Communication connection method, device and computer storage medium

Abstract

The present invention discloses a communication connection method, apparatus and computer storage medium, which relates to the field of communication technologies, and solves the technical problems that user operations are relatively cumbersome and there is a great risk of information leakage in the pairing process. The communication connection method includes: receiving a connection request when broadcasting first status information, where the connection request includes first identification information of a second device, and the first status information is used to indicate that the first device is in a state of being scannable and connectable; determining whether it is in an allowed binding state with the second device according to the first identification information; if so, sending a response message to the connection request to the second device to establish a communication connection with the second device.

Description

Technical Field

[0001] The present invention relates to the field of communication technologies, and in particular, to a communication connection method, apparatus, and computer storage medium. Background Art

[0002] With the rapid development of Internet of Things technologies, there are more and more wireless intelligent Internet of Things devices with near-field communication capabilities.

[0003] In the prior art, in order to improve the security of connection communication between a first device and a second device, an encrypted connection is usually enabled, and the first device and the second device are required to perform a pairing connection. After pairing, relevant connection information and a link key are saved on both the first device and the second device, so that when the connection condition is met again next time, encrypted transmission can be directly performed to avoid the pairing process again. However, the pairing process in the prior art usually requires the user to input the same pairing key on the two devices respectively. Thus, not only does it make the user operation more cumbersome, but also there is a greater risk of information leakage in the pairing process.

[0004] Therefore, those skilled in the art are committed to developing a communication connection method, apparatus, and computer storage medium that can improve information security in the communication connection scenario and reduce the cumbersome degree of user operation. Summary of the Invention

[0005] In view of the above-mentioned defects of the prior art, the technical problem to be solved by the present invention is: how to improve information security in the communication connection scenario and reduce the cumbersome degree of user operation.

[0006] To achieve the above object, the present invention adopts the following technical solutions:

[0007] In a first aspect, the present invention provides a communication connection method, which includes: receiving a connection request when broadcasting first status information, where the connection request includes first identification information of a second device, and the first status information is used to indicate that the first device is in a state of being scannable and connectable; determining whether it is in an allowed binding state with the second device according to the first identification information; if so, sending a response message to the connection request to the second device to establish a communication connection with the second device.

[0008] In a preferred embodiment of the present invention, determining whether the first device is in an allowable binding state with the second device according to the first identification information includes: traversing the connection information stored in the first device according to the first identification information; when the connection information stored in the first device includes first connection information, determining that the first device and the second device are in an allowable binding state; wherein the first connection information includes at least one of the following: the first identification information, the latest historical connection time with the second device, and the account information of the second device for logging in to the target application, and the target application is used to provide services required during the connection process and the encryption process.

[0009] In a preferred embodiment of the present invention, when the first connection information includes the latest historical connection time, before sending the response information of the connection request to the second device, the method further includes: determining the storage duration of the first connection information based on the current time and the latest historical connection time; when the storage duration is greater than a first threshold, deleting the first connection information.

[0010] In a preferred embodiment of the present invention, after establishing a communication connection with the second device, the method further includes: updating the latest historical connection time.

[0011] In a preferred embodiment of the present invention, determining whether the first device is in an allowable binding state with the second device according to the first identification information includes: determining whether the first identification information is the same as the identification information included in a first binding instruction; if so, determining that the first device and the second device are in an allowable binding state; wherein the first binding instruction is a binding instruction sent by a cloud platform.

[0012] In a preferred embodiment of the present invention, before receiving the connection request, the method further includes: when broadcasting second status information, receiving the first binding instruction, the first binding instruction including the first identification information, and the second status information is used to prompt that the first device is in a state of being scannable but not connectable; determining the second device according to the first identification information, switching the binding state of the second device from a prohibited binding state to the allowable binding state, canceling the broadcast of the second status information and broadcasting the first status information.

[0013] In a preferred embodiment of the present invention, after switching the binding state of the second device from a prohibited binding state to the allowable binding state, the method further includes: when the holding duration of the allowable binding state is greater than a second threshold, switching the binding state of the second device from the allowable binding state to the prohibited binding state.

[0014] In a preferred embodiment of the present invention, the first binding instruction further includes first encryption information; after establishing a communication connection with the second device, the method further includes: obtaining second encryption information from the second device, where the second encryption information is information in a second binding instruction returned by the cloud platform in response to an allowed binding request sent by the second device; and storing the first connection information of the second device and sending a binding success command to the cloud platform when the first encryption information and the second encryption information meet a preset rule.

[0015] In a preferred embodiment of the present invention, establishing the communication connection with the second device includes: receiving an encrypted channel establishment request from the second device, where the encrypted channel establishment request includes at least one of the following: a feature query request, a service query request, an encryption request, and a start encryption request; and sending response information of the encrypted channel establishment request to the second device.

[0016] In a preferred embodiment of the present invention, when the encrypted channel establishment request includes the encryption request, receiving the encrypted channel establishment request from the second device includes: receiving an encryption request from the second device, where the encryption request includes M random passwords; and sending response information of the encrypted channel establishment request to the second device includes: sending response information of the encryption request to the second device, where the response information of the encryption request includes N random passwords; where the M random passwords and the N random passwords are used as communication secrets to implement encrypted communication with the second device, and both M and N are positive integers greater than 1.

[0017] In a second aspect, the present invention provides a communication connection method, which includes: when receiving first status information broadcast by a first device, if a preset condition is met, sending a connection request to the first device, where the connection request includes first identification information of the second device, and the first status information is used to indicate that the first device is in a state of being scannable and connectable; receiving response information of the connection request from the first device and establishing a communication connection with the first device; where the preset condition includes at least one of the following: receiving a second binding instruction from a cloud platform, and the second device includes second connection information of the first device; and the second binding instruction is used to indicate permission to establish a communication connection with the first device.

[0018] In a preferred embodiment of the present invention, when the preset conditions include receiving a second binding instruction from the cloud platform, before sending a connection request to the first device, the method further includes: when the target application is in a running state, if receiving the second status information broadcast by the first device, obtaining the second identification information of the first device through the target application, where the second status information is used to indicate that the first device is in a state of being scannable but not connectable; sending an allow binding request to the cloud platform, where the allow binding request includes the second identification information, the first identification information, and the account information of the target application; and receiving the second binding instruction.

[0019] In a preferred embodiment of the present invention, the second binding instruction includes second encryption information; after establishing a communication connection with the first device, the method further includes: obtaining first encryption information from the first device, where the first encryption information is information in a first binding instruction sent by the cloud platform to the first device in response to the allow binding request; when the first encryption information and the second encryption information meet a preset rule, storing the second connection information and sending a binding success command to the cloud platform, where the second connection information includes the second identification information.

[0020] In a preferred embodiment of the present invention, establishing the communication connection with the first device includes: sending an encrypted channel establishment request to the first device, where the encrypted channel establishment request includes at least one of the following: a feature query request, a service query request, an encryption request, and a start encryption request; and receiving response information of the encrypted channel establishment request from the first device.

[0021] In a preferred embodiment of the present invention, when the encrypted channel establishment request includes the encryption request, sending the encrypted channel establishment request to the first device includes: sending the encryption request to the first device, where the encryption request includes M random passwords; receiving the response information of the encrypted channel establishment request from the first device includes: receiving the response information of the encryption request from the first device, where the response information of the encryption request includes N random passwords; where the M random passwords and the N random passwords are used as communication secrets to implement encrypted communication with the second device, and both M and N are positive integers greater than 1.

[0022] In a third aspect, the present invention provides a communication connection device, comprising: a receiving unit, a processing unit, and a transmitting unit; the receiving unit is configured to receive a connection request when the first status information is broadcast, the connection request includes first identification information of a second device, and the first status information is used to indicate that the first device is in a scannable and connectable state; the processing unit is configured to determine whether it is in an allowed binding state with the second device according to the first identification information; the transmitting unit is configured to, if so, send a response message to the connection request to the second device to establish a communication connection with the second device.

[0023] In a fourth aspect, the present invention provides a communication connection device, comprising: a transmitting unit and a receiving unit; the transmitting unit is configured to, when receiving the first status information broadcast by the first device, if a preset condition is satisfied, send a connection request to the first device, the connection request includes first identification information of the second device, and the first status information is used to indicate that the first device is in a scannable and connectable state; the receiving unit is configured to receive a response message to the connection request from the first device to establish a communication connection with the first device; wherein, the preset condition includes at least one of the following: receiving a second binding instruction from a cloud platform, the second device includes second connection information of the first device; the second binding instruction is used to indicate permission to establish a communication connection with the first device.

[0024] In a fifth aspect, the present invention provides a communication connection device, comprising a memory and a processor. The memory is used to store computer execution instructions, and the processor is connected to the memory through a bus. When the communication connection device runs, the processor executes the computer execution instructions stored in the memory, so that the communication connection device executes the communication connection method provided in the first aspect and its various possible implementation manners, or so that the communication connection device executes the communication connection method provided in the second aspect and its various possible implementation manners.

[0025] In a sixth aspect, a computer-readable storage medium is provided, the computer-readable storage medium includes computer execution instructions, when the computer execution instructions run on a computer, it enables the communication connection device to execute the communication connection method provided in the first aspect and its various possible implementation manners, or so that the communication connection device executes the communication connection method provided in the second aspect and its various possible implementation manners.

[0026] In a seventh aspect, there is provided a computer program product, which includes computer instructions. When the computer instructions are run on a computer, the communication connection device is caused to execute the communication connection method provided in the first aspect and its various possible embodiments, or the communication connection device is caused to execute the communication connection method provided in the second aspect and its various possible embodiments.

[0027] It should be noted that all or part of the above computer instructions may be stored on a computer-readable storage medium. Among them, the computer-readable storage medium may be packaged together with the processor of the communication connection device, or may be separately packaged from the processor of the communication connection device. The embodiments of the present invention do not limit this.

[0028] In the embodiments of the present invention, the second device may send a connection request to the first device when a preset condition is met. The first device may send response information of the connection request to the second device when it is in a state allowing binding with the second device. After that, the second device and the first device may establish a communication connection. Through this solution, on the one hand, since the entire connection process does not require user participation, the complexity of user operations can be reduced; on the other hand, since the first device can independently choose whether to send response information, malicious pairing by other second devices can be avoided, thereby improving the security of information transmission.

[0029] The concept, specific structure and technical effects of the present invention will be further described below in conjunction with the drawings to fully understand the purpose, features and effects of the present invention. Description of the Drawings

[0030] Figure 1 is a schematic diagram of a communication connection system provided by an embodiment of the present invention;

[0031] Figure 2 is one of the schematic flowcharts of a preferred embodiment of the communication connection method provided by an embodiment of the present invention;

[0032] Figure 3 is another schematic flowchart of a preferred embodiment of the communication connection method provided by an embodiment of the present invention;

[0033] Figure 4 is yet another schematic flowchart of a preferred embodiment of the communication connection method provided by an embodiment of the present invention;

[0034] Figure 5 is still another schematic flowchart of a preferred embodiment of the communication connection method provided by an embodiment of the present invention;

[0035] Figure 6 is yet still another schematic flowchart of a preferred embodiment of the communication connection method provided by an embodiment of the present invention;

[0036] Figure 7 is one of the structural schematic diagrams of the communication connection device provided by the embodiments of the present invention;

[0037] Figure 8 is another structural schematic diagram of the communication connection device provided by the embodiments of the present invention;

[0038] Figure 9 is the third structural schematic diagram of the communication connection device provided by the embodiments of the present invention. Detailed implementation manners

[0039] The following uses specific specific examples to illustrate the implementation manners of the present invention. Those skilled in the art can easily understand other advantages and effects of the present invention from the content disclosed in this specification. The present invention can also be implemented or applied through other different specific implementation manners. Various details in this specification can also be modified or changed based on different viewpoints and applications without departing from the spirit of the present invention. It should be noted that, without conflict, the following embodiments and the features in the embodiments can be combined with each other.

[0040] It should be noted that in the embodiments of the present invention, words such as "exemplary" or "for example" are used to represent examples, illustrations or explanations. Any embodiment or design solution described as "exemplary" or "for example" in the embodiments of the present invention should not be construed as being more preferred or having more advantages than other embodiments or design solutions. Exactly speaking, using words such as "exemplary" or "for example" aims to present relevant concepts in a specific manner.

[0041] It should be noted that in this article, the term "comprising", "including" or any other variant thereof is intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements not only includes those elements, but also includes other elements not expressly listed, or further includes elements inherent to such process, method, article or device. Without more limitations, the element defined by the statement "including one..." does not exclude the existence of additional identical elements in the process, method, article or device including the element. In addition, it should be pointed out that the scope of the methods and devices in the embodiments of the present invention is not limited to performing functions in the order shown or discussed, and may also include performing functions in a substantially simultaneous manner or in the reverse order according to the functions involved. For example, the described methods can be performed in an order different from that described, and various steps can also be added, omitted, or combined. In addition, the features described with reference to certain examples can be combined in other examples.

[0042] For the convenience of clearly describing the technical solutions of the embodiments of the present invention, in the embodiments of the present invention, terms such as "first" and "second" are used to distinguish identical or similar items with basically the same functions and roles. Those skilled in the art can understand that terms such as "first" and "second" do not limit the quantity and execution order.

[0043] For the purpose of illustration, some exemplary embodiments of the present invention are described. It should be understood that the present invention can be implemented in other ways not specifically shown in the drawings.

[0044] The above implementation manners will be elaborated in detail below in conjunction with specific embodiments and the drawings.

[0045] As Figure 1 shown, an embodiment of the present invention provides a communication connection system, including a cloud platform 101, a second device 102, and a first device 103. The cloud platform 101 is used to provide a connection bridge for the second device 102 and the first device 103. The second device 102 and the first device 103 are used to establish a communication connection channel under the bridging effect of the cloud platform 101 and perform encrypted communication through the communication connection channel.

[0046] Optionally, the above first device 103 can periodically send status information to the surrounding. The status information can include first status information and second status information. Among them, the data frame type of the first status information is scannable and connectable, which is used to indicate that the first device 103 is in a scannable and connectable state; the data frame type of the second status information is scannable but not connectable, which is used to indicate that the first device 103 is in a scannable but not connectable state.

[0047] Optionally, the above first device can be a Bluetooth device. For example, a Bluetooth smart lock. When the first device is a Bluetooth device, the above status information can be Bluetooth Low Energy (BLE) information.

[0048] Optionally, the above second device can be a mobile device. For example, it can be a mobile phone, a tablet computer, a laptop computer, a handheld computer, and a wearable device, etc.

[0049] It should be noted that when the second device 102 and the first device 103 are in an allowed binding state, the first device 103 can periodically broadcast the first status information; when the second device 102 and the first device 103 are in a prohibited binding state, the first device 103 can periodically broadcast the second status information.

[0050] Optionally, when the second device 102 and the first device 103 respectively receive the binding instruction sent by the cloud platform 101, the second device 102 and the first device 103 are in an allowable binding state; or, when the first device 103 includes the connection information of the second device 102, the second device 102 and the first device 103 are in an allowable binding state.

[0051] The following combines Figure 2 , and through S201 - S207, the interaction process with the cloud platform when the second device and the first device establish a communication connection for the first time is described.

[0052] S201. The first device periodically broadcasts the second status information.

[0053] S202. The second device acquires the second identification information of the first device.

[0054] A target application can be installed in the second device, and the target application can be used to provide services required for processes such as connection and encryption. When the target application is in a running state, if the second device receives the second status information broadcast by the first device, the second identification information of the first device can be acquired through the target application.

[0055] Optionally, the surface of the first device can carry its own identification information. For example, it can be a serial number, a two - dimensional code, etc. The second device can acquire the second identification information of the first device by manually inputting the identification information of the first device by the user or scanning the two - dimensional code.

[0056] S203. The second device sends an allow - binding request to the cloud platform.

[0057] The allow - binding request can include the second identification information, the first identification information of the second device, and the account information of the target application.

[0058] S204. The cloud platform determines the legality of the allow - binding request.

[0059] After receiving the allow - binding request, the cloud platform can determine the legality of the allow - binding request according to a preset judgment rule.

[0060] S205a. If it is legal, the cloud platform can send a first binding instruction to the first device.

[0061] Correspondingly, when broadcasting the second status information, the first device can receive the first binding instruction sent by the cloud platform.

[0062] Optionally, the first binding instruction can include the first identification information.

[0063] S205b. If it is legal, the cloud platform sends a second binding instruction to the second device.

[0064] Correspondingly, the second device can receive the second binding instruction from the cloud platform, and this second binding instruction is used to indicate permission to establish a communication connection with the first device.

[0065] S206. The first device broadcasts first status information.

[0066] Optionally, the first device can determine the second device according to the first identification information, switch the binding status of the second device from the prohibited binding status to the permitted binding status, cancel broadcasting the second status information and broadcast the first status information.

[0067] Optionally, after switching the binding status of the second device from the prohibited binding status to the permitted binding status, the first device can switch the binding status of the second device from the permitted binding status to the prohibited binding status when the holding duration of the permitted binding status is greater than a second threshold.

[0068] S207. The second device receives the first status information and attempts to establish a communication connection with the first device.

[0069] That is, the second device can send a connection request to the first device.

[0070] In the embodiments of the present invention, since the second device can establish a binding relationship with the first device with the help of the cloud platform, the security of the encryption channel can be improved.

[0071] Next, in conjunction with Figure 3 A detailed description will be given of the specific process of the second device and the first device establishing a communication connection.

[0072] As Figure 3 shown, the embodiments of the present invention provide a communication connection method, and this communication connection method can be applied to the above communication connection system. This communication connection method may include: S301 - S304:

[0073] S301. When the first device broadcasts first status information, the second device sends a connection request to the first device.

[0074] Correspondingly, the first device can receive the connection request sent by the second device.

[0075] Among them, the above connection request may include the first identification information of the second device.

[0076] Optionally, when the first device broadcasts the first status information and the second device receives the first status information broadcast by the first device, the second device may determine whether the current device status meets a preset condition. If the preset condition is met, the second device may send the above connection request to the first device. Wherein, the preset condition may include at least one of the following: the second device receives a second binding instruction from the cloud platform; the second device includes second connection information of the first device; the second binding instruction is used to indicate permission to establish a communication connection with the first device.

[0077] It should be noted that when the second device establishes a communication connection with the first device for the first time, the second device needs to receive the second binding instruction from the cloud platform before sending a connection request to the first device; when there is a communication connection history between the second device and the first device, the second device will have the second connection information of the first device. Therefore, the second device can bypass the cloud platform and directly send a connection request to the first device.

[0078] Optionally, the above second connection information may include second identification information of the first device, and the second identification information is the unique identification information of the first device. For example, the second identification information may be the factory serial number of the first device.

[0079] S302. The first device determines whether it is in an allowed binding state with the second device according to the first identification information.

[0080] Optionally, the first device may traverse the connection information stored in the first device according to the first identification information; and when the connection information stored in the first device includes the first connection information, determine that the first device and the second device are in an allowed binding state; wherein, the first connection information includes at least one of the following: the first identification information, the latest historical connection time with the second device, and the account information of the second device logging in to the target application, and the target application is used to provide services required in the connection process and the encryption process.

[0081] Optionally, since the first binding instruction may include the first identification information, the first device may determine whether the first identification information is the same as the identification information included in the first binding instruction; if they are the same, determine that the first device and the second device are in an allowed binding state; wherein, the first binding instruction is a binding instruction sent by the cloud platform.

[0082] S303. If so, the first device sends a response message to the connection request to the second device.

[0083] Correspondingly, the second device receives the response message to the connection request from the first device.

[0084] Optionally, when the first connection information includes the latest historical connection time, before the first device sends the response information of the connection request to the second device, the storage duration of the first connection information may be determined based on the current time and the latest historical connection time; and when the storage duration is greater than a first threshold, the first connection information is deleted. That is to say, the first connection information of the second device stored in the first device is time-limited. If the second device does not connect to the first device again within a time exceeding the first threshold, the first device may delete the first connection information.

[0085] S304. The first device and the second device establish a communication connection.

[0086] Optionally, the first device and the second device establishing a communication connection may specifically include: the second device sends an encrypted channel establishment request to the first device, and the encrypted channel establishment request includes at least one of the following: a feature query request, a service query request, an encryption request, and a start encryption request; correspondingly, the first device receives the encrypted channel establishment request from the second device; then, the first device may send the response information of the encrypted channel establishment request to the second device, and correspondingly, the second device may receive the response information of the encrypted channel establishment request from the first device. When the second device receives the response information from the first device, it successfully establishes a communication connection with the first device.

[0087] Specifically, as Figure 4 shown, since the encrypted channel establishment request may include at least one of the following: a feature query request, a service query request, an encryption request, and a start encryption request, therefore, the second device sending the encrypted channel establishment request to the first device may include S401a - S401d:

[0088] S401a. The second device sends a feature query request to the first device, and this feature query request is used to query transmission feature information. For example, whether it is encrypted transmission, what the transmission bandwidth is, what the transmission rate is, etc.

[0089] S401b. The second device sends a service query request to the first device, and this service query request is used to query the transmission service type and transmission attribute type, etc.

[0090] S401c. The second device sends an encryption request to the first device, and this encryption request is used to send part of the transmission password required for encryption to the first device.

[0091] S401d. The second device sends a start encryption request to the first device, and this start encryption request is used to request to start the encrypted transmission process.

[0092] Optionally, continue to refer to Figure 4, the response information of the encrypted channel establishment request may include first response information, second response information, third response information, and fourth response information. When the first device sends the response information of the encrypted channel establishment request to the second device, it may include S402a - S402d:

[0093] S402a. When the encrypted channel establishment request includes a feature query request, the first device may send the first response information to the second device, and the first response information may include an enable flag for using encrypted communication.

[0094] S402b. When the encrypted channel establishment request includes a service query request, the first device may send the second response information to the second device, and the second response information may include a standard access service, a standard attribute service, and a custom service.

[0095] S402c. When the encrypted channel establishment request includes an encryption request, the first device may send the third response information to the second device, and the third response information may include the transmission password for the additional part required for encryption.

[0096] S402d. When the encrypted channel establishment request includes an encryption request, the first device may send the fourth response information to the second device, and the fourth response information may include a start encryption response data frame.

[0097] Optionally, when the encrypted channel establishment request includes an encryption request, the first device may receive an encryption request from the second device, and the encryption request may include M random passwords; afterwards, the first device may send the response information of the encryption request to the second device, and the response information of the encryption request may include N random passwords; the M random passwords and the N random passwords may be used as communication keys to implement encrypted communication between the first device and the second device. That is to say, since the second device and the first device respectively have M + N random passwords, the first device may use the M random passwords and the N random passwords as communication keys to implement encrypted communication with the second device, and the second device may also use the M random passwords and the N random passwords as communication keys to implement encrypted communication with the first device; where M and N are both positive integers greater than 1. Based on this solution, since the first device can determine the communication key by receiving the encryption request and sending the response, even if the encryption request or response is leaked during transmission, it will not cause the leakage of the communication key, thereby avoiding the failure of encrypted communication and improving the security of encrypted communication.

[0098] Optionally, after the first device and the second device establish a communication connection, the first device may update the latest historical connection time in the first connection information.

[0099] Optionally, the first binding instruction further includes first encryption information; after the first device establishes a communication connection with the second device, the first device can obtain second encryption information from the second device through the BLE standard access service and the standard attribute service, where the second encryption information is the information in the second binding instruction returned by the cloud platform in response to the permission binding request sent by the second device; thereafter, the first device can determine whether the first encryption information and the second encryption information meet a preset rule. If the preset rule is met, the first device can confirm the legal identity of the second device. Therefore, when the first encryption information and the second encryption information meet the preset rule, the first device can store the first connection information of the second device and send a binding success command to the cloud platform.

[0100] Optionally, the second binding instruction may include second encryption information; after the second device establishes a communication connection with the first device, the second device can obtain first encryption information from the first device through the BLE standard access service and the standard attribute service, where the first encryption information is the information in the first binding instruction sent by the cloud platform to the first device in response to the permission binding request; thereafter, the second device can determine whether the first encryption information and the second encryption information meet a preset rule. If the preset rule is met, the second device can confirm the legal identity of the first device. Therefore, when the first encryption information and the second encryption information meet the preset rule, the second device can store the second connection information of the first device and send a binding success command to the cloud platform.

[0101] Optionally, the second binding instruction may further include a broadcast frame feature; after receiving the second binding instruction from the cloud platform, the second device can determine target status information from the received status information according to the broadcast frame feature, and the target status information includes the first status information. Thereafter, the second device can send connection requests to the first devices corresponding to each status information in the target status information respectively. In this way, the efficiency of establishing an encrypted channel can be improved.

[0102] Optionally, the method provided by the embodiments of the present invention can be applied to scenarios such as induction unlocking, automatic lighting, electric two-wheel vehicles, four-wheel vehicles, and home living places. For example, when applied to the induction unlocking scenario, after the second device and the first device successfully establish a communication connection channel, the first device can control the induction lock to automatically open.

[0103] Optionally, after establishing the communication connection, if the first device detects that the signal strength with the second device is less than a preset threshold, it can perform corresponding actions according to the functions preset by the cloud platform. For example, the first device can control the induction lock to automatically close.

[0104] In an embodiment of the present invention, the second device may send a connection request to the first device when a preset condition is met. The first device may send a response message to the connection request to the second device when the first device and the second device are in an allowed binding state. After that, the second device and the first device may establish a communication connection. Through this solution, on the one hand, since the entire connection process does not require user participation, the complexity of user operations can be reduced. On the other hand, since the first device can autonomously select whether to send a response message, malicious pairing by other second devices can be avoided, thereby improving the security of information transmission.

[0105] As Figure 5 shown, an embodiment of the present invention further provides a communication connection method, which can be applied to the first device in the above communication connection system. The communication connection method may include: S501 - S503:

[0106] S501. When broadcasting first status information, receive a connection request, where the connection request includes first identification information of the second device, and the first status information is used to prompt that the first device is in a state of being scannable and connectable.

[0107] Optionally, before receiving the connection request, the method further includes: when broadcasting second status information, receive the first binding instruction, where the first binding instruction includes the first identification information, and the second status information is used to prompt that the first device is in a state of being scannable but not connectable; determine the second device according to the first identification information, switch the binding state of the second device from a prohibited binding state to the allowed binding state, cancel broadcasting the second status information and broadcast the first status information.

[0108] Optionally, after switching the binding state of the second device from a prohibited binding state to the allowed binding state, the method further includes: when the holding duration of the allowed binding state is greater than a second threshold, switch the binding state of the second device from the allowed binding state to the prohibited binding state.

[0109] Optionally, the first binding instruction further includes first encryption information; after establishing a communication connection with the second device, the method further includes: obtaining second encryption information from the second device, where the second encryption information is information in a second binding instruction returned by the cloud platform in response to an allowed binding request sent by the second device; when the first encryption information and the second encryption information meet a preset rule, store the first connection information of the second device and send a binding success command to the cloud platform.

[0110] S502. Determine whether it is in an allowed binding state with the second device according to the first identification information.

[0111] Optionally, the determining whether it is in an allowed binding state with the second device according to the first identification information includes: traversing the connection information stored in the first device according to the first identification information; determining that the first device and the second device are in an allowed binding state when the first connection information is included in the connection information stored in the first device; wherein, the first connection information includes at least one of the following: the first identification information, the latest historical connection time with the second device, and the account information of the second device logging in to the target application, and the target application is used to provide services required in the connection process and the encryption process.

[0112] Optionally, when the first connection information includes the latest historical connection time, before sending the response information of the connection request to the second device, the method further includes: determining the storage duration of the first connection information based on the current time and the latest historical connection time; deleting the first connection information when the storage duration is greater than a first threshold.

[0113] Optionally, after establishing the communication connection with the second device, the method further includes: updating the latest historical connection time.

[0114] Optionally, the determining whether it is in an allowed binding state with the second device according to the first identification information includes: judging whether the first identification information is the same as the identification information included in the first binding instruction; if so, determining that the first device and the second device are in an allowed binding state; wherein, the first binding instruction is a binding instruction sent by the cloud platform.

[0115] S503. If so, send the response information of the connection request to the second device and establish a communication connection with the second device.

[0116] Optionally, the establishing the communication connection with the second device includes: receiving an encrypted channel establishment request from the second device, and the encrypted channel establishment request includes at least one of the following: a feature query request, a service query request, an encryption request, and a start encryption request; sending the response information of the encrypted channel establishment request to the second device.

[0117] Optionally, when the encrypted channel establishment request includes the encryption request, receiving the encrypted channel establishment request from the second device includes: receiving an encryption request from the second device, where the encryption request includes M random passwords; sending response information of the encrypted channel establishment request to the second device includes: sending response information of the encryption request to the second device, where the response information of the encryption request includes N random passwords; where the M random passwords and the N random passwords are used as communication keys to implement encrypted communication with the second device, and both M and N are positive integers greater than 1.

[0118] As Figure 6 shown, an embodiment of the present invention further provides a communication connection method, which can be applied to the second device in the above communication connection system. The communication connection method may include: S601 - S602:

[0119] S601. When receiving the first status information broadcast by the first device, if a preset condition is met, send a connection request to the first device, where the connection request includes the first identification information of the second device, and the first status information is used to prompt that the first device is in a state of being scannable and connectable.

[0120] Wherein, the preset condition includes at least one of the following: receiving a second binding instruction from the cloud platform, and the second device includes second connection information of the first device; the second binding instruction is used to indicate permission to establish a communication connection with the first device.

[0121] Optionally, when the preset condition includes receiving a second binding instruction from the cloud platform, before sending the connection request to the first device, the method further includes: when the target application is in a running state, if receiving the second status information broadcast by the first device, obtain the second identification information of the first device through the target application, where the second status information is used to prompt that the first device is in a state of being scannable but not connectable; send an allow binding request to the cloud platform, where the allow binding request includes the second identification information, the first identification information, and the account information of the target application; receive the second binding instruction.

[0122] S602. Receive the response information of the connection request from the first device, and establish a communication connection with the first device.

[0123] Optionally, establishing a communication connection with the first device includes: sending an encrypted channel establishment request to the first device, where the encrypted channel establishment request includes at least one of the following: a feature query request, a service query request, an encryption request, and a start encryption request; and receiving response information of the encrypted channel establishment request from the first device.

[0124] Optionally, when the encrypted channel establishment request includes the encryption request, sending the encrypted channel establishment request to the first device includes: sending the encryption request to the first device, where the encryption request includes M random passwords; and receiving response information of the encrypted channel establishment request from the first device includes: receiving response information of the encryption request from the first device, where the response information of the encryption request includes N random passwords; where the M random passwords and the N random passwords are used as communication secret keys to implement encrypted communication with the second device, and both M and N are positive integers greater than 1.

[0125] Optionally, the second binding instruction includes second encryption information; after establishing the communication connection with the first device, the method further includes: obtaining first encryption information from the first device, where the first encryption information is the information in the first binding instruction sent by the cloud platform to the first device in response to the allow binding request; and when the first encryption information and the second encryption information meet a preset rule, storing the second connection information and sending a binding success command to the cloud platform, where the second connection information includes the second identification information.

[0126] The above mainly introduces the solution provided by the embodiments of the present application from the perspective of methods. To implement the above functions, it includes the corresponding hardware structure and / or software module for executing each function. Those skilled in the art should easily realize that, combining the units and algorithm steps of each example described in the embodiments disclosed in this article, the embodiments of the present application can be implemented in the form of hardware or a combination of hardware and computer software. Whether a certain function is executed in the way of hardware or computer software driving hardware depends on the specific application and design constraints of the technical solution. Professional technicians can use different methods to implement the described function for each specific application, but such implementation should not be considered to exceed the scope of the present application.

[0127] For the communication connection method provided by the embodiments of the present application, the execution subject can be a communication connection device, or a control module for communication connection in the communication connection device. In the embodiments of the present application, taking the communication connection device executing the communication connection method as an example, the communication connection device provided by the embodiments of the present application is described.

[0128] It should be noted that the embodiments of the present application can divide the communication connection device into functional modules according to the above method examples. For example, each functional module can be divided corresponding to each function, or two or more functions can be integrated into one processing module. The above integrated module can be implemented in the form of hardware or in the form of a software functional module. Optionally, the division of modules in the embodiments of the present application is illustrative, only a logical function division, and there can be other division methods in actual implementation.

[0129] As Figure 7 shown, an embodiment of the present application provides a communication connection device 700. The communication connection device 700 includes: a receiving unit 701, a processing unit 702, and a sending unit 703; the receiving unit 701 is configured to receive a connection request when broadcasting first status information, where the connection request includes first identification information of a second device, and the first status information is used to prompt that the first device is in a scannable and connectable state; the processing unit 702 is configured to determine whether it is in an allowed binding state with the second device according to the first identification information; the sending unit 703 is configured to, if so, send response information of the connection request to the second device to establish a communication connection with the second device.

[0130] Optionally, the processing unit 702 is specifically configured to traverse the connection information stored in the first device according to the first identification information; when the connection information stored in the first device includes first connection information, determine that the first device and the second device are in an allowed binding state; where the first connection information includes at least one of the following: the first identification information, the latest historical connection time with the second device, and the account information of the second device logging in to the target application, and the target application is used to provide services required in the connection process and the encryption process.

[0131] Optionally, the processing unit 702 is further configured to, when the first connection information includes the latest historical connection time, before sending the response information of the connection request to the second device, determine the storage duration of the first connection information based on the current time and the latest historical connection time; when the storage duration is greater than a first threshold, delete the first connection information.

[0132] Optionally, the processing unit 702 is further configured to, after establishing the communication connection with the second device, the method further includes: updating the latest historical connection time.

[0133] Optionally, the processing unit 702 is specifically configured to determine whether the first identification information is the same as the identification information included in the first binding instruction; if they are the same, it is determined that the first device and the second device are in an allowed binding state; wherein, the first binding instruction is a binding instruction sent by the cloud platform.

[0134] Optionally, the receiving unit 701 is further configured to receive the first binding instruction in the case of broadcasting the second status information before receiving the connection request, the first binding instruction includes the first identification information, and the second status information is used to prompt that the first device is in a state of being scannable but not connectable; the processing unit 702 is further configured to determine the second device according to the first identification information, switch the binding state of the second device from the prohibited binding state to the allowed binding state, cancel broadcasting the second status information and broadcast the first status information.

[0135] Optionally, the processing unit 702 is further configured to, after switching the binding state of the second device from the prohibited binding state to the allowed binding state, switch the binding state of the second device from the allowed binding state to the prohibited binding state when the holding duration of the allowed binding state is greater than a second threshold.

[0136] Optionally, the first binding instruction further includes first encryption information; after establishing a communication connection with the second device, the processing unit 702 is further configured to obtain second encryption information from the second device, where the second encryption information is the information in the second binding instruction returned by the cloud platform in response to an allowed binding request sent by the second device; when the first encryption information and the second encryption information meet a preset rule, store the first connection information of the second device; the sending unit 703 is further configured to send a binding success command to the cloud platform.

[0137] Optionally, the receiving unit 701 is specifically configured to receive an encrypted channel establishment request from the second device, where the encrypted channel establishment request includes at least one of the following: a feature query request, a service query request, an encryption request, and a start encryption request; the sending unit 703 is specifically configured to send response information of the encrypted channel establishment request to the second device.

[0138] Optionally, the receiving unit 701 is specifically configured to receive an encryption request from the second device when the encryption channel establishment request includes the encryption request, where the encryption request includes M random passwords; the sending unit 703 is specifically configured to send response information of the encryption request to the second device, where the response information of the encryption request includes N random passwords; where the M random passwords and the N random passwords are used as communication secret keys to implement encrypted communication with the second device, and both M and N are positive integers greater than 1.

[0139] Of course, the communication connection device 700 provided in the embodiments of the present application includes, but is not limited to, the above units.

[0140] As Figure 8 shown, the embodiments of the present application provide a communication connection device 800. The communication connection device 800 includes: a sending unit 801 and a receiving unit 802; the sending unit 801 is configured to send a connection request to the first device if a preset condition is met when receiving first status information broadcast by the first device, where the connection request includes first identification information of the second device, and the first status information is used to prompt that the first device is in a scannable and connectable state; the receiving unit 802 is configured to receive response information of the connection request from the first device and establish a communication connection with the first device; where the preset condition includes at least one of the following: receiving a second binding instruction from a cloud platform, and the second device includes second connection information of the first device; the second binding instruction is used to indicate permission to establish a communication connection with the first device.

[0141] Optionally, when the preset condition includes receiving a second binding instruction from the cloud platform, before sending the connection request to the first device, the receiving unit 802 is configured to obtain second identification information of the first device through the target application if the second status information broadcast by the first device is received when the target application is in a running state, where the second status information is used to prompt that the first device is in a scannable but non-connectable state; the sending unit 801 is configured to send an allow binding request to the cloud platform, where the allow binding request includes the second identification information, the first identification information, and account information of the target application; the receiving unit 802 is further configured to receive the second binding instruction.

[0142] Optionally, the communication connection device 800 further includes a processing unit 803; the second binding instruction includes second encryption information; after establishing a communication connection with the first device, the processing unit 803 is configured to obtain first encryption information from the first device, where the first encryption information is information in a first binding instruction sent by the cloud platform to the first device in response to the allow binding request; when the first encryption information and the second encryption information meet a preset rule, store the second connection information; a sending unit 801 is configured to send a binding success command to the cloud platform, and the second connection information includes the second identification information.

[0143] Optionally, the sending unit 801 is specifically configured to send an encrypted channel establishment request to the first device, where the encrypted channel establishment request includes at least one of the following: a feature query request, a service query request, an encryption request, and a start encryption request; a receiving unit 802 is specifically configured to receive response information of the encrypted channel establishment request from the first device.

[0144] Optionally, when the encrypted channel establishment request includes the encryption request, the sending unit 801 is specifically configured to send the encryption request to the first device, where the encryption request includes M random passwords; the receiving unit 802 is specifically configured to receive response information of the encryption request from the first device, and the response information of the encryption request includes N random passwords; where the M random passwords and the N random passwords are used as communication secrets to implement encrypted communication with the second device, and both M and N are positive integers greater than 1.

[0145] Certainly, the communication connection device 800 provided in the embodiments of the present application includes but is not limited to the above units.

[0146] The embodiments of the present application also provide a communication connection device as Figure 9 shown. The communication connection device includes a processor 11, a memory 12, a communication interface 13, and a bus 14. The processor 11, the memory 12, and the communication interface 13 can be connected through the bus 14.

[0147] The processor 11 is the control center of the communication connection device, and can be a single processor or a collective term for multiple processing elements. For example, the processor 11 can be a general-purpose central processing unit (CPU), or other general-purpose processors, etc. Among them, the general-purpose processor can be a microprocessor or any conventional processor, etc.

[0148] As an embodiment, the processor 11 may include one or more CPUs, such as Figure 9 the CPUs 0 and 1 shown in

[0149] The memory 12 can be a read-only memory (ROM) or other types of static storage devices that can store static information and instructions, a random access memory (RAM) or other types of dynamic storage devices that can store information and instructions, or can also be an electrically erasable programmable read-only memory (EEPROM), a magnetic disk storage medium, or other magnetic storage devices, or any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited thereto.

[0150] In a possible implementation, the memory 12 can exist independently of the processor 11. The memory 12 can be connected to the processor 11 through the bus 14 and is used to store instructions or program codes. When the processor 11 calls and executes the instructions or program codes stored in the memory 12, the deployment method of the service function chain provided by the embodiments of the present application can be implemented.

[0151] In another possible implementation, the memory 12 can also be integrated with the processor 11.

[0152] The communication interface 13 is used to connect to other devices through a communication network. The communication network can be an Ethernet, a wireless access network, a wireless local area network (WLAN), etc. The communication interface 13 can include a receiving unit for receiving data and a sending unit for sending data.

[0153] The bus 14 can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, an Extended Industry Standard Architecture (EISA) bus, etc. This bus can be divided into an address bus, a data bus, a control bus, etc. For the sake of representation, Figure 9 only a thick line is used to represent it in the figure, but it does not mean that there is only one bus or one type of bus.

[0154] It should be noted that Figure 9 the structure shown does not constitute a limitation on the communication connection device. Except Figure 9In addition to the components shown, the communication connection device may include more or fewer components than shown, or combine certain components, or have a different component arrangement.

[0155] An embodiment of the present invention also provides a computer-readable storage medium, which includes computer-executable instructions. When the computer-executable instructions run on a computer, the computer is caused to execute each step performed by the communication connection device in the communication connection method provided in the above embodiment.

[0156] An embodiment of the present invention also provides a computer program product, which can be directly loaded into a memory and contains software code. After being loaded and executed by a computer, the computer program product can implement each step performed by the communication connection device in the communication connection method provided in the above embodiment.

[0157] Through the description of the above embodiments, those skilled in the art can clearly understand that the methods of the above embodiments can be implemented by means of software plus a necessary general hardware platform. Of course, they can also be implemented by hardware, but in many cases the former is a better implementation. Based on such an understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, can be embodied in the form of a software product. The computer software product is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disc) and includes several instructions for causing a terminal to execute the methods described in various embodiments of the present invention.

[0158] The above embodiments are only used to exemplarily illustrate the principles and effects of the present invention, rather than to limit the present invention. Any person familiar with this technology can modify or change the above embodiments without departing from the spirit and scope of the present invention. Therefore, all equivalent modifications or changes completed by those with ordinary knowledge in the technical field without departing from the spirit and technical ideas disclosed by the present invention should still be covered by the claims of the present invention.

Claims

1. A communication connection method, characterized in that, Applied to a first device, including: When broadcasting first status information, receiving a connection request, where the connection request includes first identification information of a second device, and the first status information is used to prompt that the first device is in a state of being scannable and connectable; Determining whether the first device and the second device are in a permitted binding state according to the first identification information; If so, sending a response message to the connection request to the second device and establishing a communication connection with the second device; Before receiving the connection request, when broadcasting second status information, switching to broadcasting first status information according to the first identification information in the first binding instruction sent by the cloud platform, and the second status information is used to prompt that the first device is in a state of being scannable but not connectable.

2. The communication connection method according to claim 1, characterized in that, The determining whether the first device and the second device are in a permitted binding state according to the first identification information includes: Traversing the connection information stored in the first device according to the first identification information; When the connection information stored in the first device includes first connection information, determining that the first device and the second device are in a permitted binding state; Wherein, the first connection information includes at least one of the following: the first identification information, the latest historical connection time with the second device, and the account information of the second device logging in to the target application, and the target application is used to provide services required in the connection process and the encryption process.

3. The communication connection method according to claim 1, characterized in that, The determining whether the first device and the second device are in a permitted binding state according to the first identification information includes: Judging whether the first identification information is the same as the identification information included in the first binding instruction; If the same, determining that the first device and the second device are in a permitted binding state; Wherein, the first binding instruction is a binding instruction sent by the cloud platform.

4. The communication connection method according to claim 3, characterized in that, Before receiving the connection request, the method further includes: When broadcasting second status information, receiving the first binding instruction, the first binding instruction includes the first identification information, and the second status information is used to prompt that the first device is in a state of being scannable but not connectable; Determining the second device according to the first identification information, switching the binding state of the second device from a prohibited binding state to the permitted binding state, canceling the broadcast of the second status information and broadcasting the first status information.

5. The communication connection method according to claim 4, characterized in that, The first binding instruction further includes first encryption information; after establishing the communication connection with the second device, the method further includes: Obtaining second encryption information from the second device, where the second encryption information is the information in the second binding instruction returned by the cloud platform in response to the permitted binding request sent by the second device; When the first encryption information and the second encryption information meet a preset rule, storing the first connection information of the second device and sending a binding success command to the cloud platform.

6. The communication connection method according to claim 1, characterized in that, The establishing the communication connection with the second device includes: Receiving an encrypted channel establishment request from the second device, where the encrypted channel establishment request includes at least one of the following: a feature query request, a service query request, an encryption request, and a start encryption request; Send the response information of the encrypted channel establishment request to the second device.

7. A communication connection method, characterized in that, Applied to the second device, including: In the case of receiving the first status information broadcast by the first device, if a preset condition is satisfied, send a connection request to the first device, where the connection request includes the first identification information of the second device, and the first status information is used to prompt that the first device is in a state of being scannable and connectable; Receive the response information of the connection request from the first device, and establish a communication connection with the first device; Wherein, the preset condition includes at least one of the following: receiving a second binding instruction from the cloud platform, and the second device includes the second connection information of the first device; the second binding instruction is used to indicate permission to establish a communication connection with the first device; When receiving the second status information broadcast by the first device, according to the first identification information included in the first binding instruction sent by the cloud platform to the first device, switch the binding status of the second device from the prohibited binding state to the permitted binding state, and the second status information is used to prompt that the first device is in a state of being scannable but not connectable.

8. The communication connection method according to claim 7, characterized in that, In the case where the preset condition includes receiving a second binding instruction from the cloud platform, before sending the connection request to the first device, the method further includes: When the target application is in a running state, if receiving the second status information broadcast by the first device, obtain the second identification information of the first device through the target application, and the second status information is used to prompt that the first device is in a state of being scannable but not connectable; Send a permission binding request to the cloud platform, where the permission binding request includes the second identification information, the first identification information, and the account information of the target application; Receive the second binding instruction.

9. The communication connection method according to claim 8, wherein, The second binding instruction includes second encryption information; after establishing the communication connection with the first device, the method further includes: Obtain first encryption information from the first device, where the first encryption information is the information in the first binding instruction sent by the cloud platform to the first device in response to the permission binding request; When the first encryption information and the second encryption information meet a preset rule, store the second connection information, and send a binding success command to the cloud platform, where the second connection information includes the second identification information.

10. The communication connection method according to claim 7, wherein, The establishing of the communication connection with the first device includes: Send an encrypted channel establishment request to the first device, where the encrypted channel establishment request includes at least one of the following: a feature query request, a service query request, an encryption request, and a start encryption request; Receive the response information of the encrypted channel establishment request from the first device.

11. A communication connection device, wherein, Including: A receiving unit, a processing unit, and a sending unit; The receiving unit is configured to receive a connection request in the case of broadcasting the first status information, where the connection request includes the first identification information of the second device, and the first status information is used to prompt that the first device is in a state of being scannable and connectable; The processing unit is configured to determine whether it is in an allowed binding state with the second device according to the first identification information; The sending unit is configured to, if so, send a response message of the connection request to the second device to establish a communication connection with the second device; When broadcasting the second status information before receiving the connection request, the processing unit switches to broadcasting the first status information according to the first identification information in the first binding instruction sent by the cloud platform, and the second status information is used to prompt that the first device is in a state of being scannable but not connectable.

12. A communication connection device, wherein, Comprising: A sending unit and a receiving unit; The sending unit is configured to, when receiving the first status information broadcast by the first device, if a preset condition is satisfied, send a connection request to the first device, and the connection request includes the first identification information of the second device, and the first status information is used to prompt that the first device is in a state of being scannable and connectable; The receiving unit is configured to receive the response message of the connection request from the first device to establish a communication connection with the first device; Wherein, the preset condition includes at least one of the following: receiving a second binding instruction from the cloud platform, and the second device includes second connection information of the first device; the second binding instruction is used to indicate that a communication connection is allowed to be established with the first device; When receiving the second status information broadcast by the first device, according to the first identification information included in the first binding instruction sent by the cloud platform to the first device, the binding state with the second device is switched from a prohibited binding state to an allowed binding state, and the second status information is used to prompt that the first device is in a state of being scannable but not connectable.

13. A communication connection device, wherein, Comprising a memory and a processor; the memory is used to store computer execution instructions, and the processor is connected to the memory through a bus; When the communication connection device runs, the processor executes the computer execution instructions stored in the memory so that the communication connection device executes the communication connection method according to any one of claims 1-6 or 7-10.

14. A computer-readable storage medium, wherein, The computer-readable storage medium includes computer execution instructions, and when the computer execution instructions run on a computer, the computer is caused to execute the communication connection method according to any one of claims 1-6 or 7-10.

Images