list of the device to be connected, including: calculating the first ideal state distance according to the first transmission loss value; calculating the second ideal state distance according to the second transmission loss value; when the first ideal state distance is less than or equal to the third the preset value, and the second ideal state distance is less than or equal to the fourth preset value, determine that the first transmission loss value and the second transmission loss value meet the first preset condition, and add the device information of the device to be authenticated The trust list of the device to be connected; the third preset value is in the unobstructed state, the maximum unobstructed boundary value of the wireless transmit power information sent by the gateway device; the fourth preset value is in the unobstructed state, The maximum unobstructed boundary value of the wireless transmit power information sent by the device to be connected.

Optionally, in the identity authentication method provided by the present invention, if the first transmission loss value and the second transmission loss value satisfy the first preset condition, the device information of the device to be authenticated is added to the Before the step of describing the trust list of the device to be connected, it further includes: if the second transmission loss value is less than or equal to the fifth preset value, or, the device to be authenticated receives any message from the device to be authenticated within a preset time period The transmission loss value corresponding to the wireless transmission power information sent by the connecting device is less than or equal to the fifth preset value, and the step of adding the device information of the device to be authenticated to the trust list of the device to be connected is performed; the fifth preset value It is the maximum transmission loss value within the third preset range of the wireless transmission power information sent by the device to be connected in the unobstructed state.

In a second aspect, the present invention provides an identity authentication system, including a cloud platform, a gateway device, a device to be authenticated, and a device to be connected, wherein the device to be connected and the gateway device broadcast wireless transmit power information; the device to be authenticated receives the wireless transmission power information, and send the wireless transmission power information to the cloud platform; the cloud platform receives the wireless transmission power information sent by the device to be authenticated, and the wireless transmission power information is sent by the gateway device and the device to be connected For the device to be authenticated, combine the wireless transmit power information of the gateway device and the RSSI threshold value of the gateway device to determine the first transmission loss value between the gateway device and the device to be authenticated; The wireless transmit power information of the device to be connected, the RSSI threshold value of the device to be connected, determine the second transmission loss value between the device to be connected and the device to be authenticated; if the first transmission loss value , and the second transmission loss value satisfies the first preset condition, and the device information of the device to be authenticated is added to the trust list of the device to be connected; the device to be connected and the device to be authenticated recorded in the trust list device connection.

In a third aspect, the present invention provides an identity authentication device, comprising a signal receiving module for receiving wireless transmit power information sent by a device to be authenticated, the wireless transmit power information being sent to the device to be authenticated by a gateway device and a device to be connected; A first transmission loss value calculation module, configured to combine the wireless transmit power information of the gateway device and the RSSI threshold value of the gateway device to determine the first transmission loss value between the gateway device and the device to be authenticated ; The second transmission loss value calculation module is used to combine the wireless transmission power information of the device to be connected, the RSSI threshold value of the device to be connected, and determine the first connection between the device to be connected and the device to be authenticated. Two transmission loss values; a signal sending module, if the first transmission loss value and the second transmission loss value satisfy a first preset condition, the signal sending module is configured to add the device information of the device to be authenticated The trust list of the device to be connected, so that the device to be connected is connected with the device to be authenticated according to the trust list.

In a fourth aspect, the present invention provides a computer device, comprising: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor , the instruction is executed by the at least one processor, so as to execute the identity authentication method provided by the first aspect of the present invention.

In a fifth aspect, the present invention provides a computer-readable storage medium, where computer instructions are stored in the computer-readable storage medium, and the computer instructions are used to cause the computer to execute the identity authentication method provided in the first aspect of the present invention.

The technical scheme of the present invention has the following advantages:

The identity authentication method, system and device provided by the present invention receive wireless transmission power information sent by the device to be authenticated, the wireless transmission power information is sent by the gateway device and the device to be connected to the device to be authenticated, and the device to be authenticated and the gateway are calculated in combination with the wireless transmission power. The first transmission loss value and the second transmission loss value between the device and the device to be connected are determined by judging whether the first transmission loss value and the second transmission loss value satisfy the first preset condition, so as to determine the device to be authenticated, the gateway device and the Whether the devices to be authenticated are in an unobstructed state, if the first transmission loss value and the second transmission loss value satisfy the first preset condition, it is determined that the devices to be authenticated, the gateway device and the device to be authenticated are in an unobstructed state, that is, to be authenticated. The authentication device, the gateway device, and the device to be authenticated are located in the same room. At this time, the device information of the device to be authenticated is added to the trust list of the device to be connected, so that the device to be connected is connected to the device to be authenticated according to the trust list. Connection, by implementing the present invention, only when the device to be authenticated, the device to be connected, and the gateway device are located in the same room, and the device to be authenticated is determined to be a security device, the connection between the device to be authenticated and the device to be connected can be realized, reducing information leakage. In addition, manual authentication is not required during the authentication process, which simplifies the identity authentication process, reduces the difficulty of identity authentication, makes the operation easier, and greatly reduces the size of IoT devices. The cost of deploying at scale.

Description of drawings

In order to illustrate the specific embodiments of the present invention or the technical solutions in the prior art more clearly, the following briefly introduces the accompanying drawings that need to be used in the description of the specific embodiments or the prior art. Obviously, the accompanying drawings in the following description The drawings are some embodiments of the present invention. For those of ordinary skill in the art, other drawings can also be obtained based on these drawings without creative efforts.

1 is a flowchart of a specific example of an identity authentication method in an embodiment of the present invention;

2 is a schematic structural diagram of a specific example of an identity authentication system in an embodiment of the present invention;

3 is a schematic structural diagram of a specific example of an identity authentication device in an embodiment of the present invention;

FIG. 4 is a schematic structural diagram of a specific example of a computer device in an embodiment of the present invention.

Detailed ways

The technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are a part of the embodiments of the present invention, but not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

Unless clearly required by the context, words such as "including", "comprising" and the like throughout the specification and claims should be construed in an inclusive rather than an exclusive or exhaustive sense; that is, "including but not limited to" meaning.

In the description of the present invention, it should be understood that the terms "first", "second" and the like are used for descriptive purposes only, and should not be construed as indicating or implying relative importance. Also, in the description of the present invention, unless otherwise specified, "plurality" means two or more.

In addition, the technical features involved in the different embodiments of the present invention described below can be combined with each other as long as they do not conflict with each other.

This embodiment provides an identity authentication method, as shown in FIG. 1 , including the following steps:

Step S1: Receive wireless transmit power information sent by the device to be authenticated, where the wireless transmit power information is sent to the device to be authenticated by the gateway device and the device to be connected.

In an optional embodiment, the device to be authenticated includes, but is not limited to, a device including a BLE module such as a mobile phone, and the wireless transmit power information sent by the device to be connected and the gateway device is received through the BLE module.

In an optional embodiment, the devices to be connected include, but are not limited to, temperature sensors, smart home appliances, and other devices.

In an optional embodiment, in the same room, one gateway device can be connected to multiple devices to be connected, and one device to be connected can only be connected to one gateway device.

In an optional embodiment, the device to be connected including the BLE module and the gateway device need to be registered in the cloud platform in advance before use, and the registration information includes the RSSI threshold value of the device to be connected and the gateway device.

In an optional embodiment, the device to be connected and the gateway device broadcast and send their respective wireless transmit power information to peripheral devices through Bluetooth, and when the device to be authenticated enters the gateway device or the broadcast range to be connected, the gateway device or the gateway device is automatically received. Wireless transmit power information sent by the device to be connected.

In an optional embodiment, the broadcast range of the device to be connected and the gateway device is set according to actual needs. Exemplarily, the broadcast distance of the gateway device is set to be 0.2 meters. When the device to be authenticated is 0.2 meters away from the gateway device, the device to be authenticated The device can receive the wireless transmit power information sent by the gateway device.

In an optional embodiment, the device to be authenticated needs to open the APP and enter the transmission range of the device to be connected before it can automatically receive the wireless transmit power information sent by the device to be connected.

In an optional embodiment, the device to be authenticated reports the received wireless transmit power information of the gateway device and the wireless transmit power information of the device to be connected to the cloud platform through the APP.

Step S2: Combine the wireless transmit power information of the gateway device and the RSSI threshold value of the gateway device to determine the first transmission loss value between the gateway device and the device to be authenticated.

In an optional embodiment, different gateway devices have different actual maximum RSSI thresholds due to different installation manners of the BLE modules in different gateway devices.

In an optional embodiment, the RSSI threshold value of the gateway device is obtained according to the device information when the gateway device is registered.

Step S3: Combine the wireless transmit power information of the device to be connected and the RSSI threshold value of the device to be connected to determine a second transmission loss value between the device to be connected and the device to be authenticated;

In an optional embodiment, different devices to be connected have different actual maximum RSSI thresholds due to different installation manners of the BLE modules in different devices to be connected.

In an optional embodiment, the RSSI threshold value of the device to be connected is obtained according to the device information when the device to be connected is registered.

Step S4: if the first transmission loss value and the second transmission loss value satisfy the first preset condition, the device information of the device to be authenticated is added to the trust list of the device to be connected, so that the device to be connected is connected to the device to be authenticated according to the trust list. connect.

In an optional embodiment, the preset condition of the transmission loss value is set according to the environment in which the device containing the BLE module is located.

In an optional embodiment, when the first transmission loss value and the second transmission loss value satisfy the first preset condition, it is considered that the device to be authenticated, the device to be connected, and the gateway device are in an unobstructed state, that is, the device to be authenticated, The device to be connected and the gateway device are located in the same room.

In an optional embodiment, after the device to be authenticated is added to the trust list of the device to be connected, the device to be authenticated can directly control the device to be connected and use the function of the device to be connected.

The identity authentication method provided by the embodiment of the present invention receives wireless transmit power information sent by the device to be authenticated, the wireless transmit power information is sent by the gateway device and the device to be connected to the device to be authenticated, and the device to be authenticated and the gateway device are calculated in combination with the wireless transmit power. The first transmission loss value and the second transmission loss value between the devices to be connected are determined by judging whether the first transmission loss value and the second transmission loss value satisfy the first preset condition, so as to determine the device to be authenticated, the gateway device and the device to be authenticated Whether the devices are in an unobstructed state, if the first transmission loss value and the second transmission loss value meet the first preset condition, it is determined that the device to be authenticated, the gateway device, and the device to be authenticated are in an unobstructed state, that is, the device to be authenticated , the gateway device, and the device to be authenticated are located in the same room. At this time, the device information of the device to be authenticated is added to the trust list of the device to be connected, so that the device to be connected is connected to the device to be authenticated according to the trust list. When implementing the embodiment of the present invention, only when the device to be authenticated, the device to be connected, and the gateway device are located in the same room, and the device to be authenticated is determined to be a security device, the connection between the device to be authenticated and the device to be connected can be realized, and the information is reduced. The risk of leakage eliminates security loopholes during connection, and manual authentication is not required during the authentication process, which simplifies the process, reduces the difficulty of identity authentication, makes the operation easier, and greatly reduces the scale of IoT devices. cost of deployment.

In an optional embodiment, combining the wireless transmit power information of the gateway device and the RSSI threshold value of the gateway device, the step of determining the first transmission loss value between the gateway device and the device to be authenticated includes:

First, according to the wireless transmit power information of the gateway device, determine the actual value of RSSI that the device to be authenticated receives from the gateway device.

Then, the first transmission loss value is calculated according to the actual value of RSSI and the RSSI threshold of the gateway device.

In an optional embodiment, the first transmission loss value is the loss of electromagnetic wave intensity due to environmental factors in the process of receiving the wireless transmission power information of the gateway device by the device to be authenticated.

In an optional embodiment, during the information transmission process, the actual value of RSSI is affected by, but not limited to, air, obstructions, and Bluetooth transmission loss.

In an optional embodiment, the step of determining the second transmission loss value between the device to be connected and the device to be authenticated includes:

First, according to the wireless transmit power information of the device to be connected, it is determined that the device to be authenticated receives the actual value of RSSI of the device to be connected.

Then, the second transmission loss value of the power information of the device to be connected is calculated according to the actual value of RSSI and the RSSI threshold of the device to be connected.

In an optional embodiment, the second transmission loss value is the loss of electromagnetic wave intensity due to environmental factors in the process of receiving the wireless transmission power information of the device to be connected by the device to be authenticated.

In an optional embodiment, when the electromagnetic wave penetrates the object during the transmission process, it will cause some loss of the intensity of the electromagnetic wave, and the specific loss is related to the penetrated object. The electromagnetic wave intensity loss is 1db-1.8db, the electromagnetic wave intensity loss caused by penetrating 12mm glass is about 2db-3db, and the electromagnetic wave loss caused by penetrating a 25cm cement wall is about 20-30db.

In an optional embodiment, in practical applications, the efficiency of the Bluetooth antenna is usually 30%-40%, so the loss caused by the antenna is 8db-10db, for example, when the distance between the device to be authenticated and the device to be connected is 0.2 meters The total loss is about: 34db (25db (air) + 9db (antenna) in the air), and the RSSI measurement error of the chip is 2db-3db, so when the distance between the device to be certified and the device to be connected is 0.2 meters, the test loss is 40db (34 +2*3).

In an optional embodiment, if the first transmission loss value and the second transmission loss value satisfy a first preset condition, the device information of the device to be authenticated is added to the trust list of the device to be connected steps, including:

If the first transmission loss value is less than or equal to the first preset value, and the second transmission loss value is less than or equal to the second preset value, it is determined that the first transmission loss value and the second transmission loss value satisfy the first preset condition, and the The device information of the device to be authenticated is added to the trust list of the device to be connected; the first preset value is the maximum transmission loss value of the transmission loss value within the first preset range of the wireless transmission power information sent by the gateway device in the unobstructed state; The second preset value is the maximum transmission loss value within the second preset range of the wireless transmission power information sent by the device to be connected in the unobstructed state.

In an optional embodiment, when the first transmission loss value is greater than the first preset value, and/or the second transmission loss value is greater than the second preset value, it is determined that the device to be authenticated, the gateway device, the device to be connected If they are not in the same room, at this time, the first transmission loss value and the second transmission loss value do not meet the first preset condition.

In an optional embodiment, the first preset value and the second preset value can be set according to the environment where the gateway device and the device to be connected are located. If the gateway device is placed in a box, a larger first value can be set at this time. The default value. If the gateway device settings are exposed, a smaller first preset value can be set. Similarly, if the device to be connected is placed in a box, a larger second preset value can be set at this time. The device settings are exposed and a smaller second preset can be set. Exemplarily, the first preset value of the gateway device placed in the 8mm wooden box is 1db-1.8db larger than the first preset value placed in the open space, depending on the actual situation.

In an optional embodiment, the first preset range is set according to the environment in which the gateway device is located. Exemplarily, the first preset range can be set to 50 cm, and only the device to be authenticated is centered on the gateway device when the gateway device is located. , the wireless transmission power information sent by the gateway device can be received only within a spherical range with a radius of 50cm.

In an optional embodiment, after the device to be authenticated is added to the trust list of the device to be connected, the device to be authenticated can be connected to the device to be connected and control the device to be connected.

In an optional embodiment, if the first transmission loss value and the second transmission loss value satisfy the first preset condition, the step of adding the device information of the device to be authenticated to the trust list of the device to be connected includes:

The first ideal state distance is calculated according to the first transmission loss value, and the second ideal state distance is calculated according to the second transmission loss value.

When the first ideal state distance is less than or equal to the third preset value, and the second ideal state distance is less than or equal to the fourth preset value, it is determined that the first transmission loss value and the second transmission loss value satisfy the first preset condition, and the The device information of the device to be authenticated is added to the trust list of the device to be connected; the third preset value is the longest distance within the first preset range of the wireless transmission power information sent by the gateway device in the unobstructed state; the fourth preset value is The value is the farthest distance within the second preset range of the wireless transmit power information sent by the device to be connected in the unobstructed state.

In an optional embodiment, it is possible to calculate whether the device to be authenticated and the gateway device, the device to be authenticated and the device to be connected are in an unobstructed state by judging the distance, and the first transmission loss value and the second transmission loss value can be understood as Free space loss, the distance is obtained by calculating the free space loss, and by comparing the distance with the first preset range and the second preset range, when there is an obstruction between the device to be authenticated and the gateway device, the first ideal distance will be Greater than the first preset range, when there is an obstruction between the device to be authenticated and the device to be connected, the first ideal distance will be greater than the first preset range, and the distance between the device to be authenticated and the gateway device and the authentication device can be quickly determined according to the distance. Whether there is any obstruction with the device to be connected.

In an optional embodiment, the calculation formula of the distance is:

Lbf=32.5+20lgF+20lgD

Lbf = free space loss (dB) / D = distance (km) / F = frequency (MHz)

In an optional embodiment, if the first transmission loss value and the second transmission loss value satisfy the first preset condition, before the step of adding the device information of the device to be authenticated to the trust list of the device to be connected, the method further includes:

When the device to be authenticated receives any piece of wireless transmission power information sent by the device to be connected within the time limit, the transmission loss value corresponding to the value is less than or equal to the fifth preset value, and the device information of the device to be authenticated is added to the trust of the device to be connected. The step of listing; the fifth preset value is the maximum transmission loss value within the third preset range of the wireless transmission power information sent by the device to be connected in the unobstructed state.

In order to avoid a situation where the gateway device is connected in one room, and then immediately goes to another room to connect the device to be connected in the room, a time limit is set. The device to be authenticated needs to receive the device within the time limit after connecting to the gateway device. The transmission loss value of the wireless transmission power information sent to the device to be connected is less than or equal to the fifth preset value. Through this embodiment, it can be determined that the gateway device, the device to be authenticated, and the device to be connected are in the same room.

In an optional embodiment, when the device to be authenticated is specifically connected to a device to be connected, it needs to be close to the device within a certain range, and the third preset range is the range that needs to be approached. The maximum transmission loss value within the preset range is compared, and when the second transmission loss value is smaller than the maximum transmission loss value within the third preset range, it is considered that the device to be authenticated is close to the device to be connected.

This embodiment provides an identity authentication system, as shown in FIG. 2 , including: a cloud platform 24 , a gateway device 22 , a device to be authenticated 21 , and a device to be connected 23 .

The to-be-connected device 23 and the gateway device 22 broadcast the wireless transmission power information. For details, refer to the description of step S1 in the above embodiment, which will not be repeated here.

The to-be-authenticated device 21 receives the wireless transmission power information, and sends the wireless transmission power information to the cloud platform 24. For details, see the description of step S1 in the above embodiment, and details are not repeated here.

The cloud platform 24 receives the wireless transmit power information sent by the device to be authenticated 21, and the wireless transmit power information is sent by the gateway device 22 and the device to be connected 23 to the device to be authenticated 21, combined with the wireless transmit power information of the gateway device 22 and the RSSI of the gateway device 22 threshold value, determine the first transmission loss value between the gateway device 22 and the device to be authenticated 21; combine the wireless transmit power information of the device to be connected 23, the RSSI threshold value of the device to be connected 23, determine the device to be connected 23 and the device to be connected The second transmission loss value between the authentication devices 21; if the first transmission loss value and the second transmission loss value satisfy the first preset condition, the device information of the device to be authenticated 21 is added to the trust list of the device to be connected 23 Details See the description of step S1-step S4 in the above-mentioned embodiment, which will not be repeated here.

The device to be connected 23 is connected to the device to be authenticated 21 recorded in the trust list. For details, see the description of step S4 in the foregoing embodiment, which is not repeated here.

This embodiment provides an identity authentication device, as shown in FIG. 3 , including:

The signal receiving module 31 is configured to receive the wireless transmission power information sent by the device to be authenticated. The wireless transmission power information is sent by the gateway device and the device to be connected to the device to be authenticated. For details, see the description of step S1 in the above embodiment. , and will not be repeated here.

The first transmission loss value calculation module 32 is configured to combine the wireless transmission power information of the gateway device and the RSSI threshold value of the gateway device to determine the first transmission loss between the gateway device and the device to be authenticated For details, see the description of step S2 in the above embodiment, and details are not repeated here.

The second transmission loss value calculation module 33 is configured to combine the wireless transmit power information of the device to be connected and the RSSI threshold value of the device to be connected to determine the first transmission loss between the device to be connected and the device to be authenticated 2. The transmission loss value, see the description of step S3 in the above embodiment for details, and details are not repeated here.

The signal sending module 34, if the first transmission loss value and the second transmission loss value meet the preset conditions, add the device information of the device to be authenticated to the trust list of the device to be connected, so that the device to be connected is based on the trust list and the device to be authenticated. For the device connection, see the description of step S4 in the above embodiment for details, and details are not repeated here.

An embodiment of the present invention provides a computer device, as shown in FIG. 4 , including: at least one processor 41 , such as a CPU (Central Processing Unit, central processing unit), at least one communication interface 42 , a memory 44 , and at least one communication bus 43 . Among them, the communication bus 43 is used to realize the connection and communication between these pieces. The communication interface 42 may include a display screen (Display) and a keyboard (Keyboard), and the optional communication interface 42 may also include a standard wired interface and a wireless interface.

The memory 44 may be a high-speed RAM memory (Ramdom Access Memory, volatile random access memory), or may be a non-volatile memory (non-volatile memory), such as at least one disk memory. The memory 44 can optionally also be at least one storage device located away from the aforementioned processor 41 . The processor 41 may execute the identity authentication methods provided in the above embodiments. A set of program codes is stored in the memory 44, and the processor 41 calls the program codes stored in the memory 44 for executing the identity authentication method provided in the above-mentioned embodiment. The communication bus 43 may be a peripheral component interconnect (PCI for short) bus or an extended industry standard architecture (EISA for short) bus or the like. The communication bus 43 can be divided into an address bus, a data bus, a control bus, and the like. For ease of representation, only one line is shown in FIG. 4, but it does not mean that there is only one bus or one type of bus. The memory 44 may include volatile memory (English: volatile memory), such as random-access memory (English: random-access memory, abbreviation: RAM); the memory may also include non-volatile memory (English: non-volatile memory) ), such as flash memory (English: flash memory), hard disk (English: hard disk drive, abbreviation: HDD) or solid-state drive (English: solid-state drive, abbreviation: SSD); the memory 44 may also include the above types of combination of memory. The processor 41 may be a central processing unit (English: central processing unit, abbreviation: CPU), a network processor (English: network processor, abbreviation: NP), or a combination of CPU and NP. The processor 41 may further include a hardware chip. The above-mentioned hardware chip may be an application-specific integrated circuit (English: application-specific integrated circuit, abbreviation: ASIC), a programmable logic device (English: programmable logic device, abbreviation: PLD) or a combination thereof.

The above-mentioned PLD may be a complex programmable logic device (English: complex programmable logic device, abbreviation: CPLD), a field programmable gate array (English: field-programmable gate array, abbreviation: FPGA), a general-purpose array logic (English: generic array logic, abbreviation: FPGA) : GAL) or any combination thereof.

Embodiments of the present invention provide a computer-readable storage medium, where computer-executable instructions are stored in the computer-readable storage medium, and the computer-executable instructions can execute the identity authentication method in any of the foregoing method embodiments. Wherein, the storage medium may be a magnetic disk, an optical disk, a read-only memory (Read-Only Memory, ROM), a random access memory (Random Access Memory, RAM), a flash memory (Flash Memory), a hard disk (Hard Disk Drive) , abbreviation: HDD) or solid-state drive (Solid-State Drive, SSD), etc.; the storage medium may also include a combination of the above-mentioned types of memories.

Obviously, the above-mentioned embodiments are only examples for clear description, and are not intended to limit the implementation manner. For those of ordinary skill in the art, changes or modifications in other different forms can also be made on the basis of the above description. There is no need and cannot be exhaustive of all implementations here. And the obvious changes or changes derived from this are still within the protection scope of the present invention.

Claims (10)

1. An identity authentication method, the method comprising:

receiving wireless transmitting power information sent by equipment to be authenticated, wherein the wireless transmitting power information is sent to the equipment to be authenticated by gateway equipment and the equipment to be connected;

determining a first transmission loss value between the gateway device and the device to be authenticated by combining the wireless transmission power information of the gateway device and the RSSI threshold value of the gateway device;

determining a second transmission loss value between the equipment to be connected and the equipment to be authenticated by combining the wireless transmission power information of the equipment to be connected and the RSSI threshold value of the equipment to be connected;

and if the first transmission loss value and the second transmission loss value meet a first preset condition, adding the equipment information of the equipment to be authenticated into a trust list of the equipment to be connected so that the equipment to be connected is connected with the equipment to be authenticated according to the trust list.

2. The identity authentication method of claim 1, wherein determining a first transmission loss value between the gateway device and the device to be authenticated by combining the wireless transmission power information of the gateway device and an RSSI threshold value of the gateway device comprises:

determining an RSSI actual value of the gateway equipment received by the equipment to be authenticated according to the wireless transmission power information of the gateway equipment;

and calculating the first transmission loss value according to the RSSI actual value and the RSSI threshold of the gateway equipment.

3. The identity authentication method of claim 1, wherein determining a second transmission loss value between the device to be connected and the device to be authenticated by combining the wireless transmission power information of the device to be connected and an RSSI threshold value of the device to be connected comprises:

determining the RSSI actual value of the equipment to be connected received by the equipment to be authenticated according to the wireless transmission power information of the equipment to be connected;

and calculating a second transmission loss value of the power information of the equipment to be connected according to the actual RSSI value and the RSSI threshold of the equipment to be connected.

4. The identity authentication method according to claim 1, wherein if the first transmission loss value and the second transmission loss value satisfy a first preset condition, adding the device information of the device to be authenticated to a trust list of the device to be connected, includes:

if the first transmission loss value is smaller than or equal to a first preset value and the second transmission loss value is smaller than or equal to a second preset value, judging that the first transmission loss value and the second transmission loss value meet a first preset condition, and adding the equipment information of the equipment to be authenticated into a trust list of the equipment to be connected; the first preset value is the maximum transmission loss value of the wireless transmitting power information sent by the gateway equipment in a first preset range under the non-shielding state; the second preset value is the maximum transmission loss value of the wireless transmission power information sent by the equipment to be connected within a second preset range in a non-shielding state.

5. The identity authentication method according to claim 1, wherein if the first transmission loss value and the second transmission loss value satisfy a first preset condition, adding the device information of the device to be authenticated to a trust list of the device to be connected, includes:

calculating a first ideal state distance according to the first transmission loss value;

calculating a second ideal state distance according to the second transmission loss value;

when the first ideal state distance is smaller than or equal to a third preset value and the second ideal state distance is smaller than or equal to a fourth preset value, judging that the first transmission loss value and the second transmission loss value meet a first preset condition, and adding the equipment information of the equipment to be authenticated into a trust list of the equipment to be connected; the third preset value is a maximum non-occlusion boundary value of the wireless transmission power information of the gateway equipment in a non-occlusion state; and the fourth preset value is the maximum non-shielding boundary value of the wireless transmitting power information of the equipment to be connected in a non-shielding state.

6. The identity authentication method according to claim 1, 4 or 5, wherein if the first transmission loss value and the second transmission loss value satisfy a first preset condition, before the step of adding the device information of the device to be authenticated to the trust list of the device to be connected, the method further comprises:

if the second transmission loss value is smaller than or equal to a fifth preset value, or the transmission loss value corresponding to any piece of wireless transmission power information sent by the equipment to be connected and received by the equipment to be authenticated in a preset time period is smaller than or equal to the fifth preset value, executing a step of adding the equipment information of the equipment to be authenticated into a trust list of the equipment to be connected; and the fifth preset value is the maximum transmission loss value of the wireless transmission power information sent by the equipment to be connected within a third preset range in a non-shielding state.

7. An identity authentication system is characterized by comprising a cloud platform, gateway equipment, equipment to be authenticated and equipment to be connected,

the equipment to be connected and the gateway equipment broadcast wireless transmission power information;

the equipment to be authenticated receives the wireless transmission power information and sends the wireless transmission power information to the cloud platform;

the cloud platform receives wireless transmission power information sent by equipment to be authenticated, the wireless transmission power information is sent to the equipment to be authenticated by gateway equipment and equipment to be connected, and a first transmission loss value between the gateway equipment and the equipment to be authenticated is determined by combining the wireless transmission power information of the gateway equipment and an RSSI threshold value of the gateway equipment; determining a second transmission loss value between the equipment to be connected and the equipment to be authenticated by combining the wireless transmission power information of the equipment to be connected and the RSSI threshold value of the equipment to be connected; if the first transmission loss value and the second transmission loss value meet a first preset condition, adding the equipment information of the equipment to be authenticated into a trust list of the equipment to be connected;

and the equipment to be connected is connected with the equipment to be authenticated recorded in the trust list.

8. An identity authentication apparatus, comprising:

the system comprises a signal receiving module, a wireless transmitting power information receiving module and a wireless transmitting power information transmitting module, wherein the wireless transmitting power information is transmitted to equipment to be authenticated by gateway equipment and equipment to be connected;

a first transmission loss value calculation module, configured to determine, by combining the wireless transmission power information of the gateway device and the RSSI threshold value of the gateway device, a first transmission loss value between the gateway device and the device to be authenticated;

a second transmission loss value calculating module, configured to determine, by combining the wireless transmission power information of the device to be connected and the RSSI threshold value of the device to be connected, a second transmission loss value between the device to be connected and the device to be authenticated;

and if the first transmission loss value and the second transmission loss value meet a first preset condition, the signal sending module is used for adding the equipment information of the equipment to be authenticated into a trust list of the equipment to be connected so that the equipment to be connected is connected with the equipment to be authenticated according to the trust list.

9. A computer device, comprising: at least one processor; and a memory communicatively coupled to the at least one processor; wherein the memory stores instructions executable by the at least one processor to perform the identity authentication method of any one of claims 1-6.

10. A computer-readable storage medium storing computer instructions for causing a computer to perform the method of authenticating identity of any one of claims 1-6.

Images