Fast authentication method, device and equipment based on NFC and BLE, medium and product

Abstract

The embodiment of the invention provides a quick authentication method, device and equipment based on NFC (Near Field Communication) and BLE (Bluetooth Low Energy), a medium and a product. The method relates to the technical field of communication, and comprises the following steps: when it is detected that a terminal device realizes a touch operation with a target device through NFC, acquiring in-card data pre-stored by the target device; wherein the in-card data at least comprises a device ID and a Bluetooth mac address of the target device; acquiring a device key matched with the device ID from a storage module of the terminal device; encrypting an unlocking instruction by using the device key to obtain an encrypted unlocking instruction; the encrypted unlocking instruction is broadcasted through Bluetooth, so that the target device receiving the encrypted unlocking instruction decrypts the encrypted unlocking instruction to obtain the unlocking instruction, and the unlocking instruction is executed through the target device. According to the invention, the convenience of the NFC card key can be improved.

Description

Technical Field

[0001] The embodiments of the present invention relate to the field of communication technology. More specifically, the embodiments of the present invention relate to a fast authentication method, apparatus, device, medium and product based on NFC and BLE. Background Art

[0002] Currently, the smart door lock market primarily utilizes NFC (Near Field Communication) technology for rapid authentication and unlocking. However, in practice, using NFC for unlocking often requires the configuration of an additional NFC card key, which incurs additional costs and requires users to carry it with them when leaving the house, making NFC card keys less convenient. Summary of the Invention

[0003] In this context, embodiments of the present invention are intended to provide a fast authentication method, apparatus, device, medium, and product based on NFC and BLE, which can enhance the convenience of NFC card keys.

[0004] In a first aspect of the embodiments of the present invention, a fast authentication method based on NFC and BLE is provided, comprising: When detecting that the terminal device touches the target device via NFC, obtaining the card data pre-stored by the target device; wherein the card data at least includes the device ID and Bluetooth MAC address of the target device; Obtaining a device key that matches the device ID from a storage module of the terminal device; Encrypting the unlock instruction using the device key to obtain an encrypted unlock instruction; The encrypted unlocking instruction is broadcasted via Bluetooth, so that the target device that receives the encrypted unlocking instruction decrypts the encrypted unlocking instruction to obtain the unlocking instruction, and executes the unlocking instruction via the target device.

[0005] In one embodiment of this implementation manner, before obtaining the card data pre-stored in the target device, the method further includes: Controlling the terminal device to perform a touch operation with the target device via NFC to obtain device information of the target device; wherein the device information includes at least a device identifier, a Bluetooth MAC address, an application package name, and a device key; sending an activation instruction containing the device information to a cloud server connected to the terminal device, so that the cloud server associates the device information with the user account information of the terminal device and generates a device ID corresponding to the user account and the device information; and controlling the cloud server to send activation completion information containing the device ID to the terminal device; When the terminal device receives the activation completion information, the terminal device encrypts the activation completion information using the device key to obtain encrypted activation completion information; The encrypted activation completion information is broadcasted via Bluetooth, so that the target device that receives the encrypted activation completion information decrypts the encrypted activation completion information to obtain the activation completion information and stores the activation completion information.

[0006] In one embodiment of this implementation manner, after broadcasting the encryption activation completion information via Bluetooth, the method further includes: When receiving the activation success information broadcasted by the target device via Bluetooth, the terminal device is controlled to stop broadcasting the encrypted activation completion information via Bluetooth; the activation success information is broadcasted via Bluetooth after the target device stores the activation completion information.

[0007] In one embodiment of this implementation, encrypting the unlock instruction using the device key to obtain the encrypted unlock instruction includes: Perform signature calculation on the pre-stored check code to obtain an anti-replay signature; The unlocking instruction and the anti-replay signature are encrypted using the device key to obtain an encrypted unlocking instruction.

[0008] In one embodiment of this implementation, the target device decrypts the encrypted unlocking instruction to obtain the unlocking instruction, and executes the unlocking instruction in the following manner: When receiving the encrypted unlocking instruction, decrypting the encrypted unlocking instruction using the device key to obtain an anti-replay signature and an unlocking instruction; If the historical anti-replay signature stored in the target device is different from the anti-replay signature, the unlock instruction is executed.

[0009] In one embodiment of this implementation, if the historical anti-replay signature stored in the target device is different from the anti-replay signature, the unlock instruction is executed in the following manner: If the historical anti-replay signature stored in the target device is different from the anti-replay signature, obtaining a pre-stored target verification code; wherein the target verification code is the same as the verification code pre-stored in the terminal device; Performing signature calculation on the target check code to obtain a verification signature; If the verification signature is identical to the anti-replay signature, the unlock instruction is executed.

[0010] In a second aspect of the embodiments of the present invention, a fast authentication device based on NFC and BLE is provided, comprising: A first acquiring unit is configured to acquire pre-stored card data of the target device when detecting that the terminal device touches the target device via NFC; wherein the card data includes at least a device ID and a Bluetooth MAC address of the target device; A second acquiring unit, configured to acquire a device key matching the device ID from a storage module of the terminal device; an encryption unit, configured to encrypt the unlocking instruction using the device key to obtain an encrypted unlocking instruction; The broadcasting unit is configured to broadcast the encrypted unlocking instruction via Bluetooth, so that the target device that receives the encrypted unlocking instruction decrypts the encrypted unlocking instruction to obtain the unlocking instruction, and executes the unlocking instruction via the target device.

[0011] In a third aspect of an embodiment of the present invention, a computing device is provided, comprising: at least one processor, a memory, and an input-output unit; wherein the memory is used to store a computer program, and the processor is used to call the computer program stored in the memory to execute any one of the methods described in the first aspect.

[0012] In a fourth aspect of the embodiments of the present invention, a computer-readable storage medium is provided, which includes instructions, and when the instructions are executed on a computer, causes the computer to execute any one of the methods according to the first aspect.

[0013] In a fifth aspect of the embodiments of the present invention, a computer program product is provided, comprising a computer program, which implements the method according to any one of the first aspects when executed by a processor.

[0014] The rapid authentication method, apparatus, device, medium, and product based on NFC and Bluetooth Low Energy (BLE) according to the embodiments of the present invention cleverly combine NFC and BLE technologies. When a terminal device touches a target device to trigger NFC interaction, the method quickly obtains key information about the target device, encrypts the unlocking instruction using a device key that matches the device ID in the terminal device's storage module, and then broadcasts the encrypted unlocking instruction via Bluetooth. This series of operations breaks the constraints of the traditional NFC card key's single authentication mode, eliminating the need for users to perform complex and tedious multi-step operations. A simple touch action completes information exchange and subsequent instruction transmission, greatly simplifying the user operation process and enabling users to more easily and quickly perform unlocking and other operations in various scenarios. This truly makes the use of NFC card keys more convenient and efficient, and enhances the user experience. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] The above and other objects, features and advantages of the exemplary embodiments of the present invention will become readily apparent by reading the following detailed description with reference to the accompanying drawings, in which several embodiments of the present invention are shown by way of example and not limitation, in which: Figure 1 A schematic diagram of a process flow of a fast authentication method based on NFC and BLE provided in one embodiment of the present invention; Figure 2 A schematic diagram of a process for performing network configuration between a terminal device and a target device according to an embodiment of the present invention; Figure 3 A schematic diagram of a process for unlocking a terminal device and a target device according to an embodiment of the present invention; Figure 4 A schematic diagram of the structure of a fast authentication device based on NFC and BLE provided in one embodiment of the present invention; Figure 5 The structure diagram of a medium according to an embodiment of the present invention is schematically shown; Figure 6 The figure schematically shows a structural diagram of a computing device according to an embodiment of the present invention.

[0016] In the drawings, the same or corresponding reference numerals denote the same or corresponding parts. DETAILED DESCRIPTION

[0017] The principles and spirit of the present invention will be described below with reference to several exemplary embodiments. It should be understood that these embodiments are provided solely to enable those skilled in the art to better understand and implement the present invention, and are not intended to limit the scope of the present invention in any way. Rather, these embodiments are provided to make this disclosure more thorough and complete, and to fully convey the scope of the present disclosure to those skilled in the art.

[0018] Those skilled in the art will appreciate that the embodiments of the present invention may be implemented as a system, apparatus, device, method, or computer program product. Therefore, the present disclosure may be implemented in the following forms: entirely in hardware, entirely in software (including firmware, resident software, microcode, etc.), or in a combination of hardware and software.

[0019] According to an embodiment of the present invention, a fast authentication method, apparatus, device, medium and product based on NFC and BLE are proposed.

[0020] It should be noted that any number of elements in the drawings is for illustration only and not for limitation, and any naming is only for distinction and does not have any limiting meaning.

[0021] The principles and spirit of the present invention are explained in detail below with reference to several representative embodiments of the present invention.

[0022] Exemplary Methods Reference below Figure 1 , Figure 1 This is a flowchart of a fast authentication method based on NFC and BLE provided by an embodiment of the present invention. It should be noted that the embodiments of the present invention can be applied to any applicable scenario.

[0023] Figure 1 The process of the fast authentication method based on NFC and BLE provided by an embodiment of the present invention includes: Step S101: When it is detected that the terminal device and the target device are touched via NFC, the card data pre-stored in the target device is obtained.

[0024] In an embodiment of the present invention, the data in the card includes at least the device ID and Bluetooth MAC address of the target device. NFC (Near Field Communication) is a near-field communication technology. NFC uses the 13.56MHz frequency band to enable short-range (within 20cm) data interaction between devices and is commonly used in scenarios such as mobile payments and identity authentication. Its advantages are that it does not require pairing, connects instantly with just a touch, and has low energy consumption. Traditional NFC smart locks require users to actively touch the door lock with their mobile phone or card to complete identity authentication, and data transmission relies on physical contact, which is highly secure but lacks flexibility. Radio frequency identification (RFID) cards can be provided in both the terminal device and the target device to enable touch operation between the terminal device and the target device.

[0025] In the embodiment of the present invention, the data in the card may include an application package name, a device ID, activation completion information, etc. The application package name may be the package name of the application used by the terminal device and the target device during the authentication process.

[0026] In addition, when the terminal device is detected to be touching the target device via NFC, the user interface of the application pre-installed on the terminal device can be pulled up. In addition, the target device can start a continuous BLE broadcast scan (for example, 30 seconds).

[0027] In the embodiment of the present invention, the terminal device may be a mobile phone, a tablet, a watch or other device, which is not limited in the embodiment of the present invention.

[0028] As an optional implementation, before step S101, the following steps may be further performed: Controlling the terminal device to perform a touch operation with the target device via NFC to obtain device information of the target device; wherein the device information includes at least a device identifier, a Bluetooth MAC address, an application package name, and a device key; sending an activation instruction containing the device information to a cloud server connected to the terminal device, so that the cloud server associates the device information with the user account information of the terminal device and generates a device ID corresponding to the user account and the device information; and controlling the cloud server to send activation completion information containing the device ID to the terminal device; When the terminal device receives the activation completion information, the terminal device encrypts the activation completion information using the device key to obtain encrypted activation completion information; The encrypted activation completion information is broadcasted via Bluetooth, so that the target device that receives the encrypted activation completion information decrypts the encrypted activation completion information to obtain the activation completion information and stores the activation completion information.

[0029] When receiving the activation success information broadcasted by the target device via Bluetooth, the terminal device is controlled to stop broadcasting the encrypted activation completion information via Bluetooth; the activation success information is broadcasted via Bluetooth after the target device stores the activation completion information.

[0030] Among them, when implementing this implementation method, the user only needs to trigger the NFC touch operation between the terminal device and the target device to automatically obtain the device information and upload it to the cloud server to complete the association with the user account. There is no need to manually enter complex information, which avoids operational errors; the cloud server generates a device ID for centralized management, and at the same time encrypts and transmits activation completion information to ensure data security. After the target device decrypts and stores it, it feedbacks the activation success information, and the terminal device automatically stops broadcasting. The entire activation process is automated and intelligent, and the user can easily complete the device activation without additional operations.

[0031] In the embodiments of the present invention, Bluetooth Low Energy (BLE) can be used. BLE operates in the 2.4 GHz frequency band and features low power consumption, a wide coverage range (10-100 meters), and a fast connection time (within 3ms). A typical BLE smart lock uses a mobile phone app to scan the door lock's broadcast signal and, after establishing a connection, transmits the unlock command.

[0032] In the embodiment of the present invention, the device information of the target device may be as shown in Table 1: Table 1 Device information of the target device

[0033] In the embodiment of the present invention, the information broadcast via Bluetooth may be in the form of a beacon.

[0034] For example, see also Figure 2 , Figure 2 This diagram illustrates the network pairing process between a terminal device and a target device, as provided in one embodiment of the present invention. Specifically, the following steps are performed: A client app is opened, prompting guidance for network pairing between the client and the device. The user touches the NFC card of the device using a client (including but not limited to a mobile phone, tablet, watch, or other dedicated device). The app then reads device information (device ID, Bluetooth MAC address, application package name, and device key) from the simulated card.

[0035] After the app reads the device information, it calls the cloud interface to activate the device, binds the device to the user account, and generates a unique device ID. The activation data is assembled and encrypted based on the key, random number, and app package name, and the activation information is broadcast via the BLE beacon.

[0036] After sensing the NFC scanning behavior, the device starts BLE broadcast scanning for a period of time (for example, 30 seconds), unlocks the device activation information, and completes the device registration.

[0037] The device will broadcast the activation success information, and the app will continue to scan until the device is activated.

[0038] Step S102: Acquire a device key that matches the device ID from a storage module of the terminal device.

[0039] Step S103: encrypt the unlock instruction using the device key to obtain an encrypted unlock instruction.

[0040] As an optional implementation, step S103 uses the device key to encrypt the unlock instruction, and the method of obtaining the encrypted unlock instruction may include: Perform signature calculation on the pre-stored check code to obtain an anti-replay signature; The unlocking instruction and the anti-replay signature are encrypted using the device key to obtain an encrypted unlocking instruction.

[0041] Among them, the implementation of this embodiment, in terms of security, can effectively resist replay attacks by first calculating the signature of the pre-stored verification code, obtaining an anti-replay signature, and encrypting it together with the unlocking instruction with the device key. Replay attacks are a common security threat. Attackers may intercept legitimate unlocking instructions and resend them to illegally unlock the door. The addition of anti-replay signatures ensures that each encrypted unlocking instruction contains a unique identifier. The target device can verify the timeliness and uniqueness of the instruction based on this, greatly reducing the risk of illegal unlocking and ensuring the security of user devices and data. In terms of convenience, this encryption method is integrated into the device's built-in process. Users do not need to perform additional complex operations. They only need to trigger the unlocking process normally, and the device automatically completes the signature calculation and encryption steps. This ensures security protection without burdening users, allowing users to use NFC card keys for unlocking operations safely and conveniently.

[0042] In the embodiment of the present invention, the check code may be the check code used in SN (Serial Number) verification. A specific algorithm (such as timestamp + random number + check bit) may be used to sign the check code to obtain an anti-replay signature.

[0043] Step S104: broadcast the encrypted unlocking instruction via Bluetooth, so that the target device that receives the encrypted unlocking instruction decrypts the encrypted unlocking instruction to obtain the unlocking instruction, and executes the unlocking instruction via the target device.

[0044] As an optional implementation manner, the target device decrypts the encrypted unlocking instruction to obtain the unlocking instruction, and executes the unlocking instruction in a manner that may include: When receiving the encrypted unlocking instruction, decrypting the encrypted unlocking instruction using the device key to obtain an anti-replay signature and an unlocking instruction; If the historical anti-replay signature stored in the target device is different from the anti-replay signature, obtaining a pre-stored target verification code; wherein the target verification code is the same as the verification code pre-stored in the terminal device; Performing signature calculation on the target check code to obtain a verification signature; If the verification signature is identical to the anti-replay signature, the unlock instruction is executed.

[0045] Among them, this implementation method is to decrypt the encrypted unlocking instruction through the target device to obtain the anti-replay signature, compare it with the historical signature, and then calculate the verification code signature that is pre-stored and consistent with the terminal device for verification. The multi-link strict verification effectively resists replay attacks, ensures that the unlocking instruction is legal and fresh, and greatly enhances security. The user does not need to know the complicated verification process. After the unlocking is triggered normally, the device automatically completes all security operations, and easy unlocking is achieved under security protection, which significantly improves the convenience of use.

[0046] For example, see also and Figure 3 , Figure 3 This is a flow chart of unlocking the terminal device and the target device provided by an embodiment of the present invention; specifically: the activated device will write the APP package name and device ID into the simulated card; when NFC is touched, the NFC tag scheduling function of the client operating system (such as Android, iOS, etc.) will pull up the corresponding page of the corresponding APP, and the APP can obtain the data in the card (device ID, MAC, etc.); at this time, the APP finds the cached Key of the corresponding device through the read device ID, assembles the unlocking instruction, encrypts it with the Key (the Key can be dynamically updated through a time encryption algorithm), and combines the SN for anti-replay. The client sends the data content through a BLE broadcast packet; the device senses that the NFC is scanned by the client, and at this time starts continuous BLE broadcast scanning (for example, 30s). After receiving the unlocking instruction sent by the client, it decrypts and verifies the SN, and unlocks after passing.

[0047] In addition, you can also stop scanning immediately after the device is successfully unlocked and send a BLE broadcast indicating successful unlocking. After the APP scans it, it will stop sending unlocking beacons.

[0048] Also, after NFC is touched, the device will increase the broadcast frequency for APP scanning and discovery behavior.

[0049] When NFC is touched, the system will open the APP with the corresponding package name, and the APP will start scanning and connect to the device read from the NFC information (corresponding MAC).

[0050] After the device is connected, send the unlock command. If the beacon unlock method is also enabled, the beacon process should be turned off to stop sending broadcasts and stop broadcast scanning.

[0051] After the connection is established, you can perform more connection-based operations, such as device management and over-the-air (OTA) download technology.

[0052] This invention enables information exchange and subsequent command transmission with a simple touch, greatly simplifying the user operation process and enabling users to more easily and quickly perform operations such as unlocking in a variety of scenarios. This truly makes the use of NFC card keys more convenient and efficient, improving the user experience. Furthermore, this invention can also ensure data security, and the entire activation process is automated and intelligent, allowing users to easily complete device activation without additional operation. Furthermore, this invention can also ensure safety protection without burdening users, allowing users to use NFC card keys for safe and convenient unlocking operations. Furthermore, this invention can also achieve easy unlocking while ensuring safety, significantly improving ease of use.

[0053] Exemplary devices After introducing the method of the exemplary embodiment of the present invention, next, reference is made to Figure 4 A fast authentication device based on NFC and BLE according to an exemplary embodiment of the present invention is described. The device includes: The first acquisition unit 401 is configured to acquire pre-stored card data of the target device when detecting that the terminal device touches the target device via NFC; wherein the card data includes at least the device ID and Bluetooth MAC address of the target device; A second obtaining unit 402 is configured to obtain a device key matching the device ID from a storage module of the terminal device; The encryption unit 403 is used to encrypt the unlock instruction using the device key to obtain an encrypted unlock instruction; The broadcast unit 404 is configured to broadcast the encrypted unlocking instruction via Bluetooth, so that the target device that receives the encrypted unlocking instruction decrypts the encrypted unlocking instruction to obtain the unlocking instruction, and executes the unlocking instruction via the target device.

[0054] As an optional implementation manner, the first acquiring unit 401 is further configured to: Before obtaining the card data pre-stored on the target device, controlling the terminal device to perform a touch operation with the target device via NFC to obtain device information of the target device; wherein the device information includes at least a device identifier, a Bluetooth MAC address, an application package name, and a device key; sending an activation instruction containing the device information to a cloud server connected to the terminal device, so that the cloud server associates the device information with the user account information of the terminal device and generates a device ID corresponding to the user account and the device information; and controlling the cloud server to send activation completion information containing the device ID to the terminal device; When the terminal device receives the activation completion information, the terminal device encrypts the activation completion information using the device key to obtain encrypted activation completion information; The encrypted activation completion information is broadcasted via Bluetooth, so that the target device that receives the encrypted activation completion information decrypts the encrypted activation completion information to obtain the activation completion information and stores the activation completion information.

[0055] When receiving the activation success information broadcasted by the target device via Bluetooth, the terminal device is controlled to stop broadcasting the encrypted activation completion information via Bluetooth; the activation success information is broadcasted via Bluetooth after the target device stores the activation completion information.

[0056] Among them, when implementing this implementation method, the user only needs to trigger the NFC touch operation between the terminal device and the target device to automatically obtain the device information and upload it to the cloud server to complete the association with the user account. There is no need to manually enter complex information, which avoids operational errors; the cloud server generates a device ID for centralized management, and at the same time encrypts and transmits activation completion information to ensure data security. After the target device decrypts and stores it, it feedbacks the activation success information, and the terminal device automatically stops broadcasting. The entire activation process is automated and intelligent, and the user can easily complete the device activation without additional operations.

[0057] As an optional implementation, the encryption unit 403 uses the device key to encrypt the unlock instruction, and the method of obtaining the encrypted unlock instruction may be: Perform signature calculation on the pre-stored check code to obtain an anti-replay signature; The unlocking instruction and the anti-replay signature are encrypted using the device key to obtain an encrypted unlocking instruction.

[0058] Among them, the implementation of this embodiment, in terms of security, can effectively resist replay attacks by first calculating the signature of the pre-stored verification code, obtaining an anti-replay signature, and encrypting it together with the unlocking instruction with the device key. Replay attacks are a common security threat. Attackers may intercept legitimate unlocking instructions and resend them to illegally unlock the door. The addition of anti-replay signatures ensures that each encrypted unlocking instruction contains a unique identifier. The target device can verify the timeliness and uniqueness of the instruction based on this, greatly reducing the risk of illegal unlocking and ensuring the security of user devices and data. In terms of convenience, this encryption method is integrated into the device's built-in process. Users do not need to perform additional complex operations. They only need to trigger the unlocking process normally, and the device automatically completes the signature calculation and encryption steps. This ensures security protection without burdening users, allowing users to use NFC card keys for unlocking operations safely and conveniently.

[0059] As an optional implementation manner, the target device decrypts the encrypted unlocking instruction to obtain the unlocking instruction, and executes the unlocking instruction in a manner that may include: When receiving the encrypted unlocking instruction, decrypting the encrypted unlocking instruction using the device key to obtain an anti-replay signature and an unlocking instruction; If the historical anti-replay signature stored in the target device is different from the anti-replay signature, obtaining a pre-stored target verification code; wherein the target verification code is the same as the verification code pre-stored in the terminal device; Performing signature calculation on the target check code to obtain a verification signature; If the verification signature is identical to the anti-replay signature, the unlock instruction is executed.

[0060] Among them, this implementation method is to decrypt the encrypted unlocking instruction through the target device to obtain the anti-replay signature, compare it with the historical signature, and then calculate the verification code signature that is pre-stored and consistent with the terminal device for verification. The multi-link strict verification effectively resists replay attacks, ensures that the unlocking instruction is legal and fresh, and greatly enhances security. The user does not need to know the complicated verification process. After the unlocking is triggered normally, the device automatically completes all security operations, and easy unlocking is achieved under security protection, which significantly improves the convenience of use.

[0061] This invention enables information exchange and subsequent command transmission with a simple touch, greatly simplifying the user operation process and enabling users to more easily and quickly perform operations such as unlocking in a variety of scenarios. This truly makes the use of NFC card keys more convenient and efficient, improving the user experience. Furthermore, this invention can also ensure data security, and the entire activation process is automated and intelligent, allowing users to easily complete device activation without additional operation. Furthermore, this invention can also ensure safety protection without burdening users, allowing users to use NFC card keys for safe and convenient unlocking operations. Furthermore, this invention can also achieve easy unlocking while ensuring safety, significantly improving ease of use.

[0062] Exemplary media After introducing the method and apparatus of the exemplary embodiment of the present invention, the following is a reference to Figure 5 For a description of a computer-readable storage medium according to an exemplary embodiment of the present invention, please refer to Figure 5 , the computer-readable storage medium shown is a CD 50, on which a computer program (i.e., a program product) is stored. When the computer program is executed by the processor, the steps described in the above method implementation are implemented. For example, when it is detected that the terminal device touches the target device via NFC, the card data pre-stored in the target device is obtained; wherein the card data at least includes the device ID and Bluetooth MAC address of the target device; the device key matching the device ID is obtained from the storage module of the terminal device; the unlocking instruction is encrypted using the device key to obtain an encrypted unlocking instruction; the encrypted unlocking instruction is broadcasted via Bluetooth, so that the target device that receives the encrypted unlocking instruction decrypts the encrypted unlocking instruction to obtain the unlocking instruction, and executes the unlocking instruction through the target device; the specific implementation method of each step is not repeated here.

[0063] It should be noted that examples of the computer-readable storage medium may also include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other optical or magnetic storage media, which are not listed here one by one.

[0064] Exemplary computing devices After introducing the method, apparatus and medium of the exemplary embodiment of the present invention, the following is a reference to Figure 6 A computing device for fast authentication based on NFC and BLE according to an exemplary embodiment of the present invention.

[0065] Figure 6 A block diagram is shown of an exemplary computing device 60 , which may be a computer system or server, suitable for implementing embodiments of the present invention. Figure 6 The computing device 60 shown is only an example and should not limit the functionality and scope of use of embodiments of the present invention.

[0066] like Figure 6 As shown, the components of computing device 60 may include, but are not limited to, one or more processors or processing units 601 , a system memory 602 , and a bus 603 connecting various system components (including system memory 602 and processing unit 601 ).

[0067] The computing device 60 typically includes a variety of computer system readable media. These media can be any available media that can be accessed by the computing device 60, including volatile and non-volatile media, removable and non-removable media.

[0068] The system memory 602 may include computer system readable media in the form of volatile memory, such as random access memory (RAM) 6021 and / or cache memory 6022. The computing device 60 may further include other removable / non-removable, volatile / non-volatile computer system storage media. By way of example only, the ROM 6023 may be used to read and write non-removable, non-volatile magnetic media ( Figure 6 is not shown in the , usually referred to as "hard drive"). Although not in Figure 6 As shown in FIG60 , a disk drive for reading and writing to a removable non-volatile disk (e.g., a "floppy disk"), and an optical disk drive for reading and writing to a removable non-volatile optical disk (e.g., a CD-ROM, DVD-ROM, or other optical media) can be provided. In these cases, each drive can be connected to bus 603 via one or more data media interfaces. System memory 602 may include at least one program product having a set (e.g., at least one) of program modules configured to perform the functions of various embodiments of the present invention.

[0069] A program / utility 6025 having a set (at least one) of program modules 6024 may be stored, for example, in system memory 602. Such program modules 6024 include, but are not limited to, an operating system, one or more application programs, other program modules, and program data. Each or some combination of these examples may include an implementation of a network environment. Program modules 6024 generally implement the functions and / or methods described in the embodiments of the present invention.

[0070] The computing device 60 can also communicate with one or more external devices 604 (e.g., a keyboard, a pointing device, a display, etc.). Such communication can be performed through an input / output (I / O) interface 605. Furthermore, the computing device 60 can also communicate with one or more networks (e.g., a local area network (LAN), a wide area network (WAN), and / or a public network such as the Internet) through a network adapter 606. Figure 6 As shown, the network adapter 606 communicates with other modules (such as the processing unit 601) of the computing device 60 via the bus 603. Figure 6 Not shown, other hardware and / or software modules may be used in conjunction with computing device 60 .

[0071] The processing unit 601 executes various functional applications and data processing by running programs stored in the system memory 602. For example, when detecting that a terminal device touches a target device via NFC, it obtains pre-stored card data from the target device, wherein the card data includes at least the device ID and Bluetooth MAC address of the target device; obtains a device key that matches the device ID from the storage module of the terminal device; encrypts an unlock instruction using the device key to obtain an encrypted unlock instruction; and broadcasts the encrypted unlock instruction via Bluetooth, so that the target device that receives the encrypted unlock instruction decrypts the encrypted unlock instruction to obtain the unlock instruction, and then executes the unlock instruction through the target device. The specific implementation of each step is not repeated here. It should be noted that although the detailed description above mentions several units / modules or sub-units / sub-modules of the NFC and BLE-based rapid authentication device, this division is merely exemplary and not mandatory. In fact, according to embodiments of the present invention, the features and functions of two or more units / modules described above can be embodied in a single unit / module. On the contrary, the features and functions of one unit / module described above may be further divided into multiple units / modules to be embodied.

[0072] In the description of the present invention, it should be noted that the terms "first", "second" and "third" are only used for descriptive purposes and should not be understood as indicating or implying relative importance.

[0073] Those skilled in the art will clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0074] In the several embodiments provided by the present invention, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. The device embodiments described above are merely schematic. For example, the division of the units is merely a logical function division. There may be other division methods in actual implementation. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed may be through some communication interface, indirect coupling or communication connection of devices or units, which may be electrical, mechanical or other forms.

[0075] The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple network units. Some or all of these units may be selected to achieve the purpose of this embodiment according to actual needs.

[0076] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0077] If the functions are implemented as software functional units and sold or used as independent products, they can be stored in a processor-executable, non-volatile, computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the portion that contributes to the prior art, or a portion of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes instructions for enabling a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods described in various embodiments of the present invention. The aforementioned storage media include various media capable of storing program code, such as USB flash drives, mobile hard drives, read-only memories (ROMs), random access memories (RAMs), magnetic disks, or optical disks.

[0078] Finally, it should be noted that the above-described embodiments are only specific implementation methods of the present invention, which are used to illustrate the technical solutions of the present invention, rather than to limit them. The scope of protection of the present invention is not limited thereto. Although the present invention has been described in detail with reference to the above-described embodiments, those skilled in the art should understand that any person skilled in the art can modify or easily conceive of changes to the technical solutions described in the above-described embodiments within the technical scope disclosed by the present invention, or replace some of the technical features therein with equivalents. Such modifications, changes, or replacements do not deviate from the spirit and scope of the technical solutions of the embodiments of the present invention, and should be included in the scope of protection of the present invention. Therefore, the scope of protection of the present invention shall be subject to the scope of protection of the claims.

[0079] Furthermore, although the operations of the method of the present invention are described in a particular order in the accompanying drawings, this does not require or imply that these operations must be performed in this particular order, or that all illustrated operations must be performed to achieve the desired results. Additionally or alternatively, some steps may be omitted, multiple steps may be combined into one step, and / or one step may be decomposed into multiple steps.

[0080] In an exemplary embodiment, a computer program product is provided, including a computer program. When the computer program is executed by a processor, the steps in the above method embodiments are implemented.

Claims

1. A fast authentication method based on NFC and BLE, characterized in that: The method comprises: When detecting that the terminal device touches the target device via NFC, obtaining the card data pre-stored by the target device; wherein the card data at least includes the device ID and Bluetooth MAC address of the target device; Obtaining a device key that matches the device ID from a storage module of the terminal device; Encrypting the unlock instruction using the device key to obtain an encrypted unlock instruction; The encrypted unlocking instruction is broadcasted via Bluetooth, so that the target device that receives the encrypted unlocking instruction decrypts the encrypted unlocking instruction to obtain the unlocking instruction, and executes the unlocking instruction via the target device.

2. The fast authentication method based on NFC and BLE according to claim 1, characterized in that: Before acquiring the card data pre-stored in the target device, the method further includes: Controlling the terminal device to perform a touch operation with the target device via NFC to obtain device information of the target device; wherein the device information includes at least a device identifier, a Bluetooth MAC address, an application package name, and a device key; sending an activation instruction containing the device information to a cloud server connected to the terminal device, so that the cloud server associates the device information with the user account information of the terminal device and generates a device ID corresponding to the user account and the device information; and controlling the cloud server to send activation completion information containing the device ID to the terminal device; When the terminal device receives the activation completion information, the terminal device encrypts the activation completion information using the device key to obtain encrypted activation completion information; The encrypted activation completion information is broadcasted via Bluetooth, so that the target device that receives the encrypted activation completion information decrypts the encrypted activation completion information to obtain the activation completion information and stores the activation completion information.

3. The fast authentication method based on NFC and BLE according to claim 2, characterized in that: After broadcasting the encryption activation completion information via Bluetooth, the method further includes: When receiving the activation success information broadcasted by the target device via Bluetooth, the terminal device is controlled to stop broadcasting the encrypted activation completion information via Bluetooth; the activation success information is broadcasted via Bluetooth after the target device stores the activation completion information.

4. The fast authentication method based on NFC and BLE according to claim 1, characterized in that: The step of encrypting the unlock instruction using the device key to obtain the encrypted unlock instruction includes: Perform signature calculation on the pre-stored check code to obtain an anti-replay signature; The unlocking instruction and the anti-replay signature are encrypted using the device key to obtain an encrypted unlocking instruction.

5. The fast authentication method based on NFC and BLE according to claim 4, characterized in that: The target device decrypts the encrypted unlocking instruction to obtain the unlocking instruction, and executes the unlocking instruction in the following manner: When receiving the encrypted unlocking instruction, decrypting the encrypted unlocking instruction using the device key to obtain an anti-replay signature and an unlocking instruction; If the historical anti-replay signature stored in the target device is different from the anti-replay signature, the unlock instruction is executed.

6. The fast authentication method based on NFC and BLE according to claim 5, characterized in that: If the historical anti-replay signature stored in the target device is different from the anti-replay signature, the unlock instruction is executed in the following manner: If the historical anti-replay signature stored in the target device is different from the anti-replay signature, obtaining a pre-stored target verification code; wherein the target verification code is the same as the verification code pre-stored in the terminal device; Performing signature calculation on the target check code to obtain a verification signature; If the verification signature is identical to the anti-replay signature, the unlock instruction is executed.

7. A fast authentication device based on NFC and BLE, characterized in that: The device comprises: A first acquiring unit is configured to acquire pre-stored card data of the target device when detecting that the terminal device touches the target device via NFC; wherein the card data includes at least a device ID and a Bluetooth MAC address of the target device; A second acquiring unit, configured to acquire a device key matching the device ID from a storage module of the terminal device; an encryption unit, configured to encrypt the unlocking instruction using the device key to obtain an encrypted unlocking instruction; The broadcasting unit is configured to broadcast the encrypted unlocking instruction via Bluetooth, so that the target device that receives the encrypted unlocking instruction decrypts the encrypted unlocking instruction to obtain the unlocking instruction, and executes the unlocking instruction via the target device.

8. A computing device, characterized in that The computing device comprises: at least one processor, memory, and input-output unit; The memory is used to store a computer program, and the processor is used to call the computer program stored in the memory to execute the method according to any one of claims 1 to 6.

9. A computer-readable storage medium comprising instructions, characterized in that: When the method is executed on a computer, the computer is enabled to execute the method according to any one of claims 1 to 6.

10. A computer program product comprising a computer program, characterized in that When the computer program is executed by a processor, the method according to any one of claims 1 to 6 is implemented.

Images