Data transmission method and device, electronic device and storage medium

Abstract

The present disclosure relates to a data transmission method and device, an electronic device and a storage medium. The method comprises: if the distance to a second device is within a preset distance range, establishing a communication connection with the second device; based on the communication connection, sending an authentication instruction to the second device; according to the authentication instruction, performing authentication interaction with the second device in an out-of-band communication manner; after the authentication is passed, performing data transmission with the second device based on the communication connection. Through this method, the security of data transmission can be improved.

Description

Technical Field

[0001] The present disclosure relates to the field of communication technology, and in particular to a data transmission method and device, an electronic device, and a storage medium. Background Art

[0002] The Internet of Things is an important part of the new generation of information technology and an important development stage in the "informatization" era. As the name suggests, the Internet of Things is an Internet that connects everything. This has two meanings: first, the core and foundation of the Internet of Things is still the Internet, and it is an extended and expanded network based on the Internet; second, its user end extends and expands to any object to exchange information and communicate, that is, everything communicates with each other. The Internet of Things is widely used in the integration of networks through intelligent perception, recognition technology, ubiquitous computing and other communication perception technologies, and is therefore called the third wave of development of the world's information industry after computers and the Internet.

[0003] Based on the development of Internet of Things technology, various smart home devices have emerged, such as smart air conditioners, smart speakers, and smart lights. However, how to improve the security of controlling various smart home devices has become an urgent problem to be solved. Summary of the invention

[0004] The present invention provides a data transmission method and device, an electronic device and a storage medium.

[0005] According to a first aspect of an embodiment of the present disclosure, a data transmission method is provided, which is applied to a first device and includes:

[0006] If the distance to the second device is within a preset distance range, establishing a communication connection with the second device;

[0007] Based on the communication connection, sending an authentication instruction to the second device;

[0008] According to the authentication instruction, performing authentication interaction with the second device in an out-of-band communication manner;

[0009] After the authentication is passed, data is transmitted with the second device based on the communication connection.

[0010] In some embodiments, the method further comprises:

[0011] After the authentication is passed, obtaining a first key based on the out-of-band communication method;

[0012] After the authentication is passed, performing data transmission with the second device based on the communication connection includes:

[0013] After the authentication is passed, based on the communication connection, the data to be transmitted is encrypted using the first key and then sent to the second device.

[0014] In some embodiments, performing authentication interaction with the second device in an out-of-band communication manner according to the authentication instruction includes:

[0015] receiving an out-of-band authentication capability of the second device fed back by the second device based on the authentication instruction;

[0016] After determining an authentication method that matches the out-of-band authentication capability, the authentication interaction is performed with the second device.

[0017] In some embodiments, the performing the authentication interaction with the second device includes:

[0018] Receiving input authentication information, or scanning a coded image output by the second device to obtain the authentication information; wherein the input authentication information is obtained based on the output of the second device;

[0019] In response to the authentication information matching the authentication information stored in the first device, an authentication success instruction is sent to the second device.

[0020] In some embodiments, the performing the authentication interaction with the second device includes:

[0021] Receiving a message carrying authentication information sent by the second device;

[0022] In response to the authentication information in the message matching the authentication information stored in the first device, or receiving a confirmation instruction for the authentication information, sending an authentication success instruction to the second device.

[0023] In some embodiments, the message carrying the authentication information is triggered and sent after the second device detects an operation on a physical control on the second device.

[0024] In some embodiments, the authentication information includes at least one of the following:

[0025] a device identifier of the first device or the second device;

[0026] Booking password information;

[0027] Scheduled voice messages.

[0028] In some embodiments, if the communication connection includes an ultra-wideband communication connection, the out-of-band communication method includes:

[0029] Wireless fidelity communication method;

[0030] Infrared communication method;

[0031] Ultrasonic communication method;

[0032] Near field communication NFC method.

[0033] According to a second aspect of an embodiment of the present disclosure, a data transmission method is provided, which is applied to a second device, including:

[0034] If the distance to the first device is within a preset distance range, establishing a communication connection with the first device;

[0035] Based on the communication connection, receiving an authentication instruction sent by the first device;

[0036] According to the authentication instruction, performing authentication interaction with the first device in an out-of-band communication manner;

[0037] After the authentication is passed, data is transmitted with the first device based on the communication connection.

[0038] In some embodiments, the method further comprises:

[0039] After the authentication is passed, a second key is obtained based on the out-of-band communication method; the second key is used to decrypt the encrypted data transmitted by the first device based on the communication connection.

[0040] In some embodiments, performing authentication interaction with the first device in an out-of-band communication manner according to the authentication instruction includes:

[0041] Feedback, according to the authentication instruction, the out-of-band authentication capability of the second device to the first device;

[0042] After the first device determines an authentication method that matches the out-of-band authentication capability, the authentication interaction is performed with the first device.

[0043] In some embodiments, performing the authentication interaction with the first device includes:

[0044] Displaying authentication information or displaying a coded image containing the authentication information; wherein the displayed authentication information is used for the first device to obtain, and the displayed coded image is used for the first device to scan a code to obtain the authentication information;

[0045] Receive an authentication success instruction sent by the first device after authenticating the authentication information.

[0046] In some embodiments, performing the authentication interaction with the first device includes:

[0047] Sending a message carrying authentication information to the first device;

[0048] Receive an authentication success instruction sent by the first device after authenticating the authentication information in the message.

[0049] According to a third aspect of an embodiment of the present disclosure, a data transmission apparatus is provided, which is applied to a first device and includes:

[0050] A first connection module, configured to establish a communication connection with a second device if the distance to the second device is within a preset distance range;

[0051] a sending module, configured to send an authentication instruction to the second device based on the communication connection;

[0052] A first authentication module is configured to perform authentication interaction with the second device in an out-of-band communication manner according to the authentication instruction;

[0053] The first transmission module is configured to perform data transmission with the second device based on the communication connection after the authentication is passed.

[0054] In some embodiments, the apparatus further comprises:

[0055] A first acquisition module, configured to acquire a first key based on the out-of-band communication after the authentication is passed;

[0056] The first transmission module is further configured to, after the authentication is passed, encrypt the data to be transmitted using the first key based on the communication connection and then send the encrypted data to the second device.

[0057] In some embodiments, the first authentication module is further configured to receive the out-of-band authentication capability of the second device fed back by the second device based on the authentication instruction; after determining the authentication method matching the out-of-band authentication capability, perform the authentication interaction with the second device.

[0058] In some embodiments, the first authentication module is further configured to receive input authentication information, or to scan a coded image output by the second device to obtain the authentication information; wherein the input authentication information is obtained based on the output of the second device; in response to the authentication information matching the authentication information stored in the first device, an authentication success instruction is sent to the second device.

[0059] In some embodiments, the first authentication module is further configured to receive a message carrying authentication information sent by the second device; in response to the authentication information in the message matching the authentication information stored in the first device, or receiving a confirmation instruction for the authentication information, send an authentication success instruction to the second device.

[0060] In some embodiments, the message carrying the authentication information is triggered and sent after the second device detects an operation on a physical control on the second device.

[0061] In some embodiments, the authentication information includes at least one of the following:

[0062] a device identifier of the first device or the second device;

[0063] Booking password information;

[0064] Scheduled voice messages.

[0065] In some embodiments, if the communication connection includes an ultra-wideband communication connection, the out-of-band communication method includes:

[0066] Wireless fidelity communication method;

[0067] Infrared communication method;

[0068] Ultrasonic communication method;

[0069] Near field communication NFC method.

[0070] According to a fourth aspect of an embodiment of the present disclosure, a data transmission apparatus is provided, which is applied to a second device and includes:

[0071] A second connection module is configured to establish a communication connection with the first device if the distance to the first device is within a preset distance range;

[0072] a receiving module, configured to receive an authentication instruction sent by the first device based on the communication connection;

[0073] A second authentication module is configured to perform authentication interaction with the first device in an out-of-band communication manner according to the authentication instruction;

[0074] The second transmission module is configured to perform data transmission with the first device based on the communication connection after the authentication is passed.

[0075] In some embodiments, the apparatus further comprises:

[0076] The second acquisition module is configured to acquire a second key based on the out-of-band communication after the authentication is passed; the second key is used to decrypt the encrypted data transmitted by the first device based on the communication connection.

[0077] In some embodiments, the second authentication module is further configured to feedback the out-of-band authentication capability of the second device to the first device according to the authentication instruction; after the first device determines the authentication method that matches the out-of-band authentication capability, perform the authentication interaction with the first device.

[0078] In some embodiments, the second authentication module is further configured to display authentication information or display a coded image containing the authentication information; wherein the displayed authentication information is used for the first device to obtain, and the displayed coded image is used for the first device to scan the code to obtain the authentication information; and receive an authentication success instruction sent by the first device after authenticating the authentication information.

[0079] In some embodiments, the second authentication module is further configured to send a message carrying authentication information to the first device; and receive an authentication success instruction sent by the first device after authenticating the authentication information in the message.

[0080] According to a fifth aspect of an embodiment of the present disclosure, there is provided an electronic device, including:

[0081] processor;

[0082] a memory for storing processor-executable instructions;

[0083] The processor is configured to execute the data transmission method as described in the first aspect or the second aspect above.

[0084] According to a sixth aspect of an embodiment of the present disclosure, there is provided a storage medium, including:

[0085] When the instructions in the storage medium are executed by the processor of the first device, the first device is enabled to execute the data transmission method as described in the first aspect above; when the instructions in the storage medium are executed by the processor of the second device, the second device is enabled to execute the data transmission method as described in the second aspect above.

[0086] The technical solution provided by the embodiments of the present disclosure may have the following beneficial effects:

[0087] In an embodiment of the present disclosure, after establishing a communication connection, the first device and the second device do not directly transmit data on the established communication link, but use out-of-band communication to perform authentication to determine whether the first device or the second device has control authority over the other party. After confirming that they have authority (i.e., after authentication is passed), data transmission is performed based on the original communication link. In this way, on the one hand, compared with the method of not performing authority authentication after establishing a communication connection, adding authentication can improve the security of data transmission; on the other hand, compared with the method of performing authority authentication on the same communication link before data transmission, it can reduce the possibility of insecure data transmission caused by fake authentication after the original communication link is maliciously cracked, so the method of authentication through out-of-band communication can also improve security.

[0088] It is to be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0089] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present disclosure and, together with the description, serve to explain the principles of the present disclosure.

[0090] Figure 1 This is a data transmission method flow shown in the embodiment of the present disclosure Figure 1 .

[0091] Figure 2 This is a data transmission method flow shown in the embodiment of the present disclosure Figure 2 .

[0092] Figure 3 This is an example of the second device initiating authentication interaction in the embodiment of the present disclosure. Figure 1 .

[0093] Figure 4 This is an example of the second device initiating authentication interaction in the embodiment of the present disclosure. Figure 2 .

[0094] Figure 5 It is an interactive diagram of a data transmission method shown in an embodiment of the present disclosure.

[0095] Figure 6 This is a diagram showing an example of an out-of-band interaction method according to an embodiment of the present disclosure.

[0096] Figure 7 A data transmission device according to an exemplary embodiment is shown Figure 1 .

[0097] Figure 8 A data transmission device according to an exemplary embodiment is shown Figure 2 .

[0098] Fig. 9 It is a block diagram of a terminal shown in an embodiment of the present disclosure. DETAILED DESCRIPTION

[0099] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, the same numbers in different drawings represent the same or similar elements unless otherwise indicated. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present disclosure. Instead, they are merely examples of devices and methods consistent with some aspects of the present disclosure as detailed in the appended claims.

[0100] Ultra Wide Band (UWB) technology is a wireless carrier communication technology. UWB technology uses nanosecond non-sinusoidal narrow pulses to transmit data. It has the advantages of low system complexity, low power spectrum density of transmitted signals, and high positioning accuracy. It is especially suitable for high-speed wireless access in dense multipath places such as indoors.

[0101] UWB can achieve high-precision positioning of devices, such as positioning distance and direction, which is very suitable for contemporary smart home application scenarios. After achieving high-precision positioning, UWB links can be further used for data transmission. For example, after using a mobile phone to locate an Internet of Things (IoT) device, the mobile phone can be used as a control terminal to control the IoT device in the environment.

[0102] For control terminal devices and IoT devices under the same account, you can directly control the devices. For devices between different accounts, we believe this is a "stranger" control method. Since opening device permissions in "stranger" mode will lead to unsafe data transmission, for example, a neighbor's control terminal may control their own IoT devices, so it is necessary to increase effective "close range" protection to ensure safe control of devices in "stranger" mode.

[0103] Figure 1 This is a data transmission method flow shown in the embodiment of the present disclosure Figure 1 ,like Figure 1 As shown, the data transmission method applied to the first device includes the following steps:

[0104] S11. If the distance to the second device is within a preset distance range, establish a communication connection with the second device;

[0105] S12. Sending an authentication instruction to the second device based on the communication connection;

[0106] S13. Perform authentication interaction with the second device in an out-of-band communication manner according to the authentication instruction;

[0107] S14. After the authentication is passed, data is transmitted with the second device based on the communication connection.

[0108] In the embodiments of the present disclosure, the first device may be a control terminal such as a smart phone, a tablet computer or a smart watch, or a controlled terminal such as a smart speaker, a smart air conditioner or a smart TV. If the first device is a control terminal, the second device is the corresponding controlled terminal; if the first device is a controlled terminal, the second device is the corresponding control terminal.

[0109] In step S11, if the distance between the first device and the second device is within a preset distance range, a communication connection is established with the second device, which is a short-distance communication connection. For example, the first device and the second device both include UWB modules, and the first device and the second device establish a UWB communication connection after positioning through the UWB module, and the first device and the second device can perform data transmission based on the UWB link.

[0110] In step S12, the first device can send an authentication instruction to the second device based on the communication connection established with the second device, and the authentication instruction is used to trigger the first device and the second device to perform permission authentication based on step S13. It should be noted that the present disclosure adopts an out-of-band (OOB) communication method when performing permission authentication, that is, the first device and the second device use a transmission channel different from the transmission channel after the communication connection is established in step S11 for authentication interaction.

[0111] In one embodiment, if the communication connection includes an ultra-wideband communication connection, the out-of-band communication method includes:

[0112] Wireless Fidelity (Wi-Fi) communication method;

[0113] Infrared communication method;

[0114] Ultrasonic communication method;

[0115] Near Field Communication (NFC) method.

[0116] It should be noted that the first device and the second device of the present disclosure are not limited to establishing a UWB connection when the distance between the two is within a preset range. The first device and the second device may also be a communication connection established based on infrared, NFC and other technologies, or a communication connection established based on Bluetooth technology, etc. Correspondingly, the out-of-band communication method during authentication interaction may be any method different from the aforementioned communication connection.

[0117] In step S14, after the first device and the second device are authenticated by out-of-band communication, data can be transmitted to the second device on the original communication link based on the communication connection established in step S11.

[0118] It is understandable that, in the present disclosure, after establishing a communication connection, the first device and the second device do not directly transmit data on the established communication link, but use out-of-band communication to perform authentication to determine whether the first device or the second device has control authority over the other party. After confirming that they have authority (i.e., after the authentication is passed), data transmission is performed based on the original communication link. In this way, on the one hand, compared with the method of not performing authority authentication after establishing a communication connection, adding authentication can improve the security of data transmission; on the other hand, compared with the method of performing authority authentication on the same communication link before data transmission, it can reduce the possibility of insecure data transmission caused by fake authentication after the original communication link is maliciously cracked, so the authentication method through out-of-band communication can also improve security.

[0119] It should be noted that, in the embodiments of the present disclosure, if the authentication between the first device and the second device fails, the first device cannot perform data transmission with the second device based on the original communication connection.

[0120] In one embodiment, the method further comprises:

[0121] After the authentication is passed, obtaining a first key based on the out-of-band communication method;

[0122] After the authentication is passed, performing data transmission with the second device based on the communication connection includes:

[0123] After the authentication is passed, based on the communication connection, the data to be transmitted is encrypted using the key and then sent to the second device.

[0124] In related technologies, for devices with the same account, data can be encrypted and transmitted after sharing keys through the cloud. However, for devices with different accounts, data may not be reliably encrypted, and a secure key exchange process is required to obtain the key of the controlled device before subsequent data security transmission and device control can be carried out.

[0125] In this regard, after the out-of-band authentication is passed, the present disclosure also obtains the encryption key (first key) based on the out-of-band communication method, so that when the data is transmitted on the communication link of the original communication connection, the data is encrypted using the encryption key and then sent to the second device. It can be understood that compared with the method of obtaining the encryption key on the same communication link of the data transmission, the security of the data transmission can be further improved.

[0126] In one embodiment, performing authentication interaction with the second device in an out-of-band communication manner according to the authentication instruction includes:

[0127] receiving an out-of-band authentication capability of the second device fed back by the second device based on the authentication instruction;

[0128] After determining an authentication method that matches the out-of-band authentication capability, the authentication interaction is performed with the second device.

[0129] In the embodiments of the present disclosure, the control terminal may send an authentication instruction and then receive out-of-band authentication capability feedback from the controlled terminal, or the controlled device may send an authentication instruction and then receive out-of-band authentication capability feedback from the control device.

[0130] After the party receiving the out-of-band authentication capability determines the matching authentication method, it can notify the other party of the authentication method to be adopted.

[0131] In this embodiment, the first device is a smart phone and the second device is a smart speaker. After receiving the authentication instruction, the smart speaker replies with a message based on its own device capabilities. The message contains the out-of-band authentication capabilities supported by the smart speaker. The smart phone can determine the out-of-band authentication capabilities supported by the smart speaker based on the predetermined field information carried in the message, as shown in Table 1 below:

[0132] Table 1 is a mapping table between the predetermined field information and the out-of-band authentication capability

[0133] Out-of-band authentication capabilities supported by the controlled device Field value (1 Byte) Pairing button 1 Screen pop-up 2 Infrared communication 3 Acoustic communication 4 NFC communication 5

[0134] This disclosure will introduce specific methods of performing authentication interactions based on various out-of-band authentication capabilities one by one in the subsequent description.

[0135] After receiving the out-of-band authentication capability of the second device, the first device may select an authentication method that matches the out-of-band authentication capability of the second device to perform authentication interaction with the second device.

[0136] It should be noted that in the embodiments of the present disclosure, if there are multiple out-of-band authentication methods that match the first device and the second device, an authentication method may be randomly selected, or the authentication method may be determined according to a preset priority ranking. When selecting an authentication method according to a priority ranking, for example, it may be selected according to a specified ranking, or it may be determined that the one with the highest signal strength has a higher priority according to the current signal strength under various authentication methods, or it may be determined that the one with the lowest power consumption has a higher priority according to the power consumption corresponding to the authentication method. The embodiments of the present disclosure do not limit this.

[0137] It can be understood that in the present disclosure, the first device performs authentication interaction based on the out-of-band authentication capability fed back by the second device and the second device selects a matching out-of-band authentication method in advance, which can reduce invalid interactions caused by blindly adopting authentication interaction methods, thereby reducing power consumption of the first device and the second device.

[0138] In one embodiment, performing the authentication interaction with the second device includes:

[0139] Receiving input authentication information, or scanning a coded image output by the second device to obtain the authentication information; wherein the input authentication information is obtained based on the output of the second device;

[0140] In response to the authentication information matching the authentication information stored in the first device, an authentication success instruction is sent to the second device.

[0141] In this embodiment, the authentication information is directly output on the second device, or a coded image containing the authentication information is output, so that the first device can obtain the authentication information. When the second device directly outputs the authentication information, it can be output in the form of screen display or voice.

[0142] For example, the authentication information is directly displayed on the second device, and the user of the first device can view the authentication information and then manually input the authentication information into the first device. Alternatively, the second device plays the authentication information by voice, and the user of the first device hears it and then manually inputs it or inputs it by voice into the first device.

[0143] If the second device displays a coded image containing authentication information, the first device may scan the coded image and parse it to obtain the authentication information.

[0144] After obtaining the authentication information, the first device can match the authentication information with the authentication information stored in itself. If the match is consistent, an authentication success instruction is sent to the second device to complete the authentication interaction with the second device.

[0145] As mentioned above, the second device may support a screen pop-up window. After receiving an authentication instruction, the second device may be triggered to display the authentication information or a coded image containing the authentication information in a screen pop-up window.

[0146] It should be noted that, in the embodiments of the present disclosure, the authentication information includes at least one of the following:

[0147] a device identifier of the first device or the second device;

[0148] Booking password information;

[0149] Scheduled voice messages.

[0150] If the authentication information is the device identification of the first device or the second device, the device identification may be a personal identification number (PIN) code of a user module in the device, or a device serial number, etc. The first device may store the device identification of the first device or the second device for matching verification.

[0151] If the authentication information is predetermined password information, the first device may obtain the password information based on the password displayed by the second device or the coded image containing the password, and then match it with the password information stored in the first device.

[0152] If the authentication information is a predetermined voice message, the second device can output the predetermined voice message by voice, and the user of the first device can repeat the voice message and receive it, or the first device can scan the coding diagram displayed by the second device to obtain the voice message. After the first device obtains the voice message in the above two ways, it can match it with the voice message stored in itself.

[0153] In one embodiment, performing the authentication interaction with the second device includes:

[0154] Receiving a message carrying authentication information sent by the second device;

[0155] In response to the authentication information in the message matching the authentication information stored in the first device, or receiving a confirmation instruction for the authentication information, sending an authentication success instruction to the second device.

[0156] Different from the aforementioned method of displaying or broadcasting authentication information by the second device, in this embodiment, the first device can also receive a message sent by the second device, thereby obtaining the authentication information carried in the message. The first device further determines whether the authentication information matches the authentication information stored by itself, and in the case of a match or after receiving a user's confirmation instruction for the authentication information after outputting the authentication information, sends an authentication pass instruction to the second device, completing the authentication interaction with the second device.

[0157] In the embodiment of the present disclosure, taking the UWB connection as an example in which the communication connection established when the distance condition is met, when the authentication interaction is performed through out-of-band communication, as mentioned above, the first device and the second device may support a pairing button method. In this method, the second device may include independent or reusable physical control keys. After the second device detects the operation of the physical control on the second device, it sends a message carrying authentication information through the Wi-Fi link. After the first device receives the message, it can perform subsequent authentication interaction process with the second device.

[0158] It should be noted that in an embodiment of the present disclosure, if the second device is a smart phone, the sound adjustment control of the smart phone can be reused. For example, when the preset duration of pressing the sound control is greater than the preset duration, a message carrying authentication information is sent to the first device.

[0159] As mentioned above, the first device and the second device may support infrared communication. In an embodiment, the second device may be used as an infrared transmitter, and the first device may be used as an infrared receiver. The second device sends a message carrying authentication information through an infrared transmitter, and the message is received by the infrared receiver of the first device. It should be noted that the second device may send an infrared signal in a fixed format, which is received by the first device. In addition, the second device may be a control terminal or a controlled terminal, which is not limited in the embodiments of the present disclosure.

[0160] As mentioned above, the first device and the second device may support NFC communication. For example, when the first device and the second device do not have built-in NFC modules, external NFC bumper stickers may be used to open the NFC link so that the second device sends a message carrying authentication information to the first device.

[0161] As mentioned above, the first device and the second device may also support sound wave communication. In this way, the second device sends an audio signal carrying authentication information, which is received and parsed by the first device to obtain the authentication information. For example, if the authentication information carried in the audio signal is a predetermined voice message, the first device will recognize the voice after receiving it, and after determining that it is consistent with the voice message stored in itself, it will send an authentication success instruction to the second device.

[0162] Since sound wave signals have an impact on living people or animals, the higher the frequency, the smaller the impact on living things but the greater the attenuation. However, in combination with the short-distance transmission scenario of the present disclosure, the impact of signal attenuation may not be significant, so the present disclosure may use a higher frequency sound wave signal to reduce harm to people or animals. For example, the second device may be configured with a speaker that can emit a signal with a capacity of 18K to 23K, and the first device collects the audio signal at a sampling frequency of not less than 44KHz and performs subsequent audio analysis.

[0163] It can be understood that the present disclosure provides a variety of out-of-band communication methods to support the sending and receiving of messages carrying authentication information, covering terminals with different communication capabilities, and has a wide range of applications.

[0164] Figure 2 This is a data transmission method flow shown in the embodiment of the present disclosure Figure 2 ,like Figure 2 As shown, the data transmission method applied to the second device includes the following steps:

[0165] S21. If the distance to the first device is within a preset distance range, establish a communication connection with the first device;

[0166] S22. Based on the communication connection, receiving an authentication instruction sent by the first device;

[0167] S23. Perform authentication interaction with the first device in an out-of-band communication manner according to the authentication instruction;

[0168] S24: After the authentication is passed, data is transmitted with the first device based on the communication connection.

[0169] In the embodiment of the present disclosure, the second device may be a control terminal or a controlled terminal.

[0170] In step S21, if the distance between the second device and the first device is within a preset distance range, a short-distance communication connection is established with the first device. In step S22, based on the communication connection established with the first device, the second device can receive the authentication instruction sent by the first device to trigger the first device and the second device to perform OOB authentication based on step S23. And in step S24, after the authentication is passed, data is transmitted with the first device on the original communication link based on the communication connection established in step S21.

[0171] It is understandable that, in the present disclosure, after establishing a communication connection, the first device and the second device do not directly transmit data on the established communication link, but use out-of-band communication to perform authentication to determine whether the first device or the second device has control authority over the other party. After confirming that they have authority (i.e., after the authentication is passed), data transmission is performed based on the original communication link. In this way, on the one hand, compared with the method of not performing authority authentication after establishing a communication connection, adding authentication can improve the security of data transmission; on the other hand, compared with the method of performing authority authentication on the same communication link before data transmission, it can reduce the possibility of insecure data transmission caused by fake authentication after the original communication link is maliciously cracked, so the authentication method through out-of-band communication can also improve security.

[0172] In one embodiment, the method further comprises:

[0173] After the authentication is passed, a second key is obtained based on the out-of-band communication method; the second key is used to decrypt the encrypted data transmitted by the first device based on the communication connection.

[0174] After the out-of-band authentication is passed, the present disclosure also obtains a decryption key (second key) based on the out-of-band communication method to decrypt the encrypted data transmitted on the communication link of the original communication connection to obtain the truly transmitted data.

[0175] It should be noted that the first key and the second key may be keys corresponding to a symmetric encryption method, in which case the first key and the second key may be the same. In addition, the first key and the second key may also be keys corresponding to an asymmetric encryption method, in which case the first key and the second key are different. It is understandable that, compared with obtaining a decryption key on the same communication link for data transmission, the security of data transmission can be further improved.

[0176] In one embodiment, performing authentication interaction with the first device in an out-of-band communication manner according to the authentication instruction includes:

[0177] Feedback, according to the authentication instruction, the out-of-band authentication capability of the second device to the first device;

[0178] After the first device determines an authentication method that matches the out-of-band authentication capability, the authentication interaction is performed with the first device.

[0179] In an embodiment of the present disclosure, after receiving the authentication instruction, the second device feeds back the out-of-band authentication capability of the second device to the first device. After receiving the authentication method determined by the first device, the second device can perform authentication interaction with the first device.

[0180] Figure 3 This is an example of the second device initiating authentication interaction in the embodiment of the present disclosure. Figure 1 For example, assuming that the second device is an IoT device, such as Figure 3 As shown, after the IoT device outputs OOB verification information to initiate OOB verification message interaction, the control terminal (first device) can input OOB verification information after receiving the message carrying the authentication information, for example, input OOB verification passed information through the user's confirmation operation on the authentication information.

[0181] Figure 4 This is an example of the second device initiating authentication interaction in the embodiment of the present disclosure. Figure 2 For example, assuming that the second device is a control terminal, such as Figure 4 As shown, after the control terminal outputs OOB verification information to initiate OOB verification message interaction, the IoT device (first device) can input OOB verification information after receiving the message carrying authentication information, for example, input OOB verification passed information through the user's confirmation operation on the authentication information.

[0182] It can be understood that in the present disclosure, the second device feeds back the out-of-band authentication capability to the first device based on the authentication instruction, so as to determine a matching out-of-band authentication method with the first device before performing authentication interaction, which can reduce invalid interactions caused by blindly adopting authentication interaction methods, thereby reducing power consumption of the first device and the second device.

[0183] In one embodiment, performing the authentication interaction with the first device includes:

[0184] Outputting authentication information or outputting a coded image containing the authentication information; wherein the output authentication information is used for the first device to obtain, and the output coded image is used for the first device to scan a code to obtain the authentication information;

[0185] Receive an authentication success instruction sent by the first device after authenticating the authentication information.

[0186] In this embodiment, the second device directly outputs the authentication information, or outputs a coded image containing the authentication information in a displayed manner, so that the first device can obtain the authentication information to complete the authentication interaction with the second device. In the embodiment of the present disclosure, the second device can output the authentication information or output a coded image containing the authentication information in the form of a screen pop-up window.

[0187] In one embodiment, performing the authentication interaction with the first device includes:

[0188] Sending a message carrying authentication information to the first device;

[0189] Receive an authentication success instruction sent by the first device after authenticating the authentication information in the message.

[0190] In this embodiment, when the second device uses out-of-band communication to perform authentication interaction with the first device, it can send a message carrying authentication information to the first device through the aforementioned infrared communication, NFC communication, sound wave communication, or Wi-Fi communication in combination with a pairing button. After the first device obtains the authentication information, it further determines whether the authentication information matches the authentication information stored in itself, and if it matches or after receiving a user's confirmation instruction for the authentication information after outputting the authentication information, it sends an authentication pass instruction to the second device to complete the authentication interaction with the second device.

[0191] It can be understood that the present disclosure provides a variety of out-of-band communication methods to support the sending and receiving of messages carrying authentication information, covering terminals with different communication capabilities, and has a wide range of applications.

[0192] Figure 5 is an interactive diagram of a data transmission method shown in an embodiment of the present disclosure, such as Figure 5 As shown, the data transmission method applied to the first device and the second device includes the following steps:

[0193] S31, if the distance between the first device and the second device is within a preset distance range, establishing a communication connection with the second device;

[0194] S32. The first device sends an authentication instruction to the second device based on the communication connection;

[0195] S33: The second device performs authentication interaction with the first device in an out-of-band communication manner according to the authentication instruction;

[0196] S34: After the second device passes the authentication, the second device transmits data with the first device based on the communication connection.

[0197] Exemplarily, the first device is a mobile phone, and the second device is an IoT device. For example, the communication connection established between the mobile phone and the IoT device in step S31 is a UWB communication connection. Figure 4 This is a process diagram of mobile phones and IoT devices starting out-of-band communication for authentication interaction, such as Figure 4 As shown, in step 1, the mobile phone turns on UWB short-range protection, that is, after the mobile phone and the IoT device establish a UWB communication connection, it sends an authentication instruction to the IoT device. In step 2, the IoT device replies with its own OOB capability, that is, out-of-band authentication capability, for example, by replying the OOB capability in the manner of Table 1 above; in step 3, after the mobile phone receives the out-of-band authentication capability of the IoT device, it selects the OOB method, as mentioned above, which can be randomly selected or selected according to a predetermined priority; in step 4, based on the selected OOB method, the mobile phone can interact with the IoT device out-of-band.

[0198] Figure 6 This is an example diagram of an out-of-band interaction method shown in an embodiment of the present disclosure, such as Figure 6 As shown, the mobile phone and the IoT device can use any of the pairing buttons, screen pop-up windows, infrared communication, sound wave communication or NFC communication for out-of-band interaction.

[0199] It is understandable that, in the present disclosure, after establishing a communication connection, the first device and the second device do not directly transmit data on the established communication link, but use out-of-band communication to perform authentication to determine whether the first device or the second device has control authority over the other party. After confirming that they have authority (i.e., after the authentication is passed), data transmission is performed based on the original communication link. In this way, on the one hand, compared with the method of not performing authority authentication after establishing a communication connection, adding authentication can improve the security of data transmission; on the other hand, compared with the method of performing authority authentication on the same communication link before data transmission, it can reduce the possibility of insecure data transmission caused by fake authentication after the original communication link is maliciously cracked, so the authentication method through out-of-band communication can also improve security.

[0200] Figure 7 A data transmission device according to an exemplary embodiment is shown Figure 1 . Reference Figure 7 , the data transmission device applied to the first device includes:

[0201] The first connection module 101 is configured to establish a communication connection with the second device if the distance to the second device is within a preset distance range;

[0202] A sending module 102, configured to send an authentication instruction to the second device based on the communication connection;

[0203] The first authentication module 103 is configured to perform authentication interaction with the second device in an out-of-band communication manner according to the authentication instruction;

[0204] The first transmission module 104 is configured to perform data transmission with the second device based on the communication connection after the authentication is passed.

[0205] In some embodiments, the apparatus further comprises:

[0206] A first acquisition module 105, configured to acquire a first key based on the out-of-band communication after the authentication is passed;

[0207] The first transmission module 104 is further configured to, after the authentication is passed, encrypt the data to be transmitted using the first key based on the communication connection and then send the encrypted data to the second device.

[0208] In some embodiments, the first authentication module 103 is further configured to receive the out-of-band authentication capability of the second device fed back by the second device based on the authentication instruction; after determining the authentication method matching the out-of-band authentication capability, perform the authentication interaction with the second device.

[0209] In some embodiments, the first authentication module 103 is further configured to receive input authentication information, or to scan a coded image output by the second device to obtain the authentication information; wherein the input authentication information is obtained based on the output of the second device; in response to the authentication information matching the authentication information stored in the first device, an authentication success instruction is sent to the second device.

[0210] In some embodiments, the first authentication module 103 is further configured to receive a message carrying authentication information sent by the second device; in response to the authentication information in the message matching the authentication information stored in the first device, or receiving a confirmation instruction for the authentication information, send an authentication success instruction to the second device.

[0211] In some embodiments, the message carrying the authentication information is triggered and sent after the second device detects an operation on a physical control on the second device.

[0212] In some embodiments, the authentication information includes at least one of the following:

[0213] a device identifier of the first device or the second device;

[0214] Booking password information;

[0215] Scheduled voice messages.

[0216] In some embodiments, if the communication connection includes an ultra-wideband communication connection, the out-of-band communication method includes:

[0217] Wireless fidelity communication method;

[0218] Infrared communication method;

[0219] Ultrasonic communication method;

[0220] Near field communication NFC method.

[0221] Figure 8 A data transmission device according to an exemplary embodiment is shown Figure 2 . Reference Figure 7 , the data transmission device applied to the second device includes:

[0222] The second connection module 201 is configured to establish a communication connection with the first device if the distance to the first device is within a preset distance range;

[0223] A receiving module 202, configured to receive an authentication instruction sent by the first device based on the communication connection;

[0224] The second authentication module 203 is configured to perform authentication interaction with the first device in an out-of-band communication manner according to the authentication instruction;

[0225] The second transmission module 204 is configured to perform data transmission with the first device based on the communication connection after the authentication is passed.

[0226] In some embodiments, the apparatus further comprises:

[0227] The second acquisition module 205 is configured to acquire a second key based on the out-of-band communication after the authentication is passed; the second key is used to decrypt the encrypted data transmitted by the first device based on the communication connection.

[0228] In some embodiments, the second authentication module 203 is further configured to feedback the out-of-band authentication capability of the second device to the first device according to the authentication instruction; after the first device determines the authentication method that matches the out-of-band authentication capability, perform the authentication interaction with the first device.

[0229] In some embodiments, the second authentication module 203 is further configured to display authentication information or display a coded image containing the authentication information; wherein the displayed authentication information is used for the first device to obtain, and the displayed coded image is used for the first device to scan the code to obtain the authentication information; and receive an authentication success instruction sent by the first device after authenticating the authentication information.

[0230] In some embodiments, the second authentication module 203 is further configured to send a message carrying authentication information to the first device; and receive an authentication success instruction sent by the first device after authenticating the authentication information in the message.

[0231] Regarding the device in the above embodiment, the specific manner in which each module performs operations has been described in detail in the embodiment of the method, and will not be elaborated here.

[0232] Fig. 9 8 is a block diagram of a terminal device 800 according to an exemplary embodiment. For example, the device 800 may be a master control terminal (eg, a first device) or a controlled terminal (eg, a second device).

[0233] Reference Fig. 9 , the device 800 may include one or more of the following components: a processing component 802 , a memory 804 , a power component 806 , a multimedia component 808 , an audio component 810 , an input / output (I / O) interface 812 , a sensor component 814 , and a communication component 816 .

[0234] The processing component 802 generally controls the overall operation of the device 800, such as operations associated with display, phone calls, data communications, camera operations, and recording operations. The processing component 802 may include one or more processors 820 to execute instructions to complete all or part of the steps of the above-mentioned method. In addition, the processing component 802 may include one or more modules to facilitate the interaction between the processing component 802 and other components. For example, the processing component 802 may include a multimedia module to facilitate the interaction between the multimedia component 808 and the processing component 802.

[0235] The memory 804 is configured to store various types of data to support operations on the device 800. Examples of such data include instructions for any application or method operating on the device 800, contact data, phone book data, messages, pictures, videos, etc. The memory 804 can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic disk or optical disk.

[0236] The power supply component 806 provides power to the various components of the device 800. The power supply component 806 may include a power management system, one or more power supplies, and other components associated with generating, managing, and distributing power for the device 800.

[0237] The multimedia component 808 includes a screen that provides an output interface between the device 800 and the user. In some embodiments, the screen may include a liquid crystal display (LCD) and a touch panel (TP). If the screen includes a touch panel, the screen may be implemented as a touch screen to receive input signals from the user. The touch panel includes one or more touch sensors to sense touch, slide, and gestures on the touch panel. The touch sensor may not only sense the boundaries of the touch or slide action, but also detect the duration and pressure associated with the touch or slide operation. In some embodiments, the multimedia component 808 includes a front camera and / or a rear camera. When the device 800 is in an operating mode, such as a shooting mode or a video mode, the front camera and / or the rear camera may receive external multimedia data. Each front camera and rear camera may be a fixed optical lens system or have a focal length and optical zoom capability.

[0238] The audio component 810 is configured to output and / or input audio signals. For example, the audio component 810 includes a microphone (MIC), and when the device 800 is in an operating mode, such as a call mode, a recording mode, and a speech recognition mode, the microphone is configured to receive an external audio signal. The received audio signal can be further stored in the memory 804 or sent via the communication component 816. In some embodiments, the audio component 810 also includes a speaker for outputting audio signals.

[0239] I / O interface 812 provides an interface between processing component 802 and peripheral interface modules, such as keyboards, click wheels, buttons, etc. These buttons may include but are not limited to: home button, volume button, start button, and lock button.

[0240] The sensor assembly 814 includes one or more sensors for providing various aspects of the status assessment of the device 800. For example, the sensor assembly 814 can detect the open / closed state of the device 800, the relative positioning of components, such as the display and keypad of the device 800, and the sensor assembly 814 can also detect the position change of the device 800 or a component of the device 800, the presence or absence of user contact with the device 800, the orientation or acceleration / deceleration of the device 800, and the temperature change of the device 800. The sensor assembly 814 may include a proximity sensor configured to detect the presence of a nearby object without any physical contact. The sensor assembly 814 may also include an optical sensor, such as a CMOS or CCD image sensor, for use in imaging applications. In some embodiments, the sensor assembly 814 may also include an accelerometer, a gyroscope sensor, a magnetic sensor, a pressure sensor, or a temperature sensor.

[0241] The communication component 816 is configured to facilitate wired or wireless communication between the device 800 and other devices. The device 800 can access a wireless network based on a communication standard, such as Wi-Fi, 2G or 3G, or a combination thereof. In an exemplary embodiment, the communication component 816 receives a broadcast signal or broadcast-related information from an external broadcast management system via a broadcast channel. In an exemplary embodiment, the communication component 816 also includes a near field communication (NFC) module to facilitate short-range communication. For example, the NFC module can be implemented based on radio frequency identification (RFID) technology, infrared data association (IrDA) technology, ultra-wideband (UWB) technology, Bluetooth (BT) technology and other technologies.

[0242] In an exemplary embodiment, the apparatus 800 may be implemented by one or more application specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field programmable gate arrays (FPGAs), controllers, microcontrollers, microprocessors or other electronic components to perform the above method.

[0243] In an exemplary embodiment, a non-transitory computer-readable storage medium including instructions is also provided, such as a memory 804 including instructions, and the instructions can be executed by the processor 820 of the device 800 to perform the above method. For example, the non-transitory computer-readable storage medium can be a ROM, a random access memory (RAM), a CD-ROM, a magnetic tape, a floppy disk, an optical data storage device, etc.

[0244] A non-transitory computer-readable storage medium, when instructions in the storage medium are executed by a processor of a first device, enables the first device to perform a data transmission method, the method comprising:

[0245] If the distance to the second device is within a preset distance range, establishing a communication connection with the second device;

[0246] Based on the communication connection, sending an authentication instruction to the second device;

[0247] According to the authentication instruction, performing authentication interaction with the second device in an out-of-band communication manner;

[0248] After the authentication is passed, data is transmitted with the second device based on the communication connection.

[0249] When the instructions in the storage medium are executed by a processor of the second device, the second device is enabled to perform a data transmission method, the method comprising:

[0250] If the distance to the first device is within a preset distance range, establishing a communication connection with the first device;

[0251] Based on the communication connection, receiving an authentication instruction sent by the first device;

[0252] According to the authentication instruction, performing authentication interaction with the first device in an out-of-band communication manner;

[0253] After the authentication is passed, data is transmitted with the first device based on the communication connection.

[0254] Those skilled in the art will readily appreciate other embodiments of the present disclosure after considering the specification and practicing the invention disclosed herein. The present disclosure is intended to cover any variations, uses or adaptations of the present disclosure that follow the general principles of the present disclosure and include common knowledge or customary techniques in the art that are not disclosed in the present disclosure. The description and examples are to be considered exemplary only, and the true scope and spirit of the present disclosure are indicated by the following claims.

[0255] It should be understood that the present disclosure is not limited to the exact structures that have been described above and shown in the drawings, and that various modifications and changes may be made without departing from the scope thereof. The scope of the present disclosure is limited only by the appended claims.

Claims

1. A data transmission method, It is characterized in that Applied in a first device, the method includes: If the distance to the second device is within a preset distance range, establishing a communication connection with the second device; Based on the communication connection, sending an authentication instruction to the second device; receiving an out-of-band authentication capability of the second device fed back by the second device based on the authentication instruction; After determining an authentication method that matches the out-of-band authentication capability, performing authentication interaction with the second device in an out-of-band communication manner; After the authentication is passed, obtaining a first key based on the out-of-band communication method; After the authentication is passed, based on the communication connection, the data to be transmitted is encrypted using the first key and then sent to the second device.

2. The method according to claim 1, It is characterized in that The performing authentication interaction with the second device includes: Receiving input authentication information, or scanning a coded image output by the second device to obtain the authentication information; wherein the input authentication information is obtained based on the output of the second device; In response to the authentication information matching the authentication information stored in the first device, an authentication success instruction is sent to the second device.

3. The method according to claim 1, It is characterized in that The performing authentication interaction with the second device includes: Receiving a message carrying authentication information sent by the second device; In response to the authentication information in the message matching the authentication information stored in the first device, or receiving a confirmation instruction for the authentication information, sending an authentication success instruction to the second device.

4. The method according to claim 3, It is characterized in that The message carrying the authentication information is triggered and sent after the second device detects an operation on a physical control on the second device.

5. A data transmission method, It is characterized in that Applied in the second device, the method includes: If the distance to the first device is within a preset distance range, establishing a communication connection with the first device; Based on the communication connection, receiving an authentication instruction sent by the first device; Feedback, according to the authentication instruction, the out-of-band authentication capability of the second device to the first device; After the first device determines an authentication method that matches the out-of-band authentication capability, performing authentication interaction with the first device in an out-of-band communication manner; After the authentication is passed, obtaining a second key based on the out-of-band communication method; After authentication is passed, data is transmitted with the first device based on the communication connection; wherein the second key is used to decrypt the encrypted data transmitted by the first device based on the communication connection.

6. The method according to claim 5, It is characterized in that The performing authentication interaction with the first device includes: Displaying authentication information or displaying a coded image containing the authentication information; wherein the displayed authentication information is used for the first device to obtain, and the displayed coded image is used for the first device to scan a code to obtain the authentication information; Receive an authentication success instruction sent by the first device after authenticating the authentication information.

7. The method according to claim 5, It is characterized in that The performing authentication interaction with the first device includes: Sending a message carrying authentication information to the first device; Receive an authentication success instruction sent by the first device after authenticating the authentication information in the message.

8. A data transmission device, It is characterized in that Applied in a first device, the apparatus comprises: A first connection module, configured to establish a communication connection with a second device if the distance to the second device is within a preset distance range; a sending module, configured to send an authentication instruction to the second device based on the communication connection; A first authentication module is configured to receive the out-of-band authentication capability of the second device fed back by the second device based on the authentication instruction; after determining an authentication method matching the out-of-band authentication capability, perform authentication interaction with the second device in an out-of-band communication manner; A first acquisition module, configured to acquire a first key based on the out-of-band communication after the authentication is passed; The first transmission module is configured to, after authentication is passed, encrypt the data to be transmitted by using the first key based on the communication connection and then send the encrypted data to the second device.

9. The device according to claim 8, It is characterized in that The first authentication module is further configured to receive input authentication information, or to scan the coded image output by the second device to obtain the authentication information; wherein the input authentication information is obtained based on the output of the second device; in response to the authentication information matching the authentication information stored in the first device, an authentication success instruction is sent to the second device.

10. The device according to claim 8, It is characterized in that The first authentication module is also configured to receive a message carrying authentication information sent by the second device; in response to the authentication information in the message matching the authentication information stored in the first device, or receiving a confirmation instruction for the authentication information, send an authentication success instruction to the second device.

11. The device according to claim 10, It is characterized in that The message carrying the authentication information is triggered and sent after the second device detects an operation on a physical control on the second device.

12. A data transmission device, It is characterized in that Applied in a second device, the apparatus comprises: A second connection module is configured to establish a communication connection with the first device if the distance to the first device is within a preset distance range; a receiving module, configured to receive an authentication instruction sent by the first device based on the communication connection; A second authentication module is configured to feedback the out-of-band authentication capability of the second device to the first device according to the authentication instruction; after the first device determines an authentication method that matches the out-of-band authentication capability, perform authentication interaction with the first device in an out-of-band communication manner; A second acquisition module is configured to acquire a second key based on the out-of-band communication after the authentication is passed; The second transmission module is configured to transmit data with the first device based on the communication connection after authentication is passed; wherein the second key is used to decrypt the encrypted data transmitted by the first device based on the communication connection.

13. The device according to claim 12, It is characterized in that The second authentication module is further configured to display authentication information or display a coded image containing the authentication information; wherein the displayed authentication information is used for the first device to obtain, and the displayed coded image is used for the first device to scan the code to obtain the authentication information; and receive an authentication success instruction sent by the first device after authenticating the authentication information.

14. The device according to claim 12, It is characterized in that The second authentication module is further configured to send a message carrying authentication information to the first device; and receive an authentication success instruction sent by the first device after authenticating the authentication information in the message.

15. An electronic device, It is characterized in that include: processor; a memory for storing processor-executable instructions; The processor is configured to execute the data transmission method according to any one of claims 1 to 4 or the data transmission method according to any one of claims 5 to 7.

16. A non-transitory computer-readable storage medium, It is characterized in that When the instructions in the storage medium are executed by the processor of the first device, the first device is enabled to execute the data transmission method as described in any one of claims 1 to 4; or, when the instructions in the storage medium are executed by the processor of the second device, the second device is enabled to execute the data transmission method as described in any one of claims 5 to 7.

Images