Method and equipment for binding equipment

Abstract

The invention provides a method and equipment for binding equipment, and aims to solve the problem concerned with equipment binding security in the prior art. In the embodiment of the invention, the method comprises the following steps that: a server returns a login message including a user ID (Identity) and random information to a client after the server sends a login request to the client and verification passes; the client sends an equipment finding broadcast message including the random information, and the equipment encrypts the random information with a session key to form an encrypted feature code, and transmits the equipment ID and the encrypted feature code to the client; and the client sends a binding request to the server, the server verifies the validity of the user ID, equipment ID and the encrypted feature code, and binding of a user and the equipment is finished after pass of the verification. As proved by the method, the server decrypts the encrypted feature code with asession key corresponding to the received equipment ID, and if the feature code is decrypted successfully, the equipment ID is not tampered, so that the difficulty in enumerating the equipment ID isincreased, and the security of equipment binding operation is enhanced effectively.

Description

technical field [0001] The invention relates to the field of Internet of Things data processing, in particular to a method and device for binding devices. Background technique [0002] With the emergence of the concept of the Internet of Things, it has been widely used to manage and configure smart home devices in the home through smart home applications. The smart home application communicates with the server, and realizes the remote control of the smart home equipment with the help of the cloud server, thereby realizing the automatic operation of the smart home equipment. [0003] To use smart home applications to control smart home devices, the smart home application should first be bound to smart home devices. In the prior art, the smart home application scans the barcode or two-dimensional code on the smart home device to obtain the device ID (identification number) information, and then the smart home application carries the user ID information and device ID informati...

AI Technical Summary

Problems solved by technology

[0004] However, because the barcode or QR code on the smart home device stores the ID information of the device, most of the devices are mass-produced, and the ID information is continuous, so there is a risk of being enumerated and used

In addition, the server does not have a mechanism to verify whether there is a relationship between the user account of the smart home APP (application) and the smart home device. It only verifies the legitimacy of the account and device ID. The home device ID sends a binding request, and the cloud server performs the binding after the verification is qualified, so that the smart home devices of other homes can be controlled. It can be seen that this binding method has greater security for the remote control of smart home devices Hidden danger

[0005] Therefore, the device ID of the current solution for binding smart home devices is easy to be enumerated, which poses a large security risk

Images