An intelligent lock control method and system based on quantum random numbers

Abstract

The present application discloses an intelligent lock control method and system based on quantum random numbers. The intelligent lock is built-in with a quantum random number generation module to generate a master key and a session key. The unlocking request, visitor information, and unlocking information are all encrypted with the session key during the transmission process. After each unlocking process ends, the intelligent lock updates the session key, and the session key is encrypted with the master key during the transmission process. Since the master key and session key generated based on quantum random numbers cannot be predicted, the entire unlocking process is safe and reliable, effectively avoiding data interception, preventing malicious attackers from eavesdropping on the intelligent lock and mobile terminal, improving the unlocking security, enhancing the user experience, and having high practical value and promotion value in the security field.

Description

Technical Field

[0001] The present application relates to the field of security technologies, and in particular, to an intelligent lock control method and system based on quantum random numbers. Background Art

[0002] With the development of science and technology, while intelligent locks bring convenience to life, they also pose higher requirements for security. The traditional intelligent lock system consists of a cloud server, an intelligent lock, and a mobile APP. The communication between the three is carried out wirelessly, and the air wireless communication channel may be monitored and then cracked, resulting in non-secure authentication for unlocking. Among them, unlocking with the mobile APP depends on the intelligent lock cloud server platform. The way of unlocking with the mobile APP is usually that the mobile APP software sends an unlocking request to the intelligent lock server. After the cloud server verifies the unlocking permission, it sends the unlocking password to the mobile phone and the corresponding intelligent lock through the network respectively. The user inputs the password received by the mobile phone into the intelligent lock, and then the intelligent lock compares this password with the password it received itself. If they are the same, the lock is unlocked; if they are different, the lock is not unlocked. However, the method of using traditional certificates or account passwords between the mobile phone and the cloud server to verify the unlocking permission has a relatively high risk of the unlocking information being cracked or intercepted, so the unlocking security is poor.

[0003] Random numbers are one of the important resources in cryptography. Whether it is for classical cryptography or quantum cryptography, the requirements for the randomness of random numbers are very strict, and even directly determine the security of the vast majority of cryptographic systems. At present, based on the generation method and the characteristics of the output sequence, the generation methods of random numbers can be divided into two categories: pseudo-random number generators and physical random number generators. However, since pseudo-random numbers are generated based on a deterministic algorithm, the source of their randomness is only the randomness of the input seed. Therefore, when it is used frequently, in theory, it can be predicted by statistical analysis of the generated random numbers, and the security cannot be fully guaranteed, which may provide attack vulnerabilities for eavesdroppers.

[0004] Physical random numbers are different. Their randomness is based on the randomness of some non-deterministic objective physical phenomena, including atmospheric noise, electronic noise, circuit jitter, etc. These random number generators generate random numbers from the results of detecting these physical phenomena. At the same time, if these physical phenomena are quantum phenomena, then this type of physical random number generator is called a quantum random number generator, and these physical phenomena include quantum physical processes such as vacuum fluctuations, phase noise, and radiation decay. Due to the intrinsic randomness of quantum mechanics in quantum physical processes, quantum random numbers are generally considered to have true randomness, cannot be predicted, and have extremely high security. Therefore, how to use quantum random number encryption to improve the security of the intelligent lock system is an urgent problem to be solved. Summary of the Invention

[0005] The objective of this application is to provide an intelligent lock control method and system based on quantum random numbers, which can improve the unlocking security and enhance the user experience. The specific solution is as follows:

[0006] In the first aspect, this application discloses an intelligent lock control method based on quantum random numbers. The method is applied to an intelligent lock, and the intelligent lock is communicatively connected to a mobile terminal. The method includes:

[0007] Generating a quantum random number as a quantum key and generating a master key and an initial session key based on the quantum random number;

[0008] Sending the master key and the initial session key to the mobile terminal;

[0009] When an unlocking request is received, collecting visitor information. The intelligent lock encrypts the unlocking request and the visitor information using the initial session key, generates a first unlocking instruction, and sends it to the mobile terminal;

[0010] Receiving the first unlocking instruction, the mobile terminal decrypts the first unlocking instruction using the initial session key to obtain the unlocking request and the visitor information; verifying the unlocking request and the visitor information. After passing the verification, the mobile terminal sends a second unlocking instruction to the intelligent lock. The second unlocking instruction is unlocking information encrypted using the initial session key;

[0011] Receiving the second unlocking instruction, the intelligent lock decrypts the second unlocking instruction using the initial session key to obtain the unlocking information. The intelligent lock compares the obtained unlocking information with the pre-stored unlocking information. If the comparison is successful, the unlocking action is executed. At the same time, the unlocking action triggers the intelligent lock to generate an updated session key and transmit it to the mobile terminal. The updated session key is used as the current session key to execute the next unlocking process.

[0012] Preferably, the intelligent lock control method based on quantum random numbers further includes:

[0013] When it is determined that the unlocking process ends, deleting the initial session key.

[0014] Preferably, the intelligent lock control method based on quantum random numbers further includes:

[0015] After successful unlocking, reporting the successful unlocking information to the mobile terminal.

[0016] Preferably, the step of the unlocking action triggering the intelligent lock to generate an updated session key and transmit it to the mobile terminal includes:

[0017] Obtaining an unlocking action signal, and the unlocking action signal triggers the intelligent lock to generate an updated session key;

[0018] Use the master key to encrypt the updated session key to form an encrypted updated session key and send it to the mobile terminal. The mobile terminal decrypts the encrypted updated session key using the master key to obtain the updated session key.

[0019] Preferably, the step of the mobile terminal verifying the unlocking request further includes:

[0020] When the verification fails, the mobile terminal generates an exception reminder message;

[0021] Request to obtain the current pre-door surveillance video of the smart lock.

[0022] Preferably, generating the master key and the initial session key based on the quantum random number includes:

[0023] Apply algorithms including hash algorithm, one-time pad algorithm, and / or symmetric cryptography algorithm to generate the master key and the initial session key according to the quantum key.

[0024] Preferably, the unlocking information includes the face photo of the administrator and / or the administrator password.

[0025] In a second aspect, the present application provides an intelligent lock control system based on quantum random numbers. The system consists of an intelligent lock and a mobile terminal, and the intelligent lock is communicatively connected to the mobile terminal; the system includes an intelligent lock and a mobile terminal, and the intelligent lock is communicatively connected to the mobile terminal; the intelligent lock includes:

[0026] A quantum random number generation module for generating a quantum random number as a quantum key and generating a master key, an initial session key, and an updated session key based on the quantum random number, where the updated session key is periodically updated based on the unlocking action;

[0027] A first sending module for sending the master key and the initial session key to the mobile terminal;

[0028] A first encryption module for encrypting the unlocking request and the visitor information using the initial session key or the updated session key when receiving the unlocking request and the visitor information to generate a first unlocking instruction; and for encrypting the updated session key using the master key;

[0029] A first receiving module for receiving a second unlocking instruction, where the second unlocking instruction is unlocking information encrypted using the initial session key or the updated session key;

[0030] A first decryption module for decrypting the second unlocking instruction using the initial session key or the updated session key when receiving the second unlocking instruction to obtain the decrypted unlocking information;

[0031] The unlocking execution module is used to receive the decrypted unlocking information from the first decryption module, compare the decrypted unlocking information with the pre-stored unlocking information, and perform the unlocking action if the comparison is successful. Meanwhile, it triggers the quantum random number generation module to generate the updated session key; the updated session key is used as the current session key to execute the next unlocking process.

[0032] The mobile terminal includes:

[0033] The second receiving module is used to receive the master key and the initial session key.

[0034] The second decryption module is used to decrypt the first unlocking instruction using the initial session key or the updated session key when receiving the first unlocking instruction, and obtain the unlocking request and the visitor information.

[0035] The verification module is used to compare the obtained unlocking request with the intelligent lock information authenticated by the mobile terminal.

[0036] The second encryption module is used to encrypt the unlocking information using the initial session key or the updated session key to generate the second unlocking instruction.

[0037] The second sending module is used to send the second unlocking instruction to the first receiving module.

[0038] Preferably, the mobile terminal includes a verification failure module, and the verification failure module includes:

[0039] The abnormal reminder information generation sub-module is used to generate abnormal reminder information when the unlocking request fails to be verified.

[0040] The request to obtain the monitoring video sub-module is used to request the intelligent lock to retrieve the current front-door monitoring video.

[0041] Preferably, the intelligent lock further includes an information collection module, which is used to obtain the visitor's picture and the front-door monitoring video.

[0042] Generally speaking, compared with the prior art through the above technical solutions conceived by the present invention, the following beneficial effects can be achieved:

[0043] In this application, both the unlocking request and the visitor information are encrypted using a session key during transmission. Only after the mobile terminal decrypts them can it obtain the unlocking request and the visitor information. Moreover, the unlocking information is only sent after being verified and confirmed. The unlocking information is also encrypted using the session key during transmission. Therefore, the data transmission during the entire unlocking process is highly secure. The intelligent lock decrypts the encrypted unlocking information. Only after successful decryption and successful comparison of the decrypted unlocking information with the pre-stored unlocking information can the lock be opened. After each unlocking process ends, the intelligent lock automatically updates the session key. The session key is encrypted using the master key during transmission. Since the master key and the session key generated based on quantum random numbers cannot be predicted, the entire unlocking process is safe and reliable, effectively preventing data interception and malicious attackers from eavesdropping on the intelligent lock and the mobile terminal, improving the unlocking security, enhancing the user experience, and having high practical and promotional value in the field of security. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] To more clearly illustrate the technical solutions in the embodiments or the prior art, the following will briefly introduce the drawings required for the description of the embodiments or the prior art. Obviously, the drawings in the following description are only some embodiments of the present application. For those of ordinary skill in the art, without creative efforts, other drawings can be obtained based on these drawings.

[0045] Figure 1 It is a flowchart of a method for controlling an intelligent lock based on quantum random numbers provided by an embodiment of the present application;

[0046] Figure 2 It is a flowchart of the unlocking action triggering the intelligent lock to generate and transmit an updated session key to the mobile terminal in a method for controlling an intelligent lock based on quantum random numbers provided by an embodiment of the present application;

[0047] Figure 3 It is a flowchart of the verification failure in a method for controlling an intelligent lock based on quantum random numbers provided by an embodiment of the present application;

[0048] Figure 4 It is a schematic structural diagram of a control system for an intelligent lock based on quantum random numbers provided by an embodiment of the present application;

[0049] Figure 5 It is a schematic structural diagram of the intelligent lock in a control system for an intelligent lock based on quantum random numbers provided by an embodiment of the present application;

[0050] Figure 6 It is a schematic structural diagram of the verification failure module in a control system for an intelligent lock based on quantum random numbers provided by an embodiment of the present application. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0051] To make the above objects, features, and advantages of the present application more apparent and understandable, the embodiments of the present application will be further described in detail below in conjunction with the accompanying drawings and specific embodiments. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all of the embodiments. All other embodiments obtained by those of ordinary skill in the art based on the embodiments in the present application without creative efforts belong to the scope of protection of the present application.

[0052] In the following description, many specific details are set forth in order to fully understand the present application. However, the present application can also be implemented in other ways different from those described herein. Those skilled in the art can make similar extensions without departing from the connotation of the present application. Therefore, the present application is not limited by the specific embodiments disclosed below.

[0053] To facilitate the understanding and explanation of the technical solutions provided by the embodiments of the present application, the background technology of the present application will be described first.

[0054] The traditional intelligent lock system consists of a cloud server, an intelligent lock, and a mobile phone APP. The communication between the three is carried out wirelessly. There is a possibility that the wireless communication channel in the air can be monitored and then cracked, resulting in unlocking without security authentication. Among them, the mobile phone APP unlocking depends on the intelligent lock cloud server platform. The mobile phone APP unlocking method is usually that the mobile phone APP software sends an unlocking request to the intelligent lock server. After the cloud server verifies the unlocking permission, it sends the unlocking password to the mobile phone and the corresponding intelligent lock through the network respectively. The user inputs the password received by the mobile phone into the intelligent lock, and then the intelligent lock compares the password with the password it received. If they are the same, the lock is opened; if they are different, the lock is not opened. However, the method of using traditional certificates or account passwords between the mobile phone and the cloud server to verify the unlocking permission has a relatively high risk of the unlocking information being cracked or intercepted, so the unlocking security is poor.

[0055] Random numbers are one of the important resources in cryptography. Currently, based on the generation method and the characteristics of the output sequence, the generation methods of random numbers can be divided into two categories: pseudo-random number generators and physical random number generators. Pseudo-random numbers are generated based on deterministic algorithms, and their randomness source is only the randomness of the input seed. Therefore, when it is frequently used, in theory, it can be predicted by statistical analysis of the generated random numbers, and the security cannot be fully guaranteed, which may provide attack vulnerabilities for eavesdroppers. Different from this, physical random numbers are based on the randomness of some non-deterministic objective physical phenomena, including atmospheric noise, electronic noise, circuit jitter, etc. These random number generators generate random numbers from the results of detecting these physical phenomena. At the same time, if these physical phenomena are quantum phenomena, then this type of physical random number generator is called a quantum random number generator, and these physical phenomena include quantum physical processes such as vacuum fluctuations, phase noise, and radioactive decay. Due to the intrinsic randomness of quantum mechanics in quantum physical processes, quantum random numbers are generally considered to have true randomness and cannot be predicted, with extremely high security.

[0056] Based on this, this application applies quantum random numbers to an intelligent lock. Quantum random numbers are generated on the intelligent lock as quantum keys. Among them, the quantum key includes a quantum public key and a quantum private key. The quantum private key is stored on the intelligent lock, and the quantum public key is sent to the mobile terminal. When a visitor presses the doorbell button, the intelligent lock receives the unlocking request and signs the unlocking request using the quantum private key. The signed unlocking request is sent to the mobile terminal. The mobile terminal receives the request and verifies the signature using the quantum public key. After the verification passes, the user enters the unlocking information on the mobile terminal. At the same time, the mobile terminal encrypts the entered unlocking information using the quantum public key. The encrypted unlocking information is transmitted to the intelligent lock. The intelligent lock decrypts the encrypted unlocking information using the quantum private key and compares the decrypted unlocking information with the pre-stored unlocking information. After the comparison is successful, the unlocking action is executed.

[0057] Specifically, refer to Figure 1 , Figure 1 which is a flowchart of an intelligent lock control method based on quantum random numbers provided by an embodiment of this application. The specific method includes steps S101 - S105;

[0058] It should be noted that the control method of the embodiment of this application is applied to an intelligent lock and a mobile terminal, and the intelligent lock is communicatively connected to the mobile terminal. First, the intelligent lock and the mobile terminal are described as follows:

[0059] In the embodiments of the present invention, the intelligent lock may be a lock with communication and computing processing functions. The mobile terminal includes mobile terminals running Android operating system, iOS operating system, Windows operating system or other operating systems, such as mobile phones, tablet computers, laptop computers, personal digital assistants (PDAs), and mobile Internet devices (MIDs), etc. The subsequent embodiments of the present invention will not be repeated. An unlocking application is installed on the mobile terminal.

[0060] The intelligent lock is communicatively connected to the mobile terminal. The communication connection methods include connection methods such as Bluetooth and the Internet. When necessary, a wired connection method such as USB (Universal Serial Bus) can also be used for communication connection. When the intelligent lock and the mobile terminal are connected for the first time, Bluetooth or network authentication is performed. After the authentication is passed, a communication channel is established, and the identity identification information of the intelligent lock is synchronized to the mobile terminal. Each intelligent lock has a unique identity identification information, which has been set and cannot be modified during production.

[0061] S101: The intelligent lock generates a quantum random number as a quantum key and generates a master key and an initial session key based on the quantum random number.

[0062] In this embodiment, a quantum random number generator built into the intelligent lock generates a quantum random number as a quantum key, and the quantum random number generates a master key and an initial session key based on a cryptographic algorithm.

[0063] In this embodiment, by using hash algorithm, one-time pad algorithm and / or symmetric cryptographic algorithm, a master key and an initial session key are generated according to the quantum key.

[0064] S102: Send the master key and the initial session key to the mobile terminal.

[0065] In this embodiment, in order to improve the security of transmission, preferably, the master key and the initial session key are wirelessly transmitted to the mobile terminal through Bluetooth or transmitted through physical connection, such as connecting the intelligent lock and the mobile terminal through USB wired connection to realize the transmission of the keys, avoiding the risk of network transmission being intercepted, and thus improving the security of unlocking.

[0066] S103: When an unlocking request is received, collect the information of the visitor. The intelligent lock encrypts the unlocking request and the visitor information using the initial session key, generates a first unlocking instruction and sends it to the mobile terminal.

[0067] In this embodiment, the visitor presses the doorbell button to send an unlocking request. While the intelligent lock responds to the unlocking request, it collects visitor information. The unlocking request includes the identity identifier of the intelligent lock and a timestamp. The visitor information includes one or a combination of visitor pictures, iris information, or fingerprint information. However, out of concern for the security of the visitor's iris information and fingerprint information, this embodiment preferably obtains the visitor picture. When the visitor presses the doorbell button, the intelligent lock captures the visitor's picture and encrypts the identity identifier of the intelligent lock, the timestamp, and the visitor picture using the initial session key to generate a first unlocking instruction. The unlocking instruction is sent to the mobile terminal through a traditional communication network such as a public network or an optical fiber network.

[0068] S104: Receive the first unlocking instruction. The mobile terminal decrypts the first unlocking instruction using the initial session key to obtain the unlocking request and visitor information; verify the unlocking request and visitor information. After passing the verification, the mobile terminal sends a second unlocking instruction to the intelligent lock. The second unlocking instruction is unlocking information encrypted using the initial session key.

[0069] In this embodiment, the mobile terminal receives the first unlocking instruction and decrypts the first unlocking instruction using the initial session key to obtain the unlocking request and visitor information; the mobile terminal compares the obtained unlocking request with the intelligent lock information authenticated by the mobile terminal. Here, the intelligent lock information refers to the identity identifier of the intelligent lock. If the comparison is successful, it indicates that the unlocking request is sent by the intelligent lock authenticated by the mobile terminal. When the visitor information is the visitor picture captured by the intelligent lock, the verification of the visitor information is implemented by the administrator. The administrator determines whether to open the door based on the obtained visitor picture. When the visitor information is fingerprint information or iris information, the verification of the visitor information is implemented by the mobile terminal. It should be noted that the prerequisite for implementing this solution is that there is a pre-collected fingerprint information database or iris information database on the mobile terminal. Based on the fingerprint information database or iris information database, the mobile terminal compares the collected visitor fingerprint information or iris information with the corresponding database. If the comparison is successful, it is confirmed to open the door. However, there are still certain practical risks in storing the fingerprint information database or iris information database on the mobile terminal. Therefore, this implementation plan preferably obtains the visitor picture, and the administrator determines whether to open the door based on the visitor object.

[0070] After the above verification is passed, the mobile terminal sends a second unlocking instruction to the intelligent lock. The second unlocking instruction is unlocking information encrypted using the initial session key. The unlocking information includes information such as the administrator's face photo and administrator password. Here, it should be noted that information such as the administrator's face photo and administrator password has been collected and stored in the intelligent lock during the initial authentication of the intelligent lock and the mobile terminal.

[0071] S105: Receive the second unlocking instruction. The intelligent lock decrypts the second unlocking instruction using the initial session key to obtain the unlocking information. The intelligent lock compares the obtained unlocking information with the pre-stored unlocking information. If the comparison is successful, the unlocking action is performed. Meanwhile, the unlocking action triggers the intelligent lock to generate an updated session key and transmit it to the mobile terminal. The updated session key is used as the current session key to perform the next unlocking process.

[0072] In this embodiment, the second unlocking instruction is transmitted to the intelligent lock through a public network or an optical fiber network. After receiving the second unlocking instruction, the intelligent lock decrypts the second unlocking instruction using the initial session key to obtain the unlocking information, and at the same time compares the obtained unlocking information with the pre-stored unlocking information. If the comparison is successful, the unlocking action is performed. Meanwhile, the unlocking action triggers the intelligent lock to generate an updated session key and transmit the updated session key to the mobile terminal. The updated session key will replace the initial session key and be used as the current session key to perform the next unlocking process. In this embodiment, the updated session key is updated periodically, and a new updated session key is generated after each unlocking is completed. Therefore, the updated session keys used in each unlocking process are different, further improving the security of data transmission and unlocking. In this embodiment, when it is determined that the unlocking process is completed, the initial session key is deleted.

[0073] As a preferred embodiment of the present application, the intelligent lock control method based on quantum random numbers further includes reporting the unlocking success information to the mobile terminal after unlocking is successful to remind the administrator that the unlocking is successful.

[0074] As Figure 2 shown, as a preferred embodiment of the present application, the method for the unlocking action to trigger the intelligent lock to generate an updated session key and transmit it to the mobile terminal specifically includes steps S201 - S202.

[0075] S201: Obtain the unlocking action signal, and the unlocking action signal triggers the intelligent lock to generate an updated session key.

[0076] In this embodiment, after the unlocking information obtained by the intelligent lock is successfully compared with the pre-stored unlocking information, the unlocking action is performed to generate an unlocking action signal, and the intelligent lock generates an updated session key based on the unlocking action signal. The updated session key will replace the function of the initial session key to perform the next unlocking process.

[0077] S202: Encrypt the updated session key using the master key to form the encrypted updated session key and send it to the mobile terminal. The mobile terminal decrypts the encrypted updated session key using the master key to obtain the updated session key.

[0078] In this embodiment, the master key is used to encrypt and update the session key, and the encrypted updated session key is sent to the mobile terminal via a public network or an optical fiber network. Since quantum random numbers have true randomness and cannot be predicted, the security of the communication of the encrypted updated session key is guaranteed. The mobile terminal decrypts the encrypted updated session key using the master key to obtain the updated session key. In this way, the updated session key is stored on both the smart lock and the mobile terminal. During the next unlocking process, the updated session key replaces the initial session key to perform relevant steps and complete the next unlocking task.

[0079] As Figure 3 shown, as a preferred embodiment of the present application, the steps for the mobile terminal to verify the unlocking request further include:

[0080] S1041: When the verification fails, the mobile terminal generates an exception reminder message;

[0081] S1042: Request to retrieve the current front-door surveillance video of the smart lock.

[0082] In this embodiment, when the verification fails, there may be abnormal situations such as the unlocking request not being sent by the smart lock authenticated with the manager's mobile terminal or the unlocking request being modified during transmission. Based on this, the mobile terminal generates an exception reminder message to remind the manager not to unlock and pay attention to the security of the smart lock. At the same time, the mobile terminal requests to retrieve the current front-door surveillance video of the smart lock to understand the current situation in front of the smart lock by viewing the video.

[0083] Based on the above content, it can be seen that both the unlocking request and the visitor information are encrypted using the session key during transmission, and the unlocking request and the visitor information can only be obtained by the mobile terminal after decryption. Moreover, the unlocking information is only sent after being verified and confirmed, and the unlocking information is also encrypted using the session key during transmission. Therefore, the data transmission security during the entire unlocking process is high. The smart lock decrypts the encrypted unlocking information, and only unlocks after the decryption is successful and the decrypted unlocking information matches the pre-stored unlocking information. After each unlocking process ends, the smart lock automatically updates the session key. The session key is encrypted using the master key during transmission, and the master key and session key generated based on quantum random numbers cannot be predicted. Therefore, the entire unlocking process is safe and reliable, effectively preventing data from being intercepted, and at the same time preventing malicious attackers from eavesdropping on the smart lock and the mobile terminal, improving the unlocking security, enhancing the user experience, and having high practical value and promotion value in the field of security.

[0084] See Figure 4, This figure is a schematic structural diagram of an intelligent lock control system provided by an embodiment of the present application. The system includes an intelligent lock 41 and a mobile terminal 42, and the intelligent lock 41 is communicatively connected to the mobile terminal 42. The external structure of the intelligent lock 41 is as shown in Figure 5 shown. Specifically, the intelligent lock 41 includes: a quantum random number generation module 411, a first sending module 412, a first encryption module 413, a first receiving module 414, a first decryption module 415, and an unlocking execution module 416.

[0085] The quantum random number generation module 411 is used to generate quantum random numbers as quantum keys and generate a master key, an initial session key, and an updated session key based on the quantum random numbers. The updated session key is periodically updated based on the unlocking action. In this embodiment, the master key, the initial session key, and the updated session key are generated according to the quantum random numbers by using algorithms including a hash algorithm, a one-time pad algorithm, and / or a symmetric cryptography algorithm.

[0086] The first sending module 412 is used to send the master key and the initial session key to the mobile terminal 42.

[0087] The first encryption module 413 is used to encrypt the unlocking request and the collected visitor information using the initial session key or the updated session key when receiving an unlocking request to generate a first unlocking instruction; and is used to encrypt the updated session key using the master key.

[0088] The first receiving module 414 is used to receive a second unlocking instruction, and the second unlocking instruction is unlocking information encrypted by the initial session key or the updated session key.

[0089] The first decryption module 415 is used to decrypt the second unlocking instruction using the initial session key or the updated session key when receiving the second unlocking instruction to obtain the decrypted unlocking information.

[0090] The unlocking execution module 416 is used to receive the decrypted unlocking information from the first decryption module 415, compare the decrypted unlocking information with the pre-stored unlocking information, and execute the unlocking action if the comparison is successful, and at the same time trigger the quantum random number generation module 411 to generate an updated session key. The function of the updated session key is the same as that of the initial session key. In the next unlocking process, the updated session key replaces the initial session key to execute the unlocking process. The updated session key is generated periodically, and a new updated session key is generated after each unlocking ends, and the session key used in the previous cycle of the unlocking process is deleted.

[0091] The mobile terminal includes: a second receiving module 421, a second decryption module 422, a verification module 423, a second encryption module 424, and a second sending module 425.

[0092] The second receiving module 421 is configured to receive the master key and the initial session key;

[0093] The second decryption module 422 is configured to, when receiving the first unlocking instruction, decrypt the first unlocking instruction using the initial session key or the updated session key to obtain the unlocking request and the visitor information;

[0094] The verification module 423 is configured to compare the obtained unlocking request with the intelligent lock information authenticated by the mobile terminal;

[0095] The second encryption module 424 is configured to encrypt the unlocking information using the initial session key or the updated session key to generate a second unlocking instruction;

[0096] The second sending module 425 is configured to send the second unlocking instruction to the first receiving module 414.

[0097] As Figure 6 shown, as a preferred embodiment of the present invention, the mobile terminal 42 further includes a verification failure module 426, and the verification failure module 426 includes:

[0098] An abnormal reminder information generation sub-module 4261, configured to generate abnormal reminder information when the unlocking request fails to pass the verification;

[0099] A request to obtain a monitoring video sub-module 4262, configured to request the intelligent lock 41 to retrieve the current front-door monitoring video.

[0100] As a preferred embodiment of the present invention, the intelligent lock 41 further includes an information collection module 417, which can be components such as a camera and a microphone, and is configured to obtain visitor pictures and front-door monitoring videos.

[0101] In this embodiment, when the verification fails, there may be abnormal situations such as the unlocking request not being sent by the intelligent lock authenticated by the administrator's mobile terminal or the unlocking request being modified during the transmission process. Based on this, the mobile terminal generates abnormal reminder information to remind the administrator not to unlock and pay attention to the security issues of the intelligent lock. At the same time, the mobile terminal requests to retrieve the current front-door monitoring video of the intelligent lock, and understands the current situation in front of the intelligent lock by viewing the video.

[0102] It should be noted here that the intelligent lock further includes components such as a memory, a button chip, a fingerprint sensor, and an intelligent lock body. These components are common components in the prior art and will not be elaborated in detail here.

[0103] It should also be noted that the above only describes the preferred embodiments of the present invention in detail, and does not limit the present invention. Any modifications, equivalent replacements, and improvements made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

[0104] It should be understood that although the steps in the flowcharts of the embodiments of the present invention are shown in sequence according to the indications of the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless otherwise clearly stated in this article, there is no strict order restriction for the execution of these steps, and these steps can be executed in other orders. Moreover, at least a part of the steps in each embodiment may include multiple sub-steps or multiple stages. These sub-steps or stages are not necessarily executed at the same time, but can be executed at different times. The execution order of these sub-steps or stages is not necessarily sequential, but can be executed alternately or in turn with at least a part of other steps or sub-steps or stages of other steps.

[0105] Those of ordinary skill in the art can understand that all or part of the processes of implementing the methods in the above embodiments can be completed by instructing relevant hardware through a computer program. The program can be stored in a non-volatile computer-readable storage medium. When the program is executed, it can include the processes of the embodiments of the above methods.

[0106] After considering the specification and the disclosure of the embodiments, those skilled in the art will readily think of other embodiments of the present disclosure. This application is intended to cover any variations, uses, or adaptations of the present disclosure. These variations, uses, or adaptations follow the general principles of the present disclosure and include the common general knowledge or conventional technical means in the technical field not disclosed in the present disclosure. The specification and the embodiments are only regarded as exemplary, and the true scope and spirit of the present disclosure are pointed out by the claims.

Claims

1. An intelligent lock control method based on quantum random numbers, characterized in that The method is applied to an intelligent lock, which is communicatively connected to a mobile terminal. The method includes: Generating a quantum random number as a quantum key and generating a master key and an initial session key based on the quantum random number; Sending the master key and the initial session key to the mobile terminal; When an unlocking request is received, collecting visitor information. The intelligent lock encrypts the unlocking request and the visitor information using the initial session key, generates a first unlocking instruction and sends it to the mobile terminal; Receiving the first unlocking instruction, the mobile terminal decrypts the first unlocking instruction using the initial session key, obtains the unlocking request and the visitor information; verifies the unlocking request and the visitor information, and after passing the verification, the mobile terminal sends a second unlocking instruction to the intelligent lock. The second unlocking instruction is unlocking information encrypted using the initial session key; Receiving the second unlocking instruction, the intelligent lock decrypts the second unlocking instruction using the initial session key, obtains the unlocking information. The intelligent lock compares the obtained unlocking information with the pre-stored unlocking information. If the comparison is successful, the unlocking action is executed. At the same time, the unlocking action triggers the intelligent lock to generate an updated session key and transmit it to the mobile terminal. The updated session key is used as the current session key to execute the next unlocking process; The step that the unlocking action triggers the intelligent lock to generate an updated session key and transmit it to the mobile terminal includes: obtaining an unlocking action signal, which triggers the intelligent lock to generate an updated session key; encrypting the updated session key using the master key to form an encrypted updated session key and sending it to the mobile terminal, and the mobile terminal decrypts the encrypted updated session key using the master key to obtain the updated session key.

2. The method according to claim 1, characterized in that, The method further includes: when it is determined that the unlocking process ends, deleting the initial session key.

3. The method according to claim 1, wherein The method further includes: when the unlocking is successful, reporting the unlocking success information to the mobile terminal.

4. The method according to any one of claims 1 to 3, characterized in that, The step of the mobile terminal verifying the unlocking request further includes: When the verification fails, the mobile terminal generates an exception reminder information; Requesting to obtain the front-door monitoring video of the intelligent lock at that time.

5. The method according to any one of claims 1-3, characterized in that, Generating a master key and an initial session key based on the quantum random number includes: Applying algorithms including a hash algorithm, a one-time pad algorithm, and / or a symmetric cryptography algorithm to generate a master key and an initial session key according to the quantum key.

6. The method according to any one of claims 1 to 3, characterized in that, The unlocking information includes the face photo of the administrator and / or the administrator password.

7. An intelligent lock control system based on quantum random numbers, characterized in that, The system includes an intelligent lock and a mobile terminal, and the intelligent lock is communicatively connected to the mobile terminal; the intelligent lock includes: A quantum random number generation module, configured to generate a quantum random number as a quantum key and generate a master key, an initial session key, and an updated session key based on the quantum random number. The updated session key is periodically updated based on the unlocking action; A first sending module, configured to send the master key and the initial session key to the mobile terminal; A first encryption module, configured to encrypt the unlocking request and the visitor information using the initial session key or the updated session key when receiving the unlocking request and the visitor information, so as to generate a first unlocking instruction; and configured to encrypt the updated session key using the master key; A first receiving module, configured to receive a second unlocking instruction, where the second unlocking instruction is unlocking information encrypted using the initial session key or the updated session key; A first decryption module, configured to decrypt the second unlocking instruction using the initial session key or the updated session key when receiving the second unlocking instruction, so as to obtain the decrypted unlocking information; An unlocking execution module, configured to receive the decrypted unlocking information from the first decryption module, compare the decrypted unlocking information with the pre-stored unlocking information, and execute the unlocking action if the comparison is successful, and trigger the quantum random number generation module to generate the updated session key at the same time; the updated session key is used as the current session key to execute the next unlocking process; The mobile terminal includes: A second receiving module, configured to receive the master key and the initial session key; A second decryption module, configured to decrypt the first unlocking instruction using the initial session key or the updated session key when receiving the first unlocking instruction, so as to obtain the unlocking request and the visitor information; A verification module, configured to compare the obtained unlocking request with the information of the smart lock authenticated by the mobile terminal; A second encryption module, configured to encrypt the unlocking information using the initial session key or the updated session key, so as to generate a second unlocking instruction; A second sending module, configured to send the second unlocking instruction to the first receiving module.

8. The system according to claim 7, wherein The mobile terminal includes a verification failure module, and the verification failure module includes: An abnormal reminder information generation sub-module, configured to generate abnormal reminder information when the unlocking request verification fails; A request to obtain a monitoring video sub-module, configured to request the smart lock to retrieve the current front door monitoring video.

9. The system according to claim 7, characterized in that, The smart lock further includes an information collection module, configured to obtain pictures of the visitor and the front door monitoring video.

Images