NFC device communication device, user equipment and communication system

Abstract

This application provides a communication device, user equipment, and communication system for NFC devices, which can improve the user experience of NFC devices. The communication device for the NFC device is used to communicate with both the NFC device and the user equipment. The communication device includes: a first ranging module, a first NFC module, and a first processing module. The first ranging module measures the distance information between itself and the user equipment, and its communication range is greater than that of the first NFC module. The first processing module receives function data sent by the user equipment, and the function data corresponds to a preset function of the NFC device. Based on the distance information and the function data, the first processing module controls the first NFC module to communicate with the NFC device, so that the NFC device executes the preset function. This solution allows the NFC device to complete preset functions without the user's awareness, thereby significantly improving the user experience of NFC devices.

Description

Technical Field

[0001] This application relates to the field of electronic technology, and more specifically, to a communication device, user equipment, and communication system for an NFC device. Background Technology

[0002] With the advancement and development of science and technology, the application of Near Field Communication (NFC) technology has received widespread attention worldwide. Devices using NFC technology (such as mobile phones) can exchange data when they are close to each other, enabling various applications such as mobile payment, electronic ticketing, access control, mobile identity verification, and anti-counterfeiting.

[0003] In some application scenarios, NFC devices can include smart cards and card readers. According to NFC communication protocols, users must hold the card within a certain distance (e.g., 7cm-15cm) of the reader and wave it close to the reader for the reader to read the card information and control other functional devices to perform related operations. If it is inconvenient for the user to wave the card, the card reader cannot cooperate with other functional devices to perform related operations, resulting in a poor user experience.

[0004] Therefore, how to provide an NFC device with a better user experience is a technical problem that urgently needs to be solved. Summary of the Invention

[0005] This application provides a communication device, user equipment, and communication system for NFC devices, which can improve the user experience of NFC devices.

[0006] In a first aspect, a communication device for an NFC device is provided for communicating with an NFC device and a user device. The communication device includes: a first ranging module, a first NFC module, and a first processing module; the first ranging module is used to measure distance information between itself and the user device, and the communication distance of the first ranging module is greater than the communication distance of the first NFC module; the first processing module is used to receive function data sent by the user device, the function data corresponding to a preset function of the NFC device; the first processing module is used to control the first NFC module to communicate with the NFC device based on the distance information and the function data, so that the NFC device performs the preset function.

[0007] The technical solution of this application embodiment establishes a communication device between a user equipment and an NFC device. The user equipment and the NFC device do not need to communicate within a close range via NFC for the NFC device to perform preset functions. Instead, a first ranging module with a longer communication range measures the distance between the user equipment and the NFC device. Based on this distance information, the communication device can pre-control the first NFC module to communicate with the NFC device, enabling the NFC device to perform preset functions to meet user needs. This solution allows the communication device with a longer communication range to control the NFC device to complete preset functions without the user's awareness, thus significantly improving the user experience of the NFC device. Furthermore, the first processing module in the communication device can receive functional data sent by the user equipment and use this functional data and distance information to jointly control the NFC device to perform preset functions. This enhances the user experience of the NFC device while also ensuring the security of the user equipment's control over the NFC device.

[0008] In some possible implementations, the functional data received by the first processing module is encrypted functional data; the first processing module is used to decrypt the encrypted functional data to obtain functional data, and control the first NFC module to communicate with the NFC device based on the distance information and the functional data, so that the NFC device performs a preset function.

[0009] Through the technical solution of this embodiment, the encrypted functional data has high security performance during transmission, which can prevent it from being tampered with or stolen from the outside, thereby ensuring that the first processing module in the communication device can obtain the correct functional data to control the NFC device to perform preset functions.

[0010] In some possible implementations, the first ranging module is used to receive encrypted functional data and send the encrypted functional data to the first processing module; or, the communication device further includes: a first communication module, which is used to receive encrypted functional data and send the encrypted functional data to the first processing module.

[0011] In some possible implementations, where the communication device further includes a first communication module; before the first communication module is used to receive encrypted functional data and send the encrypted functional data to the first processing module, the first communication module is also used to send the public key of the communication device, so that the user equipment can encrypt the functional data according to the public key to obtain encrypted functional data; the first processing module is used to decrypt the encrypted functional data using the private key corresponding to the public key to obtain the functional data.

[0012] Through the technical solution of this implementation, the communication device and the user equipment can perform an effective and highly secure encryption and decryption process, preventing the leakage of functional data and improving the security performance of the entire system.

[0013] In some possible implementations, the first communication module is used to send the public key certificate of the communication device so that the user equipment can verify the communication device based on the public key certificate; if the verification is successful, the first communication module is used to receive encrypted functional data obtained by the user equipment based on the public key in the public key certificate.

[0014] Through the technical solution of this application embodiment, the communication device sends a public key certificate through the first communication module. After the user equipment successfully verifies the public key certificate, it uses the public key to encrypt the functional data and send it. This process can further improve the security performance of functional data transmission, thereby further enhancing the security performance of the entire system.

[0015] In some possible implementations, before the first communication module is used to send the public key of the communication device, the first communication module is also used to perform pairing between the communication device and the user equipment; if the pairing is successful, the first communication module is used to send the public key of the communication device.

[0016] Through the technical solutions of the embodiments of this application, the pairing process between the communication device and the user equipment can also be understood as an authentication process between the communication device and the user equipment, which can further improve the security performance of the entire system.

[0017] In some possible implementations, the communication device further includes: a first communication module; before the first ranging module measures the distance information between itself and the user equipment, the first communication module is also used to perform pairing between the communication device and the user equipment; if pairing is successful, the first communication module is used to wake up the first ranging module so that the first ranging module measures the distance information between itself and the user equipment.

[0018] In this embodiment, the pairing process between the communication device and the user equipment can also be understood as an authentication process between the communication device and the user equipment, which can further improve the security performance of the entire system. Furthermore, before the first communication module wakes up the first ranging module, the first ranging module can be in a sleep state, thereby saving the overall power consumption of the first ranging module and the communication device it resides in.

[0019] In some possible implementations, the communication device further includes: a first communication module; before the first ranging module measures the distance information between itself and the user equipment, the first communication module is also used to perform pairing between the communication device and the user equipment; if pairing is successful, the first communication module is used to transmit ranging configuration parameters between the first ranging module and the user equipment.

[0020] Through the technical solution of this embodiment, the communication device can transmit the ranging configuration parameters of the first ranging module in real time through the first communication module, which facilitates the updating and upgrading of the ranging configuration parameters and makes the ranging performance of the first ranging module better.

[0021] In some possible implementations, the power consumption of the first communication module is less than that of the first ranging module, and / or the communication distance of the first communication module is greater than that of the first ranging module.

[0022] By employing the technical solution of this embodiment, when the power consumption of the first communication module is less than that of the first ranging module, the energy consumption required for the real-time operation of the first communication module can be saved, thereby improving the overall performance of the entire system. When the communication distance of the first communication module is greater than that of the first ranging module, the communication device can achieve data interaction with the user device at a greater distance, thereby enabling the user device to control the NFC device to execute preset functions as early as possible through the communication device, further enhancing the user experience.

[0023] In some possible implementations, the first communication module is a Bluetooth chip.

[0024] The Bluetooth chip, through this implementation method, has advantages such as low power consumption and low cost. It can operate in real time to achieve Bluetooth pairing with user devices, thereby comprehensively improving the security performance of the entire system and reducing energy consumption.

[0025] In some possible implementations, the first ranging module is used to send a first ranging session to the user equipment, receive a first ranging response session sent by the user equipment, and measure distance information between itself and the user equipment based on the first ranging session and the first ranging response session.

[0026] In some possible implementations, the first processing module is further configured to encrypt the first ranging session; the first ranging module is configured to send the encrypted first ranging session to the user equipment and receive the encrypted first ranging response session sent by the user equipment; the first processing module is further configured to decrypt the encrypted first ranging response session.

[0027] Through the technical solution of this embodiment, the ranging session used by the first ranging module for ranging can be encrypted by the first processing module, thereby improving the security performance of the first ranging module in the ranging process, preventing the ranging session from being tampered with and attacked, and thus improving the overall security performance of the NFC device and its system.

[0028] In some possible implementations, the first processing module is used to perform key negotiation with the user equipment to generate a session key; the first processing module is used to encrypt a first ranging session according to the session key, and to decrypt the encrypted first ranging response session according to the session key.

[0029] The session key obtained through key negotiation between the first processing module and the user equipment using this implementation method has high security performance. Utilizing this highly secure session key can further enhance the overall security performance of the NFC device and its system.

[0030] In some possible implementations, the NFC device is an access control device including a card reader, and the functional data of the user device is access control data; the first ranging module is used to determine whether the distance information is within a preset range; if the distance information is within the preset range, the first processing module is used to control the first NFC module to communicate with the access control device based on the access control data, so that the access control device performs the door opening function.

[0031] This technical solution enables seamless access control for users, achieving imperceptible door opening and thus enhancing the user experience. Furthermore, by utilizing a first ranging module with a long communication range to measure the distance between itself and the user device, the communication device can pre-process data with the access control device via a first processing module, allowing the access control device to execute the door opening function in advance. Therefore, this technical solution technically provides the possibility for multiple users to open the door simultaneously.

[0032] In some possible implementations, if the distance information exceeds the preset range after entering the preset range, the first processing module is further configured to stop the first NFC module from communicating with the access control device, so that the access control device performs the door closing function.

[0033] The technical solution of this implementation method not only enables seamless door opening, but also seamless door closing, thereby achieving comprehensive and relatively reliable control of the access control equipment.

[0034] In some possible implementations, the first ranging module is a high-precision ultra-wideband (UWB) chip.

[0035] By utilizing the UWB chip as the first ranging module, the technical solution of this embodiment can measure relatively accurate and secure distance information of the user device. This is beneficial to improving the accuracy of the subsequent first processing module in controlling the NFC device to perform preset functions based on the relatively accurate distance information, thereby further enhancing the user experience.

[0036] In some possible implementations, the first processing module is a security element (SE) chip.

[0037] By utilizing the security element chip as the first processing module to process data such as distance information through the technical solution of this embodiment, the security performance of the communication device can be improved, thereby enhancing the overall security performance of the system in which the communication device is located.

[0038] In some possible implementations, the communication device and the NFC device are separate from each other and arranged adjacent to each other; or, the communication device is integrated into the NFC device.

[0039] In this embodiment, when the communication device and the NFC device are separate yet adjacent, no modifications to the existing NFC device are required. Simply placing the communication device nearby is sufficient to meet practical needs, maximizing compatibility with existing NFC devices and improving the user experience. Furthermore, integrating the communication device within the NFC device facilitates installation and removal during practical applications, enhancing aesthetics.

[0040] In a second aspect, a user equipment is provided, comprising: a second ranging module for measuring distance information between a communication device and a near-field communication (NFC) device, wherein the communication distance of the second ranging module is greater than the communication distance of a first NFC module in the communication device; a second communication module for sending functional data to the communication device, wherein the functional data corresponds to a preset function of the NFC device; and the distance information is used to instruct the communication device to control the first NFC module to communicate with the NFC device according to the functional data, so that the NFC device performs the preset function.

[0041] In some possible implementations, the user equipment further includes: a second processing module for encrypting functional data to obtain encrypted functional data; and a second communication module for sending the encrypted functional data to a communication device.

[0042] In some possible implementations, the second communication module is further configured to receive a public key sent by the communication device; the second processing module is configured to encrypt the functional data according to the public key to obtain encrypted functional data.

[0043] In some possible implementations, the second communication module is used to receive a public key certificate sent by the communication device; the second processing module is used to verify the communication device based on the public key certificate; if the verification is successful, the second processing module is used to encrypt the functional data based on the public key to obtain encrypted functional data.

[0044] In some possible implementations, before the second communication module is used to receive the public key sent by the communication device, the second communication module is also used to perform pairing between the user equipment and the communication device; if the pairing is successful, the second communication module is used to receive the public key sent by the communication device.

[0045] In some possible implementations, before the second ranging module measures the distance information between itself and the communication device, and after the second processing module has successfully verified the communication device based on the public key certificate, the second processing module is used to wake up the second ranging module so that the second ranging module measures the distance information between itself and the communication device.

[0046] In some possible implementations, before the second ranging module is used to measure distance information between the second ranging module and the communication device, the second communication module is also used to transmit ranging configuration parameters between the second ranging module and the communication device.

[0047] In some possible implementations, the power consumption of the second communication module is less than that of the second ranging module, and / or the communication distance of the second communication module is greater than that of the second ranging module.

[0048] In some possible implementations, the second communication module is a Bluetooth module.

[0049] In some possible implementations, the second ranging module is used to receive a first ranging session sent by the communication device and to send a first ranging response session to the communication device. The first ranging session and the first ranging response session are used to measure the distance information between the second ranging module and the communication device.

[0050] In some possible implementations, the second ranging module is used to receive an encrypted first ranging session sent by the communication device; the second processing module is used to decrypt the encrypted first ranging session and encrypt the first ranging response session; the second ranging module is used to send the encrypted first ranging response session to the communication device.

[0051] In some possible implementations, the second processing module is used to perform key negotiation with the communication device to generate a session key; the second processing module is used to decrypt the encrypted first ranging session according to the session key, and to encrypt the first ranging response session according to the session key.

[0052] In some possible implementations, the second processing module is a security element (SE) chip.

[0053] In some possible implementations, the second ranging module is a UWB chip.

[0054] In some possible implementations, the user equipment further includes a second NFC module for communicating with an NFC device to enable the NFC device to perform a preset function.

[0055] In some possible implementations, the NFC device is an access control device, and the functional data is access control data; when the distance information enters a preset range, the distance information is used to instruct the communication device to control the first NFC module to communicate with the access control device according to the access control data, so that the access control device performs the door opening function; when the distance information enters the preset range but then exceeds the preset range, the distance information is used to instruct the communication device to control the first NFC module to stop communicating with the access control device, so that the access control device performs the door closing function.

[0056] Thirdly, a communication method is provided, applied to a communication device including an NFC module. The communication method includes: measuring distance information between the device and a user equipment, wherein the range of variation of the distance information is greater than the communication range of the NFC module; receiving functional data sent by the user equipment, wherein the functional data corresponds to a preset function of the NFC device; and communicating with the NFC device through the NFC module based on the distance information and the functional data, so that the NFC device performs the preset function.

[0057] Fourthly, a communication method is provided for use in a user equipment. The communication method includes: measuring distance information between a communication device and a near-field communication (NFC) device; sending functional data to the communication device, the functional data corresponding to a preset function of the NFC device; wherein the range of variation of the distance information is greater than the communication range of the NFC module in the communication device, and the distance information is used to instruct the communication device to control the NFC module to communicate with the NFC device according to the functional data, so that the NFC device performs the preset function.

[0058] Fifthly, a communication system is provided, comprising: a communication device according to the first aspect or any possible implementation of the first aspect, a user equipment according to the second aspect or any possible implementation of the second aspect, and an NFC device.

[0059] In some possible implementations, the NFC device is an access control device, and the communication device is used to communicate with the NFC device and the user equipment to enable the access control device to perform access control functions. Attached Figure Description

[0060] Figure 1 This is a diagram illustrating an NFC communication system architecture provided in an embodiment of this application.

[0061] Figure 2 This is a schematic structural block diagram of a communication device for an NFC device provided in an embodiment of this application.

[0062] Figure 3A schematic structural block diagram of another communication device provided in an embodiment of this application.

[0063] Figure 4 A schematic structural block diagram of another communication device provided in an embodiment of this application.

[0064] Figure 5 This is a schematic structural block diagram of a user equipment provided in an embodiment of this application.

[0065] Figure 6 A schematic structural block diagram of another user equipment provided in an embodiment of this application.

[0066] Figure 7 A schematic structural block diagram of another user equipment provided in an embodiment of this application.

[0067] Figure 8 A schematic structural block diagram of another user equipment provided in an embodiment of this application.

[0068] Figure 9 This is a schematic structural block diagram of a communication system provided in an embodiment of this application.

[0069] Figure 10 Schematic block diagrams of two other communication systems provided in the embodiments of this application.

[0070] Figure 11 This is a schematic flowchart illustrating a communication method provided in an embodiment of this application.

[0071] Figure 12 A schematic flowchart illustrating another communication method provided in an embodiment of this application.

[0072] Figure 13 A schematic flowchart illustrating another communication method provided in an embodiment of this application. Detailed Implementation

[0073] The technical solutions in this application will now be described with reference to the accompanying drawings.

[0074] This application relates to NFC technology, and devices using NFC technology are collectively referred to as NFC devices in this application. For example, NFC devices include, but are not limited to, smart cards, card readers, mobile phones, smartwatches, etc. These NFC devices can be applied to various scenarios such as access control systems, payment systems, ticketing systems, and attendance systems.

[0075] Figure 1 A schematic diagram of an NFC communication system architecture provided in an embodiment of this application is shown.

[0076] like Figure 1 As shown, the NFC communication system 10 typically includes two NFC devices, for example, Figure 1 The first NFC device 101 and the second NFC device 102 shown are illustrated. Both the first NFC device 101 and the second NFC device 102 are equipped with coils and related circuits, and data transmission between them is achieved through the radio frequency field generated by the coils.

[0077] In some scenarios, the first NFC device 101 may be a POS machine including a card reader, and the second NFC device 102 may be a card that communicates with the POS machine via NFC. In other scenarios, the first NFC device 101 may be an access control device including a card reader, and the second NFC device 102 may be a mobile phone used to unlock the access control device, the mobile phone including access card data for unlocking the access control device.

[0078] For NFC communication systems, the industry currently has several standard protocols to regulate data communication between NFC devices, such as ISO 14443 and ISO 15693. ISO 14443 specifies a relatively short communication distance, typically 7cm-15cm. In this case, when a user uses an NFC device, that device needs to establish a radio frequency field with other NFC devices, and the distance between them must meet the aforementioned short communication distance requirement, resulting in a poor user experience.

[0079] In view of this, this application provides a communication device that can be applied to the above-mentioned NFC device to solve the technical problem of poor user experience caused by the short NFC communication distance of the above-mentioned NFC device.

[0080] Figure 2 A schematic structural block diagram of a communication device 200 for an NFC device according to an embodiment of this application is shown. Specifically, the communication device 200 communicates with a user equipment 300 and an NFC device 400. The distance between the communication device 200 and the NFC device 400 is within the NFC communication distance of the NFC device 400.

[0081] like Figure 2 As shown in the embodiment of this application, the communication device 200 includes: a first ranging module 210, a first NFC module 220, and a first processing module 230.

[0082] Specifically, the first ranging module 210 is used to measure the distance information between itself and the user equipment 300, and the communication distance of the first ranging module 210 is greater than the communication distance of the first NFC module 220. The first processing module 230 is used to control the first NFC module 220 to communicate with the NFC device 400 based on the aforementioned distance information, so that the NFC device 400 performs a preset function.

[0083] Optionally, in this embodiment, the user equipment 300 can be a terminal device such as a mobile phone, which can be controlled by the user. The communication device 200 communicates with the NFC device 400 based on the distance information of the user equipment 300 to control the NFC device 400 to perform preset functions. These preset functions can be flexibly set according to the application scenarios of the NFC device 400 to meet the different needs of users in different application scenarios.

[0084] As an example, when the NFC device 400 is an access control device, the communication device 200 can control the NFC device 400 to perform door opening and closing functions based on the distance information of the user device 300. In some cases, when the distance between the user device 300 and the communication device 200 enters a preset range, the communication device 200 can control the NFC device 400 to perform the door opening function.

[0085] As another example, if the NFC device 400 is a POS machine, the communication device 200 can control the NFC device 400 to perform operations such as card payment based on the distance information of the user device 300.

[0086] Of course, in other examples, NFC device 400 can also perform the corresponding functions for other types of devices.

[0087] Specifically, to enable data communication between the communication device 200 and the NFC device 400, the communication device 200 includes a first NFC module 220, which includes, but is not limited to, an NFC chip, wherein a coil and related functional circuits for implementing NFC functionality are provided. It is understood that, corresponding to the first NFC module 220 in the communication device 200, the NFC device 400 may also have a corresponding NFC module. The NFC data communication process between the NFC device 400 and the communication device 200 can be found in specific solutions of related technologies, which will not be elaborated upon here.

[0088] Furthermore, to enable the communication device 200 to measure the distance to the user equipment 300, the communication device 200 includes a first ranging module 210, whose communication range is greater than that of the first NFC module 220. When the user equipment 300 is far from the communication device 200, the distance information between the two devices can be measured using the first ranging module 210 with its longer communication range. Based on this distance information, the first processing module 230 can further control the first NFC module 220 to communicate with the NFC device 400, so that the NFC device 400 can execute preset functions in a timely manner.

[0089] Through the technical solution of this application embodiment, a communication device 200 is set between the user equipment 300 and the NFC device 400. The user equipment 300 and the NFC device 400 do not need to communicate via NFC within a close range for the NFC device 400 to perform preset functions. Instead, the distance information between the user equipment 300 and the NFC device 400 can be measured by the first ranging module 210, which has a larger communication range. Based on this distance information, the communication device 200 can control the first NFC module 220 to communicate with the NFC device 400 in advance, so that the NFC device 400 can perform preset functions to meet user needs.

[0090] Therefore, this technical solution enables the communication device 200 to control the NFC device 400 to complete preset functions without the user's awareness, thereby greatly improving the user's experience with the NFC device 400. Furthermore, the communication device 200 still controls the first NFC module 220 to communicate with the NFC device 400, without requiring any modifications to the NFC device 400. Thus, this technical solution is compatible with existing NFC devices.

[0091] In some possible implementations, the first ranging module 210 described above is a high-precision ultra-wideband (UWB) module, specifically, the UWB module can be a UWB chip. This UWB chip can be used to implement UWB communication technology. Based on this UWB chip and UWB communication technology, distance information with high accuracy, strong multipath resolution, and resistance to electromagnetic wave-based relay attacks can be measured.

[0092] Optionally, the distance information measured by the UWB chip may include not only the distance between the UWB chip and the user equipment 300, but also the direction between them. Combining this distance and direction, the UWB chip can locate the user equipment 300 in three-dimensional space to obtain more accurate position information of the user equipment 300.

[0093] By utilizing the UWB chip as the first ranging module 210, the user device 300 can obtain relatively accurate and secure distance information. This is beneficial to improving the accuracy of the subsequent first processing module 230 in controlling the NFC device to perform preset functions based on the relatively accurate distance information, thereby further enhancing the user experience.

[0094] Optionally, in practical applications, in order to enhance the security of the NFC device 400 in performing preset functions, the communication device 200 needs to obtain not only the distance information of the user equipment 300, but also the function data of the user equipment 300 and use the function data to communicate with the NFC device 400. The NFC device 400 will only perform its preset functions if it obtains the correct function data.

[0095] In some possible implementations, the first processing module 230 is used to receive function data sent by the user equipment 300, which corresponds to the preset function of the NFC device 400; and the first processing module 230 is used to control the first NFC module 220 to communicate with the NFC device 400 according to the distance information and the function data, so that the NFC device 400 performs the preset function.

[0096] Optionally, the first processing module 230 can receive functional data sent by the user equipment 300 through the first ranging module 210 in the communication device 200. That is, the user equipment 300 sends functional data to the first ranging module 210, and then the first ranging module 210 sends the functional data to the first processing module 230.

[0097] Alternatively, the first processing module 230 can also receive the function data sent by the user equipment 300 through other communication modules in the communication device 200. That is, the user equipment 300 sends the function data to the communication module, and then the communication module sends the function data to the first processing module 230.

[0098] As an example, when the NFC device 400 is an access control device, the functional data of the user equipment 300 is the access control data corresponding to the access control. The communication device 200 can control the NFC device 400 (i.e., the access control device) to perform door opening and closing functions based on the distance information of the user equipment 300 and the access control data.

[0099] Optionally, the user equipment 300 may include, but is not limited to, terminal devices such as mobile phones and smartwatches. The user equipment 300 can obtain access control data corresponding to the access control device in various ways. For example, the access control card corresponding to the access control device can be integrated into or copied into the user equipment 300 to enable the user equipment 300 to obtain access control data. Alternatively, access control data corresponding to the access control device can also be obtained through methods such as "over-the-air card issuance" or "offline card issuance" in related technologies. This application embodiment does not limit the specific implementation method of the user equipment 300 obtaining access control data.

[0100] In other examples, when the NFC device 400 is another type of functional device, the functional data of the user equipment 300 corresponds to the function that the functional device needs to perform. In other words, the functional data of the user equipment 300 is the data that the functional device must use to perform its function.

[0101] Through the technical solution of the embodiments of this application, the first processing module 230 in the communication device 200 can be used to receive functional data sent by the user equipment 300, and control the NFC device 400 to perform preset functions through the functional data and distance information. While improving the user's experience of using the NFC device 400, it can also take into account the security of the user equipment 300's control over the NFC device 400.

[0102] For ease of description, the following explanation uses NFC device 400 as an access control device and user equipment 300's functional data as access control data as an example. It is understood that when NFC device 400 is used as an access control device, it may include a card reader and an access control power unit. The card reader can be understood as an NFC module that can communicate with the first NFC module 220 in communication device 200 via NFC. This card reader can be used to control the access control power unit to perform access control functions.

[0103] In this embodiment, the communication device 200 can receive access control data sent by the user equipment 300. After the first ranging module 210 in the communication device 200 measures the distance information of the user equipment 300, the first ranging module 210 is used to determine whether the distance information is within a preset range. If the distance information is within the preset range, the first processing module 230 can simulate the scenario of the access card approaching the access control system through the access control data, so that the access control system can perform an opening operation.

[0104] In some implementations, when the distance information enters a preset range, the first processing module 230 controls the first NFC module 220 to communicate with the access control device based on the access control data of the user equipment 300, so that the access control device can perform the door opening function.

[0105] Optionally, when the distance information falls within a preset range, the first processing module 230 begins receiving access control data sent by the user equipment 300. The first processing module 230 can then use this access control data to enable the access control system to perform an opening operation. For example, when the first processing module 230 receives access control data sent by the user equipment 300 via the communication module, after the first ranging module 210 determines that the distance information between it and the user equipment 300 falls within a preset range, the first ranging module 210 can notify the first processing module 230, which can then use this access control data to enable the access control system to perform an opening operation.

[0106] Optionally, the first ranging module 210 can detect the distance between itself and the user equipment 300 in real time. When the distance gradually decreases, it can be determined that the user equipment 300 is moving closer to the communication device 200 where the first ranging module 210 is located. Further, when the distance enters a preset range, the first processing module 230 can be used to control the first NFC module 220 to communicate with the access control system based on the access control data of the user equipment 300, so that the access control device can perform the door opening function.

[0107] The technical solution of this application embodiment enables seamless access control for users, achieving the goal of seamless door opening and thus improving the user experience. Furthermore, this technical solution utilizes a first ranging module 210 with a large communication range to measure the distance information between itself and the user device 300. Based on this distance information, the communication device 200 can communicate with the access control device in advance via the first processing module 230, allowing the access control device to execute the door opening function ahead of time. Therefore, this technical solution technically provides the possibility for multiple users to open the door simultaneously.

[0108] Furthermore, if the distance information between the first ranging module 210 and the user equipment 300 enters a preset range but then exceeds that preset range, the first processing module 230 can simulate a scenario where the access card moves away from the access control device, so that the access control device can perform a door closing operation.

[0109] In some implementations, the first processing module 230 can be used to stop the first NFC module 220 from communicating with the access control device so that the access control device performs the door closing function.

[0110] Optionally, the first ranging module 210 can detect the distance between itself and the user equipment 300 in real time. After the distance enters the preset range, if the distance is detected to gradually increase, it can be determined that the user equipment 300 is moving away from the communication device 200 where the first ranging module 210 is located. When the distance exceeds the preset range again, the first processing module 230 can be used to stop the first NFC module 220 from communicating with the access control device so that the access control device can perform the door closing function.

[0111] The technical solution of this implementation method not only enables seamless door opening, but also seamless door closing, thereby achieving comprehensive and relatively reliable control of the access control equipment.

[0112] Optionally, based on the above-described embodiments, the functional data received by the first processing module 230 is encrypted functional data. The first processing module 230 is used to decrypt the encrypted functional data to obtain functional data, and based on the distance information and the decrypted functional data, control the first NFC module 220 to communicate with the NFC device 400, so that the NFC device 400 performs a preset function.

[0113] Specifically, in this embodiment, the user equipment 300 can encrypt its function data to obtain encrypted function data, and then send the encrypted function data to the communication device 200. Therefore, the encrypted function data has high security performance during transmission and can prevent external tampering and theft, thereby ensuring that the first processing module 230 in the communication device 200 can obtain the correct function data to control the NFC device 400 to perform preset functions.

[0114] Optionally, in one implementation of this embodiment, the first ranging module 210 is used to receive the encrypted functional data and send the encrypted functional data to the first processing module 230. Alternatively, in another implementation, the communication device 200 further includes a first communication module 251, which is used to receive the encrypted functional data and send the encrypted functional data to the first processing module 230.

[0115] Optionally, the user equipment 300 may encrypt the functional data using symmetric or asymmetric encryption algorithms.

[0116] As an example, the communication device 200 and the user equipment 300 have a preset key, or the communication device 200 and the user equipment 300 can negotiate a key to obtain a key. The user equipment 300 can use this key to encrypt functional data to obtain encrypted functional data, and correspondingly, the first processing module 230 in the communication device 200 can use this key to decrypt the encrypted functional data.

[0117] As another example, user equipment 300 can encrypt functional data using a public key to obtain encrypted functional data. Correspondingly, the first processing module 230 in communication device 200 can decrypt the encrypted functional data using the private key corresponding to the public key.

[0118] Alternatively, in other examples, the communication device 200 and the user equipment 300 may also determine the encryption and decryption methods through other related algorithms, and the specific types are not limited in the embodiments of this application.

[0119] Figure 3 A schematic structural block diagram of another communication device 200 provided in an embodiment of this application is shown.

[0120] like Figure 3 As shown in this embodiment, the communication device 200 further includes a first communication module 251, which is used to send the public key of the communication device 200 so that the user equipment 300 can encrypt the functional data according to the public key to obtain encrypted functional data. The first communication module 251 is used to receive the encrypted functional data sent by the user equipment 300 and send the encrypted functional data to the first processing module 230; the first processing module 230 is used to decrypt the encrypted functional data using the private key corresponding to the public key to obtain the functional data.

[0121] Specifically, in the embodiments of this application, the first communication module 251 in the communication device 200 can communicate with the user equipment 300 to transmit relevant information for encrypting functional data, such as public keys.

[0122] Alternatively, in other alternative embodiments, the communication device 200 may also use the first ranging module 210 to communicate with the user equipment 300 to transmit relevant information for encrypting functional data.

[0123] Optionally, in this embodiment of the application, the first communication module 251 may broadcast its public key to multiple devices simultaneously, or the first communication module 251 may send its public key to the user equipment 300 in a targeted manner.

[0124] Optionally, in this embodiment, the communication device 200 and the user equipment 300 can use an asymmetric encryption algorithm to encrypt the functional data. Specifically, the user equipment 300 receives the public key of the communication device 200 sent by the first communication module 251 in the communication device 200, encrypts its functional data using the public key, and then sends the encrypted functional data to the communication device 200. The communication device 200 itself has a private key corresponding to its public key; therefore, the first processing module 230 in the communication device 200 can use the private key to decrypt the encrypted functional data to obtain the functional data of the user equipment 300.

[0125] Through the technical solution of this embodiment, the communication device 200 and the user equipment 300 can perform an effective and highly secure encryption and decryption process, preventing the leakage of functional data and improving the security performance of the entire system.

[0126] Optionally, in the above application embodiments, as a possible implementation, the first communication module 251 is used to send the public key certificate of the communication device 200 so that the user equipment 300 can verify the communication device 200 according to the public key certificate. If the verification is successful, the first communication module 251 is used to receive the encrypted functional data obtained by the user equipment 300 through encryption based on the public key in the public key certificate.

[0127] Specifically, the communication device 200 can send its public key certificate to other devices, such as the user equipment 300, through its first communication module 251. This public key certificate may contain information such as the public key and the identity information of the communication device 200. After receiving the public key certificate sent by the first communication module 251, the user equipment 300 can verify it to determine whether the public key and other information in the certificate are trustworthy and correct. This verification process ensures that the public key in the certificate is authentic and reliable, preventing others from forging the public key.

[0128] After successful verification, the user equipment 300 uses the public key in the public key certificate to encrypt its functional data and sends it to the communication device 200, so that the communication device 200 can decrypt the encrypted functional data according to the private key.

[0129] Through the technical solution of this application embodiment, the communication device 200 sends a public key certificate through the first communication module 251. If the user equipment 300 successfully verifies the public key certificate, it then uses the public key to encrypt the functional data and send it. This process can further improve the security performance of the functional data transmission, thereby further enhancing the security performance of the entire system.

[0130] Optionally, in the above embodiment, before the first communication module 251 is used to send the public key of the communication device, the first communication module 251 is also used to perform pairing between the communication device 200 and the user equipment 300; if the pairing is successful, the first communication module 251 is used to send the public key of the communication device 200.

[0131] Specifically, the first communication module 251 can perform pairing between the communication device 200 and the user equipment 300 before sending the public key of the communication device 200, that is, register the relevant information of the user equipment 300 in the communication device 200 so that the user equipment 300 can perform subsequent data interaction with the communication device 200.

[0132] Furthermore, if pairing is successful, the first communication module 251 will then send the public key of the communication device 200. Conversely, if pairing fails, the first communication module 251 will no longer send the public key of the communication device 200, and the communication device 200 will be unable to receive the functional data from the user equipment 300, thus preventing the communication device 200 from controlling the NFC device 400 to perform preset functions.

[0133] Therefore, in this embodiment of the application, the pairing process described above can also be understood as an authentication process between the communication device 200 and the user equipment 300, which can further improve the security performance of the entire system.

[0134] Optionally, in addition to performing the pairing and encrypted information transmission operations, the first communication module 251 can also wake up the first ranging module 210.

[0135] Specifically, before the first ranging module 210 measures the distance information between itself and the user equipment 300, the first communication module 251 performs pairing between the communication device 200 and the user equipment 300. If pairing is successful, the first communication module 251 sends a public key certificate to the user equipment 300, enabling the user equipment 300 to verify the certificate. If verification is successful, the first communication module 251 wakes up the first ranging module 210, allowing it to measure the distance information between itself and the user equipment 300.

[0136] Optionally, in this embodiment, the first communication module 251 can be a real-time running communication module, which can perform pairing between the communication device 200 and the user equipment 300 before the first ranging module 210 measures the distance information between the communication device 200 and the user equipment 300.

[0137] Furthermore, if pairing is successful, the first communication module 251 will wake up the first ranging module 210 to enable the first ranging module 210 to begin ranging. Conversely, if pairing fails, the first communication module 251 will not wake up the first ranging module 210 to perform ranging, and the user equipment 300 will not be able to control the NFC device 400 to perform preset functions through the communication device 200.

[0138] Therefore, in this embodiment of the application, before the first communication module 251 wakes up the first ranging module 210, the first ranging module 210 can be in a sleep state, thereby saving the overall power consumption of the first ranging module 210 and the communication device 200 in which it is located.

[0139] In the above-described embodiments, the first communication module 251 can directly wake up the first ranging module 210 after successful pairing, so that the first ranging module 210 can start ranging. Alternatively, in other embodiments, the first communication module 251 can also indirectly wake up the first ranging module 210 through the first processing module 230.

[0140] In practical applications, the distance measurement function between the communication device 200 and the user equipment 300 requires certain distance measurement configuration parameters. In other words, the first distance measurement module 210 in the communication device 200 can only perform distance measurement communication with the user equipment 300 if the distance measurement configuration parameters are stored in the communication device 200.

[0141] In some examples, the ranging configuration parameters may be pre-stored in the communication device 200 and the user equipment 300.

[0142] Alternatively, in other examples, before the first ranging module 210 measures the distance information between itself and the user equipment 300, the first communication module 251 is also used to perform pairing between the communication device 200 and the user equipment 300. If pairing is successful, the first communication module 251 is used to transmit the ranging configuration parameters between the first ranging module 210 and the user equipment 300.

[0143] Specifically, the communication device 200 can transmit the ranging configuration parameters through the first communication module 251, thereby enabling the first ranging module 210 to perform its ranging function. Compared to the above-mentioned pre-stored ranging configuration parameters, the technical solution in this example allows the ranging configuration parameters of the first ranging module 210 to be transmitted in real time through the first communication module 251, facilitating the updating and upgrading of the ranging configuration parameters and resulting in better ranging performance of the first ranging module 210.

[0144] Optionally, the first communication module 251 can be a short-range communication module or a long-range communication module. For example, the first communication module 251 may include, but is not limited to, a Bluetooth module, a mobile communication module (e.g., a 3G, 4G, 5G communication module, etc.), a wireless communication module, etc. The specific type of the first communication module 251 is not limited in this application embodiment.

[0145] Optionally, the power consumption of the first communication module 251 can be less than that of the first ranging module 210, so as to save the energy required for the real-time operation of the first communication module 251 and improve the overall performance of the entire system.

[0146] Optionally, the communication distance of the first communication module 251 can be greater than the communication distance of the first ranging module 210. In this case, the communication device 200 can realize data interaction with the user device 300 even when there is a long distance between them. This allows the user device 300 to control the NFC device 400 to perform preset functions as early as possible through the communication device 200, thereby further improving the user experience.

[0147] As an example, the first communication module 251 can be a Bluetooth module, specifically a Bluetooth Low Energy (BLE) chip. This Bluetooth chip offers advantages such as low power consumption and low cost, and it can operate in real-time to achieve Bluetooth pairing with the user device 300, thereby comprehensively improving the security performance of the entire system and reducing energy consumption.

[0148] In summary, the first communication module 251 provided in this embodiment can be used to implement multiple functions. Specifically, after the communication device 200 is paired with the user equipment 300 through the first communication module 251, the first communication module 251 can send its public key certificate to the user equipment 300. Simultaneously, the first communication module 251 can wake up the first ranging module 210, enabling the first ranging module 210 to begin measuring the distance information between itself and the user equipment 300. After receiving the public key certificate, the user equipment 300 can verify the certificate. If the verification is successful, it can encrypt its functional data using the public key and send it to the first communication module 251 in the communication device 200 at a certain frequency. In this embodiment, during the ranging process of the first ranging module 210, the first communication module 251 can synchronously receive the functional data from the user equipment 300. The parallel execution of these two processes can improve the communication efficiency of the communication device 200.

[0149] Optionally, during the ranging process performed by the first ranging module 210, the first ranging module 210 can be used to send a first ranging session to the user equipment 300, receive a first ranging response session sent by the user equipment 300, and measure the distance information between itself and the user equipment 300 based on the first ranging session and the first ranging response session.

[0150] As an example, in this embodiment, the first ranging module 210 may use time-of-flight (TOF) or two-way-time-of-flight (TW-TOF) to measure distance information between itself and the user equipment 300.

[0151] Optionally, the first ranging module 210 may send a first ranging session and receive a first ranging response session, which may include relevant information for ranging and direction finding. The first ranging response session may be a response session sent by the user equipment 300 when it receives the first ranging session. The first ranging module 210 may use the first ranging session and the relevant information in the first ranging response session to measure the mutual distance and mutual direction between itself and the user equipment 300.

[0152] Optionally, the first ranging module 210 and the user equipment 300 can perform multiple session interactions. That is, in addition to sending a first ranging session to the user equipment 300 and receiving a first ranging response session sent by the user equipment 300, the first ranging module 210 can also send a second ranging session or more ranging sessions to the user equipment 300. Correspondingly, the first ranging module 210 can also receive a second ranging response session or more ranging response sessions sent by the user equipment. The first ranging module 210 can measure more accurate distance information based on the relevant information from multiple sessions.

[0153] To further improve the security performance of the first ranging module 210 during the ranging process and prevent the ranging session from being tampered with and attacked, the ranging session between the first ranging module 210 and the user equipment 300 can be encrypted by the first processing module 230.

[0154] Specifically, after the first processing module 230 encrypts the first ranging session, the first ranging module 210 sends the encrypted first ranging session to the user equipment 300 and receives the encrypted first ranging response session sent by the user equipment 300. The first processing module 230 is also used to decrypt the encrypted first ranging response session.

[0155] Optionally, in this embodiment, the first processing module 230 can encrypt the first ranging session and decrypt the first ranging response session using a symmetric or asymmetric encryption / decryption algorithm.

[0156] As an example, the communication device 200 and the user equipment 300 have a preset key, which can be used by both the first processing module 230 and the user equipment 300 to encrypt and decrypt the ranging session.

[0157] As another example, both the first processing module 230 and the user equipment 300 have a computational unit that supports the SPAKE2+ algorithm, which can be used to generate a session key. Both the first processing module 230 and the user equipment 300 can use this session key to encrypt and decrypt the ranging session.

[0158] As a third example, the first processing module 230 and the user equipment 300 can perform key negotiation to obtain a session key, which they can then use to encrypt and decrypt the ranging session. Optionally, the first processing module 230 can perform key negotiation using various key negotiation algorithms, including but not limited to: RSA algorithm, Elliptic Curve Cryptography (ECC), ECDH algorithm, etc.

[0159] In some implementations, the first ranging module 210 may have a communication function in addition to ranging function. That is, the first processing module 230 may use the first ranging module 210 to realize data interaction with the user equipment 300. For example, the first processing module 230 may use the first ranging module 210 to realize data interaction such as key negotiation with the user equipment 300.

[0160] Alternatively, in other embodiments, the first processing module 230 may also achieve data interaction with the user equipment 300 through the first communication module 251. For example, the first processing module 230 may achieve data interaction such as key negotiation with the user equipment 300 through the first communication module 251.

[0161] Optionally, in the above embodiments, the first processing module 230 can be a Secure Element (SE), specifically, the first processing module 230 can be an SE chip or simply a security chip. This security chip has encryption / decryption logic circuitry, which can prevent external malicious parsing attacks and protect data security.

[0162] By using this technical solution, the security chip is used as the first processing module 230 to process data such as distance information, which can improve the security performance of the communication device 200 and thus improve the overall security performance of the system in which the communication device 200 is located.

[0163] Figure 4 A schematic structural block diagram of another communication device 200 provided in an embodiment of this application is shown.

[0164] like Figure 4 As shown in the embodiments of this application, the communication device 200 may include: a BLE chip, a UWB chip, an SE chip, and an NFC chip.

[0165] The BLE chip operates in real time and is used for Bluetooth pairing with user equipment 300. When pairing is successful, the BLE chip can send the public key certificate of communication device 200 to user equipment 300. After verifying the public key certificate, user equipment 300 sends functional data encrypted with the public key to the BLE chip.

[0166] Additionally, upon successful pairing, the BLE chip can wake up the UWB chip, enabling the UWB chip to measure the distance information between itself and the user equipment 300. The UWB chip can operate simultaneously with the BLE chip. The UWB chip performs ranging, while the BLE chip receives encrypted functional data and sends it to the SE chip, allowing the SE chip to decrypt the encrypted functional data.

[0167] Alternatively, after the BLE chip wakes up the UWB chip, the UWB chip, in addition to performing ranging, can also receive encrypted functional data and send the encrypted functional data to the SE chip, so that the SE chip can decrypt the encrypted functional data.

[0168] Furthermore, the SE chip can acquire distance information measured by the UWB chip, and based on this distance information and the decrypted functional data, it can communicate with the NFC device 400 via the NFC chip.

[0169] As an example, when the NFC device 400 is an access control device and the user device 300's functional data is access control data, the communication device 200 can control the access control device to perform the door opening and closing function based on the user device 300's distance information and functional data. Specifically, the communication device 200 can simulate the relevant operations of the access control card based on the user device 300's distance information, thereby controlling the access control device to perform the door opening and closing function.

[0170] In some implementations, when the user equipment 300 enters a preset range, the SE chip can interact with the access control device via the NFC chip based on the decrypted functional data of the user equipment 300, thereby enabling the access control device to perform an opening operation. If the user equipment 300 enters the preset range but then exceeds it, the SE chip can stop the data interaction between the NFC chip and the access control device, thereby enabling the access control device to perform a closing operation.

[0171] Through the technical solution of this application embodiment, the communication device 200 can simultaneously include four functional chips: a BLE chip, a UWB chip, an SE chip, and an NFC chip. This communication device 200 combines the relatively accurate ranging and direction-finding characteristics of UWB, the stable transmission characteristics of BLE, and the security characteristics of SE, and can also interact with existing NFC devices 400 using NFC. Therefore, through this communication device 200, the user-controlled user equipment 300 can not only securely and effectively control the existing NFC device 400, but also achieve seamless control by the user, thereby improving the user experience of the NFC device 400.

[0172] In the above-mentioned application embodiments, as one possible implementation, the communication device 200 and the NFC device 400 can be two physical modules that are separate from each other and arranged adjacently.

[0173] In order to achieve a better NFC communication effect between the communication device 200 and the NFC device 400, the communication device 200 can be placed close to the NFC device 400, and the NFC modules inside them can be set relative to each other. Specifically, the coils inside them are also set relative to each other to ensure a stable radio frequency field between the communication device 200 and the NFC device 400, so as to achieve stable and reliable data communication.

[0174] Alternatively, the communication device 200 and the NFC device 400 can be arranged side by side on the same plane, or the communication device 200 and the NFC device 400 can be stacked in the same direction.

[0175] In this embodiment, no modifications are required to the existing NFC device 400. Simply placing the communication device 200 nearby is sufficient to meet actual usage needs, thereby maximizing compatibility with the existing NFC device 400 and improving the user experience of the NFC device 400.

[0176] In other embodiments, the communication device 200 can also be integrated inside the NFC device 400. In this embodiment, it is easier to install and remove the NFC device 400 and the communication device 200 during actual application, thus improving the aesthetics.

[0177] The above text combined Figures 2 to 4 This paper describes the relevant technical solutions of the communication device 200 applied between user equipment 300 and NFC device 400 provided in the embodiments of this application. The following is a detailed explanation in conjunction with... Figures 5 to 8 This application describes the relevant technical solutions of the user equipment 300 provided in the embodiments.

[0178] Figure 5 A schematic structural block diagram of a user equipment 300 provided in an embodiment of this application is shown.

[0179] like Figure 5 As shown in this embodiment, the user equipment 300 includes a second ranging module 310. The second ranging module 310 measures the distance information between itself and the communication device 200 of the NFC device 400. The communication distance of the second ranging module 310 is greater than the communication distance of the first NFC module 220 in the communication device 200. This distance information is used to instruct the communication device 200 to control the first NFC module 220 to communicate with the NFC device 400, so that the NFC device 400 performs a preset function.

[0180] Optionally, in some embodiments, the second ranging module 310 may cooperate with the first ranging module 210 in the communication device 200 described in the above embodiments to jointly measure the distance information between the user equipment 300 and the communication device 200.

[0181] Alternatively, in other embodiments, the second ranging module 310 may also measure the distance information to the communication device 200 independently and send the distance information to the communication device 200.

[0182] Optionally, the second ranging module 310 is a UWB chip. Specifically, the second ranging module 310 can communicate with the first ranging module 210 in the communication device 200 to jointly measure the distance and direction between the user equipment 300 and the communication device 200.

[0183] Specifically, in this embodiment, the specific scheme by which the communication device 200 controls the NFC device 400 based on distance information can be found in the relevant description of the above embodiments, and will not be elaborated further here.

[0184] exist Figure 5 Based on the illustrated embodiment, Figure 6 A schematic structural block diagram of a user equipment 300 provided in an embodiment of this application is shown.

[0185] like Figure 6 As shown in this embodiment, the user equipment 300 further includes a second communication module 320. This second communication module 320 is used to send functional data to the communication device 200, the functional data corresponding to a preset function of the NFC device 400. In this case, the aforementioned distance information is used to instruct the communication device 200 to control the first NFC module 220 to communicate with the NFC device 400 according to the functional data, so that the NFC device 400 performs the preset function.

[0186] Optionally, in some embodiments, the NFC device 400 is an access control device, and the functional data is access control data. When the distance information enters a preset range, the distance information is used to instruct the communication device 200 to control the first NFC module 220 to communicate with the access control device according to the access control data, so that the access control device performs the door opening function. Correspondingly, when the distance information enters a preset range but exceeds the preset range, the distance information is used to instruct the communication device 200 to control the first NFC module 220 to stop communicating with the access control device, so that the access control device performs the door closing function.

[0187] Optionally, in some embodiments of this application, the second communication module 320 may be of the same type as the first communication module 251 in the communication device 200 mentioned above, and the two may communicate with each other.

[0188] Alternatively, in some other embodiments of this application, the second communication module 320 may be the same module as the second ranging module 310 described above. In other words, the second ranging module 310 may be reused as the second communication module 320 to send functional data to the communication device 200.

[0189] exist Figure 6 Based on the illustrated embodiment, Figure 7 A schematic structural block diagram of a user equipment 300 provided in an embodiment of this application is shown.

[0190] like Figure 7As shown in the embodiments of this application, the user equipment 300 may further include: a second processing module 330, used to encrypt the functional data to obtain encrypted functional data; and a second communication module 320 used to send the encrypted functional data to the communication device 200.

[0191] Specifically, in this embodiment, the second processing module 330 can encrypt the function data of the user equipment 300 to obtain encrypted function data, and then send the encrypted function data to the communication device 200. Therefore, the encrypted function data has high security performance during transmission and can prevent external tampering and theft, thereby ensuring that the first processing module 230 in the communication device 200 can obtain the correct function data to control the NFC device 400 to perform preset functions.

[0192] Optionally, the user equipment 300 may encrypt the functional data using symmetric or asymmetric encryption algorithms. This application does not limit the specific type of encryption used.

[0193] Optionally, in the above embodiments, the second processing module 330 can be a secure element chip or a security chip. This security chip has at least encryption logic circuitry, enabling it to securely and effectively encrypt functional data.

[0194] In some embodiments, the second communication module 320 in the user equipment 300 is further configured to receive a public key sent by the communication device 200, the second processing module 330 is configured to encrypt the functional data according to the public key to obtain encrypted functional data, and the second communication module 320 is further configured to send the encrypted functional data to the communication device 200.

[0195] In some implementations, the second communication module 320 is used to receive a public key certificate sent by the communication device 200, and the second processing module 330 is used to verify the communication device based on the public key certificate. If the verification is successful, the second processing module 330 is used to encrypt the functional data based on the public key to obtain encrypted functional data.

[0196] Optionally, before the second communication module 320 receives the public key sent by the communication device 200, the second communication module 320 is also used to perform pairing between the user equipment 300 and the communication device 200. If pairing is successful, the second communication module 320 receives the public key sent by the communication device 200.

[0197] In this embodiment, the pairing of user equipment 300 and communication device 200 is performed by the second communication module 320, and relevant information of communication device 200 can be registered in user equipment 300 so that communication device 200 can perform subsequent data interaction with user equipment 300.

[0198] Optionally, before the second ranging module 310 measures the distance information between itself and the communication device 200, the second communication module 320 is also used to perform pairing between the user equipment 300 and the communication device 200. If pairing is successful, the second communication module 320 is used to wake up the second ranging module 310, so that the second ranging module 310 measures the distance information between itself and the communication device 200.

[0199] Optionally, in this embodiment, the second communication module 320 can be a real-time running communication module. Upon successful pairing, the second communication module 320 can directly wake up the second ranging module 310 to enable it to begin ranging. Alternatively, in other embodiments, the second ranging module 310 can be indirectly woken up by the second processing module 330.

[0200] In some embodiments, before the second ranging module 310 measures the distance information between itself and the communication device 200, and after the second processing module 330 has successfully verified the communication device 200 based on the public key certificate, the second processing module 330 wakes up the second ranging module 310 so that the second ranging module 310 measures the distance information between itself and the communication device 200.

[0201] Optionally, before the second ranging module 310 is used to measure the distance information between itself and the communication device 200, the second communication module 320 is also used to transmit the ranging configuration parameters between the second ranging module 310 and the communication device 200.

[0202] Optionally, the power consumption of the second communication module 320 is less than that of the second ranging module 310, and / or the communication distance of the second communication module 320 is greater than that of the second ranging module 310.

[0203] As an example, in the above-described embodiments, the second communication module 320 includes, but is not limited to, a Bluetooth chip. The user equipment 300 uses this Bluetooth chip to pair with the Bluetooth chip in the communication device 200 and to transmit data.

[0204] Figure 8 A schematic structural block diagram of another user equipment 300 provided in an embodiment of this application is shown.

[0205] like Figure 8 As shown in the embodiment of this application, the user equipment 300 further includes a second NFC module 340, which is used to communicate with the NFC device 400 so that the NFC device 400 performs a preset function.

[0206] Specifically, in this embodiment, when the distance between the user equipment 300 and the NFC device 400 is within the NFC communication distance, the user equipment 300 can directly interact with the NFC device 400 through its second NFC module 340, so that the NFC device 400 can perform preset functions.

[0207] Optionally, the user equipment 300 stores functional data corresponding to the NFC device 400. For example, if the NFC device 400 is an access control device, the functional data can be access control device data. Detailed technical solutions for direct NFC communication between the user equipment 300 and the NFC device 400 can be found in related technologies, and will not be elaborated upon here.

[0208] Through the technical solution of this application embodiment, in the event of a malfunction or other unexpected situation in the communication device 200, the user equipment 300 can still perform normal interaction with the NFC device 400 through the second NFC module 340 to control the NFC device 400, thereby further improving the user's experience with the NFC device 400.

[0209] in addition, Figure 8 This diagram illustrates the interaction between the modules in user equipment 300 and the modules in communication device 200. As described in the previous embodiment, the second ranging module 310 in user equipment 300 and the first ranging module 210 in communication device 200 are of the same type and communicate with each other. Similarly, the second communication module 320 in user equipment 300 and the first communication module 251 in communication device 200 are of the same type and communicate with each other. Both the second NFC module 340 in user equipment 300 and the first NFC module 220 in communication device 200 can communicate with NFC device 400.

[0210] Figure 9 A schematic structural block diagram of a communication system 20 provided in an embodiment of this application is shown.

[0211] like Figure 9 As shown, the communication system 20 may include the communication device 200 in any of the above embodiments, the user equipment 300 in any of the embodiments, and the NFC device 400.

[0212] In some implementations, the NFC device 400 can be an access control device, and the communication device 200 is used to communicate with the user equipment 300 and the access control device to enable the access control device to perform access control functions.

[0213] Figure 10 Schematic block diagrams of two other communication systems 20 provided in embodiments of this application are shown.

[0214] like Figure 10 As shown in Figures (a) and (b) in this embodiment, the NFC device 400 is an access control device, which may include a card reader 410 and an access control power unit 420. The card reader 410 includes an NFC module 411, which can communicate with the first NFC module 220 in the communication device 200.

[0215] like Figure 10 As shown in Figure (a), the communication device 200 is arranged side by side on one side of the card reader 410. Both the communication device 200 and the card reader 410 can be fixedly installed on the wall.

[0216] Or, such as Figure 10 As shown in Figure (b), the card reader 410 is fixedly mounted on the wall, and the communication device 200 can be attached to the side of the card reader 410 away from the card reader 410.

[0217] Optionally, the communication device 200 can be powered by wall power, card reader 410 power, or a built-in battery. The communication device 200 can interact with card reader 410 via NFC, while also not affecting NFC interaction between card reader 410 and other smart cards or devices carrying smart card data.

[0218] The specific internal structures of the communication device 200 and the user equipment 300 can be found in the descriptions of the embodiments above. In some cases, the user equipment 300 can control the access control device to perform access control functions through the communication device 200. Alternatively, in other cases, for example, when the communication device 200 is powered off, the user equipment 300 can directly interact with the card reader 410 via its internal second NFC module 340 to control the access control device to perform access control functions.

[0219] The above text combined Figures 2 to 10 This section describes the device embodiments provided in this application. The following will be combined with... Figures 11 to 13 This document describes the method embodiments provided in this application. It is understood that the specific implementations of the method embodiments can correspond to the device embodiments described above. For brevity, the specific solutions of the method embodiments can be found in the above description, and will not be elaborated further below.

[0220] Figure 11 A schematic flowchart of a communication method 500 provided in an embodiment of this application is shown. This communication method 500 can be applied to a communication system including a user equipment and a communication device, wherein the user equipment can be the user equipment 300 in the above embodiment, and the communication device can be the communication device 200 in the above embodiment.

[0221] like Figure 11As shown, the communication method 500 provided in this application embodiment includes the following steps.

[0222] S510: Measure the distance information between the communication device and the user equipment, the range of which is greater than the communication range of the NFC module in the communication device.

[0223] S520: The communication device communicates with the NFC device via the NFC module based on the distance information, so that the NFC device can perform a preset function.

[0224] Specifically, in step S510, the communication device can measure distance information between itself and the user equipment. The user equipment can also measure distance information between itself and the communication device. In some embodiments, the communication device and the user equipment can communicate and cooperate to jointly measure the distance information between them. Alternatively, in other embodiments, only one of the communication device and the user equipment measures the distance information with the other.

[0225] Specifically, both the communication device and the user equipment can include a ranging module, namely the first ranging module 210 and the second ranging module 310 in the above embodiment. The two can communicate with each other to jointly measure the distance information between them. That is, the execution subject of step S510 above can be the first ranging module 210 and the second ranging module 310.

[0226] In addition, the communication device may also include a processing module, and the execution entity of step S520 may be the first processing module 230 in the above embodiment. The NFC module in step S520 may be the first NFC module 220 in the above embodiment.

[0227] In step S510, the maximum distance between the communication device and the user equipment that can be measured by the first ranging module 210 and the second ranging module 310 can be greater than the communication distance of the first NFC module 220. That is, the range of change of the distance information measured by the first ranging module 210 and the second ranging module 310 can be greater than the communication range of the first NFC module 220. In other words, the communication distance between the first ranging module 210 and the second ranging module 310 can be greater than the communication distance of the first NFC module 220. Or, the communication distance between the communication device 200 and the user equipment 300 can be greater than the communication distance between the communication device 200 and the NFC device 400.

[0228] Optionally, in some embodiments, the communication device and user equipment may include a UWB chip, that is, the first ranging module 210 and the second ranging module 310 may be UWB chips.

[0229] Figure 12A schematic flowchart of another communication method 600 provided in an embodiment of this application is shown.

[0230] like Figure 12 As shown in the embodiments of this application, the communication method 600 may include the following steps.

[0231] S630: The user equipment sends function data to the communication device, which corresponds to the preset function of the NFC device.

[0232] S640: Measurement of distance information between the communication device and the user equipment.

[0233] S650: Based on distance information and function data, it communicates with NFC devices via the NFC module to enable the NFC devices to perform preset functions.

[0234] Optionally, steps S630 and S640 are not sequential in time; that is, steps S630 and S640 can be executed in parallel, or steps S630 and S640 can be executed sequentially. This application embodiment does not specifically limit this.

[0235] Optionally, for step S630, the user equipment may include a communication module for performing step S630, i.e., sending functional data to the communication device, the functional data corresponding to a preset function of the NFC device. As an example, the communication module in the user equipment may be the second communication module 320 in the above embodiment.

[0236] Optionally, in some implementations, the functional data can be encrypted functional data. That is, in addition to transmitting the functional data, the user equipment also encrypts the functional data to further ensure its security during transmission. For example, the user equipment also includes a processing module, which can be used to encrypt the functional data and then transmit the encrypted functional data to the communication module. Optionally, the processing module can use any encryption algorithm from related technologies to encrypt the functional data.

[0237] Optionally, in the embodiments of this application, the specific implementation of step S640 can be found above. Figure 11 The description of step S510 in the illustrated embodiment is as follows: Step S650 can be described above. Figure 11 One implementation of step S520 in the illustrated embodiment.

[0238] In step S650, based on the distance information, the communication device can further communicate with the NFC device 400 through the first NFC module 220 according to the functional data, so that the NFC device 400 can perform a preset function.

[0239] In some possible implementations, the NFC device can be an access control device, and the user equipment's functional data can be access control data. In this case, step S640 above may include: determining whether the distance information is within a preset range; if the distance information is within the preset range, communicating with the access control device via the NFC module based on the access control data, so that the access control device can perform the door opening function.

[0240] Furthermore, the communication method 600 may also include: stopping the first NFC module from communicating with the access control system when the distance information enters or exceeds a preset range, so that the access control system performs the door closing function.

[0241] See also Figure 12 Optionally, before step S630, the communication method 600 may further include S610: performing pairing between the communication device and the user equipment.

[0242] Specifically, in step S610, the communication device can perform pairing with the user equipment, and the user equipment can perform pairing with the communication device. Optionally, both the communication device and the user equipment may include a communication module. For example, the communication device includes a first communication module 251, and the user equipment includes a second communication module 320. The first communication module 251 and the second communication module 320 can perform pairing between the communication device and the user equipment.

[0243] Optionally, upon successful pairing, the user equipment and the communication device can simultaneously execute steps S630 and S640. In this case, the first communication module 251 and the second communication module 320 can respectively wake up the first ranging module 210 and the second ranging module 310 to execute step S640. Simultaneously, the second communication module 320 can synchronously send functional data to the first communication module 251 to execute step S630.

[0244] Alternatively, if pairing is successful, the user equipment and the communication device can execute steps S630 and S640 sequentially. For example, the first communication module 251 and the second communication module 320 can respectively wake up the first ranging module 210 and the second ranging module 310, so that the first ranging module 210 and the second ranging module 310 execute steps S630 and S640 sequentially. For example, the first ranging module 210 and the second ranging module 310 execute step S630 first and then execute S640, or the first ranging module 210 and the second ranging module 310 execute step S640 first and then execute S630.

[0245] Alternatively, in some implementations, such as Figure 12 As shown, before step S630, method 600 may further include step S620: the communication device broadcasts a public key certificate to the user equipment.

[0246] In this embodiment, the user equipment can first verify the public key certificate. If the verification is successful, in step S630, the user equipment uses the public key in the public key certificate to encrypt the functional data and sends the encrypted functional data to the communication device.

[0247] Optionally, if the second processing module 330 in the user equipment successfully verifies the public key certificate, the second processing module 330 can be used to wake up the second ranging module 310 so that the second ranging module 310 executes step S640.

[0248] Optionally, in some embodiments, step S610 may include performing Bluetooth pairing between the communication device and the user equipment. In this case, the first communication module 251 and the second communication module 320 in the communication device and the user equipment may be Bluetooth modules, such as Bluetooth chips.

[0249] Optionally, in method 500 or 600 above, before measuring the distance information between the communication device and the user equipment, the method may further include: transmitting ranging configuration parameters. These ranging configuration parameters are adapted to the first ranging module 210 and the second ranging module 310 for performing ranging. These ranging configuration parameters can be transmitted via the first communication module 251 and the second communication module 320, or they can be transmitted via other types of communication modules.

[0250] As an alternative implementation, the ranging configuration parameters can also be pre-stored in the communication device and user equipment.

[0251] Figure 13 A schematic flowchart of another communication method 700 provided in an embodiment of this application is shown.

[0252] like Figure 13 As shown in the embodiments of this application, the communication method 700 may include the following steps.

[0253] S710: Performs pairing between communication devices and user equipment.

[0254] S720: The communication device broadcasts the public key certificate to the user equipment.

[0255] S730: The user equipment sends functional data encrypted with the public key in the public key certificate to the communication device. This functional data corresponds to the preset function of the NFC device.

[0256] S740: Performs key negotiation between the communication device and the user equipment to generate a session key.

[0257] S750: Using a session key, it performs a ranging session interaction between the communication device and the user equipment to measure the distance information between the communication device and the user equipment.

[0258] S760: Based on distance information and function data, it communicates with NFC devices via the NFC module to enable the NFC devices to perform preset functions.

[0259] Specifically, in the embodiments of this application, the relevant technical solutions of steps S710 to S730 and S760 can be found in the relevant descriptions of the method embodiments above, and will not be elaborated further here.

[0260] Optionally, steps S740 to S750 can be an implementation of step S640 in the above embodiments.

[0261] Specifically, in step S740, the communication device and the user equipment can perform key negotiation to generate a session key. The processing modules in both the communication device and the user equipment may have corresponding cryptographic algorithm units, which can interact with the communication module to generate the session key.

[0262] Alternatively, in another alternative implementation, the communication device and the user equipment may pre-store the session key. This application does not specifically limit the method of generating the session key.

[0263] In step S750, both the user equipment and the communication device can use the session key to encrypt and decrypt the ranging session between them, so as to securely and accurately measure the distance information between the communication device and the user equipment.

[0264] Specifically, the specific process of encrypting and decrypting the ranging session using the session key can be found in the detailed description of the device embodiment above, and will not be elaborated further here.

[0265] It should be understood that the specific examples in this document are only intended to help those skilled in the art better understand the embodiments of this application, and are not intended to limit the scope of the embodiments of this application.

[0266] It should also be understood that, in the various embodiments of this application, the sequence number of each process does not imply the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this application.

[0267] It should also be understood that the various implementation methods described in this specification can be implemented individually or in combination, and the embodiments of this application are not limited in this respect.

[0268] Unless otherwise stated, all technical and scientific terms used in the embodiments of this application have the same meaning as commonly understood by one of ordinary skill in the art. The terminology used in this application is for the purpose of describing particular embodiments only and is not intended to limit the scope of this application. The term "and / or" as used in this application includes any and all combinations of one or more of the associated listed items. The singular forms "a," "the," and "the" as used in the embodiments of this application and the appended claims are also intended to include the plural forms unless the context clearly indicates otherwise.

[0269] It should be understood that the processor or processing module in the embodiments of this application can be an integrated circuit chip with signal processing capabilities. In implementation, the steps of the above method embodiments can be completed by integrated logic circuits in the processor's hardware or by instructions in software form. The steps of the method disclosed in the embodiments of this application can be directly embodied as being executed by a hardware decoding processor, or by a combination of hardware and software modules in the decoding processor. The software module can reside in a random access memory, flash memory, read-only memory, programmable read-only memory, electrically erasable programmable memory, registers, or other mature storage media in the art. This storage medium is located in memory, and the processor reads information from the memory and, in conjunction with its hardware, completes the steps of the above method.

[0270] The memory or storage module in the embodiments of this application may be volatile memory or non-volatile memory, or may include both volatile and non-volatile memory.

[0271] Those skilled in the art will recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0272] Those skilled in the art will understand that, for the sake of convenience and brevity, the specific working processes of the systems, devices, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here.

[0273] In the embodiments provided in this application, it should be understood that the disclosed systems, apparatuses, and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be through some interfaces; the indirect coupling or communication connection between apparatuses or units may be electrical, mechanical, or other forms.

[0274] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0275] In addition, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit.

[0276] If the aforementioned functions are implemented as software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or a part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0277] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

Claims

1. An access control system, characterized in that The application relates to a door access system, comprising a communication device and a door access device, the door access device comprising a card reader and a door access power device, and a user equipment controlling the door access device to perform a door access function through the communication device; wherein the communication device comprises a first UWB module, a first NFC module, a first Bluetooth module and a first security chip. The first Bluetooth module is used for sending a public key certificate to the user equipment to enable the user equipment to verify the door access system, and in the case that the verification is successful, the first Bluetooth module is used for receiving door access card data sent by the user equipment and waking up the first UWB module, and the first Bluetooth module is also used for sending the door access card data to the first security chip. The first UWB module is used for measuring distance information between the user equipment. In the case that the distance information enters a preset range, the first UWB module informs the first security chip, and the first security chip is used for controlling the first NFC module to communicate with the card reader based on the door access card data, and the card reader is used for controlling the door access power device to perform an opening door function. The door access card data received by the first Bluetooth module is encrypted door access card data.

2. The access control system of claim 1, wherein, The first security chip is used for decrypting the encrypted door access card data to obtain the door access card data. The encrypted door access card data is obtained by encrypting the door access card data according to a public key in the public key certificate of the user equipment.

3. The access control system of claim 2, wherein, The first security chip is used for decrypting the encrypted door access card data by using a private key corresponding to the public key to obtain the door access card data. Before the first Bluetooth module is used for sending the public key certificate, the first Bluetooth module is also used for performing pairing of the communication device and the user equipment.

4. The access control system of claim 1, wherein, In the case that the pairing is successful, the first Bluetooth module is used for sending the public key certificate.

5. The door access system according to claim 4, wherein In the case that the pairing is successful, the first Bluetooth module is also used for transmitting ranging configuration parameters between the first UWB module and the user equipment. The first UWB module is used for sending a first ranging session to the user equipment, receiving a first ranging response session sent by the user equipment, and measuring the distance information between the user equipment according to the first ranging session and the first ranging response session.

6. The access control system according to any one of claims 1 to 5, characterized in that, The first security chip is also used for encrypting the first ranging session.

7. The access control system of claim 6, wherein, The first UWB module is used for sending the encrypted first ranging session to the user equipment and receiving the encrypted first ranging response session sent by the user equipment. The first security chip is also used for decrypting the encrypted first ranging response session. The first security chip is used for performing key negotiation with the user equipment to generate a session key.

8. The access control system of claim 7, wherein, The first security chip is used for encrypting the first ranging session according to the session key and decrypting the encrypted first ranging response session according to the session key. ​ 9. The access control system according to any one of claims 1 to 5, characterized in that, In a case where the distance information exceeds the preset range after entering the preset range, the first security chip is further configured to stop the first NFC module from communicating with the card reader, so that the card reader controls the door power device to execute a door closing function.

10. The access control system according to any one of claims 1 to 5, characterized in that, The card reader and the door power device form an NFC device. The communication device and the NFC device are separately arranged adjacent to each other, or The communication device is integrated in the NFC device. 11.A user equipment, comprising: Comprise: a second UWB module, a second Bluetooth module and a second security chip; The second Bluetooth module is configured to receive a public key certificate sent by a communication device of an access control system; The second security chip is configured to verify the communication device according to the public key certificate, and in a case where the verification is successful, the second security chip is configured to wake up the second UWB module, and the second Bluetooth module is configured to send access control card data to the communication device; The second UWB module is configured to measure distance information between the communication device and the second UWB module; In a case where the distance information enters a preset range, the distance information is used to instruct the communication device to control a first NFC module in the access control system to communicate with a card reader according to the access control card data, so that the card reader controls a door power device to execute a door opening function.

12. The user equipment of claim 11, wherein, The second security chip is further configured to encrypt the access control card data to obtain encrypted access control card data; The second Bluetooth module is configured to send the encrypted access control card data to the communication device.

13. The user equipment of claim 12, wherein, The second security chip is configured to encrypt the access control card data according to a public key in the public key certificate to obtain the encrypted access control card data.

14. The user equipment of claim 13, wherein, Before the second Bluetooth module receives the public key certificate sent by the communication device, the second Bluetooth module is further configured to perform pairing between the user equipment and the communication device; In a case where the pairing is successful, the second Bluetooth module is configured to receive the public key certificate sent by the communication device.

15. The user equipment of claim 14, wherein, In a case where the pairing is successful, the second Bluetooth module is further configured to transmit ranging configuration parameters between the second UWB module and the communication device.

16. The user equipment of any one of claims 11 to 15, wherein, The second UWB module is configured to receive a first ranging session sent by the communication device, and send a first ranging response session to the communication device, the first ranging session and the first ranging response session being used to measure the distance information between the second UWB module and the communication device.

17. The user equipment of claim 16, wherein, The second UWB module is configured to receive the encrypted first ranging session sent by the communication device; The second security chip is configured to decrypt the encrypted first ranging session and encrypt the first ranging response session; The second UWB module is configured to send the encrypted first ranging response session to the communication device.

18. The user equipment of claim 17, wherein, The second security chip is configured to perform key negotiation with the communication device to generate a session key; The second security chip is configured to decrypt the encrypted first ranging session according to the session key, and encrypt the first ranging response session according to the session key.

19. The user equipment of any one of claims 11 to 15, wherein, The user equipment further comprises a second NFC module configured to communicate with the card reader to control a door function of the access control system. 20.The user equipment according to any one of claims 11 to 15, wherein, when the distance information exceeds the preset range after entering the preset range, the distance information is configured to instruct the communication device to control the first NFC module to stop communicating with the card reader, so that the card reader controls the access power device to execute a door closing function.

21. A communication system, characterized by comprises the access control system according to any one of claims 1 to 10 and the user equipment according to any one of claims 11 to 20.

Images