Identity authentication management method, electronic device, smart lock and related devices

Abstract

The present application discloses an identity authentication management method, electronic device, smart lock, and related devices, which are applied to electronic devices. The method includes: obtaining a device identification and a first password of a smart lock connected to the electronic device via Bluetooth; using the first password as a first encryption key, encrypting the device identification and the first password according to the first encryption key to obtain a first ciphertext content; sending a first identity authentication command frame to the smart lock, the first identity authentication command frame including the first ciphertext content, the first identity authentication command frame being used to instruct the smart lock to use the first password as a first decryption key to decrypt the first ciphertext content to obtain the device identification and the first password, and verifying the device identification and the first password. When the verification is successful, a second password is generated and sent to the electronic device; and the second password is received. The embodiment of the present application can improve the authentication security of the smart lock.

Description

Technical Field

[0001] The present application relates to the field of electronic technology, and in particular to an identity authentication management method, electronic equipment, smart lock and related devices. Background Art

[0002] With the technological innovation, smart locks have also been sought after by people. Smart locks are locks derived from traditional mechanical locks and modern technology. Their main feature is the combination of traditional and modern computer technology. This is mainly reflected in the lock itself having the ability to identify user biometric information such as face, fingerprint, and voice, as well as unlocking functions such as digital passwords, program instruction control, mechanical keys, and networked data collection. However, whether unlocking with biometric face, fingerprint, or voice recognition or entering a password and using APP commands to open and close the lock, the lock needs to be bound and authenticated with the user's corresponding identity ID in order to obtain control rights and perform corresponding operations. This requires a smart lock identity authentication mechanism. The lock performs information verification, and the program, based on the corresponding verification mechanism, allows users with the required identity to obtain control rights and operate the lock. At present, the authentication method is relatively simple and poses certain security risks. Therefore, how to improve the authentication security of smart locks needs to be urgently addressed. Summary of the Invention

[0003] The embodiments of the present application provide an identity authentication management method, electronic device, smart lock and related devices, which can improve the authentication security of the smart lock.

[0004] In a first aspect, an embodiment of the present application provides an identity authentication management method, applied to an electronic device, the method comprising:

[0005] Obtaining a device identification and a first password of a smart lock connected to the electronic device via Bluetooth; using the first password as a first encryption key, and encrypting the device identification and the first password according to the first encryption key to obtain a first ciphertext content;

[0006] Sending a first authentication command frame to the smart lock, the first authentication command frame including the first ciphertext content, the first authentication command frame being used to instruct the smart lock to use the first password as a first decryption key to decrypt the first ciphertext content to obtain the device identification and the first password, and verifying the device identification and the first password. When the verification is successful, generating a second password, and sending the second password to the electronic device; the first authentication command frame is used to implement an identity binding function;

[0007] The second password is received.

[0008] In a second aspect, an embodiment of the present application provides an identity authentication management method, which is applied to a smart lock, and the method includes:

[0009] Receiving a first authentication command frame sent by an electronic device, the first authentication command frame including the first ciphertext content, the first ciphertext content being obtained by encrypting the device identifier of the smart lock and the first password according to the first encryption key using the first password as a first encryption key by the electronic device connected to the smart lock via Bluetooth; the first authentication command frame is used to implement an identity binding function;

[0010] decrypting the first ciphertext content using the first password as a first decryption key to obtain the device identifier and the first password;

[0011] Verifying the device identification and the first password;

[0012] When the verification is successful, a second password is generated and sent to the electronic device.

[0013] In a third aspect, an embodiment of the present application provides an identity authentication management device, which is applied to an electronic device. The device includes: an acquisition unit, a sending unit, and a receiving unit, wherein:

[0014] The acquiring unit is configured to acquire a device identification and a first password of a smart lock connected to the electronic device via Bluetooth; use the first password as a first encryption key, and encrypt the device identification and the first password according to the first encryption key to obtain a first ciphertext content;

[0015] The sending unit is used to send a first identity authentication command frame to the smart lock, the first identity authentication command frame including the first ciphertext content, the first identity authentication command frame is used to instruct the smart lock to use the first password as a first decryption key to decrypt the first ciphertext content to obtain the device identification and the first password, and verify the device identification and the first password. When the verification is successful, a second password is generated and the second password is sent to the electronic device; the first identity authentication command frame is used to implement an identity binding function;

[0016] The receiving unit is configured to receive the second password.

[0017] In a fourth aspect, an embodiment of the present application provides an identity authentication management device, which is applied to a smart lock. The device includes: a receiving unit, a decryption unit, a verification unit, a generation unit, and a sending unit, wherein:

[0018] The receiving unit is configured to receive a first authentication command frame sent by an electronic device, the first authentication command frame including the first ciphertext content, the first ciphertext content being obtained by encrypting the device identifier of the smart lock and the first password according to the first encryption key using the first password as a first encryption key by the electronic device connected to the smart lock via Bluetooth; the first authentication command frame is used to implement an identity binding function;

[0019] The decryption unit is configured to decrypt the first ciphertext content using the first password as a first decryption key to obtain the device identifier and the first password;

[0020] The verification unit is configured to verify the device identification and the first password;

[0021] The generating unit generates a second password when the verification is successful;

[0022] The sending unit is configured to send the second password to the electronic device.

[0023] In the fifth aspect, an embodiment of the present application provides an electronic device, comprising a processor, a memory, a communication interface, and one or more programs, wherein the one or more programs are stored in the memory and configured to be executed by the processor, and the program includes instructions for executing the steps in the first aspect of the embodiment of the present application.

[0024] In the sixth aspect, an embodiment of the present application provides a smart lock, comprising a processor, a memory, a communication interface, and one or more programs, wherein the one or more programs are stored in the memory and configured to be executed by the processor, and the program includes instructions for executing the steps in the second aspect of the embodiment of the present application.

[0025] In the seventh aspect, an embodiment of the present application provides a computer-readable storage medium, wherein the above-mentioned computer-readable storage medium stores a computer program for electronic data exchange, wherein the above-mentioned computer program enables a computer to execute some or all of the steps described in the first aspect of the embodiment of the present application.

[0026] In an eighth aspect, an embodiment of the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program for electronic data exchange, wherein the computer program enables a computer to execute part or all of the steps described in the second aspect of the embodiment of the present application.

[0027] In a ninth aspect, embodiments of the present application provide a computer program product, wherein the computer program product includes a non-transitory computer-readable storage medium storing a computer program, wherein the computer program is operable to cause a computer to perform some or all of the steps described in the first aspect of the embodiments of the present application. The computer program product may be a software installation package.

[0028] In a tenth aspect, embodiments of the present application provide a computer program product, wherein the computer program product includes a non-transitory computer-readable storage medium storing a computer program, wherein the computer program is operable to cause a computer to perform some or all of the steps described in the second aspect of the embodiments of the present application. The computer program product may be a software installation package.

[0029] In the eleventh aspect, an embodiment of the present application provides an identity authentication management system, which includes the electronic device described in the third and fifth aspects and the smart lock described in the fourth and sixth aspects.

[0030] The implementation of the embodiments of this application has the following beneficial effects:

[0031] It can be seen that the identity authentication management method, electronic device, smart lock and related devices described in the embodiments of the present application are applied to electronic devices to obtain the device identification and first password of the smart lock that is connected to the electronic device through Bluetooth; the first password is used as the first encryption key, and the device identification and the first password are encrypted according to the first encryption key to obtain the first ciphertext content, and a first identity authentication command frame is sent to the smart lock. The first identity authentication command frame includes the first ciphertext content. The first identity authentication command frame is used to instruct the smart lock to use the first password as the first decryption key to decrypt the first ciphertext content to obtain the device identification and the first password, and verify the device identification and the first password. When the verification is successful, a second password is generated and the second password is sent to the electronic device; the first identity authentication command frame is used to implement the identity binding function, receive the second password, and can encrypt the password itself and the device identification of the smart lock based on the first password during the identity binding process, and then the smart lock completes the authentication process, which can ensure the security of authentication during the binding process and help improve the authentication security of the smart lock. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0033] Figure 1A This is a flow chart of an identity authentication management method provided by an embodiment of the present application;

[0034] Figure 1B This is a flowchart of another identity authentication management method provided by an embodiment of the present application;

[0035] Figure 2 This is a flowchart of another identity authentication management method provided by an embodiment of the present application;

[0036] Figure 3 This is a schematic diagram of the structure of an electronic device provided in an embodiment of the present application;

[0037] Figure 4 This is a schematic diagram of the structure of a smart lock provided by an embodiment of the present application;

[0038] Figure 5 This is a block diagram of the functional units of an identity authentication management device provided in an embodiment of the present application;

[0039] Figure 6 This is a block diagram of the functional units of another identity authentication management device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0040] In order to enable those skilled in the art to better understand the present invention, the following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0041] The terms "first," "second," and the like in the specification and claims of this application and the accompanying drawings are used to distinguish between different objects, not to describe a particular order. Furthermore, the terms "including," "having," and any variations thereof, are intended to cover non-exclusive inclusions. For example, a process, method, system, product, or apparatus comprising a series of steps or elements is not limited to the listed steps or elements but may optionally include steps or elements not listed, or may optionally include other steps or elements inherent to the process, method, product, or apparatus.

[0042] References herein to "embodiments" mean that a particular feature, structure, or characteristic described in connection with the embodiments may be included in at least one embodiment of the present application. The appearance of this phrase in various places in the specification does not necessarily refer to the same embodiment, nor does it constitute an independent or alternative embodiment that is mutually exclusive of other embodiments. It is understood, both explicitly and implicitly, by those skilled in the art that the embodiments described herein may be combined with other embodiments.

[0043] In the embodiment of the present application, the smart lock may include at least one of the following: a smart door lock, a smart window lock, a smart ground lock, a smart car lock, etc., which are not limited here.

[0044] In an embodiment of the present application, the electronic device may include at least one of the following: a smart phone, a tablet computer, an intelligent robot, a vehicle-mounted device, a wearable device, a smart car, a smart home device, a computing device or other processing device connected to a wireless modem, as well as various forms of user equipment (UE), mobile station (MS), terminal device, etc., without limitation here.

[0045] Among them, smart home devices may include at least one of the following: smart TVs, smart doorbells, smart rice cookers, smart refrigerators, smart washing machines, smart treadmills, smart air conditioners, smart dishwashers, smart microwave ovens, smart sofas, smart massage chairs, smart curtains, smart ovens, smart cameras, smart gateways, smart routers, smart switch panels, smart sweeping robots, etc., without limitation here.

[0046] The following is a detailed introduction to the embodiments of the present application.

[0047] See also Figure 1A , Figure 1A This is a flow chart of an identity authentication management method provided by an embodiment of the present application. As shown in the figure, the identity authentication management method is applied to an electronic device. The method may include:

[0048] 101. Obtain a device identification and a first password of a smart lock connected to the electronic device via Bluetooth; use the first password as a first encryption key, encrypt the device identification and the first password according to the first encryption key, and obtain a first ciphertext content.

[0049] In an embodiment of the present application, a Bluetooth communication connection can be established between the electronic device and the smart lock. The device identification of the smart lock can be understood as identification information used to uniquely identify the smart lock. The device identification can include at least one of the following: factory number, IP address, MAC address, device ID, etc., which are not limited here. For example, the device identification can be a 12-digit unique ID bound to the identity of the party being verified. The first password can be understood as the original password or the initialization password, that is, a default password bound to the smart lock when it leaves the factory. The electronic device can be understood as the authenticating party, and the smart lock can be understood as the party being verified.

[0050] In a specific implementation, the device identification and the first password of the smart lock connected to the electronic device via Bluetooth can be obtained, and then the first password can be used as the first encryption key. The device identification and the first password can be encrypted according to the first encryption key to obtain the first ciphertext content, thereby ensuring the transmission security of the device identification and the first password.

[0051] 102. Send a first authentication command frame to the smart lock, where the first authentication command frame includes the first ciphertext content. The first authentication command frame is used to instruct the smart lock to use the first password as a first decryption key to decrypt the first ciphertext content to obtain the device identification and the first password, and verify the device identification and the first password. When the verification is successful, generate a second password and send the second password to the electronic device; the first authentication command frame is used to implement an identity binding function.

[0052] In a specific implementation, the second password may be randomly generated, or the second password may be generated based on the first password.

[0053] In an embodiment of the present application, the electronic device can send a first authentication command frame to the smart lock. The first authentication command frame may include a first ciphertext content. The first authentication command frame is used to instruct the smart lock to use the first password as the first decryption key to decrypt the first ciphertext content to obtain the device identification and the first password, and verify the device identification and the first password. When the verification is successful, a second password is generated and then the second password is sent to the electronic device. The first authentication command frame is used to implement the identity binding function.

[0054] In a specific implementation, the second password can be used to release the identity binding function between the electronic device and the smart lock.

[0055] Optionally, the above step 102, generating the second password, may include the following steps:

[0056] The second password is generated according to the first password.

[0057] In the embodiment of the present application, in a specific implementation, the second password can be generated based on the first password and the timestamp of the current time. Specifically, the first password and the timestamp can be combined to obtain the second password.

[0058] In a specific implementation, a mapping relationship between passwords and character strings may be preset, and then a target character string corresponding to the first password may be determined based on the mapping relationship, and the target character string may be used as the second password.

[0059] 103. Receive the second password.

[0060] In the embodiment of the present application, the electronic device can receive a second password.

[0061] Optionally, the smart lock uses the first password as a second encryption key, encrypts the second password based on the second encryption key, and obtains a second ciphertext content; the above step 103, receiving the second password, may include the following steps:

[0062] 31. Receive a first reply command sent by the smart lock, where the first reply command includes the second ciphertext content;

[0063] 32. Use the first password as a second decryption key, decrypt the second ciphertext content according to the second decryption key, and obtain the second password.

[0064] In an embodiment of the present application, the smart lock can use the first password as the second encryption key, encrypt the second password based on the second encryption key to obtain the second ciphertext content, and the smart lock can send a first reply command to the electronic device, and the first reply command may include the second ciphertext content.

[0065] Furthermore, the electronic device can receive the first reply command sent by the smart lock, and then use the first password as the second decryption key to decrypt the second ciphertext content according to the second decryption key to obtain the second password. That is, only the first password can decrypt the second ciphertext content, thereby ensuring security.

[0066] Optionally, the following steps may also be included:

[0067] A1. Use the first password and the second password as a third encryption key, encrypt the first random number according to the third encryption key, and obtain a third ciphertext content;

[0068] A2. Send a second identity authentication command frame to the smart lock, the second identity authentication command frame including the third ciphertext content, the second identity authentication command frame being used to instruct the smart lock to use the first password and the second password as a third decryption key, decrypt the third ciphertext content according to the third decryption key to obtain the first random number, verify the first random number, and generate a third password when the verification is successful; and send the third password to the electronic device; the second identity authentication command frame is used to implement an identity authentication function;

[0069] A3. Receive the third password.

[0070] In a specific implementation, the first random number can be obtained from the Bluetooth service of the smart lock. For example, the first random number can be a 6-digit random key. It is automatically generated by the authenticated party during the identity binding process and obtained from the authenticated party's Bluetooth service.

[0071] In an embodiment of the present application, the first password and the second password can be used as the third encryption key, the first random number can be encrypted according to the third encryption key to obtain the third ciphertext content, and the third ciphertext content can be encapsulated in a second identity authentication command frame, and the second identity authentication command frame is used to implement the identity authentication function.

[0072] In a specific implementation, the electronic device can send a second authentication command frame to the smart lock. The second authentication command frame includes a third ciphertext content. The second authentication command frame is used to instruct the smart lock to use the first password and the second password as the third decryption key, that is, only when the first password and the second password are used as decryption keys at the same time, can the third ciphertext content be decrypted, that is, the third ciphertext content is decrypted according to the third decryption key to obtain a first random number, and the first random number is verified. When the verification is successful, a third password is generated, and the third password can be sent to the electronic device, and the electronic device can receive the third password.

[0073] In a specific implementation, during the normal communication encryption and decryption process, the encryption and decryption key can be: the second-generation password + the third-generation password.

[0074] Optionally, the above step A2, generating the third password, may include the following steps:

[0075] The third password is generated according to the first password and the second password.

[0076] In a specific implementation, the first password and the second password may be combined to obtain the third password, or a partial string of the first password and a partial string of the second password may be intercepted and the two intercepted partial strings may be combined to obtain the third password.

[0077] Optionally, the above step of generating the third password according to the first password and the second password may include the following steps:

[0078] S1. Obtain a foreground application identifier of the electronic device, and determine a first interception parameter corresponding to the foreground application identifier;

[0079] S2. intercepting the first password according to the first interception parameter to obtain a first character string;

[0080] S3. Obtain a current timestamp and determine a second interception parameter corresponding to the current timestamp;

[0081] S4. intercepting the second password according to the second interception parameter to obtain a second character string;

[0082] S5. Obtain user identity level parameters;

[0083] S6. Determine a target combination parameter corresponding to the user identity level parameter;

[0084] S7. Combine the first character string and the second character string according to the target combination parameter to obtain the third password.

[0085] In an embodiment of the present application, an application identifier is used to uniquely identify an application, and a mapping relationship between a preset application identifier and an interception parameter can be pre-stored. The interception parameter may include at least one of the following: an interception position, an interception number of bits, etc., which are not limited here. The interception position refers to the position of the characters to be intercepted, and the interception number of bits refers to the number of characters to be intercepted. The foreground application identifier of the electronic device can be obtained, and then the first interception parameter corresponding to the foreground application identifier can be determined based on the mapping relationship. Then, the first password can be intercepted according to the first interception parameter to obtain the first character string.

[0086] Next, a mapping relationship between a preset timestamp and a truncation parameter can be pre-stored. The truncation parameter can include at least one of the following: a truncation position, a truncation number of bits, etc., which are not limited here. The truncation position refers to the position of the characters to be truncation, and the truncation number of bits refers to the number of characters to be truncation. Specifically, the current timestamp can be obtained, and then a second truncation parameter corresponding to the current timestamp can be determined based on the mapping relationship. The second password can then be truncation based on the second truncation parameter to obtain the second character string.

[0087] Next, the user identity level parameters can also be obtained, and the mapping relationship between the preset identity level parameters and the combination parameters can be pre-stored. The combination parameters may include at least one of the following: combination order, combination method, etc., which are not limited here. The combination order refers to which character string comes first and which character string comes last. The combination method may include at least one of the following: the existence of characters alone, character superposition processing, etc., which are not limited here. The existence of characters alone means that each character corresponds to a position, and the character superposition processing means that multiple characters in the same position are superimposed, such as addition superposition, subtraction superposition, multiplication superposition, division superposition, etc., which are not limited here. Furthermore, the target combination parameters corresponding to the user identity level parameters can be determined based on the mapping relationship, and then the first character string and the second character string can be combined according to the target combination parameters to obtain the third password. The application environment, timestamp and user identity can be combined to realize personalized password generation, achieve the effect of "time, place and people", and help improve security.

[0088] Optionally, the smart lock uses the first password and the second password as a fourth encryption key, encrypts the third password based on the fourth encryption key, and obtains fourth ciphertext content; the smart lock may further include the following steps:

[0089] B1. Receive a second reply command sent by the smart lock, where the second reply command includes the fourth ciphertext content;

[0090] B2. Use the first password and the second password as a fourth decryption key, decrypt the fourth ciphertext content according to the fourth decryption key, and obtain the third password.

[0091] In an embodiment of the present application, the smart lock can use the first password and the second password as the fourth encryption key, encrypt the third password based on the fourth encryption key, obtain a fourth ciphertext content, and encapsulate the fourth ciphertext content in a second reply command.

[0092] In the specific implementation, the electronic device can receive the second reply command sent by the smart lock, use the first password and the second password as the fourth decryption key, decrypt the fourth ciphertext content according to the fourth decryption key, and obtain the third password. That is, only when the first password and the second password are used as decryption keys at the same time can the fourth ciphertext content be decrypted, which can ensure the security of the third password. The third password can be used to encrypt specified communication content. The specified communication content can be pre-set or system default. The specified communication content can include at least one of the following: video calls, voice calls, doorbell functions, etc., which are not limited here.

[0093] Optionally, the following steps may also be included:

[0094] C1. Sending an authentication frame to the smart lock, the authentication frame including a verification password; parsing the authentication frame by the smart lock to obtain the verification password, comparing the verification password with a preset administrator password, and allowing the electronic device to establish a Bluetooth communication connection with the smart lock if the comparison is successful;

[0095] C2. Establish a Bluetooth communication connection between the electronic device and the smart lock.

[0096] In a specific implementation, the preset administrator password can be pre-set or system default.

[0097] In an embodiment of the present application, an authentication frame can be sent to the smart lock, and the authentication frame includes: a verification password. The authentication frame is then parsed by the smart lock to obtain the verification password, and the verification password is compared with the preset administrator password. When the comparison is successful, the electronic device is allowed to establish a Bluetooth communication connection with the smart lock. Then, a Bluetooth communication connection can be established between the electronic device and the smart lock, so that security can be guaranteed.

[0098] To illustrate, in the embodiments of this application, the authentication binding technology between an electronic device and a smart lock is used to establish a binding relationship and control permissions between the electronic device and the smart lock. In this embodiment of the application, the Bluetooth transmission protocol is used for interaction. To better illustrate the scenario, the authentication technology process between the electronic device and the smart lock is described below. In the following process, the mobile device is the authenticator and the smart lock is the authenticated party. The authentication process command interaction is encrypted. The encryption and decryption methods are described after the process.

[0099] In actual applications, the authentication mechanism between electronic devices and smart locks is divided into two parts: 1. Identity binding, 2. Authentication.

[0100] Identity binding refers to re-establishing the identity binding relationship. The authenticator and the verified party may have changed, and the old identity binding relationship is cleared. Identity verification refers to verifying that the authenticator and the verified party are the same as the bound parties based on the original identity binding relationship and the original password verification process.

[0101] In the embodiment of the present application, the device identification (device ID) and detailed parameter application method and data encryption method in the identity binding password verification are as follows:

[0102] The device ID of the party being verified is a 12-digit unique ID that is bound to the identity of the party being verified.

[0103] The first password, namely the initialization password, is a 12-byte default password that is bound to the device ID of the authenticated party when it leaves the factory.

[0104] The first random number, also known as the verification key, is a 6-digit random key automatically generated by the verified party during the identity binding process and obtained from the verified party's Bluetooth service.

[0105] The second key may be an identity authentication key.

[0106] The third key may be a key for encrypting data exchange between the authenticator and the authenticated party.

[0107] Among them, the Bluetooth communication data verification service UUID0 of the authenticator and the authenticated party is: xFFE5.

[0108] In an embodiment of the present application, the authenticator obtains the device ID and initialization terminal password of the party being authenticated, and the authenticator connects to the party being authenticated via Bluetooth protocol, establishes a Bluetooth communication scenario between the two parties, and randomly generates a verification key in the Bluetooth service. This is so that the authenticator can obtain and verify the key in the following process. The authenticator sends a request identity authentication command frame to the party being authenticated, the content of which includes: the authenticator's device ID and initialization terminal password. After the party being authenticated receives the authenticator's request identity authentication command frame and decrypts the command frame, the party being authenticated verifies whether the initialization terminal password is consistent with its own initialization password. If abnormal, the authentication ends. If they are consistent, the party being authenticated randomly generates a second-generation password based on the initialization password and replies to the authenticator.

[0109] The authenticator then verifies whether to proceed based on the command sent back by the party being authenticated. If not, authentication fails. If yes, authentication proceeds to the next step. The authenticator uses the received second-generation password as the encryption key to encrypt the verification key in step 2 and sends it to the party being authenticated. The party being authenticated receives the second authentication command frame sent by the authenticator and uses its own second-generation password as the decryption key to retrieve the verification key in the command. If it matches its own verification key, authentication fails. If yes, a third-generation password is randomly generated and sent back to the authenticator. The authenticator verifies whether to proceed based on the command sent back by the party being authenticated. If not, authentication fails. If yes, identity verification succeeds, and the authenticator and party being authenticated can subsequently communicate encrypted using the second-generation and third-generation passwords.

[0110] Let's take an example to illustrate. Figure 1BThe electronic device and the smart lock are connected via the Bluetooth protocol, and the relevant Bluetooth operations are initialized to achieve Bluetooth connection. The corresponding verification key is saved, and identity binding is requested: the first password is used as the first encryption key, and the device identification and the first password are encrypted according to the first encryption key to obtain the first ciphertext content; command content verification: the first password is used as the first decryption key to decrypt the first ciphertext content to obtain the device identification and the first password, and the device identification and the first password are verified. When the verification is successful, the second password is generated. Request binding reply: the first password is used as the second encryption key, and the second password is encrypted based on the second encryption key to obtain the second ciphertext content; the first password is used as the second decryption key, and the second ciphertext content is decrypted according to the second decryption key to obtain the second password. Request identity authentication: the first and second passwords are used as the third encryption key, and the first random number is encrypting according to the third encryption key to obtain the third ciphertext content; command content verification: the first and second passwords are used as the third decryption key, and the third ciphertext content is decrypted according to the third decryption key to obtain the first random number, and the first random number is verified. When the verification is successful, the third password is generated. Request identity authentication reply: use the first password and the second password as a fourth encryption key, encrypt the third password based on the fourth encryption key, and obtain a fourth ciphertext content.

[0111] It can be seen that the identity authentication management method described in the embodiment of the present application is applied to an electronic device to obtain the device identification and the first password of the smart lock that is connected to the electronic device through Bluetooth; the first password is used as the first encryption key, the device identification and the first password are encrypted according to the first encryption key to obtain the first ciphertext content, and the first identity authentication command frame is sent to the smart lock. The first identity authentication command frame includes the first ciphertext content. The first identity authentication command frame is used to instruct the smart lock to use the first password as the first decryption key to decrypt the first ciphertext content to obtain the device identification and the first password, and verify the device identification and the first password. When the verification is successful, a second password is generated and the second password is sent to the electronic device; the first identity authentication command frame is used to implement the identity binding function, receive the second password, and can encrypt the password itself and the device identification of the smart lock based on the first password during the identity binding process, and then the smart lock completes the authentication process, which can ensure the security of authentication during the binding process and help improve the authentication security of the smart lock.

[0112] See also Figure 2 , Figure 2 This is a flow chart of another identity authentication management method provided by an embodiment of the present application. As shown in the figure, it is applied to a smart lock. This identity authentication management method may include:

[0113] 201. Receive a first authentication command frame sent by an electronic device, where the first authentication command frame includes the first ciphertext content. The first ciphertext content is obtained by encrypting the device identification of the smart lock and the first password according to the first encryption key using the first password as the first encryption key by an electronic device connected to the smart lock via Bluetooth; the first authentication command frame is used to implement an identity binding function.

[0114] 202. Decrypt the first ciphertext content using the first password as a first decryption key to obtain the device identifier and the first password.

[0115] 203. Verify the device identification and the first password.

[0116] 204. When the verification is successful, generate a second password and send the second password to the electronic device.

[0117] The detailed description of the above steps 201 to 204 can refer to the above Figure 1A The steps of the described identity authentication management method will not be repeated here.

[0118] It can be seen that the identity authentication management method described in the embodiment of the present application is applied to a smart lock, and receives a first identity authentication command frame sent by an electronic device. The first identity authentication command frame includes a first ciphertext content. The first ciphertext content is obtained by an electronic device connected to the smart lock via Bluetooth using a first password as a first encryption key, and encrypting the device identification and the first password of the smart lock according to the first encryption key; the first identity authentication command frame is used to implement an identity binding function, and the first password is used as a first decryption key to decrypt the first ciphertext content to obtain the device identification and the first password, and the device identification and the first password are verified. When the verification is successful, a second password is generated and sent to the electronic device. During the identity binding process, the password itself and the device identification of the smart lock can be encrypted based on the first password, and then the smart lock completes the authentication process, which can ensure the security of authentication during the binding process and help improve the authentication security of the smart lock.

[0119] In accordance with the above embodiment, please refer to Figure 3 , Figure 3 This is a schematic diagram of the structure of an electronic device provided in an embodiment of the present application. As shown in the figure, the electronic device includes a processor, a memory, a communication interface, and one or more programs. The one or more programs are stored in the memory and configured to be executed by the processor. In the embodiment of the present application, the program includes instructions for performing the following steps:

[0120] Obtaining a device identification and a first password of a smart lock connected to the electronic device via Bluetooth; using the first password as a first encryption key, and encrypting the device identification and the first password according to the first encryption key to obtain a first ciphertext content;

[0121] Sending a first authentication command frame to the smart lock, the first authentication command frame including the first ciphertext content, the first authentication command frame being used to instruct the smart lock to use the first password as a first decryption key to decrypt the first ciphertext content to obtain the device identification and the first password, and verifying the device identification and the first password. When the verification is successful, generating a second password, and sending the second password to the electronic device; the first authentication command frame is used to implement an identity binding function;

[0122] The second password is received.

[0123] Optionally, the smart lock uses the first password as a second encryption key, encrypts the second password based on the second encryption key, and obtains second ciphertext content; in terms of receiving the second password, the above program includes instructions for performing the following steps:

[0124] receiving a first reply command sent by the smart lock, where the first reply command includes the second ciphertext content;

[0125] The first password is used as a second decryption key, and the second ciphertext content is decrypted according to the second decryption key to obtain the second password.

[0126] Optionally, the program further includes instructions for executing the following steps:

[0127] Using the first password and the second password as a third encryption key, encrypting the first random number according to the third encryption key to obtain a third ciphertext content;

[0128] Sending a second identity authentication command frame to the smart lock, the second identity authentication command frame including the third ciphertext content, the second identity authentication command frame being used to instruct the smart lock to use the first password and the second password as a third decryption key, decrypt the third ciphertext content according to the third decryption key to obtain the first random number, verify the first random number, and generate a third password when the verification is successful; sending the third password to the electronic device; the second identity authentication command frame is used to implement an identity authentication function;

[0129] The third password is received.

[0130] Optionally, the smart lock uses the first password and the second password as a fourth encryption key, encrypts the third password based on the fourth encryption key, and obtains fourth ciphertext content; the above program also includes instructions for performing the following steps:

[0131] receiving a second reply command sent by the smart lock, where the second reply command includes the fourth ciphertext content;

[0132] The first password and the second password are used as a fourth decryption key, and the fourth ciphertext content is decrypted according to the fourth decryption key to obtain the third password.

[0133] Optionally, the program further includes instructions for executing the following steps:

[0134] Sending an authentication frame to the smart lock, the authentication frame including a verification password; parsing the authentication frame by the smart lock to obtain the verification password, comparing the verification password with a preset administrator password, and allowing the electronic device to establish a Bluetooth communication connection with the smart lock when the comparison is successful;

[0135] Establish a Bluetooth communication connection between the electronic device and the smart lock.

[0136] In accordance with the above embodiment, please refer to Figure 4 , Figure 4 : This is a schematic diagram of the structure of a smart lock provided in an embodiment of the present application. As shown in the figure, the smart lock includes a processor, a memory, a communication interface, and one or more programs. The one or more programs are stored in the memory and are configured to be executed by the processor. In the embodiment of the present application, the program includes instructions for performing the following steps:

[0137] Receiving a first authentication command frame sent by an electronic device, the first authentication command frame including the first ciphertext content, the first ciphertext content being obtained by encrypting the device identifier of the smart lock and the first password according to the first encryption key using the first password as a first encryption key by the electronic device connected to the smart lock via Bluetooth; the first authentication command frame is used to implement an identity binding function;

[0138] decrypting the first ciphertext content using the first password as a first decryption key to obtain the device identifier and the first password;

[0139] Verifying the device identification and the first password;

[0140] When the verification is successful, a second password is generated and sent to the electronic device.

[0141] Figure 5 This is a functional unit block diagram of an identity authentication management device 500 involved in an embodiment of the present application. The identity authentication management device 500 is applied to an electronic device, and the device 500 includes: an acquisition unit 501, a sending unit 502 and a receiving unit 503, wherein:

[0142] The acquiring unit 501 is configured to acquire a device identification and a first password of a smart lock connected to the electronic device via Bluetooth; use the first password as a first encryption key, and encrypt the device identification and the first password according to the first encryption key to obtain a first ciphertext content;

[0143] The sending unit 502 is used to send a first authentication command frame to the smart lock, the first authentication command frame including the first ciphertext content, the first authentication command frame is used to instruct the smart lock to use the first password as a first decryption key to decrypt the first ciphertext content to obtain the device identification and the first password, and verify the device identification and the first password. When the verification is successful, a second password is generated and the second password is sent to the electronic device; the first authentication command frame is used to implement an identity binding function;

[0144] The receiving unit 503 is configured to receive the second password.

[0145] Optionally, the smart lock uses the first password as a second encryption key, encrypts the second password based on the second encryption key, and obtains a second ciphertext content; in terms of receiving the second password, the receiving unit 503 is specifically used to:

[0146] receiving a first reply command sent by the smart lock, where the first reply command includes the second ciphertext content;

[0147] The first password is used as a second decryption key, and the second ciphertext content is decrypted according to the second decryption key to obtain the second password.

[0148] Optionally, the device 500 is further specifically configured to:

[0149] Using the first password and the second password as a third encryption key, encrypting the first random number according to the third encryption key to obtain a third ciphertext content;

[0150] Sending a second identity authentication command frame to the smart lock, the second identity authentication command frame including the third ciphertext content, the second identity authentication command frame being used to instruct the smart lock to use the first password and the second password as a third decryption key, decrypt the third ciphertext content according to the third decryption key to obtain the first random number, verify the first random number, and generate a third password when the verification is successful; sending the third password to the electronic device; the second identity authentication command frame is used to implement an identity authentication function;

[0151] The third password is received.

[0152] Optionally, the smart lock uses the first password and the second password as a fourth encryption key, encrypts the third password based on the fourth encryption key, and obtains fourth ciphertext content; the device 500 is specifically used to:

[0153] receiving a second reply command sent by the smart lock, where the second reply command includes the fourth ciphertext content;

[0154] The first password and the second password are used as a fourth decryption key, and the fourth ciphertext content is decrypted according to the fourth decryption key to obtain the third password.

[0155] Optionally, the device 500 is specifically configured to:

[0156] Sending an authentication frame to the smart lock, the authentication frame including a verification password; parsing the authentication frame by the smart lock to obtain the verification password, comparing the verification password with a preset administrator password, and allowing the electronic device to establish a Bluetooth communication connection with the smart lock when the comparison is successful;

[0157] Establish a Bluetooth communication connection between the electronic device and the smart lock.

[0158] It can be seen that the identity authentication management device described in the embodiment of the present application is applied to an electronic device to obtain the device identification and first password of a smart lock that is connected to the electronic device through Bluetooth; the first password is used as the first encryption key, the device identification and the first password are encrypted according to the first encryption key to obtain the first ciphertext content, and a first identity authentication command frame is sent to the smart lock. The first identity authentication command frame includes the first ciphertext content. The first identity authentication command frame is used to instruct the smart lock to use the first password as the first decryption key to decrypt the first ciphertext content to obtain the device identification and the first password, and verify the device identification and the first password. When the verification is successful, a second password is generated and the second password is sent to the electronic device; the first identity authentication command frame is used to implement the identity binding function, receive the second password, and can encrypt the password itself and the device identification of the smart lock based on the first password during the identity binding process, and then the smart lock completes the authentication process, which can ensure the security of authentication during the binding process and help improve the authentication security of the smart lock.

[0159] It can be understood that the functions of each program module of the identity authentication management device of this embodiment can be specifically implemented according to the method in the above method embodiment. The specific implementation process can refer to the relevant description of the above method embodiment and will not be repeated here.

[0160] Figure 6 This is a functional unit block diagram of another identity authentication management device 600 involved in an embodiment of the present application. The identity authentication management device 600 is applied to an electronic device, and the device 600 includes: a receiving unit 601, a decryption unit 602, a verification unit 603, a generation unit 604 and a sending unit 605, wherein,

[0161] The receiving unit 601 is configured to receive a first authentication command frame sent by an electronic device, the first authentication command frame including the first ciphertext content, the first ciphertext content being obtained by encrypting the device identifier of the smart lock and the first password according to the first encryption key using the first password as a first encryption key by the electronic device connected to the smart lock via Bluetooth; the first authentication command frame is used to implement an identity binding function;

[0162] The decryption unit 602 is configured to decrypt the first ciphertext content using the first password as a first decryption key to obtain the device identification and the first password;

[0163] The verification unit 603 is used to verify the device identification and the first password;

[0164] The generating unit 604 generates a second password when the verification is successful;

[0165] The sending unit 605 is configured to send the second password to the electronic device.

[0166] It can be seen that the identity authentication management device described in the embodiment of the present application is applied to a smart lock, and receives a first identity authentication command frame sent by an electronic device. The first identity authentication command frame includes a first ciphertext content. The first ciphertext content is obtained by an electronic device connected to the smart lock via Bluetooth using a first password as a first encryption key, and encrypting the device identification and the first password of the smart lock according to the first encryption key; the first identity authentication command frame is used to implement an identity binding function, and the first password is used as a first decryption key to decrypt the first ciphertext content to obtain the device identification and the first password, and the device identification and the first password are verified. When the verification is successful, a second password is generated and sent to the electronic device. During the identity binding process, the password itself and the device identification of the smart lock can be encrypted based on the first password, and then the smart lock completes the authentication process, which can ensure the security of authentication during the binding process and help improve the authentication security of the smart lock.

[0167] It can be understood that the functions of each program module of the identity authentication management device of this embodiment can be specifically implemented according to the method in the above method embodiment. The specific implementation process can refer to the relevant description of the above method embodiment and will not be repeated here.

[0168] The present application also provides an identity authentication management system, including: Figure 3 The electronic equipment shown and Figure 4 Smart lock shown.

[0169] An embodiment of the present application also provides a computer storage medium, wherein the computer storage medium stores a computer program for electronic data exchange, and the computer program enables a computer to execute part or all of the steps of any method described in the above method embodiment, and the above computer includes a smart lock.

[0170] The present application also provides a computer program product comprising a non-transitory computer-readable storage medium storing a computer program, wherein the computer program is operable to cause a computer to execute some or all of the steps of any of the methods described in the above method embodiments. The computer program product may be a software installation package, and the computer may include a smart lock.

[0171] It should be noted that for the aforementioned method embodiments, for the sake of simplicity, they are all expressed as a series of action combinations, but those skilled in the art should be aware that this application is not limited by the order of the actions described, because according to this application, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily required by this application.

[0172] In the above embodiments, the description of each embodiment has its own focus. For parts that are not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0173] In the several embodiments provided in this application, it should be understood that the disclosed devices can be implemented in other ways. For example, the device embodiments described above are merely illustrative. For example, the division of the above-mentioned units is only a logical function division. In actual implementation, there may be other division methods, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, and the indirect coupling or communication connection of devices or units can be electrical or other forms.

[0174] The units described above as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple network units. Some or all of these units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0175] In addition, the functional units in the various embodiments of the present application may be integrated into a single processing unit, or each unit may exist physically separately, or two or more units may be integrated into a single unit. The aforementioned integrated units may be implemented in the form of hardware or software functional units.

[0176] If the above-mentioned integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable memory. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, which is stored in a memory and includes a number of instructions for enabling a computer device (which can be a personal computer, server or network device, etc.) to execute all or part of the steps of the above-mentioned methods of each embodiment of the present application. The aforementioned memory includes: various media that can store program codes, such as a USB flash drive, a read-only memory (ROM), a random access memory (RAM), a mobile hard disk, a magnetic disk or an optical disk.

[0177] Those skilled in the art will appreciate that all or part of the steps in the various methods of the above embodiments can be completed by instructing related hardware through a program. The program can be stored in a computer-readable memory, and the memory can include: a flash drive, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, etc.

[0178] The above is a detailed introduction to the embodiments of the present application. Specific examples are used herein to illustrate the principles and implementation methods of the present application. The description of the above embodiments is only used to help understand the method and core idea of ​​the present application. At the same time, for those skilled in the art, according to the idea of ​​the present application, there may be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as a limitation on the present application.

Claims

1. An identity authentication management method, characterized in that: Applied to electronic equipment, the method includes: Obtaining a device identification and a first password of a smart lock connected to the electronic device via Bluetooth; using the first password as a first encryption key, and encrypting the device identification and the first password according to the first encryption key to obtain a first ciphertext content; Sending a first authentication command frame to the smart lock, the first authentication command frame including the first ciphertext content, the first authentication command frame being used to instruct the smart lock to use the first password as a first decryption key to decrypt the first ciphertext content to obtain the device identification and the first password, and verifying the device identification and the first password. When the verification is successful, generating a second password, and sending the second password to the electronic device; the first authentication command frame is used to implement an identity binding function; receiving the second password; The smart lock uses the first password as a second encryption key, encrypts the second password based on the second encryption key, and obtains a second ciphertext content; and receiving the second password includes: receiving a first reply command sent by the smart lock, where the first reply command includes the second ciphertext content; Using the first password as a second decryption key, decrypting the second ciphertext content according to the second decryption key to obtain the second password; The method further comprises: Using the first password and the second password as a third encryption key, encrypting the first random number according to the third encryption key to obtain a third ciphertext content; Sending a second identity authentication command frame to the smart lock, the second identity authentication command frame including the third ciphertext content, the second identity authentication command frame being used to instruct the smart lock to use the first password and the second password as a third decryption key, decrypt the third ciphertext content according to the third decryption key to obtain the first random number, verify the first random number, and generate a third password when the verification is successful; sending the third password to the electronic device; the second identity authentication command frame is used to implement an identity authentication function; The third password is received.

2. The identity authentication management method according to claim 1, characterized in that: The smart lock uses the first password and the second password as a fourth encryption key, and encrypts the third password based on the fourth encryption key to obtain a fourth ciphertext content; The method further comprises: receiving a second reply command sent by the smart lock, where the second reply command includes the fourth ciphertext content; The first password and the second password are used as a fourth decryption key, and the fourth ciphertext content is decrypted according to the fourth decryption key to obtain the third password.

3. The identity authentication management method according to claim 1 or 2, characterized in that: The method further comprises: Sending an authentication frame to the smart lock, the authentication frame including a verification password; parsing the authentication frame by the smart lock to obtain the verification password, comparing the verification password with a preset administrator password, and allowing the electronic device to establish a Bluetooth communication connection with the smart lock when the comparison is successful; Establish a Bluetooth communication connection between the electronic device and the smart lock.

4. An identity authentication management method, characterized in that: Applied to a smart lock, the method includes: Receiving a first authentication command frame sent by an electronic device, the first authentication command frame including first ciphertext content, the first ciphertext content being obtained by encrypting the device identifier of the smart lock and the first password according to the first encryption key using a first password as a first encryption key by an electronic device connected to the smart lock via Bluetooth; the first authentication command frame is used to implement an identity binding function; decrypting the first ciphertext content using the first password as a first decryption key to obtain the device identifier and the first password; Verifying the device identification and the first password; When the verification is successful, generating a second password, and sending the second password to the electronic device; The smart lock uses the first password as a second encryption key, and encrypts the second password based on the second encryption key to obtain a second ciphertext content; The electronic device receiving the second password includes: receiving a first reply command sent by the smart lock, where the first reply command includes the second ciphertext content; Using the first password as a second decryption key, decrypting the second ciphertext content according to the second decryption key to obtain the second password; The electronic device uses the first password and the second password as the third encryption key, encrypts the first random number according to the third encryption key, and obtains the third ciphertext content; sends a second identity authentication command frame to the smart lock, the second identity authentication command frame includes the third ciphertext content, the second identity authentication command frame is used to instruct the smart lock to use the first password and the second password as the third decryption key, decrypt the third ciphertext content according to the third decryption key, obtain the first random number, verify the first random number, and generate a third password when the verification is successful; send the third password to the electronic device; the second identity authentication command frame is used to implement the identity authentication function; receive the third password.

5. An identity authentication management device, characterized in that: Applied to electronic equipment, the device includes: an acquisition unit, a sending unit and a receiving unit, wherein: The acquiring unit is configured to acquire a device identification and a first password of a smart lock connected to the electronic device via Bluetooth; use the first password as a first encryption key, and encrypt the device identification and the first password according to the first encryption key to obtain a first ciphertext content; The sending unit is used to send a first identity authentication command frame to the smart lock, the first identity authentication command frame including the first ciphertext content, the first identity authentication command frame is used to instruct the smart lock to use the first password as a first decryption key to decrypt the first ciphertext content to obtain the device identification and the first password, and verify the device identification and the first password. When the verification is successful, a second password is generated and the second password is sent to the electronic device; the first identity authentication command frame is used to implement an identity binding function; The receiving unit is configured to receive the second password; The smart lock uses the first password as a second encryption key, encrypts the second password based on the second encryption key, and obtains a second ciphertext content; and receiving the second password includes: receiving a first reply command sent by the smart lock, where the first reply command includes the second ciphertext content; Using the first password as a second decryption key, decrypting the second ciphertext content according to the second decryption key to obtain the second password; The device is further specifically used for: Using the first password and the second password as a third encryption key, encrypting the first random number according to the third encryption key to obtain a third ciphertext content; Sending a second identity authentication command frame to the smart lock, the second identity authentication command frame including the third ciphertext content, the second identity authentication command frame being used to instruct the smart lock to use the first password and the second password as a third decryption key, decrypt the third ciphertext content according to the third decryption key to obtain the first random number, verify the first random number, and generate a third password when the verification is successful; sending the third password to the electronic device; the second identity authentication command frame is used to implement an identity authentication function; The third password is received.

6. An identity authentication management device, characterized in that: Applied to smart locks, the device includes: a receiving unit, a decryption unit, a verification unit, a generation unit and a sending unit, wherein, The receiving unit is configured to receive a first authentication command frame sent by an electronic device, the first authentication command frame including a first ciphertext content, the first ciphertext content being obtained by encrypting the device identifier of the smart lock and the first password according to the first encryption key using a first password as a first encryption key by an electronic device connected to the smart lock via Bluetooth; the first authentication command frame is used to implement an identity binding function; The decryption unit is configured to decrypt the first ciphertext content using the first password as a first decryption key to obtain the device identification and the first password; The verification unit is configured to verify the device identification and the first password; The generating unit generates a second password when the verification is successful; The sending unit is configured to send the second password to the electronic device; The smart lock uses the first password as a second encryption key, and encrypts the second password based on the second encryption key to obtain a second ciphertext content; The electronic device receiving the second password includes: receiving a first reply command sent by the smart lock, where the first reply command includes the second ciphertext content; Using the first password as a second decryption key, decrypting the second ciphertext content according to the second decryption key to obtain the second password; The electronic device uses the first password and the second password as the third encryption key, encrypts the first random number according to the third encryption key, and obtains the third ciphertext content; sends a second identity authentication command frame to the smart lock, the second identity authentication command frame includes the third ciphertext content, the second identity authentication command frame is used to instruct the smart lock to use the first password and the second password as the third decryption key, decrypt the third ciphertext content according to the third decryption key, obtain the first random number, verify the first random number, and generate a third password when the verification is successful; send the third password to the electronic device; the second identity authentication command frame is used to implement the identity authentication function; receive the third password.

7. An electronic device, characterized in that: The method comprises a processor and a memory, wherein the memory is used to store one or more programs and is configured to be executed by the processor, wherein the programs include instructions for executing the steps of the method according to any one of claims 1 to 3.

8. A smart lock, characterized in that: The method comprises a processor and a memory, wherein the memory is used to store one or more programs and is configured to be executed by the processor, wherein the programs include instructions for executing the steps in the method according to claim 4.

Images