Method for communicating with external electronic device and electronic device thereof

Abstract

An electronic device and a method are disclosed herein. The electronic device includes: a memory storing a certificate list including first certificate data of an electronic device and second certificate data of an external electronic device; a short-range wireless communication circuit; and a processor. The processor implements the method, including: detecting a trigger event for requesting to establish a communication connection with a device local to the electronic device; in response to detecting the trigger event, controlling the short-range wireless communication circuit to broadcast a notification packet generated based on the first certificate data; receiving a response packet from an external electronic device, and obtaining third certificate data from the received response packet; verifying the external electronic device based on the second certificate data and the third certificate data; and, if the external electronic device is verified, establishing a secure communication channel with the external electronic device.

Description

Technical Field

[0001] The embodiments disclosed in the present disclosure relate to networked interconnected communications between electronic devices, and more specifically, to certificate-based data sharing between electronic devices through short-range communications. Background Art

[0002] As consumer electronic devices develop and become more popular, connections and content sharing between user devices are also increasing. Short-range wireless communications are often used to enable communication between devices located in a shared area. Short-range wireless communication methods include sharing through a common access point, and direct peer-to-peer pairing between devices. Examples of direct pairing-based communications over local wireless fidelity (WiFi) circuits include "ad-hoc" methods, the use of mobile access points, and WiFi direct connections. Summary of the invention

[0003] Technical issues

[0004] The short-range wireless communication method has a disadvantage in data transmission, that is, the user manually configures the settings of the short-range wireless communication. Therefore, it may be difficult for users who are inexperienced and / or unfamiliar with wireless communication to pair devices.

[0005] When a user attempts to provide content of his or her electronic device to another external electronic device, the user may thus have difficulty in specifying the external electronic device to which the content is to be provided.

[0006] Solution to the problem

[0007] One aspect of the present disclosure is to provide an electronic device, comprising: a memory storing a certificate list including first certificate data of the electronic device and second certificate data of an external electronic device; a short-range wireless communication circuit; and a processor operably connected to the memory and the short-range wireless communication circuit, wherein the memory may store instructions which, when executed, cause the processor to: detect a trigger event for requesting to establish a communication connection with a device local to the electronic device; in response to detecting the trigger event, control the short-range wireless communication circuit to broadcast an advertisement packet generated based on the first certificate data; receive a response packet from the external electronic device and obtain third certificate data from the received response packet; verify the external electronic device based on the second certificate data and the third certificate data; and, if the external electronic device is verified, establish a secure communication channel with the external electronic device.

[0008] Another aspect of the present disclosure is to provide an electronic device, including: a memory, which is configured to store first certificate data of the electronic device and second certificate data corresponding to first user identification information; a short-range wireless communication circuit; and a processor, which is operably connected to the memory and the short-range wireless communication circuit, wherein the memory can store instructions, which, when executed, enable the processor to: receive a notification packet including third certificate data through the short-range wireless communication circuit; compare the third certificate data with the second certificate data in response to receiving the notification packet; based on detecting that the third certificate data matches the second certificate data, transmit a response packet generated based on the first certificate data to an external electronic device through the short-range wireless communication circuit; and, through the short-range wireless communication circuit, receive a response to the transmitted response packet, and establish a secure communication channel with the external electronic device based on the received response.

[0009] Another aspect of the present disclosure is to provide an electronic device, including: a memory, which is configured to store first certificate data of the electronic device and second certificate data of an external electronic device; a short-range wireless communication circuit; a long-range wireless communication circuit; and a processor, which is operably connected to the memory, the short-range wireless communication circuit and the long-range communication circuit, wherein the memory can store instructions, which, when executed, enable the processor to: log in to an external server using a user account through the long-range wireless communication circuit; receive an account key value corresponding to the user account from the external server through the long-range wireless communication circuit; detect a trigger event for requesting to establish a communication connection with a device local to the electronic device; in response to detecting the trigger event, control the short-range wireless communication circuit to broadcast a message including the received account key value, wherein the external electronic device determines that it has a key value matching the account key value based on the message; transmit the first certificate data to the external electronic device through the short-range wireless communication circuit; receive third certificate data from the external electronic device through the short-range wireless communication circuit; and verify the external electronic device based on the second certificate data and the third certificate data.

[0010] Another aspect of the present disclosure is to provide an electronic device, including: a memory, which is configured to store first certificate data of the electronic device and second certificate data of an external electronic device; a short-range wireless communication circuit; a long-range wireless communication circuit; and a processor, which is operably connected to the memory, the short-range wireless communication circuit and the long-range communication circuit, wherein the memory can store instructions, which, when executed, enable the processor to: log in to an external server using a user account through the long-range wireless communication circuit; receive an account key value corresponding to the user account from the external server through the long-range wireless communication circuit; receive a message including the account key value through the short-range wireless communication circuit; based on the received information, identify that the external electronic device has a key value matching the account key value; receive third certificate data from the external electronic device through the short-range wireless communication circuit; verify the external electronic device based on the second certificate data and the third certificate data; and, based on detecting that the verification of the external electronic device is completed, transmit the first certificate data to the external electronic device through the short-range wireless communication circuit.

[0011] Another aspect of the present disclosure is to provide a method for an electronic device to communicate with an external electronic device, and the method may include: storing first certificate data of the electronic device and second certificate data of the external electronic device in a memory; detecting a trigger event requesting to establish a communication connection with another device local to the electronic device; in response to detecting the trigger event, broadcasting a notification packet generated based on the first certificate data; based on detecting a response packet received from the external electronic device in response to the broadcasted notification packet, obtaining third certificate data from the response packet; verifying the external electronic device based on the second certificate data and the third certificate data; and, based on detecting that the external electronic device is verified, establishing a secure communication channel with the external electronic device.

[0012] Another aspect of the present disclosure is to provide a method for an electronic device to communicate with an external electronic device, and the method may include: storing first certificate data of the electronic device and second certificate data of the external electronic device; in response to receiving a notification packet including third certificate data, comparing the third certificate data with the second certificate; based on detecting a match between the third certificate data and the second certificate data, transmitting a response packet generated based on the first certificate data to the external electronic device; and, receiving a response from the external electronic device based on the transmitted response packet, and establishing a secure communication channel with the external electronic device based on the response.

[0013] Another aspect of the present disclosure is to provide a method for an electronic device to communicate with an external electronic device, and the method may include: storing first certificate data of the electronic device and second certificate data of the external electronic device; logging in to an external server using a user account; receiving an account key value corresponding to the user account from the external server in response to detecting a trigger event requesting to establish a communication connection with another device local to the electronic device; broadcasting a message including the account key value; receiving a response to the message from the external electronic device, and identifying, based on the response, that the external electronic device has a key value that matches the account key value; transmitting the first certificate data to the external electronic device; receiving third certificate data from the external electronic device; and verifying the external electronic device based on the second certificate data and the third certificate data.

[0014] Another aspect of the present disclosure is to provide a method for an electronic device to communicate with an external electronic device, and the method may include: storing first certificate data of the electronic device and second certificate data of the external electronic device; logging in to an external server using a user account; receiving an account key value corresponding to the user account from the external server; receiving a message including the account key value through a short-range wireless communication circuit; identifying, based on the message, that the external electronic device has a key value matching the account key value; receiving third certificate data from the external electronic device; verifying the external electronic device based on the second certificate data and the third certificate data; and, if the verification of the external electronic device is completed, transmitting the first certificate data to the external electronic device.

[0015] Beneficial Effects

[0016] According to the embodiments disclosed in the present disclosure, an electronic device and an external electronic device may communicate with each other without requiring one or more users of the electronic device and the external electronic device to manually configure settings for wireless communication between the electronic device and the external electronic device.

[0017] According to the embodiments disclosed in the present disclosure, since the electronic device and the external electronic device perform mutual authentication using the certificates of the electronic device and the external electronic device registered for the user account, the trusted devices can securely establish a communication connection with each other.

[0018] According to an embodiment disclosed in this document, an electronic device may establish a communication connection with an external electronic device of another user related to a user of the electronic device by using contact information registered for the electronic device.

[0019] According to the embodiments disclosed in the present disclosure, since information capable of identifying an external electronic device can be provided to a user by using contact information registered for the electronic device, a user of the electronic device can easily identify a user of an external electronic device connected to the electronic device.

[0020] Furthermore, various effects directly or indirectly identified by the present disclosure can also be provided. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Figure 1 An electronic device in a network environment according to certain embodiments of the present disclosure is shown.

[0022] Figure 2 A device-to-device connection structure is shown in which an electronic device according to an embodiment establishes a communication connection with an external electronic device.

[0023] Figure 3 is a flowchart illustrating a process in which an electronic device establishes a communication connection with an external electronic device according to an embodiment.

[0024] Figure 4 is a flowchart illustrating a process in which an electronic device establishes a communication connection with an external electronic device logged in with the same user account according to an embodiment.

[0025] Figure 5 is a flowchart illustrating a process in which an electronic device obtains a shared account key value and obtains a certificate list according to an embodiment.

[0026] Figure 6 is a flowchart illustrating a process in which an electronic device establishes a communication connection with an external electronic device of another user according to an embodiment.

[0027] Figure 7 A method for acquiring, by an electronic device, a certificate list from a server according to an embodiment is conceptually illustrated.

[0028] Figure 8 An example of a certificate list acquired by an electronic device and an external electronic device according to an embodiment is shown.

[0029] Fig. 9 is a flowchart illustrating a process in which an electronic device and an external electronic device perform mutual authentication according to an embodiment.

[0030] Fig.10 is a flowchart illustrating a process in which an electronic device acquires certificate data of an external electronic device according to an embodiment.

[0031] Fig.11 An example of a transmission protocol in which an electronic device according to an embodiment identifies an external electronic device by using data modulated with a random value is illustrated.

[0032] Fig.12 An example is shown in which an electronic device detects a trigger event through a user interface according to an embodiment.

[0033] Fig.13A structure in which an electronic device according to an embodiment authenticates a nearby external electronic device and establishes a communication connection with the external electronic device is conceptually illustrated.

[0034] Fig.14 Examples of screens displayed by the electronic device and an external electronic device logged in with the same user account in a process in which the electronic device shares content using a communication channel connected with the external electronic device according to an embodiment are illustrated.

[0035] Fig.15 Examples of screens displayed by the electronic device and another user's external electronic device in a process in which the electronic device shares content using a communication channel connected with the external electronic device according to an embodiment are illustrated.

[0036] Fig.16 A user interface (UI) representing a data sharing status according to an embodiment is shown.

[0037] Fig.17 A sharing UI of an electronic device according to an embodiment is shown.

[0038] Fig.18 Examples of icons according to data sharing conditions according to an embodiment are shown.

[0039] Fig.19 A UI representing a data sharing status according to an embodiment is shown.

[0040] Fig. 20 A UI representing a data sharing status according to an embodiment is shown.

[0041] Fig.21 A connection request UI in an external electronic device is shown.

[0042] For the description of the drawings, the same or similar reference numerals may be used for the same or similar elements. DETAILED DESCRIPTION

[0043] Hereinafter, specific embodiments disclosed in the present disclosure will be described with reference to the accompanying drawings. However, this is not intended to limit the present disclosure to specific embodiments, but should be understood to include various modifications, equivalents and / or substitutes of the embodiments of the present disclosure.

[0044] Figure 1 is a block diagram illustrating an electronic device 101 in a network environment 100 according to certain embodiments. Figure 1, the electronic device 101 in the network environment 100 may communicate with the electronic device 102 via the first network 198 (e.g., a short-range wireless communication network), or communicate with the electronic device 104 or the server 108 via the second network 199 (e.g., a long-range wireless communication network). According to an embodiment, the electronic device 101 may communicate with the electronic device 104 via the server 108. According to an embodiment, the electronic device 101 may include a processor 120, a memory 130, an input device 150, a sound output device 155, a display device 160, an audio module 170, a sensor module 176, an interface 177, a haptic module 179, a camera module 180, a power management module 188, a battery 189, a communication module 190, a user identification module (SIM) 196, or an antenna module 197. In some embodiments, at least one of the components (e.g., the display device 160 or the camera module 180) may be omitted from the electronic device 101, or one or more other components may be added to the electronic device 101. In some embodiments, some of the components may be implemented as a single integrated circuit. For example, the sensor module 176 (eg, a fingerprint sensor, an iris sensor, or an illumination sensor) may be implemented to be embedded in the display device 160 (eg, a display).

[0045] The processor 120 may execute, for example, software (e.g., program 140) to control at least one other component (e.g., hardware component or software component) of the electronic device 101 connected to the processor 120, and may perform various data processing or calculations. According to an embodiment, as at least part of the data processing or calculation, the processor 120 may load a command or data received from another component (e.g., sensor module 176 or communication module 190) into the volatile memory 132, process the command or data stored in the volatile memory 132, and store the resultant data in the non-volatile memory 134. According to an embodiment, the processor 120 may include a main processor 121 (e.g., a central processing unit (CPU) or an application processor (AP)) and an auxiliary processor 123 (e.g., a graphics processing unit (GPU), an image signal processor (ISP), a sensor hub processor, or a communication processor (CP)) that is operationally independent or combined with the main processor 121. Additionally or alternatively, the auxiliary processor 123 may be adapted to consume less power than the main processor 121, or adapted to be specific to a specified function. The auxiliary processor 123 may be implemented separately from the main processor 121 , or as part of the main processor 121 .

[0046] When the main processor 121 is in an inactive (e.g., sleep) state, the auxiliary processor 123 (rather than the main processor 121) may control at least some of the functions or states related to at least one component (e.g., the display device 160, the sensor module 176, or the communication module 190) among the components of the electronic device 101, or when the main processor 121 is in an active state (e.g., executing an application), the auxiliary processor 123 may control together with the main processor 121. According to an embodiment, the auxiliary processor 123 (e.g., an image signal processor or a communication processor) may be implemented as a part of another component (e.g., the camera module 180 or the communication module 190) that is functionally related to the auxiliary processor 123.

[0047] The memory 130 may store various data used by at least one component of the electronic device 101 (e.g., the processor 120 or the sensor module 176). The various data may include, for example, software (e.g., the program 140) and input data or output data for commands related thereto. The memory 130 may include a volatile memory 132 or a non-volatile memory 134.

[0048] The program 140 may be stored as software in the memory 130 , and may include, for example, an operating system (OS) 142 , middleware 144 , or applications 146 .

[0049] The input device 150 may receive commands or data from outside the electronic device 101 (e.g., a user) to be used by other components of the electronic device 101 (e.g., the processor 120). The input device 150 may include, for example, a microphone, a mouse, a keyboard, or a digital pen (e.g., a stylus).

[0050] The sound output device 155 can output a sound signal to the outside of the electronic device 101. The sound output device 155 may include, for example, a speaker or a receiver. The speaker can be used for general purposes such as playing multimedia or playing records, and the receiver can be used for incoming calls. Depending on the embodiment, the receiver can be implemented as a separate part from the speaker, or as a part of the speaker.

[0051] The display device 160 may visually provide information to the outside of the electronic device 101 (e.g., a user). The display device 160 may include, for example, a display, a holographic device, or a projector, and a control circuit for controlling a corresponding one of the display, the holographic device, and the projector. According to an embodiment, the display device 160 may include a touch circuit adapted to detect a touch or a sensor circuit (e.g., a pressure sensor) adapted to measure the strength of a force caused by a touch.

[0052] The audio module 170 may convert sound into an electrical signal, or vice versa. According to an embodiment, the audio module 170 may obtain sound via the input device 150, or output sound via the sound output device 155 or an earphone of an external electronic device (e.g., electronic device 102) directly (e.g., wired) or wirelessly connected to the electronic device 101.

[0053] The sensor module 176 may detect an operating state (e.g., power or temperature) of the electronic device 101 or an environmental state (e.g., a user's state) outside the electronic device 101, and then generate an electrical signal or data value corresponding to the detected state. According to an embodiment, the sensor module 176 may include, for example, a gesture sensor, a gyro sensor, an atmospheric pressure sensor, a magnetic sensor, an acceleration sensor, a grip sensor, a proximity sensor, a color sensor, an infrared (IR) sensor, a biometric sensor, a temperature sensor, a humidity sensor, or an illumination sensor.

[0054] The interface 177 may support one or more specific protocols to be used to connect the electronic device 101 directly (e.g., wired) or wirelessly to an external electronic device (e.g., the electronic device 102). According to an embodiment, the interface 177 may include, for example, a high-definition multimedia interface (HDMI), a universal serial bus (USB) interface, a secure digital (SD) card interface, or an audio interface.

[0055] The connection end 178 may include a connector, wherein the electronic device 101 can be physically connected to an external electronic device (e.g., the electronic device 102) via the connector. According to an embodiment, the connection end 178 may include, for example, an HDMI connector, a USB connector, an SD card connector, or an audio connector (e.g., a headphone connector).

[0056] The haptic module 179 may convert the electrical signal into mechanical stimulation (eg, vibration or motion) or electrical stimulation that can be recognized by the user via his sense of touch or kinesthetic sense. According to an embodiment, the haptic module 179 may include, for example, a motor, a piezoelectric element, or an electrical stimulator.

[0057] The camera module 180 may capture still images or moving images. According to an embodiment, the camera module 180 may include one or more lenses, an image sensor, an image signal processor, or a flash.

[0058] The power management module 188 may manage power supply to the electronic device 101. According to an embodiment, the power management module 188 may be implemented as, for example, at least a part of a power management integrated circuit (PMIC).

[0059] The battery 189 may power at least one component of the electronic device 101. According to an embodiment, the battery 189 may include, for example, a non-rechargeable primary battery, a rechargeable secondary battery, or a fuel cell.

[0060] The communication module 190 may support establishing a direct (e.g., wired) communication channel or a wireless communication channel between the electronic device 101 and an external electronic device (e.g., electronic device 102, electronic device 104, or server 108), and perform communication via the established communication channel. The communication module 190 may include one or more communication processors that can operate independently from the processor 120 (e.g., an application processor (AP)) and support direct (e.g., wired) communication or wireless communication. According to an embodiment, the communication module 190 may include a wireless communication module 192 (e.g., a cellular communication module, a short-range wireless communication module, or a global navigation satellite system (GNSS) communication module) or a wired communication module 194 (e.g., a local area network (LAN) communication module or a power line communication (PLC) module). A corresponding one of these communication modules can communicate with an external electronic device via a first network 198 (e.g., a short-range communication network such as Bluetooth, Wireless Fidelity (Wi-Fi) Direct, or Infrared Data Association (IrDA)) or a second network 199 (e.g., a long-range communication network such as a cellular network, the Internet, or a computer network (e.g., a LAN or a wide area network (WAN))). These various types of communication modules can be implemented as a single component (e.g., a single chip), or these various types of communication modules can be implemented as multiple components separated from each other (e.g., multiple chips). The wireless communication module 192 can identify and authenticate the electronic device 101 in a communication network (such as the first network 198 or the second network 199) using user information (e.g., an International Mobile Subscriber Identity (IMSI)) stored in the user identification module 196.

[0061] The antenna module 197 may transmit or receive a signal or power to or from the outside of the electronic device 101 (e.g., an external electronic device). According to an embodiment, the antenna module 197 may include an antenna including a radiating element, which is implemented by using a conductive material or a conductive pattern formed in or on a substrate (e.g., a PCB). According to an embodiment, the antenna module 197 may include a plurality of antennas. In this case, at least one antenna suitable for a communication scheme used in a communication network (such as the first network 198 or the second network 199) may be selected from the plurality of antennas by, for example, the communication module 190 (e.g., the wireless communication module 192). A signal or power may then be transmitted or received between the communication module 190 and the external electronic device via the selected at least one antenna. According to an embodiment, another component (e.g., a radio frequency integrated circuit (RFIC)) other than the radiating element may be additionally formed as a part of the antenna module 197.

[0062] At least some of the above components may be connected to each other via an inter-peripheral communication scheme (e.g., a bus, a general purpose input output (GPIO), a serial peripheral interface (SPI), or a mobile industry processor interface (MIPI)) and communicatively transmit signals (e.g., commands or data) therebetween.

[0063] According to an embodiment, a command or data may be sent or received between the electronic device 101 and the external electronic device 104 via a server 108 connected to the second network 199. Each of the electronic devices 102 and 104 may be a device of the same type as the electronic device 101, or a device of a different type from the electronic device 101. According to an embodiment, all or some operations to be performed on the electronic device 101 may be performed in one or more of the external electronic devices 102, 104, or 108. For example, if the electronic device 101 should automatically perform a function or service or should perform a function or service in response to a request from a user or another device, the electronic device 101 may request the one or more external electronic devices to perform at least part of the function or service instead of or in addition to performing the function or service. The one or more external electronic devices that receive the request may perform at least part of the requested function or service, or perform another function or another service related to the request, and transmit the result of the execution to the electronic device 101. The electronic device 101 may provide the result as at least a partial reply to the request with or without further processing the result. To this end, for example, cloud computing technology, distributed computing technology, or client-server computing technology may be used.

[0064] Figure 2 An electronic device 201 (eg, Figure 1 The electronic device 101) establishes a connection with the external electronic device 202 (for example, Figure 1 A device-to-device connection structure for the communication connection between the electronic device 102 and the electronic device 104).

[0065] The electronic device 201 according to the embodiment may include a processor 221, a memory 222, and a short-range wireless communication circuit 223. According to another embodiment, the electronic device 201 may further include a long-range wireless communication circuit 224 configured to communicate with the server 203. In this case, the short-range wireless communication circuit 223 and the long-range wireless communication circuit 224 may be configured as separate chips or modules, or may be formed as one chip or module. According to the embodiment, the electronic device 201 may communicate with the server 203 through a long-range wireless communication protocol (e.g., supporting Figure 1The processor 221 may perform control by executing instructions stored in the memory 222 to operate the electronic device 201.

[0066] According to an embodiment, the external electronic device 202 may include a processor 231, a memory 232, and a short-range wireless communication circuit 233. According to another embodiment, the external electronic device 202 may further include a long-range wireless communication circuit 234 configured to communicate with the server 203. In this case, the short-range wireless communication circuit 233 and the long-range wireless communication circuit 234 may be separate chips or modules, or may be formed as one chip or module (e.g., Figure 1 According to an embodiment, the external electronic device 202 can communicate with the user through a long-range wireless communication protocol (e.g., supporting Figure 1 The processor 231 may perform control by executing instructions stored in the memory 232 to operate the external electronic device 202.

[0067] According to an embodiment, in order to share content, the electronic device 201 may establish a communication connection 210 for transmitting and receiving data with the external electronic device 202. The communication connection 210 may be, for example, a peer-to-peer (P2P) communication connection (such as a WiFi ad hoc method), a mobile access point, and a WiFi direct connection. The content may be data stored in the memory 222 or stored by the electronic device 201 (e.g., Figure 1 The content may be data outputted by the display device 160 or the sound output device 155 of the electronic device. For example, the content may include multimedia data or text data stored in the memory 222. Alternatively, the content may include at least a portion of a page or link address displayed on the display of the electronic device by a browser.

[0068] In order to establish a communication connection 210 with the external electronic device 202, the electronic device 201 may activate a communication module (eg, Figure 1 The electronic device 201 may display a list of nearby devices to indicate information such as the model names of the nearby devices; however, it is difficult for the user to know which device is the device the user wants to connect to only from the model name.

[0069] Furthermore, if the electronic device 201 is automatically connected with the external electronic device 202, there is a risk that a communication connection with an untrusted device is established, contrary to the user's intention, and data may be transmitted.

[0070] Therefore, according to an embodiment of the present disclosure, the processor 221 may register public certificate data (hereinafter, may be referred to as “first certificate data”) in the server 203, which includes information that can uniquely identify the electronic device 201. In addition, according to an embodiment, the processor 231 of the external electronic device 202 may also register public certificate data (hereinafter, may be referred to as “second certificate data”) in the server 203, which includes information that can uniquely identify the external electronic device 202. For example, the first certificate data may include at least a portion of a key pair generated by the electronic device 201 (e.g., a public key). The second certificate data may include at least a portion of a key pair generated by the external electronic device 202 (e.g., a public key).

[0071] In addition, the electronic device 201 according to an embodiment of the present disclosure may download a certificate list including public certificate data of a trusted device from the server 203. According to another embodiment, the electronic device 201 may not directly receive the certificate list, but may use cloud computing to use the certificate list stored in the server 203. The electronic device 201 may exchange public certificate data with an external electronic device 202 located nearby, and may perform mutual authentication using the public certificate data.

[0072] According to an embodiment of the present disclosure, the electronic device 201 and the external electronic device 202 may register public certificate data associated with a user account logged into the server 203. The server 203 may accept a device that logs into the server 203 based on a user account to access the public certificate data registered in association with the user account. Therefore, if the user's electronic device 201 logs into the server 203 with a user account, the processor 221 may allow the electronic device 201 to access the public certificate data of the device registered by the user in his or her device or download the public certificate data.

[0073] According to an embodiment of the present disclosure, the electronic device 201 and the external electronic device 202 may be devices that log in to the server with the same user account. If a trigger event occurs, the processor 221 may establish a communication connection 210 for sharing content with the external electronic device 202. That is, the user may manipulate the electronic device 201 to share content between multiple devices owned by the user. For example, the electronic device 201 may receive user input for selecting a button for sharing a photo file stored in the memory 222 with another device. For another example, in a state where at least some of the content displayed on the electronic device 201 is selected, the processor 221 may receive a command of "copy" or "paste to another device". A trigger event refers to an instruction for establishing a communication connection through which the electronic device 201 transmits data to the external electronic device 202 or receives data from the external electronic device 202, and is not limited to these examples.

[0074] If the electronic device 201 and the external electronic device 202 log in to the server 203 with a user account, the electronic device 201 and the external electronic device 202 can receive the account key value corresponding to the user account from the server 203 through the long-distance wireless communication circuit 224 or 234. The account key value may include the key value generated by the server 203 for the user account. Therefore, the device logged in with the same user account can receive the same account key value from the server 203. For example, the electronic device 201 can store the account key value in a communication chip including the short-distance wireless communication circuit 223. If user information about the user is registered in the server 203 relative to the user account by the electronic device 201 or another device, the server 203 can generate the account key value based on the user information. For example, the server 203 can obtain the account key value by inputting the user information into the function for generating the account key value. The user information may include information that can identify the user. For example, the user information may include account credentials for the user account.

[0075] The processor 221 may control the short-range wireless communication circuit 223 to broadcast a message including the account key value of the electronic device 201. The short-range wireless communication circuit 223 may communicate with the electronic device 201 via short-range wireless communication (e.g., based on Bluetooth). TMThe processor 221 may modulate the account key by combining the account key with a random number, and may broadcast the modulated account key by including the modulated account key in the message. For example, the processor 221 may modulate the message including the account key by using a bloom filter. The processor 231 of the external electronic device 202 may receive the message through the short-range wireless communication circuit 233. The processor 231 may control the external electronic device 202 so that the external electronic device 202 transmits a message including the account key value of the external electronic device 202 to the electronic device 201 in response to the broadcast message. The processor 221 of the electronic device 201 may identify the external electronic device 202 having the same account key value based on the message received from the external electronic device 202. The electronic device 201 may communicate with the external electronic device 202 through secure communication (for example, through Figure 1 The communication module 190 of the communication module 190 exchanges certificate data with the identified external electronic device 202.

[0076] If the electronic device 201 transmits the first certificate data of the electronic device 201 to the external electronic device 202, the processor 231 of the external electronic device 202 may verify whether the certificate list stored in the server 203 or received from the server 203 includes the first certificate data. If the certificate list includes the first certificate data, the processor 231 may control the external electronic device 202 to transmit the second certificate data of the external electronic device 202 to the electronic device 201. The processor 221 of the electronic device 201 may verify the external electronic device 202 based on whether the certificate list stored in the server 203 or received from the server 203 includes the second certificate data. If the certificate list does not include the first certificate data, the external electronic device 202 may terminate the communication connection without transmitting the second certificate data to the electronic device 201. If the electronic device 201 and the external electronic device 202 authenticate each other using the certificate data, the processor 221 may control the electronic device 201 so that the electronic device 201 and the external electronic device 202 share a session key with each other and form an encryption channel 210 based on the session key. The encryption channel 210 may be configured as a communication connection method capable of transmitting and receiving data, such as an ad hoc method, a mobile access point, and WiFi Direct.

[0077] According to another embodiment, the electronic device 201 and the external electronic device 202 may be devices that log in to the server 203 based on different user accounts. For example, a user may want to transfer content from his or her device to a device of his or her friend located nearby, or receive content from a friend's device. According to an embodiment, the electronic device 201 may receive a certificate list including second certificate data, or may access the certificate list based on user identification information that can identify the correlation between the user of the electronic device 201 and the user of the external electronic device 202. For example, the user identification information may include identification information of the external electronic device 202 stored in a contact storage device (e.g., a contact database configured on the memory 222) of the electronic device 201 (for a more specific example, contact information (such as a phone number, an email address, or a mail account), device-specific identification information (such as an international mobile equipment identity (IMEI)), or service user identification information (such as a social media service account)). The user identification information is not necessarily stored in the electronic device 201, but may be stored in a separate device.

[0078] The processor 221 may control the electronic device 201 to register the first certificate data of the electronic device 201 and the user identification information of the electronic device 201 (hereinafter, may be referred to as "first user identification information") in the server 203. The electronic device 201 according to the embodiment may provide a user identification information list (hereinafter, may be referred to as "first user identification information list") including user identification information about the external electronic device 202 stored by the user of the electronic device 201 (hereinafter, may be referred to as "second user identification information") to the server 203. The user identification information stored by the user of the electronic device 201 and the user identification information stored in the server 203 may be synchronized. That is, if the user identification information stored by the user of the electronic device 201 changes, the user identification information stored in the server 203 may also change according to the changed content. The external electronic device 202 may also register the second certificate data of the external electronic device 202 and the second user identification information of the external electronic device 202 in the server 203. In addition, the external electronic device 202 may also provide the server 203 with a user identification information list (hereinafter, may be referred to as a “second user identification information list”) including first user identification information stored on the electronic device 201 by the user of the external electronic device 202 .

[0079] The server 203 may generate a certificate list based on user identification information provided from the electronic device 201 and the external electronic device 202. According to an embodiment, if the first user identification information list includes the second user identification information, and the second user identification information list includes the first user identification information, the server 203 may determine that the users of the two devices are users who can trust each other. The server 203 may generate a certificate list including the second certificate data (hereinafter, may be referred to as the "first certificate list"). The electronic device 201 may log in with a user account to access the first certificate list or download the first certificate list. In addition, the server 203 may generate a certificate list including the first certificate data (hereinafter, may be referred to as the "second certificate list"). According to an embodiment, the certificate list may be provided in the form of certificate data being added to a user identification information list (e.g., a contact list).

[0080] According to an embodiment, if a trigger event occurs, the processor 221 may control the short-range wireless communication circuit 223 to broadcast a notification packet in response to the detected trigger event. The notification packet may be generated based on the first certificate data. For example, the processor 221 may generate a notification packet to include data modulated by merging the first certificate data with a random value. As another example, the processor 221 may obtain a hash value by inputting the first certificate data into a hash function, and may generate a notification packet to include the obtained hash value. According to another embodiment, the electronic device 201 may obtain a shared key shared with the external electronic device 202, and may generate a notification packet based on the shared key to include the encrypted first certificate data.

[0081] The processor 231 of the external electronic device 202 may receive the broadcasted announcement packet through the short-range wireless communication circuit 233. The processor 231 may obtain the first certificate data from the received announcement packet. The processor 231 may verify the electronic device 201 based on whether the obtained first certificate data is included in the certificate list provided from the server 203. For example, if the hash value of the first certificate data is included in the announcement packet, the first certificate data may be obtained based on the hash value. For another example, the certificate list includes the hash value of the certificate data, and the processor 231 may verify the electronic device 201 by comparing the hash values ​​with each other.

[0082] If the verification of the electronic device 201 is successfully completed, the external electronic device 202 may transmit a response packet including the second certificate data to the electronic device 201. If the electronic device 201 is not verified, the external electronic device 202 may not transmit the response packet. The processor 221 of the electronic device 201 may obtain the second certificate data from the received response packet. The processor 221 may verify the external electronic device 202 based on whether the obtained second certificate data is included in the first certificate list (i.e., whether the certificate data received from the server 203 matches the certificate data obtained from the response packet). For example, if the hash value of the second certificate data is included in the response packet, the second certificate data can be obtained according to the hash value. For another example, the certificate list may include the hash value of the certificate data, and the processor 221 may verify the external electronic device 202 by comparing the hash value. If the verification of the external electronic device 202 is successfully completed, the processor 221 may control the electronic device 201 to form a secure communication channel (i.e., an encrypted channel 210) with the external electronic device 202.

[0083] Figure 3 is a diagram showing an electronic device (eg, Figure 2 The electronic device 201) establishes a connection with an external electronic device (eg, Figure 2 Flowchart 300 of the process of communicating with an external electronic device 202).

[0084] In operation 310, the electronic device may detect a trigger event. For example, if the electronic device uses a camera (e.g., Figure 1 If the electronic device receives a user input of selecting a "copy" item to save data on the clipboard, or receives a user input of selecting a "paste to another device" item when the data is saved on the clipboard, the electronic device may determine that a trigger event has occurred.

[0085] In operation 320, the electronic device may identify an external electronic device located nearby. For example, the electronic device may transmit (eg, broadcast) an announcement packet through a short-range wireless communication signal, and may receive a response packet from the external electronic device in response to the announcement packet.

[0086] In operation 330, the electronic device may perform mutual authentication based on the first certificate data of the electronic device and the second certificate data of the external electronic device. The electronic device and the external electronic device according to the embodiment may have public certificate data for trusted devices in advance. Alternatively, according to the embodiment, the electronic device and the external electronic device may access a public certificate stored on a server (e.g., Figure 2 The server 203) stores the certificate data in the received certificate data to verify the received certificate data.

[0087] In operation 340, the electronic device may determine whether the external electronic device is successfully authenticated. If the external electronic device is successfully authenticated, the electronic device may establish a secure communication channel with the external electronic device in operation 350. When the triggering event is a command to transfer content data to the external electronic device, the electronic device may transmit the data to the external electronic device through the established secure communication channel.

[0088] Figure 4 is a diagram showing a method in which an electronic device 401 (eg, Figure 2 The electronic device 201) establishes a connection with the external electronic device 402 (eg, Figure 2 Flowchart 400 of the process of communicating with an external electronic device 202).

[0089] In operation 411, the electronic device 401 can receive a message from a logged-in external server (eg, Figure 2 In addition, in operation 412, the external electronic device 402 may receive the same account key value from the external server via a long-range wireless communication protocol.

[0090] If a trigger event is detected in operation 413, the electronic device 401 may broadcast a message including the account key value via a short-range wireless communication (e.g., BLE communication) signal in operation 415. The external electronic device 402 may scan the short-range wireless communication signal periodically or within a specified period of time to receive the broadcast signal.

[0091] If the external electronic device 402 receives the broadcast message in operation 417, the electronic device 401 and the external electronic device 402 can recognize that the electronic device 401 (which is the user's device) and / or the external electronic device 402 is located within a short distance range (e.g., a threshold distance) based on the account key value in operation 419. If the external electronic device 402 is recognized, the electronic device 401 can activate a processor (e.g., an application processor) of the electronic device 401, and can form an encrypted channel to exchange certificates with the recognized external electronic device 402.

[0092] In operation 421, the electronic device 401 may transmit first certificate data of the electronic device to the external electronic device 402, so as to attempt mutual authentication with the external electronic device 402. If the first certificate data is received, the external electronic device 402 may authenticate the electronic device 401 based on the first certificate data in operation 423. According to an embodiment, the external electronic device 402 may authenticate the electronic device 401 through a process that is the same as or similar to operation 427.

[0093] If the verification of the electronic device 401 is successfully completed, in operation 425, the external electronic device 402 may transmit the second certificate data of the external electronic device 402 to the electronic device 401. In operation 427, the electronic device 401 may verify the external electronic device 402 based on the received second certificate data. In order to verify the external electronic device 402, the electronic device 401 according to the embodiment may determine that if the certificate list including the certificate data of at least one device registered as a trusted device in the user account includes the second certificate data, the external electronic device 402 is verified. The electronic device 401 according to the embodiment may obtain a certificate list for verifying the external electronic device 402 from an external server. If the verification of the external electronic device 402 is successfully completed in operation 427, in operation 429, the electronic device 401 may share a session key with the external electronic device 402, and a secure communication channel for communication may be established based on the session key.

[0094] Figure 5 is a diagram showing an electronic device (eg, Figure 2 Flowchart 500 of a process of obtaining a shared account key value and obtaining a certificate list of an electronic device 201. The information transmission between the electronic device and the external server described below can be performed through a long-range wireless communication protocol.

[0095] In operation 510, the electronic device may log in to an external server (eg, Figure 2 For example, the electronic device may register user information to an external server through a service subscription process, create a user account, and then perform a login session with the external server based on the created user account.

[0096] In operation 520, the electronic device may transmit user-specific information for identifying the user to an external server. For example, the electronic device may transmit account credentials of a user account to the external server. The external server receiving the user-specific information may generate an account key value based on the user-specific information. In operation 530, the electronic device may receive the account key value generated by the external server.

[0097] The electronic device may generate certificate data. For example, the electronic device may generate a key pair including a private key and a public key generated based on a unique seed value of the electronic device. Here, the public certificate data to be shared externally may include the public key. In operation 540, the electronic device may register the public certificate data in an external server. The external server may register the public certificate data for the user account logged in by the electronic device.

[0098] The operation of registering certificate data in an external server may be performed by multiple devices. If operations 510 to 540 are performed by the same user account, the external server may register multiple certificate data for one user account. The external server may generate a certificate list including data of one or more certificates registered for one user account. In operation 550, the electronic device may receive the certificate list from the external server.

[0099] Figure 6 is a diagram showing a method in which an electronic device 601 (eg, Figure 2 The electronic device 201 of the user establishes a connection with another user's external electronic device 602 (eg, Figure 2 Flowchart 600 of the process of communicating with an external electronic device 202).

[0100] If a trigger event is detected in operation 611 , then in operation 613 , the electronic device 601 may broadcast a notification packet including first credential data of the electronic device 601 .

[0101] If the external electronic device 602 receives the announcement packet in operation 615, the external electronic device 602 may authenticate the electronic device 601 based on the first certificate data included in the announcement packet in operation 617. According to an embodiment, the external electronic device 602 may authenticate the electronic device 601 through a process identical or similar to operation 621.

[0102] If the verification of the electronic device 601 is successfully completed, the external electronic device 602 may transmit a response packet including the second certificate data of the external electronic device to the electronic device 601 in operation 619. In operation 621, the electronic device 601 may verify the external electronic device 602 based on the second certificate data acquired from the received response packet. In order to verify the external electronic device 602, the electronic device 601 according to an embodiment may determine that if a certificate list including certificate data of at least one trusted device from an external server includes the second certificate data, the external electronic device 602 is a verified device.

[0103] According to an embodiment, the electronic device 601 can obtain information from an external server (e.g., Figure 2The external server may obtain a certificate list from the server 203 of the electronic device 601. The external server may obtain a first user identification information list, which includes first user identification information capable of identifying a user of the electronic device 601 and information capable of identifying other users stored by the user of the electronic device 601. The first user identification information and the first user identification information list may be provided by the electronic device 601, but may also be provided by another device that logs in to the external server with the same user account as the electronic device 601. In addition, the external server may obtain a second user identification information list, which includes second user identification information capable of identifying a user of the external electronic device 602 and information capable of identifying other users stored by the user of the external electronic device 602. The second user identification information and the second user identification information list may be provided by the external electronic device 602, but may also be provided by another device that logs in to the external server with the same user account as the external electronic device 602. If the first user identification information list includes the second user identification information, and the second user identification information list includes the first user identification information, the external server may provide a certificate list including the second certificate data of the external electronic device 602 to the electronic device 601. For example, if a user using a smartphone assigned with 1234 as a phone number stores contact information with phone number 5678 in the contact storage of the smartphone, and a user using a smartphone assigned with 5678 as a phone number stores contact information with phone number 1234 in the contact storage of the smartphone, the external server receiving the contact information from the two smartphones may determine that the two devices are mutually trusted devices. If the authentication of the external electronic device 602 is successfully completed in operation 621, in operation 623, the electronic device 601 may share a session key with the external electronic device 602, and a secure communication channel for communication may be established based on the session key.

[0104] Figure 7 The present invention conceptually illustrates a method for performing a process ... Figure 2 The electronic device 201) receives data from the server 703 (eg, Figure 2 A method for obtaining a certificate list from a server 203).

[0105] refer to Figure 7, the electronic device 701 is a device assigned with a telephone number 000-xxxx-yyyy as the first user identification information 711. The electronic device 701 may generate first certificate data 712, which is unique digital information capable of clearly identifying the electronic device 701. The electronic device 701 may store a first user identification information list 713 including the second user identification information 714. If the electronic device 701 logs in to the server 703, the electronic device 701 may transmit the first user identification information 711, the first certificate data 712, and the first user identification information list 713 to the server 703.

[0106] refer to Figure 7 , the external electronic device 702 is a device to which the telephone number 010-aaaa-bbbb as the second user identification information 721 may be assigned. The external electronic device 702 may generate the second certificate data 722, which may also be unique information capable of clearly identifying the external electronic device 702. The external electronic device 702 stores the second user identification information list 723 including the first user identification information 724. If the external electronic device 702 logs in to the server 703, the external electronic device 702 may transmit the second user identification information 721, the second certificate data 722, and the second user identification information list 723 to the server 703.

[0107] The server 703 may compare the first user identification information 711 with the second user identification information list 723, and may compare the second user identification information 721 with the first user identification information list 713. The server 703 may provide the certificate lists 715 and 725 generated based on the comparison result to the electronic device 701 and the external electronic device 702, respectively. According to an embodiment, if the second user identification information list 723 includes the first user identification information 711, and the first user identification information list 713 includes the second user identification information 721, the certificate list 715 may include the second certificate data 722, and the certificate list 725 may include the first certificate data 712. Figure 7An embodiment is shown in which the first certificate data 712 and the second certificate data 722 are transmitted through the certificate lists 715 and 725, respectively; however, according to another embodiment, the server 703 may include the second certificate data 722 in the first user identification information list 713, and then transmit the first user identification information list 713 to the electronic device 701, and may include the first certificate data 712 in the second user identification information list 723, and then transmit the second user identification information list 723 to the external electronic device 702. According to another embodiment, the server 703 may include the certificate list 715 including the second certificate data 722 in the first user identification information list 713, and then transmit the first user identification information list 713 to the electronic device 701, and may include the certificate list 725 including the first certificate data 712 in the second user identification information list 723, and then transmit the second user identification information list 723 to the external electronic device 702.

[0108] Figure 8 Conceptually illustrating an electronic device ( Figure 7 701) and external electronic equipment ( Figure 7 An example of a certificate list obtained by 702).

[0109] refer to Figure 8 , by electronic equipment ( Figure 7 The certificate list 815 obtained by 701 includes the external electronic device ( Figure 7 702) of the user identification information 801 and the second certificate data 802. In addition, by the external electronic device ( Figure 7 The certificate list 825 obtained by 702 may include electronic devices ( Figure 7 701) user identification information 803 and first certificate data 804.

[0110] Although Figure 8 Not shown, but according to other embodiments, the electronic device ( Figure 7 701) and external electronic equipment ( Figure 7 702) can obtain the certificate data of the corresponding device through the user identification information list without receiving a separate certificate list (815 or 825). Figure 7 701) can be obtained from the server ( Figure 7 703) obtains an external electronic device ( Figure 7 702) of the user identification information 801 and the first user identification information list of the second certificate data 802 ( Figure 7 713), and external electronic devices ( Figure 7 702) can be obtained from the server ( Figure 7 703) obtains electronic equipment ( Figure 7 701) of the user identification information 803 and the second user identification information list of the first certificate data 804 ( Figure 7 of 723).

[0111] Fig. 9 is a diagram showing an electronic device 901 (eg, Figure 2 electronic device 201) and an external electronic device 902 (eg, Figure 2 Flowchart 900 of a process for performing mutual authentication by an external electronic device 202).

[0112] As electronic device 901 successfully identifies external electronic device 902 (e.g., Figure 4 As a result of operations 415 to 419), next in operation 911, the electronic device 901 according to the embodiment may establish a communication connection with the external electronic device 902 based on a generic attribute profile (GATT).

[0113] In operation 913, the electronic device 901 according to the embodiment may exchange keys with the external electronic device 902 based on the transport layer security (TLS) protocol. Here, the exchanged keys may include the first certificate data of the electronic device 901 and the second certificate data of the external electronic device 902. The electronic device 901 and the external electronic device 902 may perform mutual authentication based on TLS. If the mutual authentication is successful, the electronic device 901 may transmit data (e.g., content) to the external electronic device 902.

[0114] If the electronic device 901 and the external electronic device 902 successfully authenticate each other (915), the electronic device 901 and the external electronic device 902 may establish a secure communication connection in operation 917. If the electronic device 901 and the external electronic device 902 cannot authenticate each other (919), the electronic device 901 may terminate the GATT-based communication connection in operation 921.

[0115] If the electronic device 901 performs an operation to identify the external electronic device, and the external electronic device 902 is not identified (920), a process between the electronic device 901 and the external electronic device 902 may not be performed.

[0116] exist Fig. 9In the example of , the electronic device 901 and the external electronic device 902 can generate a secure connection 915 after mutual authentication (e.g., operation 913). The electronic device 901 and the external electronic device 902 can share a personal identification code (PIN) to generate a secure channel through the secure connection 915. For example, the PIN code can be used to generate a secure network channel. The secure network channel can be accessed by electronic devices (e.g., the electronic device 901 and the external electronic device 902) with corresponding PIN codes. In this case, the electronic device 901 can share a PIN code with another trusted external electronic device to allow the external electronic device to access the secure network channel.

[0117] Fig.10 is a diagram showing an electronic device (eg, Figure 2 The electronic device 201) obtains an external electronic device (for example, Figure 2 Flowchart 1000 of a process for obtaining certificate data of an external electronic device 202).

[0118] In operation 1010, the electronic device may log in to the external server using the user account. According to an embodiment, the electronic device may display a service subscription screen to perform a service subscription process for generating a user account on the external server, and may receive information for service subscription. By using the service subscription screen, the electronic device may receive user input regarding consent to provide the first user identification information and the second user identification information.

[0119] In operation 1020, the electronic device may register first user identification information that can be used to identify a user in an external server. The electronic device may generate first certificate data, and may register the generated first certificate data in the external server. In operation 1030, the electronic device that registers the first user identification information and the first certificate data may transmit second user identification information to the external server, and the second user identification information may be identification information that identifies a trusted user. The second user identification information may be information stored by a user of the electronic device, or information extracted by the user of the electronic device from a separate device that stores identification information.

[0120] If an external electronic device that registers the second user identification information as its own identification information on an external server transmits the first user identification information as identification information of a trusted device to the external server, then in operation 1040, the electronic device can obtain second certificate data corresponding to the second user identification information from the external server.

[0121] Fig.11 An electronic device 1101 (eg, Figure 2Example of a transmission protocol for identifying an external electronic device 1102 (eg, external electronic device 202) by using data modulated with a random value

[0122] The electronic device 1101 according to an embodiment may use a hash algorithm (eg, SHA-256) to obtain a hash value from the selected account key 1111. The electronic device 1101 may obtain a true / false array 1113 for the account key 1111 by applying a Bloom hash filter to the obtained hash value.

[0123] The electronic device 1101 may generate a random value, and may obtain a true / false array 1115 for the random value by applying a Bloom hash filter to the generated random value. The electronic device 1101 may generate a final true / false array 1117 by performing at least one OR operation on the true / false array 1115 for the random value. The electronic device 1101 may broadcast the Bloom filter 1117 configured in the final true / false array.

[0124] The external electronic device 1102 may obtain a hash value from the selected account key using a hash algorithm, and may obtain a true / false array 1121 by applying a Bloom hash filter to the obtained hash value. If the external electronic device 1102 receives the broadcasted Bloom filter 1117, the external electronic device 1102 may recognize with a high probability that the electronic device 1101 is nearby compared to the true / false array 1121.

[0125] The application processors (eg, Figure 1 The processor 120) can be Fig.11 The process shown is activated (or awakened).

[0126] The characteristic of Bloom filter is that negative error will not occur, in which although it is determined by Bloom filter that an element does not belong to the set, in fact, the element belongs to the set. Therefore, if the account-based signal generated in electronic device 1101 is modulated and transmitted by utilizing the characteristics of Bloom filter, it will not happen that the verification process is not performed even if the external electronic device 1102 is the user's device, and it is very unlikely that the verification process will be performed even if the external electronic device 1102 is not the user's device, thereby making it possible to identify the user's device with high accuracy.

[0127] In addition, the data structure of the Bloom filter is characterized by a small footprint. Therefore, data can be transmitted in real time via a short-range wireless communication signal (such as a BLE signal) that transmits small data. If the method for modulating the signal transmitted by the electronic device 1101 is changed, privacy and tracking issues that the user is unaware of can be prevented.

[0128] Fig.12 An electronic device 1201 (eg, Figure 2 An example of an electronic device 201) detecting a trigger event through a user interface.

[0129] According to an embodiment, the electronic device 1201 may output a user interface item 1210 to receive a user input detected as a trigger event, thereby establishing a connection with an external electronic device (eg, Figure 2 For example, referring to the communication connection of the external electronic device 202. Fig.12 , electronic device 1201 can detect a touch input selecting a user interface item 1210 requesting that image 1205 be transmitted to a nearby device.

[0130] The electronic device 1201 according to an embodiment may perform a process for establishing a communication connection with a nearby external electronic device (eg, Figure 3 300 Figure 4 of 400 and Figure 6 of 600).

[0131] Fig.13 The present invention conceptually illustrates a method in which an electronic device 1301 (eg, Figure 2 The electronic device 201) verifies the nearby external electronic device 1302 (for example, Figure 2 external electronic device 202) and establish a communication connection structure.

[0132] The electronic device 1301 according to the embodiment may register the first certificate data of the electronic device 1301 in the server 1303. The server 1303 may obtain the second certificate data of the external electronic device 1302 from the external electronic device 1302. The server 1303 may generate a certificate list of devices that the electronic device 1301 can trust among the devices that register the certificate data in the server 1303. For example, if two devices log in to the server 1303 with the same user account, or if the two devices have each other's user identification information, the server 1303 may determine that the two devices are mutually trusted devices. The electronic device 1301 may obtain a certificate list including the second certificate data 1312 from the server 1303.

[0133] The electronic device 1301 may establish a secure communication connection 1320 with an external electronic device 1302 located in a nearby device 1330, wherein the second certificate data 1312 of the external electronic device 1302 is included in the certificate list of the electronic device 1301, and the external electronic device 1302 has the first certificate data 1311 of the electronic device 1301. The electronic device 1301 may not establish a communication connection with the device 1304, wherein the certificate data of the device 1304 is not included in the certificate list of the electronic device 1301, or the device 1304 does not have the first certificate data of the electronic device 1301.

[0134] Fig.13 The embodiment in which the certificate data is generated according to a separate certificate list is shown; however, according to other embodiments, the certificate list or the certificate data may be included in the user identification information list. For example, the server 1303 may insert the second certificate data of the external electronic device 1302 or the certificate list including the second certificate data into the user identification information list of the electronic device 1301 (e.g., Figure 7 ), and the electronic device 1301 can obtain the second certificate data through the first user identification information list 713 received from the server 1303.

[0135] Fig.14 An example of screens displayed by the electronic device 1301 and the external electronic device 1302 both “logged in” with the same user account is shown in the process of the electronic device 1301 sharing content over a communication channel with the external electronic device 1302 according to an embodiment.

[0136] The electronic device 1301 according to an embodiment can receive data from an external server (eg, Figure 2 The server 203 of the external server receives the device identification information about the external electronic device 1302 registered in the external server and the certificate of the external electronic device 1302. The device identification information may be, for example, a nickname set by a user of the external electronic device 1302 registered in the external server. Alternatively, the device identification information about the external electronic device 1302 may be set locally on the electronic device 1301. If a communication connection with the external electronic device 1302 is established (for example, Figure 4 429), the electronic device 1301 according to an embodiment may display a visual item 1410 representing device identification information about the external electronic device 1302.

[0137] According to an embodiment, the electronic device 1301 may display a device list including device identification information of at least one external electronic device 1302 indicating that mutual authentication has been completed. If a user input is received to select device identification information indicating the external electronic device 1302 in the device list, the electronic device 1301 may transmit data for sharing content to the external electronic device 1302.

[0138] If content is received through a communication connection connected with the electronic device 1301 , the external electronic device 1302 according to an embodiment may display a visual item 1420 indicating device identification information representing the electronic device 1301 transmitting the content.

[0139] Fig.15 An example of screens displayed by the electronic device 1301 and the external electronic device 1302 of another user in a process in which the electronic device 1301 shares content using a communication channel connected with the external electronic device 1302 according to an embodiment is shown.

[0140] The electronic device 1301 may store the second certificate data of the certificate list and the second user identification information of the external electronic device 1302 in association with each other in a storage device (e.g., a contact storage device) of the electronic device 1301. For example, if the second user identification information is the father's contact information, the electronic device 1301 may store the father's contact information including the second certificate data. Alternatively, the electronic device 1301 may store the father's contact information from an external server (e.g., Figure 2 The server 203) receives the contact information including the second certificate data.

[0141] If a communication connection with the external electronic device 1302 is established based on the second certificate data, the electronic device 1301 can display the external electronic device 1302 through a display (eg, Figure 1 The display device 160 of the user device 160 displays a visual item 1510 representing the second user identification information. The visual item 1510 representing the second user identification information may be, for example, a nickname included in the contact information.

[0142] According to an embodiment, the electronic device 1301 may display a device list including user identification information of at least one external electronic device 1302 indicating that mutual authentication has been completed. If a user input is received to select user identification information indicating the external electronic device 1302 in the device list, the electronic device 1301 may attempt to transmit data for sharing content to the external electronic device 1302.

[0143] If content is received through a communication connection established based on the first credential data of the electronic device 1301 , the external electronic device 1302 according to an embodiment may display a visual item 1520 indicating first user identification information representing the electronic device 1301 .

[0144] Fig.16 A setting UI 1602 of an electronic device according to an embodiment is shown.

[0145] exist Fig.16 In the electronic device 1601 (for example, Figure 2 The electronic device 201 of the embodiment of the present invention may provide a setting UI 1602 on the display 1660. For example, the setting UI 1602 may provide settings for sharing content. For example, the setting UI 1602 may include an interface 1610 (e.g., a selectable on-screen toggle) for setting activation of content sharing. For example, the electronic device 1601 may activate or deactivate the content sharing function based on an input to the interface 1610.

[0146] For example, the setting UI 1602 may provide a content sharing range setting. If the electronic device 1601 is set to the "friend" mode 1620, the electronic device 1601 is limited to sharing content with a known contact, which may correspond to an external electronic device previously stored in the contact list of the electronic device 1601 and other electronic devices of the user. If the electronic device 1601 is set to the "all" mode 1630, the electronic device 1601 may share content with all nearby external electronic devices. For example, in the friend mode 1620, even if the electronic device 1601 receives a notification package from an electronic device other than the user's electronic device and / or an external electronic device that is not stored in the contact, the electronic device 1601 may not display the notification package on the display 1660.

[0147] According to an embodiment, when content sharing is activated (for example, when sharing is activated in response to receiving an input to the interface 1610), or when an input indicating completion is received in a state where content sharing is activated (for example, an input of selecting a “done” button 1640), the electronic device 1601 may broadcast a notification signal (for example, Figure 4 Operation 415 or Figure 6 Operation 613).

[0148] Fig.17 A sharing UI 1701 of an electronic device according to an embodiment is shown.

[0149] For example, electronic device 1601 (eg, Figure 2The electronic device 201) may display a sharing UI 1701 on the display 1660, which provides information about the identified external electronic device and allows selection. For example, the external electronic device displayed on the sharing UI 1701 may be an external electronic device identified by receiving a notification signal from the external electronic device.

[0150] According to an embodiment, the electronic device 1601 may generate a list of external electronic devices based on the type of the external electronic device. For example, the sharing UI 1701 may include a list 1710 of "owned" electronic devices (e.g., "my devices"), a contact-based device list 1720, and another electronic device list 1730. The list 1710 of owned electronic devices may include information about other electronic devices (e.g., a first same account device 1711 and a second same account device 1712) belonging to the same account as the electronic device 1601. The contact-based device list 1720 may include information about external electronic devices (e.g., a first external electronic device 1721, a second external electronic device 1722, and a third external electronic device 1723) that match the contact information of the electronic device 1601. For example, the contact-based device list 1720 may include at least one of the external electronic devices (e.g., a first external electronic device 1721, a second external electronic device 1722, or a third external electronic device 1723) that transmits a signal (e.g., a notification signal) in response to a notification signal transmitted by the electronic device 1601. For example, the electronic device 201 may display the contact-based device list 1720 based on identification information received from an external electronic device (e.g., contact information (such as a phone number, an email address, or a mail account), device-specific identification information (such as an International Mobile Equipment Identity (IMEI)), or service user identification information (such as a social media service account)). The other electronic device list 1730 may include information about electronic devices (e.g., a first other device 1731 and a second other device 1732) that do not belong to the account of the electronic device 1601 and do not match the contact information.

[0151] According to an embodiment, the electronic device 1601 may receive an input for selecting at least one external electronic device to transfer content from a list of external electronic devices (e.g., a list of owned electronic devices 1710, a list of devices based on contacts 1720, or a list of other electronic devices 1730) displayed on the sharing UI 1701. The electronic device 1601 may establish a secure communication channel (e.g., Figure 6 Operation 623).

[0152] According to an embodiment, if an external electronic device having the same account as its own account is found nearby, the electronic device 1601 may display the corresponding external electronic device in the list 1710 of owned electronic devices. For example, the electronic device 1601 may not perform separate mutual authentication for the external electronic device of its own account, and may display the corresponding external electronic device in the list 1710 of owned electronic devices. If the electronic device 1601 transmits data to the external electronic device included in the list 1710 of owned electronic devices, the electronic device 1601 may authenticate the external electronic device by using the certificate data stored in the electronic device 1601. If the authentication is successfully performed, the electronic device 1601 may transmit content (e.g., data) to the corresponding external electronic device.

[0153] According to an embodiment, if an external electronic device included in its own contact storage device is found nearby, the electronic device 1601 may display the external electronic device in the contact-based device list 1720. If data is transmitted to an external electronic device included in the contact-based device list 1720, verification of the external electronic device may be performed. For example, the electronic device 1601 may identify and verify the external electronic device based on data (e.g., certificates and / or hash information associated with the certificates) received from a nearby external electronic device and data (e.g., certificates and / or hash information associated with the certificates) stored in the contacts of the electronic device 1601. For example, when data is transmitted to an external electronic device in the contact-based device list 1720, the electronic device 1601 may perform mutual verification with the external electronic device by using the certificates in the contact storage device. If mutual verification is successfully performed, the electronic device 1601 may transmit the data to the external electronic device.

[0154] According to an embodiment, if an external electronic device other than its own electronic device and the electronic device in the contact is found nearby, the electronic device 1601 may display the external electronic device in the other electronic device list 1730. If data is transmitted to the external electronic device included in the other electronic device list 1730, verification of the external electronic device may be performed. According to an embodiment, the electronic device 1601 may verify the external electronic device included in the other electronic device list 1730 based on a personal identification code (PIN). For example, the electronic device 1601 may not store certificate data for the external electronic device in the other electronic device list 1730. In this case, the electronic device 1601 may generate a PIN code for establishing a secure channel, and may perform mutual verification on the external electronic device based on the PIN code.

[0155] According to an embodiment, the electronic device 1601 may display some of the identified external electronic devices on the shared UI 1701. For example, based on the state of the external electronic device received from the external electronic device, the electronic device 1601 may determine whether to display the external electronic device. If the external electronic device transmits information indicating a screen-off state, the electronic device 1601 may not display the corresponding external electronic device on the shared UI 1701. If the external electronic device transmits information indicating a screen-on state, the electronic device 1601 may display the corresponding external electronic device on the shared UI 1701. If the external electronic device accepts content sharing, the electronic device 1601 may be set to display the corresponding external electronic device on the shared UI 1701.

[0156] exist Fig.17 In the example of Fig.16 , the electronic device 1601 may omit the other electronic device list 1730 from the sharing UI 1701 .

[0157] Fig.18 Examples of icons according to data sharing conditions according to an embodiment are shown.

[0158] According to an embodiment, an electronic device (e.g., Fig.17 The electronic device 1601) can display the status of the external electronic device by sharing the icon of UI 1701. Fig.18 In the description, we can Fig.17 Various status display icons of the first external electronic device 1721.

[0159] According to an embodiment, the electronic device 1601 may display icons based on the communication status. The first icon 1801 indicates that data transmission to the corresponding external electronic device is pending. For example, when data for another external electronic device is being transmitted and the corresponding external electronic device is waiting to receive data after the data transmission to the other external electronic device is completed, the corresponding electronic device may be displayed in a form similar to the first icon 1801. The second icon 1802 indicates that a secure connection with the corresponding external electronic device is being established. For example, when executing Figure 4 When performing operations 415 to 429, the electronic device 1601 may display the external electronic device in a form similar to the second icon 1802. The third icon 1803 indicates that data is being transmitted to the corresponding external electronic device. The fourth icon 1804 indicates that the data transmission to the corresponding external electronic device is successfully completed. The fifth icon 1805 indicates that the data transmission to the corresponding external electronic device has at least partially failed.

[0160] Fig.18The icons shown are only examples, and the embodiments of the present disclosure are not limited thereto. For example, the electronic device 1601 may display the status of the external electronic device by using text information.

[0161] Fig.19 A UI 1991 representing a data sharing status according to an embodiment is shown.

[0162] exist Fig.19 In the example of FIG. 1 , the electronic device 1601 (eg, Figure 2 The electronic device 201) may display a UI 1991 indicating a data sharing status on the display 1660. The electronic device 1601 may provide sharing status information by using icons and text. For example, the first electronic device 1901 may indicate waiting, the second electronic device 1902 may indicate connecting, the third electronic device 1903 may indicate that data cannot be transmitted, the fourth electronic device 1904 may indicate that data is being transmitted, and the fifth electronic device 1905 may indicate that data transmission is completed.

[0163] If an input (eg, a drag input 1990) for activating the notification bar is received, the electronic device 1601 may display a notification on the display 1660. Fig. 20 UI.

[0164] Fig. 20 A UI representing a data sharing status according to an embodiment is shown.

[0165] Referring to reference numeral 2001, in response to Fig.19 By activating an input of the notification bar (eg, drag input 1990), the electronic device 1601 may display a notification bar including a data sharing status notification 2010. The sharing status notification 2010 may include brief information about data sharing (eg, information about an external electronic device to be shared).

[0166] Referring to reference numeral 2002, if an input of a sharing status notification 2010 is received, the electronic device 1601 may provide a specific sharing status. For example, the sharing status information of reference numeral 2001 may include information such as the sharing status information of the user's mobile phone or the mobile phone. Fig.19 The UI 1991 indicating the sharing status may provide more specific information. For example, for the third electronic device 1903, the electronic device 1601 may display on the display 1660 how many files cannot be transferred. For the fifth electronic device 1905, the electronic device 1601 may display on the display 1660 how many files are successfully transferred.

[0167] Fig.21 A connection request UI in an external electronic device is shown.

[0168] According to an embodiment, an electronic device (e.g., Fig.15The electronic device 1601) may transmit a connection request to the external electronic device 2102 (eg, Figure 2 For example, in the verification of the external electronic device 2102 (for example, Figure 6 After operation 621 of ), and after establishing a secure communication channel (e.g., Figure 6 Before operation 623), the electronic device 1601 may transmit a connection request to the external electronic device 2102. For example, if the connection request is accepted by the external electronic device 2102, the electronic device 1601 may establish a secure communication channel.

[0169] When a connection request is received from an electronic device, Fig.21 The connection request UI may be displayed on the display 2160 of the external electronic device 2102. The connection request UI may include information prompting the user of the external electronic device 2102 to receive content.

[0170] Referring to reference numeral 2191, the connection request UI 2110 may be a pop-up message asking whether to receive a file. For example, the connection request UI 2110 may include information 2113 of a file sender (e.g., Alice), a file number 2112 (e.g., 3), and / or PIN code information 2111 (e.g., 007893). In an example, if the external electronic device 2102 does not obtain information about the file number from the connection request, the file number 2112 may be omitted.

[0171] Referring to reference numeral 2102, the connection request UI 2120 may be a pop-up message asking whether to receive a file. For example, the connection request UI 2120 may include information 2113 of the file sender (e.g., Alice), the number of files 2112 (e.g., 3), and / or a thumbnail 2121 of the file. For example, after transmitting the connection request signal, the electronic device 1601 may transmit the data of the thumbnail 2121 to the external electronic device 2102 by using one or more signals. For another example, the electronic device 1601 may transmit the address (e.g., uniform resource locator (URL) or compressed URL) of the thumbnail 2121 to the external electronic device 2102. For yet another example, the electronic device 1601 may transmit summary information of the file instead of the thumbnail 2121. In this case, the summary information may include information (e.g., text information) extracted based on machine learning on the content to be transmitted.

[0172] According to an embodiment, the external electronic device 2102 may display a connection request UI based on a relationship with the electronic device 1601. For example, if the external electronic device 2102 is an electronic device of an account stored in the contacts of the electronic device 1601, the external electronic device 2102 may display a connection request UI 2120 of reference numeral 2192. As another example, if the external electronic device 2102 is another device (e.g., Fig.17 If the external electronic device 2102 is connected to the electronic device 1601 and the PIN code is used, the external electronic device 2102 can communicate with the electronic device 1601 based on the PIN code. In this case, the external electronic device 2102 can display the connection request UI 2110 of reference numeral 2191.

[0173] If the external electronic device 2102 receives a connection acceptance input (e.g., an input of "accept"), the external electronic device 2102 may transmit a response signal indicating connection acceptance to the electronic device 1601. For example, if a connection acceptance response is received, the electronic device 1601 may establish a secure connection with the external electronic device 2102. If the external electronic device 2102 receives a connection rejection input (e.g., an input of "reject"), the external electronic device 2102 may transmit a response signal indicating connection rejection to the electronic device 1601. In this case, the electronic device 1601 may display information indicating data transmission failure (e.g., Fig.18 The fifth icon 1805).

[0174] As described above, the electronic device disclosed herein may include: a memory configured to store a certificate list including first certificate data of the electronic device and second certificate data of the external electronic device; a short-range wireless communication circuit; and a processor operably connected to the memory and the short-range wireless communication circuit, and the memory may store instructions which, when executed, cause the processor to: detect a trigger event for performing an operation to establish a communication connection with devices surrounding the electronic device; in response to detecting the trigger event, control the short-range wireless communication circuit to broadcast a notification packet generated based on the first certificate data; if a response packet is received from the external electronic device in response to the notification packet, obtain third certificate data from the response packet; verify the external electronic device based on the second certificate data and the third certificate data; and, if the external electronic device is verified, establish a secure communication channel with the external electronic device.

[0175] According to an embodiment of the present disclosure, when the instructions are executed, the processor can: obtain a first hash value from first certificate data using a hash function; generate a notification packet to include the first hash value; obtain third certificate data including a second hash value from a response packet; and verify the external electronic device based on the result of comparing the second hash value with the hash value generated from the second certificate data.

[0176] According to an embodiment of the present disclosure, the electronic device may further include: a long-distance wireless communication circuit, which is configured to communicate with an external server, and when the instruction is executed, it can enable the processor to: register first certificate data and first user identification information about the electronic device in an external server to which the electronic device logs in based on a user account through the long-distance wireless communication circuit.

[0177] According to an embodiment of the present disclosure, the memory can be configured to store second user identification information about an external electronic device, and, when the instructions are executed, can cause the processor to: transmit the second user identification information to an external server to which the electronic device logs in based on a user account via a long-distance wireless communication circuit; and, in response to the second user identification information, receive second certificate data corresponding to the second user identification information from the external server via the long-distance wireless communication circuit.

[0178] According to an embodiment of the present disclosure, the second user identification information may include contact information corresponding to the external electronic device.

[0179] According to an embodiment of the present disclosure, the electronic device may further include a display, and, when the instructions are executed, the processor causes the processor to: display a visual item representing the second user identification information through the display; receive user input of the visual item; and, in response to the user input, transmit content data corresponding to the trigger event to an external electronic device through a secure communication channel using a short-range wireless communication circuit.

[0180] According to an embodiment of the present disclosure, when the instructions are executed, the processor may: obtain a shared key shared with an external electronic device; encrypt the first certificate data based on the shared key; and generate a notification packet including the encrypted first certificate data.

[0181] As described above, the electronic device disclosed herein may include: a memory, which is configured to store first certificate data of the electronic device, first user identification information about an external electronic device, and second certificate data corresponding to the first user identification information; a short-range wireless communication circuit; and a processor, which is operably connected to the memory and the short-range wireless communication circuit, and the memory may store instructions, which, when executed, cause the processor to: receive a notification packet including third certificate data through the short-range wireless communication circuit; compare the third certificate data with the second certificate data in response to receiving the notification packet; if the third certificate data and the second certificate data match, transmit a response packet generated based on the first certificate data to the external electronic device through the short-range wireless communication circuit; and establish a secure communication channel with the external electronic device through the short-range wireless communication circuit based on the external electronic device's response to the transmitted response packet.

[0182] As described above, the electronic device disclosed herein may include: a memory, which is configured to store first certificate data of the electronic device and second certificate data of the external electronic device; a short-range wireless communication circuit; a long-range wireless communication circuit; and a processor, which is operably connected to the memory, the short-range wireless communication circuit and the long-range communication circuit, and the memory may store instructions, which, when executed, enable the processor to: log in to an external server based on a user account through the long-range wireless communication circuit; receive an account key value corresponding to the user account from the external server through the long-range wireless communication circuit; detect a trigger event for performing an operation to establish a communication connection with devices around the electronic device; in response to detecting the trigger event, control the short-range wireless communication circuit to broadcast a message including an account key value to identify an external electronic device having a key value identical to the account key value based on the message; transmit the first certificate data to the external electronic device through the short-range wireless communication circuit; receive third certificate data from the external electronic device through the short-range wireless communication circuit; and verify the external electronic device based on the second certificate data and the third certificate data.

[0183] According to an embodiment of the present disclosure, when the instructions are executed, the processor may: modulate a message using a Bloom filter, and control the short-range wireless communication circuit to broadcast the modulated message.

[0184] According to an embodiment of the present disclosure, when the instructions are executed, the processor can: transmit user-specific information that can identify the user to an external server through a long-distance wireless communication circuit, and receive an account key value generated based on the user-specific information from the external server through the long-distance wireless communication circuit.

[0185] According to an embodiment of the present disclosure, when the instructions are executed, the processor may: register the first certificate data in the external server based on the user account through the long-distance wireless communication circuit.

[0186] According to an embodiment of the present disclosure, when the instructions are executed, the processor may: receive second certificate data registered in the external server from the external server based on the user account through the long-distance wireless communication circuit.

[0187] As described above, the electronic device disclosed herein may include: a memory, which is configured to store first certificate data of the electronic device and second certificate data of the external electronic device; a short-range wireless communication circuit; a long-range wireless communication circuit; and a processor, which is operably connected to the memory, the short-range wireless communication circuit and the long-range communication circuit, and the memory may store instructions, which, when executed, enable the processor to: log in to an external server based on a user account through the long-range wireless communication circuit; receive an account key value corresponding to the user account from the external server through the long-range wireless communication circuit; receive a message including the account key value through the short-range wireless communication circuit; identify an external electronic device having a key value identical to the account key value based on the message; receive third certificate data from the external electronic device through the short-range wireless communication circuit; verify the external electronic device based on the second certificate data and the third certificate data; and, if the verification of the external electronic device is completed, transmit the first certificate data to the external electronic device through the short-range wireless communication circuit.

[0188] As described above, the method disclosed herein for an electronic device to communicate with an external electronic device may include: storing first certificate data of the electronic device and second certificate data of the external electronic device; detecting a trigger event for establishing a communication connection with devices around the electronic device; in response to detecting the trigger event, broadcasting a notification packet generated based on the first certificate data; if a response packet is received from the external electronic device in response to the notification packet, obtaining third certificate data from the response packet; verifying the external electronic device based on the second certificate data and the third certificate data; and, if the external electronic device is verified, establishing a secure communication channel with the external electronic device.

[0189] According to an embodiment of the present disclosure, the method may also include: the electronic device logging in to an external server based on a user account; transmitting second user identification information about the external electronic device to the external server; and, in response to the second user identification information, receiving second certificate data corresponding to the second user identification information from the external server.

[0190] As described above, the method disclosed herein for an electronic device to communicate with an external electronic device may include: storing first certificate data of the electronic device and second certificate data of the external electronic device; receiving a notification packet including third certificate data; in response to receiving the notification packet, comparing the third certificate data with the second certificate data; if the third certificate data and the second certificate data match, transmitting a response packet generated based on the first certificate data to the external electronic device; and, based on a response of the external electronic device to the transmitted response packet, establishing a secure communication channel with the external electronic device.

[0191] As described above, the method disclosed herein for an electronic device to communicate with an external electronic device may include: storing first certificate data of the electronic device and second certificate data of the external electronic device; logging in to an external server based on a user account; receiving an account key value corresponding to the user account from the external server; detecting a trigger event for establishing a communication connection with devices around the electronic device; in response to detecting the trigger event, broadcasting a message including the account key value; identifying an external electronic device having a key value identical to the account key value based on the message; transmitting the first certificate data to the external electronic device; receiving third certificate data from the external electronic device; and verifying the external electronic device based on the second certificate data and the third certificate data.

[0192] According to an embodiment of the present disclosure, the method may further include: receiving second certificate data registered in the external server from the external server based on the user account.

[0193] As described above, the method disclosed herein for an electronic device to communicate with an external electronic device may include: storing first certificate data of the electronic device and second certificate data of the external electronic device; logging in to an external server based on a user account; receiving an account key value corresponding to the user account from the external server; receiving a message including the account key value through a short-range wireless communication circuit; identifying an external electronic device having a key value identical to the account key value based on the message; receiving third certificate data from the external electronic device; verifying the external electronic device based on the second certificate data and the third certificate data; and, if the verification of the external electronic device is completed, transmitting the first certificate data to the external electronic device.

[0194] The electronic device according to a specific embodiment may be one of various types of electronic devices. The electronic device may include, for example, a portable communication device (e.g., a smart phone), a computer device, a portable multimedia device, a portable medical device, a camera, a wearable device, or a household appliance. According to an embodiment of the present disclosure, the electronic device is not limited to those electronic devices described above.

[0195] It should be understood that the specific embodiments of the present disclosure and the terms used therein are not intended to limit the technical features set forth herein to specific embodiments, but include various changes, equivalent forms or alternative forms for corresponding embodiments. For the description of the accompanying drawings, similar reference numerals may be used to refer to similar or related elements. It will be understood that the nouns in the singular form corresponding to the project may include one or more things, unless the relevant context clearly indicates otherwise. As used herein, each of the phrases such as "A or B", "at least one of A and B", "at least one of A or B", "A, B or C", "at least one of A, B and C" and "at least one of A, B or C" may include any one or all possible combinations of the items listed together with the corresponding one of the multiple phrases. As used herein, terms such as "1st" and "2nd" or "first" and "second" may be used to simply distinguish the corresponding component from another component, and do not limit the component in other aspects (e.g., importance or order). It will be understood that if an element (e.g., a first element) is referred to as being “coupled with another element (e.g., a second element)”, “coupled to another element (e.g., the second element)”, “connected with another element (e.g., the second element)” or “connected to another element (e.g., the second element)” when the terms “operably” or “communicatively” are used or when the terms “operably” or “communicatively” are not used, it means that the element may be directly (e.g., wired) connected to the other element, wirelessly connected to the other element, or connected to the other element via a third element.

[0196] As used herein, the term "module" may include a unit implemented in hardware, software, or firmware, and may be used interchangeably with other terms (e.g., "logic," "logic block," "portion," or "circuit"). A module may be a single integrated component adapted to perform one or more functions or a minimum unit or portion of the single integrated component. For example, according to an embodiment, a module may be implemented in the form of an application specific integrated circuit (ASIC).

[0197] The specific embodiments described herein may be implemented as software (e.g., program 140) including one or more instructions stored in a storage medium (e.g., internal memory 136 or external memory 138) that can be read by a machine (e.g., electronic device 101). For example, a processor (e.g., processor 120) of the machine (e.g., electronic device 101) may call at least one of the one or more instructions stored in the storage medium and execute the at least one instruction under the control of the processor with or without the use of one or more other components. This enables the machine to operate to perform at least one function according to the at least one instruction called. The one or more instructions may include code generated by a compiler or code that can be executed by an interpreter. The machine-readable storage medium may be provided in the form of a non-transitory storage medium. Among them, the term "non-transitory" only means that the storage medium is a tangible device and does not include signals (e.g., electromagnetic waves), but the term does not distinguish between data being semi-permanently stored in the storage medium and data being temporarily stored in the storage medium.

[0198] According to an embodiment, the method according to a specific embodiment of the present disclosure may be included and provided in a computer program product. The computer program product may be traded between a seller and a buyer as a product. The computer program product may be released in the form of a machine-readable storage medium (e.g., a compact disk read-only memory (CD-ROM)), or may be downloaded via an application store (e.g., Play Store TM ) The computer program product may be published online (e.g., downloaded or uploaded) or the computer program product may be distributed directly between two user devices (e.g., smartphones). If published online, at least part of the computer program product may be temporarily generated or at least part of the computer program product may be at least temporarily stored in a machine-readable storage medium (such as a memory of a manufacturer's server, an application store's server, or a forwarding server).

[0199] According to a specific embodiment, each of the above-mentioned components (e.g., a module or a program) may include a single entity or multiple entities. According to a specific embodiment, one or more of the above-mentioned components may be omitted, or one or more other components may be added. Alternatively or additionally, multiple components (e.g., modules or programs) may be integrated into a single component. In this case, according to a specific embodiment, the integrated component may still perform the one or more functions of each of the multiple components in the same or similar manner as the corresponding one of the multiple components performs one or more functions before integration. According to a specific embodiment, the operations performed by a module, a program or another component may be performed sequentially, in parallel, repeatedly or in a heuristic manner, or one or more of the operations may be performed in a different order or omitted, or one or more other operations may be added.

Claims

1. An electronic device, comprising: Memory; Short-range wireless communication circuits; and A processor operably connected to a memory and a short-range wireless communication circuit, wherein the memory stores instructions that, when executed, cause the processor to: retrieving a certificate list associated with a single user account of the electronic device from an external server, wherein the certificate list indicates a list of trusted devices, the certificate list is also received by the external electronic device and includes first certificate data of the electronic device and second certificate data of the external electronic device, detecting a triggering event for requesting to establish a communication connection with a device local to the electronic device; In response to detecting a trigger event, controlling the short-range wireless communication circuit to broadcast a notification packet generated based on the first certificate data; After the external electronic device determines that the first certificate data is indicated in the certificate list, receiving a response packet from the external electronic device, and acquiring third certificate data from the received response packet; authenticating the external electronic device based on detecting a match between the second certificate data and the third certificate data of the external electronic device indicated in the certificate list; and If the external electronic device is authenticated, a secure communication channel with the external electronic device is established, The certificate list is generated by an external server based on user information sent by the electronic device. The certificate list is generated by the external server based on transmission of user information of the electronic device and the external electronic device to the external server, and is accessed by the electronic device and the external electronic device by logging in via the single user account.

2. The electronic device according to claim 1, in, When executed, the instruction also causes the processor to: Obtaining a first hash value from the first certificate data using a hash function; wherein the generated announcement packet includes a first hash value, wherein the third certificate data includes a second hash value; and Wherein, verifying the external electronic device includes: comparing the second hash value of the third certificate data with the hash value generated from the second certificate data.

3. The electronic device according to claim 1, further comprising: a long-range wireless communication circuit configured to communicate with the external server, Among them, when the instruction is executed, it also causes the processor to: Logging into an external server based on the single user account, wherein the external electronic device also logs into the external server via the single user account; and The first user identification information and the first certificate data stored on the electronic device are registered in the external server through the long-distance wireless communication circuit.

4. The electronic device according to claim 3, in, When executed, the instruction also causes the processor to: The second user identification information stored in the memory is transmitted to an external server logged in by the electronic device based on the user account through the long-distance wireless communication circuit, and Second certificate data corresponding to the second user identification information is received from an external server through the long-distance wireless communication circuit.

5. The electronic device according to claim 4, wherein: The second user identification information includes contact information corresponding to the external electronic device.

6. The electronic device according to claim 4, further comprising a display, in, When executed, the instruction also causes the processor to: displaying an item representing the second user identification information; and In response to receiving a user input selecting an item, content data corresponding to the detected triggering event is transmitted to an external electronic device over a secure communication channel using a short-range wireless communication circuit.

7. The electronic device according to claim 1, wherein: When executed, the instruction also causes the processor to: obtaining a shared key shared with an external electronic device; and The first certificate data is encrypted based on the shared key, wherein the generated announcement packet includes the encrypted first certificate data.

8. The electronic device according to claim 3, in, When executed, the instruction also causes the processor to: Download a list of certificates from an external server.

9. A method for an electronic device to communicate with an external electronic device, the method comprising: retrieving a certificate list associated with a single user account of the electronic device from an external server, wherein the certificate list indicates a list of trusted devices, the certificate list also being received by the external electronic device and including first certificate data of the electronic device and second certificate data of the external electronic device; Detecting a triggering event for requesting to establish a communication connection with another device local to the electronic device; In response to detecting a trigger event, broadcasting a notification packet generated based on the first certificate data; upon the external electronic device determining that the first certificate data is indicated in the certificate list, receiving a response packet from the external electronic device and acquiring third certificate data from a response packet received in response to the broadcasted announcement packet; authenticating the external electronic device based on detecting a match between the second certificate data and the third certificate data of the external electronic device indicated in the certificate list; as well as establishing a secure communication channel with the external electronic device based on detecting that the external electronic device is authenticated, The certificate list is generated by an external server based on user information sent by the electronic device. The certificate list is generated by an external server based on transmission of the user information by the electronic device and the external electronic device to the external server, and is accessed by the electronic device and the external electronic device by logging in via the single user account.

10. The method according to claim 9, further comprising: Obtaining a first hash value from the first certificate data using a hash function; wherein the generated announcement packet includes a first hash value, wherein the third certificate data includes a second hash value; and Wherein, verifying the external electronic device includes: comparing the second hash value of the third certificate data with the hash value generated from the second certificate data.

11. The method according to claim 9, further comprising: Logging into an external server based on the single user account, wherein the external electronic device also logs into the external server via the single user account; as well as The first user identification information and the first certificate data stored on the electronic device are registered in the external server.

12. The method according to claim 11, further comprising: transmitting the second user identification information stored in the memory to an external server, and Second certificate data corresponding to the second user identification information is received from the external server.

13. The method according to claim 12, wherein: The second user identification information includes contact information corresponding to the external electronic device.

14. The method according to claim 12, further comprising: displaying an item representing identification information of a second user; Receive user input for selecting an item; as well as Content data corresponding to the detected triggering event is transmitted to the external electronic device through a secure communication channel.

15. The method according to claim 9, further comprising: obtaining a shared key shared with an external electronic device; as well as The first certificate data is encrypted based on the shared key, wherein the generated announcement packet includes the encrypted first certificate data.

Images