Remote unlocking security authentication method and device for intelligent door lock, electronic equipment and medium

Abstract

The invention discloses an intelligent door lock remote unlocking safety certification method and device, electronic equipment and a medium, and the method comprises the steps: sending a door lock connection request to a door lock access management platform through a target user side, and enabling the door lock access management platform to issue a connection activation instruction to a target door lock terminal; a session key generation request is sent to the quantum cryptography service platform through the target door lock terminal, so that the quantum cryptography service platform returns a quantum random session key and a session key identifier; issuing the session key identifier to the target user side through the door lock access management platform by the target door lock terminal; obtaining a quantum random session key from the quantum cryptography service platform through the target user side according to the session key identifier; and door lock operation encryption data is generated through the target user side by using the quantum random session key and is transmitted to the target door lock terminal. The safety of the intelligent door lock is improved, the operation pressure of access of the door lock to the management platform is reduced, and the method can be widely applied to the technical field of communication.

Description

Technical Field

[0001] The present invention relates to the field of terminal management technology, and in particular to a smart door lock remote unlocking security authentication method, device, electronic equipment and medium. Background Art

[0002] Smart door locks provide a way to unlock the door using a mobile client by connecting to a service platform and communicating remotely with the door lock. In this scenario, the door lock needs to be connected to the Internet and send instructions to the remote server (door lock access management platform) through the mobile client. The platform remotely forwards the instructions to the door lock, and the door lock receives the remote instructions to execute operations such as opening the door.

[0003] In the existing door lock security encryption schemes, some encryption keys are pre-written in the door lock firmware when leaving the factory, and some negotiate session keys through the private key preset in the door lock firmware and the platform. However, even if one machine has one key, the door lock firmware can be easily deciphered by decompilation technology, which can easily lead to the leakage of the door lock private key, bringing the risk of illegal door opening, affecting the security of the smart door lock; in addition, the door lock access management platform needs to save a large number of door lock key lists, which brings pressure on the operation and management of the door lock access management platform.

[0004] Terminology explanation:

[0005] Asymmetric key: Asymmetric key consists of a pair of public key and private key, which are cryptographically related to each other. The public key can be distributed to anyone, while the private key must be securely protected and can only be used by trusted persons.

[0006] Session key: A symmetric key used for encryption and decryption in communications.

[0007] Quantum key: A server cryptographic machine that uses quantum random numbers as an entropy source uses a random key generated by a quantum random number generator (QRNG) (which is physically unpredictable, such as based on photon counting, photon arrival time, photon arrival position, etc.). Summary of the invention

[0008] The purpose of the present invention is to solve one of the technical problems existing in the prior art to at least a certain extent.

[0009] To this end, an object of an embodiment of the present invention is to provide a smart door lock remote unlocking security authentication method, which improves the security of the smart door lock and reduces the operating pressure of the door lock access management platform.

[0010] Another object of an embodiment of the present invention is to provide a smart door lock remote unlocking security authentication device.

[0011] In order to achieve the above technical objectives, the technical solutions adopted by the embodiments of the present invention include:

[0012] On the one hand, an embodiment of the present invention provides a smart door lock remote unlocking security authentication method, comprising the following steps:

[0013] Sending a door lock connection request to the door lock access management platform through the target user terminal, so that the door lock access management platform determines the target door lock terminal according to the door lock connection request, and sends a connection activation instruction to the target door lock terminal;

[0014] Sending a session key generation request to the quantum cryptography service platform through the target door lock terminal, so that the quantum cryptography service platform generates a quantum random session key and a corresponding session key identifier, and encrypts the quantum random session key and the session key identifier and returns them to the target door lock terminal;

[0015] The session key identifier is sent to the door lock access management platform through the target door lock terminal, so that the door lock access management platform sends the session key identifier to the target user terminal;

[0016] The target user terminal sends a session key call request to the quantum cryptography service platform according to the session key identifier, so that the quantum cryptography service platform encrypts the quantum random session key and returns it to the target user terminal;

[0017] The target user terminal uses the quantum random session key to generate door lock operation encrypted data, and forwards the door lock operation encrypted data to the target door lock terminal through the door lock access management platform, so that the target door lock terminal uses the quantum random session key to decrypt the door lock operation encrypted data.

[0018] Further, in one embodiment of the present invention, the target user terminal sends a door lock connection request to the door lock access management platform, so that the door lock access management platform determines the target door lock terminal according to the door lock connection request, and sends a connection activation instruction to the target door lock terminal, which specifically includes:

[0019] The target user terminal generates the door lock connection request according to the user login information and the target door lock identifier, and sends the door lock connection request to the door lock access management platform;

[0020] The door lock connection request is parsed through the door lock access management platform to obtain the user login information and the target door lock identifier, and whether there is a binding relationship between the user login information and the target door lock identifier is determined according to a pre-built door lock binding relationship database;

[0021] When the user login information is bound to the target door lock identifier, the target door lock terminal is determined according to the target door lock identifier, and the connection activation instruction is sent to the target door lock terminal.

[0022] Furthermore, in one embodiment of the present invention, the smart door lock remote unlocking security authentication method further includes the step of pre-keying the target door lock terminal and the target user terminal, which specifically includes:

[0023] Generate multiple first quantum random keys and corresponding multiple first key identifiers through the quantum cryptography service platform, establish a first mapping relationship between the first quantum random keys and the first key identifiers, and store the first mapping relationship;

[0024] Sending the first quantum random key, the first key identifier, and the first mapping relationship to the target door lock terminal through the quantum cryptography service platform, so that the target door lock terminal stores the first quantum random key, the first key identifier, and the first mapping relationship through a built-in security chip;

[0025] Generate multiple second quantum random keys and corresponding multiple second key identifiers through the quantum cryptography service platform, establish a second mapping relationship between the second quantum random keys and the second key identifiers, and store the second mapping relationship;

[0026] The second quantum random key, the second key identifier and the second mapping relationship are sent to the target user terminal through the quantum cryptography service platform, so that the target user terminal stores the second quantum random key, the second key identifier and the second mapping relationship through a secure SMI card.

[0027] Further, in one embodiment of the present invention, the target door lock terminal sends a session key generation request to the quantum cryptography service platform, so that the quantum cryptography service platform generates a quantum random session key and a corresponding session key identifier, and encrypts the quantum random session key and the session key identifier and returns them to the target door lock terminal, which specifically includes:

[0028] Selecting one of the first quantum random key and the corresponding first key identifier through the target door lock terminal, generating the session key generation request according to the selected first key identifier, and then sending the session key generation request to the quantum cryptography service platform;

[0029] Parsing the session key generation request through the quantum cryptography service platform to obtain the first key identifier, and determining the first quantum random key corresponding to the first key identifier according to a first mapping relationship stored locally;

[0030] The quantum random session key and the session key identifier are generated through a quantum cryptography service platform, and the quantum random session key is encrypted using the first quantum random key to obtain a first ciphertext, and then the first ciphertext and the session key identifier are returned to the target door lock terminal.

[0031] Further, in one embodiment of the present invention, the sending of the session key identifier to the door lock access management platform through the target door lock terminal so that the door lock access management platform sends the session key identifier to the target user terminal specifically includes:

[0032] Decrypting the first ciphertext according to the selected first quantum random key by the target door lock terminal to obtain the quantum random session key, and sending the target door lock identifier and the session key identifier to the door lock access management platform;

[0033] The correspondence between the target door lock identifier and the session key identifier is stored through a door lock access management platform, and the session key identifier is sent to the target user terminal that initiates the door lock connection request.

[0034] Further, in one embodiment of the present invention, the target user terminal sends a session key call request to the quantum cryptography service platform according to the session key identifier, so that the quantum cryptography service platform encrypts the quantum random session key and returns it to the target user terminal, which specifically includes:

[0035] Selecting a second quantum random key and a corresponding second key identifier through the target user terminal, generating the session key call request according to the selected second key identifier and the session key identifier, and then sending the session key call request to the quantum cryptography service platform;

[0036] Parsing the session key call request through the quantum cryptography service platform to obtain the second key identifier and the session key identifier, determining the second quantum random key corresponding to the second key identifier according to the second mapping relationship stored locally, and determining the corresponding quantum random session key according to the session key identifier;

[0037] The quantum random session key is encrypted using the second quantum random key through the quantum cryptography service platform to obtain a second ciphertext, and then the second ciphertext is returned to the target user end.

[0038] Further, in one embodiment of the present invention, the target user terminal generates door lock operation encrypted data using the quantum random session key, and forwards the door lock operation encrypted data to the target door lock terminal through the door lock access management platform, so that the target door lock terminal uses the quantum random session key to decrypt the door lock operation encrypted data, which specifically includes:

[0039] Decrypting the second ciphertext by the target user end according to the selected second quantum random key to obtain the quantum random session key;

[0040] The target user terminal uses the quantum random session key to encrypt the door lock operation instruction to generate the door lock operation encrypted data, and sends the door lock operation encrypted data and the target door lock identifier to the door lock access management platform;

[0041] Determine the target door lock terminal according to the target door lock identifier through the door lock access management platform, and forward the door lock operation encrypted data to the target door lock terminal;

[0042] The door lock operation encrypted data is decrypted by the target door lock terminal using the locally stored quantum random session key to obtain the door lock operation instruction and respond.

[0043] On the other hand, an embodiment of the present invention provides a smart door lock remote unlocking security authentication device, comprising:

[0044] A connection activation module, used to send a door lock connection request to the door lock access management platform through the target user terminal, so that the door lock access management platform determines the target door lock terminal according to the door lock connection request, and sends a connection activation instruction to the target door lock terminal;

[0045] A session key generation module, used to send a session key generation request to the quantum cryptography service platform through the target door lock terminal, so that the quantum cryptography service platform generates a quantum random session key and a corresponding session key identifier, and encrypts the quantum random session key and the session key identifier and returns them to the target door lock terminal;

[0046] A session key identifier sending module, used to send the session key identifier to the door lock access management platform through the target door lock terminal, so that the door lock access management platform sends the session key identifier to the target user terminal;

[0047] A session key calling module is used to send a session key calling request to the quantum cryptography service platform through the target user terminal according to the session key identifier, so that the quantum cryptography service platform encrypts the quantum random session key and returns it to the target user terminal;

[0048] The encryption transmission module is used to generate door lock operation encrypted data by using the quantum random session key through the target user terminal, and forward the door lock operation encrypted data to the target door lock terminal through the door lock access management platform, so that the target door lock terminal uses the quantum random session key to decrypt the door lock operation encrypted data.

[0049] On the other hand, an embodiment of the present invention provides an electronic device, which includes a memory, a processor, a program stored in the memory and executable on the processor, and a data bus for realizing connection and communication between the processor and the memory. When the program is executed by the processor, the smart door lock remote unlocking security authentication method as described above is realized.

[0050] On the other hand, an embodiment of the present invention also provides a storage medium, which is a computer-readable storage medium for computer-readable storage, and stores one or more programs, which can be executed by one or more processors to implement the smart door lock remote unlocking security authentication method as described above.

[0051] The advantages and beneficial effects of the present invention will be partly given in the following description, partly become apparent from the following description, or be understood through the practice of the present invention:

[0052] In an embodiment of the present invention, a door lock connection request is sent to a door lock access management platform through a target user terminal, so that the door lock access management platform determines a target door lock terminal according to the door lock connection request, and sends a connection activation instruction to the target door lock terminal, and sends a session key generation request to a quantum cryptography service platform through the target door lock terminal, so that the quantum cryptography service platform generates a quantum random session key and a corresponding session key identifier, and encrypts the quantum random session key and the session key identifier and returns them to the target door lock terminal, sends the session key identifier to the door lock access management platform through the target door lock terminal, so that the door lock access management platform sends the session key identifier to the target user terminal, sends a session key call request to the quantum cryptography service platform according to the session key identifier through the target user terminal, so that the quantum cryptography service platform encrypts the quantum random session key and returns it to the target user terminal, generates door lock operation encrypted data through the target user terminal using the quantum random session key, and forwards the door lock operation encrypted data to the target door lock terminal through the door lock access management platform, so that the target door lock terminal uses the quantum random session key to decrypt the door lock operation encrypted data. In the embodiment of the present invention, when a user terminal initiates a connection request to a door lock terminal through a door lock access management platform, the door lock terminal requests a quantum cryptography service platform to generate a quantum random session key and a corresponding session key identifier, and the door lock access management platform sends the session key identifier to the user terminal. The user terminal requests the quantum cryptography service platform to call the quantum random session key according to the session key identifier, so that the user terminal and the door lock terminal can complete the session through the quantum random session key, thereby improving the security of the smart door lock; in addition, the door lock access management platform does not need to store a large number of key lists corresponding to door lock terminals, thereby reducing the operating pressure of the door lock access management platform. BRIEF DESCRIPTION OF THE DRAWINGS

[0053] In order to more clearly illustrate the technical solution in the embodiments of the present invention, the following introduction is made to the drawings required for use in the embodiments of the present invention. It should be understood that the drawings introduced below are only for the convenience of clearly describing some embodiments of the technical solution of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative work.

[0054] Figure 1 A flowchart of a method for remote unlocking security authentication of a smart door lock provided by an embodiment of the present invention;

[0055] Figure 2 A step flow chart of step S101 provided in an embodiment of the present invention;

[0056] Figure 3 A flowchart of a step of pre-keying a target door lock terminal and a target user terminal provided by an embodiment of the present invention;

[0057] Figure 4 A step flow chart of step S102 provided in an embodiment of the present invention;

[0058] Figure 5 A step flow chart of step S103 provided in an embodiment of the present invention;

[0059] Figure 6 A step flow chart of step S104 provided in an embodiment of the present invention;

[0060] Figure 7 A step flow chart of step S105 provided in an embodiment of the present invention;

[0061] Figure 8 A schematic diagram of data interaction of a smart door lock remote unlocking security authentication method provided in an embodiment of the present invention.

[0062] Fig. 9 A schematic diagram of the structure of a smart door lock remote unlocking security authentication device provided by an embodiment of the present invention;

[0063] Fig.10 A schematic diagram of the hardware structure of an electronic device provided by an embodiment of the present invention;

[0064] Fig.11 A schematic diagram of the structure of a storage medium provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0065] Embodiments of the present invention are described in detail below, and examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are only used to explain the present application, and cannot be understood as limitations on the present application. It should be noted that, although the functional module division is performed in the system schematic diagram and the logical order is shown in the flow chart, in some cases, the steps shown or described may be performed in a different order from the module division in the system schematic diagram or the flow chart. For the step numbers in the following embodiments, they are only set for the convenience of explanation, and the order between the steps is not limited in any way. The execution order of each step in the embodiment can be adaptively adjusted according to the understanding of those skilled in the art.

[0066] In the description of the present invention, the meaning of "a plurality" is two or more. If there is a description of the first or the second, it is only for the purpose of distinguishing the technical features, and it cannot be understood as indicating or implying the relative importance or implicitly indicating the number of the indicated technical features or implicitly indicating the order of the indicated technical features. In addition, unless otherwise defined, all technical and scientific terms used in this document have the same meaning as those commonly understood by technicians in the technical field of this application. The terms used in this document are only for the purpose of describing the embodiments of the present application and are not intended to limit the present application.

[0067] The smart door lock remote unlocking security authentication method provided in the embodiment of the present application can be applied to the terminal, can also be applied to the server side, and can also be software running in the terminal or the server side. In some embodiments, the terminal can be a smart phone, a tablet computer, a laptop computer, a desktop computer, a set-top box, etc.; the server side can be configured as an independent physical server, or a server cluster or distributed system composed of multiple physical servers, and can also be configured as a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN, and big data and artificial intelligence platforms; the software can be an application that implements the smart door lock remote unlocking security authentication method, etc., but is not limited to the above forms.

[0068] The present application can be used in many general or special computer system environments or configurations. For example: personal computers, server computers, handheld or portable devices, tablet devices, multiprocessor systems, microprocessor-based systems, set-top boxes, programmable consumer electronic devices, network PCs, minicomputers, mainframe computers, distributed computing environments including any of the above systems or devices, etc. The present application can be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. The present application can also be practiced in distributed computing environments, in which tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules can be located in local and remote computer storage media including storage devices.

[0069] It should be noted that in each specific implementation of the present application, when it comes to the need to perform relevant processing based on data related to user identity or characteristics such as user information, user behavior data, user historical data, and user location information, the user's permission or consent will be obtained first, and the collection, use, and processing of these data will comply with the relevant laws, regulations, and standards of the relevant countries and regions. In addition, when the embodiment of the present application needs to obtain the user's sensitive personal information, the user's separate permission or consent will be obtained through a pop-up window or by jumping to a confirmation page. After clearly obtaining the user's separate permission or consent, the necessary user-related data for the normal operation of the embodiment of the present application will be obtained.

[0070] In the prior art, the commonly used key management schemes for smart door locks include the following two: 1) an encryption key is written into the door lock when it leaves the factory, and an encryption key list corresponding to each door lock is entered into the platform, and this symmetric key is used to encrypt communications subsequently; 2) an asymmetric private key is preset in each door lock, and a symmetric key is negotiated using the asymmetric private key of the door lock and the platform public key preset in the door lock using a key negotiation algorithm during each communication. At the same time, the platform side uses the door lock's public key and the platform private key to negotiate the same symmetric key, and then the platform and the door lock use the symmetric key to encrypt communications.

[0071] In the above two solutions, the session encryption key is fixed for each door lock. If criminals decompile and crack the door lock and obtain the information written in the door lock firmware, or the manufacturer's door lock firmware information list is leaked, criminals can use fake clients to open other people's installed door locks without connecting to the platform for authentication, affecting the security of smart door locks.

[0072] In the relevant patent, the door lock access management platform pre-stores the door lock serial number and public key list. The door lock randomly generates a one-time symmetric key of a random number each time. The door lock packages the random one-time symmetric key, the door lock serial number, and the signature value of the serial number and encrypts it with the platform's public key and sends it to the client APP. The client APP uses the platform's private key to decrypt and obtain the one-time symmetric key. This solution has the following problems: 1) The door lock access management platform needs to pre-store the door lock serial number and public key list. The door lock manufacturer needs to report the correspondence between the door lock serial number and the public key to the door lock access management platform in advance, which increases the difficulty of operation and management of the door lock access management platform; 2) When the door lock is produced, the door lock manufacturer uses the code to generate the door lock public and private key pair, which cannot guarantee the uniqueness of the public and private key pair of each door lock. When the public and private keys of multiple door locks are repeated, it may cause security risks.

[0073] In the embodiment of the present invention, the keys of the door lock terminal and the user terminal are generated by the quantum key generator of the quantum cryptography service platform, which can ensure the uniqueness of the keys between different door locks. Researchers at the cryptographic security company Keyfactor found that among IoT devices using RSA digital certificates, about 0.58% of the devices use the same factor to generate random numbers. However, the quantum random number generator (QRNG) perfectly solves the problem of pseudo-random numbers, and quantum key distribution (QKD) is the most recognized quantum key generation mechanism in the industry.

[0074] In the embodiment of the present invention, the door lock access management platform does not need to store the public key corresponding to each door lock, and the manufacturer does not need to report the door lock public key list to the door lock access management platform before each batch leaves the factory, which greatly reduces the operational management difficulty of the door lock access management platform.

[0075] For attackers, even if the forged client APP connects to the door lock via Bluetooth, it cannot connect to the quantum key management platform because it does not have a secure SIM card, and the binding relationship between the user and the door lock is verified by the door lock access management platform. Therefore, the illegal client APP cannot obtain the same quantum session key as the door lock for further communication with the door lock, and cannot perform operations such as unlocking the door or setting passwords.

[0076] like Figure 1 FIG. 1 is a flowchart of a method for remote unlocking security authentication of a smart door lock provided by an embodiment of the present invention, referring to FIG. Figure 1 The embodiment of the present invention provides a smart door lock remote unlocking security authentication method, which specifically includes the following steps:

[0077] S101, sending a door lock connection request to the door lock access management platform through the target user terminal, so that the door lock access management platform determines the target door lock terminal according to the door lock connection request, and sends a connection activation instruction to the target door lock terminal;

[0078] S102, sending a session key generation request to the quantum cryptography service platform through the target door lock terminal, so that the quantum cryptography service platform generates a quantum random session key and a corresponding session key identifier, and encrypts the quantum random session key and the session key identifier and returns them to the target door lock terminal;

[0079] S103, sending the session key identifier to the door lock access management platform through the target door lock terminal, so that the door lock access management platform sends the session key identifier to the target user terminal;

[0080] S104, sending a session key call request to the quantum cryptography service platform through the target user terminal according to the session key identifier, so that the quantum cryptography service platform encrypts the quantum random session key and returns it to the target user terminal;

[0081] S105. The target user terminal generates door lock operation encrypted data using the quantum random session key, and forwards the door lock operation encrypted data to the target door lock terminal through the door lock access management platform, so that the target door lock terminal uses the quantum random session key to decrypt the door lock operation encrypted data.

[0082] In the embodiment of the present invention, when a user terminal initiates a connection request to a door lock terminal through a door lock access management platform, the door lock terminal requests a quantum cryptography service platform to generate a quantum random session key and a corresponding session key identifier, and the door lock access management platform sends the session key identifier to the user terminal. The user terminal requests the quantum cryptography service platform to call the quantum random session key according to the session key identifier, so that the user terminal and the door lock terminal can complete the session through the quantum random session key, thereby improving the security of the smart door lock; in addition, the door lock access management platform does not need to store a large number of key lists corresponding to door lock terminals, thereby reducing the operating pressure of the door lock access management platform.

[0083] like Figure 2 FIG. 1 is a flowchart of step 101 provided in an embodiment of the present invention, referring to FIG. Figure 2 As an optional implementation method, a door lock connection request is sent to the door lock access management platform through the target user terminal, so that the door lock access management platform determines the target door lock terminal according to the door lock connection request, and sends a connection activation instruction to the target door lock terminal, which specifically includes:

[0084] S1011, generating a door lock connection request through the target user terminal according to the user login information and the target door lock identifier, and sending the door lock connection request to the door lock access management platform;

[0085] S1012, parsing the door lock connection request through the door lock access management platform to obtain the user login information and the target door lock identifier, and determining whether there is a binding relationship between the user login information and the target door lock identifier according to a pre-built door lock binding relationship database;

[0086] S1013. When there is a binding relationship between the user login information and the target door lock identifier, the target door lock terminal is determined according to the target door lock identifier, and a connection activation instruction is sent to the target door lock terminal.

[0087] Specifically, the user terminal sends the user login information and the door lock identification of the door lock terminal to be connected to the door lock access management platform. The door lock access management platform verifies the binding relationship. After the verification, it determines the corresponding door lock terminal according to the door lock identification, and then sends a connection activation instruction to the door lock terminal.

[0088] like Figure 3 FIG. 1 is a flowchart of a step of pre-keying a target door lock terminal and a target user terminal according to an embodiment of the present invention, referring to FIG. Figure 3 As an optional implementation, the smart door lock remote unlocking security authentication method further includes the step of pre-keying the target door lock terminal and the target user terminal, which specifically includes:

[0089] S201, generating a plurality of first quantum random keys and a plurality of corresponding first key identifiers through a quantum cryptography service platform, establishing a first mapping relationship between the first quantum random keys and the first key identifiers, and storing the first mapping relationship;

[0090] S202, sending the first quantum random key, the first key identifier, and the first mapping relationship to the target door lock terminal through the quantum cryptography service platform, so that the target door lock terminal stores the first quantum random key, the first key identifier, and the first mapping relationship through a built-in security chip;

[0091] S203, generating a plurality of second quantum random keys and a plurality of corresponding second key identifiers through the quantum cryptography service platform, establishing a second mapping relationship between the second quantum random keys and the second key identifiers, and storing the second mapping relationship;

[0092] S204, sending the second quantum random key, the second key identifier and the second mapping relationship to the target user terminal through the quantum cryptography service platform, so that the target user terminal stores the second quantum random key, the second key identifier and the second mapping relationship through the secure SMI card.

[0093] Specifically, the embodiment of the present invention generates multiple quantum random keys in advance through the quantum cryptography service platform and injects them into the door lock terminal and the user end respectively. When the quantum cryptography service platform subsequently sends the quantum random session key to the door lock terminal / user end, it will be encrypted by the quantum random key injected into the door lock terminal / user end to ensure the security of the transmission of the quantum random session key.

[0094] It should be noted that the quantum random key of the door lock terminal is stored in the built-in security chip (hardware encryption chip), and the quantum random key of the user end is stored in the built-in security SIM card. The quantum random session key used for communication between the two is temporarily randomly generated by the quantum cryptography service platform and is only saved for a short time in the quantum cryptography service platform, the door lock terminal and the user end. It can be invalidated and destroyed after the communication is completed. In this way, the door lock access management platform does not need to store quantum random keys and quantum random session keys from beginning to end, which greatly reduces the operating pressure of the door lock access management platform while enhancing the security of smart door locks.

[0095] like Figure 4 FIG. 1 is a flow chart of step S102 provided in an embodiment of the present invention, referring to FIG. Figure 4 As an optional implementation, a session key generation request is sent to the quantum cryptography service platform through the target door lock terminal, so that the quantum cryptography service platform generates a quantum random session key and a corresponding session key identifier, and encrypts the quantum random session key and the session key identifier and returns them to the target door lock terminal, which specifically includes:

[0096] S1021. Selecting a first quantum random key and a corresponding first key identifier through the target door lock terminal, generating a session key generation request according to the selected first key identifier, and then sending the session key generation request to the quantum cryptography service platform;

[0097] S1022. parse the session key generation request through the quantum cryptography service platform to obtain a first key identifier, and determine a first quantum random key corresponding to the first key identifier according to a first mapping relationship stored locally;

[0098] S1023. Generate a quantum random session key and a session key identifier through the quantum cryptography service platform, and use the first quantum random key to encrypt the quantum random session key to obtain a first ciphertext, and then return the first ciphertext and the session key identifier to the target door lock terminal.

[0099] Specifically, the door lock terminal selects a locally stored first quantum random key and a corresponding first key identifier, and sends the first key identifier to the quantum cryptography service platform; the quantum cryptography service platform searches for the locally stored first quantum random key according to the first key identifier, and generates a quantum random session key and a corresponding session key identifier at the same time, and then uses the first quantum random key to encrypt the quantum random session key and returns it to the door lock terminal.

[0100] like Figure 5 FIG. 1 is a flow chart of step S103 provided in an embodiment of the present invention, referring to FIG. Figure 5 As an optional implementation, the session key identifier is sent to the door lock access management platform through the target door lock terminal, so that the door lock access management platform sends the session key identifier to the target user terminal, which specifically includes:

[0101] S1031. Decrypt the first ciphertext according to the selected first quantum random key through the target door lock terminal to obtain a quantum random session key, and send the target door lock identifier and the session key identifier to the door lock access management platform;

[0102] S1032. The corresponding relationship between the target door lock identifier and the session key identifier is stored through the door lock access management platform, and the session key identifier is sent to the target user end that initiates the door lock connection request.

[0103] Specifically, the door lock terminal uses the first quantum random key selected in the above step to decrypt and obtain the quantum random session key, and then sends the door lock identifier and the session key identifier to the door lock access management platform, which then sends the session key identifier to the user end that initiated the door lock connection request in the above step.

[0104] like Figure 6 FIG. 1 is a flowchart of step S104 provided in an embodiment of the present invention, referring to FIG. Figure 6 As an optional implementation method, the target user terminal sends a session key call request to the quantum cryptography service platform according to the session key identifier, so that the quantum cryptography service platform encrypts the quantum random session key and returns it to the target user terminal, which specifically includes:

[0105] S1041. Selecting a second quantum random key and a corresponding second key identifier through the target user terminal, generating a session key call request according to the selected second key identifier and the session key identifier, and then sending the session key call request to the quantum cryptography service platform;

[0106] S1042. Parsing the session key call request through the quantum cryptography service platform to obtain a second key identifier and a session key identifier, determining a second quantum random key corresponding to the second key identifier according to a second mapping relationship stored locally, and determining a corresponding quantum random session key according to the session key identifier;

[0107] S1043. Encrypt the quantum random session key using the second quantum random key through the quantum cryptography service platform to obtain a second ciphertext, and then return the second ciphertext to the target user end.

[0108] Specifically, the user terminal selects a locally stored second quantum random key and a corresponding second key identifier, and sends the second key identifier and the received session key identifier to the quantum cryptography service platform; the quantum cryptography service platform searches for the locally stored second quantum random key according to the second key identifier, searches for the locally stored quantum random session key according to the session key identifier, and then uses the second quantum random key to encrypt the quantum random session key and returns it to the user terminal.

[0109] like Figure 7 FIG. 1 is a flow chart of a step of S105 provided in an embodiment of the present invention, referring to Figure 7 As an optional implementation method, the target user terminal generates door lock operation encrypted data using the quantum random session key, and forwards the door lock operation encrypted data to the target door lock terminal through the door lock access management platform, so that the target door lock terminal uses the quantum random session key to decrypt the door lock operation encrypted data, which specifically includes:

[0110] S1051. Decrypting the second ciphertext by the target user terminal according to the selected second quantum random key to obtain a quantum random session key;

[0111] S1052, encrypting the door lock operation instruction by the target user end using the quantum random session key to generate door lock operation encrypted data, and sending the door lock operation encrypted data and the target door lock identifier to the door lock access management platform;

[0112] S1053, determining the target door lock terminal according to the target door lock identifier through the door lock access management platform, and forwarding the door lock operation encrypted data to the target door lock terminal;

[0113] S1054. Decrypt the door lock operation encrypted data using the locally stored quantum random session key through the target door lock terminal, obtain the door lock operation instruction and respond.

[0114] Specifically, the user end uses the second quantum random key selected in the above step to decrypt and obtain the quantum random session key, and then uses the quantum random session key to encrypt the user's door lock operation instructions to obtain the door lock operation encrypted data, and sends the door lock operation encrypted data and the corresponding door lock identification to the door lock access management platform; the door lock access management platform forwards the door lock operation encrypted data to the door lock terminal corresponding to the door lock identification; the door lock terminal uses the quantum random session key obtained in the above step to decrypt the door lock operation encrypted data to obtain the user's door lock operation instructions, so as to complete the response and execute permission operations such as unlocking, changing the password and setting the fingerprint password.

[0115] like Figure 8 The figure is a data interaction diagram of the smart door lock remote unlocking security authentication method provided by an embodiment of the present invention. A complete process of the embodiment of the present invention is as follows:

[0116] 1. The door lock is equipped with a built-in security chip when it leaves the factory. The door lock security chip stores the quantum random key (K1) generated by the quantum cryptography service platform (it can store multiple sets of keys and corresponding key identification IDs). The quantum cryptography service platform records the correspondence between the key and the identification (K1 corresponds to ID1).

[0117] 2. The quantum random key (K2) generated by the quantum cryptography service platform is stored in the mobile phone SIM card (equivalent to the function of a security chip) (multiple sets of keys and corresponding key identification IDs can be stored). The quantum cryptography service platform records the correspondence between the key and the identification (K2 corresponds to ID2).

[0118] 3. The user uses the mobile phone APP to click to unlock or set a password, and the mobile phone APP forwards the message through the door lock access management platform, indirectly establishing a connection with the door lock.

[0119] 4. The door lock sends an identification ID (ID1) corresponding to a key to the quantum cryptography service platform.

[0120] 5. The quantum cryptography service platform queries the corresponding key (K1) by receiving the key identification ID (ID1) sent by the door lock.

[0121] 6. The quantum cryptography service platform uses a quantum random number generator (QRNG) (which is physically unpredictable, such as based on photon counting, photon arrival time, photon arrival position, etc.) to generate a quantum random session key (Ks), and uses the key (K1) queried in the previous step as the encryption key. It uses symmetric encryption algorithms such as the national encryption SM4 to encrypt the generated quantum random session key (Ks) and obtain the ciphertext: EK1(Ks).

[0122] 7. The quantum cryptography service platform sends the ciphertext of the quantum random session key encrypted by the door lock key and the ID plaintext corresponding to the quantum random session key back to the door lock (EK1(Ks)+IDs).

[0123] 8. The door lock decrypts the received ciphertext EK1(Ks) using the quantum key (K1) stored in the door lock security chip to obtain the quantum random session key Ks.

[0124] 9. The door lock sends the key identification IDs corresponding to the quantum random session key Ks to the door lock connection platform (including the unique identification code of the door lock device).

[0125] 10. The door lock connection platform temporarily records the received identification IDs (such as recording the corresponding relationship between {door lock device unique identification code, key identification IDs} in a dedicated read-write database or cache).

[0126] 11. The mobile phone APP carries the user login information (such as the mobile phone number that has been bound to the door lock) and the unique identification code of the door lock device (such as the door lock serial number, the unique identification code of each device written at the factory) to request the door lock connection platform. The door lock connection platform binding database stores the correspondence between the door lock identification and user login information recorded when the user first installed / bound the device (such as {mobile phone number, door lock device unique identification code}).

[0127] 12. The door lock connection platform compares the user login information and door lock device unique identification code received in the previous step with the correspondence between the door lock identification and user login information previously saved in the binding relationship database between the user and the door lock device, thereby confirming that the APP user received in the previous step already has a binding relationship with the door lock, and then, based on the received door lock device unique identification code, finds the corresponding quantum session key identification IDs from the corresponding relationship of {door lock device unique identification code, key identification IDs} temporarily recorded in the previous step by comparing and searching for the corresponding door lock device unique identification code, takes out the IDs, and sends the IDs to the mobile client.

[0128] 13. The mobile phone APP retrieves the quantum key K2 and its corresponding key identifier ID2 stored in the mobile phone SIM card, and sends the IDs (key identifier corresponding to the quantum session key Ks) sent to the mobile client by the door lock access management platform in the previous step, {ID2+IDs} to the quantum cryptography service platform.

[0129] 14. The quantum cryptography service platform queries the corresponding password K2 based on ID2, uses K2 as the encryption key, uses symmetric encryption algorithms such as SM4, encrypts Ks, obtains the ciphertext EK2(Ks), and returns the ciphertext EK2(Ks) to the mobile client.

[0130] 15. The mobile client retrieves the mobile-side quantum key K2 stored in the SIM card and decrypts it to obtain Ks.

[0131] 16. The mobile client uses the Ks obtained in the previous step as the key to encrypt the unlocking instructions using a symmetric encryption algorithm such as SM4. The command ciphertext and the door lock unique identifier are sent to the door lock access management platform (the message sent is the ciphertext encrypted with Ks + the door lock unique identifier).

[0132] 17. The platform finds the corresponding door lock through the unique identification of the door lock, sends the ciphertext encrypted with Ks to the door lock, and the door lock uses Ks to decrypt the command, thereby realizing remote security unlocking and other operations.

[0133] The above is a description of the method steps of the embodiment of the present invention. It can be recognized that in the embodiment of the present invention, when the user terminal initiates a connection request to the door lock terminal through the door lock access management platform, the door lock terminal requests the quantum cryptography service platform to generate a quantum random session key and a corresponding session key identifier, and the session key identifier is sent to the user terminal through the door lock access management platform. The user terminal requests the quantum cryptography service platform to call the quantum random session key according to the session key identifier, so that the user terminal and the door lock terminal can complete the session through the quantum random session key, thereby improving the security of the smart door lock; in addition, the door lock access management platform does not need to store a large number of key lists corresponding to the door lock terminals, reducing the operating pressure of the door lock access management platform.

[0134] Many existing smart door locks pre-write the encryption key used for communication into the door lock firmware when they leave the factory. However, the door lock firmware is easily decompiled and cracked, and the door lock firmware information needs to be given to the door lock manufacturer or OEM for writing, which is difficult to ensure that it will not be leaked, resulting in the leakage of encryption keys, so that a door lock that does not belong to you can be opened by sending a false door opening command. Even if the door lock firmware information is leaked, the communication key is generated by the quantum cryptography service platform each time, which improves security. In addition, the door lock access management platform does not need to store the public key corresponding to each door lock, which greatly reduces the pressure on the operation and management of the door lock access management platform.

[0135] In the embodiment of the present invention, the door lock access management platform is mainly responsible for managing the binding relationship between the user and the door lock device, and the identification of the session key of the door lock only needs to be temporarily saved (it can be discarded and deleted after the current operation is completed), without the risk of key leakage caused by the large amount of key storage. When the mobile phone APP requests the session key identification, the door lock connection platform compares the received user login information and the door lock device unique identification code with the corresponding relationship between the door lock identification and the user login information previously saved in the binding relationship database between the user and the door lock device, thereby confirming that the received APP user and the door lock already have a binding relationship, and then according to the received door lock device unique identification code, from the temporarily recorded {door lock device unique identification code, key identification IDs} corresponding relationship, by comparing and searching the corresponding door lock device unique identification code to find the corresponding quantum session key identification IDs, take out the IDs, and send the IDs to the mobile phone client. Thus, the mobile phone client APP obtains the session key identification, and then goes to the quantum key service platform to obtain the corresponding quantum key, and the mobile phone client APP obtains the same symmetric key as the door lock end.

[0136] It should be noted that the embodiments of the present invention do not limit the specific symmetric encryption algorithm used, and standard symmetric key encryption methods such as the national encryption SM4 can be used.

[0137] like Fig. 9 FIG. 1 is a schematic diagram of a smart door lock remote unlocking security authentication device provided by an embodiment of the present invention, referring to FIG. Fig. 9 The embodiment of the present invention provides a smart door lock remote unlocking security authentication device, comprising:

[0138] A connection activation module is used to send a door lock connection request to the door lock access management platform through the target user terminal, so that the door lock access management platform determines the target door lock terminal according to the door lock connection request, and sends a connection activation instruction to the target door lock terminal;

[0139] A session key generation module is used to send a session key generation request to the quantum cryptography service platform through the target door lock terminal, so that the quantum cryptography service platform generates a quantum random session key and a corresponding session key identifier, and encrypts the quantum random session key and the session key identifier and returns them to the target door lock terminal;

[0140] The session key identifier sending module is used to send the session key identifier to the door lock access management platform through the target door lock terminal, so that the door lock access management platform sends the session key identifier to the target user terminal;

[0141] A session key calling module is used to send a session key calling request to the quantum cryptography service platform through the target user terminal according to the session key identifier, so that the quantum cryptography service platform encrypts the quantum random session key and returns it to the target user terminal;

[0142] The encryption transmission module is used to generate door lock operation encrypted data using the quantum random session key through the target user terminal, and forward the door lock operation encrypted data to the target door lock terminal through the door lock access management platform, so that the target door lock terminal uses the quantum random session key to decrypt the door lock operation encrypted data.

[0143] The contents of the above method embodiments are all applicable to the present device embodiments. The functions specifically implemented by the present device embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0144] The embodiment of the present invention also provides an electronic device, which includes: a memory, a processor, a program stored in the memory and executable on the processor, and a data bus for realizing connection and communication between the processor and the memory, and when the program is executed by the processor, the above-mentioned smart door lock remote unlocking security authentication method is realized. The electronic device can be any smart terminal including a tablet computer, a vehicle-mounted computer, etc.

[0145] like Fig.10 FIG. 1 is a schematic diagram of the hardware structure of an electronic device provided in an embodiment of the present invention, referring to FIG. Fig.10 , an embodiment of the present invention provides an electronic device, including:

[0146] The processor 1001 may be implemented by a general-purpose CPU (Central Processing Unit), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solutions provided in the embodiments of the present invention.

[0147] The memory 1002 can be implemented in the form of a read-only memory (ROM), a static storage device, a dynamic storage device, or a random access memory (RAM). The memory 1002 can store an operating system and other application programs. When the technical solution provided in the embodiment of this specification is implemented by software or firmware, the relevant program code is stored in the memory 1002, and the processor 1001 calls and executes the smart door lock remote unlocking security authentication method of the embodiment of the present invention;

[0148] Input / output interface 1003, used to implement information input and output;

[0149] The communication interface 1004 is used to realize the communication interaction between the device and other devices. The communication can be realized through a wired manner (such as USB, network cable, etc.) or a wireless manner (such as mobile network, WIFI, Bluetooth, etc.);

[0150] A bus 1005 , which transmits information between various components of the device (e.g., the processor 1001 , the memory 1002 , the input / output interface 1003 , and the communication interface 1004 );

[0151] The processor 1001 , the memory 1002 , the input / output interface 1003 and the communication interface 1004 are connected to each other in communication within the device via the bus 1005 .

[0152] like Fig.11 FIG. 1 is a schematic diagram of a storage medium according to an embodiment of the present invention. Fig.11 The embodiment of the present invention also provides a storage medium, which is a computer-readable storage medium used for computer-readable storage. The storage medium stores one or more programs 1101, and the one or more programs 1101 can be executed by one or more processors to implement the above-mentioned smart door lock remote unlocking security authentication method.

[0153] The memory, as a non-transient computer-readable storage medium, can be used to store non-transient software programs and non-transient computer executable programs. In addition, the memory may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some embodiments, the memory may optionally include a memory remotely disposed relative to the processor, and these remote memories may be connected to the processor via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0154] The embodiment of the present invention also discloses a computer program product or a computer program, wherein the computer program product or the computer program includes computer instructions, and the computer instructions are stored in a computer-readable storage medium. A processor of a computer device can read the computer instructions from the computer-readable storage medium, and the processor executes the computer instructions, so that the computer device executes Figure 1 The method shown.

[0155] In some selectable embodiments, the function / operation mentioned in the block diagram may not occur in the order mentioned in the operation diagram. For example, depending on the function / operation involved, the two boxes shown in succession can actually be executed substantially simultaneously or the above-mentioned boxes can sometimes be executed in reverse order. In addition, the embodiment presented and described in the flow chart of the present invention is provided by way of example, for the purpose of providing a more comprehensive understanding of technology. The disclosed method is not limited to the operation and logic flow presented herein. Selectable embodiments are expected, wherein the order of various operations is changed and the sub-operation of a part for which is described as a larger operation is performed independently.

[0156] In addition, although the present invention is described in the context of functional modules, it should be understood that, unless otherwise specified to the contrary, one or more of the above-mentioned functions and / or features can be integrated into a single physical device and / or software module, or one or more functions and / or features can be implemented in a separate physical device or software module. It is also understood that a detailed discussion of the actual implementation of each module is unnecessary for understanding the present invention. More specifically, in view of the properties, functions and internal relationships of the various functional modules in the device disclosed herein, the actual implementation of the module will be understood within the conventional skills of the engineer. Therefore, those skilled in the art can implement the present invention set forth in the claims without excessive experimentation using ordinary techniques. It is also understood that the specific concepts disclosed are merely illustrative and are not intended to limit the scope of the present invention, which is determined by the full scope of the appended claims and their equivalents.

[0157] If the above functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the above methods of each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk and other media that can store program codes.

[0158] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as an ordered list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by an instruction execution system, device or apparatus (such as a computer-based system, a system including a processor, or other system that can fetch instructions from an instruction execution system, device or apparatus and execute instructions), or in conjunction with such instruction execution systems, devices or apparatuses. For the purposes of this specification, "computer-readable medium" can be any device that can contain, store, communicate, propagate or transmit a program for use by an instruction execution system, device or apparatus, or in conjunction with such instruction execution systems, devices or apparatuses.

[0159] More specific examples of computer-readable media (a non-exhaustive list) include the following: an electrical connection with one or more wires (electronic device), a portable computer disk case (magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable and editable read-only memory (EPROM or flash memory), an optical fiber device, and a portable compact disk read-only memory (CDROM). In addition, the computer-readable medium may even be a paper or other suitable medium on which the above-mentioned program is printed, since the above-mentioned program can be obtained electronically, for example, by optically scanning the paper or other medium, followed by editing, deciphering or processing in other suitable ways as necessary, and then stored in a computer memory.

[0160] It should be understood that the various parts of the present invention can be implemented by hardware, software, firmware or a combination thereof. In the above-mentioned embodiments, a plurality of steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented by hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or their combination: a discrete logic circuit having a logic gate circuit for implementing a logic function for a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.

[0161] In the above description of this specification, the description with reference to the terms "one embodiment / example", "another embodiment / example" or "certain embodiments / examples" etc. means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representation of the above terms does not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner.

[0162] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the claims and their equivalents.

[0163] The above is a specific description of the preferred implementation of the present invention, but the present invention is not limited to the above embodiments. Those skilled in the art may make various equivalent modifications or substitutions without violating the spirit of the present invention. These equivalent modifications or substitutions are all included in the scope defined by the claims of this application.

Claims

1. A smart door lock remote unlocking security authentication method, characterized in that: The following steps are involved: Sending a door lock connection request to the door lock access management platform through the target user terminal, so that the door lock access management platform determines the target door lock terminal according to the door lock connection request, and sends a connection activation instruction to the target door lock terminal; Sending a session key generation request to the quantum cryptography service platform through the target door lock terminal, so that the quantum cryptography service platform generates a quantum random session key and a corresponding session key identifier, and encrypts the quantum random session key and the session key identifier and returns them to the target door lock terminal; The session key identifier is sent to the door lock access management platform through the target door lock terminal, so that the door lock access management platform sends the session key identifier to the target user terminal; The target user terminal sends a session key call request to the quantum cryptography service platform according to the session key identifier, so that the quantum cryptography service platform encrypts the quantum random session key and returns it to the target user terminal; The target user terminal uses the quantum random session key to generate door lock operation encrypted data, and forwards the door lock operation encrypted data to the target door lock terminal through the door lock access management platform, so that the target door lock terminal uses the quantum random session key to decrypt the door lock operation encrypted data.

2. According to claim 1, a smart door lock remote unlocking security authentication method is characterized in that: The method of sending a door lock connection request to the door lock access management platform through the target user terminal so that the door lock access management platform determines the target door lock terminal according to the door lock connection request and sends a connection activation instruction to the target door lock terminal specifically includes: The target user terminal generates the door lock connection request according to the user login information and the target door lock identifier, and sends the door lock connection request to the door lock access management platform; The door lock connection request is parsed through the door lock access management platform to obtain the user login information and the target door lock identifier, and whether there is a binding relationship between the user login information and the target door lock identifier is determined according to a pre-built door lock binding relationship database; When the user login information is bound to the target door lock identifier, the target door lock terminal is determined according to the target door lock identifier, and the connection activation instruction is sent to the target door lock terminal.

3. According to claim 1, a smart door lock remote unlocking security authentication method is characterized in that: The smart door lock remote unlocking security authentication method also includes the step of pre-keying the target door lock terminal and the target user terminal, which specifically includes: Generate multiple first quantum random keys and corresponding multiple first key identifiers through the quantum cryptography service platform, establish a first mapping relationship between the first quantum random keys and the first key identifiers, and store the first mapping relationship; Sending the first quantum random key, the first key identifier, and the first mapping relationship to the target door lock terminal through the quantum cryptography service platform, so that the target door lock terminal stores the first quantum random key, the first key identifier, and the first mapping relationship through a built-in security chip; Generate multiple second quantum random keys and corresponding multiple second key identifiers through the quantum cryptography service platform, establish a second mapping relationship between the second quantum random keys and the second key identifiers, and store the second mapping relationship; The second quantum random key, the second key identifier and the second mapping relationship are sent to the target user terminal through the quantum cryptography service platform, so that the target user terminal stores the second quantum random key, the second key identifier and the second mapping relationship through a secure SMI card.

4. A smart door lock remote unlocking security authentication method according to claim 3, characterized in that: The method of sending a session key generation request to the quantum cryptography service platform through the target door lock terminal so that the quantum cryptography service platform generates a quantum random session key and a corresponding session key identifier, and encrypts the quantum random session key and the session key identifier and returns them to the target door lock terminal, specifically comprising: Selecting one of the first quantum random key and the corresponding first key identifier through the target door lock terminal, generating the session key generation request according to the selected first key identifier, and then sending the session key generation request to the quantum cryptography service platform; Parsing the session key generation request through the quantum cryptography service platform to obtain the first key identifier, and determining the first quantum random key corresponding to the first key identifier according to a first mapping relationship stored locally; The quantum random session key and the session key identifier are generated through a quantum cryptography service platform, and the quantum random session key is encrypted using the first quantum random key to obtain a first ciphertext, and then the first ciphertext and the session key identifier are returned to the target door lock terminal.

5. A smart door lock remote unlocking security authentication method according to claim 4, characterized in that: The step of sending the session key identifier to the door lock access management platform through the target door lock terminal so that the door lock access management platform sends the session key identifier to the target user terminal specifically includes: Decrypting the first ciphertext according to the selected first quantum random key by the target door lock terminal to obtain the quantum random session key, and sending the target door lock identifier and the session key identifier to the door lock access management platform; The correspondence between the target door lock identifier and the session key identifier is stored through a door lock access management platform, and the session key identifier is sent to the target user terminal that initiates the door lock connection request.

6. A smart door lock remote unlocking security authentication method according to claim 3, characterized in that: The target user terminal sends a session key call request to the quantum cryptography service platform according to the session key identifier, so that the quantum cryptography service platform encrypts the quantum random session key and returns it to the target user terminal, which specifically includes: Selecting a second quantum random key and a corresponding second key identifier through the target user terminal, generating the session key call request according to the selected second key identifier and the session key identifier, and then sending the session key call request to the quantum cryptography service platform; Parsing the session key call request through the quantum cryptography service platform to obtain the second key identifier and the session key identifier, determining the second quantum random key corresponding to the second key identifier according to the second mapping relationship stored locally, and determining the corresponding quantum random session key according to the session key identifier; The quantum random session key is encrypted using the second quantum random key through the quantum cryptography service platform to obtain a second ciphertext, and then the second ciphertext is returned to the target user end.

7. A smart door lock remote unlocking security authentication method according to claim 6, characterized in that: The target user terminal generates door lock operation encrypted data using the quantum random session key, and forwards the door lock operation encrypted data to the target door lock terminal through the door lock access management platform, so that the target door lock terminal uses the quantum random session key to decrypt the door lock operation encrypted data, which specifically includes: Decrypting the second ciphertext by the target user end according to the selected second quantum random key to obtain the quantum random session key; The target user terminal uses the quantum random session key to encrypt the door lock operation instruction to generate the door lock operation encrypted data, and sends the door lock operation encrypted data and the target door lock identifier to the door lock access management platform; Determine the target door lock terminal according to the target door lock identifier through the door lock access management platform, and forward the door lock operation encrypted data to the target door lock terminal; The door lock operation encrypted data is decrypted by the target door lock terminal using the locally stored quantum random session key to obtain the door lock operation instruction and respond.

8. A smart door lock remote unlocking security authentication device, characterized in that: include: A connection activation module, used to send a door lock connection request to the door lock access management platform through the target user terminal, so that the door lock access management platform determines the target door lock terminal according to the door lock connection request, and sends a connection activation instruction to the target door lock terminal; A session key generation module, used to send a session key generation request to the quantum cryptography service platform through the target door lock terminal, so that the quantum cryptography service platform generates a quantum random session key and a corresponding session key identifier, and encrypts the quantum random session key and the session key identifier and returns them to the target door lock terminal; A session key identifier sending module, used to send the session key identifier to the door lock access management platform through the target door lock terminal, so that the door lock access management platform sends the session key identifier to the target user terminal; A session key calling module is used to send a session key calling request to the quantum cryptography service platform through the target user terminal according to the session key identifier, so that the quantum cryptography service platform encrypts the quantum random session key and returns it to the target user terminal; The encryption transmission module is used to generate door lock operation encrypted data by using the quantum random session key through the target user terminal, and forward the door lock operation encrypted data to the target door lock terminal through the door lock access management platform, so that the target door lock terminal uses the quantum random session key to decrypt the door lock operation encrypted data.

9. An electronic device, characterized in that: The electronic device includes a memory, a processor, a program stored in the memory and executable on the processor, and a data bus for realizing connection and communication between the processor and the memory. When the program is executed by the processor, the steps of the smart door lock remote unlocking security authentication method as described in any one of claims 1 to 7 are realized.

10. A storage medium, the storage medium being a computer-readable storage medium, used for computer-readable storage, characterized in that: The storage medium stores one or more programs, and the one or more programs can be executed by one or more processors to implement the steps of the smart door lock remote unlocking security authentication method as described in any one of claims 1 to 7.

Images