WORKING METHOD OF DYNAMIC TOKEN

• US 20160301687A1
• Filed: 03/18/2014
• Published: 10/13/2016
• Est. Priority Date: 05/15/2013
• Status: Active Grant

• Current Assignee: Feitian Technologies Company Limited
• Original Assignee: Feitian Technologies Company Limited
• Inventors: LU, Zhou, YU, Huazhang
• Granted Patent: US 9,781,104 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2147 Locking files
• CPC Class Codes: H04L 63/067 using one-time keys cryptographic mechanisms or cryptographic arrangements for generation of one-time passwords H04L9/0863
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

Disclosed is a working method of a dynamic token. The present invention relates to the field of communications. The method comprises: when a token is awakened, the awakening identification type at a flag bit is determined; if the type is a key awakening identification, the key value is detected, and a corresponding operation is performed according to the key pressed; if the type is a Bluetooth data awakening identification, Bluetooth data is received, and when the Bluetooth data has been received, the Bluetooth data is stored in a received data temporary storage region, and the Bluetooth data awakening identification is reset; if the type is Bluetooth connection awakening identification, that Bluetooth has been connected is displayed, and after fourth preset period has passed, the screen is cleared, and the Bluetooth connection awakening identification is reset; if the type is Bluetooth disconnection awakening identification, that Bluetooth has been disconnected is displayed, the received data temporary storage region is cleared, and the Bluetooth disconnection awakening identification is reset; and if the type is an awakening identification of other types, a corresponding operation according to the awakening identification is performed.

Claims

1. A working method of a dynamic token, comprising:

Step S1, determining, by the dynamic token, whether a set wake identification exists, if the set wake identification exists, Step S2 is executed;

if the set wake identification does not exist, the dynamic token is sleeping;

Step S2, determining, by the dynamic token, a type of the set wake identification, Step S3 is executed if the set wake identification is a key wake identification;

switching a work mode of a Bluetooth module into a monitoring mode, resetting a Bluetooth connection wake identification and going back to Step S1 if the set wake identification is the Bluetooth connection wake identification;

receiving Bluetooth data, storing the Bluetooth data into a data receiving buffer, setting a Bluetooth data receiving completion identification, resetting a Bluetooth data wake identification and going back to Step S1 if the set wake identification is the Bluetooth data wake identification;

clearing the data receiving buffer, resetting a Bluetooth disconnection wake identification and going back to Step S1 if the set wake identification is the Bluetooth disconnection wake identification;

wherein the key wake identification is configured to be set by the dynamic token in a case that the dynamic token detects key interrupt;

the Bluetooth data wake identification is configured to be set by the dynamic token in a case that the token detects Bluetooth data interrupt;

the Bluetooth connection wake identification is configured to be set by the dynamic token in a case that the dynamic token detects Bluetooth connection interrupt;

the Bluetooth disconnection wake identification is configured to be set by the dynamic token in a case that the dynamic token detects Bluetooth disconnection interrupt.

Step S3, obtaining, by the dynamic token, a key value of a triggered key, determining upon the key value whether the triggered key is a power key, executing Step S4 if the triggered key is a power key;

executing Step S5 if the triggered key is not a power key;

Step S4, determining, by the dynamic token, whether a system state identification is a power-off identification;

determining whether a work voltage of the Bluetooth module is lower than a preset voltage, if the system state identification is a power-off identification;

prompting that work voltage of the Bluetooth module is low if the work voltage of the Bluetooth module is lower than the preset voltage and setting the system state identification as a challenge code input identification and executing Step S8, after the working voltage of the Bluetooth module has been lower than the preset voltage for a first preset time;

powering up the Bluetooth module, setting the system state identification as a Bluetooth OTP identification, switching the work mode of the Bluetooth module into a monitoring mode and executing Step S8, if the work voltage is not lower than the preset voltage;

setting the system state identification as a power-off identification, clearing data in a key data buffer, powering off the Bluetooth module and executing Step S8 if the system state identification is not the power-off identification;

Step S5, determining, by the dynamic token, the system state identification, executing Step S6 if the system state identification is the challenge code input identification;

executing Step S7 if the system state identification is the Bluetooth OTP identification;

executing Step S8 if the system state identification is an else identification;

Step S6, obtaining, by the dynamic token, a key value of a triggered key, determining the triggered key upon the key value;

storing a number corresponding to the key value in the key data buffer and executing Step S8 if the triggered key is a number key;

determining whether data exist in the key data buffer if the triggered key is an OK key;

taking the data in the key data buffer as a dynamic factor or taking a combination of the data in the key data buffer and a basic factor inside the dynamic token as a dynamic factor, computing a dynamic password upon the dynamic factor, displaying the dynamic password and executing Step S8, if data exist in the key data buffer;

taking the basic factor as dynamic factor, computing a dynamic password upon the dynamic factor, displaying the dynamic password, and executing Step S8, if no data exist in the key data buffer;

clearing data in the key data buffer and executing Step S8, if the triggered key is a Delete key;

Step S7, obtaining, by the dynamic token, a key value of a triggered key, determining the triggered key upon the key value;

storing the number corresponding to the key value in the key data buffer and executing Step S8, if the triggered key is number key;

determining whether the Bluetooth data receiving completion identification is set if the triggered key is an OK key;

taking the data in the data receiving buffer as the dynamic factor or taking a combination of the basic factor and the data in the data receiving buffer as the dynamic factor, computing the dynamic password upon the dynamic factor, returning the computed dynamic factor to an upper computer and executing Step S8, if the Bluetooth data receiving completion identification is set;

determining whether data exist in the key data buffer if the Bluetooth data receiving completion identification is not set;

taking the data in the key data buffer as the dynamic factor or a combination of the data in the key data buffer and the basic factor inside the token as the dynamic factor, computing the dynamic password according to the dynamic factor, displaying the dynamic factor and executing Step S8, if data exist in the key data buffer;

taking the basic factor as the dynamic factor, computing the dynamic password upon the dynamic factor, returning the computed dynamic password to an upper computer and executing Step S8 if no data exist in the key data buffer;

storing the system state identification as a challenge code input identification and executing Step S8 if the triggered key is a Delete key; and

Step S8, resetting, by the dynamic token, the key wake identification, going back to Step S1.

2. The method of claim 1, wherein

the returning the computed dynamic password to the upper computer comprises displaying the dynamic password via a LCD screen and/or returning the dynamic password to the upper computer via the Bluetooth module.

3. The method of claim 1, wherein

in Step S4, before determining whether a work voltage of the Bluetooth module is lower than a preset voltage the method further comprises

performing a password checking operation;

determining whether a work voltage of the Bluetooth module is lower than a preset voltage if the password is correct;

executing Step S8 if the password is not correct;

and the performing a password checking operation comprises;

Step E1, obtaining, by the dynamic token, a key value of a triggered key, determining the triggered key upon the key value;

executing Step E2 if the triggered key is an OK key;

storing key data corresponding to the number key in the key data buffer, displaying a password checking interface, and quitting the password checking operation if the triggered key is number key and a length of the key data is shorter than a preset length;

performing a corresponding operation upon an else key value and quitting the password checking operation, if the triggered key is the else key.

Step E2, determining whether the password in the key data buffer is correct, executing Step E3 if the password is correct;

executing Step E4 if the password is not correct;

Step E3, prompting that the password is correct, clearing password failure times, delaying a fourth preset time, clearing the key data buffer, determining that the password is correct and ending the password checking operation;

Step E4, adding 1 to the number of the password failure times, displaying a password failure interface, delaying the fourth preset time and executing Step E5;

Step E5, determining whether the number of the password failure times is equal to the number of preset times;

clearing the key data buffer, determining that the password is not correct and executing Step S8, if the number of the password failure times is equal to the number of the preset times;

displaying the password input interface, clearing the key data buffer and executing Step S8, if the number of the password failed times is not equal to the number of the preset times.

4. The method of claim 1, wherein in Step S6, the clearing data in the key data buffer and executing Step S8, if the triggered key is a Delete key, comprises:

Step A1, determining whether a duration of pressing down the Delete key reaches a preset duration;

executing Step A2 if the duration of pressing down the Delete key reaches the preset duration;

executing Step A5 if the duration of pressing down the Delete key does not reach the preset duration;

Step A2, determining whether data exist in the key data buffer;

executing Step A4 if the data exist in the key data buffer;

executing Step A3 if no data exist in the key data buffer;

Step A3, displaying a menu interface, storing the system state identification as a menu function selection identification and executing Step S8;

Step A4, clearing the key data buffer, displaying a challenge code information input interface and executing Step S8;

Step A5, determining whether data exist in the key data buffer;

executing Step A6 if the data exist in the key data buffer;

executing Step A7 if no data exist in the key data buffer;

Step A6, clearing a last stored key value in the key data buffer and executing Step A7;

Step A7, displaying the challenge code information input interface, displaying the data in the key data buffer and executing Step S8;

and the Step S5 further comprises detecting a system state identification, performing a menu function selection operation and executing Step S8, if the system state identification is a menu function selection identification;

wherein the menu function selection operation comprises;

Step H1, detecting a key value;

executing Step H2 if the key value is a value of an OK key;

performing a corresponding operation upon an else key value and quitting the menu function selection operation, if the key value is an else key value, wherein the else key value comprises a key value of a Right key and a key value of a Left key;

Step H2, determining a selected function;

executing Step H3 if the selected function is a Bluetooth OTP;

performing a corresponding function selection operation and quitting the menu function selection operation, if the selected function is an else function;

Step H3, powering up the Bluetooth module, displaying a Bluetooth OTP interface, storing the system state identification as a Bluetooth OTP identification and executing Step H4;

Step H4, reading a Bluetooth module parameter;

Step H5, determining whether the reading the Bluetooth module parameter is successful;

if the reading the Bluetooth module parameter is successful, executing Step H6;

if the reading the Bluetooth module parameter is not successful, executing Step H7;

Step H6, switching the Bluetooth module into a monitoring mode and quitting the menu function selection operation;

Step H7, adding 1 to the times of reading the Bluetooth module parameter;

Step H8, determining whether the number of the times of reading the Bluetooth module parameter reaches a sixth preset value;

executing Step H9 if the number of the times of reading the Bluetooth module parameter reaches the sixth preset value;

going back to Step H4 if the number of the times of reading the Bluetooth module parameter does not reach the sixth preset value;

Step H9, prompting that the Bluetooth module is broken;

powering off the Bluetooth module, delaying a third preset time, displaying a challenge code information input interface, storing the system state identification as a challenge code input identification and quitting the menu function selection operation.

5. The method of claim 1, wherein the basic factor is a time factor, and the method further comprises:

updating, by the dynamic token, a time factor and setting a timer wake identification in a case that timer interrupt is detected;

after determining that the set wake identification is the timer wake identification, the dynamic token executes following Steps;

Step G1, determining whether the system state identification is a Bluetooth OTP identification;

if the system state identification is a Bluetooth OTP identification, adding 1 to a count value of a Bluetooth mode counter and executing Step G2;

if the system state identification is not a Bluetooth OTP identification, executing Step G7;

wherein an initial count value of the Bluetooth mode counter is 0;

Step G2, determining whether the count value of the Bluetooth mode counter is less than a first preset value;

executing Step G4 if the count value of the Bluetooth mode counter is less than the first preset value;

executing Step G3 if the count value of the Bluetooth mode counter is not less than the first preset value;

Step G3, setting the count value of the Bluetooth mode counter as 0, clearing the data receiving buffer, powering off the Bluetooth module, displaying the challenge code information input interface, storing the system state identification as a challenge code input identification and executing Step G6;

Step G4, detecting whether a work voltage of the Bluetooth module is lower than a preset voltage, executing Step G5 if the work voltage is lower than the preset voltage;

executing Step G6 if the work voltage is not lower than the preset voltage;

Step G5, setting the count value of the Bluetooth mode counter as 0, clearing the data receiving buffer, powering off the Bluetooth module, displaying the challenge code information input interface, storing the system state identification as a challenge code input identification, outputting prompting information that work voltage is low and please use Bluetooth function after recharging through LCD screen, and executing Step G6;

Step G6, determining whether the system state identification is a challenge code input identification;

if the system state identification is a challenge code identification, executing Step G7;

otherwise, executing Step G10;

Step G7, adding 1 to a count value of a no-key-press counter;

wherein an initial value of the no-key-press counter is 0;

Step G8, determining whether the count value of the no-key-press counter is less than a second preset value;

executing Step G10 if the count value of the no-key-press counter is less than the second preset value;

executing Step G9 if the count value of the no-key-press counter is not less than the second preset value;

Step G9, setting the count value of the no-key-press counter as 0, storing the system state identification as a power-off identification, clearing the key data buffer and executing Step G10;

Step G10, resetting the timer wake identification and going back to Step S1.

6. The method of claim 1, wherein the basic factor comprises a time factor and/or an event factor.

7. A working method of a dynamic token, comprising:

initializing the dynamic token, enabling key interrupt and/or Bluetooth data interrupt and/or Bluetooth connection interrupt and/or Bluetooth disconnection interrupt, the dynamic token sleeping;

in a case that the dynamic token detects key interrupt, the dynamic token being woken up and executing Step S-1;

Step S-1, obtaining, by the dynamic token, a key value of a triggered key, determining whether the triggered key is a power key upon the key value;

executing Step S-2 if the triggered key is a power key;

detecting a system state identification if the triggered key is not a power key;

executing Step S-3 if the system state identification is a challenge code input identification;

executing Step S-4 if the system state identification is a Bluetooth OTP identification;

the dynamic token sleeping if the system state identification is an else identification;

Step S-2, determining whether the system state identification is a power-off identification, determining whether a work voltage of the Bluetooth module is lower than a preset voltage if the system state identification is a power-off identification;

prompting that the work voltage of the Bluetooth module is low if the work voltage of the Bluetooth module is lower than the preset voltage, storing the system state identification as a challenge code input identification after the work voltage of the Bluetooth module has been lower than the preset voltage for a first preset duration, and the dynamic token is sleeping;

powering up the Bluetooth module if the work voltage is not lower than the preset voltage, storing the system state identification as a Bluetooth OTP identification, switching a work mode of the Bluetooth module into a monitoring mode, and the dynamic token sleeping;

storing the system state identification as a power-off identification if the system state identification is not a power-off identification, clearing the data in the key data buffer, powering off the Bluetooth module, and the dynamic token sleeping;

Step S-3, obtaining, by the dynamic token, a key value of a triggered key, determining the triggered key upon the key value;

storing a number corresponding to the key value into a key data buffer if the triggered key is a number key, and the dynamic token sleeping;

determining whether data exist in the key data buffer if the triggered key is an OK key;

taking the data in the key data buffer or taking a combination of the data in the key date buffer and a basic factor inside the dynamic token as a dynamic factor, computing a dynamic password upon the dynamic factor and displaying the dynamic password, and the dynamic token sleeping, if the data exist in the data buffer;

taking the basic factor as dynamic factor and computing dynamic password upon the dynamic factor, displaying the dynamic password and the dynamic token sleeping, if the data does not exist in the data buffer;

clearing the data in the key data buffer and the dynamic token sleeping, if the triggered key is a Delete key;

Step S-4, obtaining, by the dynamic token, a key value of a triggered key, determining the triggered key upon the key value;

storing the number corresponding to the key value in the key data buffer and the dynamic token sleeping if the triggered key is a number key;

determining whether a Bluetooth data receiving completion identification is set if the triggered key is an OK key;

taking the data in the data receiving buffer or taking a combination of the basic factor and the data in the data receiving buffer as the dynamic factor, computing the dynamic password according to the dynamic factor, returning the obtained dynamic password to an upper computer, and the dynamic token sleeping, if the Bluetooth data receiving completion identification is set;

determining whether the data exist in the key data buffer if the Bluetooth data receiving completion identification is not set;

taking the data in the key data buffer or taking the combination of the data in the key data buffer and the basic factor inside the dynamic token as the dynamic factor, computing the dynamic password according to the dynamic factor, displaying the dynamic password, and the dynamic token sleeping, if the data exist in the key data buffer;

taking the basic factor as the dynamic factor, computing the dynamic password according to the dynamic factor, returning the obtained dynamic password to the upper computer and the dynamic token sleeping, if no data exist in the key data buffer;

storing the system state identification as a challenge code input identification and the dynamic token sleeping, if the triggered key is a Delete key;

in a case that the dynamic token detects the Bluetooth data interrupt, receiving the Bluetooth data, storing the Bluetooth data in the data receiving buffer till receiving of the Bluetooth is completed, setting a Bluetooth data receiving completion identification, and the dynamic token sleeping;

in a case that the dynamic token detects the Bluetooth connection interrupt, displaying that Bluetooth is connected, clearing the screen after a preset time, and the dynamic token sleeping;

in a case that the dynamic token detects the Bluetooth disconnection interrupt, clearing the data receiving buffer and the dynamic token sleeping;

wherein the basic factor comprises a time factor and/or an event factor.

8. The method of claim 7, wherein before determining whether a work voltage of the Bluetooth module is lower than a preset voltage in Step S-2, the method further comprises performing a password checking operation;

determining whether a work voltage of the Bluetooth module is lower than a preset voltage if the password is correct;

the dynamic token sleeping if the password is not correct;

and the password checking operation comprises;

Step E1, obtaining, by the dynamic token, a key value of a triggered key, determining the triggered key upon the key value;

executing Step E2 if the triggered key is an OK key;

storing, in the key data buffer, key data corresponding to the number key, displaying a password checking interface and quitting the password checking operation, if the triggered key is a number key and the length of the key data is less than a preset length;

performing a corresponding operation upon an else key value and quitting the password checking operation, if the triggered key is the else key;

Step E2, determining whether the password in the key data buffer is correct, executing Step E3 if the password is correct;

executing Step E4 if the password is not correct;

Step E3, prompting that the password is correct, clearing password failure times, delaying a fourth preset time, clearing the key data buffer, determining that the password is correct, ending the password checking operation;

Step E4, adding 1 to the number of the password failure times, displaying a password failure interface, delaying the fourth preset time, executing Step E5;

Step E5, determining whether the number of the password failure times is equal to the number of preset times;

clearing the key data buffer, determining that the password is not correct, and the dynamic token sleeping, if the number of the password failure times is equal to the number of the preset times;

displaying a password input interface, clearing the key data buffer and the dynamic token sleeping, if the password failure times is not equal to the preset times.

9. The method of claim 7, wherein in Step S-3, the clearing the data in the key data buffer and the dynamic token sleeping, if the triggered key is a Delete key, comprises:

Step A1, determining whether a duration of pressing down the Delete key reaches a preset duration;

executing Step A2 if the duration of pressing down the Delete key reaches the preset duration;

executing Step A5 if the duration of pressing down the Delete key does not reach the preset duration;

Step A2, determining whether data exist in the key data buffer;

executing Step A4 if data exist in the key data buffer;

executing Step A3 if no data exist in the key data buffer;

Step A3, displaying a menu interface, storing the system state identification as a menu function selection identification, the dynamic token sleeping;

Step A4, clearing the key data buffer, displaying an challenge code input interface, the dynamic token sleeping;

Step A5, determining whether data exist in the key data buffer;

executing Step A6 if the data exist in the key data buffer;

executing Step A7 if no data exist in the key data buffer;

Step A6, clearing a last stored key value in the key data buffer;

then executing Step A7;

Step A7, displaying the challenge code information input interface, displaying the data in the key data buffer, the dynamic token sleeping;

and Step S-1 further comprises detecting the system state identification;

performing a menu function selection operation and the dynamic token sleeping, if the system state identification is a menu function selection identification;

wherein the menu function selection operation comprises;

Step H1, detecting the key value, executing Step H12 if the key is an OK key;

executing a corresponding operation and quitting the menu function selection operation, if the key is an else key value, wherein the else key value comprises a key value of a Right key and a key value of a Left key;

Step H2, determining a selected function;

executing Step H3 if the selected function is a Bluetooth OTP;

performing a corresponding function selection operation and quitting the menu function selection operation, if the selected function is an else function;

Step H3, powering up the Bluetooth module, displaying a Bluetooth OTP interface, storing the system state identification as a Bluetooth OTP identification and executing Step H4;

Step H4, reading a Bluetooth module parameter;

Step H5, determining whether the reading a Bluetooth module parameter is successful;

executing Step H6 if the reading is successful;

executing Step H7 if the reading is not successful;

Step H6, switching the Bluetooth module into a monitoring mode and quitting the menu function selection operation;

Step H7, adding 1 to the number of times of reading a Bluetooth module parameter;

Step H8, determining whether the number of times of reading a Bluetooth module parameter reaches a sixth preset value;

executing Step H9 if the number of the times reaches the sixth preset value;

executing Step H4 if the number of the times does not reach the sixth preset value;

Step H9, prompting that the Bluetooth module is broken;

powering off the Bluetooth module, delaying a third preset time, displaying a challenge code information input interface, storing the system state identification as a challenge code input identification, quitting the menu function selection operation.

10. The method of claim 7, wherein the basic factor is a time factor;

after the initializing of the dynamic token, the method further comprises enabling timer interrupt, the dynamic token sleeping;

in a case that the timer interrupt is detected, updating the time factor, executing regular operation;

wherein the regular operation comprises;

Step G1, determining whether the system state identification is a Bluetooth OTP identification;

adding 1 to a count value of a Bluetooth mode counter and executing Step G2 if the system state identification is a Bluetooth OTP identification;

executing Step G7 if the system state identification is not a Bluetooth OTP identification;

wherein an initial count value of the Bluetooth module counter is 0;

Step G2, determining whether the count value of the Bluetooth module counter is less than a first preset value, executing Step G4 if the count value of the Bluetooth mode counter is less than the first preset value;

executing Step G3 if the count value of the Bluetooth mode counter is not less than the first preset value;

Step G3, setting the count value of the Bluetooth mode counter as 0, clearing the data receiving buffer, powering off the Bluetooth module, displaying the challenge code information input interface, storing the system state identification as a challenge code input identification and executing Step G6;

Step G4, detecting whether a work voltage of the Bluetooth module is lower than a preset voltage;

executing Step G5 if the work voltage of the Bluetooth module is lower than the preset voltage;

executing Step G6 if the work voltage of the Bluetooth module is not lower than the preset voltage;

Step G5, setting the count value of the Bluetooth mode counter as 0, clearing the data receiving buffer, powering off the Bluetooth module, displaying the challenge code input information interface, storing the system state identification as a challenge code input identification, displaying prompt information that work voltage is low and please use Bluetooth function after recharging through LCD screen, and executing Step G6;

Step G6, determining whether the system state identification is a challenge code input identification;

executing Step G7 if the system state identification is a challenge code input identification;

the dynamic token sleeping if the system state identification is not a challenge code input identification;

Step G7, adding 1 to a count value of a no-key-press counter;

wherein an initial value of the no-key-press counter is 0;

Step G8, determining whether the count value of the no-key-press counter is less than a second preset value;

the dynamic token sleeping if the count value of the no-key-press counter is less than the second preset value;

executing Step G9 if the count value of the no-key-press counter is not less than the second preset value;

Step G9, setting the count value of the no-key-press counter as 0, storing the system state identification as a power-off identification, clearing the key data buffer, the dynamic token sleeping.

11. The method of claim 7, wherein

the returning the obtained dynamic password to the upper computer comprises displaying the dynamic password via a LCD screen and/or returning the dynamic password to the upper computer via the Bluetooth module.

12. The method of claim 7, wherein the basic factor comprises a time factor and/or an event factor.