Call method and device of bluetooth device, bluetooth device and medium

Abstract

The application discloses a call method and device of a Bluetooth device, the Bluetooth device and a medium. Through application of the technical solution of the application, after two Bluetooth devices establish a voice connection, the two Bluetooth devices do not transmit audio data at the first time, but verify the authenticity of device information and user information of the other party according to the pre-stored device manufacturer root certificate and service provider root certificate of each Bluetooth device. And only in the case of determining the authenticity, the encrypted audio data is transmitted to the other party to formally start the call function of the two parties. Further, on the one hand, the purpose of detecting the authenticity of the identity of the user at the other end by using a multi-channel mode is achieved. On the other hand, the problem that security information is stolen due to malicious user attacks in Bluetooth call technology existing in the related art is avoided.

Description

Technical Field

[0001] This application relates to data communication technology, and in particular to a method, apparatus, Bluetooth device, and medium for making calls using a Bluetooth device. Background Technology

[0002] With the development of internet information technology, users are paying increasing attention to information security during phone calls. For example, Bluetooth calling devices are voice calling products that use short-range wireless communication technology. Taking Bluetooth headsets as an example, smartphones with Bluetooth headsets have now become an indispensable part of people's daily lives.

[0003] However, existing Bluetooth calling technology offers poor privacy protection, which leads to the inability to guarantee the data security of users during calls. Summary of the Invention

[0004] This application provides a Bluetooth device call method, apparatus, Bluetooth device, and medium. It addresses the problem in related technologies where Bluetooth call technology is vulnerable to malicious user attacks, leading to the theft of security information.

[0005] According to one aspect of the embodiments of this application, a calling method for a Bluetooth device is provided, applied to a first Bluetooth device, comprising:

[0006] After establishing a voice connection channel with the second Bluetooth device, obtain the security verification information corresponding to the second Bluetooth device;

[0007] When it is determined that the security verification information of the second Bluetooth device meets the preset security conditions, a session key is negotiated with the second Bluetooth device. The preset security conditions include a first security condition corresponding to the device manufacturer and a second security condition corresponding to the service provider.

[0008] The system receives audio data from the user making the call, encrypts the audio data using the session key to obtain encrypted audio data, and then transmits the encrypted audio data to the second Bluetooth device.

[0009] Optionally, in another embodiment based on the method described above in this application, obtaining the security verification information corresponding to the second Bluetooth device includes:

[0010] Obtain the device verification information and user verification information of the second Bluetooth device;

[0011] The device verification information includes the device certificate and device certificate signature of the second Bluetooth device; the user verification information includes the user certificate and user certificate signature of the second Bluetooth device.

[0012] Wherein, the device certificate signature is the signature of the message by the device certificate, and the user certificate signature is the signature of the message by the user certificate.

[0013] Optionally, in another embodiment based on the method described above, after obtaining the device verification information and user verification information of the second Bluetooth device, the method further includes:

[0014] Using the device manufacturer's root certificate pre-stored locally, the validity of the device certificate and the correctness of the device certificate signature are checked; if the checks pass, it is determined that the first security condition is met.

[0015] as well as,

[0016] Using the service provider's root certificate pre-stored locally, the validity of the user certificate and the correctness of the user certificate signature are checked; if the checks pass, it is determined that the second security condition is met.

[0017] Optionally, in another embodiment based on the method described above, after determining that the security verification information of the second Bluetooth device meets the preset security conditions, the method further includes:

[0018] A verification message containing the user certificate information is displayed on the screen of the first Bluetooth device. The verification message is used to prompt the call user to verify the user certificate information.

[0019] Upon receiving the verification pass instruction generated by the call user in response to the verification message, a session key is negotiated and established with the second Bluetooth device.

[0020] Optionally, in another embodiment based on the method described above in this application, obtaining the security verification information corresponding to the second Bluetooth device includes:

[0021] Generate a request message for obtaining the security verification information, and convert the request message into an audio format;

[0022] The request message for the audio format is sent to a first smart terminal connected to the first Bluetooth device, so that the first smart terminal sends the request message for the audio format to a second smart terminal connected to the second Bluetooth device.

[0023] The system receives a response message in audio format from the first smart terminal and extracts the security verification information carried in the response message.

[0024] Optionally, in another embodiment based on the method described above in this application, before determining the establishment of a voice connection channel with the second Bluetooth device, the method further includes:

[0025] During the equipment manufacturing phase, the equipment manufacturer's root certificate sent by the equipment manufacturer is received and stored; and...

[0026] During the device issuance phase, the system receives a security verification request from the service provider; and upon confirming that the security verification request is successful, it receives and stores the service provider root certificate sent by the service provider.

[0027] Optionally, in another embodiment based on the method described above in this application, determining that the security verification request has passed includes:

[0028] The device certificate of the first Bluetooth device is sent to the service provider so that the service provider can verify the device certificate based on the device certificate and the root certificate of the device manufacturer;

[0029] After confirming that the service provider has verified the device certificate, the service provider root certificate and user certificate written by the service provider are received and stored.

[0030] Optionally, in another embodiment based on the method described above in this application, before determining the establishment of a voice connection channel with the second Bluetooth device, the method further includes:

[0031] Receive the fingerprint information of the calling user and establish an association between the user certificate of the calling user and the fingerprint information.

[0032] Optionally, in another embodiment based on the method described above in this application, after determining that a voice connection channel has been established with the second Bluetooth device, the method further includes:

[0033] Disable the microphone function of the first Bluetooth device;

[0034] After the second Bluetooth device negotiates and establishes the session key, the process also includes:

[0035] Enable the microphone function of the first Bluetooth device.

[0036] According to another aspect of the embodiments of this application, a calling device for a Bluetooth device is provided, applied to a first Bluetooth device, comprising:

[0037] The acquisition module is configured to acquire the security verification information corresponding to the second Bluetooth device after determining that a voice connection channel has been established with the second Bluetooth device;

[0038] The module is configured to negotiate and establish a session key with the second Bluetooth device when it is determined that the security verification information of the second Bluetooth device meets the preset security conditions. The preset security conditions include a first security condition corresponding to the device manufacturer and a second security condition corresponding to the service provider.

[0039] The transmission module is configured to receive audio data from the calling user, encrypt the audio data using the session key to obtain encrypted audio data, and then transmit the encrypted audio data to the second Bluetooth device.

[0040] According to another aspect of the embodiments of this application, a Bluetooth device is provided, comprising:

[0041] Memory, used to store executable instructions; and

[0042] A display for operation with the memory to execute the executable instructions to complete the call method of any of the Bluetooth devices described above.

[0043] According to another aspect of the embodiments of this application, a computer-readable storage medium is provided for storing computer-readable instructions, which, when executed, perform the operation of the call method of any of the Bluetooth devices described above.

[0044] In this application, after establishing a voice connection channel with a second Bluetooth device, the security verification information corresponding to the second Bluetooth device can be obtained. When the security verification information of the second Bluetooth device meets preset security conditions, a session key is negotiated with the second Bluetooth device. The preset security conditions include a first security condition corresponding to the device manufacturer and a second security condition corresponding to the service provider. Audio data from the user is received, and encrypted using the session key, then transmitted to the second Bluetooth device. By applying the technical solution of this application, audio data is not immediately transmitted between the two Bluetooth devices after establishing a voice connection. Instead, the two Bluetooth devices verify the legitimacy of each other's device and user information based on their respective pre-stored device manufacturer root certificates and service provider root certificates. Only when legitimacy is confirmed will encrypted audio data be transmitted, thus officially initiating the call function between the two parties. This achieves the goal of detecting the legitimacy of the other Bluetooth device through multiple channels. Furthermore, it avoids the problem in related technologies where users are vulnerable to malicious attacks during Bluetooth calls, leading to the theft of security information. Attached Figure Description

[0045] The accompanying drawings, which form part of this specification, illustrate embodiments of this application and, together with the description, serve to explain the principles of this application.

[0046] This application can be more clearly understood with reference to the accompanying drawings and the following detailed description, wherein:

[0047] Figure 1 A schematic diagram of a Bluetooth device call method provided in an embodiment of this application is shown;

[0048] Figure 2 This application provides a system architecture diagram of a Bluetooth device call method according to an embodiment of the present application.

[0049] Figure 3 A schematic diagram of the system architecture of a Bluetooth device provided in an embodiment of this application is shown;

[0050] Figure 4 A flowchart illustrating another Bluetooth device call method provided in an embodiment of this application is shown;

[0051] Figure 5 This illustration shows a schematic diagram of a Bluetooth device's calling apparatus according to an embodiment of this application;

[0052] Figure 6 This illustration shows a schematic diagram of the structure of a Bluetooth device according to an embodiment of this application;

[0053] Figure 7 A schematic diagram of a storage medium provided in one embodiment of this application is shown. Detailed Implementation

[0054] Various exemplary embodiments of the present application will now be described in detail with reference to the accompanying drawings. It should be noted that, unless otherwise specifically stated, the relative arrangement, numerical expressions, and values ​​of the components and steps set forth in these embodiments do not limit the scope of the present application.

[0055] At the same time, it should be understood that, for ease of description, the dimensions of the various parts shown in the accompanying drawings are not drawn according to actual scale.

[0056] The following description of at least one exemplary embodiment is merely illustrative and is not intended to limit the scope of this application or its application or use.

[0057] Techniques, methods, and equipment known to those skilled in the art may not be discussed in detail, but where appropriate, such techniques, methods, and equipment should be considered part of the specification.

[0058] It should be noted that similar labels and letters in the following figures indicate similar items; therefore, once an item is defined in one figure, it does not need to be discussed further in subsequent figures.

[0059] Furthermore, the technical solutions of the various embodiments of this application can be combined with each other, but only if they are based on the ability of those skilled in the art to implement them. When the combination of technical solutions is contradictory or cannot be implemented, it should be considered that such combination of technical solutions does not exist and is not within the scope of protection claimed by this application.

[0060] It should be noted that all directional indications (such as up, down, left, right, front, back, etc.) in the embodiments of this application are only used to explain the relative positional relationship and movement of each component in a certain specific posture (as shown in the figure). If the specific posture changes, the directional indication will also change accordingly.

[0061] The following is combined Figures 1-4 This application describes an exemplary method for making calls using Bluetooth devices. It should be noted that the following application scenarios are shown only to facilitate understanding of the spirit and principles of this application, and the implementation of this application is not limited in any way. Rather, the implementation of this application can be applied to any applicable scenario.

[0062] This application also proposes a method, apparatus, Bluetooth device, and medium for making calls using a Bluetooth device.

[0063] Figure 1 The schematic diagram illustrates a flowchart of a call method for a Bluetooth device according to an embodiment of this application. The method is applied to a first Bluetooth device and includes:

[0064] S101: After confirming the establishment of a voice connection channel with the second Bluetooth device, obtain the security verification information corresponding to the second Bluetooth device.

[0065] In one embodiment of this application, both parties in a call can connect to a corresponding Bluetooth device using their respective terminal devices.

[0066] In one approach, the user of the first Bluetooth device can select their identity on the first Bluetooth device before making a call (e.g., if multiple user certificates are issued in device A, the user's identity must be selected), and then complete Bluetooth pairing and connection with their respective terminal devices (e.g., mobile phones). After the two parties establish a voice call in the form of dialing, VoIP, etc., the two Bluetooth devices exchange data based on the established call channel.

[0067] In one approach, after establishing a voice connection, the two parties do not immediately transmit the audio data of the calling users. Instead, they need to exchange security verification information. This security verification information may include device verification information and user verification information.

[0068] The device verification information consists of the device certificate of the second Bluetooth device and the signature of the device certificate pair message (i.e., device certificate signature). The user verification information consists of the user certificate of the second Bluetooth device and the signature of the user certificate pair message (i.e., user certificate signature).

[0069] Understandably, the first Bluetooth device obtains the security verification information from the second Bluetooth device for subsequent security verification. It will only activate its own function to collect user audio data upon successful verification.

[0070] S102, when it is determined that the security verification information of the second Bluetooth device meets the preset security conditions, a session key is negotiated with the second Bluetooth device. The preset security conditions include a first security condition corresponding to the device manufacturer and a second security condition corresponding to the service provider.

[0071] S103 receives audio data from the calling user, encrypts the audio data using a session key to obtain encrypted audio data, and then transmits the encrypted audio data to the second Bluetooth device.

[0072] Combination Figure 2 This application provides a detailed description of a Bluetooth device call method. The call user using the first Bluetooth device A is user A, and the call user using the second Bluetooth device B is user B, including:

[0073] Step 1: User A dials User B's number. The first Bluetooth device A needs to verify the authenticity of the other party's second Bluetooth device B.

[0074] In one approach, the first Bluetooth device A needs to receive the device certificate and its signature from the second Bluetooth device B. The first Bluetooth device then verifies the validity of the device certificate signature from the second Bluetooth device B using its pre-stored manufacturer root certificate. Finally, it verifies the validity of the signature created by the second device B using its device certificate private key using the other device's public key.

[0075] If so, the device verification information is determined to meet the first security condition.

[0076] Step 2: The first Bluetooth device A uses its pre-stored service provider root certificate to verify the user certificate signature of the other party, user B, and to verify the validity of information such as the certificate validity period.

[0077] If so, it is determined that the user authentication information meets the second security condition.

[0078] Step 3: Display the certificate information of the other party user B (the certificate information includes the user's identity) on the display screen of the first Bluetooth device A, and wait for the local user (user A) to verify and confirm.

[0079] Step 4: The local user (User A) verifies the other party's certificate information displayed on the screen. If it confirms that the user is the intended recipient of the call, a verification pass command can be generated.

[0080] The verification process can be accomplished either by the user pressing a button on the first Bluetooth device or by the user pressing their fingerprint on the Bluetooth device.

[0081] Step 5: The other party (User B) and the second Bluetooth device B perform a similar process to enable the second Bluetooth device B to verify the legitimacy of the first Bluetooth device A.

[0082] Step 6: When both parties confirm that the security verification information of the other Bluetooth device meets the preset security conditions, the two Bluetooth devices use their respective user certificates and keys to negotiate the session key for secure communication.

[0083] In one approach, this embodiment of the application requires first verifying whether the other party possesses the private key corresponding to the presented user certificate during the key negotiation process. Only then can the purpose of establishing a secure call between the two Bluetooth devices using the session key be achieved.

[0084] For example, a first Bluetooth device A can activate its microphone function, collect user A's voice data, encrypt it, and transmit it to mobile phone A via Bluetooth. Mobile phone A then transmits it to mobile phone B, and finally mobile phone B transmits it to a second Bluetooth device B. This allows the second Bluetooth device B to decrypt the voice transmitted via Bluetooth from the mobile phone and play it through its speaker.

[0085] Understandably, the principle by which the second Bluetooth device B transmits encrypted voice data is the same as that of the first Bluetooth device A. This will not be elaborated upon further.

[0086] In this application, after establishing a voice connection channel with the second Bluetooth device, the security verification information corresponding to the second Bluetooth device can be obtained; when it is determined that the security verification information of the second Bluetooth device meets the preset security conditions, a session key can be negotiated with the second Bluetooth device to establish a session key. The preset security conditions include a first security condition corresponding to the device manufacturer and a second security condition corresponding to the service provider; the audio data of the calling user can be received, and after encrypting the audio data using the session key to obtain encrypted audio data, the encrypted audio data can be transmitted to the second Bluetooth device.

[0087] By applying the technical solution of this application, after two Bluetooth devices establish a voice connection, they do not immediately transmit audio data to each other. Instead, the two Bluetooth devices verify the authenticity of each other's device and user information based on their respective pre-stored device manufacturer root certificates and service provider root certificates. Only after confirming authenticity will they transmit encrypted audio data to each other, thus officially initiating the call function. This achieves the goal of verifying the authenticity of the other party's user identity through multiple channels. Furthermore, it avoids the security information theft problem that exists in related technologies, such as Bluetooth call technology, which is vulnerable to malicious user attacks.

[0088] Optionally, in another embodiment based on the method described above in this application, obtaining the security verification information corresponding to the second Bluetooth device includes:

[0089] Obtain device verification information and user verification information of the second Bluetooth device;

[0090] The device verification information includes the device certificate and device certificate signature of the second Bluetooth device; the user verification information includes the user certificate and user certificate signature of the second Bluetooth device.

[0091] Optionally, in another embodiment based on the method described above in this application, after obtaining the device verification information and user verification information of the second Bluetooth device, the method further includes:

[0092] Using the device manufacturer's root certificate pre-stored locally, the validity of the device certificate and the correctness of the device certificate signature are checked; if the checks pass, it is determined that the first security condition is met.

[0093] as well as,

[0094] Using the service provider's root certificate pre-stored locally, the validity of the user certificate and the correctness of the user certificate signature are checked; if the checks pass, it is determined that the second security condition is met.

[0095] Optionally, in another embodiment based on the method described above in this application, after determining that the security verification information of the second Bluetooth device meets the preset security conditions, the method further includes:

[0096] A verification message containing user certificate information is displayed on the screen of the first Bluetooth device. The verification message is used to prompt the calling user to verify the user certificate information.

[0097] Upon receiving the verification pass command generated by the caller in response to the verification message, a session key is negotiated and established with the second Bluetooth device.

[0098] Optionally, in another embodiment based on the method described above in this application, obtaining the security verification information corresponding to the second Bluetooth device includes:

[0099] Generate a request message for obtaining security verification information and convert the request message into an audio format;

[0100] An audio format request message is sent to a first smart terminal connected to a first Bluetooth device, so that the first smart terminal sends the audio format request message to a second smart terminal connected to a second Bluetooth device.

[0101] Receive audio-formatted response messages from the first smart terminal and extract the security verification information carried in the response messages.

[0102] Optionally, in another embodiment based on the method described above in this application, before determining the establishment of a voice connection channel with the second Bluetooth device, the method further includes:

[0103] During the equipment manufacturing phase, the equipment manufacturer's root certificate sent by the equipment manufacturer is received and stored; and...

[0104] During the device issuance phase, the system receives a security verification request from the service provider; and upon confirming that the security verification request is successful, it receives and stores the service provider root certificate sent by the service provider.

[0105] Optionally, in another embodiment based on the method described above in this application, determining that the security verification request has passed includes:

[0106] Send the device certificate of the first Bluetooth device to the service provider so that the service provider can verify the device certificate against the device manufacturer's root certificate;

[0107] After confirming that the service provider has verified the device certificate, the system receives and stores the service provider's root certificate and user certificate written by the service provider.

[0108] In one embodiment of this application, the device manufacturer's root certificate and the service provider's root certificate can be obtained before the first Bluetooth device and the second Bluetooth device establish a voice connection channel.

[0109] For example, such as Figure 3 As shown, for the device manufacturer's root certificate, the production software can write the manufacturer's root certificate to the device. A device key pair is then generated within the Bluetooth device, and a certificate request is generated using the generated key pair. The manufacturer's root certificate is then used to sign the certificate request, and the device certificate is written to the Bluetooth device.

[0110] In addition, embodiments of this application can also use an external authentication key seed and a unique device identifier to generate a device authentication key and write it into a Bluetooth device.

[0111] Furthermore, in this embodiment of the application, the service provider can also verify the authenticity of the Bluetooth device by reading the device certificate from the device, verifying the device certificate signature with the manufacturer's root certificate, and then verifying the device's signature of the message with the device certificate's private key using the device certificate's public key.

[0112] Additionally, the service provider can calculate the external authentication key for the Bluetooth device, initiate external authentication with the device, and, upon successful authentication, write the service provider's root certificate to the Bluetooth device. Furthermore, it can generate a user certificate key pair within the Bluetooth device, generate a certificate request (containing the user's identity), issue the user certificate using the service provider's root certificate, and write it to the Bluetooth device.

[0113] Optionally, embodiments of this application may also prompt the user to register their fingerprint on the Bluetooth device, so that the Bluetooth device saves the user's fingerprint information and binds it to the corresponding user certificate.

[0114] In one embodiment, the Bluetooth device in this application can support multiple users sharing the same Bluetooth device, with each user's certificate bound to their fingerprint. As an example, the number of users supported depends on the capacity of the security chip in the Bluetooth device.

[0115] Optionally, in another embodiment based on the method described above in this application, before determining the establishment of a voice connection channel with the second Bluetooth device, the method further includes:

[0116] Receive the fingerprint information of the calling user and establish the association between the calling user's user certificate and fingerprint information.

[0117] Optionally, in another embodiment based on the method described above in this application, after determining that a voice connection channel has been established with the second Bluetooth device, the method further includes:

[0118] Turn off the microphone function of the first Bluetooth device;

[0119] After the second Bluetooth device negotiates and establishes the session key, the process also includes:

[0120] Enable the microphone function of the first Bluetooth device.

[0121] Furthermore, in combination Figure 4 As shown below, the calling method of the Bluetooth device proposed in this application will be described in detail:

[0122] Step a: The first Bluetooth device establishes a voice connection channel with the second Bluetooth device.

[0123] Step b: The first Bluetooth device disables its microphone function.

[0124] Step c: Obtain the device verification information and user verification information of the second Bluetooth device.

[0125] The device verification information includes the device certificate of the second Bluetooth device and the signature of the device certificate to the message; the user verification information includes the user certificate of the second Bluetooth device and the signature of the user certificate to the message.

[0126] Step d: The first Bluetooth device uses the device manufacturer's root certificate pre-stored locally to check whether the device certificate is valid; it uses the device certificate to sign the message to verify whether the second Bluetooth device has the private key corresponding to the device certificate it provides; and it uses the service provider's root certificate pre-stored locally to check whether the user certificate is valid; it uses the user certificate to sign the message to verify whether the second Bluetooth device has the private key corresponding to the user certificate it provides.

[0127] In one approach, the local user using the first Bluetooth device can also confirm from the display screen of the first Bluetooth device whether the other party's certificate information is the intended call recipient, and if so, initiate a confirmation command.

[0128] In one approach, the device manufacturer is the manufacturer of the Bluetooth device. It is understood that embodiments of this application can obtain the device manufacturer's root certificate (which may also include a private key and an external authentication key seed) from this device manufacturer.

[0129] In another approach, the service provider is the manager or operator of the call service. It is understood that, in this embodiment of the application, the service provider root certificate can be obtained from the service provider; as well as the manufacturer root certificate and external authentication key seed imported from the device manufacturer.

[0130] Since the service provider and the device manufacturer are from different companies, the possibility of them colluding to forge security information is low. Therefore, this embodiment of the application can verify the security information of the peer Bluetooth device based on the service provider root certificate provided by the service provider and the device manufacturer root certificate provided by the device manufacturer.

[0131] In other words, this application embodiment can utilize the service provider's root certificate to verify the legitimacy of the peer's user certificate, signature, and other information. It can also utilize the device manufacturer's root certificate to verify the legitimacy of the peer's device certificate, signature, and other information.

[0132] The external authentication key is generated by distributing the external authentication key seed and the device's unique identifier. Each device has a unique key, which is used by the device to verify the service provider. After external authentication, the device allows the service provider to manage the service provider's root certificate, user certificate, and user fingerprint template within the device.

[0133] In one approach, the manufacturer's root certificate is a device certificate used to verify the authenticity of the other party in a secure call. Furthermore, the Bluetooth device's device certificate is used to prove the device's authenticity to both the service provider and the other party in the secure call.

[0134] In one approach, the service provider's root certificate is a user certificate used to verify the authenticity of the user's identity during a confidential call. Furthermore, the user certificate is used to prove the user's identity and identifier to the other party in the confidential call.

[0135] Step e: If all are valid, determine that the security verification information of the second Bluetooth device meets the preset security conditions.

[0136] Step f: The first Bluetooth device and the second Bluetooth device negotiate and establish a session key.

[0137] Step g: The first Bluetooth device activates its microphone function.

[0138] Step h: After encrypting the audio data using the session key to obtain encrypted audio data, transmit the encrypted audio data to the second Bluetooth device.

[0139] In one embodiment of this application, to verify the authenticity of the calling user, the user's fingerprint can be recorded and bound to the certificate after obtaining the user certificate. This ensures that when a subsequent call begins, the user's fingerprint is verified before using the user certificate's private key. Once verified, the authorized device uses the user's private key to negotiate the session key with the other party.

[0140] In this application, after establishing a voice connection channel with the second Bluetooth device, the security verification information corresponding to the second Bluetooth device can be obtained; when it is determined that the security verification information of the second Bluetooth device meets the preset security conditions, a session key can be negotiated with the second Bluetooth device to establish a session key. The preset security conditions include a first security condition corresponding to the device manufacturer and a second security condition corresponding to the service provider; the audio data of the calling user can be received, and after encrypting the audio data using the session key to obtain encrypted audio data, the encrypted audio data can be transmitted to the second Bluetooth device.

[0141] By applying the technical solution of this application, after two Bluetooth devices establish a voice connection, they do not immediately transmit audio data to each other. Instead, the two Bluetooth devices verify the legitimacy of each other's device and user information based on their respective pre-stored device manufacturer root certificates and service provider root certificates. Only when legitimacy is confirmed will encrypted audio data be transmitted to each other, thus officially initiating the call function. This achieves the goal of verifying the legitimacy of the other Bluetooth device through multiple channels. Furthermore, it avoids the security information theft problem that exists in related technologies, where users are vulnerable to malicious attacks during Bluetooth calls.

[0142] Optionally, in another embodiment of this application, such as Figure 5 As shown, this application also provides a calling device for a Bluetooth device. Applied to a first Bluetooth device, it includes:

[0143] The acquisition module 201 is configured to acquire the security verification information corresponding to the second Bluetooth device after determining that a voice connection channel has been established with the second Bluetooth device;

[0144] Establishment module 202 is configured to negotiate and establish a session key with the second Bluetooth device when it is determined that the security verification information of the second Bluetooth device meets the preset security conditions. The preset security conditions include a first security condition corresponding to the device manufacturer and a second security condition corresponding to the service provider.

[0145] The transmission module 203 is configured to receive audio data from the calling user, encrypt the audio data using the session key to obtain encrypted audio data, and then transmit the encrypted audio data to the second Bluetooth device.

[0146] By applying the technical solution of this application, after two Bluetooth devices establish a voice connection, they do not immediately transmit audio data to each other. Instead, the two Bluetooth devices verify the legitimacy of each other's device and user information based on their respective pre-stored device manufacturer root certificates and service provider root certificates. Only when legitimacy is confirmed will encrypted audio data be transmitted to each other, thus officially initiating the call function. This achieves the goal of verifying the legitimacy of the other Bluetooth device through multiple channels. Furthermore, it avoids the security information theft problem that exists in related technologies, where users are vulnerable to malicious attacks during Bluetooth calls.

[0147] In another embodiment of this application, the steps configured to be executed by the establishment module 202 include:

[0148] Obtain the device verification information and user verification information of the second Bluetooth device;

[0149] The device verification information includes the device certificate and device certificate signature of the second Bluetooth device; the user verification information includes the user certificate and user certificate signature of the second Bluetooth device.

[0150] Wherein, the device certificate signature is the signature of the message by the device certificate, and the user certificate signature is the signature of the message by the user certificate.

[0151] In another embodiment of this application, the steps configured to be executed by the establishment module 202 include:

[0152] Using the device manufacturer's root certificate pre-stored locally, the validity of the device certificate and the correctness of the device certificate signature are checked; if the checks pass, it is determined that the first security condition is met.

[0153] as well as,

[0154] Using the service provider's root certificate pre-stored locally, the validity of the user certificate and the correctness of the user certificate signature are checked; if the checks pass, it is determined that the second security condition is met.

[0155] In another embodiment of this application, the steps configured to be executed by the establishment module 202 include:

[0156] A verification message containing the user certificate information is displayed on the screen of the first Bluetooth device. The verification message is used to prompt the call user to verify the user certificate information.

[0157] Upon receiving the verification pass instruction generated by the call user in response to the verification message, a session key is negotiated and established with the second Bluetooth device.

[0158] In another embodiment of this application, the steps configured to be executed by the establishment module 202 include:

[0159] Generate a request message for obtaining the security verification information, and convert the request message into an audio format;

[0160] The request message for the audio format is sent to a first smart terminal connected to the first Bluetooth device, so that the first smart terminal sends the request message for the audio format to a second smart terminal connected to the second Bluetooth device.

[0161] The system receives a response message in audio format from the first smart terminal and extracts the security verification information carried in the response message.

[0162] In another embodiment of this application, the steps configured to be executed by the establishment module 202 include:

[0163] During the equipment manufacturing phase, the equipment manufacturer's root certificate sent by the equipment manufacturer is received and stored; and...

[0164] During the device issuance phase, the system receives a security verification request from the service provider; and upon confirming that the security verification request is successful, it receives and stores the service provider root certificate sent by the service provider.

[0165] In another embodiment of this application, the steps configured to be executed by the establishment module 202 include:

[0166] The device certificate of the first Bluetooth device is sent to the service provider so that the service provider can verify the device certificate based on the device certificate and the root certificate of the device manufacturer;

[0167] After confirming that the service provider has verified the device certificate, the service provider root certificate and user certificate written by the service provider are received and stored.

[0168] In another embodiment of this application, the steps configured to be executed by the establishment module 202 include:

[0169] Receive the fingerprint information of the calling user and establish an association between the user certificate of the calling user and the fingerprint information.

[0170] In another embodiment of this application, the steps configured to be executed by the establishment module 202 include:

[0171] Disable the microphone function of the first Bluetooth device;

[0172] After the second Bluetooth device negotiates and establishes the session key, the process also includes:

[0173] Enable the microphone function of the first Bluetooth device.

[0174] This application also provides a Bluetooth device to perform the aforementioned Bluetooth device call method. Please refer to... Figure 6 This illustrates a schematic diagram of a Bluetooth device provided by some embodiments of this application. For example... Figure 6 As shown, the Bluetooth device 3 includes: a processor 300, a memory 301, a bus 302, and a communication interface 303. The processor 300, the communication interface 303, and the memory 301 are connected via the bus 302. The memory 301 stores a computer program that can run on the processor 300. When the processor 300 runs the computer program, it executes the calling method of the Bluetooth device provided in any of the foregoing embodiments of this application.

[0175] The memory 301 may include high-speed random access memory (RAM) or non-volatile memory, such as at least one disk storage device. Communication between this system network element and at least one other network element is achieved through at least one communication interface 303 (which can be wired or wireless), such as the Internet, wide area network, local area network, or metropolitan area network.

[0176] Bus 302 can be an ISA bus, PCI bus, or EISA bus, etc. The bus can be divided into an address bus, a data bus, a control bus, etc. The memory 301 is used to store programs. After receiving an execution instruction, the processor 300 executes the program. The data recognition method disclosed in any of the foregoing embodiments of this application can be applied to the processor 300, or implemented by the processor 300.

[0177] The processor 300 may be an integrated circuit chip with signal processing capabilities. In implementation, each step of the above method can be completed by the integrated logic circuitry in the hardware of the processor 300 or by instructions in software form. The processor 300 may be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it may also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), an off-the-shelf programmable gate array (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components. It can implement or execute the methods, steps, and logic block diagrams disclosed in the embodiments of this application. The general-purpose processor may be a microprocessor or any conventional processor. The steps of the methods disclosed in the embodiments of this application can be directly embodied in the execution of a hardware decoding processor, or executed by a combination of hardware and software modules in the decoding processor. The software modules may reside in random access memory, flash memory, read-only memory, programmable read-only memory, electrically erasable programmable memory, registers, or other mature storage media in the art. The storage medium is located in memory 301. The processor 300 reads the information in memory 301 and, in conjunction with its hardware, completes the steps of the above method.

[0178] The Bluetooth device and the calling method of the Bluetooth device provided in this application embodiment are based on the same inventive concept and have the same beneficial effects as the methods they adopt, operate or implement.

[0179] This application also provides a computer-readable storage medium corresponding to the Bluetooth device call method provided in the foregoing embodiments. Please refer to... Figure 7 The computer-readable storage medium shown is an optical disc 40, on which a computer program (i.e., a program product) is stored. When the computer program is run by a processor, it executes the Bluetooth device call method provided in any of the foregoing embodiments.

[0180] It should be noted that examples of the computer-readable storage medium may also include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other optical and magnetic storage media, which will not be elaborated here.

[0181] The computer-readable storage medium provided in the above embodiments of this application and the data identification method provided in the embodiments of this application are based on the same inventive concept and have the same beneficial effects as the methods adopted, run or implemented by the upper-layer application stored therein.

[0182] It should be noted that:

[0183] Numerous specific details are set forth in the specification provided herein. However, it will be understood that embodiments of this application may be practiced without these specific details. In some instances, well-known structures and techniques have not been shown in detail so as not to obscure the understanding of this specification.

[0184] Similarly, it should be understood that, for the sake of brevity and to aid in understanding one or more of the various inventive aspects, in the foregoing description of exemplary embodiments of this application, various features of this application are sometimes grouped together in a single embodiment, figure, or description thereof. However, this disclosure should not be construed as reflecting a schematic diagram in which the claimed application requires more features than expressly recited in each claim. Rather, as reflected in the following claims, inventive aspects lie in fewer than all features of a single foregoing disclosed embodiment. Therefore, the claims following the detailed description are hereby expressly incorporated into that detailed description, wherein each claim itself is a separate embodiment of this application.

[0185] Furthermore, those skilled in the art will understand that although some embodiments described herein include certain features but not others included in other embodiments, combinations of features from different embodiments are intended to be within the scope of this application and form different embodiments. For example, in the following claims, any of the claimed embodiments can be used in any combination.

[0186] The above description is merely a preferred embodiment of this application, but the scope of protection of this application is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the technical scope disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

Claims

1. A talk method of a Bluetooth device, characterized by, Applied to a first Bluetooth device, comprising: After determining to establish a voice connection channel with a second Bluetooth device, obtaining security verification information corresponding to the second Bluetooth device; further comprising: closing the microphone function of the first Bluetooth device; When determining that the security verification information of the second Bluetooth device meets a preset security condition, negotiating with the second Bluetooth device to establish a session key, the preset security condition includes a first security condition corresponding to a device manufacturer and a second security condition corresponding to a service provider; After the second Bluetooth device negotiates to establish a session key, further comprising: starting the microphone function of the first Bluetooth device; Receiving audio data of a call user, and encrypting the audio data using the session key to obtain encrypted audio data, and then transmitting the encrypted audio data to the second Bluetooth device.

2. The method of claim 1, wherein, The obtaining of the security verification information corresponding to the second Bluetooth device comprises: Obtaining device verification information and user verification information of the second Bluetooth device; Wherein, the device verification information includes device certificate and device certificate signature of the second Bluetooth device; the user verification information includes user certificate and user certificate signature of the second Bluetooth device; Wherein, the device certificate signature is the signature of the device certificate to the message, and the user certificate signature is the signature of the user certificate to the message.

3. The method of claim 2, wherein, After obtaining the device verification information and the user verification information of the second Bluetooth device, further comprising: Using the pre-existing device manufacturer root certificate locally, detecting whether the device certificate is legal and whether the device certificate signature is correct; if the detection is passed, it is determined that the first security condition is met; And, Using the pre-existing service provider root certificate locally, detecting whether the user certificate is legal and whether the user certificate signature is correct; if the detection is passed, it is determined that the second security condition is met.

4. The method of claim 3, wherein, After determining that the security verification information of the second Bluetooth device meets the preset security condition, further comprising: Displaying a verification message containing user certificate information on the display screen of the first Bluetooth device, the verification message being used to prompt the call user to verify the user certificate information; When receiving a verification pass instruction generated by the call user for the verification message, negotiating with the second Bluetooth device to establish a session key.

5. The method of claim 1, wherein, The obtaining of the security verification information corresponding to the second Bluetooth device comprises: Generating a request message for obtaining the security verification information, and converting the request message into an audio format; Sending the request message in audio format to a first intelligent terminal connected with the first Bluetooth device, so that the first intelligent terminal sends the request message in audio format to a second intelligent terminal connected with the second Bluetooth device; Receiving an audio format reply message from the first intelligent terminal, and extracting the security verification information carried in the reply message.

6. The method of claim 1, wherein, Before determining to establish a voice connection channel with a second Bluetooth device, further comprising: In the device production stage, receiving and storing the device manufacturer root certificate sent by the device manufacturer; and, In the device issuing stage, a security authentication request of the service provider is received; and after determining that the security authentication request is passed, a service provider root certificate sent by the service provider is received and stored.

7. The method of claim 6, wherein, The determining that the security authentication request is passed comprises: The device certificate of the first Bluetooth device is sent to the service provider, so that the service provider verifies the device certificate according to the device certificate and the device manufacturer root certificate; After determining that the verification of the device certificate by the service provider is passed, the service provider root certificate and a user certificate written by the service provider are received and stored.

8. The method of claim 1 or 6, wherein, Before the determining that the voice connection channel is established with the second Bluetooth device, the method further comprises: Fingerprint information of the call user is received, and an association between the user certificate of the call user and the fingerprint information is established.

9. A call device of a Bluetooth device, applied to a first Bluetooth device, comprising: An obtaining module configured to, after determining that a voice connection channel is established with a second Bluetooth device, obtain security authentication information corresponding to the second Bluetooth device; Further comprising: closing a microphone function of the first Bluetooth device; An establishing module configured to, when the security authentication information of the second Bluetooth device meets a preset security condition, negotiate a session key with the second Bluetooth device, the preset security condition comprising a first security condition corresponding to a device manufacturer and a second security condition corresponding to a service provider; after the second Bluetooth device negotiates the session key, further comprising: starting the microphone function of the first Bluetooth device; A transmitting module configured to receive audio data of a call user, encrypt the audio data by using the session key to obtain encrypted audio data, and then transmit the encrypted audio data to the second Bluetooth device.

10. A Bluetooth device, characterized in that, Comprise: A memory for storing executable instructions; And A processor for executing the executable instructions with the memory to complete the operations of the call method of the Bluetooth device in any one of claims 1-8.

11. A computer readable storage medium storing computer readable instructions, wherein, The instructions are executed to perform the operations of the call method of the Bluetooth device in any one of claims 1-8.

Images