Intelligent door lock authentication method and device, electronic equipment and storage medium

Abstract

The invention discloses an intelligent door lock authentication method and device, electronic equipment and a storage medium, and the method comprises the steps: building connection with door lock equipment through a client in response to an interaction instruction, and obtaining a unique identification code of the door lock equipment, the user login information and the unique identification code of the door lock equipment are sent to a door lock access management platform to obtain a quantum session key identifier, and the client key identifier and the quantum session key identifier are sent to a quantum password service platform to obtain a first quantum session encrypted ciphertext; and decrypting the first quantum session encrypted ciphertext according to the client quantum key to obtain a quantum random session key, and performing communication authentication processing with the door lock device according to the quantum random session key to obtain an authentication result. The embodiment of the invention can improve the authentication safety and efficiency of the intelligent door lock, and can be widely applied to the technical field of intelligent door locks.

Description

Technical Field

[0001] The present application relates to the technical field of smart door locks, and in particular to a smart door lock authentication method, device, electronic device and storage medium. Background Art

[0002] Smart door locks provide a way for mobile phone clients to unlock the door using near-field communications such as Bluetooth. The door is opened by sending a door opening command to the door lock through near-field communication between the mobile phone client and the door lock. In related technologies, the encryption key is pre-written in the door lock firmware at the factory, or the session key is negotiated with the platform through the private key preset in the door lock firmware. However, in actual applications, it is found that the door lock firmware is easily decompiled and cracked, resulting in the leakage of the door lock private key, which may bring the risk of illegal door opening. In addition, as a door lock management platform, it is necessary to save a large number of door lock key lists, which brings pressure on the operation and management of the door lock access management platform, affecting the authentication efficiency of the smart door lock.

[0003] In summary, the technical problems existing in the relevant technologies need to be improved. Summary of the invention

[0004] The main purpose of the embodiments of the present application is to propose a smart door lock authentication method, device, electronic device and storage medium, which can improve the authentication efficiency of the smart door lock.

[0005] To achieve the above purpose, an embodiment of the present application provides a smart door lock authentication method, which is applied to a client, and the client stores user login information, a client key identifier, and a client quantum key. The method includes the following steps:

[0006] Establishing a connection with the door lock device in response to the interactive instruction, and obtaining a unique identification code of the door lock device;

[0007] Send the user login information and the unique identification code of the door lock device to the door lock access management platform to obtain the quantum session key identification;

[0008] Sending the client key identifier and the quantum session key identifier to a quantum cryptography service platform to obtain a first quantum session encrypted ciphertext;

[0009] Decrypting the first quantum session encrypted ciphertext according to the client quantum key to obtain a quantum random session key;

[0010] A communication authentication process is performed with the door lock device according to the quantum random session key to obtain an authentication result.

[0011] In some embodiments, before establishing a connection with the door lock device in response to the interactive instruction, the method further includes the following steps:

[0012] Obtaining the client key identifier and the client quantum key charged by the quantum cryptography service platform;

[0013] The client key identifier and the client quantum key are stored in a user identification card.

[0014] Another aspect of the embodiment of the present application provides a smart door lock authentication method, which is applied to a door lock device, wherein the door lock device stores a door lock device unique identification code, a door lock device key identification, and a door lock device quantum key, and the method comprises the following steps:

[0015] Connecting with the client in response to the client connection request, and sending the unique identification code of the door lock device to the client;

[0016] Sending the door lock device key identifier to the quantum cryptography service platform to obtain the second quantum session encrypted ciphertext and the quantum session key identifier;

[0017] Sending the door lock device unique identification code and the quantum session key identification to the door lock access management platform;

[0018] Decrypting the second quantum session encrypted ciphertext according to the door lock device quantum key to obtain a quantum random session key;

[0019] Perform communication authentication processing with the client according to the quantum random session key to obtain an authentication result.

[0020] In some embodiments, before connecting with the client in response to the client connection request, the method further comprises the following steps:

[0021] Obtaining the door lock device key identifier and the door lock device quantum key charged by the quantum cryptography service platform;

[0022] The door lock device key identifier and the door lock device quantum key are stored in a security chip.

[0023] Another aspect of the embodiment of the present application provides a smart door lock authentication method, which is applied to a quantum cryptography service platform and includes the following steps:

[0024] Use a quantum random number generator to generate a quantum random session key;

[0025] Obtain a door lock device key identifier sent by a door lock device, and obtain the door lock device quantum key according to the door lock device key identifier;

[0026] Encrypting the quantum random session key according to the door lock device quantum key to obtain a second quantum session encrypted ciphertext and a quantum session key identifier and returning them to the door lock device;

[0027] Obtaining a client key identifier and the quantum session key identifier sent by the client;

[0028] Obtain the client quantum key according to the client key identifier, and obtain the quantum random session key according to the quantum session key identifier;

[0029] The quantum random session key is encrypted according to the client quantum key to obtain a first quantum session encrypted ciphertext and return it to the client.

[0030] Another aspect of the embodiment of the present application provides a smart door lock authentication method, which is applied to a door lock access management platform, and the method includes the following steps:

[0031] Obtain the door lock device unique identification code and quantum session key identification sent by the door lock device;

[0032] Obtain the user login information sent by the client and the unique identification code of the door lock device for comparison processing to obtain the quantum session key identification;

[0033] The quantum session key identifier is returned to the client.

[0034] In some embodiments, the step of obtaining the user login information sent by the client and the unique identification code of the door lock device for comparison to obtain the quantum session key identification includes the following steps:

[0035] Compare and confirm the user login information sent by the client and the unique identification code of the door lock device according to the information in the binding relationship database to obtain a confirmation result;

[0036] According to the confirmation result, a comparison search process is performed on the unique identification code of the door lock device sent by the door lock device to obtain the quantum session key identifier.

[0037] To achieve the above purpose, another aspect of the embodiment of the present application provides a smart door lock authentication device, the device comprising:

[0038] The client is used to establish a connection with the door lock device, obtain a quantum session key identifier from the door lock access management platform and obtain a first quantum session encrypted ciphertext from the quantum cryptography service platform, decrypt the first quantum session encrypted ciphertext according to the quantum session key identifier to obtain a quantum random session key, and perform communication authentication processing with the door lock device according to the quantum random session key to obtain an authentication result;

[0039] The door lock device is used to obtain the second quantum session encrypted ciphertext and the quantum session key identifier from the quantum cryptography service platform, send the door lock device unique identifier code and the quantum session key identifier to the door lock access management platform, decrypt the second quantum session encrypted ciphertext according to the door lock device quantum key to obtain the quantum random session key, and perform communication authentication processing with the client according to the quantum random session key to obtain the authentication result;

[0040] The quantum cryptography service platform is used to obtain the door lock device key identifier sent by the door lock device to query and obtain the door lock device quantum key, and encrypt the quantum random session key according to the door lock device quantum key to obtain the first quantum session encrypted ciphertext and the quantum session key identifier and return them to the door lock device;

[0041] The door lock access management platform is used to manage the binding relationship between the client and the door lock device, and return the quantum session key identifier to the client.

[0042] To achieve the above-mentioned purpose, another aspect of an embodiment of the present application provides an electronic device, the electronic device comprising a memory and a processor, the memory storing a computer program, and the processor implementing the above-mentioned method when executing the computer program.

[0043] To achieve the above objective, another aspect of an embodiment of the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method described above is implemented.

[0044] The embodiments of the present application include at least the following beneficial effects: The present application provides a smart door lock authentication method, device, electronic device and storage medium. The scheme obtains the unique identification code of the door lock device by establishing a connection with the door lock device in response to an interactive instruction by the client, sends the user login information and the unique identification code of the door lock device to the door lock access management platform to obtain the quantum session key identifier, sends the client key identifier and the quantum session key identifier to the quantum cryptography service platform to obtain the first quantum session encrypted ciphertext, decrypts the first quantum session encrypted ciphertext according to the client quantum key to obtain the quantum random session key, and performs communication authentication processing with the door lock device according to the quantum random session key to obtain the authentication result. The scheme obtains the quantum random session key based on the quantum key generation method and the quantum key service platform, thereby performing identity authentication on the client and the door lock device according to the quantum random session key, reducing the risk of key leakage and improving the authentication efficiency of the smart door lock. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] Figure 1 It is a flow chart of a smart door lock authentication method applied to a client provided in an embodiment of the present application;

[0046] Figure 2 yes Figure 1 The method flow chart before step S101 in FIG.

[0047] Figure 3 It is a flow chart of a smart door lock authentication method applied to a door lock device provided in an embodiment of the present application;

[0048] Figure 4 yes Figure 3 The method flow chart before step S301 in FIG.

[0049] Figure 5 It is a flow chart of a smart door lock authentication method applied to a quantum cryptography service platform provided in an embodiment of the present application;

[0050] Figure 6 It is a flow chart of a smart door lock authentication method applied to a door lock access management platform provided by an embodiment of the present application;

[0051] Figure 7 yes Figure 6 Flowchart of step S602 in FIG.

[0052] Figure 8 This is an interactive flow chart of a smart door lock authentication provided by an embodiment of the present application;

[0053] Fig. 9 It is a structural schematic diagram of a smart door lock authentication device provided in an embodiment of the present application;

[0054] Fig.10 It is a schematic diagram of the hardware structure of the electronic device provided in the embodiment of the present application. DETAILED DESCRIPTION

[0055] In order to make the purpose, technical solutions and advantages of the present application clearer, the present application is further described in detail below in conjunction with the accompanying drawings and examples. It should be understood that the specific embodiments described herein are only used to explain the present application and are not intended to limit the present application. When the following description refers to the drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the embodiments of the present application. They are only examples of devices and methods consistent with some aspects of the embodiments of the present application as detailed in the attached claims.

[0056] It is understood that the terms "first", "second", etc. used in this application can be used to describe various concepts in this article, but unless otherwise specified, these concepts are not limited by these terms. These terms are only used to distinguish one concept from another concept. For example, without departing from the scope of the embodiment of the present application, the first information may also be referred to as the second information, and similarly, the second information may also be referred to as the first information. Depending on the context, the words "if" and "if" as used herein can be interpreted as "at the time of" or "when" or "in response to determination".

[0057] The terms "at least one", "multiple", "each", "any", etc. used in this application, at least one includes one, two or more, multiple includes two or more, each refers to each of the corresponding multiple, and any refers to any one of the multiple.

[0058] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art to which this application belongs. The terms used herein are only for the purpose of describing the embodiments of this application and are not intended to limit this application.

[0059] Before describing the embodiments of the present application in detail, some nouns and terms involved in the embodiments of the present application are first described. The nouns and terms involved in the embodiments of the present application are subject to the following explanations.

[0060] 1) Public key encryption, also known as asymmetric (key) encryption, requires the use of asymmetric keys to complete encryption and decryption operations. Asymmetric keys consist of a pair of public keys and private keys, which are cryptographically related. The public key can be distributed to anyone, while the private key must be securely protected and can only be used by trusted persons.

[0061] 2) Session key, also known as symmetric key, is a one-time symmetric key used for encryption in a session. All members use the same key to encrypt plain text and decrypt ciphertext. The key becomes invalid at the end of the connection. If communication is required again, the key generation and exchange steps must be repeated.

[0062] 3) Quantum key: A random key generated by a random number generator (QRNG) using quantum random numbers as an entropy source (which is physically unpredictable, such as based on photon counting, photon arrival time, photon arrival position, etc.).

[0063] 4) Quantum key distribution (QKD) uses the properties of quantum mechanics to ensure communication security. It enables both parties in communication to generate and share a random, secure key to encrypt and decrypt messages.

[0064] In the related technology, some door lock encryption methods will pre-write the encryption key in the door lock firmware when leaving the factory, and some methods will negotiate the session key through the private key preset in the door lock firmware and the platform. Even if one machine has one key, the door lock firmware can be easily decompiled and cracked, resulting in the leakage of the door lock private key, which brings the risk of illegal door opening, and the door lock access management platform needs to save a large number of door lock key lists, which brings pressure on the operation and management of the door lock access management platform.

[0065] For example, an encryption key is written into the door lock when it leaves the factory, and the encryption key list corresponding to each door lock is entered into the platform. This symmetric key is then used to encrypt the communication for door lock authentication. Alternatively, an asymmetric private key is preset in each door lock. During each communication, a symmetric key is negotiated using the asymmetric private key of the door lock and the platform public key preset in the door lock using a key negotiation algorithm. At the same time, the platform uses the door lock's public key and the platform private key to negotiate the same symmetric key, and then the platform and the door lock use the symmetric key to encrypt the communication. However, the session encryption keys of these two methods are fixed for each door lock. Therefore, it is easy to obtain the information written in the door lock firmware when decompiling and cracking the door lock, or when the manufacturer's door lock firmware information list is leaked, the installed door lock can be opened by impersonating a client without connecting to the platform for authentication.

[0066] In the related art, the door lock connection management platform needs to store the door lock serial number and public key list in advance, and the door lock manufacturer needs to report the correspondence between the door lock serial number and the public key to the door lock connection management platform in advance, which increases the difficulty of operation and management of the door lock connection management platform. When the door lock is produced, the door lock manufacturer uses the code to generate the door lock public and private key pair, which cannot guarantee the uniqueness of the public and private key pair of each door lock, which may cause security risks when the public and private keys of multiple door locks are repeated.

[0067] In view of this, an embodiment of the present application provides a smart door lock authentication method, device, equipment and medium. The scheme establishes a connection with the door lock device in response to an interactive instruction by the client to obtain a unique identification code of the door lock device, sends the user login information and the unique identification code of the door lock device to the door lock access management platform to obtain a quantum session key identifier, sends the client key identifier and the quantum session key identifier to the quantum cryptography service platform to obtain a first quantum session encrypted ciphertext, decrypts the first quantum session encrypted ciphertext according to the client quantum key to obtain a quantum random session key, and performs communication authentication processing with the door lock device according to the quantum random session key to obtain an authentication result. The scheme obtains a quantum random session key based on a quantum key generation method and a quantum key service platform, thereby performing identity authentication on the client and the door lock device according to the quantum random session key, reducing the risk of key leakage and improving the authentication efficiency of the smart door lock.

[0068] The embodiment of the present application provides a smart door lock authentication method, which relates to the field of smart door lock technology. The embodiment of the present application provides a smart door lock authentication method that can be applied to a client, a door lock device, a quantum cryptography service platform, and a door lock access management platform. The quantum cryptography service platform and the door lock access management platform can be deployed on a terminal or a server, or can be software running in a terminal or a server. In some embodiments, the terminal can be a smart phone, a tablet computer, a laptop computer, a desktop computer, a smart speaker, a smart watch, and a car terminal, etc., but is not limited to this; the server side can be configured as an independent physical server, or a server cluster or distributed system composed of multiple physical servers, and can also be configured as a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN, and big data and artificial intelligence platforms. The server can also be a node server in a blockchain network; the software can be an application that implements the smart door lock authentication method, etc., but is not limited to the above forms.

[0069] The present application can be used in many general or special computer system environments or configurations. For example: personal computers, server computers, handheld or portable devices, tablet devices, multiprocessor systems, microprocessor-based systems, set-top boxes, programmable consumer electronics, network PCs, minicomputers, mainframe computers, distributed computing environments including any of the above systems or devices, etc. The present application can be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. The present application can also be practiced in distributed computing environments, in which tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules can be located in local and remote computer storage media including storage devices.

[0070] It should be noted that in each specific implementation of the present application, when it comes to the need to perform relevant processing based on data related to user identity or characteristics such as user information, user behavior data, user historical data, and user location information, the user's permission or consent will be obtained first, and the collection, use, and processing of these data will comply with relevant laws, regulations, and standards. In addition, when the embodiment of the present application needs to obtain the user's sensitive personal information, the user's separate permission or consent will be obtained through a pop-up window or by jumping to a confirmation page. After clearly obtaining the user's separate permission or consent, the necessary user-related data for the normal operation of the embodiment of the present application will be obtained.

[0071] Figure 1 is an optional flow chart of a smart door lock authentication method provided in an embodiment of the present application, wherein the method is applied to a client, wherein the client stores user login information, a client key identifier, and a client quantum key. Figure 1 The method may include but is not limited to steps S101 to S105.

[0072] Step S101, establishing a connection with a door lock device in response to an interactive instruction, and obtaining a unique identification code of the door lock device;

[0073] Step S102, sending the user login information and the unique identification code of the door lock device to the door lock access management platform to obtain the quantum session key identification;

[0074] Step S103, sending the client key identifier and the quantum session key identifier to a quantum cryptography service platform to obtain a first quantum session encrypted ciphertext;

[0075] Step S104, decrypting the first quantum session encrypted ciphertext according to the client quantum key to obtain a quantum random session key;

[0076] Step S105, performing communication authentication processing with the door lock device according to the quantum random session key to obtain an authentication result.

[0077] In the steps S101 to S105 shown in the embodiment of the present application, a connection is established between the client and the door lock device to obtain the door lock device unique identification code of the door lock device. Then, the user login information and the door lock device unique identification code are sent to the door lock access management platform for verification to obtain the quantum session key identification. Among them, the user login information can be obtained by user login, or the user login information can be saved to the client after the user logs in. The client stores the user login information, the client key identification and the client quantum key. Then the client key identification and the quantum session key identification are sent to the quantum cryptography service platform for encryption processing to return the first quantum session encrypted ciphertext. Finally, the first quantum session encrypted ciphertext returned is decrypted according to the client quantum key to obtain the quantum random session key. The communication authentication process is performed with the door lock device through the quantum random session key. When the door lock device also uses the same quantum random session key, the authentication result is passed, and the door lock device can be unlocked.

[0078] In step S101 of some embodiments, a connection is established with the door lock device in response to an interactive instruction, and a unique identification code of the door lock device is obtained. The embodiment of the present application receives the user's interactive instruction through the client, and the interactive instruction can be an operation such as clicking to unlock or setting a password. The client can be a mobile phone or a mobile phone application, etc., but is not limited to this. The embodiment of the present application establishes a connection between the client and the door lock device through Bluetooth, activates the door lock device, and thus receives the unique identification code of the door lock device returned by the door lock device. The unique identification code of the door lock device can be the door lock serial number of the door lock device, the unique identification code of each device written in the factory, etc.

[0079] In step S102 of some embodiments, the user login information and the unique identification code of the door lock device are sent to the door lock access management platform to obtain the quantum session key identification. In the embodiment of the present application, the user login information and the unique identification code of the door lock device are sent to the door lock access management platform for verification, and the quantum session key identification returned by the door lock access management platform is obtained. Among them, the user login information is the information for the user to log in at the client, which may include a mobile phone number, a user unique identification code, etc. It should be noted that the user login information and the door lock device are pre-bound with corresponding information, for example, each user login information is bound to one or more door lock devices, and each door lock device is bound to one or more user login information. The door lock access management platform will verify the user login information and the unique identification code of the door lock device, and return the quantum session key identification to the client after the verification is passed. The quantum session key identification is used to identify the quantum random session key, that is, the corresponding quantum random session key can be queried through the quantum session key identification.

[0080] In step S103 of some embodiments, the client key identifier and the quantum session key identifier are sent to the quantum cryptography service platform to obtain the first quantum session encrypted ciphertext. In the embodiment of the present application, by sending the client key identifier and the quantum session key identifier to the quantum cryptography service platform, the corresponding quantum random session key can be queried through the quantum cryptography service platform, and the client quantum key can be obtained through the client key identifier, and the quantum random session key is encrypted by the client quantum key, so that the first quantum session encrypted ciphertext is returned to the client. Among them, the client key identifier is used to identify the client quantum key, that is, the corresponding client quantum key can be queried through the client key identifier.

[0081] In step S104 of some embodiments, the first quantum session encrypted ciphertext is decrypted according to the client quantum key to obtain a quantum random session key. In the embodiment of the present application, the first quantum session encrypted ciphertext returned by the quantum cryptography service platform is decrypted by the client quantum key to obtain a quantum random session key.

[0082] In step S105 of some embodiments, communication authentication processing is performed with the door lock device according to the quantum random session key to obtain an authentication result. The embodiment of the present application performs encrypted communication with the door lock device through the quantum random session key, and the client can send the quantum random session key to the door lock device for verification. When the door lock device also has the same quantum random session key, the authentication result is passed, and the door lock device can be unlocked and other operations can be performed through the client.

[0083] One of the above technical solutions has the following advantages or beneficial effects: the embodiment of the present application activates the door lock device by connecting the client to the door lock device, verifies the binding relationship between the client and the door lock device through the door lock access management platform to obtain the quantum session key identifier, and obtains the first quantum session encrypted ciphertext from the quantum cryptography service platform. The quantum random session key can be obtained by decrypting the first quantum session encrypted ciphertext. The communication authentication with the door lock device is performed through the quantum random session key, which can reduce the risk of encryption key leakage and improve the security of smart door lock authentication.

[0084] See also Figure 2 In some embodiments, before step S101, before establishing a connection with the door lock device in response to the interactive instruction, the method further includes the following steps:

[0085] Step S201, obtaining the client key identifier and the client quantum key charged by the quantum cryptography service platform;

[0086] Step S202: storing the client key identifier and the client quantum key in a user identification card.

[0087] In step S201 of some embodiments, the client key identifier and the client quantum key injected by the quantum cryptography service platform are obtained. In the embodiment of the present application, the quantum cryptography service platform performs key injection processing on the client, that is, the quantum cryptography service platform generates the client key identifier and the client quantum key.

[0088] In step S202 of some embodiments, the client key identifier and the client quantum key are stored in a user identification card. In the embodiment of the present application, the user identification card is used to store the client key identifier and the client quantum key generated by the quantum cryptography service platform. The user identification card is a SIM card, which is a user identification card of a digital cellular mobile phone. It is a card that contains a large-scale integrated circuit inside. The card stores the information of the digital mobile phone customer, encryption key and other contents. It can be used by the network to identify the customer identity and encrypt the voice information of the customer during the call.

[0089] One of the above technical solutions has the following advantages or beneficial effects: the embodiment of the present application stores the client key identifier and the client quantum key generated by the quantum cryptography service platform through the user identification card, and can be connected to the door lock access management platform through the user identification card. For an attacker, even if the forged client connects to the door lock via Bluetooth, it cannot connect to the door lock access management platform because it does not have a user identification card or does not store the corresponding client key identifier and client quantum key, and thus cannot obtain the same quantum session key as the door lock for the next step of communication with the door lock, and cannot perform operations such as unlocking and setting passwords, thereby improving the security of smart door lock authentication.

[0090] See also Figure 3 Another aspect of the embodiment of the present application provides a smart door lock authentication method, the method is applied to a door lock device, the door lock device stores a door lock device unique identification code, a door lock device key identification and a door lock device quantum key, the method comprises the following steps:

[0091] Step S301, connecting with the client in response to the client connection request, and sending the unique identification code of the door lock device to the client;

[0092] Step S302, sending the door lock device key identifier to the quantum cryptography service platform to obtain the second quantum session encrypted ciphertext and the quantum session key identifier;

[0093] Step S303, sending the door lock device unique identification code and the quantum session key identification to the door lock access management platform;

[0094] Step S304, decrypting the second quantum session encrypted ciphertext according to the door lock device quantum key to obtain a quantum random session key;

[0095] Step S305: performing communication authentication processing with the client according to the quantum random session key to obtain an authentication result.

[0096] In step S301 of some embodiments, the door lock device connects with the client in response to the client connection request, and sends the unique identification code of the door lock device to the client. In the embodiment of the present application, the client connects with the door lock device, and the client initiates a connection request to the door lock device, and the client and the door lock device can be connected through Bluetooth or other methods, and the door lock device will send the pre-stored unique identification code of the door lock device to the client.

[0097] In step S302 of some embodiments, the door lock device key identifier is sent to the quantum cryptography service platform to obtain the second quantum session encrypted ciphertext and the quantum session key identifier. In the embodiment of the present application, the door lock device stores the door lock device key identifier and the door lock device quantum key. By sending the door lock device key identifier to the quantum cryptography service platform, the corresponding door lock device quantum key can be found through the quantum cryptography service platform, so that the quantum random session key is encrypted according to the door lock device quantum key, and the second quantum session encrypted ciphertext and the quantum session key identifier are obtained. Among them, the quantum random session key is generated by the quantum cryptography service platform through the quantum key generator, and the quantum session key identifier is used to identify the quantum random session key.

[0098] In step S303 of some embodiments, the door lock device unique identification code and the quantum session key identification are sent to the door lock access management platform. In the embodiment of the present application, the door lock device unique identification code and the quantum session key identification are sent to the door lock access management platform through the door lock device, and the quantum session key identification can be temporarily saved by the door lock access management platform. When the door lock access management platform receives the request of the client, the quantum session key identification is returned to the client, without the risk of key leakage caused by the large amount of stored keys.

[0099] In step S304 of some embodiments, the second quantum session encrypted ciphertext is decrypted according to the door lock device quantum key to obtain a quantum random session key. In the embodiment of the present application, the second quantum session encrypted ciphertext is decrypted by the door lock device quantum key to obtain the quantum random session key. The second quantum session encrypted ciphertext is obtained by encrypting the quantum random session key by the quantum cryptography service platform using the door lock device key.

[0100] In step S305 of some embodiments, communication authentication processing is performed with the client according to the quantum random session key to obtain an authentication result. In the embodiment of the present application, communication authentication processing is performed with the client through the quantum random session key. When the quantum random session key sent by the client is the same as the quantum random session key stored in the door lock device, the authentication result is passed, and the operation request of the client can be received to perform corresponding operations on the door lock device.

[0101] One of the above technical solutions has the following advantages or beneficial effects: the embodiment of the present application performs communication authentication between the door lock device and the client, and verifies it by using the quantum random session key generated by the quantum cryptography service platform, which can ensure the uniqueness of the keys between different door locks and improve the security of smart door lock authentication.

[0102] See also Figure 4In some embodiments, before connecting with the client in response to the client connection request, the method further includes the following steps:

[0103] Step S401, obtaining the door lock device key identifier and the door lock device quantum key charged by the quantum cryptography service platform;

[0104] Step S402: store the door lock device key identifier and the door lock device quantum key in a security chip.

[0105] In step S401 of some embodiments, a key filling process is performed on the door lock device through the quantum cryptography service platform to obtain a door lock device key identifier and a door lock device quantum key. The door lock device key identifier is used to identify the door lock device quantum key, and the door lock device quantum key is used to encrypt and decrypt the quantum random session key generated by the quantum cryptography service platform through the quantum key generator.

[0106] In step S402 of some embodiments, the door lock device key identifier and the door lock device quantum key are stored in a security chip. In an embodiment of the present application, a security chip is built into the door lock when it leaves the factory, and the quantum random key generated by the quantum cryptography service platform, i.e., the door lock device key identifier and the door lock device quantum key, can be stored in the security chip of the door lock device.

[0107] One of the above technical solutions has the following advantages or beneficial effects: the embodiment of the present application stores the door lock device key identifier and the door lock device quantum key through a security chip, which can improve the security of quantum key storage.

[0108] See also Figure 5 Another aspect of the embodiment of the present application provides a smart door lock authentication method, which is applied to a quantum cryptography service platform and includes the following steps:

[0109] Step S501, using a quantum random number generator to generate a quantum random session key;

[0110] Step S502, obtaining a door lock device key identifier sent by the door lock device, and obtaining the door lock device quantum key by querying according to the door lock device key identifier;

[0111] Step S503, encrypting the quantum random session key according to the quantum key of the door lock device to obtain a second quantum session encrypted ciphertext and a quantum session key identifier and returning them to the door lock device;

[0112] Step S504, obtaining the client key identifier and the quantum session key identifier sent by the client;

[0113] Step S505, querying the client quantum key according to the client key identifier, and querying the quantum random session key according to the quantum session key identifier;

[0114] Step S506: encrypt the quantum random session key according to the client quantum key to obtain a first quantum session encrypted ciphertext and return it to the client.

[0115] In step S501 of some embodiments, a quantum random number generator is used to generate a quantum random session key. In the embodiment of the present application, a quantum random session key is generated by a quantum random number generator through a quantum cryptography service platform. Among IoT devices using RSA digital certificates, about 0.58% of the devices use the same factors to generate random numbers. However, the quantum random number generator (QRNG) perfectly solves the problem of pseudo-random numbers, and quantum key distribution (QKD) is the most recognized quantum key generation mechanism in the industry.

[0116] In step S502 of some embodiments, the door lock device key identifier sent by the door lock device is obtained, and the door lock device quantum key is obtained by querying the door lock device key identifier. In the embodiment of the present application, the door lock device key identifier sent by the door lock device is obtained through the quantum cryptography service platform, so as to obtain the door lock device quantum key by querying the door lock device key identifier. It can be imagined that the quantum cryptography service platform will pre-charge the door lock device and the client respectively, and save the generated door lock device key identifier, door lock device quantum key, client key identifier and client quantum key.

[0117] In step S503 of some embodiments, the quantum random session key is encrypted according to the quantum key of the door lock device to obtain a second quantum session encrypted ciphertext and a quantum session key identifier and return them to the door lock device. In the embodiment of the present application, the quantum random session key is encrypted by the quantum key of the door lock device, thereby returning the quantum session encrypted ciphertext to the door lock device. The quantum session encrypted ciphertext is encrypted by the quantum key of the door lock device and can only be decrypted by the door lock device. No other device can crack the quantum session encrypted ciphertext.

[0118] In step S504 of some embodiments, the client key identifier and the quantum session key identifier sent by the client are obtained. In the embodiment of the present application, the client key identifier and the quantum session key identifier can be obtained by connecting with the client through the quantum cryptography service platform, so as to find the corresponding key according to the identifier.

[0119] In step S505 of some embodiments, the client quantum key is obtained by querying the client key identifier, and the quantum random session key is obtained by querying the quantum session key identifier. In the embodiment of the present application, the client quantum key is obtained by querying the client key identifier, and the quantum random session key is obtained by querying the quantum session key identifier.

[0120] Step S506, encrypt the quantum random session key according to the client quantum key to obtain a first quantum session encrypted ciphertext and return it to the client. In the embodiment of the present application, the quantum random session key is encrypted by the client quantum key to obtain a quantum session encrypted ciphertext and return it to the client. The quantum session encrypted ciphertext is encrypted by the client quantum key and can only be decrypted by the client using the client quantum key to obtain the corresponding quantum random session key, thereby improving the communication security between the client and the quantum cryptography service platform.

[0121] One of the above technical solutions has the following advantages or beneficial effects: the embodiment of the present application manages the keys through the quantum cryptography service platform, and can encrypt the quantum random session key according to different device keys, which can improve the security of quantum key storage.

[0122] See also Figure 6 Another aspect of the embodiment of the present application provides a smart door lock authentication method, which is applied to a door lock access management platform and includes the following steps:

[0123] Step S601, obtaining the door lock device unique identification code and quantum session key identification sent by the door lock device;

[0124] Step S602, obtaining the user login information sent by the client and the unique identification code of the door lock device for comparison processing to obtain the quantum session key identification;

[0125] Step S603: Return the quantum session key identifier to the client.

[0126] In an embodiment of the present application, the binding relationship between the door lock device and the client is managed and verified through the door lock access management platform. By obtaining the door lock device unique identification code and quantum session key identification sent by the door lock device, the user login information and the door lock device unique identification code sent by the client are compared with the door lock device unique identification code sent by the door lock device. When the door lock device unique identification codes are the same, it indicates that there is a binding relationship between the door lock device and the client, and the quantum session key identification can be returned to the client.

[0127] One of the above technical solutions has the following advantages or beneficial effects: the door lock access management platform of the embodiment of the present application does not need to store the public key corresponding to each door lock, and the manufacturer does not need to report the door lock public key list to the door lock access management platform before each batch leaves the factory, which greatly reduces the operational management difficulty of the door lock connection management platform and improves the authentication efficiency of smart door locks.

[0128] See also Figure 7 In step S602 of some embodiments, the step of obtaining the user login information sent by the client and the unique identification code of the door lock device for comparison processing to obtain the quantum session key identification includes the following steps:

[0129] Step S701, comparing and confirming the user login information sent by the client and the unique identification code of the door lock device according to the information in the binding relationship database to obtain a confirmation result;

[0130] Step S702: performing a comparison search process on the unique identification code of the door lock device sent by the door lock device according to the confirmation result to obtain the quantum session key identification.

[0131] In an embodiment of the present application, the user login information sent by the client and the unique identification code of the door lock device are compared and confirmed according to the information in the binding relationship database to obtain a confirmation result, wherein the binding relationship database pre-stores the binding relationship between the door lock device and the client. For example, if a door lock device is bound to multiple clients, the corresponding binding relationship can be stored in the binding relationship database, and the confirmation result is obtained by comparing the user login information and the unique identification code of the door lock device to see whether there is a binding relationship. When the confirmation result is passed, the corresponding quantum session key identifier is found by comparing and searching the corresponding unique identification code of the door lock device.

[0132] One of the above technical solutions has the following advantages or beneficial effects: the embodiment of the present application manages the binding relationship between the client and the door lock device through the door lock access management platform, and the identification of the door lock session key only needs to be temporarily saved, without the risk of key leakage caused by storing a large number of keys.

[0133] The following is a detailed description of the embodiments of the present invention with reference to specific application examples:

[0134] See also Figure 8, the embodiment of the present application can be applied to the authentication scenario of smart door locks, where the door lock device is a door lock terminal, and the client is a mobile phone client. Specifically, the door lock terminal and the mobile phone client are respectively key-charged through the quantum cryptography service platform, and the initial key K1 and the corresponding ID1 are stored in the security chip built into the door lock terminal, where the initial key K1 is the quantum key of the door lock device, and ID1 is the key identifier of the door lock device. The initial key K2 and the corresponding ID2 are stored on the mobile phone through the security SIM card, where the initial key K2 is the client quantum key, and the corresponding ID2 is the client key identifier. At the same time, the quantum cryptography service platform will save the corresponding relationship between the keys and identifiers of the door lock and the mobile phone card. The user can click on operations such as unlocking in the application (APP) of the mobile phone client to activate the door lock through Bluetooth connection. The door lock carries the identification ID1 of the initial key K1 and sends it to the quantum cryptography service platform. The quantum cryptography service platform obtains the corresponding password K1 according to ID1 query, uses K1 to encrypt a quantum random key Ks, returns the ciphertext obtained by encrypting the quantum random key Ks by the door lock initial key K1, and the identification IDs corresponding to the quantum random key to the door lock terminal, that is, returns (Ek1(Ks)+IDs) to the door lock terminal, and Ek1 indicates encryption processing by K1. The door lock terminal can use the password K1 to decrypt the received ciphertext and the identification IDs corresponding to the quantum random key to obtain the quantum random key Ks. And by carrying the door lock identification, the identification IDs corresponding to the quantum random key are sent to the door lock connection platform, that is, the door lock access management platform. The corresponding relationship between the identification IDs corresponding to the quantum random key and the door lock identification is temporarily recorded through the door lock access management platform. When the mobile client carries the door lock identification to initiate a request to the door lock access management platform, the door lock access management platform confirms the binding relationship between the mobile client and the door lock identification, and takes out the identification IDs corresponding to the temporarily recorded quantum random key and returns it to the mobile client. The mobile client sends the ID2 corresponding to the mobile client key and the IDs corresponding to the quantum random key to the quantum cryptography service platform for verification. The quantum cryptography service platform queries the corresponding password K2 according to ID2, obtains Ks according to IDs, encrypts Ks with K2 to obtain the encrypted ciphertext Ek2(Ks), and returns the ciphertext to the mobile client. The mobile client uses K2 to decrypt to obtain Ks, and then can use the same Ks as the door lock for encrypted communication to complete operations such as unlocking.

[0135] See also Fig. 9 The embodiment of the present application also provides a smart door lock authentication device, which can implement the above-mentioned smart door lock authentication method, and the device includes:

[0136] The client 901 is used to establish a connection with the door lock device, obtain a quantum session key identifier from the door lock access management platform and obtain a first quantum session encrypted ciphertext from the quantum cryptography service platform, decrypt the first quantum session encrypted ciphertext according to the quantum session key identifier to obtain a quantum random session key, and perform communication authentication processing with the door lock device according to the quantum random session key to obtain an authentication result;

[0137] The door lock device 902 is used to obtain the second quantum session encrypted ciphertext and the quantum session key identifier from the quantum cryptography service platform, send the door lock device unique identifier code and the quantum session key identifier to the door lock access management platform, decrypt the second quantum session encrypted ciphertext according to the door lock device quantum key to obtain the quantum random session key, and perform communication authentication processing with the client according to the quantum random session key to obtain the authentication result;

[0138] The quantum cryptography service platform 903 is used to obtain the door lock device key identifier sent by the door lock device to query and obtain the door lock device quantum key, and encrypt the quantum random session key according to the door lock device quantum key to obtain the first quantum session encrypted ciphertext and the quantum session key identifier and return them to the door lock device;

[0139] The door lock access management platform 904 is used to manage the binding relationship between the client and the door lock device, and return the quantum session key identifier to the client.

[0140] It can be understood that the contents of the above method embodiments are all applicable to the present device embodiments, the functions specifically implemented by the present device embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0141] The embodiment of the present application also provides an electronic device, the electronic device includes a memory and a processor, the memory stores a computer program, and the processor implements the above-mentioned smart door lock authentication method when executing the computer program. The electronic device can be any smart terminal including a tablet computer, a car computer, etc.

[0142] It can be understood that the contents of the above method embodiments are all applicable to the present device embodiments, the functions specifically implemented by the present device embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0143] See also Fig.10 , Fig.10 The hardware structure of an electronic device of another embodiment is illustrated, and the electronic device includes:

[0144] The processor 1001 may be implemented by a general-purpose CPU (Central Processing Unit), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solutions provided in the embodiments of the present application;

[0145] The memory 1002 can be implemented in the form of a read-only memory (ROM), a static storage device, a dynamic storage device, or a random access memory (RAM). The memory 1002 can store an operating system and other application programs. When the technical solution provided in the embodiment of this specification is implemented by software or firmware, the relevant program code is stored in the memory 1002, and the processor 1001 calls and executes the smart door lock authentication method of the embodiment of this application;

[0146] Input / output interface 1003, used to implement information input and output;

[0147] The communication interface 1004 is used to realize the communication interaction between the device and other devices. The communication can be realized through a wired manner (such as USB, network cable, etc.) or a wireless manner (such as mobile network, WIFI, Bluetooth, etc.);

[0148] A bus 1005 , which transmits information between various components of the device (e.g., the processor 1001 , the memory 1002 , the input / output interface 1003 , and the communication interface 1004 );

[0149] The processor 1001 , the memory 1002 , the input / output interface 1003 and the communication interface 1004 are connected to each other in communication within the device via the bus 1005 .

[0150] An embodiment of the present application also provides a computer-readable storage medium, which stores a computer program, and when the computer program is executed by a processor, the above-mentioned smart door lock authentication method is implemented.

[0151] It can be understood that the contents of the above method embodiments are all applicable to the present storage medium embodiments, the functions specifically implemented by the present storage medium embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0152] The memory, as a non-transient computer-readable storage medium, can be used to store non-transient software programs and non-transient computer executable programs. In addition, the memory may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some embodiments, the memory may optionally include a memory remotely disposed relative to the processor, and these remote memories may be connected to the processor via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0153] The embodiment of the present application provides a smart door lock authentication method, device, electronic device and storage medium. The scheme obtains the unique identification code of the door lock device by establishing a connection with the door lock device in response to an interactive instruction by the client, sends the user login information and the unique identification code of the door lock device to the door lock access management platform to obtain the quantum session key identifier, sends the client key identifier and the quantum session key identifier to the quantum cryptography service platform to obtain the first quantum session encrypted ciphertext, decrypts the first quantum session encrypted ciphertext according to the client quantum key to obtain the quantum random session key, and performs communication authentication processing with the door lock device according to the quantum random session key to obtain the authentication result. The scheme obtains the quantum random session key based on the quantum key generation method and the quantum key service platform, thereby performing identity authentication on the client and the door lock device according to the quantum random session key, reducing the risk of key leakage and improving the authentication efficiency of the smart door lock.

[0154] The embodiments described in the embodiments of the present application are intended to more clearly illustrate the technical solutions of the embodiments of the present application and do not constitute a limitation on the technical solutions provided in the embodiments of the present application. Those skilled in the art will appreciate that with the evolution of technology and the emergence of new application scenarios, the technical solutions provided in the embodiments of the present application are also applicable to similar technical problems.

[0155] Those skilled in the art will appreciate that the technical solutions shown in the figures do not constitute a limitation on the embodiments of the present application, and may include more or fewer steps than shown in the figures, or a combination of certain steps, or different steps.

[0156] The device embodiments described above are merely illustrative, and the units described as separate components may or may not be physically separated, that is, they may be located in one place or distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0157] Those skilled in the art will appreciate that all or some of the steps in the methods disclosed above, and the functional modules / units in the systems and devices may be implemented as software, firmware, hardware, or a suitable combination thereof.

[0158] The terms "first", "second", "third", "fourth", etc. (if any) in the specification of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0159] It should be understood that in the present application, "at least one (item)" means one or more, and "plurality" means two or more. "And / or" is used to describe the association relationship of associated objects, indicating that three relationships may exist. For example, "A and / or B" can mean: only A exists, only B exists, and A and B exist at the same time, where A and B can be singular or plural. The character " / " generally indicates that the objects associated before and after are in an "or" relationship. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, at least one of a, b or c can mean: a, b, c, "a and b", "a and c", "b and c", or "a and b and c", where a, b, c can be single or multiple.

[0160] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the above units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0161] The units described above as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0162] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0163] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including multiple instructions to enable a computer device (which can be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of various embodiments of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (Read-Only Memory, referred to as ROM), random access memory (Random Access Memory, referred to as RAM), disk or optical disk and other media that can store programs.

[0164] The preferred embodiments of the present invention are described above with reference to the accompanying drawings, but the scope of the rights of the present invention is not limited thereto. Any modification, equivalent substitution and improvement made by a person skilled in the art without departing from the scope and essence of the present invention should be within the scope of the rights of the present invention.

Claims

1. A smart door lock authentication method, characterized in that: The method is applied to a client, the client stores user login information, a client key identifier and a client quantum key, and the method comprises the following steps: Establishing a connection with the door lock device in response to the interactive instruction, and obtaining a unique identification code of the door lock device; Send the user login information and the unique identification code of the door lock device to the door lock access management platform to obtain the quantum session key identification; Sending the client key identifier and the quantum session key identifier to a quantum cryptography service platform to obtain a first quantum session encrypted ciphertext; Decrypting the first quantum session encrypted ciphertext according to the client quantum key to obtain a quantum random session key; A communication authentication process is performed with the door lock device according to the quantum random session key to obtain an authentication result.

2. The method according to claim 1, characterized in that Before establishing a connection with the door lock device in response to the interactive instruction, the method further includes the following steps: Obtaining the client key identifier and the client quantum key charged by the quantum cryptography service platform; The client key identifier and the client quantum key are stored in a user identification card.

3. A smart door lock authentication method, characterized in that: The method is applied to a door lock device, wherein the door lock device stores a unique identification code of the door lock device, a key identification of the door lock device, and a quantum key of the door lock device, and the method comprises the following steps: Connecting with the client in response to the client connection request, and sending the unique identification code of the door lock device to the client; Sending the door lock device key identifier to the quantum cryptography service platform to obtain the second quantum session encrypted ciphertext and the quantum session key identifier; Sending the door lock device unique identification code and the quantum session key identification to the door lock access management platform; Decrypting the second quantum session encrypted ciphertext according to the door lock device quantum key to obtain a quantum random session key; Perform communication authentication processing with the client according to the quantum random session key to obtain an authentication result.

4. The method according to claim 3, characterized in that Before connecting with the client in response to the client connection request, the method further comprises the following steps: Obtaining the door lock device key identifier and the door lock device quantum key charged by the quantum cryptography service platform; The door lock device key identifier and the door lock device quantum key are stored in a security chip.

5. A smart door lock authentication method, characterized in that: The method is applied to a quantum cryptography service platform, and the method comprises the following steps: Use a quantum random number generator to generate a quantum random session key; Obtain a door lock device key identifier sent by a door lock device, and obtain the door lock device quantum key according to the door lock device key identifier; Encrypting the quantum random session key according to the door lock device quantum key to obtain a second quantum session encrypted ciphertext and a quantum session key identifier and returning them to the door lock device; Obtaining a client key identifier and the quantum session key identifier sent by the client; Obtain the client quantum key according to the client key identifier, and obtain the quantum random session key according to the quantum session key identifier; The quantum random session key is encrypted according to the client quantum key to obtain a first quantum session encrypted ciphertext and return it to the client.

6. A smart door lock authentication method, characterized in that: The method is applied to a door lock access management platform, and the method comprises the following steps: Obtain the door lock device unique identification code and quantum session key identification sent by the door lock device; Obtain the user login information sent by the client and the unique identification code of the door lock device for comparison processing to obtain the quantum session key identification; The quantum session key identifier is returned to the client.

7. The method according to claim 6, characterized in that The step of obtaining the user login information sent by the client and comparing it with the unique identification code of the door lock device to obtain the quantum session key identification includes the following steps: Compare and confirm the user login information sent by the client and the unique identification code of the door lock device according to the information in the binding relationship database to obtain a confirmation result; According to the confirmation result, a comparison search process is performed on the unique identification code of the door lock device sent by the door lock device to obtain the quantum session key identifier.

8. A smart door lock authentication device, characterized in that: The device comprises: The client is used to establish a connection with the door lock device, obtain a quantum session key identifier from the door lock access management platform and obtain a first quantum session encrypted ciphertext from the quantum cryptography service platform, decrypt the first quantum session encrypted ciphertext according to the quantum session key identifier to obtain a quantum random session key, and perform communication authentication processing with the door lock device according to the quantum random session key to obtain an authentication result; The door lock device is used to obtain the second quantum session encrypted ciphertext and the quantum session key identifier from the quantum cryptography service platform, send the door lock device unique identifier code and the quantum session key identifier to the door lock access management platform, decrypt the second quantum session encrypted ciphertext according to the door lock device quantum key to obtain the quantum random session key, and perform communication authentication processing with the client according to the quantum random session key to obtain the authentication result; The quantum cryptography service platform is used to obtain the door lock device key identifier sent by the door lock device to query and obtain the door lock device quantum key, and encrypt the quantum random session key according to the door lock device quantum key to obtain the first quantum session encrypted ciphertext and the quantum session key identifier and return them to the door lock device; The door lock access management platform is used to manage the binding relationship between the client and the door lock device, and return the quantum session key identifier to the client.

9. An electronic device, characterized in that: The electronic device comprises a memory and a processor, the memory stores a computer program, and the processor implements the method according to any one of claims 1 to 7 when executing the computer program.

10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the method according to any one of claims 1 to 7 is implemented.

Images