Smart home gateway device network access authentication method, device, apparatus and medium

Abstract

This application discloses a method, apparatus, device, and medium for network access authentication of smart home gateway devices. In this application embodiment, a network access event triggers the smart home gateway device to send a network access request to a smart home server. The smart home server verifies the target gateway sending the request and, upon successful verification, assigns different keys based on the current network type. When the smart home client communicates with the smart home gateway device, it encrypts and decrypts the communication data using the corresponding key according to the current network type. The key generation, verification, and configuration based on network access event triggers effectively improve the complexity and unpredictability of the keys, effectively reducing vulnerabilities to network attacks.

Description

Technical Field

[0001] This application relates to the field of smart homes, and more particularly to network access authentication methods, devices, equipment, and media for smart home gateway devices. Background Technology

[0002] With the development of computer networks and electronic technology, the application of smart homes is becoming increasingly widespread. Under the concept of smart homes, users can send control commands to electronic devices in the target residence through various control terminals. For example, they can remotely turn on the air conditioner before arriving home so that the most comfortable temperature is available upon arrival; or remotely check the indoor status through indoor monitoring, etc.

[0003] However, when the inventors used existing smart home devices to achieve remote control, they discovered that the security mechanisms of existing smart home devices during data transmission over the network are relatively fixed, and there are significant security vulnerabilities in their protection against network attacks. Summary of the Invention

[0004] This application provides a network access authentication method, device, equipment, and medium for smart home gateway devices, in order to solve the technical problem that the existing security mechanisms for data transmission through networks in smart homes are relatively fixed and have significant security vulnerabilities in the protection against network attacks.

[0005] Firstly, a network access authentication method for a smart home gateway device is provided. This method is used in a smart home system, which includes a smart home client, a smart home server, and a smart home gateway device. The network access authentication method includes:

[0006] The smart home gateway device listens for network access events in real time and sends a network access request to the smart home server when it detects a network access event.

[0007] When the smart home server receives the network access request, it verifies the target gateway device corresponding to the network access request. If the verification is successful, it generates a public network key and a local area network key, and sends the public network key and the local area network key to the target gateway device and the target client. The target client is the smart home client associated with the target gateway device.

[0008] The public network key is used to encrypt the data entity portion when the target client sends data packets to the target gateway device via the public network, and to decrypt the data entity portion when the target gateway device receives the data packets via the public network; the local area network key is used to encrypt the data entity portion when the target client sends data packets to the target gateway device via the local area network, and to decrypt the data entity portion when the target gateway receives the data packets via the local area network.

[0009] The network access events include network access reset events, power-on events, and timer update events.

[0010] The smart home gateway device monitors network access events in real time, including:

[0011] The smart home gateway device compares the system time with the latest specified time received from the smart home server. When the system time matches the specified time, it confirms that a network access event has been detected.

[0012] Accordingly, when the smart home server receives the network access request, it verifies the target gateway device corresponding to the network access request, including:

[0013] When the smart home server receives the network access request, it confirms the type of the current network access event corresponding to the network access request;

[0014] When the current network access event is a timed update event, compare the sending time of the network access request with the specified time pre-allocated to the target gateway device;

[0015] If the sending time matches the specified time, the verification is successful.

[0016] Specifically, the public network key and local area network key are randomly generated and sent synchronously when the smart home server sends them to the target gateway device at the specified time.

[0017] The specified time is randomly generated and sent independently by the smart home server to the target gateway device.

[0018] Wherein, two adjacent specified times are within a preset time interval range.

[0019] When the smart home server receives the network access request, it verifies the target gateway device corresponding to the network access request, including:

[0020] When the smart home server receives the network access request, it confirms the type of the current network access event corresponding to the network access request;

[0021] When the current network access event is a network access reset event, a verification reminder is sent to at least one random target client. The verification reminder is used to prompt the user to confirm the network access reset through a third-party information channel.

[0022] Upon receiving a confirmation response from at least one random target client to the verification notification, the verification is successful.

[0023] Secondly, a network access authentication device for a smart home gateway device is provided. This network access authentication device is used in a smart home system, which includes a smart home client, a smart home server, and a smart home gateway device. The network access authentication device includes:

[0024] An event listening unit is used by the smart home gateway device to listen for network access events in real time and send a network access request to the smart home server when a network access event is detected.

[0025] The verification and sending unit is used to verify the target gateway device corresponding to the network access request when the smart home server receives the network access request, generate a public network key and a local area network key when the verification is successful, and send the public network key and the local area network key to the target gateway device and the target client, wherein the target client is the smart home client associated with the target gateway device;

[0026] The public network key is used to encrypt the data entity portion when the target client sends data packets to the target gateway device via the public network, and to decrypt the data entity portion when the target gateway device receives the data packets via the public network; the local area network key is used to encrypt the data entity portion when the target client sends data packets to the target gateway device via the local area network, and to decrypt the data entity portion when the target gateway receives the data packets via the local area network.

[0027] The network access events include network access reset events, power-on events, and timer update events.

[0028] The event listening unit includes:

[0029] The first monitoring module is used to compare the system time of the smart home gateway device with the latest specified time received from the smart home server. When the system time matches the specified time, it is confirmed that a network access event has been detected.

[0030] Accordingly, the verification sending unit includes:

[0031] The event type confirmation module is used to confirm the type of the current network access event corresponding to the network access request when the smart home server receives the network access request;

[0032] The time comparison module is used to compare the sending time of the network access request with the specified time pre-allocated to the target gateway device when the current network access event is a time update event;

[0033] The first verification and confirmation module is used to confirm that the sending time and the specified time match, and then pass the verification.

[0034] Specifically, the public network key and local area network key are randomly generated and sent synchronously when the smart home server sends them to the target gateway device at the specified time.

[0035] The specified time is randomly generated and sent independently by the smart home server to the target gateway device.

[0036] Wherein, two adjacent specified times are within a preset time interval range.

[0037] The verification sending unit includes:

[0038] The event type confirmation module is used to confirm the type of the current network access event corresponding to the network access request when the smart home server receives the network access request;

[0039] The verification reminder sending module is used to send a verification reminder to at least one random target client when the current network access event is a network access reset event. The verification reminder is used to prompt the user to confirm the network access reset through a third-party information channel.

[0040] The second verification and confirmation module is used to pass the verification when it receives a confirmation reply from the at least one random target client to the verification reminder.

[0041] Thirdly, an electronic device is provided, the electronic device comprising:

[0042] One or more processors;

[0043] Memory, used to store one or more programs;

[0044] When the one or more programs are executed by the one or more processors, the electronic device cooperates with other electronic devices to implement the network access authentication method for a smart home gateway device as described in any of the first aspects.

[0045] Fourthly, a non-volatile storage medium is provided for storing computer-executable instructions, which, when executed by a computer processor, are used to perform the network access authentication method for a smart home gateway device as described in any one of the first aspects.

[0046] The network access authentication method for a smart home gateway device in this embodiment is used in a smart home system. The smart home system includes a smart home client, a smart home server, and a smart home gateway device. The network access authentication method includes: the smart home gateway device monitoring network access events in real time and sending a network access request to the smart home server when a network access event is detected; when the smart home server receives the network access request, it verifies the target gateway device corresponding to the network access request, generates a public network key and a local area network key when the verification is successful, and sends the public network key and the local area network key to the target gateway device and the target client, wherein the target client is a smart home client associated with the target gateway device; wherein the public network key is used to encrypt the data entity portion when the target client sends data packets to the target gateway device via the public network, and to decrypt the data entity portion when the target gateway device receives the data packets via the public network; the local area network key is used to encrypt the data entity portion when the target client sends data packets to the target gateway device via the local area network, and to decrypt the data entity portion when the target gateway device receives the data packets via the local area network. The smart home gateway device sends a network access request to the smart home server by triggering a network access event. The smart home server verifies the target gateway that sent the network access request and, after successful verification, assigns a different key according to the current network type. When the smart home client communicates with the smart home gateway device, it uses the corresponding key to encrypt and decrypt the communication data according to the current network type. The key generation, verification, and key configuration based on the network access event effectively improve the complexity and unpredictability of the key, and effectively reduce the protection vulnerabilities against network attacks. Attached Figure Description

[0047] Other features, objects, and advantages of this application will become more apparent from the following detailed description of non-limiting embodiments with reference to the accompanying drawings:

[0048] Figure 1 This is a flowchart illustrating a network access authentication method for a smart home gateway device provided in an embodiment of this application.

[0049] Figure 2 This is a flowchart of another smart home gateway device network access authentication method provided in this application embodiment;

[0050] Figure 3 This is a schematic diagram of the structure of an electronic device provided in an embodiment of this application. Detailed Implementation

[0051] To make the objectives, technical solutions, and advantages of this application clearer, specific embodiments of this application will be described in further detail below with reference to the accompanying drawings. It should be understood that the specific embodiments described herein are merely for explaining this application and not for limiting it. It should also be noted that, for ease of description, only the parts relevant to this application are shown in the drawings, not all of them. Before discussing exemplary embodiments in more detail, it should be mentioned that some exemplary embodiments are described as processes or methods depicted as flowcharts. Although the flowcharts describe operations (or steps) as sequential processes, many of these operations can be performed in parallel, concurrently, or simultaneously. Furthermore, the order of the operations can be rearranged. The process can be terminated when its operation is completed, but may also have additional steps not included in the drawings. The process can correspond to a method, function, procedure, subroutine, subprogram, etc.

[0052] Figure 1 This is a flowchart illustrating a network access authentication method for a smart home gateway device provided in this application embodiment. The network access authentication method for the smart home gateway device provided in this embodiment can be executed by the network access authentication device of the smart home gateway device. This network access authentication device can be implemented through hardware and / or software and integrated into the electronic device. Specifically, in a smart home system, the electronic device includes a smart home client, a smart home server, and a smart home gateway device. The electronic device in this embodiment can be a user-held control terminal, such as a mobile phone, tablet, or laptop with a smart home client installed; it can also be a control terminal built into the smart home system, and the smart home client and control terminal can be considered integrated. The smart home server provides network services for the smart home, such as account login, data storage, and command transmission. The smart home gateway device is installed in the target residence to enable data transmission between the smart home within the target residence and the outside world. Please refer to... Figure 1 The specific network access authentication method for this smart home gateway device includes:

[0053] Step S110: The smart home gateway device listens for network access events in real time and sends a network access request to the smart home server when it detects a network access event.

[0054] In this embodiment, the network access of a smart home gateway device can be triggered by multiple events. Each network access triggers a corresponding network access authentication. The unpredictability of the timing of different events makes the key used by the smart home gateway device in communication state variable and unpredictable, thereby effectively reducing protection vulnerabilities when facing network attacks. Specific network access events can be pre-set user operation events or trigger events defined in the entire smart home system, such as user power-on events, restart events, or internal specified data processing reaching a certain number of times. The combined existence of multiple network access events makes their occurrence unpredictable due to the influence of various factors during use, effectively reducing the possibility of intrusion into the smart home system through saturation analysis. When the smart home gateway device detects a network access event, it needs to include the type of network access event that triggered the request in the network access request when sending a network access request to the smart home server, so that the smart home server can verify it according to the corresponding authentication method.

[0055] Step S120: When the smart home server receives a network access request, it verifies the target gateway device corresponding to the network access request. If the verification is successful, it generates a public network key and a local area network key, and sends the public network key and the local area network key to the target gateway device and the target client. The target client is the smart home client associated with the target gateway device.

[0056] For smart home servers, upon receiving a network access request, they verify the target gateway device corresponding to the request. This verification includes basic verification and auxiliary verification. Basic verification primarily authenticates the device's identity based on information recorded when the smart home gateway device registers with the smart home server, and can utilize existing device authentication methods. Auxiliary verification, on the other hand, performs verification based on event information related to the network access event, following the auxiliary verification strategy corresponding to the type of event. By combining basic and auxiliary verification, a composite verification of the smart home gateway device is achieved, ensuring the security and legitimacy of the smart home gateway device's network access, improving the communication security of the entire smart home system, and preventing unauthorized access and leakage of user privacy.

[0057] When the smart home server verifies the target gateway device, it generates and sends a public network key and a local area network key. The public network key is used to encrypt the data entity portion of data packets sent by the target client to the target gateway device via the public network, and to decrypt the data entity portion of data packets received by the target gateway device via the public network. The local area network key is used to encrypt the data entity portion of data packets sent by the target client to the target gateway device via the local area network, and to decrypt the data entity portion of data packets received by the target gateway device via the local area network. By configuring different keys for communication under different network types, the key used in the communication process is confirmed from multiple options, effectively increasing the difficulty for network intrusion to obtain the key for malicious control.

[0058] The aforementioned network access authentication method for smart home gateway devices is used in a smart home system, which includes a smart home client, a smart home server, and a smart home gateway device. The network access authentication method includes: the smart home gateway device monitoring network access events in real time and sending a network access request to the smart home server upon detecting a network access event; when the smart home server receives the network access request, it verifies the target gateway device corresponding to the request, generates a public network key and a local area network key upon successful verification, and sends the public network key and the local area network key to the target gateway device and the target client, where the target client is the smart home client associated with the target gateway device; wherein, the public network key is used to encrypt the data entity portion when the target client sends data packets to the target gateway device via the public network, and to decrypt the data entity portion when the target gateway device receives data packets via the public network; the local area network key is used to encrypt the data entity portion when the target client sends data packets to the target gateway device via the local area network, and to decrypt the data entity portion when the target gateway device receives data packets via the local area network. The smart home gateway device sends a network access request to the smart home server by triggering a network access event. The smart home server verifies the target gateway that sent the network access request and, after successful verification, assigns a different key according to the current network type. When the smart home client communicates with the smart home gateway device, it uses the corresponding key to encrypt and decrypt the communication data according to the current network type. The key generation, verification, and key configuration based on the network access event effectively improve the complexity and unpredictability of the key, and effectively reduce the protection vulnerabilities against network attacks.

[0059] Based on the above technical solutions, this application provides another network access authentication method for smart home gateway devices. In this application, multiple network access events are set, and the occurrence of network access events is random. Thus, by flexibly updating the key, it is difficult for external attacks to quickly crack the key. Furthermore, the smart home server adopts different verification strategies for network access requests triggered by different network access events, thereby improving the security of the entire smart home system.

[0060] Please refer to Figure 2 This is a flowchart of another smart home gateway device network access authentication method provided in this application embodiment, such as... Figure 2 As shown, the network access authentication method includes:

[0061] Step S210: The smart home gateway device compares the system time with the latest specified time received from the smart home server. When the system time matches the specified time, it confirms that the network access event has been detected and sends a network access request to the smart home server.

[0062] For smart home gateway devices, there can be several preset network access events, such as network reset events, power-on events, and timer update events. A network reset event is an event where the user manually reconnects to the network; this manual operation can be performed on the smart home gateway device itself or through the smart home client. A power-on event is an event where the smart home gateway device is powered on again after being shut down for any reason. A timer update event is when the current system time reaches a specified moment received from the smart home server. This specified moment is randomly generated and sent synchronously by the smart home server when sending the public and local area network keys to the target gateway device, or it can be randomly generated and sent independently by the smart home server to the target gateway device. In practice, a single specified moment can only be sent synchronously or independently. However, throughout the entire network operation of the smart home gateway device, the specified moment can be randomly generated and sent synchronously or independently when sending keys. To avoid frequent key generation and excessively long usage time of a single key set, the smart home server ensures that adjacent specified moments are within a preset time interval when generating them.

[0063] When the smart home gateway device listens for network entry events, it confirms that a network entry event has been detected when the system time matches a specified time. The type of this network entry event is a timer update event. Step S210 only describes the listening process for timer update events. It should be understood that listening for other types of network entry events is performed simultaneously. If other network entry events are detected, a corresponding network entry request will be sent. The network entry request carries the event type, which is specifically represented by a type identifier, so that the smart home server can determine which auxiliary verification strategy to use.

[0064] Step S220: When the smart home server receives the network access request, it confirms the type of the current network access event corresponding to the network access request.

[0065] When a smart home server receives a network access request, it determines the type of the current network access event based on the type identifier carried in the request, and thus can confirm the verification strategy accordingly.

[0066] Step S230: When the current network entry event is a timed update event, compare the sending time of the network entry request with the specified time pre-allocated to the target gateway device.

[0067] Step S240: If the sending time matches the specified time, the verification is successful.

[0068] If the current network access event is a timed update event, a comparison is made between the actual sending time and the allocated specified time to confirm whether the smart home gateway device re-requests network access at the specified time. If a smart home gateway device has been maliciously replaced and connected to the residence, the replaced smart home gateway device may not have received the specified time, or may have received the specified time but be unable to interpret its meaning, thus failing to re-connect according to the smart home server's requirements. For the smart home server, in addition to comparing the sending time of the network access request with the pre-allocated specified time to the target gateway device, it also needs to determine whether each smart home gateway device sent a network access request at the corresponding specified time. If no corresponding network access request is received, the corresponding smart home gateway device can be marked as risky, indicating that the smart home gateway device may have been maliciously controlled or replaced and is unable to process data transmission according to the smart home server's instructions.

[0069] Step S250: When the current network access event is a network access reset event, send a verification reminder to at least one random target client. The verification reminder is used to prompt the user to confirm the network access reset through a third-party information channel.

[0070] Step S260: Upon receiving confirmation responses from all random target clients to the verification notification, the verification is successful.

[0071] If the current network access event is a network reset event or a power-on event, a verification reminder is sent to at least one random target client. This reminder prompts the user to confirm the network reset through a third-party information channel. The verification reminder is not technically mandatory; its main purpose is to remind the user that a change in the state of the smart home gateway device has occurred, and to confirm whether they or other users in the same house have performed any actions that caused this change. For a smart home system, there is at least one user and possibly multiple users within the same residence. If there is only one user, a verification reminder is sent to that user. If they have performed any relevant actions, they directly confirm and reply to the verification reminder. If they have not performed any relevant actions, it indicates that the state of the smart home gateway device may have been changed due to malicious operation or intrusion, and the user can directly refuse network access. If there are multiple users, a verification reminder is sent to any one of them. The specific reminder content can be to confirm with other users through third-party information channels, such as instant messaging tools or mobile communications, whether there has been any network access operation. If so, they confirm and reply to the verification reminder; if neither confirms, it indicates that the state of the smart home gateway device may have been changed due to malicious operation or intrusion, and the user can directly refuse network access.

[0072] Step S270: Generate a public network key and a local area network key, and send the public network key and the local area network key to the target gateway device and the target client.

[0073] Regardless of the network access event that triggers the request, after successful verification, the smart home server generates a public network key and a local area network key, and sends these two keys to the target gateway device and the target client. The process by which the smart home client and smart home gateway device use different keys for encryption and decryption under different network connection states can refer to existing schemes using static keys, and will not be detailed here.

[0074] The network access authentication device for a smart home gateway device provided in this application embodiment is used in a smart home system. The smart home system includes a smart home client, a smart home server, and a smart home gateway device. The network access authentication device includes:

[0075] The event listening unit is used by the smart home gateway device to listen for network access events in real time and send a network access request to the smart home server when a network access event is detected.

[0076] The verification and sending unit is used to verify the target gateway device corresponding to the network access request when the smart home server receives the network access request. When the verification is successful, it generates a public network key and a local area network key and sends the public network key and the local area network key to the target gateway device and the target client. The target client is the smart home client associated with the target gateway device.

[0077] The public network key is used to encrypt the data entity portion when the target client sends data packets to the target gateway device via the public network, and to decrypt the data entity portion when the target gateway device receives data packets via the public network; the local area network key is used to encrypt the data entity portion when the target client sends data packets to the target gateway device via the local area network, and to decrypt the data entity portion when the target gateway receives data packets via the local area network.

[0078] Based on the above embodiments, network access events include network access reset events, power-on events, and timing update events.

[0079] Based on the above embodiments, the event listening unit includes:

[0080] The first monitoring module is used by the smart home gateway device to compare the system time with the latest specified time received from the smart home server. When the system time matches the specified time, it confirms that the network access event has been detected.

[0081] Accordingly, the verification sending unit includes:

[0082] The event type confirmation module is used to confirm the type of the current network access event corresponding to the network access request when the smart home server receives the network access request;

[0083] The time comparison module is used to compare the sending time of the network access request with the specified time pre-allocated to the target gateway device when the current network access event is a time update event.

[0084] The first verification and confirmation module is used to confirm that the sending time matches the specified time, and then the verification is passed.

[0085] Based on the above embodiments, when the smart home server sends the public network key and the local area network key to the target gateway device at a specified time, the keys are randomly generated and sent synchronously.

[0086] Based on the above embodiments, a random independent transmission is generated by the smart home server to the target gateway device at a specified time.

[0087] Based on the above embodiments, two adjacent specified times are within a preset time interval range.

[0088] Based on the above embodiments, the verification sending unit includes:

[0089] The event type confirmation module is used to confirm the type of the current network access event corresponding to the network access request when the smart home server receives the network access request;

[0090] The verification reminder sending module is used to send a verification reminder to at least one random target client when the current network access event is a network access reset event. The verification reminder is used to prompt the user to confirm the network access reset through a third-party information channel.

[0091] The second verification and confirmation module is used to pass the verification when it receives a confirmation reply from at least one random target client to the verification reminder.

[0092] In summary, the aforementioned units work together to implement a network access authentication method for smart home gateway devices in a smart home system. The smart home system includes a smart home client, a smart home server, and a smart home gateway device. This network access authentication method includes: the smart home gateway device monitoring network access events in real time and sending a network access request to the smart home server upon detecting an event; when the smart home server receives the network access request, it verifies the target gateway device corresponding to the request, generates a public network key and a local area network key upon successful verification, and sends these keys to both the target gateway device and the target client. The target client is the smart home client associated with the target gateway device. The public network key is used to encrypt the data entity portion when the target client sends data packets to the target gateway device via the public network, and to decrypt the data entity portion when the target gateway device receives data packets via the public network. The local area network key is used to encrypt the data entity portion when the target client sends data packets to the target gateway device via the local area network, and to decrypt the data entity portion when the target gateway device receives data packets via the local area network. The smart home gateway device sends a network access request to the smart home server by triggering a network access event. The smart home server verifies the target gateway that sent the network access request and, after successful verification, assigns a different key according to the current network type. When the smart home client communicates with the smart home gateway device, it uses the corresponding key to encrypt and decrypt the communication data according to the current network type. The key generation, verification, and key configuration based on the network access event effectively improve the complexity and unpredictability of the key, and effectively reduce the protection vulnerabilities against network attacks.

[0093] It is worth noting that in the above embodiments of the network access authentication device, the various units and modules included are only divided according to functional logic, but are not limited to the above division, as long as the corresponding functions can be achieved; in addition, the specific names of each functional unit are only for easy differentiation and are not used to limit the scope of protection of the present invention.

[0094] This application provides an electronic device that can integrate the network access authentication device of the smart home gateway device provided in this application, and can implement the network access authentication method of the smart home gateway device provided in this application. Figure 3 This is a schematic diagram of the structure of an electronic device provided in an embodiment of this application. (Reference) Figure 3 The electronic device includes a processor 310, a memory 320, an input device 330, an output device 340, and a communication device 350. The device may have one or more processors 310. Figure 3 Taking a processor 310 as an example, the number of memory units 320 in this device can be one or more. Figure 3 Taking a memory 320 as an example, the processor 310, memory 320, input device 330, output device 340, and communication device 350 of this electronic device can be connected via a bus or other means. Figure 3 Taking the example of a connection between China and Israel via a bus.

[0095] The memory 320, as a computer-readable storage medium, can be used to store software programs, computer-executable programs, and modules, such as program instructions / modules corresponding to the network access authentication method of the smart home gateway device described in any embodiment of this application (e.g., the event listening unit and verification sending unit in the network access authentication device of the smart home gateway device). The memory 320 may mainly include a program storage area and a data storage area, wherein the program storage area may store the operating system and at least one application program required for a function; the data storage area may store data created according to the use of the device, etc. Furthermore, the memory 320 may include high-speed random access memory and may also include non-volatile memory, such as at least one disk storage device, flash memory device, or other non-volatile solid-state storage device. In some instances, the memory 320 may further include memory remotely located relative to the processor 310, and these remote memories can be connected to the device via a network. Examples of such networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.

[0096] The communication device 350 is used for network connection and data transmission with other smart home devices using any data communication method (e.g., wirelessly). The communication device 350 does not refer to a specific hardware module and its driver for a particular communication method, but rather includes various communication methods that can be deployed on the device, such as WiFi modules, Bluetooth modules, and infrared modules.

[0097] Input device 330 can be used to receive input numerical or character information, or operation commands. Output device 340 may include a speaker, a display screen, etc. It should be noted that the specific composition of input device 330 and output device 340 can be set according to actual conditions; for example, they can be configured as a keyboard and a display screen respectively, or integrated as a touch screen. Understandably, in practical applications, this device may also include other conventional components required to achieve normal functionality, such as a power module.

[0098] The processor 310 executes various functional applications and data processing of the device by running software programs, instructions and modules stored in the memory 320, thereby realizing the network access authentication method of the smart home gateway device described above.

[0099] The electronic device provided above can be used in conjunction with other electronic devices to execute the network access authentication method of the smart home gateway device provided in the above embodiments, and has corresponding functions and beneficial effects.

[0100] This application embodiment also provides a storage medium containing computer-executable instructions. When executed by a computer processor, the computer-executable instructions are used to perform a network access authentication method for a smart home gateway device. This network access authentication method is used in a smart home system, which includes a smart home client, a smart home server, and a smart home gateway device. The network access authentication method includes: the smart home gateway device monitoring network access events in real time and sending a network access request to the smart home server when a network access event is detected; and the smart home server, upon receiving the network access request, verifying the target gateway device corresponding to the network access request. Upon successful verification, a public network key and a local area network key are generated and sent to the target gateway device and the target client. The target client is the smart home client associated with the target gateway device. The public network key is used to encrypt the data entity portion when the target client sends data packets to the target gateway device via the public network, and to decrypt the data entity portion when the target gateway device receives data packets via the public network. The local area network key is used to encrypt the data entity portion when the target client sends data packets to the target gateway device via the local area network, and to decrypt the data entity portion when the target gateway device receives data packets via the local area network.

[0101] Storage medium – any type of memory device or storage device. The term “storage medium” is intended to include: mounting media, such as CD-ROMs, floppy disks, or magnetic tape devices; computer system memory or random access memory, such as DRAM, DDR RAM, SRAM, EDO RAM, Rambus RAM, etc.; non-volatile memory, such as flash memory, magnetic media (e.g., hard disks or optical storage); registers or other similar types of memory elements, etc. Storage media may also include other types of memory or combinations thereof. Furthermore, storage media may reside in a first computer system in which a program is executed, or may reside in a different second computer system connected to the first computer system via a network (such as the Internet). The second computer system can provide program instructions to the first computer for execution. The term “storage medium” can include two or more storage media that may reside in different locations (e.g., in different computer systems connected via a network). Storage media may store program instructions (e.g., specifically implemented as a computer program) executable by one or more processors.

[0102] Of course, the storage medium containing computer-executable instructions provided in the embodiments of this application is not limited to the network access authentication method of the smart home gateway device as described above. It can also perform related operations in the network access authentication method of the smart home gateway device provided in any embodiment of this application, and has corresponding functions and beneficial effects.

[0103] The network access authentication device, storage medium, and device of the smart home gateway device provided in the above embodiments can execute the network access authentication method of the smart home gateway device provided in any embodiment of this application. For technical details not described in detail in the above embodiments, please refer to the network access authentication method of the smart home gateway device provided in any embodiment of this application.

[0104] Note that the above are merely preferred embodiments and the technical principles employed in this application. Those skilled in the art will understand that this application is not limited to the specific embodiments described herein, and various obvious changes, readjustments, and substitutions can be made without departing from the scope of protection of this application. Therefore, although this application has been described in detail through the above embodiments, this application is not limited to the above embodiments, and may include many other equivalent embodiments without departing from the concept of this application, the scope of which is determined by the scope of the appended claims.

Claims

1. A network access authentication method for smart home gateway devices, used in smart home systems, characterized in that, The smart home system includes a smart home client, a smart home server, and a smart home gateway device. The network access authentication method includes: The smart home gateway device monitors network access events in real time and sends a network access request to the smart home server when a network access event is detected. The network access event includes a timer update event. The smart home gateway device monitors network access events in real time by comparing the system time with a specified time recently received from the smart home server. When the system time matches the specified time, the smart home gateway device confirms that a network access event has been detected. When the smart home server receives the network access request, it verifies the target gateway device corresponding to the network access request. This includes: when the smart home server receives the network access request, it confirms the type of the current network access event corresponding to the network access request. When the current network access event is a timed update event, it compares the sending time of the network access request with the specified time pre-allocated to the target gateway device. If the sending time and the specified time match, the verification is passed. Upon successful verification, a public network key and a local area network key are generated and sent to the target gateway device and the target client, where the target client is the smart home client associated with the target gateway device. The public network key is used to encrypt the data entity portion when the target client sends data packets to the target gateway device via the public network, and to decrypt the data entity portion when the target gateway device receives the data packets via the public network; the local area network key is used to encrypt the data entity portion when the target client sends data packets to the target gateway device via the local area network, and to decrypt the data entity portion when the target gateway receives the data packets via the local area network.

2. The network access authentication method according to claim 1, characterized in that, The network access events also include network access reset events and power-on events.

3. The network access authentication method according to claim 1, characterized in that, The specified time is when the smart home server sends the public network key and local area network key to the target gateway device, which are randomly generated and sent synchronously.

4. The network access authentication method according to claim 1 or 3, characterized in that, The specified time is randomly generated and independently sent by the smart home server to the target gateway device.

5. The network access authentication method according to claim 2 or 3, characterized in that, The two adjacent specified times are within the preset time interval range.

6. The network access authentication method according to any one of claims 2-3, characterized in that, When the smart home server receives the network access request, it verifies the target gateway device corresponding to the network access request, including: When the smart home server receives the network access request, it confirms the type of the current network access event corresponding to the network access request; When the current network access event is a network access reset event, a verification reminder is sent to at least one random target client. The verification reminder is used to prompt the user to confirm the network access reset through a third-party information channel. Upon receiving a confirmation response from at least one random target client to the verification notification, the verification is successful.

7. A network access authentication device for a smart home gateway device, used in a smart home system, characterized in that, The smart home system includes a smart home client, a smart home server, and a smart home gateway device. The network access authentication device includes: An event monitoring unit is used by the smart home gateway device to monitor network access events in real time, and to send a network access request to the smart home server when a network access event is detected. The network access event includes a timer update event. The real-time monitoring of network access events by the smart home gateway device includes: the smart home gateway device comparing the system time with a specified time recently received from the smart home server, and confirming that a network access event has been detected when the system time matches the specified time. The verification and sending unit is used to verify the target gateway device corresponding to the network access request when the smart home server receives the network access request. This includes: when the smart home server receives the network access request, confirming the type of the current network access event corresponding to the network access request; when the current network access event is a timed update event, comparing the sending time of the network access request with a pre-allocated specified time to the target gateway device; and verifying that the sending time and the specified time match. Upon successful verification, a public network key and a local area network key are generated, and the public network key and the local area network key are sent to the target gateway device and a target client, where the target client is the smart home client associated with the target gateway device. The public network key is used to encrypt the data entity portion when the target client sends data packets to the target gateway device via the public network, and to decrypt the data entity portion when the target gateway device receives the data packets via the public network; the local area network key is used to encrypt the data entity portion when the target client sends data packets to the target gateway device via the local area network, and to decrypt the data entity portion when the target gateway receives the data packets via the local area network.

8. An electronic device, characterized in that, include: One or more processors; Memory, used to store one or more programs; When the one or more programs are executed by the one or more processors, the electronic device cooperates with other electronic devices to implement the network access authentication method for the smart home gateway device as described in any one of claims 1-6.

9. A non-volatile storage medium storing computer-executable instructions, which, when executed by a computer processor, are used to perform the network access authentication method of the smart home gateway device according to any one of claims 1-6.

Images