Bluetooth encryption connection method, device and electronic device

Abstract

The present invention discloses a Bluetooth encrypted connection method, device, and electronic device. The method comprises: a terminal device broadcasts a key index and a first authentication code; the terminal device receives a second authentication code fed back by a gateway based on the key index and the first authentication code, the second authentication code being generated by a security platform using a first decryption key, an encryption key, and the first authentication code, the first decryption key and the encryption key being determined by the security platform based on the key index; the terminal device obtains the second decryption key; the terminal device decrypts the second authentication code using the second decryption key to obtain valid data; and the terminal device establishes a transmission channel with the gateway based on the valid data. The method provided by the present invention not only ensures that the Bluetooth terminal device can automatically and quickly access the network, but also has a complete identity authentication process, thereby ensuring the security of terminal device use and the security of multi-terminal communication.

Description

Technical Field

[0001] The present invention relates to the field of communication security technology, and in particular to a Bluetooth encryption connection method, device and electronic equipment. Background Art

[0002] Currently, there are two mainstream authentication methods for BLE device access: 1. Unauthenticated access: For BLE sensor devices, to simplify operations, the "device name" broadcast by the terminal device is used to distinguish the device type. The app or gateway automatically searches for and connects to nearby terminal devices based on a pre-agreed protocol, without security authentication. 2. Manual authentication: To avoid misoperation, BLE or Wi-Fi controlled devices, such as smart switches, usually require the user to long-press a button on the terminal for authentication and pairing.

[0003] For unauthenticated access, any terminal can freely connect to the terminal without any identity authentication mechanism. Such technology can only be applied to low-cost "read-only" sensor products, such as temperature and humidity sensors. Even if illegally connected, it will not cause "accidents", but there is still a risk of information leakage or unavailability; for manual authentication achieved by button presses, it can be used to control IoT devices, such as smart switches, etc., but this authentication method needs to be manually set according to specified steps, and the password is exchanged in plain text, which cannot meet the requirements for multi-terminal network communication with high security requirements. Summary of the Invention

[0004] Therefore, the technical problem to be solved by the present invention is to overcome the defect that the existing Bluetooth terminal device connection mode is not secure enough, thereby providing a Bluetooth encryption connection method, device and electronic device.

[0005] In the first aspect, an embodiment of the present invention discloses a Bluetooth encrypted connection method, which includes: a terminal device broadcasts a key index and a first authentication code; the terminal device receives a second authentication code fed back by a gateway based on the key index and the first authentication code, the second authentication code is generated by a security platform using a first decryption key, an encryption key and the first authentication code, and the first decryption key and encryption key are determined by the security platform based on the key index; the terminal device obtains a second decryption key; the terminal device decrypts the second authentication code using the second decryption key to obtain valid data; the terminal device establishes a transmission channel with the gateway based on the valid data.

[0006] The Bluetooth encrypted connection method provided by the present invention realizes the identity recognition of the gateway and multiple Bluetooth devices by introducing a security platform. When the identity recognition is successful, a transmission channel is established between the gateway and the Bluetooth device, which not only ensures that the Bluetooth terminal device can automatically and quickly access the network, but also has a complete identity authentication process, ensuring the safe use of the terminal device and the security of multi-terminal communication.

[0007] In combination with the first aspect, in a possible implementation of the first aspect, the terminal device establishes a transmission channel with the gateway based on the valid data, including: the terminal device compares the valid data with the valid data stored locally; if the comparison results are consistent, the terminal device establishes a transmission channel with the gateway.

[0008] According to the method provided by the embodiment of the present invention, the terminal device obtains valid data by decrypting the second authentication code, and compares the obtained valid data with the valid data stored locally. When the comparison results are consistent, the terminal device can determine the identity information of the gateway and establish a transmission channel with the gateway, thereby ensuring the security of subsequent data transmission.

[0009] In combination with the first aspect, in a possible implementation manner of the first aspect, after the terminal device establishes a transmission channel with the gateway, the method further includes:

[0010] The terminal device sends the information to be transmitted to the gateway through the transmission channel, so that the gateway sends the information to be transmitted to the application platform.

[0011] In the method provided by the embodiment of the present invention, the terminal device sends the information to be transmitted to the gateway through the transmission channel, and the gateway sends the information to be transmitted to the application platform, thereby ensuring the security of information transmission.

[0012] In a second aspect, an embodiment of the present invention also discloses a Bluetooth encrypted connection method, which includes: a security platform receives a key index and a first authentication code sent by a gateway, and the key index and the first authentication code are generated by a terminal device; the security platform determines the decryption key and encryption key corresponding to the terminal device based on the key index; the security platform uses the decryption key to decrypt the first authentication code to obtain valid data and a first random code; the security platform generates a second random code based on the first random code, and the second random code is different from the first random code; the security platform generates a second authentication code based on the encryption key, the valid data and the second random code; the security platform sends the second authentication code to the gateway, so that the gateway sends the second authentication code to the terminal device, and the terminal device decrypts the second authentication code and establishes a transmission channel with the gateway based on the decryption result.

[0013] The Bluetooth encrypted connection method provided by the present invention realizes the identity recognition of the gateway and multiple Bluetooth devices by introducing a security platform. When the identity recognition is successful, a transmission channel is established between the gateway and the Bluetooth device, which not only ensures that the Bluetooth terminal device can automatically and quickly access the network, but also has a complete identity authentication process, ensuring the safe use of the terminal device and the security of multi-terminal communication.

[0014] In the third aspect, an embodiment of the present invention also discloses a Bluetooth encrypted connection system, which includes a gateway, at least one terminal device and a security platform, wherein the at least one terminal device includes a first terminal device, and the first terminal device is connected to the gateway by Bluetooth; the first terminal device broadcasts a key index and a first authentication code; the gateway receives and forwards the key index and the first authentication code to the security platform; the security platform determines the decryption key and encryption key corresponding to the first terminal device based on the key index; uses the decryption key to decrypt the first authentication code to obtain valid data and a first random code; generates a second random code based on the first random code, and generates a second authentication code based on the valid data and the second random code; sends the second authentication code to the gateway; the gateway receives and sends the second authentication code to the first terminal device, the first terminal device obtains a second decryption key, and uses the second decryption key to decrypt the second authentication code to obtain valid data; and establishes a transmission channel with the gateway based on the valid data.

[0015] The Bluetooth encrypted connection system provided by the present invention realizes the identity recognition of the gateway and multiple Bluetooth devices by introducing a security platform. When the identity recognition is passed, a transmission channel is established between the gateway and the Bluetooth device, which not only ensures that the Bluetooth terminal device can automatically and quickly access the network, but also has a complete identity authentication process, ensuring the safe use of the terminal device and the security of multi-terminal communication.

[0016] In a fourth aspect, an embodiment of the present invention further discloses a Bluetooth encrypted connection device, which includes: a first sending module, used for a terminal device to broadcast a key index and a first authentication code; a first receiving module, used for the terminal device to receive a second authentication code fed back by the gateway based on the key index and the first authentication code, the second authentication code being generated by the security platform using a first decryption key, an encryption key and the first authentication code, and the first decryption key and the encryption key being determined by the security platform based on the key index; a first acquisition module, used for the terminal device to obtain a second decryption key; a first decryption module, used for the terminal device to decrypt the second authentication code using the second decryption key to obtain valid data; and a first establishment module, used for the terminal device to establish a transmission channel with the gateway based on the valid data.

[0017] In the fifth aspect, an embodiment of the present invention also discloses a Bluetooth encrypted connection device, which includes: a second sending module, used for the security platform to receive a key index and a first authentication code sent by a gateway, and the key index and the first authentication code are generated by a terminal device; a first determination module, used for the security platform to determine the decryption key and encryption key corresponding to the terminal device according to the key index; a second decryption module, used for the security platform to decrypt the first authentication code using the decryption key to obtain valid data and a first random code; a first generation module, used for the security platform to generate a second random code according to the first random code, and the second random code is different from the first random code; the security platform generates a second authentication code according to the encryption key, the valid data and the second random code; the security platform sends the second authentication code to the gateway, so that the gateway sends the second authentication code to the terminal device, and the terminal device decrypts the second authentication code and establishes a transmission channel with the gateway based on the decryption result.

[0018] In the sixth aspect, an embodiment of the present invention also discloses an electronic device, comprising: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to execute the Bluetooth encrypted connection method as described in the first aspect or any optional embodiment of the first aspect, or to execute the Bluetooth encrypted connection method described in the second aspect.

[0019] In the seventh aspect, an embodiment of the present invention further discloses a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, it implements the Bluetooth encrypted connection method as described in the first aspect or any optional embodiment of the first aspect, or implements the Bluetooth encrypted connection method as described in the second aspect. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] In order to more clearly illustrate the specific embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the specific embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0021] Figure 1 This is a flowchart of a specific example of the Bluetooth encryption connection method according to an embodiment of the present invention;

[0022] Figure 2 This is a flowchart of a specific example of the Bluetooth encryption connection method according to an embodiment of the present invention;

[0023] Figure 3 This is a timing diagram of a specific example of the Bluetooth encryption connection method in an embodiment of the present invention;

[0024] Figure 4 This is a principle block diagram of a specific example of a Bluetooth encrypted connection system according to an embodiment of the present invention;

[0025] Figure 5 This is a principle block diagram of a specific example of a Bluetooth encryption connection device according to an embodiment of the present invention;

[0026] Figure 6 This is a principle block diagram of a specific example of a Bluetooth encryption connection device according to an embodiment of the present invention;

[0027] Figure 7 FIG. 4 is a diagram showing a specific example of an electronic device in an embodiment of the present invention. DETAILED DESCRIPTION

[0028] The technical solution of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the embodiments described are only some embodiments of the present invention, not all embodiments. All other embodiments obtained by ordinary technicians in this field based on the embodiments of the present invention without making any creative efforts shall fall within the scope of protection of the present invention.

[0029] In the description of the present invention, it should be noted that the terms "first," "second," and "third" are used for descriptive purposes only and are not to be construed as indicating or implying relative importance. Those skilled in the art will understand the specific meanings of the above terms in the present invention in specific circumstances.

[0030] In addition, the technical features involved in the different embodiments of the present invention described below can be combined with each other as long as they do not conflict with each other.

[0031] BLE technology (Bluetooth Low Energy communication technology) is a wireless communication standard that operates in the 2.4G ISM frequency band. After years of development, BLE has become the most widely used low-cost, low-power, short-range wireless communication technology. With the cost and coverage advantages brought by the massive market formed by mobile phones and Bluetooth headsets, BLE is gradually replacing other similar communication technologies (such as ZigBee) and becoming the only technical standard for short-range, low-power wireless communication. BLE technology is one of the most mature and widely used short-range communication technologies. The main application scenario of BLE is point-to-point communication, and the security authentication mechanism is also oriented towards point-to-point communication. For multi-terminal networking communication scenarios, the standard BLE security authentication mechanism cannot meet the requirements of security and fast networking at the same time. Therefore, the present invention provides a Bluetooth encrypted connection method that can solve the complex problems of the BLE security authentication mechanism, so that Internet of Things devices can access the network quickly, conveniently and safely.

[0032] The embodiment of the present invention discloses a Bluetooth encryption connection method, such as Figure 1 As shown, the method includes the following steps:

[0033] Step 101: The terminal device broadcasts a key index and a first authentication code.

[0034] Exemplarily, the terminal device can be any terminal device that requires an encrypted connection. In the embodiment of the present application, the terminal device can be any terminal device integrated with a Bluetooth module; the key index can be index information for indexing the key. In the embodiment of the present application, the key index can be used to determine the key corresponding to the terminal device; the first authentication code is an authentication code generated by the terminal device. In the embodiment of the present application, the terminal device will randomly generate an authentication code. The authentication code can be composed of valid data and a first random code. The valid data refers to the data formed by the valid information in the Bluetooth encrypted connection authentication process. The terminal device encrypts the randomly generated authentication code to obtain the first authentication code; the encryption algorithm used in the encryption process can be any encryption algorithm. The embodiment of the present application does not limit the specific content of the encryption algorithm. Those skilled in the art can determine it according to needs. In the embodiment of the present application, the encryption algorithm can include but is not limited to national secret algorithms, such as SM1, SM2, SM3, SM4, SM7, SM9 and Zu Chongzhi algorithm.

[0035] In step 102, the terminal device receives a second authentication code fed back by the gateway based on the key index and the first authentication code. The second authentication code is generated by the security platform using the first decryption key, encryption key and the first authentication code. The first decryption key and encryption key are determined by the security platform based on the key index.

[0036] Exemplarily, the terminal device receives a second authentication code fed back by the gateway based on the key index and the first authentication code, and the second authentication code is generated by the security platform. In an embodiment of the present application, after the terminal device sends the key index and the first authentication code to the gateway, the gateway forwards the key index and the first authentication code to the security platform. The security platform determines the encryption key and decryption key corresponding to the terminal device based on the received key index, decrypts the first authentication code based on the decryption key to obtain valid data and a first random code, generates a second random code different from the first random code based on the first random code, and finally encrypts the valid data and the second random code using the encryption password to obtain the second authentication code.

[0037] Step 103: The terminal device obtains a second decryption key.

[0038] Exemplarily, the second decryption key is a key used to decrypt the second authentication code. In the embodiment of the present application, the local memory of the terminal device may store the second decryption key.

[0039] Step 104: The terminal device decrypts the second authentication code using the second decryption key to obtain valid data.

[0040] Illustratively, in an embodiment of the present application, the terminal device decrypts the second authentication code using the second decryption key to obtain valid data and the second random code, and then extracts the valid data therefrom.

[0041] Step 105: The terminal device establishes a transmission channel with the gateway according to the valid data.

[0042] For example, based on the valid data obtained, the terminal device can identify the identity of the gateway and establish a transmission channel with the gateway. The transmission channel is a secure transmission channel that can effectively ensure the security of data transmission.

[0043] The Bluetooth encrypted connection method provided by the present invention realizes the identity recognition of the gateway and multiple Bluetooth devices by introducing a security platform. When the identity recognition is successful, a transmission channel is established between the gateway and the Bluetooth device, which not only ensures that the Bluetooth terminal device can automatically and quickly access the network, but also has a complete identity authentication process, ensuring the safe use of the terminal device and the security of multi-terminal communication.

[0044] As an optional embodiment of the present invention, the terminal device establishes a transmission channel with the gateway based on the valid data, including: the terminal device compares the valid data with the valid data stored locally; if the comparison results are consistent, the terminal device establishes a transmission channel with the gateway.

[0045] For example, in an embodiment of the present application, valid data will be pre-stored locally on the terminal device, and the terminal device will compare the decrypted valid data with the locally stored valid data. When the comparison results are consistent, it proves that the gateway's identity authentication is passed and a secure transmission channel is established with the gateway.

[0046] As an optional embodiment of the present invention, after the terminal device establishes a transmission channel with the gateway, the method further includes: the terminal device sends the information to be transmitted to the gateway through the transmission channel, so that the gateway sends the information to be transmitted to the application platform.

[0047] Exemplarily, the information to be transmitted can be any information that needs to be transmitted by the terminal device, and the application platform can be any platform with information transmission and processing functions. In the implementation of this application, after the transmission channel between the gateways is established, the terminal device sends the information to be transmitted to the gateway through the transmission channel, and the gateway forwards the information to be transmitted to the application platform, which can ensure the security of information transmission.

[0048] The embodiment of the present invention also discloses a Bluetooth encryption connection method, such as Figure 2 As shown, the method includes the following steps:

[0049] Step 201: The security platform receives a key index and a first authentication code sent by a gateway, where the key index and the first authentication code are generated by a terminal device.

[0050] Exemplarily, in an embodiment of the present application, the security platform receives a key index and a first authentication code sent by the gateway, the key index and the first authentication code are generated by the terminal device, the terminal device sends the key index and the first authentication code to the gateway, and the gateway forwards the key index and the first authentication code to the security platform.

[0051] In step 202, the security platform determines the decryption key and encryption key corresponding to the terminal device according to the key index.

[0052] Exemplarily, the security platform manages the keys corresponding to the terminal device, and upon receiving the key index of the terminal device, determines the encryption key and decryption key corresponding to the terminal device according to the key index.

[0053] Step 203: The security platform decrypts the first authentication code using the decryption key to obtain valid data and a first random code.

[0054] Exemplarily, the security platform decrypts the first authentication code using the decryption key to obtain valid data and the first random code.

[0055] In step 204 , the security platform generates a second random code according to the first random code, where the second random code is different from the first random code.

[0056] Illustratively, the second random code is generated according to the first random code. The embodiment of the present application does not limit the specific content of the second random code, and those skilled in the art can determine it according to needs.

[0057] Step 205: The security platform generates a second authentication code according to the encryption key, the valid data and the second random code.

[0058] For example, the specific details can be found in Figure 1 The corresponding descriptions and effects in the embodiments shown can be understood and will not be repeated here.

[0059] In step 206, the security platform sends the second authentication code to the gateway, so that the gateway sends the second authentication code to the terminal device. The terminal device decrypts the second authentication code and establishes a transmission channel with the gateway according to the decryption result.

[0060] For example, the specific details can be found in Figure 1The corresponding descriptions and effects in the embodiments shown can be understood and will not be repeated here.

[0061] The Bluetooth encrypted connection method provided by the present invention realizes the identity recognition of the gateway and multiple Bluetooth devices by introducing a security platform. When the identity recognition is successful, a transmission channel is established between the gateway and the Bluetooth device, which not only ensures that the Bluetooth terminal device can automatically and quickly access the network, but also has a complete identity authentication process, ensuring the safe use of the terminal device and the security of multi-terminal communication.

[0062] In the embodiment of the present application, the timing diagram of the Bluetooth encryption connection method is as follows Figure 3 For details, please refer to the above Figure 1 and Figure 2 The relevant description and effects of the embodiments shown in the figure can be understood by referring to the accompanying drawings and will not be repeated here.

[0063] The embodiment of the present invention also provides a Bluetooth encryption connection system, such as Figure 4 As shown, the system includes a gateway 301, at least one terminal device 302 and a security platform 303, wherein the at least one terminal device includes a first terminal device, and the first terminal device is connected to the gateway via Bluetooth.

[0064] For example, in an embodiment of the present application, the Bluetooth encrypted connection system includes at least one terminal device, each terminal device is integrated with a Bluetooth communication module, and each terminal device is connected to the gateway via Bluetooth communication.

[0065] The first terminal device broadcasts a key index and a first authentication code.

[0066] For example, see the above Figure 1 The relevant description and effects of step 101 in the illustrated embodiment can be understood and will not be repeated here.

[0067] The gateway receives and forwards the key index and the first authentication code to the security platform.

[0068] For example, see the above Figure 1 The relevant description and effects of step 102 in the illustrated embodiment can be understood and will not be repeated here.

[0069] The security platform determines the decryption key and encryption key corresponding to the first terminal device based on the key index; uses the decryption key to decrypt the first authentication code to obtain valid data and a first random code; generates a second random code based on the first random code, and generates a second authentication code based on the valid data and the second random code; and sends the second authentication code to the gateway.

[0070] For example, see the above Figure 2The relevant description and effects of the embodiments shown in the figure can be understood by referring to the accompanying drawings and will not be repeated here.

[0071] The gateway receives and sends the second authentication code to the first terminal device.

[0072] Exemplarily, the gateway forwards the second authentication code.

[0073] The first terminal device obtains a second decryption key, decrypts the second authentication code using the second decryption key to obtain valid data; and establishes a transmission channel with the gateway based on the valid data.

[0074] For example, see the above Figure 1 The relevant description and effects of the embodiments shown in the figure can be understood by referring to the accompanying drawings and will not be repeated here.

[0075] As an optional embodiment of the present invention, the system further includes an application platform, which is communicatively connected to the gateway; the application platform is configured to receive data forwarded by the first terminal device via the gateway.

[0076] For example, see the above Figure 1 The relevant description and effects of the embodiments shown in the figure can be understood by referring to the accompanying drawings and will not be repeated here.

[0077] The embodiment of the present invention also discloses a Bluetooth encryption connection device, such as Figure 5 As shown, the device includes: a first sending module 501, which is used for the terminal device to broadcast a key index and a first authentication code; a first receiving module 502, which is used for the terminal device to receive a second authentication code fed back by the gateway based on the key index and the first authentication code, the second authentication code is generated by the security platform using a first decryption key, an encryption key and the first authentication code, and the first decryption key and the encryption key are determined by the security platform based on the key index; an acquisition module 503, which is used for the terminal device to obtain a second decryption key; a first decryption module 504, which is used for the terminal device to decrypt the second authentication code using the second decryption key to obtain valid data; and a first establishment module 505, which is used for the terminal device to establish a transmission channel with the gateway based on the valid data.

[0078] The Bluetooth encrypted connection device provided in the embodiment of the present invention realizes the identity recognition of the gateway and multiple Bluetooth devices by introducing a security platform. When the identity recognition is passed, a transmission channel is established between the gateway and the Bluetooth device, which not only ensures that the Bluetooth terminal device can automatically and quickly access the network, but also has a complete identity authentication process, ensuring the safe use of the terminal device and the security of multi-terminal communication.

[0079] As an optional embodiment of the present invention, the first establishing module includes: a comparison submodule, which is used for the terminal device to compare the valid data with the valid data stored locally; and an establishing submodule, which is used for the terminal device to establish a transmission channel with the gateway if the comparison results are consistent.

[0080] As an optional embodiment of the present invention, the apparatus further includes: a fourth sending module, configured for the terminal device to send the information to be transmitted to the gateway through the transmission channel, so that the gateway sends the information to be transmitted to the application platform.

[0081] The embodiment of the present invention also discloses a Bluetooth encryption connection device, such as Figure 6 As shown, the device includes: a second sending module 601, which is used for the security platform to receive a key index and a first authentication code sent by a gateway, wherein the key index and the first authentication code are generated by a terminal device; a determination module 602, which is used for the security platform to determine the decryption key and encryption key corresponding to the terminal device according to the key index; a second decryption module 603, which is used for the security platform to decrypt the first authentication code using the decryption key to obtain valid data and a first random code; a first generation module 604, which is used for the security platform to generate a second random code according to the first random code, wherein the second random code is different from the first random code; a second generation module 605, which is used for the security platform to generate a second authentication code according to the encryption key, the valid data and the second random code; a third sending module 606, which is used for the security platform to send the second authentication code to the gateway, so that the gateway sends the second authentication code to the terminal device, and the terminal device decrypts the second authentication code and establishes a transmission channel with the gateway according to the decryption result.

[0082] The Bluetooth encryption connection device provided by the present invention realizes the identity recognition of the gateway and multiple Bluetooth devices by introducing a security platform. When the identity recognition is passed, a transmission channel is established between the gateway and the Bluetooth device, which not only ensures that the Bluetooth terminal device can automatically and quickly access the network, but also has a complete identity authentication process, ensuring the safe use of the terminal device and the security of multi-terminal communication.

[0083] The embodiment of the present invention further provides an electronic device, such as Figure 7 As shown, the electronic device may include a processor 401 and a memory 402, wherein the processor 401 and the memory 402 may be connected via a bus or other means. Figure 7 The bus connection is taken as an example.

[0084] The processor 401 may be a central processing unit (CPU). The processor 401 may also be other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, or a combination of the above chips.

[0085] Memory 402, as a non-transitory computer-readable storage medium, can be used to store non-transitory software programs, non-transitory computer executable programs, and modules, such as the program instructions / modules corresponding to the Bluetooth encrypted connection method in the embodiments of the present invention. Processor 401 executes the non-transitory software programs, instructions, and modules stored in memory 402 to perform various processor functions and data processing, thereby implementing the Bluetooth encrypted connection method in the above method embodiments.

[0086] The memory 402 may include a program storage area and a data storage area, wherein the program storage area may store an operating system and applications required for at least one function; the data storage area may store data created by the processor 401, etc. In addition, the memory 402 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one disk storage device, a flash memory device, or other non-volatile solid-state storage device. In some embodiments, the memory 402 may optionally include a memory remotely located relative to the processor 401, and these remote memories may be connected to the processor 401 via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0087] The one or more modules are stored in the memory 402 and when executed by the processor 401, perform the following steps: Figure 1 The Bluetooth encrypted connection method in the illustrated embodiment.

[0088] For details of the above electronic equipment, please refer to Figure 1 The corresponding descriptions and effects in the embodiments shown can be understood and will not be repeated here.

[0089] Those skilled in the art will appreciate that all or part of the processes in the above-mentioned embodiments can be implemented by instructing the relevant hardware through a computer program. The program can be stored in a computer-readable storage medium. When the program is executed, it can include the processes of the embodiments of the above-mentioned methods. The storage medium can be a magnetic disk, an optical disk, a read-only memory (ROM), a random access memory (RAM), a flash memory, a hard disk drive (HDD), or a solid-state drive (SSD). The storage medium can also include a combination of the above-mentioned types of memory.

[0090] Although the embodiments of the present invention have been described with reference to the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present invention. Such modifications and variations are all within the scope defined by the appended claims.

Claims

1. A Bluetooth encryption connection method, characterized in that: The method comprises: The terminal device broadcasts the key index and the first authentication code; The terminal device receives a second authentication code fed back by the gateway based on the key index and the first authentication code, where the second authentication code is generated by the security platform using the first decryption key, the encryption key, and the first authentication code, and the first decryption key and the encryption key are determined by the security platform based on the key index; The terminal device obtains a second decryption key; The terminal device decrypts the second authentication code using the second decryption key to obtain valid data, where the valid data is data formed by valid information in the Bluetooth encrypted connection authentication process; The terminal device establishes a transmission channel with the gateway according to the valid data; The terminal device establishes a transmission channel with the gateway according to the valid data, including: The terminal device compares the valid data with locally stored valid data; If the comparison results are consistent, the terminal device establishes a transmission channel with the gateway.

2. The method according to claim 1, characterized in that After the terminal device establishes a transmission channel with the gateway, the method further includes: The terminal device sends the information to be transmitted to the gateway through the transmission channel, so that the gateway sends the information to be transmitted to the application platform.

3. A Bluetooth encrypted connection method, characterized in that: The method comprises: The security platform receives the key index and the first authentication code sent by the gateway, where the key index and the first authentication code are generated by the terminal device; The security platform determines the decryption key and encryption key corresponding to the terminal device according to the key index; The security platform decrypts the first authentication code using the decryption key to obtain valid data and a first random code, wherein the valid data is data formed by valid information in the Bluetooth encrypted connection authentication process; The security platform generates a second random code based on the first random code, where the second random code is different from the first random code; The security platform generates a second authentication code according to the encryption key, the valid data and the second random code; The security platform sends the second authentication code to the gateway, so that the gateway sends the second authentication code to the terminal device, and the terminal device decrypts the second authentication code and establishes a transmission channel with the gateway according to the decryption result; The step of establishing a transmission channel with the gateway according to the decryption result includes: The terminal device compares the decrypted valid data with the locally stored valid data; If the comparison results are consistent, the terminal device establishes a transmission channel with the gateway.

4. A Bluetooth encrypted connection system, characterized in that: The system includes a gateway, at least one terminal device and a security platform, wherein the at least one terminal device includes a first terminal device, and the first terminal device is connected to the gateway via Bluetooth; The first terminal device broadcasts a key index and a first authentication code; The gateway receives and forwards the key index and the first authentication code to the security platform; The security platform determines a decryption key and an encryption key corresponding to the first terminal device according to the key index; Decrypting the first authentication code using the decryption key to obtain valid data and a first random code; generating a second random code based on the first random code, and generating a second authentication code based on the valid data and the second random code; sending the second authentication code to the gateway, where the valid data is data formed by valid information during the Bluetooth encrypted connection authentication process; The gateway receives and sends the second authentication code to the first terminal device, The first terminal device obtains a second decryption key, and decrypts the second authentication code using the second decryption key to obtain valid data; and establishing a transmission channel with the gateway according to the valid data; Establishing a transmission channel with the gateway according to the valid data includes: comparing the valid data obtained by decryption with the valid data stored locally by the first terminal device; If the comparison results are consistent, the first terminal device establishes a transmission channel with the gateway.

5. The system according to claim 4, characterized in that The system further includes an application platform, wherein the application platform is communicatively connected to the gateway; The application platform is used to receive data forwarded by the first terminal device through the gateway.

6. A Bluetooth encrypted connection device, characterized in that: The device comprises: A first sending module, configured for broadcasting a key index and a first authentication code to a terminal device; a first receiving module, configured to receive, by the terminal device, a second authentication code fed back by the gateway based on the key index and the first authentication code, where the second authentication code is generated by the security platform using the first decryption key, the encryption key, and the first authentication code, and the first decryption key and the encryption key are determined by the security platform based on the key index; An acquisition module, configured for the terminal device to acquire a second decryption key; a first decryption module, configured for the terminal device to decrypt the second authentication code using the second decryption key to obtain valid data, wherein the valid data is data formed by valid information in the Bluetooth encrypted connection authentication process; A first establishing module, configured for the terminal device to establish a transmission channel with the gateway according to the valid data; The terminal device establishes a transmission channel with the gateway according to the valid data, including: The terminal device compares the valid data with locally stored valid data; If the comparison results are consistent, the terminal device establishes a transmission channel with the gateway.

7. A Bluetooth encrypted connection device, characterized in that: The device comprises: A second sending module, configured for the security platform to receive a key index and a first authentication code sent by the gateway, wherein the key index and the first authentication code are generated by the terminal device; A determination module, configured for the security platform to determine a decryption key and an encryption key corresponding to the terminal device according to a key index; A second decryption module is configured to decrypt the first authentication code using the decryption key to obtain valid data and a first random code, wherein the valid data is data formed by valid information in the Bluetooth encrypted connection authentication process; a first generating module, configured for the security platform to generate a second random code according to the first random code, where the second random code is different from the first random code; A second generating module, configured for the security platform to generate a second authentication code according to the encryption key, the valid data and the second random code; a third sending module, configured for the security platform to send the second authentication code to the gateway, so that the gateway sends the second authentication code to the terminal device, and the terminal device decrypts the second authentication code and establishes a transmission channel with the gateway according to the decryption result; The step of establishing a transmission channel with the gateway according to the decryption result includes: The terminal device compares the decrypted valid data with the locally stored valid data; If the comparison results are consistent, the terminal device establishes a transmission channel with the gateway.

8. An electronic device, characterized in that: include: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to execute the Bluetooth encrypted connection method as described in claim 1 or 2, or to execute the Bluetooth encrypted connection method as described in claim 3.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the Bluetooth encryption connection method according to claim 1 or 2 is implemented, or the Bluetooth encryption connection method according to claim 3 is implemented.

Images