Device authentication networking method, communication device and readable storage medium

Abstract

The application relates to the technical field of communication, in particular to a device authentication networking method, a communication device and a readable storage medium, the method comprising the following steps: when a second communication device to be authenticated for networking is discovered based on a distributed soft bus, obtaining first authentication information of a first communication device; performing device group authentication with the second communication device according to the first authentication information, and obtaining a device group authentication result; determining whether the first communication device and the second communication device belong to the same device group according to the device group authentication result; and if the first communication device and the second communication device belong to the same device group, initiating networking to the second communication device according to the first authentication information. According to the above method, when it is determined that the first communication device and the second communication device belong to the same device group according to the first authentication information of the first communication device, the networking is initiated according to the first authentication information, self-discovery, self-authentication and self-networking can be realized, and the applicability and convenience of device authentication networking based on the distributed soft bus are improved.

Description

Device authentication networking methods, communication equipment and readable storage media Technical Field

[0001] This application relates to the field of communications, and more particularly to a device authentication networking method, a communication device, and a computer-readable storage medium. Background Technology

[0002] Distributed soft bus technology enables unified distributed communication management capabilities among near-field devices, providing link-independent device discovery, networking, and transmission capabilities. Currently, distributed soft bus networking only supports PIN (Personal Identification Number) authentication, requiring an authorization prompt interface, a PIN code display interface, and a PIN code input interface. Authentication scenarios are limited to devices with screens on both sides, and the entire process is cumbersome. Authentication and networking cannot be performed on screenless devices, thus limiting its applicability.

[0003] Therefore, improving the applicability and convenience of device authentication networking based on distributed soft bus has become an urgent problem to be solved. Summary of the Invention

[0004] This application provides a device authentication networking method, communication equipment, and computer-readable storage medium, which can solve the problem of low applicability and convenience of device authentication networking based on distributed soft bus in related technologies.

[0005] In a first aspect, this application provides a device authentication and networking method, applied to a first communication device, the method comprising:

[0006] When a second communication device to be authenticated and networked is discovered based on a distributed soft bus, the first authentication information of the first communication device is obtained; device group authentication is performed with the second communication device based on the first authentication information to obtain the device group authentication result; based on the device group authentication result, it is determined whether the first communication device and the second communication device belong to the same device group; if the first communication device and the second communication device belong to the same device group, networking is initiated with the second communication device based on the first authentication information.

[0007] The above method, by determining that the first communication device and the second communication device belong to the same device group based on the first authentication information of the first communication device, initiates networking based on the first authentication information, which can realize self-discovery, self-authentication and self-networking. The whole process does not require providing an authorization prompt interface, PIN code display interface, PIN code input interface, etc. for PIN code authentication, nor does it require manual operation by the user. It can also realize authentication networking for screenless devices. Therefore, it improves the applicability and convenience of device authentication networking based on distributed soft bus.

[0008] Secondly, this application also provides a communication device, which includes a memory and a processor;

[0009] The memory is used to store computer programs;

[0010] The processor is used to execute the computer program and, when executing the computer program, implement the device authentication and networking method corresponding to the communication device as described above.

[0011] Thirdly, this application also provides a computer-readable storage medium storing a computer program that, when executed by a processor, enables the processor to implement the device authentication and networking method described above. Attached Figure Description

[0012] To more clearly illustrate the technical solutions of the embodiments of this application, the drawings used in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0013] Figure 1 is a schematic diagram of a communication system provided in an embodiment of this application;

[0014] Figure 2 is a schematic block diagram of the structure of a communication device provided in an embodiment of this application;

[0015] Figure 3 is a schematic flowchart of a device authentication networking method provided in an embodiment of this application;

[0016] Figure 4 is a schematic flowchart of a sub-step of device group authentication provided in an embodiment of this application;

[0017] Figure 5 is a schematic flowchart of another sub-step of device group authentication provided in an embodiment of this application;

[0018] Figure 6 is a schematic flowchart of a network formation sub-step provided in an embodiment of this application;

[0019] Figure 7 is a schematic diagram of an authentication network provided in an embodiment of this application;

[0020] Figure 8 is a schematic diagram of another authentication network provided in an embodiment of this application;

[0021] Figure 9 is a schematic diagram of another authentication network provided in an embodiment of this application. Detailed Implementation

[0022] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0023] The flowchart shown in the attached diagram is for illustrative purposes only and does not necessarily include all content and operations / steps, nor does it necessarily have to be performed in the order described. For example, some operations / steps can be broken down, combined, or partially merged, so the actual execution order may change depending on the actual situation.

[0024] It should be understood that the terminology used in this specification is for the purpose of describing particular embodiments only and is not intended to limit the scope of the application. As used in this specification and the appended claims, the singular forms “a,” “an,” and “the” are intended to include the plural forms unless the context clearly indicates otherwise.

[0025] It should also be understood that the term “and / or” as used in this application specification and the appended claims means any combination of one or more of the associated listed items and all possible combinations, and includes such combinations.

[0026] It should be noted that distributed soft bus technology enables unified distributed communication management capabilities among near-field devices, providing link-independent device discovery, networking, and transmission capabilities. Currently, distributed soft bus networking only supports PIN code authentication, requiring the provision of an authorization prompt interface, a PIN code display interface, and a PIN code input interface. Authentication networking is not possible for screenless devices, thus limiting its applicability.

[0027] Embodiments of this application provide a device authentication and networking method, a communication device, and a computer-readable storage medium. This device authentication and networking method is applied to a communication device. By determining that a first communication device and a second communication device belong to the same device group based on the first authentication information of the first communication device, networking is initiated based on the first authentication information. This enables self-discovery, self-authentication, and self-networking. The entire process does not require an authorization prompt interface, PIN code display interface, or PIN code input interface for PIN code authentication, nor does it require manual user operation. Authentication and networking can also be achieved for screenless devices. Therefore, it improves the applicability and convenience of device authentication and networking based on a distributed soft bus.

[0028] For example, the communication device can be a terminal, which may include, but is not limited to, electronic devices such as smartphones, tablets, laptops, personal digital assistants, and wearable devices.

[0029] Please refer to Figure 1, which is a schematic diagram of a communication system 100 provided in an embodiment of this application. As shown in Figure 1, the communication system 100 includes a first communication device 110, a cloud server 120, and at least one second communication device 130. The first communication device 110 and the second communication device 130 are equipped with the Open Harmony system, and the first communication device 110 can network with the second communication device 130 based on a distributed soft bus.

[0030] For example, the first communication device 110 can form a network with the second communication device 130 through Bluetooth connection, WLAN connection or other means based on a distributed soft bus to establish a distributed soft bus communication connection.

[0031] It should be noted that during the authentication and networking process, the first communication device 110 can act as the central device, and the second communication device 130 can act as a peripheral device. In this embodiment, the first communication device 110 can act as the execution entity, responsible for authenticating the peripheral devices requesting networking. During the device discovery phase, when the first communication device 110 receives a broadcast message sent by a communication device through the CoAP (The Constrained Application Protocol) protocol, it identifies the corresponding communication device as the communication device to be authenticated and networked.

[0032] The cloud server 120 can establish communication connections with the first communication device 110 and the second communication device 130 to send authentication information to the first communication device 110 and the second communication device 130. For example, the cloud server 120 can send the first authentication information corresponding to the first communication device 110 to the first communication device 110.

[0033] For example, the first authentication information may include a first group identifier (Group) and a shared secret of the first communication device 110. The first group identifier (Group) is used to identify the uniqueness of the first communication device 110. The first group identifier can be a Universally Unique Identifier (UUID), a MAC (Media Access Control) address, etc. The shared secret can be a PIN code used for authentication and networking of communication devices within the same device group. Furthermore, in addition to the first group identifier of the first communication device, the first authentication information may also include group identifiers of other communication devices belonging to the same device group as the first communication device.

[0034] In some embodiments, when a second communication device to be authenticated and networked is discovered based on a distributed soft bus, the first authentication information of the first communication device is obtained; the first communication device 110 performs device group authentication with the second communication device 130 based on the first authentication information and obtains the device group authentication result; the first communication device 110 determines whether the first communication device 110 and the second communication device 130 belong to the same device group based on the device group authentication result; if the first communication device 110 and the second communication device 130 belong to the same device group, then a network is initiated to the second communication device 130 based on the first authentication information.

[0035] In some embodiments, the first communication device 110 and the second communication device 130 are screenless devices. It should be noted that a screenless device refers to a device without a display screen or a device that does not require a display screen during authentication and networking.

[0036] Please refer to Figure 2, which is a schematic block diagram of a communication device 1000 provided in an embodiment of this application. In Figure 2, the communication device 1000 includes a processor 1001 and a memory 1002, wherein the processor 1001 and the memory 1002 are connected by a bus, which may be an I2C (Inter-integrated Circuit) bus, a distributed soft bus, or other buses.

[0037] The memory 1002 may include a storage medium and internal memory. The storage medium may store an operating system and a computer program. The computer program includes program instructions that, when executed, cause the processor to perform the device authentication and networking method described in any embodiment.

[0038] The processor 1001 provides computing and control capabilities to support the operation of the entire communication device 1000.

[0039] The processor 1001 can be a Central Processing Unit (CPU), but it can also be other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor can be a microprocessor, or it can be any conventional processor.

[0040] The processor 1001 is used to run a computer program stored in the memory 1002, and performs the following steps when executing the computer program:

[0041] When a second communication device to be authenticated and networked is discovered based on a distributed soft bus, the first authentication information of the first communication device is obtained; device group authentication is performed with the second communication device based on the first authentication information to obtain the device group authentication result; based on the device group authentication result, it is determined whether the first communication device and the second communication device belong to the same device group; if the first communication device and the second communication device belong to the same device group, networking is initiated with the second communication device based on the first authentication information.

[0042] In some embodiments, when the processor 1001 acquires the first authentication information of the first communication device, it is configured to:

[0043] Send an authentication information request to the cloud server; receive the first authentication information returned by the cloud server based on the authentication information request.

[0044] In some embodiments, the first authentication information includes a first set of identifiers of the first communication device; when the processor 1001 performs device group authentication with the second communication device based on the first authentication information and obtains the device group authentication result, it is configured to:

[0045] Send a device group authentication request to the second communication device. The device group authentication request includes a first group identifier. The device group authentication request is used to instruct the second communication device to perform device group authentication based on the first group identifier and obtain the device group authentication result; receive the device group authentication result returned by the second communication device.

[0046] In some embodiments, when the processor 1001 performs device group authentication with the second communication device based on the first authentication information and obtains the device group authentication result, it is configured to:

[0047] Obtain the second authentication information of the second communication device; perform device group authentication based on the first authentication information and the second authentication information, and obtain the device group authentication result.

[0048] In some embodiments, the first authentication information includes group identifiers corresponding to multiple communication devices within the same device group, and the second authentication information includes a second group identifier of the second communication device; when the processor 1001 performs device group authentication based on the first authentication information and the second authentication information to obtain the device group authentication result, it is configured to:

[0049] The second group identifier is compared with the group identifier in the first authentication information; if the second group identifier is in the first authentication information, the device group authentication result is determined to be that the first communication device and the second communication device belong to the same device group; if the second group identifier is not in the first authentication information, the device group authentication result is determined to be that the first communication device and the second communication device do not belong to the same device group.

[0050] In some embodiments, before performing device group authentication with the second communication device based on the first authentication information and obtaining the device group authentication result, the processor 1001 is further configured to perform:

[0051] A session creation request is sent to the second communication device. The session creation request is used to instruct the second communication device to create a communication session with the first communication device.

[0052] In some embodiments, the first authentication information includes a shared key; when the processor 1001 initiates networking with the second communication device based on the first authentication information, it is used to:

[0053] A network formation request is sent to the second communication device. The network formation request includes a shared key and is used to instruct the second communication device to perform authentication based on the shared key and return the authentication result. When the authentication result returned by the second communication device is successful, the network formation is confirmed to be successful.

[0054] The following detailed description of some embodiments of this application is provided in conjunction with the accompanying drawings. Unless otherwise specified, the following embodiments and features can be combined with each other. Please refer to Figure 3, which is a schematic flowchart of a device authentication and networking method provided by an embodiment of this application. This device authentication and networking method can be applied to communication devices, enabling self-discovery, self-authentication, and self-networking. The entire process does not require a PIN code authentication authorization prompt interface, PIN code display interface, PIN code input interface, etc., nor does it require manual user operation. It can also achieve authentication and networking for screenless devices, thus improving the applicability and convenience of device authentication and networking based on a distributed soft bus. For ease of description, the communication device to which this method is applied is referred to as the first communication device, and the communication device to be authenticated and networked is referred to as the second communication device.

[0055] As shown in Figure 3, the device authentication and networking method includes steps S101 to S104.

[0056] Step S101: When a second communication device to be authenticated in a network is discovered based on a distributed soft bus, the first authentication information of the first communication device is obtained.

[0057] In some embodiments, when a second communication device to be authenticated in a network is discovered based on a distributed soft bus, the first authentication information of the first communication device can be obtained.

[0058] It should be noted that when the first communication device and the second communication device are on the same local area network, the second communication device can send broadcast messages via the CoAP (Constrained Application Protocol). When the first communication device discovers the second communication device to be authenticated in the network based on the distributed soft bus, that is, when it receives the broadcast message sent by the second communication device, it obtains the first authentication information of the first communication device.

[0059] For example, the first authentication information may be authentication information pre-issued by the cloud server to the first communication device, which can read the first authentication information from its storage. Alternatively, the first communication device may request the cloud server to issue the first authentication information upon discovering a second communication device to be authenticated in the network.

[0060] For example, the first authentication information may include a first group identifier of the first communication device and a shared secret.

[0061] In this embodiment of the application, in addition to the cloud server being able to issue authentication information, authentication information can also be issued through the operation and maintenance equipment. For example, when the first communication device discovers a second communication device to be authenticated in the network, it can request the operation and maintenance equipment to issue the first authentication information.

[0062] In the above embodiments, by obtaining the first authentication information of the first communication device, the group identifier and shared key of the first communication device can be obtained. Subsequently, device group authentication can be performed based on the group identifier and networking can be performed based on the shared key.

[0063] In some embodiments, obtaining the first authentication information of the first communication device may include: sending an authentication information request to a cloud server; and receiving the first authentication information returned by the cloud server based on the authentication information request.

[0064] For example, the first communication device can generate an authentication information request and send it to the cloud server, so that the cloud server can issue authentication information corresponding to the first communication device based on the authentication information request. When the first communication device receives the authentication information sent by the cloud server, it determines the received authentication information as the first authentication information.

[0065] In the above embodiments, by sending an authentication information request to the cloud server, the first authentication information corresponding to the first communication device can be obtained. Subsequently, during the authentication and networking process, the networking can be completed based on the first authentication information. There is no need to provide an authorization prompt interface, PIN code display interface, PIN code input interface, etc. for PIN code authentication, nor is it necessary for the user to operate manually. Authentication and networking can also be achieved for screenless devices.

[0066] Step S102: Perform device group authentication with the second communication device based on the first authentication information to obtain the device group authentication result.

[0067] After obtaining the first authentication information of the first communication device, in order to confirm whether the first communication device and the second communication device belong to the same device group, it is necessary to perform device group authentication with the second communication device based on the first authentication information to obtain the device group authentication result.

[0068] For example, during device group authentication, the first set of identifiers of the first communication device can be sent to the second communication device so that the second communication device can confirm whether the first set of identifiers of the first communication device exists in the authentication information of the second communication device. Alternatively, the second set of identifiers of the second communication device can be obtained, and the first communication device can confirm whether the second set of identifiers of the second communication device exists in the first authentication information of the first communication device.

[0069] For example, the device group authentication result may include 1 or 0. Here, 0 indicates that the first communication device and the second communication device belong to the same device group, and 0 indicates that the first communication device and the second communication device do not belong to the same device group. Of course, other flags or fields can also be used to indicate whether the first communication device and the second communication device belong to the same device group, and this is not limited here.

[0070] In the above embodiments, by performing device group authentication with the second communication device based on the first authentication information, it can be determined whether the first communication device and the second communication device belong to the same device group.

[0071] In some embodiments, before performing device group authentication with the second communication device based on the first authentication information and obtaining the device group authentication result, the device authentication networking method provided in this application embodiment may further include: sending a session creation request to the second communication device, wherein the session creation request is used to instruct the second communication device to create a communication session with the first communication device.

[0072] It should be noted that, in this embodiment, the first communication device can establish a communication session with the second communication device based on the distributed soft bus of the Open Harmony system. The communication session is used for subsequent device group authentication and networking. For example, during device group authentication, the first communication device can send a device group authentication request to the second communication device through the communication session. As another example, during authentication networking, the first communication device can initiate networking with the second communication device through the communication session.

[0073] For example, the first communication device can send a session creation request to the second communication device. The session creation request is used to instruct the second communication device to create a communication session (auth session) with the first communication device. The specific process of creating the communication session (auth session) can be found in related technologies and will not be elaborated here.

[0074] In the above embodiments, a communication session can be created by sending a session creation request to the second communication device. Subsequently, device group authentication and network authorization can be performed through the communication session.

[0075] Step S103: Based on the device group authentication results, determine whether the first communication device and the second communication device belong to the same device group.

[0076] After obtaining the device group authentication result, the first communication device can determine whether the first communication device and the second communication device belong to the same device group based on the device group authentication result.

[0077] For example, if the device group authentication result is 0, it can be determined that the first communication device and the second communication device belong to the same device group. If the device group authentication result is 1, it can be determined that the first communication device and the second communication device do not belong to the same device group.

[0078] Step S104: If the first communication device and the second communication device belong to the same device group, then initiate networking with the second communication device based on the first authentication information.

[0079] In some embodiments, if the first communication device and the second communication device belong to the same device group, a network formation is initiated to the second communication device based on the first authentication information.

[0080] In other embodiments, if the first communication device and the second communication device do not belong to the same device group, then no network formation is initiated for the second communication device.

[0081] For example, after confirming that the first communication device and the second communication device belong to the same device group, the first communication device can initiate a network connection with the second communication device based on the shared key in the first authentication information. The specific process of network connection can be found in relevant technologies and will not be elaborated here.

[0082] The above embodiments, by initiating networking with the second communication device based on the first authentication information when it is determined that the first communication device and the second communication device belong to the same device group, can realize self-organizing network without manual operation, thus improving the applicability and convenience of device authentication networking based on distributed soft bus.

[0083] Please refer to Figure 4, which is a schematic flowchart of a sub-step of device group authentication provided in an embodiment of this application. Step S102, which performs device group authentication with the second communication device based on the first authentication information, may include the following steps S201 and S202.

[0084] Step S201: Send a device group authentication request to the second communication device. The device group authentication request includes a first group identifier. The device group authentication request is used to instruct the second communication device to perform device group authentication based on the first group identifier and obtain the device group authentication result.

[0085] It should be noted that, in this embodiment of the application, the first communication device can send its first set of identifiers to the second communication device, and the second communication device can perform device group authentication based on the first set of identifiers.

[0086] For example, the first communication device may send a device group authentication request to the second communication device. The device group authentication request includes a first set of identifiers, and is used to instruct the second communication device to perform device group authentication based on the first set of identifiers to obtain a device group authentication result.

[0087] After receiving a device group authentication request, the second communication device can compare the first group identifier in the device group authentication request with the group identifier in the second authentication information to confirm whether the first group identifier is in the second authentication information. For example, if the first group identifier is in the second authentication information, the second communication device can mark the device group authentication result as 0; if the first group identifier is not in the second authentication information, the second communication device can mark the device group authentication result as 1.

[0088] The second authentication information is pre-delivered to the second communication device by the cloud server. This second authentication information may include the group identifier of the second communication device and the group identifiers of other communication devices belonging to the same device group. It may also include the shared key used by the communication devices within the same device group for authentication and networking.

[0089] Step S202: Receive the device group authentication result returned by the second communication device.

[0090] For example, the first communication device can receive the device group authentication result returned by the second communication device, and then determine whether the first communication device and the second communication device belong to the same device group based on the device group authentication result.

[0091] In the above embodiments, by sending a device group authentication request to the second communication device, the second communication device can perform device group authentication based on the first group identifier and obtain the device group authentication result.

[0092] Please refer to Figure 5, which is a schematic flowchart of another sub-step of device group authentication provided in the embodiment of this application. In step S102, device group authentication is performed with the second communication device based on the first authentication information, which may include the following steps S301 and S302.

[0093] Step S301: Obtain the second authentication information of the second communication device.

[0094] For example, the first communication device can send an authentication information request to the second communication device and receive second authentication information returned by the second communication device based on the authentication information request. The second authentication information may include a second set of identifiers of the second communication device. Alternatively, after sending a broadcast message, the second communication device may proactively send its second set of identifiers to the first communication device.

[0095] Step S302: Perform device group authentication based on the first authentication information and the second authentication information to obtain the device group authentication result.

[0096] To confirm whether the first communication device and the second communication device belong to the same device group, device group authentication needs to be performed based on the first authentication information and the second authentication information.

[0097] The first authentication information may include group identifiers corresponding to multiple communication devices within the same device group, and the second authentication information includes the second group identifier of the second communication device.

[0098] In some embodiments, performing device group authentication based on the first authentication information and the second authentication information to obtain the device group authentication result may include: comparing the second group identifier with the group identifier in the first authentication information; if the second group identifier is in the first authentication information, then determining that the device group authentication result is that the first communication device and the second communication device belong to the same device group; if the second group identifier is not in the first authentication information, then determining that the device group authentication result is that the first communication device and the second communication device do not belong to the same device group.

[0099] For example, during device group authentication, the second group identifier can be compared with the group identifier in the first authentication information to confirm whether the second group identifier is in the first authentication information. For instance, if the second group identifier is in the first authentication information, the first communication device can mark the device group authentication result as 0; if the second group identifier is not in the first authentication information, the first communication device can mark the device group authentication result as 1.

[0100] In the above embodiments, by obtaining the second authentication information of the second communication device, the first communication device can perform device group authentication based on the first authentication information and the second group of identifiers in the second authentication information, and obtain the device group authentication result.

[0101] Please refer to Figure 6, which is a schematic flowchart of a sub-step of networking provided in an embodiment of this application. In step S104, networking is initiated to the second communication device based on the first authentication information, which may include the following steps S401 and S402.

[0102] Step S401: Send a network formation request to the second communication device. The network formation request includes a shared key. The network formation request is used to instruct the second communication device to perform authentication based on the shared key and return the authentication result.

[0103] For example, after confirming that the first communication device and the second communication device belong to the same device group, in order to authenticate and network the second communication device, the first communication device can send a network formation request to the second communication device. The network formation request includes a shared key, which instructs the second communication device to perform authentication based on the shared key and return the authentication result.

[0104] It should be noted that when the second communication device receives the shared key, it can send the shared key to the authentication server. The authentication server then performs authentication based on the shared key and returns the authentication result to the second communication device. The second communication device then returns the authentication result to the first communication device. The specific authentication process can be found in relevant technical documents and will not be elaborated upon here.

[0105] Step S402: When the authentication result returned by the second communication device is passed, the network formation is confirmed to be successful.

[0106] For example, after receiving the authentication result from the second communication device, if the authentication result is successful, the network is confirmed to be successfully established. At this time, the first communication device can add the second communication device to the network and close the call session.

[0107] In the above embodiments, by sending a network request to the second communication device, the second communication device can perform authentication based on the shared key in the network request and return the authentication result, thus realizing self-organizing network. The whole process does not require providing an authorization prompt interface, PIN code display interface, PIN code input interface, etc., nor does it require manual operation by the user. Authentication and networking can also be achieved for screenless devices. Therefore, the applicability and convenience of device authentication and networking based on distributed soft bus are improved.

[0108] Please refer to Figure 7, which is a schematic diagram of an authentication network provided in an embodiment of this application. As shown in Figure 7, in a one-to-one authentication network scenario, when a peripheral device to be authenticated is discovered based on a distributed soft bus, the central device obtains the first authentication information of the peripheral device and performs device group authentication with the peripheral device based on the first authentication information to obtain the device group authentication result. Then, based on the device group authentication result, it is determined whether the central device and the peripheral device belong to the same device group. If the central device and the peripheral device belong to the same device group, the central device initiates network formation with the peripheral device based on the first authentication information.

[0109] Please refer to Figure 8, which is a schematic diagram of another authentication network provided in an embodiment of this application. As shown in Figure 8, in a one-to-many authentication network scenario, such as in a star network, the central device is responsible for authenticating connections to peripheral devices. Peripheral devices do not need to connect to other peripheral devices, and a peripheral device can only be networked by one central device at a time. The specific process of authentication networking can be found in the detailed description of the above embodiments, and will not be repeated here.

[0110] Please refer to Figure 9, which is a schematic diagram of another authentication network provided in this application embodiment. As shown in Figure 9, devices within a device group form a star network after authentication networking; devices from two device groups can form a tree network or a fully connected network after authentication networking. For example, a peripheral device in device group 1 can act as a central device in device group 2, performing authentication networking with other peripheral devices in device group 2. The specific process of authentication networking can be found in the detailed description of the above embodiments, and will not be repeated here.

[0111] This application also provides a computer-readable storage medium storing a computer program, which includes program instructions. A processor executes these instructions to implement any of the device authentication and networking methods provided in this application. For example, when the computer program is loaded by a processor, it can perform the following steps:

[0112] When a second communication device to be authenticated and networked is discovered based on a distributed soft bus, the first authentication information of the first communication device is obtained; device group authentication is performed with the second communication device based on the first authentication information to obtain the device group authentication result; based on the device group authentication result, it is determined whether the first communication device and the second communication device belong to the same device group; if the first communication device and the second communication device belong to the same device group, networking is initiated with the second communication device based on the first authentication information.

[0113] For details on the implementation of each of the above operations, please refer to the previous examples, which will not be repeated here.

[0114] The computer-readable storage medium can be an internal storage unit of the communication device described in the foregoing embodiments, such as a hard disk or memory of the communication device. Alternatively, the computer-readable storage medium can be an external storage device of the communication device, such as a plug-in hard disk, smart media card (SMC), secure digital card (SD), flash card, etc., provided on the communication device.

[0115] The above are merely specific embodiments of this application, but the scope of protection of this application is not limited thereto. Any person skilled in the art can easily conceive of various equivalent modifications or substitutions within the technical scope disclosed in this application, and these modifications or substitutions should all be covered within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

Claims

1. A device authentication and networking method, characterized in that, The method, applied to a first communication device, includes: when a second communication device to be authenticated and networked is discovered based on a distributed soft bus, obtaining first authentication information of the first communication device; performing device group authentication with the second communication device based on the first authentication information to obtain a device group authentication result; determining whether the first communication device and the second communication device belong to the same device group based on the device group authentication result; if the first communication device and the second communication device belong to the same device group, initiating network formation with the second communication device based on the first authentication information; the step of obtaining the first authentication information of the first communication device includes: sending an authentication information request to a cloud server; and receiving the first authentication information returned by the cloud server based on the authentication information request.

2. The device authentication and networking method according to claim 1, characterized in that, The first authentication information includes a first set of identifiers of the first communication device; The step of performing device group authentication with the second communication device based on the first authentication information and obtaining the device group authentication result includes: sending a device group authentication request to the second communication device, wherein the device group authentication request includes the first group identifier, and the device group authentication request is used to instruct the second communication device to perform device group authentication based on the first group identifier and obtain the device group authentication result. Receive the device group authentication result returned by the second communication device.

3. The device authentication and networking method according to claim 1, characterized in that, The step of performing device group authentication with the second communication device based on the first authentication information to obtain the device group authentication result includes: obtaining the second authentication information of the second communication device; and performing device group authentication based on the first authentication information and the second authentication information to obtain the device group authentication result.

4. The device authentication and networking method according to claim 3, characterized in that, The first authentication information includes group identifiers corresponding to multiple communication devices within the same device group, and the second authentication information includes the second group identifier of the second communication device; The step of performing device group authentication based on the first authentication information and the second authentication information to obtain the device group authentication result includes: comparing the second group identifier with the group identifier in the first authentication information; if the second group identifier is in the first authentication information, then determining that the device group authentication result is that the first communication device and the second communication device belong to the same device group; if the second group identifier is not in the first authentication information, then determining that the device group authentication result is that the first communication device and the second communication device do not belong to the same device group.

5. The device authentication and networking method according to claim 1, characterized in that, Before performing device group authentication with the second communication device based on the first authentication information and obtaining the device group authentication result, the method further includes: sending a session creation request to the second communication device, wherein the session creation request is used to instruct the second communication device to create a communication session with the first communication device.

6. The device authentication and networking method according to claim 1, characterized in that, The first authentication information includes a shared key; the step of initiating network formation to the second communication device based on the first authentication information includes: sending a network formation request to the second communication device, the network formation request including the shared key, the network formation request being used to instruct the second communication device to perform authentication based on the shared key and return the authentication result; when the authentication result returned by the second communication device is received as passed, the network formation is confirmed to be successful.

7. The device authentication and networking method according to any one of claims 1-6, characterized in that, Both the first communication device and the second communication device are screenless devices.

8. A communication device, characterized in that, The communication device includes a memory and a processor; the memory is used to store a computer program; the processor is used to execute the computer program and, when executing the computer program, implement the device authentication and networking method as described in any one of claims 1 to 7.

9. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program that, when executed by a processor, causes the processor to implement the device authentication and networking method as described in any one of claims 1 to 7.

Images