A method and apparatus for updating encryption and decryption algorithms for a group of devices.

Abstract

This specification provides a method and apparatus for updating encryption and decryption algorithms for a group of devices. The method includes: a first device acquiring plaintext of a new version of the encryption and decryption algorithm and broadcasting a version query signal; the first device determining whether it has received a feedback confirmation signal from a second device, and if it has not received a feedback confirmation signal from the second device, triggering a preset update process for the second device; wherein the preset update process includes: sending the plaintext of the new version of the encryption algorithm to a user terminal, so that the user terminal transmits the plaintext of the new version of the encryption algorithm to the second device via an NFC connection. This method can achieve a highly reliable upgrade and update of encryption and decryption algorithms for a group of devices with encryption and decryption requirements.

Description

Technical Field

[0001] This specification relates to the field of communication technology, specifically to a method and apparatus for updating encryption and decryption algorithms for a group of devices. Background Technology

[0002] For data security reasons, when devices in the same device group communicate, they encrypt plaintext communication data into ciphertext using a preset encryption / decryption algorithm before transmission. Similarly, the received ciphertext is decrypted using the same encryption / decryption algorithm. To prevent malicious devices outside the device group from cracking the encryption / decryption algorithm, the encryption / decryption algorithm of the device group needs to be updated periodically.

[0003] The current approach is to designate some devices in the device group as the first device and the other devices in the group besides the first device as the second device. When it is necessary to update the old version of the encryption / decryption algorithm of the device group to the new version, the first device obtains the plaintext of the new version encryption / decryption algorithm, encrypts the plaintext of the new version encryption / decryption algorithm using the old version encryption / decryption algorithm, obtains the ciphertext of the new version encryption / decryption algorithm, and sends the ciphertext of the new version encryption / decryption algorithm to the second device, so that the second device can decrypt the ciphertext of the new version encryption / decryption algorithm using the old version decryption algorithm, obtain the plaintext of the new version encryption / decryption algorithm, and complete the local algorithm update.

[0004] However, the reliability of existing encryption and decryption algorithm update schemes for device groups is not high. Summary of the Invention

[0005] In view of this, embodiments of this specification provide a method and apparatus for updating encryption and decryption algorithms for at least one group of devices.

[0006] Specifically, the embodiments in this specification are implemented through the following technical solutions:

[0007] Firstly, a method for updating the encryption / decryption algorithm of a device group is provided, the method comprising:

[0008] The first device obtains the plaintext of the new version encryption / decryption algorithm and sends a version query signal via broadcast;

[0009] The first device determines whether it has received a feedback confirmation signal from the second device. If it has not received a feedback confirmation signal from the second device, it triggers a preset update process for the second device.

[0010] The preset update process includes: sending the plaintext of the new version encryption algorithm to the user terminal, so that the user terminal can transmit the plaintext of the new version encryption algorithm to the second device through an NFC connection with the second device.

[0011] In the first aspect of the technical solution, during the process of updating the encryption and decryption algorithm of the device group, the first device broadcasts a version query signal to at least one second device. The confirmation signal from the second device confirms whether the second device locally stores the old version of the decryption algorithm. The communication connection between the first and second devices is also determined based on whether the confirmation signal from the second device is received. For second devices with poor communication connections or those that do not locally store the old version of the decryption algorithm, a preset update process can be triggered, thereby enabling the encryption and decryption algorithm of the device group with encryption and decryption requirements to achieve a reliable upgrade. After triggering the preset update process, the user terminal transmits the plaintext of the new version of the encryption and decryption algorithm via a secure NFC connection that is not easily intercepted. This ensures that the second device can update the encryption and decryption algorithm version while preventing the new version of the encryption and decryption algorithm from being leaked.

[0012] Further: the first device has a Bluetooth module; the version query signal broadcast includes: broadcasting the version query signal via the Bluetooth module.

[0013] Wi-Fi modules are relatively expensive, and configuring each device in the device group with a Wi-Fi module to receive broadcast signals would be too costly. Using a lower-cost Bluetooth module to broadcast version query signals is a better option. Version query signals have a small data size, can be transmitted quickly, and do not contain information about the new version's encryption and decryption algorithms. Even though Bluetooth broadcasts will indiscriminately send signals to any nearby device with a Bluetooth module, resulting in poor confidentiality, it will not lead to the leakage of encryption and decryption algorithm information.

[0014] Furthermore, the method also includes:

[0015] The first device identifies the second device, which has sent a feedback confirmation signal, as the automatic update device, establishes a Bluetooth connection with the automatic update device, and transmits the ciphertext of the new version encryption and decryption algorithm, which uses the old version encryption algorithm, to the automatic update device through the Bluetooth connection, so that the automatic update device can use the old version decryption algorithm to decrypt the plaintext of the new version encryption and decryption algorithm to obtain the plaintext of the new version encryption and decryption algorithm.

[0016] Because Bluetooth broadcast transmits small amounts of data, it can only transmit data one message at a time. Transmitting the ciphertext of the new encryption / decryption algorithm via Bluetooth broadcast is impractical, and it is impossible to confirm whether the automatic update device has successfully received the data. Therefore, the first device establishes a Bluetooth connection with the automatic update device and transmits the ciphertext of the new encryption / decryption algorithm, which uses the old version of the encryption algorithm, to the automatic update device via Bluetooth connection. Bluetooth pairing connection can further improve the security of encryption / decryption algorithm transmission and can confirm that the data has been successfully transmitted after successful transmission.

[0017] Furthermore: the first device has a Wi-Fi module for wireless network communication;

[0018] The first device obtains the plaintext of the new version of the encryption / decryption algorithm, including:

[0019] The first device obtains the plaintext of the new version of the encryption / decryption algorithm sent by the server through the Wi-Fi module.

[0020] Wi-Fi modules are relatively expensive, and configuring a Wi-Fi module for every device in the device group to receive new versions of encryption and decryption algorithms would be too costly. It is more cost-effective to configure a Wi-Fi module only on the first device and then update the encryption and decryption algorithms of the other second devices through communication between the first device and the other second devices.

[0021] Further: the failure to receive a feedback confirmation signal from the second device includes:

[0022] No signal was received from the second device, and / or the received signal indicated that the second device did not have an older version of the decryption algorithm stored locally.

[0023] The second device might not send any signal or send a signal indicating that it does not have the old version of the decryption algorithm stored locally. Alternatively, it might have the old version of the decryption algorithm stored locally, but due to a communication failure between the second and first devices, it did not receive the version query signal broadcast by the first device. Or, although the second device received the version query signal, the confirmation signal was not sent to the first device due to the poor communication connection. In this case, the first device does not receive any signal from the second device and considers it to have not sent any signal. The lack of a confirmation signal confirms that the second device either does not have the old version of the decryption algorithm or is unable to automatically update due to poor communication with the first device.

[0024] Further: Sending the plaintext of the new version of the encryption algorithm to the user terminal includes:

[0025] The first device sends information containing the identifier of the second device to the server, so that the server, in response to receiving the information containing the identifier of the second device sent by the first device, sends the plaintext of the new version encryption algorithm and the identifier of the second device to the user terminal.

[0026] By sending the plaintext of the new encryption algorithm and the identifier of the second device to the user terminal through the server, the security is stronger and there is no need to worry about interception.

[0027] Furthermore, the preset update process also includes:

[0028] After successfully transmitting the plaintext of the new version of the encryption algorithm, the user terminal sends a signal to the server that the second device has been successfully updated.

[0029] The system sends a signal to the server indicating that the second device has been successfully updated, so that the server records the information of the successfully upgraded device and no longer sends reminders to the user terminal.

[0030] Secondly, a device for updating encryption / decryption algorithms for a group of devices is provided, the device being applied to the first device, comprising:

[0031] The update preparation module is used to: obtain the plaintext of the new version encryption / decryption algorithm and send a version query signal via broadcast;

[0032] The preset update module is used to: determine whether a feedback confirmation signal from the second device has been received; and if no feedback confirmation signal from the second device has been received, trigger a preset update process for the second device.

[0033] The preset update process includes: sending the plaintext of the new version encryption algorithm to the user terminal, so that the user terminal can transmit the plaintext of the new version encryption algorithm to the second device through an NFC connection with the second device.

[0034] Thirdly, an electronic device is provided, the device including a memory and a processor, the memory being used to store computer instructions executable on the processor, and the processor being used to implement the encryption / decryption algorithm update method of the device group described in any embodiment of this specification when executing the computer instructions.

[0035] Fourthly, a computer-readable storage medium is provided, on which a computer program is stored, which, when executed by a processor, implements the encryption / decryption algorithm update method for the device group described in any embodiment of this specification. Attached Figure Description

[0036] To more clearly illustrate the technical solutions in one or more embodiments or related technologies of this specification, the accompanying drawings used in the description of the embodiments or related technologies will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments recorded in one or more embodiments of this specification. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0037] Figure 1 This is a flowchart illustrating an encryption / decryption algorithm update method for a device group, as shown in at least one embodiment of this specification;

[0038] Figure 2 This is a flowchart illustrating information interaction between devices according to at least one embodiment of this specification;

[0039] Figure 3 This is a block diagram illustrating an encryption / decryption algorithm update apparatus for a device group, as shown in at least one embodiment of this specification;

[0040] Figure 4 This is a block diagram of an encryption / decryption algorithm update apparatus for another group of devices, as shown in at least one embodiment of this specification;

[0041] Figure 5 This is a schematic diagram of the hardware structure of an electronic device shown in at least one embodiment of this specification. Detailed Implementation

[0042] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numerals in different drawings denote the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with this specification. Rather, they are merely examples of apparatuses and methods consistent with some aspects of this specification as detailed in the appended claims.

[0043] The terminology used in this specification is for the purpose of describing particular embodiments only and is not intended to be limiting of this specification. The singular forms “a,” “the,” and “the” as used in this specification and the appended claims are also intended to include the plural forms unless the context clearly indicates otherwise. It should also be understood that the term “and / or” as used herein refers to and includes any and all possible combinations of one or more of the associated listed items.

[0044] It should be understood that although the terms first, second, third, etc., may be used in this specification to describe various information, this information should not be limited to these terms. These terms are only used to distinguish information of the same type from one another. For example, without departing from the scope of this specification, first information may also be referred to as second information, and similarly, second information may also be referred to as first information. Depending on the context, the word "if" as used herein may be interpreted as "when," "when," or "in response to determination."

[0045] When updating the encryption and decryption algorithms of a device group, sometimes due to network limitations or version information limitations, some second devices may not be able to automatically update their encryption and decryption algorithms.

[0046] Among them, network limitations refer to the inability of the first device and the second device to communicate due to hardware or software failures, excessive distance, or other reasons.

[0047] Version information limitations refer to the fact that the encryption / decryption algorithm to be updated is sent as a message, and this message itself also needs to be encrypted. An older version of the encryption algorithm used before the update can be used for encryption. Therefore, the second device needs to decrypt this message before it can use the information within the message (i.e., the new version of the encryption / decryption algorithm) to upgrade its own encryption / decryption algorithm. Thus, the version of the second device's own encryption / decryption algorithm determines whether it can decrypt the message. If the second device does not locally possess the older version of the decryption algorithm corresponding to the older version of the encryption algorithm used by the first device when encrypting the message, it cannot obtain the new version of the encryption / decryption algorithm, and therefore automatic encryption / decryption algorithm updates cannot be achieved. In practical applications, due to the addition of new devices or modifications to device configurations within a device group, situations often arise where older versions of the decryption algorithm are not locally present on the device.

[0048] This means that when the encryption and decryption algorithms are updated, it cannot be guaranteed that every device in the device group will be updated. There will be situations where some devices have the new version of the encryption and decryption algorithm, while others do not, causing communication chaos between the device groups.

[0049] To improve the reliability of updating the encryption and decryption algorithms of a device group, at least one embodiment of this specification proposes a method for updating the encryption and decryption algorithms of a device group. This method can update the encryption and decryption algorithm version of a second device that cannot be automatically updated due to network factors or version information limitations. This enables the encryption and decryption algorithms of a device group with encryption and decryption requirements to be upgraded and updated with high reliability, while maintaining the security of the new version of the encryption and decryption algorithm information.

[0050] like Figure 1 As shown, Figure 1 This is a flowchart illustrating an encryption / decryption algorithm update method for a device group according to at least one embodiment of this specification. The device group may include at least a first device and at least one second device. For example, the device group includes one first device and multiple second devices. The method includes the following steps:

[0051] In step 102, the first device obtains the plaintext of the new version encryption / decryption algorithm and sends a version query signal in a broadcast manner.

[0052] The purpose of the version query signal is to enable any device that receives the version query signal to send a feedback confirmation signal to the first device if it confirms that it has stored the old version decryption algorithm locally.

[0053] In this embodiment, the devices in the device group refer to devices that can communicate with each other in a certain application environment, such as various household appliances, including but not limited to refrigerators, televisions, robot vacuum cleaners, and cooking appliances; they can also be multiple devices used in offices, commercial spaces, and industrial sites.

[0054] It should be noted that there is no strict distinction between the first and second devices in the device group; any device in the device group that obtains the plaintext of the new version of the encryption and decryption algorithm can become the first device.

[0055] This embodiment does not restrict the way the first device obtains the plaintext of the new version encryption and decryption algorithm. For example, the first device can automatically generate the new version encryption and decryption algorithm at regular intervals according to a set program. Or, the user can set the new version encryption and decryption algorithm on the first device.

[0056] In one example, the first device has a Wi-Fi (wireless network communication) module; the first device obtains the plaintext of the new version encryption / decryption algorithm, including: the first device obtains the plaintext of the new version encryption / decryption algorithm sent by the server through the Wi-Fi module.

[0057] After generating a new version of the encryption / decryption algorithm, the server transmits the plaintext of the new algorithm to the wireless router in the location of the first device via the network. The first device receives the plaintext of the new encryption / decryption algorithm sent by the wireless router through its Wi-Fi module. Typically, Wi-Fi modules are relatively expensive, and configuring a Wi-Fi module for each device in the group to receive the new encryption / decryption algorithm would be too costly. In this example, the Wi-Fi module can be configured only on the first device, and the encryption / decryption algorithms of other second devices can be updated through communication between the first device and the other second devices, thus saving costs.

[0058] In other examples, the first device can also first obtain the ciphertext of the new version of the encryption and decryption algorithm sent by the server through the Wi-Fi module, and then decrypt the ciphertext according to the decryption algorithm stored locally to obtain the plaintext of the new version of the encryption and decryption algorithm. This ciphertext can be encrypted by updating the old version of the encryption algorithm used by the first device before the update.

[0059] After the first device obtains the plaintext of the new encryption / decryption algorithm, it broadcasts a version query signal. Alternatively, the first device may broadcast the version query signal first, and then obtain the plaintext of the new encryption / decryption algorithm. This version query signal is sent via broadcast, and devices within the broadcast range of the first device can receive it.

[0060] In one example, each device in the device group has a Bluetooth module; the first device broadcasts the version query signal via the Bluetooth module.

[0061] Bluetooth broadcast communication offers low security. Devices within the broadcast area, as well as other devices outside the broadcast group, can receive the Bluetooth broadcast version query signal. The older encryption / decryption algorithm is one used by devices within the group before the version update; other devices outside the group do not possess it. Therefore, the second device among all devices receiving the version query signal, upon confirming that it has the older decryption algorithm stored locally, sends a feedback confirmation signal to the first device.

[0062] Version query signals are used to confirm the presence of older decryption algorithms in the second device. The data size of a version query signal is very small, and this embodiment does not limit the specific information contained in the version query signal. Several version query signals are exemplified below:

[0063] For example, the version query signal may carry a flag bit identifying the old version decryption algorithm, so that the second device, after verifying the flag bit, sends a feedback confirmation signal to the first device based on whether the old version decryption algorithm is stored. That is, if the second device verifies the flag bit and confirms that the old version decryption algorithm is stored locally, it sends a feedback confirmation signal to the first device; if it confirms that the old version decryption algorithm is not stored locally, it does not send a feedback confirmation signal, or sends a feedback denial signal.

[0064] For example, the version query signal can be encrypted into ciphertext using an older version encryption algorithm, so that if the second device stores the older version decryption algorithm, it can decrypt the ciphertext of the version query signal and send a feedback confirmation signal to the first device. Otherwise, if the second device does not store the older version decryption algorithm, it cannot recognize the encrypted version query signal, will not send a feedback confirmation signal to the first device, or will send feedback to the first device that it cannot recognize the version query signal.

[0065] In step 104, the first device determines whether it has received a feedback confirmation signal from the second device. If it has not received a feedback confirmation signal from the second device, it triggers a preset update process for the second device. The preset update process includes sending the plaintext of the new version encryption algorithm to the user terminal, so that the user terminal can transmit the plaintext of the new version encryption algorithm to the second device through an NFC (Near Field Communication) connection with the second device.

[0066] The failure to receive a feedback confirmation signal from the second device includes: not receiving any feedback signal from the second device, and / or the received feedback signal indicating that the second device does not have an older version of the decryption algorithm in its local storage.

[0067] For a second device that does not send a confirmation signal, the following situations may occur:

[0068] Scenario 1: The second device does not have the old version of the decryption algorithm stored locally. In this case, the second device may send a signal indicating that the old version of the decryption algorithm is not stored locally, or it may not send any signal.

[0069] Scenario 2: The second device locally stores an older version of the decryption algorithm. However, due to a communication connection failure between the second and first devices, the second device does not receive the version query signal broadcast by the first device. Alternatively, although the second device receives the version query signal broadcast by the first device, the confirmation signal is not sent to the first device due to the poor communication connection. In this case, the first device does not receive any signal from the second device, and it is assumed that the second device did not send any signal.

[0070] Regardless of the reason mentioned above, the second device, which fails to send a feedback confirmation signal, cannot establish a reliable connection with the first device and cannot receive and decrypt ciphertext encrypted using the old encryption algorithm, thus preventing automatic updates.

[0071] Therefore, the first device determines whether it has received a feedback confirmation signal from the second device. If no feedback confirmation signal is received from the second device, a preset update process for the second device is triggered. During manual updates, a user terminal with an NFC module transmits the plaintext of the new encryption algorithm to the second device via a secure NFC connection. This allows the second device to obtain the new encryption / decryption algorithm even if the old version is unavailable or communication with the first device is poor. The user terminal can be a mobile phone, tablet, or central control screen with an NFC module. In this embodiment, the second device has an NFC module.

[0072] The user terminal can obtain the plaintext of the new version encryption algorithm from the server, or it can obtain the plaintext of the new version encryption algorithm from the first device.

[0073] In one example, the plaintext of the new version of the encryption algorithm is sent to the user terminal, including:

[0074] The first device sends information containing the identifier of the second device to the server, so that the server, in response to receiving the information containing the identifier of the second device sent by the first device, sends the plaintext of the new version encryption algorithm and the identifier of the second device to the user terminal.

[0075] In this example, the user terminal receives the plaintext of the new version of the encryption algorithm and the identifier of the second device from the server.

[0076] For example, if the first device does not receive a feedback confirmation signal from a second device, it can send the identifier of the second device to the server to notify the server that the second device cannot be automatically upgraded. The server will then send the plaintext of the new version encryption / decryption algorithm and the identifier of the second device to be updated to the user's mobile application. Alternatively, if the mobile application has a corresponding decryption algorithm, it can send the ciphertext of the new version encryption / decryption algorithm and the identifier of the second device to be updated to the mobile application.

[0077] After obtaining the plaintext of the new encryption / decryption algorithm, the mobile application prompts the user to update the encryption / decryption algorithm of the second device corresponding to the identifier using NFC. When the user performs an NFC tap operation with the second device according to the prompts of the mobile application, the plaintext of the new encryption / decryption algorithm is written into the NFC module of the second device through the NFC connection between the NFC module of the mobile phone and the NFC module of the second device, so that the second device can update the encryption / decryption algorithm according to the new version of the encryption / decryption algorithm plaintext in the NFC module.

[0078] Alternatively, the server can first send a manual update message containing the identifier of the second device to the user's mobile phone, prompting the user to perform a manual update. When the user selects to update, the server then sends the plaintext of the new version's encryption and decryption algorithm to the mobile phone. The user then uses the mobile phone to update the identifier of the second device by tapping it against the device via NFC.

[0079] The reason the device group encrypts the new encryption / decryption algorithm during updates is that non-NFC connections (such as Bluetooth connections) are easily intercepted when transmitting algorithm data, thus requiring encryption and necessitating algorithm updates. During manual updates, the advantage of using NFC connections is that NFC data transmission is not intercepted, allowing plaintext transmission and eliminating the need for the second device to have the older decryption algorithm.

[0080] In other examples, besides NFC connections, user terminals can also use other secure connection methods to transmit the new version of the encryption algorithm in plaintext to the second device. For instance, the user terminal and the second device can be connected via a data cable.

[0081] In one example, the preset update process further includes: after successfully transmitting the plaintext of the new version encryption algorithm, the user terminal sends a signal to the server that the second device has been successfully updated.

[0082] For example, after a user's mobile phone successfully upgrades manually via NFC, it sends a signal to the server that the second device has been successfully updated, so that the server records the device information of the successfully upgraded device and no longer sends a reminder to the user's mobile phone. Otherwise, if no signal of successful update of the second device is received within a preset time, the server resends the plaintext of the new version encryption algorithm and the identifier of the second device to the user terminal.

[0083] The information interaction between the server, the first device, the second device, and the user terminal in the above embodiments is described in [reference needed]. Figure 2 As shown.

[0084] In one implementation, for a second device that locally stores an older version of the decryption algorithm and receives a confirmation signal from the first device, the following automatic update process can be performed: The first device identifies the second device that sent the confirmation signal as the automatic update device, establishes a Bluetooth connection with the automatic update device, and transmits the ciphertext of the new version encryption / decryption algorithm encrypted using the older version encryption algorithm to the automatic update device through the Bluetooth connection, so that the automatic update device can use the older version decryption algorithm to decrypt the plaintext of the new version encryption / decryption algorithm to obtain the plaintext of the new version encryption / decryption algorithm.

[0085] The first device identifies the second device, which is capable of automatically updating its encryption and decryption algorithm, as the automatic update device. It then establishes a Bluetooth connection with the automatic update device via Bluetooth pairing, transmits the ciphertext of the new version of the encryption and decryption algorithm through the Bluetooth connection, decrypts the ciphertext, and then updates its own encryption and decryption algorithm.

[0086] After updating its encryption / decryption algorithm to the new version using the new version of the encryption / decryption algorithm in plaintext, the automatic update device sends an automatic update success signal to the first device to notify the first device that the automatic update device has successfully updated. In one example, if the first device does not receive the confirmation signal, it can identify the automatic update device as a device awaiting manual update and trigger the aforementioned preset update process. Alternatively, it can repeat the aforementioned automatic update process to ensure the reliability of the device update encryption / decryption algorithm in the device group.

[0087] The encryption / decryption algorithm update method for a device group provided in this embodiment involves a first device broadcasting a version query signal to at least one second device during the update process. The method confirms whether the second device locally stores the old version of the decryption algorithm based on the confirmation signal received from the second device. It also determines whether the communication connection between the first and second devices is smooth based on whether the confirmation signal from the second device is received. For second devices with poor communication connections or those that do not locally store the old version of the decryption algorithm, a preset update process can be triggered. This ensures that the encryption / decryption algorithm of the device group requiring encryption / decryption can be reliably upgraded and updated, while guaranteeing the security of the new version of the encryption / decryption algorithm.

[0088] like Figure 3 As shown, Figure 3 This is a block diagram illustrating an encryption / decryption algorithm update apparatus for a device group according to at least one embodiment of this specification. The device group includes at least a first device and at least one second device. The apparatus is applied to the first device, and the apparatus includes:

[0089] Update preparation module 31 is used to: obtain the plaintext of the new version encryption and decryption algorithm, and send the version query signal in a broadcast manner;

[0090] The preset update module 32 is used to: determine whether a feedback confirmation signal from the second device has been received; and when no feedback confirmation signal from the second device has been received, trigger a preset update process for the second device.

[0091] The preset update process includes: sending the plaintext of the new version encryption algorithm to the user terminal, so that the user terminal can transmit the plaintext of the new version encryption algorithm to the second device through an NFC connection with the second device.

[0092] In one alternative implementation, the first device has a Bluetooth module;

[0093] The update preparation module 31, when used to send a version query signal in a broadcast manner, is specifically used to: broadcast the version query signal via a Bluetooth module.

[0094] In one alternative implementation, such as Figure 4 As shown, the device further includes: an automatic update module 33, used for:

[0095] The first device identifies the second device, which has sent a feedback confirmation signal, as the automatic update device, establishes a Bluetooth connection with the automatic update device, and transmits the ciphertext of the new version encryption and decryption algorithm, which uses the old version encryption algorithm, to the automatic update device through the Bluetooth connection, so that the automatic update device can use the old version decryption algorithm to decrypt the plaintext of the new version encryption and decryption algorithm to obtain the plaintext of the new version encryption and decryption algorithm.

[0096] In one optional implementation, the first device has a wireless network communication Wi-Fi module; the first device obtains the plaintext of the new version encryption / decryption algorithm by: the first device obtaining the plaintext of the new version encryption / decryption algorithm sent by the server through the Wi-Fi module.

[0097] In one optional implementation, the preset update module 32 not receiving a feedback confirmation signal from the second device includes: not receiving any feedback signal from the second device, and / or the received feedback signal indicating that the second device does not have an old version of the decryption algorithm in its local storage.

[0098] In one optional implementation, sending the plaintext of the new version encryption algorithm to the user terminal includes: the first device sending information containing the identifier of the second device to the server, so that the server, in response to receiving the information containing the identifier of the second device sent by the first device, sends the plaintext of the new version encryption algorithm and the identifier of the second device to the user terminal.

[0099] In one optional implementation, the preset update process further includes:

[0100] After successfully transmitting the plaintext of the new version of the encryption algorithm, the user terminal sends a signal to the server that the second device has been successfully updated.

[0101] The specific implementation process of the functions and roles of each module in the above device can be found in the implementation process of the corresponding steps in the above method, and will not be repeated here.

[0102] This specification also provides an electronic device, such as... Figure 5 As shown, the electronic device includes a memory 51 and a processor 52. The memory 51 is used to store computer instructions that can be executed on the processor, and the processor 52 is used to implement the encryption / decryption algorithm update method of the device group according to any embodiment of this disclosure when executing the computer instructions.

[0103] This specification also provides a computer program product, which includes a computer program / instructions that, when executed by a processor, implement the encryption / decryption algorithm update method for the device group described in any embodiment of this specification.

[0104] This specification also provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the encryption / decryption algorithm update method for the device group described in any embodiment of this specification.

[0105] For the device embodiments, since they basically correspond to the method embodiments, the relevant parts can be referred to in the description of the method embodiments. The device embodiments described above are merely illustrative. The modules described as separate components may or may not be physically separate, and the components shown as modules may or may not be physical modules, that is, they may be located in one place or distributed across multiple network modules. Some or all of the modules can be selected to achieve the purpose of the solution in this specification according to actual needs. Those skilled in the art can understand and implement this without creative effort.

[0106] The foregoing has described specific embodiments of this specification. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recited in the claims may be performed in a different order than that shown in the embodiments and may still achieve the desired result. Furthermore, the processes depicted in the drawings do not necessarily require the specific or sequential order shown to achieve the desired result. In some embodiments, multitasking and parallel processing are possible or may be advantageous.

[0107] Other embodiments of this specification will readily occur to those skilled in the art upon consideration of the specification and practice of the invention claimed herein. This specification is intended to cover any variations, uses, or adaptations that follow the general principles of this specification and include common knowledge or customary techniques in the art not claimed herein. The specification and examples are to be considered exemplary only, and the true scope and spirit of this specification are indicated by the following claims.

[0108] It should be understood that this specification is not limited to the precise structures described above and shown in the accompanying drawings, and various modifications and changes can be made without departing from its scope. The scope of this specification is limited only by the appended claims.

[0109] The above description is merely a preferred embodiment of this specification and is not intended to limit this specification. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this specification should be included within the scope of protection of this specification.

Claims

1. A method of updating encryption and decryption algorithms of a device group, characterized by, The method comprises: The first device obtains the new version encryption and decryption algorithm plaintext issued by the server through the Wi-Fi module, and sends a version inquiry signal in a broadcast manner; The first device determines whether a feedback confirmation signal of the second device is received, and triggers a preset update process for the second device when the feedback confirmation signal of the second device is not received; wherein whether the second device locally stores the old version decryption algorithm is determined according to whether the feedback confirmation signal of the second device is received, and whether the communication connection between the first device and the second device is smooth is determined. The preset update process comprises: sending the new version encryption algorithm plaintext to the user terminal through the server, so that the user terminal transmits the new version encryption algorithm plaintext to the second device through the NFC connection between the user terminal and the second device.

2. The method of claim 1, wherein the first device has a Bluetooth module; and the version inquiry signal is sent in a Bluetooth broadcast manner through the Bluetooth module. The method further comprises: The first device determines the second device that has sent the feedback confirmation signal as an automatic update device, establishes a Bluetooth connection with the automatic update device, and transmits the new version encryption and decryption algorithm ciphertext encrypted by the old version encryption algorithm to the automatic update device through the Bluetooth connection, so that the automatic update device decrypts the new version encryption and decryption algorithm plaintext using the old version decryption algorithm to obtain the new version encryption and decryption algorithm plaintext.

3. The method of claim 2, wherein, 4. The method of claim 1, wherein the first device does not receive the feedback confirmation signal of the second device comprises: The first device does not receive any signal fed back by the second device, and / or the received feedback signal indicates that the second device does not locally store the old version decryption algorithm.

5. The method of claim 1, wherein the first device sends the new version encryption algorithm plaintext to the user terminal comprises: The first device sends information containing the identity of the second device to the server, so that the server sends the new version encryption algorithm plaintext and the identity of the second device to the user terminal in response to receiving the information containing the identity of the second device sent by the first device.

6. The method of any one of claims 1-5, wherein the preset update process further comprises: The user terminal sends a signal indicating that the second device has been successfully updated to the server after successfully transmitting the new version encryption algorithm plaintext. The device is applied to a first device and comprises: An update preparation module configured to: the first device obtains the new version encryption and decryption algorithm plaintext issued by the server through the Wi-Fi module, and sends a version inquiry signal in a broadcast manner. ​ ​ ​ 7. An apparatus for updating encryption and decryption algorithms of a group of devices, characterized by ​ ​ The preset updating module is configured to: determine whether a feedback confirmation signal of the second device is received, and trigger a preset updating procedure for the second device when the feedback confirmation signal of the second device is not received; wherein whether the second device locally stores an old version of the decryption algorithm is determined according to whether the feedback confirmation signal of the second device is received, and whether the communication connection between the first device and the second device is smooth is determined. The preset updating procedure comprises: sending the new version of the encryption algorithm plaintext to the user terminal by the server, so that the user terminal transmits the new version of the encryption algorithm plaintext to the second device through the NFC connection between the user terminal and the second device.

8. An electronic device, comprising: The device comprises a memory and a processor, the memory is configured to store computer instructions executable on the processor, and the processor is configured to implement the method of any one of claims 1 to 6 when executing the computer instructions.

9. A computer-readable storage medium having stored thereon a computer program, characterized in that, The program is executed by the processor to implement the method of any one of claims 1 to 6.

Images