Device network configuration method, device, storage medium and electronic device

Abstract

The present application discloses a device network configuration method, apparatus, storage medium and electronic device, and relates to the field of Internet of Things technology. The method includes: receiving connection authentication information and network connection information sent by a master control device through a network configuration channel, and marking the connection authentication information as a specific type; connecting to a target network according to the network connection information, wherein a control terminal corresponding to the master control device is connected to the target network; establishing a secure connection with the control terminal through the target network according to the connection authentication information; if a control instruction sent by the control terminal through the secure connection is received, controlling the master control device to execute a control authentication operation corresponding to the specific type to determine whether to execute the control instruction. The present application can effectively balance the reliability and flexibility of network configuration of Internet of Things devices.

Description

Technical Field

[0001] The present application relates to the technical field of Internet of Things, and in particular to a device network configuration method, device, storage medium and electronic device. Background Art

[0002] The interconnection of devices in the field of the Internet of Things has become a trend in the future. The interconnection of devices is achieved through device configuration, but the current progress is not smooth. The main reason is that when configuring the device, it is usually simply bound to the main control device. This makes it difficult to authenticate the identity of the main control device to ensure data security. After the device is bound to the main control device, it is impossible to obtain the user's usage habits.

[0003] In the related art, in order to solve the above problems, the master control device is authenticated before the device is bound to the master control device in the network configuration process to improve the reliability of the network configuration. However, when an authentication error occurs, the entire network configuration process must be repeated, but the master control device has to be authenticated again, resulting in the problem that the flexibility and reliability of the network configuration process are difficult to be compatible. Summary of the invention

[0004] The embodiment of the present application provides a solution that can effectively improve the reliability and flexibility of network distribution of IoT devices.

[0005] To solve the above technical problems, the present application provides the following technical solutions:

[0006] According to one embodiment of the present application, a device network configuration method is applied to a target device, and the method includes: receiving connection authentication information and network connection information sent by a master control device through a network configuration channel, and marking the connection authentication information as a specific type; connecting to a target network according to the network connection information, wherein a control end corresponding to the master control device is connected to the target network; establishing a secure connection with the control end through the target network according to the connection authentication information; and if a control instruction sent by the control end through the secure connection is received, controlling the master control device to execute a control authentication operation corresponding to the specific type to determine whether to execute the control instruction.

[0007] In some embodiments, the connection authentication information includes first authentication information, the control end corresponding to the first authentication information includes the master control device, and the target network includes a local network to which the master control device is connected; establishing a secure connection with the control end through the target network according to the connection authentication information includes: establishing a secure connection with the master control device through the local network according to the first authentication information.

[0008] In some embodiments, the connection authentication information includes second authentication information, the control end corresponding to the second authentication information includes the ecological server of the ecology to which the main control device belongs, and the target network includes the wide area network to which the ecological server is connected; establishing a secure connection with the control end through the target network according to the connection authentication information includes: establishing a secure connection with the ecological cloud server through the wide area network according to the second authentication information.

[0009] In some embodiments, after controlling the main control device to perform the control authentication operation corresponding to the specific type, the method further includes: if the authentication result of the control authentication operation indicates that the authentication is passed, marking the connection authentication information as a target type, and the target type is used to indicate the execution of the control command of the control end without authentication.

[0010] In some embodiments, after marking the connection authentication information as a target type, the method further includes: receiving an authentication processing instruction; and marking the connection authentication information as the specific type according to the authentication processing instruction, so as to control the main control device to perform the updated control authentication operation when receiving a subsequent control instruction from the control end.

[0011] In some embodiments, the controlling the main control device to perform the control authentication operation corresponding to the specific type to determine whether to execute the control instruction includes: sending an authentication operation trigger instruction to the main control device so that the main control device executes a specific authentication process to obtain the signature information generated after the management server of the target device authenticates the main control device; receiving the signature information sent by the main control device, and verifying the signature information to obtain an authentication result; and determining whether to execute the control instruction based on the authentication result.

[0012] In some embodiments, the verification process of the signature information to obtain an authentication result includes: sending the signature information to the management server so that the management server verifies the signature information to obtain a verification result; and generating the authentication result based on the verification result.

[0013] In some embodiments, the signature information is generated by the management server based on a target signature algorithm; the verification processing of the signature information to obtain an authentication result includes: locally verifying the signature information according to the target signature algorithm to obtain a verification result; and generating the authentication result based on the verification result.

[0014] According to one embodiment of the present application, a device network configuration method is applied to a master control device, the method comprising: sending connection authentication information and network connection information to the target device through a network configuration channel, the target device marking the connection authentication information as a specific type, the target device connecting to a target network according to the network connection information, the target network being connected to a control end corresponding to the master control device, and the target device establishing a secure connection with the control end through the target network according to the connection authentication information; receiving an authentication operation trigger instruction sent by the target device, the authentication operation trigger instruction being sent by the target device when receiving a control instruction sent by the control end through the secure connection; and executing a control authentication operation corresponding to the specific type according to the authentication operation trigger instruction to obtain an authentication result, the authentication result being used by the target device to determine whether to execute the control instruction.

[0015] In some embodiments, executing the control authentication operation corresponding to the specific type to obtain the authentication result includes: receiving an authentication operation trigger instruction sent by the target device; executing a specific authentication process according to the authentication operation trigger instruction to obtain the signature information generated after the management server of the target device authenticates the master control device; sending the signature information to the target device so that the target device verifies the signature information to obtain the authentication result.

[0016] In some embodiments, the specific authentication process is executed according to the authentication operation trigger instruction to obtain the signature information generated after the management server of the target device authenticates the master device, including: obtaining device configuration information and target network address from the target device; performing authentication operations according to the device configuration information and the target network address so that the management server authenticates the master device and generates signature information after the authentication is successful; and receiving the signature information returned by the management server.

[0017] In some embodiments, the authentication operation is performed according to the device configuration information and the target network address so that the management server authenticates the master device and generates signature information after the authentication is successful, including: performing an authentication operation according to the device configuration information and the target network address to perform two-way authentication of the Hypertext Transfer Protocol Security with the management server, triggering the management server to authenticate the device certificate of the master device, and generating the signature information after the authentication is successful.

[0018] In some embodiments, the authentication operation is performed according to the device configuration information and the target network address so that the management server authenticates the master control device and generates signature information after the authentication is successful, including: performing an authentication operation according to the device configuration information and the target network address to send the management account information of the target device to the management server, triggering the management server to perform authentication processing on the management account information, and generating signature information after the authentication is successful.

[0019] In some embodiments, the authentication operation is performed according to the device configuration information and the target network address so that the management server authenticates the master device and generates signature information after the authentication is successful, including: performing an authentication operation according to the device configuration information and the target network address to send selection information of the data privacy protocol to the management server, triggering the management server to authenticate the master device according to the selection information, and generating signature information after the authentication is successful.

[0020] According to one embodiment of the present application, a device network configuration apparatus is applied to a target device, and the apparatus includes: an information receiving module, which is used to receive connection authentication information and network connection information sent by a master control device through a network configuration channel, and mark the connection authentication information as a specific type; a connection module, which is used to connect to a target network according to the network connection information, and the target network is connected to a control end corresponding to the master control device; an establishment module, which is used to establish a secure connection with the control end through the target network according to the connection authentication information; and an authentication module, which is used to control the master control device to execute a control authentication operation corresponding to the specific type if a control instruction sent by the control end through the secure connection is received, so as to determine whether to execute the control instruction.

[0021] According to one embodiment of the present application, a device network configuration apparatus is applied to a master control device, the apparatus comprising: a sending module, used to send connection authentication information and network connection information to the target device through a network configuration channel, the target device marks the connection authentication information as a specific type, the target device is connected to a target network according to the network connection information, a control end corresponding to the master control device is connected to the target network, and the target device establishes a secure connection with the control end through the target network according to the connection authentication information; an instruction receiving module, used to receive an authentication operation trigger instruction sent by the target device, the authentication operation trigger instruction is sent by the target device when it receives a control instruction sent by the control end through the secure connection; an execution module, used to execute a control authentication operation corresponding to the specific type according to the authentication operation trigger instruction, and obtain an authentication result, the authentication result is used by the target device to determine whether to execute the control instruction.

[0022] According to another embodiment of the present application, a storage medium stores a computer program thereon, and when the computer program is executed by a processor of a computer, the computer executes the method described in the embodiment of the present application.

[0023] According to another embodiment of the present application, an electronic device may include: a memory storing a computer program; and a processor reading the computer program stored in the memory to execute the method described in the embodiment of the present application.

[0024] In an embodiment of the present application, the target device can: receive connection authentication information and network connection information sent by the master control device through the network distribution channel, and mark the connection authentication information as a specific type; connect to the target network according to the network connection information, and the target network is connected to the control end corresponding to the master control device; establish a secure connection with the control end through the target network according to the connection authentication information; if a control instruction sent by the control end through the secure connection is received, control the master control device to execute the control authentication operation corresponding to the specific type to determine whether to execute the control instruction.

[0025] In this way, during the network configuration process, the target device is marked as a specific type after receiving the connection authentication information. Then, based on the network connection information and the connection authentication information, a secure connection is established with the control end. After that, when a control instruction sent by the control end is received under the secure connection, the master device is controlled to perform the control authentication operation corresponding to the specific type according to the specific type of the mark to determine whether to execute the control instruction. In this way, the network configuration and binding of the master device can be achieved first, and then the master device authentication can be performed. When an authentication error occurs, the entire process does not need to be repeated, and the authentication operation can be flexibly corrected. At the same time, the authentication of the master device does not need to rely on the public cloud server. The authentication can be performed by the interaction between the target device and the master device, thereby effectively taking into account the improvement of the network configuration reliability and flexibility of the IoT device. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For those skilled in the art, other drawings can be obtained based on these drawings without creative work.

[0027] Figure 1 A schematic diagram of a system to which an embodiment of the present application can be applied is shown.

[0028] Figure 2 A flow chart of a device network configuration method according to an embodiment of the present application is shown.

[0029] Figure 3A flow chart of a device network configuration method according to another embodiment of the present application is shown.

[0030] Figure 4 A block diagram of a device network configuration apparatus according to an embodiment of the present application is shown.

[0031] Figure 5 A block diagram of a device network configuration apparatus according to an embodiment of the present application is shown.

[0032] Figure 6 A block diagram of an electronic device according to an embodiment of the present application is shown. DETAILED DESCRIPTION

[0033] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of this application.

[0034] Figure 1 FIG. 1 is a schematic diagram showing a system 100 to which an embodiment of the present application can be applied. Figure 1 As shown, the system 100 may include a main control device 101 , a target device 102 , a management server 103 and an ecological server 104 .

[0035] The main control device 101 can be any computer device, such as a computer, a mobile phone, a smart watch, and a home appliance (such as a smart speaker, etc.).

[0036] The target device 102 may be any device, such as a home appliance, a vehicle-mounted device, etc.

[0037] The management server 103 (also referred to as the device server) is a server for managing the target device, and the management server 103 may be an independent physical server, a server cluster, or a cloud server, etc. In one implementation of this example, the management server 103 is a cloud server. The management server 103 may be a manufacturer server of the target device.

[0038] The ecological server 104 is the server of the ecology corresponding to the master device 101. The ecological server 104 can be an independent physical server, a server cluster or a cloud server, etc. In one implementation of this example, the ecological server 104 is a cloud server, which can also be called an ecological cloud. The ecological server 104 can update the device certificate of the master device 101.

[0039] In one implementation of this example, the target device 102 may: receive connection authentication information and network connection information sent by the master control device 101 through the network distribution channel, and mark the connection authentication information as a specific type; connect to the target network according to the network connection information, to which the control terminal corresponding to the master control device (which may be the master control device 101 or the ecological server 104) is connected; establish a secure connection with the control terminal through the target network according to the connection authentication information; and control the master control device 101 to perform a control authentication operation corresponding to the specific type (which may interact with the management server 103 to perform a control authentication operation) if a control instruction sent by the control terminal through the secure connection is received, to determine whether to execute the control instruction.

[0040] In one implementation of this example, the master control device 101 may: send connection authentication information and network connection information to the target device 102 through a network distribution channel, the target device 102 marks the connection authentication information as a specific type, the target device 102 connects to a target network according to the network connection information, the target network is connected to a control terminal corresponding to the master control device (which may be the master control device 101 or the ecological server 104), and the target device 102 establishes a secure connection with the control terminal through the target network according to the connection authentication information; receive an authentication operation trigger instruction sent by the target device 102, the authentication operation trigger instruction is sent by the target device 102 when it receives a control instruction sent by the control terminal through the secure connection; according to the authentication operation trigger instruction, execute a control authentication operation corresponding to the specific type (the control authentication operation may be executed by interacting with the management server 103), and obtain an authentication result, which is used by the target device 102 to determine whether to execute the control instruction.

[0041] It can be understood that the embodiments of the present application can also be applied to other applicable systems.

[0042] Figure 2 The flowchart of the device network configuration method according to an embodiment of the present application is schematically shown. The execution subject of the device network configuration method may be a target device, such as Figure 1 A target device 102 is shown.

[0043] like Figure 2 As shown, the device network configuration method may include steps S210 to S240.

[0044] Step S210, receiving connection authentication information and network connection information sent by the master control device through the network distribution channel, and marking the connection authentication information as a specific type; step S220, connecting to the target network according to the network connection information, wherein the target network is connected to the control end corresponding to the master control device; step S230, establishing a secure connection with the control end through the target network according to the connection authentication information; step S240, if a control instruction sent by the control end through the secure connection is received, controlling the master control device to execute the control authentication operation corresponding to the specific type to determine whether to execute the control instruction.

[0045] The network configuration channel is the information transmission channel between the master device and the target device before the master device and the target device establish a secure connection through the network connection, such as an infrared channel or a wired channel. The target device is the device to be configured, and the master device is the device used to configure the target device.

[0046] Connection authentication information refers to the authentication information required when connecting to the control end (which can be the master device or the ecological server corresponding to the master device), such as the ACL, token, certificate, etc. of the master device or the URL, authentication token, certificate, etc. of the ecological server. Network connection information refers to the connection information for connecting to the target network, such as the SSID and password of the router, the key of the gateway device, etc.

[0047] After receiving the connection authentication information, the target device marks the connection authentication information as a specific type, such as an unverified type. The target device can connect to the target network according to the network connection information, for example, connect to a home router or a heterogeneous gateway according to the network connection information and then connect to the target network. The control end corresponding to the connection authentication information can also be connected to the target network.

[0048] In the target network, the target device can search for the control end and establish a secure connection with the control end through authentication based on the connection authentication information. Thereafter, if the target device receives a control instruction sent by the control end through the secure connection, and the target device detects that the connection authentication information corresponding to the control end is marked as a specific type, the target device controls the main control device to perform the control authentication operation corresponding to the specific type to determine whether to execute the control instruction.

[0049] In this way, based on steps S210 to S240, during the network configuration process, the target device is marked as a specific type after receiving the connection authentication information, and then a secure connection is established with the control end based on the network connection information and the connection authentication information. After that, when a control instruction sent by the control end is received under the secure connection, the master device is controlled to perform the control authentication operation corresponding to the specific type according to the marked specific type to determine whether to execute the control instruction. In this way, the network configuration and binding of the master device can be achieved first, and then the master device authentication can be performed. When an authentication error occurs, the entire process does not need to be repeated, and the authentication operation can be flexibly corrected. At the same time, the authentication of the master device does not need to rely on the public cloud server, and the interaction between the target device and the master device can be authenticated, thereby effectively taking into account the improvement of the network configuration reliability and flexibility of the IoT device.

[0050] Described below Figure 2 The process shown is a specific implementation example of each step performed when equipment network configuration is performed.

[0051] In step S210, connection authentication information and network connection information sent by the master control device through the network distribution channel are received, and the connection authentication information is marked as a specific type.

[0052] The network configuration channel refers to the information transmission channel between the master device and the target device before the master device and the target device establish a secure connection through the network connection, such as an infrared channel or a wired channel. The target device is the device to be configured, and the master device is the device used to configure the target device. The connection authentication information refers to the authentication information required when connecting to the control end (which can be the master device or the ecological server corresponding to the master device), such as the ACL, token, certificate, etc. of the master device or the URL, authentication token, certificate and other information of the ecological server. The network connection information refers to the connection information for connecting to the target network, such as the SSID and password of the router, the key of the gateway device, etc. After receiving the connection authentication information, the target device marks the connection authentication information as a specific type, such as an unverified type.

[0053] In step S220, a target network is connected according to the network connection information, and a control terminal corresponding to the main control device is connected to the target network.

[0054] The target device can be connected to the target network according to the network connection information, for example, connected to a home router or a heterogeneous gateway according to the network connection information and then connected to the target network. The control terminal corresponding to the connection authentication information can also be connected to the target network.

[0055] In step S230, a secure connection is established with the control end through the target network according to the connection authentication information.

[0056] In the target network, the target device can search for the control end and establish a secure connection with the control end through authentication according to the connection authentication information.

[0057] In one embodiment, the connection authentication information includes first authentication information, the control end corresponding to the first authentication information includes the master control device, and the target network includes a local network to which the master control device is connected; step S230, establishing a secure connection with the control end through the target network according to the connection authentication information, includes: establishing a secure connection with the master control device through the local network according to the first authentication information.

[0058] The local network is, for example, the network corresponding to a home router. In the local network, the target device and the master device can find each other through methods such as LAN broadcasting, and establish an encrypted connection through first authentication information such as a token or certificate to form a secure connection between the master device and the target device. In this way, the master device can locally control the target device.

[0059] In one embodiment, the connection authentication information includes second authentication information, the control end corresponding to the second authentication information includes the ecological server of the ecology to which the main control device belongs, and the target network includes the wide area network to which the ecological server is connected; step S230, through the target network, establishing a secure connection with the control end according to the connection authentication information, including: through the wide area network, establishing a secure connection with the ecological cloud server according to the second authentication information.

[0060] A wide area network is a non-local network. In the wide area network, the target device can search for the ecological server of the ecosystem to which the master device belongs and establish an encrypted connection with the ecological server based on the second authentication information such as URL, token, certificate, etc., to form a secure connection between the ecological server and the target device. In this way, the master device can control the target device through the ecological server through the wide area network.

[0061] In step S240, if a control instruction is received from the control end through the secure connection, the main control device is controlled to perform a control authentication operation corresponding to the specific type to determine whether to execute the control instruction.

[0062] The control instruction can be any control instruction. If the target device receives a control instruction sent by the control end through a secure connection, and the target device detects that the connection authentication information corresponding to the control end is marked as a specific type, the target device controls the main control device to perform the control authentication operation corresponding to the specific type to determine whether to execute the control instruction.

[0063] In one embodiment, step S240, the controlling the main control device to perform the control authentication operation corresponding to the specific type to determine whether to execute the control instruction, includes: sending an authentication operation trigger instruction to the main control device so that the main control device executes a specific authentication process, and obtains the signature information generated after the management server of the target device authenticates the main control device; receiving the signature information sent by the main control device, and verifying the signature information to obtain an authentication result; determining whether to execute the control instruction based on the authentication result.

[0064] The authentication operation trigger instruction is an instruction used to trigger the master device to execute a specific authentication process. The authentication operation trigger instruction can carry a specific authentication identifier. When the master device receives the authentication identifier, it triggers the execution of a specific authentication process. Through this specific authentication process, the management server of the target device can authenticate the master device and generate signature information after the authentication is passed.

[0065] In one example, the management server can generate random signature information and use the random signature information as signature information. The random signature information can be a random number generated by the management server, and the random number is used as the signature information generated by this authentication process. In one example, the management server can generate signature information based on the target signature algorithm for the connection authentication information, the device configuration information of the target device transmitted by the master device, and the current timestamp.

[0066] After obtaining the signature information, the master device sends it to the target device, and the target device can verify the signature information. That is, the target device can verify whether the master device has been authenticated by the management server based on the signature information and obtain the authentication result. If the authentication result is authentication passed, the control command can be executed.

[0067] In one embodiment, the verifying the signature information to obtain the authentication result includes: sending the signature information to the management server so that the management server verifies the signature information to obtain a verification result; and generating the authentication result according to the verification result. The target device can send the signature information to the management server by accessing the management server, and the management server performs a comparison and verification.

[0068] In one embodiment, the signature information is generated by the management server based on a target signature algorithm; the verification of the signature information to obtain an authentication result includes: locally verifying the signature information according to the target signature algorithm to obtain a verification result; and generating the authentication result according to the verification result. The signature information is generated based on the target signature algorithm. At this time, the target device can obtain the generated signature information based on the target signature algorithm locally and directly verify it locally.

[0069] In one embodiment, in step S240, after controlling the main control device to execute the control authentication operation corresponding to the specific type, it also includes: if the authentication result of the control authentication operation indicates that the authentication is passed, then marking the connection authentication information as a target type, and the target type is used to indicate the execution of the control command of the control end without authentication.

[0070] The connection authentication information marked as a specific type is marked as a target type, and the target type is used to indicate that the control command of the control end is executed without authentication, so that when the control command of the control end is received subsequently, it can be directly executed without starting the verification process.

[0071] In one embodiment, after marking the connection authentication information as a target type, the method further includes: receiving an authentication processing instruction; and marking the connection authentication information as the specific type according to the authentication processing instruction, so as to control the main control device to perform the updated control authentication operation when receiving a subsequent control instruction from the control end.

[0072] In some cases, after receiving the authentication processing instruction, the target device can re-mark the connection authentication information as a specific type so that when receiving a subsequent control instruction, the control master device can perform an updated control authentication operation. In this way, the control master device can be flexibly controlled to perform an updated control authentication operation. In one example, the control authentication operation can include a user privacy agreement confirmation operation. When the user privacy agreement is updated, based on the authentication processing instruction, the target device can control the master device to perform an updated user privacy agreement confirmation operation.

[0073] Figure 3 The flowchart of the device network configuration method according to an embodiment of the present application is schematically shown. The execution subject of the device network configuration method may be a target device, such as Figure 1 The main control device 101 shown in FIG. The meanings of the terms are the same as those mentioned above. Figure 2 The device network configuration method in the corresponding process is the same.

[0074] like Figure 3 As shown, the device network configuration method may include steps S310 to S330.

[0075] Step S310, sending connection authentication information and network connection information to the target device through the network distribution channel, the target device marking the connection authentication information as a specific type, the target device connecting to a target network according to the network connection information, the target network being connected to a control terminal corresponding to the master control device, and the target device establishing a secure connection with the control terminal through the target network according to the connection authentication information;

[0076] Step S320, receiving an authentication operation trigger instruction sent by the target device, wherein the authentication operation trigger instruction is sent by the target device when receiving a control instruction sent by the control end through the secure connection;

[0077] Step S330, executing the control authentication operation corresponding to the specific type according to the authentication operation trigger instruction, and obtaining an authentication result, wherein the authentication result is used by the target device to determine whether to execute the control instruction.

[0078] The network configuration channel is the information transmission channel between the master device and the target device before the master device and the target device establish a secure connection through the network connection, such as an infrared channel or a wired channel. The target device is the device to be configured, and the master device is the device used to configure the target device.

[0079] Connection authentication information refers to the authentication information required when connecting to the control end (which can be the master device or the ecological server corresponding to the master device), such as the ACL, token, certificate, etc. of the master device or the URL, authentication token, certificate, etc. of the ecological server. Network connection information refers to the connection information for connecting to the target network, such as the SSID and password of the router, the key of the gateway device, etc.

[0080] After receiving the connection authentication information, the target device marks the connection authentication information as a specific type, such as an unverified type. The target device can connect to the target network according to the network connection information, for example, connect to a home router or a heterogeneous gateway according to the network connection information and then connect to the target network. The control end corresponding to the connection authentication information can also be connected to the target network.

[0081] In the target network, the target device can search for the control end and establish a secure connection with the control end through authentication based on the connection authentication information. Thereafter, if the target device receives a control instruction sent by the control end through the secure connection, and the target device detects that the connection authentication information corresponding to the control end is marked as a specific type, the target device triggers the instruction through the authentication operation, and controls the main control device to perform the control authentication operation corresponding to the specific type to determine whether to execute the control instruction.

[0082] In this way, based on steps S310 to S330, during the network configuration process, the target device is marked as a specific type after receiving the connection authentication information, and then a secure connection is established with the control end based on the network connection information and the connection authentication information. After that, when a control instruction sent by the control end is received under the secure connection, the master device is controlled to perform the control authentication operation corresponding to the specific type according to the marked specific type to determine whether to execute the control instruction. In this way, the network configuration and binding of the master device can be achieved first, and then the master device authentication can be performed. When an authentication error occurs, the entire process does not need to be repeated, and the authentication operation can be flexibly corrected. At the same time, the authentication of the master device does not need to rely on the public cloud server, and the interaction between the target device and the master device can be authenticated, thereby effectively taking into account the improvement of the network configuration reliability and flexibility of the IoT device.

[0083] Described below Figure 3 The process shown is a specific embodiment of the steps performed when the device is configured in the network.

[0084] In some embodiments, in step S330, a control authentication operation corresponding to the specific type is performed to obtain an authentication result, including: receiving an authentication operation trigger instruction sent by the target device; executing a specific authentication process according to the authentication operation trigger instruction to obtain the signature information generated after the management server of the target device authenticates the master control device; sending the signature information to the target device so that the target device verifies the signature information to obtain the authentication result.

[0085] The authentication operation trigger instruction is an instruction used to trigger the master device to execute a specific authentication process. The authentication operation trigger instruction can carry a specific authentication identifier. When the master device receives the authentication identifier, it triggers the execution of a specific authentication process. Through this specific authentication process, the management server of the target device can authenticate the master device and generate signature information after the authentication is passed.

[0086] In one example, the management server can generate random signature information and use the random signature information as signature information. The random signature information can be a random number generated by the management server, and the random number is used as the signature information generated by this authentication process. In one example, the management server can generate signature information based on the target signature algorithm for the connection authentication information, the device configuration information of the target device transmitted by the master device, and the current timestamp.

[0087] After obtaining the signature information, the master device sends it to the target device, and the target device can verify the signature information, that is, the target device can verify whether the master device is authenticated by the management server based on the signature information to obtain the authentication result.

[0088] In one embodiment, the step of executing a specific authentication process according to the authentication operation trigger instruction to obtain the signature information generated after the management server of the target device authenticates the master device, includes: obtaining device configuration information and a target network address from the target device; performing an authentication operation according to the device configuration information and the target network address, so that the management server authenticates the master device and generates signature information after the authentication is successful; and receiving the signature information returned by the management server.

[0089] After the target device is securely connected to the control end corresponding to the master device, the master device can request the device configuration information and the target network address from the target device, and then perform the authentication operation, without having to rely on a public cloud server to obtain the device configuration information and the target network address of the target device.

[0090] The device configuration information of the target device includes the unique identifier of the device model (ProductId), the device serial number, the random number generated by the device, the device software version number, the device hardware version number, and the latest time to complete this authentication, etc. The target network address (URL) can be a network address pointing to the management server. By accessing the target network address, you can perform authentication operations, upload authentication information to the management server of the target device, and interact with the management server for authentication. Then the management server authenticates the master device and generates signature information after the authentication is passed, and returns the signature information to the master device.

[0091] In one embodiment, the step of performing an authentication operation based on the device configuration information and the target network address so that the management server authenticates the master device and generates signature information after the authentication is successful includes: performing an authentication operation based on the device configuration information and the target network address to perform two-way authentication of the Hypertext Transfer Protocol Security Protocol with the management server, triggering the management server to authenticate the device certificate of the master device, and generating the signature information after the authentication is successful.

[0092] Hypertext Transfer Protocol over Secure Socket Layer (HTTPS), the master device and the management server can perform two-way authentication by exchanging device certificates based on the Hypertext Transfer Protocol. Based on this, the management server can authenticate the legitimacy of the master device's identity. In an example, the master device performs two-way authentication with the management server based on the device certificate of the master device. The validity period of the device certificate is less than the preset threshold, and the device certificate is generated by the ecological server of the master device.

[0093] In one embodiment, the authentication operation is performed according to the device configuration information and the target network address so that the management server authenticates the master control device and generates signature information after the authentication is passed, including: performing an authentication operation according to the device configuration information and the target network address to send the management account information of the target device to the management server, triggering the management server to perform authentication processing on the management account information, and generating signature information after the authentication is passed.

[0094] The master device can send the management account information of the target device to the management server by registering or logging in to the management account. The management account information can be the account of the device manufacturer. In this way, the device manufacturer can also authenticate the master device based on its own account through the management server.

[0095] In one embodiment, the authentication operation is performed according to the device configuration information and the target network address so that the management server authenticates the master device and generates signature information after the authentication is passed, including: performing an authentication operation according to the device configuration information and the target network address to send selection information of the data privacy protocol to the management server, triggering the management server to authenticate the master device according to the selection information, and generating signature information after the authentication is passed.

[0096] The master control device can trigger the selection interface of the data privacy protocol according to the target network address. The selection interface may include a selection control for agreeing or disagreeing. The master control device can send the selection information of the data privacy protocol (such as agreeing, etc.) to the management server by triggering the selection control. The management server can then further verify the selection information according to the data privacy protocol. When the master control device chooses to agree to the privacy protocol, the authentication is passed and signature information is generated. In this way, after the master control device is bound to the target device, the management server can further legally collect usage data of the target device.

[0097] In one embodiment, performing an authentication operation according to a target network address includes: starting a target application according to the target network address; and performing an authentication operation based on the target application.

[0098] In one example, the target application may be a device manufacturer App, mini-program, quick application, etc. If the device manufacturer App, mini-program, quick application, etc. are installed in the main control device (such as a mobile phone), the corresponding application can be jumped to through the target network address. In one example, the target application may be a browser application, and the page corresponding to the target network address can be opened in the browser application. In one example, the target application may be a device application supporting the main control device. If the main control device is a device without a screen, such as a smart speaker, the device application supporting the main control device can be opened. Furthermore, authentication operations can be performed automatically or manually based on the target application. Among them, when opening the target application, device configuration information and other parameters in the device management information can be attached.

[0099] In the above embodiments, the description of each embodiment has its own emphasis. For the part that is not described in detail in a certain embodiment, please refer to the detailed description in different embodiments, and will not be repeated here.

[0100] In order to facilitate better implementation of the device network configuration method provided in the embodiment of the present application, the embodiment of the present application also provides a device network configuration device based on the above device network configuration method. The meanings of the terms are the same as those in the above device network configuration method, and the specific implementation details can refer to the description in the method embodiment. Figure 4 , Figure 5 The block diagrams of the equipment network distribution device provided in this application are respectively shown.

[0101] Among them, Figure 4 In the block diagram of a device network configuration apparatus of an embodiment of the present application, the device network configuration apparatus 400 is applied to a target device, and the device network configuration apparatus 400 may include an information receiving module 410, a connection module 420, an establishment module 430 and an authentication module 440.

[0102] The information receiving module 410 can be used to receive connection authentication information and network connection information sent by the master control device through the network distribution channel, and mark the connection authentication information as a specific type; the connection module 420 can be used to connect to the target network according to the network connection information, and the target network is connected to the control end corresponding to the master control device; the establishment module 430 can be used to establish a secure connection with the control end through the target network according to the connection authentication information; the authentication module 440 can be used to control the master control device to execute the control authentication operation corresponding to the specific type if a control instruction sent by the control end through the secure connection is received, so as to determine whether to execute the control instruction.

[0103] In some embodiments, the connection authentication information includes first authentication information, the control end corresponding to the first authentication information includes the main control device, and the target network includes a local network to which the main control device is connected; the establishment module 430 includes: a first establishment unit, used to establish a secure connection with the main control device through the local network according to the first authentication information.

[0104] In some embodiments, the connection authentication information includes second authentication information, the control end corresponding to the second authentication information includes the ecological server of the ecology to which the main control device belongs, and the target network includes the wide area network to which the ecological server is connected; the establishment module 430 includes: a second establishment unit, used to establish a secure connection with the ecological cloud server through the wide area network according to the second authentication information.

[0105] In some embodiments, the device configuration network apparatus 400 further includes: a modification module for marking the connection authentication information as a target type if the authentication result of the control authentication operation indicates that the authentication is passed, and the target type is used to indicate that the control command of the control end is executed without authentication.

[0106] In some embodiments, the device configuration network device 400 also includes: an update module for receiving authentication processing instructions; according to the authentication processing instructions, marking the connection authentication information as the specific type, so as to control the main control device to perform the updated control authentication operation when receiving subsequent control instructions from the control end.

[0107] In some embodiments, the authentication module 440 includes: a trigger unit, which is used to send an authentication operation trigger instruction to the main control device so that the main control device executes a specific authentication process and obtains the signature information generated after the management server of the target device authenticates the main control device; a verification unit, which is used to receive the signature information sent by the main control device and verify the signature information to obtain an authentication result; and a confirmation unit, which is used to determine whether to execute the control instruction based on the authentication result.

[0108] In some embodiments, the verification unit includes a first verification subunit, which is used to: send the signature information to the management server so that the management server verifies the signature information to obtain a verification result; and generate the authentication result according to the verification result.

[0109] In some embodiments, the signature information is generated by the management server based on a target signature algorithm; the verification unit includes a second verification subunit, which is used to: locally verify the signature information according to the target signature algorithm to obtain a verification result; and generate the authentication result based on the verification result.

[0110] exist Figure 5 In the block diagram of a device network configuration apparatus of an embodiment of the present application, the device network configuration apparatus 500 is applied to a main control device, and the device network configuration apparatus 500 may include a sending module 510, an instruction receiving module 520 and an execution module 530.

[0111] The sending module 510 can be used to send connection authentication information and network connection information to the target device through the network distribution channel, the target device marks the connection authentication information as a specific type, the target device is connected to the target network according to the network connection information, the target network is connected to the control end corresponding to the main control device, and the target device establishes a secure connection with the control end through the target network according to the connection authentication information; the instruction receiving module 520 can be used to receive an authentication operation trigger instruction sent by the target device, and the authentication operation trigger instruction is sent by the target device when it receives a control instruction sent by the control end through the secure connection; the execution module 530 can be used to execute the control authentication operation corresponding to the specific type according to the authentication operation trigger instruction, and obtain an authentication result, and the authentication result is used by the target device to determine whether to execute the control instruction.

[0112] In some embodiments, the execution module 530 includes: an instruction receiving unit, used to receive an authentication operation trigger instruction sent by the target device; a process execution unit, used to execute a specific authentication process according to the authentication operation trigger instruction to obtain the signature information generated after the management server of the target device authenticates the master control device; a signature verification unit, used to send the signature information to the target device so that the target device verifies the signature information and obtains the authentication result.

[0113] In some embodiments, the process execution unit includes: an execution information acquisition sub-unit, used to obtain device configuration information and a target network address from the target device; an authentication operation sub-unit, used to perform an authentication operation based on the device configuration information and the target network address, so that the management server authenticates the master control device and generates signature information after the authentication is passed; a signature information receiving sub-unit, used to receive the signature information returned by the management server.

[0114] In some embodiments, the authentication operation subunit is used to: perform authentication operations based on the device configuration information and the target network address to perform two-way authentication of the Hypertext Transfer Protocol Security with the management server, trigger the management server to authenticate the device certificate of the master device, and generate the signature information after the authentication is passed.

[0115] In some embodiments, the authentication operation subunit is used to: perform authentication operations based on the device configuration information and the target network address to send the management account information of the target device to the management server, trigger the management server to authenticate the management account information, and generate signature information after the authentication is passed.

[0116] In some embodiments, the authentication operation subunit is used to: perform authentication operations according to the device configuration information and the target network address to send selection information of the data privacy protocol to the management server, trigger the management server to authenticate the master device according to the selection information, and generate signature information after the authentication is passed.

[0117] It should be noted that, although several modules or units of the equipment for action execution are mentioned in the above detailed description, this division is not mandatory. In fact, according to the embodiments of the present application, the features and functions of two or more modules or units described above can be embodied in one module or unit. On the contrary, the features and functions of one module or unit described above can be further divided into being embodied by multiple modules or units.

[0118] In addition, an embodiment of the present application further provides an electronic device, which may be a terminal or a server. Figure 6 As shown, it shows a schematic diagram of the structure of the electronic device involved in the embodiment of the present application, specifically:

[0119] The electronic device may include components such as a processor 601 with one or more processing cores, a memory 602 with one or more computer-readable storage media, a power supply 603, and an input unit 604. Those skilled in the art will appreciate that Figure 6 The electronic device structure shown in the figure does not constitute a limitation on the electronic device, and may include more or fewer components than shown in the figure, or combine certain components, or arrange the components differently.

[0120] The processor 601 is the control center of the electronic device. It uses various interfaces and lines to connect various parts of the entire computer device. By running or executing software programs and / or modules stored in the memory 602, and calling data stored in the memory 602, it executes various functions of the computer device and processes data, thereby monitoring the electronic device as a whole. Optionally, the processor 601 may include one or more processing cores; preferably, the processor 601 may integrate an application processor and a modem processor, wherein the application processor mainly processes the operating system, user pages and application programs, etc., and the modem processor mainly processes wireless communications. It is understandable that the above-mentioned modem processor may not be integrated into the processor 601.

[0121] The memory 602 can be used to store software programs and modules. The processor 601 executes various functional applications and data processing by running the software programs and modules stored in the memory 602. The memory 602 may mainly include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function (such as a sound playback function, an image playback function, etc.), etc.; the data storage area may store data created according to the use of the computer device, etc. In addition, the memory 602 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one disk storage device, a flash memory device, or other volatile solid-state storage devices. Accordingly, the memory 602 may also include a memory controller to provide the processor 601 with access to the memory 602.

[0122] The electronic device also includes a power supply 603 for supplying power to each component. Preferably, the power supply 603 can be logically connected to the processor 601 through a power management system, so as to manage charging, discharging, power consumption and other functions through the power management system. The power supply 603 can also include one or more DC or AC power supplies, recharging systems, power failure detection circuits, power converters or inverters, power status indicators and other arbitrary components.

[0123] The electronic device may further include an input unit 604, which may be used to receive input digital or character information and generate keyboard, mouse, joystick, optical or trackball signal input related to user settings and function control.

[0124] Although not shown, the electronic device may further include a display unit, etc., which will not be described in detail herein. Specifically in this embodiment, the processor 601 in the electronic device will load the executable files corresponding to the processes of one or more computer programs into the memory 602 according to the following instructions, and the processor 601 will run the computer programs stored in the memory 602, thereby realizing various functions corresponding to the various embodiments of the present application.

[0125] For example, when the electronic device corresponds to a target device, the processor 601 can execute: receiving connection authentication information and network connection information sent by the main control device through the network distribution channel, and marking the connection authentication information as a specific type; connecting to the target network according to the network connection information, and the target network is connected to a control end corresponding to the main control device; establishing a secure connection with the control end through the target network according to the connection authentication information; if a control instruction sent by the control end through the secure connection is received, controlling the main control device to execute a control authentication operation corresponding to the specific type to determine whether to execute the control instruction.

[0126] For example, when the electronic device corresponds to a main control device, the processor 601 can execute: sending connection authentication information and network connection information to the target device through the network distribution channel, the target device marks the connection authentication information as a specific type, the target device connects to the target network according to the network connection information, the target network is connected to the control end corresponding to the main control device, and the target device establishes a secure connection with the control end through the target network according to the connection authentication information; receiving an authentication operation trigger instruction sent by the target device, the authentication operation trigger instruction is sent by the target device when it receives a control instruction sent by the control end through the secure connection; according to the authentication operation trigger instruction, executing the control authentication operation corresponding to the specific type to obtain an authentication result, and the authentication result is used by the target device to determine whether to execute the control instruction.

[0127] Those skilled in the art will appreciate that all or part of the steps in the various methods of the above embodiments may be completed by a computer program, or by controlling related hardware through a computer program. The computer program may be stored in a computer-readable storage medium and loaded and executed by a processor.

[0128] To this end, an embodiment of the present application further provides a storage medium, in which a computer program is stored. The computer program can be loaded by a processor to execute the steps in any method provided in the embodiment of the present application.

[0129] The storage medium may include: a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, etc.

[0130] Since the computer program stored in the storage medium can execute the steps in any method provided in the embodiments of the present application, the beneficial effects that can be achieved by the method provided in the embodiments of the present application can be achieved. Please refer to the previous embodiments for details and will not be repeated here.

[0131] Those skilled in the art will readily appreciate other embodiments of the present application after considering the specification and practicing the embodiments disclosed herein. The present application is intended to cover any variations, uses or adaptations of the present application, which follow the general principles of the present application and include common knowledge or customary technical means in the art that are not disclosed in the present application.

[0132] It should be understood that the present application is not limited to the embodiments that have been described above and shown in the accompanying drawings, but various modifications and changes may be made without departing from the scope thereof.

Claims

1. A device network configuration method, characterized in that: Applied to a target device, the method comprises: Receiving connection authentication information and network connection information sent by the master control device through the network distribution channel, and marking the connection authentication information as a specific type; Connecting to a target network according to the network connection information, wherein the target network is connected to a control terminal corresponding to the master control device; Establishing a secure connection with the control terminal through the target network according to the connection authentication information; If a control instruction sent by the control terminal through the secure connection is received, controlling the main control device to perform a control authentication operation corresponding to the specific type to determine whether to execute the control instruction; The controlling the main control device to perform a control authentication operation corresponding to the specific type to determine whether to execute the control instruction includes: Sending an authentication operation trigger instruction to the master control device so that the master control device executes a specific authentication process and obtains signature information generated after the management server of the target device authenticates the master control device; receiving the signature information sent by the master control device and verifying the signature information to obtain an authentication result; determining whether to execute the control instruction according to the authentication result; After controlling the main control device to perform the control authentication operation corresponding to the specific type, the method further includes: If the authentication result of the control authentication operation indicates that the authentication is passed, the connection authentication information is marked as a target type, and the target type is used to indicate that the control command of the control terminal is executed without authentication.

2. The method according to claim 1, characterized in that The connection authentication information includes first authentication information, the control end corresponding to the first authentication information includes the main control device, and the target network includes a local network connected to the main control device; The step of establishing a secure connection with the control terminal through the target network according to the connection authentication information includes: A secure connection is established with the main control device through the local network according to the first authentication information.

3. The method according to claim 1, characterized in that The connection authentication information includes second authentication information, the control end corresponding to the second authentication information includes an ecological server of the ecology to which the master control device belongs, and the target network includes a wide area network to which the ecological server is connected; The step of establishing a secure connection with the control terminal through the target network according to the connection authentication information includes: A secure connection is established with the ecological server through the wide area network according to the second authentication information.

4. The method according to claim 1, characterized in that: After marking the connection authentication information as a target type, the method further includes: receiving authentication processing instructions; According to the authentication processing instruction, the connection authentication information is marked as the specific type, so that when a subsequent control instruction from the control end is received, the main control device is controlled to perform the updated control authentication operation.

5. The method according to claim 1, characterized in that The verifying process of the signature information to obtain the authentication result includes: Sending the signature information to the management server so that the management server verifies the signature information and obtains a verification result; The authentication result is generated according to the verification result.

6. The method according to claim 1, characterized in that The signature information is generated by the management server based on a target signature algorithm; The verifying process of the signature information to obtain the authentication result includes: Verifying the signature information locally according to the target signature algorithm to obtain a verification result; The authentication result is generated according to the verification result.

7. A device network configuration method, characterized in that: Applied to a master control device, the method comprises: Sending connection authentication information and network connection information to the target device through the network distribution channel, the target device marking the connection authentication information as a specific type, the target device connecting to the target network according to the network connection information, the target network being connected to a control terminal corresponding to the master control device, and the target device establishing a secure connection with the control terminal through the target network according to the connection authentication information; receiving an authentication operation trigger instruction sent by the target device, wherein the authentication operation trigger instruction is sent by the target device when receiving a control instruction sent by the control end through the secure connection; According to the authentication operation trigger instruction, executing the control authentication operation corresponding to the specific type, obtaining an authentication result, wherein the authentication result is used by the target device to determine whether to execute the control instruction; The performing of the control authentication operation corresponding to the specific type to obtain an authentication result includes: Receive an authentication operation trigger instruction sent by the target device; execute a specific authentication process according to the authentication operation trigger instruction to obtain the signature information generated after the management server of the target device authenticates the master device; send the signature information to the target device so that the target device verifies the signature information and obtains the authentication result.

8. The method according to claim 7, characterized in that The specific authentication process is executed according to the authentication operation trigger instruction to obtain the signature information generated after the management server of the target device authenticates the master device, including: Acquire device configuration information and a target network address from the target device; Performing an authentication operation according to the device configuration information and the target network address, so that the management server authenticates the master control device and generates signature information after the authentication is passed; Receive the signature information returned by the management server.

9. The method according to claim 8, characterized in that The authentication operation is performed according to the device configuration information and the target network address, so that the management server authenticates the master control device and generates signature information after the authentication is passed, including: An authentication operation is performed according to the device configuration information and the target network address to perform a two-way authentication of the Hypertext Transfer Protocol Security with the management server, triggering the management server to authenticate the device certificate of the master device, and generating the signature information after the authentication is passed.

10. The method according to claim 8, characterized in that The authentication operation is performed according to the device configuration information and the target network address, so that the management server authenticates the master control device and generates signature information after the authentication is passed, including: An authentication operation is performed according to the device configuration information and the target network address to send the management account information of the target device to the management server, triggering the management server to authenticate the management account information and generate signature information after the authentication is passed.

11. The method according to claim 8, characterized in that The authentication operation is performed according to the device configuration information and the target network address, so that the management server authenticates the master control device and generates signature information after the authentication is passed, including: An authentication operation is performed according to the device configuration information and the target network address to send selection information of the data privacy protocol to the management server, triggering the management server to authenticate the master device according to the selection information, and generate signature information after the authentication is passed.

12. A device for network distribution, characterized in that: Applied to a target device, the apparatus comprises: An information receiving module is used to receive connection authentication information and network connection information sent by the master control device through the network distribution channel, and mark the connection authentication information as a specific type; A connection module, used for connecting to a target network according to the network connection information, wherein the target network is connected to a control terminal corresponding to the main control device; An establishing module, used to establish a secure connection with the control terminal through the target network according to the connection authentication information; The authentication module is used to control the main control device to perform the control authentication operation corresponding to the specific type to determine whether to execute the control instruction if a control instruction sent by the control terminal through the secure connection is received; the controlling the main control device to perform the control authentication operation corresponding to the specific type to determine whether to execute the control instruction includes: sending an authentication operation trigger instruction to the main control device so that the main control device performs a specific authentication process and obtains signature information generated after the management server of the target device authenticates the main control device; receiving the signature information sent by the main control device, and verifying the signature information to obtain an authentication result; determining whether to execute the control instruction according to the authentication result; The modification module is used to mark the connection authentication information as a target type if the authentication result of the control authentication operation indicates that the authentication is passed, and the target type is used to indicate that the control command of the control end is executed without authentication.

13. A device for network distribution, characterized in that: Applied to a main control device, the device comprises: A sending module, used for sending connection authentication information and network connection information to a target device through a network distribution channel, wherein the target device marks the connection authentication information as a specific type, and the target device is connected to a target network according to the network connection information, wherein a control terminal corresponding to the master control device is connected to the target network, and the target device establishes a secure connection with the control terminal through the target network according to the connection authentication information; An instruction receiving module, used for receiving an authentication operation trigger instruction sent by the target device, wherein the authentication operation trigger instruction is sent by the target device when receiving a control instruction sent by the control end through the secure connection; An execution module is used to execute the control authentication operation corresponding to the specific type according to the authentication operation trigger instruction, and obtain an authentication result, wherein the authentication result is used by the target device to determine whether to execute the control instruction; and if the authentication result indicates that the authentication is passed, the target device marks the connection authentication information as a target type, and the target type is used to instruct the target device to execute the control command of the control end without authentication; the execution of the control authentication operation corresponding to the specific type to obtain the authentication result includes: receiving the authentication operation trigger instruction sent by the target device; executing a specific authentication process according to the authentication operation trigger instruction to obtain the signature information generated after the management server of the target device authenticates the master control device; sending the signature information to the target device so that the target device verifies the signature information to obtain the authentication result.

14. A storage medium having a computer program stored thereon, which, when executed by a processor of a computer, causes the computer to execute the method according to any one of claims 1 to 11.

15. An electronic device, characterized in that: include: a memory storing a computer program; A processor reads a computer program stored in a memory to execute the method according to any one of claims 1 to 11.

Images