A method and device for opening management of a bluetooth password lock

Abstract

The application discloses a kind of unlocking management method and device of bluetooth password lock, wherein the method includes: before the use of bluetooth password lock, data initialization processing is carried out to the key management system associated with the bluetooth password lock, and the initialized key management system is obtained;Initialization after key management system distributes the unlocking key for the bluetooth password lock, and the unlocking key is stored in the local encryption and decryption unit;When unlocking mobile terminal application and the bluetooth password lock establish unlocking connection, the bluetooth password lock is based on the connection authority of the unlocking mobile terminal and the unlocking mobile terminal establishes bluetooth connection relationship;After the bluetooth password lock and the unlocking mobile terminal establish unlocking connection, based on the type of the unlocking mobile terminal, the unlocking verification process corresponding to the bluetooth password lock is called to carry out unlocking verification processing.In the embodiment of the application, the security of bluetooth password lock is realized, and the security performance of bluetooth password lock is increased.

Description

Technical Field

[0001] This invention relates to the field of security technology, and in particular to a method and device for unlocking and managing a Bluetooth combination lock. Background Technology

[0002] With technological advancements, Bluetooth keypad locks will gradually become a part of people's daily lives, such as being used in door locks. This allows users to unlock the door using a smartphone connected via Bluetooth. The security is significantly higher than traditional card-swipe unlocking. Specifically, Bluetooth unlocking relies on a smartphone; an app must be downloaded and the phone linked. The lock automatically unlocks when the phone is within a certain range of the lock, and the system provides a log of door opening and closing events. It also allows for remote lock management, sending (temporary) electronic keys to authorized users, and monitoring the lock's status and battery level. However, some existing Bluetooth locks are relatively easy to compromise due to software vulnerabilities, resulting in lower security. Summary of the Invention

[0003] The purpose of this invention is to overcome the shortcomings of the prior art. This invention provides a method and device for unlocking a Bluetooth combination lock, thereby achieving security protection for the Bluetooth combination lock and increasing its security performance.

[0004] To address the aforementioned technical problems, this invention provides a method for unlocking a Bluetooth combination lock. The Bluetooth combination lock comprises a central processing unit, a storage unit, an encryption / decryption unit, a Bluetooth communication unit, a battery unit, a mechanical lock unit, and a USB-Type-C interface. The method includes:

[0005] Before using the Bluetooth key lock, the key management system associated with the Bluetooth key lock is initialized to obtain the initialized key management system.

[0006] The initialized key management system assigns an unlocking key to the Bluetooth lock and stores the unlocking key in the local encryption / decryption unit;

[0007] When the unlocking mobile terminal requests to establish an unlocking connection with the Bluetooth key lock, the Bluetooth key lock establishes a Bluetooth connection relationship with the unlocking mobile terminal based on the connection permission of the unlocking mobile terminal. The unlocking mobile terminal is an encrypted unlocking mobile terminal or a general unlocking mobile terminal.

[0008] After the Bluetooth keypad lock establishes an unlocking connection with the unlocking mobile terminal, the unlocking verification process corresponding to the Bluetooth keypad lock is invoked based on the type of the unlocking mobile terminal to perform unlocking verification.

[0009] Optionally, the data initialization process for the key management system associated with the Bluetooth key lock includes:

[0010] If the Bluetooth key lock is offline, the encryption chip of the mobile terminal generates a pair of public and private keys and an application message for generating a signature certificate, and imports them offline into the key management system from the USB-Type-C interface using a secure medium.

[0011] If the Bluetooth key lock is online, the Bluetooth communication unit in the Bluetooth key lock exchanges public and private keys and application messages with the key management system through the management mobile terminal.

[0012] The key management system generates a signature digital certificate for the Bluetooth lock, an encrypted public and private key, and a signature certificate for the key management system based on the public and private keys and the application message, and performs data initialization processing.

[0013] Optionally, the initialized key management system assigns an unlocking key to the Bluetooth lock and stores the unlocking key in a local encryption / decryption unit, including:

[0014] The key management system assigns a corresponding unlocking key to the Bluetooth keypad and encrypts the unlocking key using a symmetric key to obtain an encrypted unlocking key.

[0015] The key management system uses the public key of the Bluetooth key lock to encrypt the symmetric key to obtain the encrypted symmetric key;

[0016] The key management system publishes the encrypted unlocking key and the encrypted symmetric key to the public network or private network;

[0017] After obtaining the encrypted unlocking key and the encrypted symmetric key from the network, the management mobile terminal sends the encrypted unlocking key and the encrypted symmetric key to the Bluetooth lock.

[0018] The Bluetooth key lock sequentially unlocks the device using the encrypted symmetric key and the encrypted unlocking key to obtain the unlocking key, and stores the unlocking key in the local encryption / decryption unit.

[0019] Optionally, the Bluetooth key lock obtains an unlocking key by sequentially unlocking the symmetric key and the encrypted unlocking key, including:

[0020] The symmetric key is obtained by decrypting the encrypted symmetric key using the private key of the Bluetooth lock.

[0021] The symmetric key is used to decrypt the encrypted unlocking key to obtain the unlocking key.

[0022] Optionally, the Bluetooth keypad establishes a Bluetooth connection with the unlocking mobile terminal based on the connection permissions of the unlocking mobile terminal, including:

[0023] Before establishing a Bluetooth connection with the Bluetooth key lock, the unlocking mobile terminal needs to register with the key management system and possess the signature certificate, encryption public and private keys, and signature certificate of the key management system issued by the key management system.

[0024] The unlocking mobile terminal obtains the unique ID of the Bluetooth lock based on the signature certificate, the encryption public and private keys, and the signature certificate of the key management system;

[0025] The Bluetooth keypad lock establishes a Bluetooth connection with the unlocking mobile terminal based on the unique ID carried by the unlocking mobile terminal.

[0026] Optionally, the Bluetooth keypad establishes a Bluetooth connection with the unlocking mobile terminal based on the unique ID carried by the unlocking mobile terminal, including:

[0027] The unlocking mobile terminal sends a Bluetooth broadcast message and searches for all Bluetooth keypad locks within Bluetooth signal range;

[0028] When the unlocking mobile terminal is an encrypted unlocking mobile terminal, the unique ID of the Bluetooth key lock to be opened is selected from all Bluetooth key locks within the Bluetooth signal range, and when the encrypted unlocking mobile terminal has location permissions for the Bluetooth key lock, the Bluetooth key lock directly establishes a Bluetooth connection with the encrypted unlocking mobile terminal.

[0029] When the unlocking mobile terminal is a universal unlocking mobile terminal, the corresponding Bluetooth lock is selected from all Bluetooth locks within the Bluetooth signal range, and a request to unlock message is sent to the selected Bluetooth lock. The unlock message carries the unique ID of the Bluetooth lock.

[0030] The Bluetooth combination lock establishes a Bluetooth connection with the universal unlocking mobile terminal based on the unique ID carried in the unlock message.

[0031] Optionally, the step of invoking the unlock verification process corresponding to the Bluetooth keypad based on the type of the unlocking mobile terminal includes:

[0032] When the unlocking mobile terminal is an encrypted unlocking mobile terminal, the encrypted unlocking mobile terminal generates a new random number as the first symmetric key;

[0033] Using the signature unlocking key signed by the first symmetric key encryption key management system, an encrypted signature unlocking key is obtained;

[0034] The first symmetric key is encrypted using the public key of the Bluetooth key lock to obtain a digital envelope;

[0035] The encrypted unlocking mobile terminal sends the encrypted signature unlocking key and the digital envelope to the Bluetooth combination lock;

[0036] The Bluetooth key lock uses a private key to decrypt the digital envelope to obtain a first symmetric key;

[0037] The Bluetooth keypad lock uses a first symmetric key to decrypt the encrypted signature unlocking key to obtain the signature unlocking key;

[0038] The Bluetooth key lock uses the signature public key of the key management system to verify the signature unlocking key. After successful verification, it checks whether the signature unlocking key is consistent with the unlocking key stored in the Bluetooth key lock. If they are consistent, the unlocking operation is performed.

[0039] Optionally, the step of invoking the unlock verification process corresponding to the Bluetooth keypad based on the type of the unlocking mobile terminal includes:

[0040] When the unlocking mobile terminal is a universal unlocking mobile terminal, the Bluetooth key lock sends an encryption certificate to the universal unlocking mobile terminal, and the universal unlocking mobile terminal decrypts the encryption certificate based on the public key in the key management system to obtain the encryption public key of the Bluetooth key lock;

[0041] The key management system reviews the unlocking request permission of the universal unlocking mobile terminal, and if the unlocking request permission is valid, it obtains the unlocking key of the Bluetooth password lock and generates a new random number as the second symmetric key of the unlocking key;

[0042] The unlocking key is encrypted using the second symmetric key, and the resulting encrypted unlocking key is encapsulated into a message and sent back to the universal unlocking mobile terminal.

[0043] The universal unlocking mobile terminal decrypts and verifies the signature of the received message, and obtains the second symmetric key of the key management system after the signature verification is successful.

[0044] The second symmetric key is used to decrypt the encrypted unlocking key to obtain the unlocking key, and the unlocking key is stored in the running memory of the universal unlocking mobile terminal;

[0045] The Bluetooth keypad lock establishes a one-way security connection with the universal unlocking mobile terminal and performs unlocking verification by transmitting the unlocking key.

[0046] Optionally, the Bluetooth keypad lock establishes a one-way security connection with the universal unlocking mobile terminal by transmitting the unlocking key for unlocking verification, including:

[0047] The universal unlocking mobile terminal generates a random number A, encrypts the random number A using the public key of the Bluetooth key lock, and transmits the first encryption result to the Bluetooth key lock.

[0048] The Bluetooth key lock uses its private key to decrypt the first encryption result and obtain a random number A;

[0049] The Bluetooth keypad generates a random number B, and stores it locally by XORing K=A with B. The random number B is encrypted using the random number A, and the resulting second encryption result is sent to the universal unlocking mobile terminal.

[0050] The universal unlocking mobile terminal uses a random number B to decrypt the second encryption result, obtains a random number B, and sets K = A XOR B;

[0051] The unlocking key is encrypted using K, and the encrypted unlocking key is sent to the Bluetooth keypad lock.

[0052] The Bluetooth keypad lock uses K to unlock the encrypted unlocking key, obtains the unlocking key, and verifies whether the unlocking key matches the saved unlocking key. If they match, the unlocking operation is performed.

[0053] In addition, this invention also provides an unlocking management device for a Bluetooth combination lock, wherein the Bluetooth combination lock comprises a central processing unit, a storage unit, an encryption / decryption unit, a Bluetooth communication unit, a battery unit, a mechanical lock unit, and a USB-Type-C interface; the device includes:

[0054] Initialization module: used to perform data initialization processing on the key management system associated with the Bluetooth key lock before the Bluetooth key lock is used, so as to obtain the initialized key management system;

[0055] Storage module: Used by the initialized key management system to assign an unlocking key to the Bluetooth lock and store the unlocking key in the local encryption / decryption unit;

[0056] Connection establishment module: When the unlocking mobile terminal requests to establish an unlocking connection with the Bluetooth key lock, the Bluetooth key lock establishes a Bluetooth connection relationship with the unlocking mobile terminal based on the connection permission of the unlocking mobile terminal. The unlocking mobile terminal is an encrypted unlocking mobile terminal or a general unlocking mobile terminal.

[0057] Unlock verification module: After the Bluetooth keypad and the unlocking mobile terminal establish an unlocking connection, the module invokes the unlock verification process corresponding to the Bluetooth keypad based on the type of the unlocking mobile terminal to perform unlock verification processing.

[0058] In this embodiment of the invention, an unlocking key is assigned to the Bluetooth combination lock by a key management system and saved to the local encryption / decryption unit of the Bluetooth combination lock; then, different unlocking verification methods are selected according to the type of unlocking mobile terminal to perform unlocking verification processing, which can realize the security protection of the Bluetooth combination lock and increase the security performance of the Bluetooth combination lock. Attached Figure Description

[0059] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0060] Figure 1 This is a flowchart illustrating the unlocking management method of the Bluetooth password lock in an embodiment of the present invention;

[0061] Figure 2 This is a schematic diagram of the structure of the unlocking management device for the Bluetooth password lock in an embodiment of the present invention. Detailed Implementation

[0062] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0063] Example 1, please refer to Figure 1 , Figure 1 This is a flowchart illustrating the unlocking management method of a Bluetooth password lock according to an embodiment of the present invention.

[0064] like Figure 1 As shown, a method for unlocking and managing a Bluetooth combination lock is disclosed. The Bluetooth combination lock comprises a central processing unit, a storage unit, an encryption / decryption unit, a Bluetooth communication unit, a battery unit, a mechanical lock unit, and a USB-Type-C interface. The method includes:

[0065] S11: Before using the Bluetooth key lock, perform data initialization processing on the key management system associated with the Bluetooth key lock to obtain the initialized key management system.

[0066] In a specific implementation of this invention, the data initialization process for the key management system associated with the Bluetooth lock includes: if the Bluetooth lock is offline, the encryption chip of the management mobile terminal generates a pair of public and private keys and an application message for generating a signature certificate, and imports them offline into the key management system from the USB-Type-C interface using a secure medium; if the Bluetooth lock is online, the Bluetooth communication unit in the Bluetooth lock exchanges public and private keys and the application message with the key management system through the management mobile terminal; the key management system generates a signature digital certificate for the Bluetooth lock, an encryption public and private key, and a signature certificate for the key management system based on the public and private keys and the application message, and performs data initialization processing.

[0067] Specifically, the Bluetooth keypad lock's built-in encryption / decryption unit can generate truly random numbers. It uses an encryption chip that meets national commercial cryptography management requirements and has obtained a commercial cryptographic chip grading certification. It incorporates national cryptographic algorithms SM2 / SM3 / SM4. Before use, the Bluetooth keypad lock needs to be initialized with its associated key management system. Before initialization, it's necessary to determine whether the Bluetooth keypad lock is offline or online. In offline mode, the process involves the management mobile terminal's encryption chip generating a public-private key pair and a signature certificate application message, which is then imported offline into the key management system via a secure medium from a USB-Type-C interface. In online mode, the Bluetooth communication unit in the keypad lock exchanges public-private keys and the application message with the key management system through the management mobile terminal. After obtaining the public-private keys and the application message, the key management system generates the Bluetooth keypad lock's signature digital certificate, the encryption public-private key, and the key management system's signature certificate for data initialization.

[0068] S12: The initialized key management system assigns an unlocking key to the Bluetooth lock and stores the unlocking key in the local encryption / decryption unit;

[0069] In a specific implementation of this invention, the initialized key management system assigns an unlocking key to the Bluetooth lock and stores the unlocking key in a local encryption / decryption unit. This includes: the key management system assigning a corresponding unlocking key to the Bluetooth lock and encrypting the unlocking key using a symmetric key to obtain an encrypted unlocking key; the key management system encrypting the symmetric key using the public key of the Bluetooth lock to obtain an encrypted symmetric key; the key management system publishing the encrypted unlocking key and the encrypted symmetric key to a public or private network; the management mobile terminal obtaining the encrypted unlocking key and the encrypted symmetric key from the network and then sending them to the Bluetooth lock; and the Bluetooth lock sequentially unlocking itself using the encrypted symmetric key and the encrypted unlocking key to obtain an unlocking key, which is then stored in a local encryption / decryption unit.

[0070] Furthermore, the Bluetooth key lock sequentially unlocks the encrypted symmetric key and the encrypted unlocking key to obtain the unlocking key, including: decrypting the encrypted symmetric key using the private key of the Bluetooth key lock to obtain the symmetric key; and decrypting the encrypted unlocking key using the symmetric key to obtain the unlocking key.

[0071] Specifically, the key management system assigns a corresponding unlocking key M1 to the Bluetooth lock. This unlocking key is encrypted using a symmetric key S1 to obtain an encrypted unlocking key M2. Then, the symmetric key S1 is encrypted using the Bluetooth lock's public key to form an encrypted symmetric key S2. The key management system then publishes the encrypted unlocking key M2 and the encrypted symmetric key S2 to the public or private network. The management mobile terminal obtains the encrypted unlocking key M2 and the encrypted symmetric key S2 from the network and, through its connection with the Bluetooth lock, transmits the encrypted unlocking key M2 to the Bluetooth lock. The lock key M2 and the encrypted symmetric key S2 are sent to the Bluetooth lock. The management mobile terminal decrypts the encrypted unlocking key M2 and the encrypted symmetric key S2, and is only responsible for data forwarding. After obtaining the encrypted unlocking key M2 and the encrypted symmetric key S2, the Bluetooth lock uses its built-in private key to decrypt the encrypted symmetric key S2 to obtain the symmetric key S1. Then, it uses the symmetric key S1 to decrypt the encrypted unlocking key M2 to obtain the unlocking key M1. The Bluetooth lock then stores the unlocking key M1 in its local encryption / decryption unit.

[0072] S13: When the unlocking mobile terminal requests to establish an unlocking connection with the Bluetooth key lock, the Bluetooth key lock establishes a Bluetooth connection relationship with the unlocking mobile terminal based on the connection permission of the unlocking mobile terminal, wherein the unlocking mobile terminal is an encrypted unlocking mobile terminal or a general unlocking mobile terminal.

[0073] In a specific implementation of this invention, the Bluetooth key lock establishes a Bluetooth connection with the unlocking mobile terminal based on the connection permissions of the unlocking mobile terminal, including: before establishing a Bluetooth connection with the Bluetooth key lock, the unlocking mobile terminal needs to register on the key management system and hold a signature certificate, encryption public and private keys, and a signature certificate issued by the key management system; the unlocking mobile terminal obtains the unique ID of the Bluetooth key lock based on the signature certificate, encryption public and private keys, and the signature certificate of the key management system; the Bluetooth key lock establishes a Bluetooth connection with the unlocking mobile terminal based on the unique ID carried by the unlocking mobile terminal.

[0074] Furthermore, the Bluetooth lock establishes a Bluetooth connection with the unlocking mobile terminal based on the unique ID carried by the unlocking mobile terminal, including: the unlocking mobile terminal sending a Bluetooth broadcast message and searching for all Bluetooth locks within the Bluetooth signal range; when the unlocking mobile terminal is an encrypted unlocking mobile terminal, selecting the unique ID of the Bluetooth lock to be opened from all Bluetooth locks within the Bluetooth signal range, and when the encrypted unlocking mobile terminal has location permissions for the Bluetooth lock, the Bluetooth lock directly establishes a Bluetooth connection with the encrypted unlocking mobile terminal; when the unlocking mobile terminal is a universal unlocking mobile terminal, selecting the corresponding Bluetooth lock from all Bluetooth locks within the Bluetooth signal range, and sending an unlock request message to the selected Bluetooth lock, the unlock message carrying the unique ID of the Bluetooth lock; the Bluetooth lock establishes a Bluetooth connection with the universal unlocking mobile terminal based on the unique ID carried in the unlock message.

[0075] Specifically, before establishing a Bluetooth connection with the Bluetooth lock, the unlocking mobile terminal needs to register with the key management system and possess a signature certificate, encryption public and private keys, and the signature certificate of the key management system. It obtains the unique ID of the Bluetooth lock through the signature certificate, encryption public and private keys, and the signature certificate of the key management system. When establishing a Bluetooth connection, the Bluetooth lock establishes a Bluetooth connection with the unlocking mobile terminal based on the unique ID of the Bluetooth lock carried by the unlocking mobile terminal.

[0076] The specific process for establishing a Bluetooth connection is as follows: The unlocking mobile terminal sends a Bluetooth broadcast message and searches for all Bluetooth locks within the Bluetooth signal range. The connection establishment method varies depending on the type of unlocking mobile terminal. When the unlocking mobile terminal is an encrypted unlocking mobile terminal, it selects the unique ID of the Bluetooth lock to be unlocked from all Bluetooth locks within the Bluetooth signal range. If the encrypted unlocking mobile terminal has location permissions for the Bluetooth lock, the Bluetooth lock directly establishes a Bluetooth connection with the encrypted unlocking mobile terminal; otherwise, the encrypted unlocking mobile terminal has no right to access the Bluetooth lock. When the unlocking mobile terminal is a general unlocking mobile terminal, it selects the corresponding Bluetooth lock from all Bluetooth locks within the Bluetooth signal range and sends an unlock request message to the selected Bluetooth lock. This unlock request message carries the unique ID of the Bluetooth lock. The Bluetooth lock will verify the unique ID carried in the unlock request message and establish a Bluetooth connection with the general unlocking mobile terminal based on the verification result. That is, if the verification result is successful, a Bluetooth connection is established; if the verification result is unsuccessful, a Bluetooth connection cannot be established.

[0077] S14: After the Bluetooth keypad lock establishes an unlocking connection with the unlocking mobile terminal, the unlocking verification process corresponding to the Bluetooth keypad lock is invoked based on the type of the unlocking mobile terminal to perform unlocking verification processing.

[0078] In a specific implementation of this invention, the unlocking verification process based on the type of the unlocking mobile terminal and calling the corresponding unlocking verification procedure of the Bluetooth key lock includes: when the unlocking mobile terminal is an encrypted unlocking mobile terminal, the encrypted unlocking mobile terminal generates a new random number as a first symmetric key; uses the first symmetric key to encrypt the signature unlocking key of the key management system to obtain an encrypted signature unlocking key; uses the public key of the Bluetooth key lock to encrypt the first symmetric key to obtain a digital envelope; the encrypted unlocking mobile terminal sends the encrypted signature unlocking key and the digital envelope to the Bluetooth key lock; the Bluetooth key lock uses its private key to decrypt the digital envelope to obtain the first symmetric key; the Bluetooth key lock uses the first symmetric key to decrypt the encrypted signature unlocking key to obtain a signature unlocking key; the Bluetooth key lock uses the signature public key of the key management system to verify the signature unlocking key, and after successful verification, checks whether the signature unlocking key is consistent with the unlocking key stored by the Bluetooth key lock; if they are consistent, the unlocking operation is performed.

[0079] Furthermore, the step of invoking the unlock verification process corresponding to the Bluetooth keypad based on the type of the unlocking mobile terminal includes: when the unlocking mobile terminal is a general unlocking mobile terminal, the Bluetooth keypad sends an encryption certificate to the general unlocking mobile terminal, and the general unlocking mobile terminal decrypts the encryption certificate based on the public key in the key management system to obtain the encryption public key of the Bluetooth keypad; the key management system reviews the unlocking application permission of the general unlocking mobile terminal, and if the unlocking application permission is valid, obtains the unlocking key of the Bluetooth keypad and generates a new random number as the unlocking key. The second symmetric key of the unlocking key; the unlocking key is encrypted using the second symmetric key, and the resulting encrypted unlocking key is encapsulated into a message and sent back to the universal unlocking mobile terminal; the universal unlocking mobile terminal decrypts and verifies the received message, and after successful verification, obtains the second symmetric key of the key management system; the encrypted unlocking key is decrypted using the second symmetric key to obtain the unlocking key, and the unlocking key is stored in the running memory of the universal unlocking mobile terminal; the Bluetooth password lock establishes a one-way security connection with the universal unlocking mobile terminal and performs unlocking verification by transmitting the unlocking key.

[0080] Furthermore, the Bluetooth keypad and the universal unlocking mobile terminal establish a one-way security connection by transmitting the unlocking key for unlocking verification, including: the universal unlocking mobile terminal generates a random number A, encrypts the random number A using the public key of the Bluetooth keypad, and transmits the obtained first encryption result to the Bluetooth keypad; the Bluetooth keypad decrypts the first encryption result using its private key to obtain the random number A; the Bluetooth keypad generates a random number B, and stores it locally by setting K = A XOR B, encrypts the random number B using the random number A, and sends the resulting second encryption result to the universal unlocking mobile terminal; the universal unlocking mobile terminal decrypts the second encryption result using the random number B to obtain the random number B, and sets K = A XOR B; it encrypts the unlocking key using K and sends the encrypted unlocking key to the Bluetooth keypad; the Bluetooth keypad uses K to unlock the encrypted unlocking key to obtain the unlocking key, and verifies whether the unlocking key matches the stored unlocking key; if they match, it performs the unlocking operation.

[0081] Specifically, when unlocking the mobile terminal using encryption, the encryption unlocking mobile terminal generates a new random number as the first symmetric key N1; then, it uses the first symmetric key N1 to encrypt the signature unlocking key K1 signed by the key management system to obtain the encryption signature unlocking key K2. Next, it uses the public key of the Bluetooth lock to encrypt and protect N1, obtaining a digital envelope N2. Then, it sends the encryption signature unlocking key K2 and the digital envelope N2 to the Bluetooth lock. Upon receiving the encryption signature unlocking key K2 and the digital envelope N2, the Bluetooth lock uses its private key to decrypt the digital envelope N2 to obtain the first symmetric key N1. It then uses the first symmetric key N1 to decrypt the encryption signature unlocking key K2 to obtain the signature unlocking key K1. The key management system verifies the signature unlocking key K1. If the verification is successful, it checks whether the signature unlocking key K1 from the encryption unlocking mobile terminal matches the unlocking key stored locally by the encryption / decryption unit of the Bluetooth lock. If they match, the unlocking operation is performed; otherwise, the unlocking operation is not performed.

[0082] When the unlocking mobile terminal is a universal unlocking mobile terminal, the Bluetooth lock sends an encrypted certificate to the universal unlocking mobile terminal. The universal unlocking mobile terminal decrypts the encrypted certificate using the public key in the key management system to obtain the Bluetooth lock's encrypted public key. Then, the key management system verifies the universal unlocking mobile terminal's unlocking request authorization. If the unlocking request authorization is valid, it obtains the Bluetooth lock's unlocking key and generates a new random number as the second symmetric key for the unlocking key. The second symmetric key is then used to encrypt the unlocking key, and the resulting encrypted unlocking key is encapsulated into a message and sent back to the universal unlocking mobile terminal. The universal unlocking mobile terminal decrypts and verifies the received message. After successful verification, it obtains the second symmetric key from the key management system. The second symmetric key is then used to decrypt the encrypted unlocking key to obtain the unlocking key, which is stored in the universal unlocking mobile terminal's RAM. The Bluetooth lock and the universal unlocking mobile terminal establish a one-way security connection by transmitting the unlocking key for unlocking verification.

[0083] In the unlocking verification process, the universal unlocking mobile terminal generates a random number A, encrypts the random number A using the Bluetooth key, and sends the first encrypted result to the Bluetooth key. The Bluetooth key decrypts the first encrypted result using its private key to obtain the random number A. The Bluetooth key generates a random number B, XORs B with K and stores it locally. The random number B is then encrypted using the random number A, and the resulting second encrypted result is sent to the universal unlocking mobile terminal. The universal unlocking mobile terminal decrypts the second encrypted result using the random number B to obtain the random number B, and XORs B with K. The unlocking key is encrypted using K and sent to the Bluetooth key. The Bluetooth key uses K to unlock the device using the encrypted unlocking key, obtains the unlocking key, and verifies whether the unlocking key matches the stored unlocking key. If they match, the unlocking operation is performed; otherwise, the unlocking operation is not performed.

[0084] Meanwhile, the software of this Bluetooth combination lock can be upgraded online via Bluetooth connection; the Bluetooth combination lock has a removable rechargeable battery, which can be charged directly through the USB Type-C interface of the combination lock, or it can be removed for centralized charging; it can perform periodic power detection, and when the battery power drops to the warning line (such as dropping to 50%), it will automatically send a warning message via Bluetooth broadcast; and the Bluetooth combination lock supports emergency opening with a special key in the absence of a password.

[0085] In this embodiment of the invention, an unlocking key is assigned to the Bluetooth combination lock by a key management system and saved to the local encryption / decryption unit of the Bluetooth combination lock; then, different unlocking verification methods are selected according to the type of unlocking mobile terminal to perform unlocking verification processing, which can realize the security protection of the Bluetooth combination lock and increase the security performance of the Bluetooth combination lock.

[0086] Example 2, please refer to Figure 2 , Figure 2 This is a schematic diagram of the structure of the unlocking management device for the Bluetooth password lock in an embodiment of the present invention.

[0087] like Figure 2 As shown, an unlocking management device for a Bluetooth combination lock is disclosed. The Bluetooth combination lock comprises a central processing unit, a storage unit, an encryption / decryption unit, a Bluetooth communication unit, a battery unit, a mechanical lock unit, and a USB-Type-C interface. The device includes:

[0088] Initialization module 21: used to perform data initialization processing on the key management system associated with the Bluetooth key lock before the Bluetooth key lock is used, so as to obtain the initialized key management system;

[0089] In a specific implementation of this invention, the data initialization process for the key management system associated with the Bluetooth lock includes: if the Bluetooth lock is offline, the encryption chip of the management mobile terminal generates a pair of public and private keys and an application message for generating a signature certificate, and imports them offline into the key management system from the USB-Type-C interface using a secure medium; if the Bluetooth lock is online, the Bluetooth communication unit in the Bluetooth lock exchanges public and private keys and the application message with the key management system through the management mobile terminal; the key management system generates a signature digital certificate for the Bluetooth lock, an encryption public and private key, and a signature certificate for the key management system based on the public and private keys and the application message, and performs data initialization processing.

[0090] Specifically, the Bluetooth keypad lock's built-in encryption / decryption unit can generate truly random numbers. It uses an encryption chip that meets national commercial cryptography management requirements and has obtained a commercial cryptographic chip grading certification. It incorporates national cryptographic algorithms SM2 / SM3 / SM4. Before use, the Bluetooth keypad lock needs to be initialized with its associated key management system. Before initialization, it's necessary to determine whether the Bluetooth keypad lock is offline or online. In offline mode, the process involves the management mobile terminal's encryption chip generating a public-private key pair and a signature certificate application message, which is then imported offline into the key management system via a secure medium from a USB-Type-C interface. In online mode, the Bluetooth communication unit in the keypad lock exchanges public-private keys and the application message with the key management system through the management mobile terminal. After obtaining the public-private keys and the application message, the key management system generates the Bluetooth keypad lock's signature digital certificate, the encryption public-private key, and the key management system's signature certificate for data initialization.

[0091] Storage module 22: Used by the initialized key management system to assign an unlocking key to the Bluetooth lock and store the unlocking key in the local encryption / decryption unit;

[0092] In a specific implementation of this invention, the initialized key management system assigns an unlocking key to the Bluetooth lock and stores the unlocking key in a local encryption / decryption unit. This includes: the key management system assigning a corresponding unlocking key to the Bluetooth lock and encrypting the unlocking key using a symmetric key to obtain an encrypted unlocking key; the key management system encrypting the symmetric key using the public key of the Bluetooth lock to obtain an encrypted symmetric key; the key management system publishing the encrypted unlocking key and the encrypted symmetric key to a public or private network; the management mobile terminal obtaining the encrypted unlocking key and the encrypted symmetric key from the network and then sending them to the Bluetooth lock; and the Bluetooth lock sequentially unlocking itself using the encrypted symmetric key and the encrypted unlocking key to obtain an unlocking key, which is then stored in a local encryption / decryption unit.

[0093] Furthermore, the Bluetooth key lock sequentially unlocks the encrypted symmetric key and the encrypted unlocking key to obtain the unlocking key, including: decrypting the encrypted symmetric key using the private key of the Bluetooth key lock to obtain the symmetric key; and decrypting the encrypted unlocking key using the symmetric key to obtain the unlocking key.

[0094] Specifically, the key management system assigns a corresponding unlocking key M1 to the Bluetooth lock. This unlocking key is encrypted using a symmetric key S1 to obtain an encrypted unlocking key M2. Then, the symmetric key S1 is encrypted using the Bluetooth lock's public key to form an encrypted symmetric key S2. The key management system then publishes the encrypted unlocking key M2 and the encrypted symmetric key S2 to the public or private network. The management mobile terminal obtains the encrypted unlocking key M2 and the encrypted symmetric key S2 from the network and, through its connection with the Bluetooth lock, transmits the encrypted unlocking key M2 to the Bluetooth lock. The lock key M2 and the encrypted symmetric key S2 are sent to the Bluetooth lock. The management mobile terminal decrypts the encrypted unlocking key M2 and the encrypted symmetric key S2, and is only responsible for data forwarding. After obtaining the encrypted unlocking key M2 and the encrypted symmetric key S2, the Bluetooth lock uses its built-in private key to decrypt the encrypted symmetric key S2 to obtain the symmetric key S1. Then, it uses the symmetric key S1 to decrypt the encrypted unlocking key M2 to obtain the unlocking key M1. The Bluetooth lock then stores the unlocking key M1 in its local encryption / decryption unit.

[0095] Connection establishment module 23: When the unlocking mobile terminal requests to establish an unlocking connection with the Bluetooth password lock, the Bluetooth password lock establishes a Bluetooth connection relationship with the unlocking mobile terminal based on the connection permission of the unlocking mobile terminal, wherein the unlocking mobile terminal is an encrypted unlocking mobile terminal or a general unlocking mobile terminal;

[0096] In a specific implementation of this invention, the Bluetooth key lock establishes a Bluetooth connection with the unlocking mobile terminal based on the connection permissions of the unlocking mobile terminal, including: before establishing a Bluetooth connection with the Bluetooth key lock, the unlocking mobile terminal needs to register on the key management system and hold a signature certificate, encryption public and private keys, and a signature certificate issued by the key management system; the unlocking mobile terminal obtains the unique ID of the Bluetooth key lock based on the signature certificate, encryption public and private keys, and the signature certificate of the key management system; the Bluetooth key lock establishes a Bluetooth connection with the unlocking mobile terminal based on the unique ID carried by the unlocking mobile terminal.

[0097] Furthermore, the Bluetooth lock establishes a Bluetooth connection with the unlocking mobile terminal based on the unique ID carried by the unlocking mobile terminal, including: the unlocking mobile terminal sending a Bluetooth broadcast message and searching for all Bluetooth locks within the Bluetooth signal range; when the unlocking mobile terminal is an encrypted unlocking mobile terminal, selecting the unique ID of the Bluetooth lock to be opened from all Bluetooth locks within the Bluetooth signal range, and when the encrypted unlocking mobile terminal has location permissions for the Bluetooth lock, the Bluetooth lock directly establishes a Bluetooth connection with the encrypted unlocking mobile terminal; when the unlocking mobile terminal is a universal unlocking mobile terminal, selecting the corresponding Bluetooth lock from all Bluetooth locks within the Bluetooth signal range, and sending an unlock request message to the selected Bluetooth lock, the unlock message carrying the unique ID of the Bluetooth lock; the Bluetooth lock establishes a Bluetooth connection with the universal unlocking mobile terminal based on the unique ID carried in the unlock message.

[0098] Specifically, before establishing a Bluetooth connection with the Bluetooth lock, the unlocking mobile terminal needs to register with the key management system and possess a signature certificate, encryption public and private keys, and the signature certificate of the key management system. It obtains the unique ID of the Bluetooth lock through the signature certificate, encryption public and private keys, and the signature certificate of the key management system. When establishing a Bluetooth connection, the Bluetooth lock establishes a Bluetooth connection with the unlocking mobile terminal based on the unique ID of the Bluetooth lock carried by the unlocking mobile terminal.

[0099] The specific process for establishing a Bluetooth connection is as follows: The unlocking mobile terminal sends a Bluetooth broadcast message and searches for all Bluetooth locks within the Bluetooth signal range. The connection establishment method varies depending on the type of unlocking mobile terminal. When the unlocking mobile terminal is an encrypted unlocking mobile terminal, it selects the unique ID of the Bluetooth lock to be unlocked from all Bluetooth locks within the Bluetooth signal range. If the encrypted unlocking mobile terminal has location permissions for the Bluetooth lock, the Bluetooth lock directly establishes a Bluetooth connection with the encrypted unlocking mobile terminal; otherwise, the encrypted unlocking mobile terminal has no right to access the Bluetooth lock. When the unlocking mobile terminal is a general unlocking mobile terminal, it selects the corresponding Bluetooth lock from all Bluetooth locks within the Bluetooth signal range and sends an unlock request message to the selected Bluetooth lock. This unlock request message carries the unique ID of the Bluetooth lock. The Bluetooth lock will verify the unique ID carried in the unlock request message and establish a Bluetooth connection with the general unlocking mobile terminal based on the verification result. That is, if the verification result is successful, a Bluetooth connection is established; if the verification result is unsuccessful, a Bluetooth connection cannot be established.

[0100] Unlock verification module 24: After the Bluetooth keypad and the unlocking mobile terminal establish an unlocking connection, it calls the unlock verification process corresponding to the Bluetooth keypad based on the type of the unlocking mobile terminal to perform unlock verification processing.

[0101] In a specific implementation of this invention, the unlocking verification process based on the type of the unlocking mobile terminal and calling the corresponding unlocking verification procedure of the Bluetooth key lock includes: when the unlocking mobile terminal is an encrypted unlocking mobile terminal, the encrypted unlocking mobile terminal generates a new random number as a first symmetric key; uses the first symmetric key to encrypt the signature unlocking key of the key management system to obtain an encrypted signature unlocking key; uses the public key of the Bluetooth key lock to encrypt the first symmetric key to obtain a digital envelope; the encrypted unlocking mobile terminal sends the encrypted signature unlocking key and the digital envelope to the Bluetooth key lock; the Bluetooth key lock uses its private key to decrypt the digital envelope to obtain the first symmetric key; the Bluetooth key lock uses the first symmetric key to decrypt the encrypted signature unlocking key to obtain a signature unlocking key; the Bluetooth key lock uses the signature public key of the key management system to verify the signature unlocking key, and after successful verification, checks whether the signature unlocking key is consistent with the unlocking key stored by the Bluetooth key lock; if they are consistent, the unlocking operation is performed.

[0102] Furthermore, the step of invoking the unlock verification process corresponding to the Bluetooth keypad based on the type of the unlocking mobile terminal includes: when the unlocking mobile terminal is a general unlocking mobile terminal, the Bluetooth keypad sends an encryption certificate to the general unlocking mobile terminal, and the general unlocking mobile terminal decrypts the encryption certificate based on the public key in the key management system to obtain the encryption public key of the Bluetooth keypad; the key management system reviews the unlocking application permission of the general unlocking mobile terminal, and if the unlocking application permission is valid, obtains the unlocking key of the Bluetooth keypad and generates a new random number as the unlocking key. The second symmetric key of the unlocking key; the unlocking key is encrypted using the second symmetric key, and the resulting encrypted unlocking key is encapsulated into a message and sent back to the universal unlocking mobile terminal; the universal unlocking mobile terminal decrypts and verifies the received message, and after successful verification, obtains the second symmetric key of the key management system; the encrypted unlocking key is decrypted using the second symmetric key to obtain the unlocking key, and the unlocking key is stored in the running memory of the universal unlocking mobile terminal; the Bluetooth password lock establishes a one-way security connection with the universal unlocking mobile terminal and performs unlocking verification by transmitting the unlocking key.

[0103] Furthermore, the Bluetooth keypad and the universal unlocking mobile terminal establish a one-way security connection by transmitting the unlocking key for unlocking verification, including: the universal unlocking mobile terminal generates a random number A, encrypts the random number A using the public key of the Bluetooth keypad, and transmits the obtained first encryption result to the Bluetooth keypad; the Bluetooth keypad decrypts the first encryption result using its private key to obtain the random number A; the Bluetooth keypad generates a random number B, and stores it locally by setting K = A XOR B, encrypts the random number B using the random number A, and sends the resulting second encryption result to the universal unlocking mobile terminal; the universal unlocking mobile terminal decrypts the second encryption result using the random number B to obtain the random number B, and sets K = A XOR B; it encrypts the unlocking key using K and sends the encrypted unlocking key to the Bluetooth keypad; the Bluetooth keypad uses K to unlock the encrypted unlocking key to obtain the unlocking key, and verifies whether the unlocking key matches the stored unlocking key; if they match, it performs the unlocking operation.

[0104] Specifically, when unlocking the mobile terminal using encryption, the encryption unlocking mobile terminal generates a new random number as the first symmetric key N1; then, it uses the first symmetric key N1 to encrypt the signature unlocking key K1 signed by the key management system to obtain the encryption signature unlocking key K2. Next, it uses the public key of the Bluetooth lock to encrypt and protect N1, obtaining a digital envelope N2. Then, it sends the encryption signature unlocking key K2 and the digital envelope N2 to the Bluetooth lock. Upon receiving the encryption signature unlocking key K2 and the digital envelope N2, the Bluetooth lock uses its private key to decrypt the digital envelope N2 to obtain the first symmetric key N1. It then uses the first symmetric key N1 to decrypt the encryption signature unlocking key K2 to obtain the signature unlocking key K1. The key management system verifies the signature unlocking key K1. If the verification is successful, it checks whether the signature unlocking key K1 from the encryption unlocking mobile terminal matches the unlocking key stored locally by the encryption / decryption unit of the Bluetooth lock. If they match, the unlocking operation is performed; otherwise, the unlocking operation is not performed.

[0105] When the unlocking mobile terminal is a universal unlocking mobile terminal, the Bluetooth lock sends an encrypted certificate to the universal unlocking mobile terminal. The universal unlocking mobile terminal decrypts the encrypted certificate using the public key in the key management system to obtain the Bluetooth lock's encrypted public key. Then, the key management system verifies the universal unlocking mobile terminal's unlocking request authorization. If the unlocking request authorization is valid, it obtains the Bluetooth lock's unlocking key and generates a new random number as the second symmetric key for the unlocking key. The second symmetric key is then used to encrypt the unlocking key, and the resulting encrypted unlocking key is encapsulated into a message and sent back to the universal unlocking mobile terminal. The universal unlocking mobile terminal decrypts and verifies the received message. After successful verification, it obtains the second symmetric key from the key management system. The second symmetric key is then used to decrypt the encrypted unlocking key to obtain the unlocking key, which is stored in the universal unlocking mobile terminal's RAM. The Bluetooth lock and the universal unlocking mobile terminal establish a one-way security connection by transmitting the unlocking key for unlocking verification.

[0106] In the unlocking verification process, the universal unlocking mobile terminal generates a random number A, encrypts the random number A using the Bluetooth key, and sends the first encrypted result to the Bluetooth key. The Bluetooth key decrypts the first encrypted result using its private key to obtain the random number A. The Bluetooth key generates a random number B, XORs B with K and stores it locally. The random number B is then encrypted using the random number A, and the resulting second encrypted result is sent to the universal unlocking mobile terminal. The universal unlocking mobile terminal decrypts the second encrypted result using the random number B to obtain the random number B, and XORs B with K. The unlocking key is encrypted using K and sent to the Bluetooth key. The Bluetooth key uses K to unlock the device using the encrypted unlocking key, obtains the unlocking key, and verifies whether the unlocking key matches the stored unlocking key. If they match, the unlocking operation is performed; otherwise, the unlocking operation is not performed.

[0107] Meanwhile, the software of this Bluetooth combination lock can be upgraded online via Bluetooth connection; the Bluetooth combination lock has a removable rechargeable battery, which can be charged directly through the USB Type-C interface of the combination lock, or it can be removed for centralized charging; it can perform periodic power detection, and when the battery power drops to the warning line (such as dropping to 50%), it will automatically send a warning message via Bluetooth broadcast; and the Bluetooth combination lock supports emergency opening with a special key in the absence of a password.

[0108] In this embodiment of the invention, an unlocking key is assigned to the Bluetooth combination lock by a key management system and saved to the local encryption / decryption unit of the Bluetooth combination lock; then, different unlocking verification methods are selected according to the type of unlocking mobile terminal to perform unlocking verification processing, which can realize the security protection of the Bluetooth combination lock and increase the security performance of the Bluetooth combination lock.

[0109] Those skilled in the art will understand that all or part of the steps in the various methods of the above embodiments can be implemented by a program instructing related hardware. The program can be stored in a computer-readable storage medium, which may include: read-only memory (ROM), random access memory (RAM), disk or optical disk, etc.

[0110] Furthermore, the above description provides a detailed explanation of the unlocking management method and device for a Bluetooth password lock provided by the embodiments of the present invention. Specific examples have been used to illustrate the principles and implementation methods of the present invention. The description of the above embodiments is only for the purpose of helping to understand the method and core ideas of the present invention. At the same time, for those skilled in the art, there will be changes in the specific implementation methods and application scope based on the ideas of the present invention. Therefore, the content of this specification should not be construed as a limitation of the present invention.

Claims

1. A method for managing the unlocking of a Bluetooth combination lock, characterized in that, The Bluetooth combination lock comprises a central processing unit, a storage unit, an encryption / decryption unit, a Bluetooth communication unit, a battery unit, a mechanical lock unit, and a USB-Type-C interface; the method includes: Before using the Bluetooth key lock, the key management system associated with the Bluetooth key lock is initialized to obtain the initialized key management system. The initialized key management system assigns an unlocking key to the Bluetooth lock and stores the unlocking key in the local encryption / decryption unit; When the unlocking mobile terminal requests to establish an unlocking connection with the Bluetooth key lock, the Bluetooth key lock establishes a Bluetooth connection relationship with the unlocking mobile terminal based on the connection permission of the unlocking mobile terminal. The unlocking mobile terminal is an encrypted unlocking mobile terminal or a general unlocking mobile terminal. After the Bluetooth key lock establishes an unlocking connection with the unlocking mobile terminal, the unlocking verification process corresponding to the Bluetooth key lock is invoked based on the type of the unlocking mobile terminal to perform unlocking verification processing. The data initialization process for the key management system associated with the Bluetooth key lock includes: If the Bluetooth key lock is offline, the encryption chip of the mobile terminal generates a pair of public and private keys and an application message for generating a signature certificate, and imports them offline into the key management system from the USB-Type-C interface using a secure medium. If the Bluetooth key lock is online, the Bluetooth communication unit in the Bluetooth key lock exchanges public and private keys and application messages with the key management system through the management mobile terminal. The key management system generates a signed digital certificate for the Bluetooth lock, an encrypted public and private key, and a signature certificate for the key management system based on the public and private keys and the application message, and performs data initialization processing.

2. The unlocking management method according to claim 1, characterized in that, The initialized key management system assigns an unlocking key to the Bluetooth lock and stores the unlocking key in a local encryption / decryption unit, including: The key management system assigns a corresponding unlocking key to the Bluetooth keypad and encrypts the unlocking key using a symmetric key to obtain an encrypted unlocking key. The key management system uses the public key of the Bluetooth key lock to encrypt the symmetric key to obtain the encrypted symmetric key; The key management system publishes the encrypted unlocking key and the encrypted symmetric key to the public network or private network; After obtaining the encrypted unlocking key and the encrypted symmetric key from the network, the management mobile terminal sends the encrypted unlocking key and the encrypted symmetric key to the Bluetooth lock. The Bluetooth key lock sequentially unlocks the device using the encrypted symmetric key and the encrypted unlocking key to obtain the unlocking key, and stores the unlocking key in the local encryption / decryption unit.

3. The unlocking management method according to claim 2, characterized in that, The Bluetooth key lock obtains its unlocking key by sequentially unlocking the symmetric key and the encrypted unlocking key, including: The symmetric key is obtained by decrypting the encrypted symmetric key using the private key of the Bluetooth lock. The symmetric key is used to decrypt the encrypted unlocking key to obtain the unlocking key.

4. The unlocking management method according to claim 1, characterized in that, The Bluetooth keypad lock establishes a Bluetooth connection with the unlocking mobile terminal based on the connection permissions of the unlocking mobile terminal, including: Before establishing a Bluetooth connection with the Bluetooth key lock, the unlocking mobile terminal needs to register with the key management system and possess the signature certificate, encryption public and private keys, and signature certificate of the key management system issued by the key management system. The unlocking mobile terminal obtains the unique ID of the Bluetooth lock based on the signature certificate, the encryption public and private keys, and the signature certificate of the key management system; The Bluetooth keypad lock establishes a Bluetooth connection with the unlocking mobile terminal based on the unique ID carried by the unlocking mobile terminal.

5. The unlocking management method according to claim 4, characterized in that, The Bluetooth keypad lock establishes a Bluetooth connection with the unlocking mobile terminal based on the unique ID carried by the unlocking mobile terminal, including: The unlocking mobile terminal sends a Bluetooth broadcast message and searches for all Bluetooth keypad locks within Bluetooth signal range; When the unlocking mobile terminal is an encrypted unlocking mobile terminal, the unique ID of the Bluetooth lock to be opened is selected from all Bluetooth locks within the Bluetooth signal range, and when the encrypted unlocking mobile terminal has location permissions for the Bluetooth lock, the Bluetooth lock directly establishes a Bluetooth connection with the encrypted unlocking mobile terminal. When the unlocking mobile terminal is a universal unlocking mobile terminal, the corresponding Bluetooth lock is selected from all Bluetooth locks within the Bluetooth signal range, and a request to unlock message is sent to the selected Bluetooth lock. The unlock message carries the unique ID of the Bluetooth lock. The Bluetooth combination lock establishes a Bluetooth connection with the universal unlocking mobile terminal based on the unique ID carried in the unlock message.

6. The unlocking management method according to claim 1, characterized in that, The unlock verification process based on the type of the unlocking mobile terminal, which calls the corresponding unlock verification procedure for the Bluetooth keypad, includes: When the unlocking mobile terminal is an encrypted unlocking mobile terminal, the encrypted unlocking mobile terminal generates a new random number as the first symmetric key; Using the signature unlocking key signed by the first symmetric key encryption key management system, an encrypted signature unlocking key is obtained; The first symmetric key is encrypted using the public key of the Bluetooth key lock to obtain a digital envelope; The encrypted unlocking mobile terminal sends the encrypted signature unlocking key and the digital envelope to the Bluetooth combination lock; The Bluetooth key lock uses a private key to decrypt the digital envelope to obtain a first symmetric key; The Bluetooth keypad lock uses a first symmetric key to decrypt the encrypted signature unlocking key to obtain the signature unlocking key; The Bluetooth key lock uses the signature public key of the key management system to verify the signature unlocking key. After successful verification, it checks whether the signature unlocking key is consistent with the unlocking key stored in the Bluetooth key lock. If they are consistent, the unlocking operation is performed.

7. The unlocking management method according to claim 1, characterized in that, The unlock verification process based on the type of the unlocking mobile terminal, which calls the corresponding unlock verification procedure for the Bluetooth keypad, includes: When the unlocking mobile terminal is a universal unlocking mobile terminal, the Bluetooth key lock sends an encryption certificate to the universal unlocking mobile terminal, and the universal unlocking mobile terminal decrypts the encryption certificate based on the public key in the key management system to obtain the encryption public key of the Bluetooth key lock; The key management system reviews the unlocking request permission of the universal unlocking mobile terminal, and if the unlocking request permission is valid, it obtains the unlocking key of the Bluetooth password lock and generates a new random number as the second symmetric key of the unlocking key; The unlocking key is encrypted using the second symmetric key, and the resulting encrypted unlocking key is encapsulated into a message and sent back to the universal unlocking mobile terminal. The universal unlocking mobile terminal decrypts and verifies the signature of the received message, and obtains the second symmetric key of the key management system after the signature verification is successful. The second symmetric key is used to decrypt the encrypted unlocking key to obtain the unlocking key, and the unlocking key is stored in the running memory of the universal unlocking mobile terminal; The Bluetooth keypad lock establishes a one-way security connection with the universal unlocking mobile terminal and performs unlocking verification by transmitting the unlocking key.

8. The unlocking management method according to claim 7, characterized in that, The Bluetooth keypad lock establishes a one-way security connection with the universal unlocking mobile terminal and performs unlocking verification by transmitting the unlocking key, including: The universal unlocking mobile terminal generates a random number A, encrypts the random number A using the public key of the Bluetooth key lock, and transmits the first encryption result to the Bluetooth key lock. The Bluetooth key lock uses its private key to decrypt the first encryption result and obtain a random number A; The Bluetooth keypad generates a random number B, and stores it locally by XORing K=A with B. The random number B is encrypted using the random number A, and the resulting second encryption result is sent to the universal unlocking mobile terminal. The universal unlocking mobile terminal uses a random number B to decrypt the second encryption result, obtains a random number B, and sets K=A XOR B; The unlocking key is encrypted using K, and the encrypted unlocking key is sent to the Bluetooth keypad lock. The Bluetooth keypad lock uses K to unlock the encrypted unlocking key, obtains the unlocking key, and verifies whether the unlocking key matches the saved unlocking key. If they match, the unlocking operation is performed.

9. A Bluetooth combination lock unlocking management device, characterized in that, The Bluetooth combination lock comprises a central processing unit, a storage unit, an encryption / decryption unit, a Bluetooth communication unit, a battery unit, a mechanical lock unit, and a USB-Type-C interface; the device includes: Initialization module: used to perform data initialization processing on the key management system associated with the Bluetooth key lock before the Bluetooth key lock is used, so as to obtain the initialized key management system; Storage module: Used by the initialized key management system to assign an unlocking key to the Bluetooth lock and store the unlocking key in the local encryption / decryption unit; Connection establishment module: When the unlocking mobile terminal requests to establish an unlocking connection with the Bluetooth key lock, the Bluetooth key lock establishes a Bluetooth connection relationship with the unlocking mobile terminal based on the connection permission of the unlocking mobile terminal. The unlocking mobile terminal is an encrypted unlocking mobile terminal or a general unlocking mobile terminal. Unlock verification module: After the Bluetooth keypad and the unlocking mobile terminal establish an unlocking connection, the module calls the unlock verification process corresponding to the Bluetooth keypad based on the type of the unlocking mobile terminal to perform unlock verification processing. The data initialization process for the key management system associated with the Bluetooth key lock includes: If the Bluetooth key lock is offline, the encryption chip of the mobile terminal generates a pair of public and private keys and an application message for generating a signature certificate, and imports them offline into the key management system from the USB-Type-C interface using a secure medium. If the Bluetooth key lock is online, the Bluetooth communication unit in the Bluetooth key lock exchanges public and private keys and application messages with the key management system through the management mobile terminal. The key management system generates a signed digital certificate for the Bluetooth lock, an encrypted public and private key, and a signature certificate for the key management system based on the public and private keys and the application message, and performs data initialization processing.

Images