Wireless communication system based on symmetric encryption technology

Abstract

The invention discloses a wireless communication system based on a symmetric encryption technology, which relates to the field of wireless communication and comprises source equipment used for starting up to establish a wireless communication network and generating a wireless communication user name and a network access key; the terminal equipment obtains a wireless communication user name and a network access key from the source equipment through NFC communication, searches the user name and establishes connection with a corresponding network through the key; communication content between the source equipment and the terminal equipment is encrypted and transmitted, two communication parties use the same shared key to encrypt and decrypt, and the shared key is generated when the source equipment creates the wireless communication network and is transmitted to the terminal equipment. According to the invention, the communication content is encrypted in a symmetric encryption mode, so that the security of the communication content is ensured, and the communication is prevented from being stolen or tampered by a third party; meanwhile, NFC communication adopts an encryption authentication mechanism, an effective communication time limiting method and an effective communication distance limiting method, so that the data transmission confidentiality is further improved.

Description

Technical Field

[0001] The present invention relates to the field of wireless communications, and in particular to a wireless communications system based on symmetric encryption technology. Background Art

[0002] The statements in this section merely provide background information related to the present disclosure and may not constitute prior art.

[0003] Wireless communication technology has been widely used in various fields. It has the characteristics of quickly establishing communication and can effectively solve communication problems where there is no location for cable laying.

[0004] Wireless communication is convenient and efficient, but it also requires providing usernames and passwords to the access party, which leads to the risk of usernames and passwords being leaked during the transmission process, and faces problems such as identity fraud, signal interception and monitoring. At the same time, it is cumbersome to manually enter usernames and passwords, and it is easy to fail to establish communication due to input errors. In order to solve these problems, a wireless connection method and communication encryption method that does not require manual login are needed to improve wireless connection efficiency and ensure the security of communication content.

[0005] There are two main ways to log in to a wireless connection. One is to directly connect to the network for communication by simply selecting a wireless network username without entering a password for verification. This method is vulnerable to intrusion, interception, and monitoring. The other method requires first obtaining the wireless connection username and login password, then manually entering the network name and password, and then allowing connection and communication after verification. This method is cumbersome and prone to errors. It also has the disadvantages of no backup management, authentication, and unencrypted communication content. Summary of the invention

[0006] The purpose of the present invention is to provide a wireless communication system based on symmetric encryption technology to solve the problems existing in the prior art, and to perform user identity authentication through randomly generated user names and passwords, thereby solving the problem that wireless communication is easily invaded, intercepted and monitored; to perform user authority management and device authentication through a communication list method, thereby solving the problem that wireless communication is easily invaded, intercepted and monitored; to automatically share user names and passwords through NFC communication without manual operation, thereby simplifying the operation method and avoiding the problem that the connection cannot be established due to incorrect input; to enhance communication security through data encryption, and to make it difficult to crack the data after it is intercepted and monitored.

[0007] The technical solution of the present invention is as follows:

[0008] A wireless communication system based on symmetric encryption technology, comprising:

[0009] The source device is used to start up and establish a wireless communication network, and generate a wireless communication user name and a network access key;

[0010] The terminal device obtains the wireless communication user name and network access key from the source device through NFC communication, searches for the user name, and establishes a connection with the corresponding network through the key;

[0011] The communication content between the source device and the terminal device is transmitted through encryption, and both communicating parties use the same shared key for encryption and decryption. The shared key is generated when the source device creates a wireless communication network and transmitted to the terminal device.

[0012] Furthermore, the encryption algorithm adopts the Advanced Encryption Standard.

[0013] Furthermore, the source device and the terminal device use the same wireless communication device, including:

[0014] Transceiver module, processing module, encryption module, storage module, interface module and power module.

[0015] Furthermore, the transceiver module includes:

[0016] A wireless network communication unit and an NFC communication unit;

[0017] After the wireless communication device is powered on and self-tested, the wireless communication network is established by the non-network communication unit; the NFC communication unit is used for the wireless communication devices to exchange the physical addresses of both parties, the user names of the wireless connection, the network access keys, the communication keys and other security authentication data.

[0018] Furthermore, the processing module can control the transceiver module to establish a wireless communication network based on the key generated by the encryption module, use the NFC communication unit to exchange the device physical address and other authentication data with the wireless communication device that needs to be accessed, and compare them with the pre-set communication list, perform user authority management on the authenticated wireless communication device, and restrict access to resources; after the user authority configuration is completed, the user name, network access key and data key of the wireless communication network are exchanged through NFC communication, and the wireless network communication unit is controlled to establish a wireless connection with the verified device.

[0019] Furthermore, the functions of the encryption module include: key generation, key management, and data encryption and decryption processing;

[0020] The encryption module generates a set of keys based on the access user authentication data provided by the processing module, which are used to generate the network access keys of the processing module; at the same time, the external data received by the interface module is encrypted and sent to the processing module for modulation and then sent to the wireless communication network for data interaction with the wireless communication devices joining the wireless communication network; the received wireless data is decrypted and sent to the processing module for communication with the external interface to ensure the confidentiality and integrity of the communication.

[0021] Furthermore, the data storage module is used to store the user name, network access key, data key and communication list of the current wireless communication connection.

[0022] Furthermore, the interface module provides a communication interface to the outside, which is used to convert different external communication protocols into a unified internal protocol.

[0023] Furthermore, the power supply module converts the external input voltage into the voltage required for each module inside the wireless communication device to work, each module is powered separately, and the voltage and current detection data output by each module are reported to the processing module.

[0024] The present invention also proposes a wireless communication method based on symmetric encryption technology, based on the above-mentioned wireless communication system based on symmetric encryption technology, including:

[0025] After the source device is turned on, the wireless communication device is started and a wireless network is created, and a unique user name and network access key are generated;

[0026] The terminal device is close to the source device. Through NFC communication, the source device obtains the terminal device authentication information and performs security authentication. The source device allocates management authority to the terminal device that has passed the security authentication, and issues the wireless communication user name, network access key and shared key.

[0027] The terminal device turns on the wireless communication function, searches for and identifies the wireless communication network that matches the obtained network name, and uses the network access key to connect;

[0028] After the connection is established, the source device and the terminal device use the shared key to encrypt and decrypt the content of the wireless communication.

[0029] Compared with the prior art, the present invention has the following beneficial effects:

[0030] 1. The present invention obtains the user name and network access key of the wireless connection through NFC communication, without manual input, and the operation is simple and fast, reducing the possibility of input errors.

[0031] 2. The present invention adopts symmetric encryption to encrypt the communication content, ensure the security of the communication content, and prevent the communication from being stolen or tampered by a third party; at the same time, NFC communication adopts encryption authentication mechanism, effective communication time limit and effective communication distance limit method to further improve the confidentiality of data transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] Figure 1 A schematic diagram of a wireless communication system based on symmetric encryption technology;

[0033] Figure 2 The figure is a workflow diagram of a wireless communication system based on symmetric encryption technology. DETAILED DESCRIPTION

[0034] It should be noted that relational terms such as "first" and "second" are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0035] The features and performance of the present invention are further described in detail below in conjunction with the embodiments.

[0036] Embodiment 1

[0037] A wireless communication system based on symmetric encryption technology, comprising:

[0038] The source device is used to start up and establish a wireless communication network, and generate a wireless communication user name and a network access key;

[0039] The terminal device obtains the wireless communication user name and network access key from the source device through NFC communication, searches for the user name, and establishes a connection with the corresponding network through the key;

[0040] The communication content between the source device and the terminal device is transmitted through encryption, and both communicating parties use the same shared key for encryption and decryption. The shared key is generated when the source device creates a wireless communication network and is securely transmitted to the terminal device via NFC.

[0041] In this embodiment, specifically, the encryption algorithm adopts the requirements of the Advanced Encryption Standard (AES), which has the characteristics of high efficiency, security and reliability.

[0042] In this embodiment, it should be noted that both communicating parties (source device, terminal device) use the same key for encryption and decryption. The key is generated in the source device and shared with the terminal device through NFC communication.

[0043] In this embodiment, specifically, Figure 1 As shown, the source device and the terminal device use the same wireless communication device, including:

[0044] Transceiver module, processing module, encryption module, storage module, interface module and power module.

[0045] In this embodiment, specifically, the transceiver module includes:

[0046] A wireless network communication unit and an NFC communication unit;

[0047] After the wireless communication device is powered on and self-checked, the wireless communication unit establishes a wireless communication network;

[0048] The NFC communication unit is used to exchange the physical addresses of both parties, the user name of the wireless connection, the network access key, the communication key and other security authentication data between wireless communication devices.

[0049] In this embodiment, specifically, the processing module can control the transceiver module to establish a wireless communication network based on the key generated by the encryption module, use the NFC communication unit to exchange the device physical address and other authentication data with the wireless communication device that needs to be accessed, and compare them with the pre-set communication list, perform user authority management on the authenticated wireless communication device, and restrict access to resources; after the user authority configuration is completed, the user name, network access key and data key of the wireless communication network are exchanged through NFC communication, and the wireless network communication unit is controlled to establish a wireless connection with the verified device.

[0050] In this embodiment, specifically, the encryption module has functions such as key generation, key management, and data encryption and decryption processing;

[0051] The encryption module generates a set of keys based on the access user authentication data provided by the processing module, which are used to generate the network access keys of the processing module; at the same time, the external data received by the interface module is encrypted and sent to the processing module for modulation and then sent to the wireless communication network for data interaction with the wireless communication devices joining the wireless communication network; the received wireless data is decrypted and sent to the processing module for communication with the external interface to ensure the confidentiality and integrity of the communication.

[0052] In this embodiment, specifically, the data storage module is used to store the user name, network access key, data key and communication list of the current wireless communication connection.

[0053] In this embodiment, specifically, the interface module provides a communication interface to the outside, which is used to convert different external communication protocols into a unified internal protocol.

[0054] In this embodiment, specifically, the power supply module converts the external input voltage into the working voltage required by each module inside the wireless communication device, each module is powered separately, and the voltage and current detection data output by each module are reported to the processing module.

[0055] See also Figure 2This embodiment also proposes a wireless communication method based on symmetric encryption technology. Based on the above-mentioned wireless communication system based on symmetric encryption technology, it specifically includes the following steps:

[0056] After the source device is turned on, the wireless communication device is started and a wireless network is created, and a unique user name and network access key are generated;

[0057] The terminal device is close to the source device. Through NFC communication, the source device obtains the terminal device authentication information and performs security authentication. The source device allocates management authority to the terminal device that has passed the security authentication, and issues the wireless communication user name, network access key and shared key.

[0058] The terminal device turns on the wireless communication function, searches for and identifies the wireless communication network that matches the obtained network name, and uses the network access key to connect;

[0059] After the connection is established, the source device and the terminal device use the shared key to encrypt and decrypt the content of the wireless communication.

[0060] In this embodiment, specifically, the operation of the source device is as follows:

[0061] After the source device is powered on and the hardware is initialized, a unique user name (SSID) and a high-strength network access key are randomly generated. At the same time, a symmetric encrypted shared key is generated based on the AES algorithm.

[0062] Wireless network establishment process:

[0063] The source device is powered on, a user name and a network access key are randomly generated, and a wireless communication network is established;

[0064] Exchange identity information through NFC communication, perform identity authentication, and generate a shared key after identity authentication;

[0065] The user name, network access key and shared key are issued through communication.

[0066] In this embodiment, specifically, the operation of the terminal device is as follows:

[0067] After receiving the user name, network access key and shared key, the terminal device turns on its own wireless communication function and fills in the received user name, network access key and shared key.

[0068] Search for wireless networks around you. When a wireless network matching the obtained user name is detected, try to connect using the network access key.

[0069] Communication encryption process:

[0070] Use AES algorithm to generate shared keys;

[0071] After the connection is established, the two communicating parties enable the encryption module and fill in the shared key.

[0072] The sender uses a shared key for symmetric encryption to encrypt the communication content and then transmit it over the wireless network.

[0073] After receiving the encrypted communication content, the receiver uses the same symmetric encryption shared key to decrypt it and restore the original communication content.

[0074] The above-mentioned embodiments only express the specific implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the protection scope of the present application. It should be pointed out that, for ordinary technicians in this field, several variations and improvements can be made without departing from the technical solution concept of the present application, and these all belong to the protection scope of the present application.

[0075] This background section is provided to generally present the context of the invention, and the work of the presently named inventors, the work to the extent described in this background section, and aspects of this section that did not constitute prior art at the time of application are neither explicitly nor implicitly admitted to be prior art to the present invention.

Claims

1. A wireless communication system based on symmetric encryption technology, characterized in that: include: The source device is used to start up and establish a wireless communication network, and generate a wireless communication user name and a network access key; The terminal device obtains the wireless communication user name and network access key from the source device through NFC communication, searches for the user name, and establishes a connection with the corresponding network through the key; The communication content between the source device and the terminal device is transmitted through encryption, and both communicating parties use the same shared key for encryption and decryption. The shared key is generated when the source device creates a wireless communication network and transmitted to the terminal device.

2. A wireless communication system based on symmetric encryption technology according to claim 1, characterized in that: The encryption algorithm uses the Advanced Encryption Standard.

3. A wireless communication system based on symmetric encryption technology according to claim 1, characterized in that: The source device and the terminal device use the same wireless communication device, including: Transceiver module, processing module, encryption module, storage module, interface module and power module.

4. A wireless communication system based on symmetric encryption technology according to claim 3, characterized in that: The transceiver module comprises: A wireless network communication unit and an NFC communication unit; After the wireless communication device is powered on and self-tested, the wireless communication network is established by the non-network communication unit; the NFC communication unit is used for the wireless communication devices to exchange the physical addresses of both parties, the user names of the wireless connection, the network access keys, the communication keys and other security authentication data.

5. A wireless communication system based on symmetric encryption technology according to claim 4, characterized in that: The processing module can control the transceiver module to establish a wireless communication network based on the key generated by the encryption module, use the NFC communication unit to exchange the device physical address and other authentication data with the wireless communication device that needs to be accessed, and compare them with the pre-set communication list, perform user authority management on the authenticated wireless communication device, and restrict access to resources; after the user authority configuration is completed, the user name, network access key and data key of the wireless communication network are exchanged through NFC communication, and the wireless network communication unit is controlled to establish a wireless connection with the verified device.

6. A wireless communication system based on symmetric encryption technology according to claim 5, characterized in that: The functions of the encryption module include: key generation, key management, and data encryption and decryption processing; The encryption module generates a set of keys based on the access user authentication data provided by the processing module, which are used to generate the network access keys of the processing module; at the same time, the external data received by the interface module is encrypted and sent to the processing module for modulation and then sent to the wireless communication network for data interaction with the wireless communication devices joining the wireless communication network; the received wireless data is decrypted and sent to the processing module for communication with the external interface to ensure the confidentiality and integrity of the communication.

7. A wireless communication system based on symmetric encryption technology according to claim 6, characterized in that: The data storage module is used to store the user name, network access key, data key and communication list of the current wireless communication connection.

8. A wireless communication system based on symmetric encryption technology according to claim 7, characterized in that: The interface module provides a communication interface to the outside, and is used to convert different external communication protocols into a unified internal protocol.

9. A wireless communication system based on symmetric encryption technology according to claim 8, characterized in that: The power supply module converts the external input voltage into the working voltage required by each module inside the wireless communication device, and each module is powered separately. The voltage and current detection data output by each module are reported to the processing module.

Images