Methods, devices and systems for anti-counterfeiting authentication

• US 9,426,130 B2
• Filed: 03/09/2015
• Issued: 08/23/2016
• Est. Priority Date: 07/21/2014
• Status: Active Grant

• Current Assignee: Xiaomi Inc. (Xiaomi Corp.)
• Original Assignee: Xiaomi Inc. (Xiaomi Corp.)
• Inventors: Liu, Wei, Ma, Ji, Ma, Sen, Zhang, Liang
• Primary Examiner(s): Labaze, Edwyn
• Application Number:
  US14/641,569
• Publication Number:
  US 20160021067A1
• Time in Patent Office: 533 Days
• Field of Search: 235/380, 235/375, 235/492, 235/449, 235/487, 713/168, 713/155, 713/178
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/71 Hardware identity

Abstract

An anti-counterfeiting authentication method is provided. The method includes: generating an encrypted message corresponding to an i-th authentication step, wherein the i-th authentication step is one of n authentication steps arranged in a predetermined order, and 1≦i≦n; sending the encrypted message to a terminal device; receiving, from the terminal device, a call request for initiating the i-th authentication step; executing the i-th authentication step if the request is initiated based on the encrypted message; if the i-th authentication step succeeds and i is less than n, increasing i by one and repeating the generating of an encrypted message; if the i-th authentication step fails, sending an indication to the terminal device indicating an authentication failure; and if the i-th authentication step succeeds and i equals to n, sending an indication to the terminal device indicating an authentication success.

Claims

1. An anti-counterfeiting authentication method implemented by a server, comprising:

generating an encrypted message corresponding to an i-th authentication step, wherein the i-th authentication step is one of n authentication steps arranged in a predetermined order, and 1≦

i≦

n;

sending the encrypted message to a terminal device to be authenticated;

receiving, from the terminal device, a call request for initiating the i-th authentication step;

executing the i-th authentication step if the request is initiated based on the encrypted message;

if the i-th authentication step succeeds and i is less than n, increasing i by one and repeating the generating of an encrypted message;

if the i-th authentication step fails, sending an indication to the terminal device indicating an authentication failure; and

if the i-th authentication step succeeds and i equals to n, sending an indication to the terminal device indicating an authentication success.

2. The method according to claim 1, further comprising:

encrypting an unencrypted message using a private key to generate the encrypted message corresponding to the i-th authentication step;

wherein;

when 1≦

i≦

n, the unencrypted message includes information relating to the terminal device and a step number corresponding to the i-th authentication step;

or

when i=1, the unencrypted message includes information relating to the terminal device, and when i≧

2, the unencrypted message includes information relating to the terminal device and a step number corresponding to an (i−

1)-th authentication step which has been successfully executed.

3. The method according to claim 2, further comprising:

detecting whether the call request includes the encrypted message;

retrieving the encrypted message based on the encrypted message;

decrypting the encrypted message using the private key and acquiring the unencrypted message;

determining the step number corresponding to the i-th authentication step based on contents of the unencrypted message;

detecting whether a step number initiated by the call request matches the step number corresponding to the i-th authentication step; and

executing the i-th authentication step if the step number initiated by the call request matches the step number corresponding to the i-th authentication step.

4. The method according to claim 3, further comprising:

if the unencrypted message includes a timing message, retrieving the timing message based on the unencrypted message;

detecting, according to the timing message, whether the call request is received within a valid time frame; and

executing the i-th authentication step if the call request is received within the valid time frame and the step number initiated by the call request matches the step number corresponding to the i-th authentication step.

5. The method of claim 3, wherein executing the i-th authentication step comprises:

authenticating the terminal device based on configuration parameters of the terminal device, if the i-th authentication step is a configuration parameter authentication step;

or

authenticating the terminal device based on performance parameters of the terminal device, if the i-th authentication step is a performance parameter authentication step;

or

authenticating the terminal device based on basic information relating to the terminal device and an order database, if the i-th authentication step is an order authentication step, the order database including basic information relating to at least one terminal device;

or

authenticating the terminal device based on a geographical position corresponding to the terminal device and a unique identification, if the i-th authentication step is a geographical position authentication step.

6. The method according to claim 5, wherein authenticating the terminal device based on basic information relating to the terminal device and an order database comprises:

querying whether the order database includes basic information matching the basic information relating to the terminal device; and

determining the i-th authentication step to be successful if the order database includes basic information matching the basic information relating to the terminal device.

7. The method according to claim 5, wherein authenticating the terminal device based on a geographical position corresponding to the terminal device and a unique identification comprises:

detecting whether within a scheduled time frame, a plurality of call requests are received from terminal devices from different geographical positions having the same unique identification of the terminal device; and

determining whether the i-th authentication step is successful based on the detecting.

8. The method according to claim 1, further comprising:

receiving an authentication query request, the authentication query request including a user account;

querying whether authentication results corresponding to the user account exist; and

responding to the authentication query request based on the authentication results if the authentication results corresponding to the user account exist.

9. An anti-counterfeiting authentication method implemented by a terminal device to be authenticated, comprising:

receiving, from a server, an encrypted message corresponding to an i-th authentication step, wherein the i-th authentication step is one of n authentication steps arranged in a predetermined order, and 1≦

i≦

n,

sending, to the server, a call request for initiating the i-th authentication step, based on the encrypted message; and

receiving, from the server, an indication indicating an authentication failure or an authentication success.

10. The method according to claim 9, further comprising:

generating the call request for initiating the i-th authentication step, wherein the call request includes the encrypted message.

11. The method of claim 9, further comprising:

acquiring a user account associated with the terminal device;

sending the user account to the server; and

receiving authentication results from the server when the server succeeds in identifying the authentication results corresponding to the user account.

12. A server, comprising:

a processor; and

a memory for storing instructions executable by the processor;

wherein the processor is configured to;

generate an encrypted message corresponding to an i-th authentication step, wherein the i-th authentication step is one of n authentication steps arranged in a predetermined order, and 1≦

i≦

n;

send the encrypted message to a terminal device to be authenticated;

receive, from the terminal device, a call request for initiating the i-th authentication step;

execute the i-th authentication step if the call request is initiated based on the encrypted message;

if the i-th authentication step succeeds and i is less than n, increase i by one and repeat the generating of an encrypted message;

if the i-th authentication step fails, send an indication to the terminal device indicating an authentication failure; and

if the i-th authentication step succeeds and i equals to n, send an indication to the terminal device indicating an authentication success.

13. The server according to claim 12, wherein the processor is further configured to:

encrypt an unencrypted message using a private key to generate the encrypted message corresponding to the i-th authentication step;

wherein;

when 1≦

i≦

n, the unencrypted message includes information relating to the terminal device and a step number corresponding to the i-th authentication step;

or

when i=1, the unencrypted message includes information relating to the terminal device, and when i≧

2, the unencrypted message includes information relating to the terminal device and a step number corresponding to an (i−

1)-th authentication step which has been successfully executed.

14. The server according to claim 13, wherein the processor is further configured to:

detect whether the call request includes the encrypted message;

retrieve the encrypted message based on the encrypted message;

decrypt the encrypted message using the private key and acquire the unencrypted message;

determine the step number corresponding to the i-th authentication step based on contents of the unencrypted message;

detect whether a step number initiated by the call request matches the step number corresponding to the i-th authentication step; and

execute the i-th authentication step if the step number initiated by the call request matches the step number corresponding to the i-th authentication step.

15. The server according to claim 14, wherein the processor is further configured to:

if the unencrypted message includes a timing message, retrieve the timing message based on the unencrypted message;

detect, according to the timing message, whether the call request is received within a valid time frame; and

execute the i-th authentication step if the call request is received within the valid time frame and the step number initiated by the call request matches the step number corresponding to the i-th authentication step.

16. The server of claim 14, wherein when executing the i-th authentication step, the processor is configured to:

authenticate the terminal device based on configuration parameters of the terminal device, if the i-th authentication step is a configuration parameter authentication step;

or

authenticate the terminal device based on performance parameters of the terminal device, if the i-th authentication step is a performance parameter authentication step;

or

authenticate the terminal device based on basic information relating to the terminal device and an order database, if the i-th authentication step is an order authentication step, the order database including basic information relating to at least one terminal device;

or

authenticate the terminal device based on a geographical position corresponding to the terminal device and a unique identification, if the i-th authentication step is a geographical position authentication step.

17. The server according to claim 16, wherein when authenticating the terminal device based on basic information relating to the terminal device and an order database, the processor is configured to:

query whether the order database includes basic information matching basic information relating to the terminal device; and

determine the i-th authentication step to be successful if the order database includes basic information matching basic information relating to the terminal device.

18. A terminal device to be authenticated, comprising:

a processor; and

a memory for storing instructions executable by the processor;

wherein the processor is configured to;

receive, from a server, an encrypted message corresponding to an i-th authentication step, wherein the i-th authentication step is one of n authentication steps arranged in a predetermined order, and 1≦

i≦

n,

send, to the server, a call request for initiating the i-th authentication step, based on the encrypted message; and

receive, from the server, an indication indicating an authentication failure or an authentication success.

19. The terminal device according to claim 18, wherein the processor is further configured to:

generate a call request for initiating the i-th authentication step, wherein the call request includes the encrypted message.

20. The terminal device of claim 18, wherein the processor is further configured to:

acquire a user account associated with the terminal device;

send the user account to the server; and

receive authentication results from the server when the server succeeds in identifying the authentication results corresponding to the user account.

21. A non-transitory computer-readable storage medium having stored therein instructions that, when executed by a processor of a server, cause the server to perform an anti-counterfeiting authentication method comprising:

generating an encrypted message corresponding to an i-th authentication step, wherein the i-th authentication step is one of n authentication steps arranged in a predetermined order, and 1≦

i≦

n;

sending the encrypted message to a terminal device to be authenticated;

receiving a call request sent from the terminal device for initiating the i-th authentication step;

executing the i-th authentication step if the call request is initiated based on the encrypted message;

if the i-th authentication step succeeds and i is less than n, increasing i by one, and repeating the generating of an encrypted message;

if the i-th authentication step fails, sending an indication to the terminal device indicating an authentication failure; and

if the i-th authentication step succeeds and i equals to n, sending an indication to the terminal device indicating an authentication success.

22. A non-transitory computer-readable storage medium having stored therein instructions that, when executed by a processor of a terminal device to be authenticated, cause the terminal device to perform an anti-counterfeiting authentication method comprising:

receiving, from a server, an encrypted message corresponding to an i-th authentication step, wherein the i-th authentication step is one of n authentication steps arranged in a predetermined order, and 1≦

i≦

n;

sending, to the server, a call request for initiating the i-th authentication step, based on the encrypted message; and

receiving, from the server, an indication indicating an authentication failure or an authentication.