A double-encrypted intelligent door lock terminal and data processing method

Abstract

The application discloses a double-encrypted intelligent door lock terminal and a data processing method, which can improve the key data security of a networked intelligent door lock system and has the advantages of easy implementation and low cost. The terminal comprises an encryption and decryption chip, a door lock MCU, a communication module and an induction identification module. The communication module is used for input and output communication of data between the door lock and an Internet of Things platform. The encryption and decryption chip is used for SM1 encryption and decryption of input and output data. The door lock MCU is used for door lock control. The door lock MCU is internally provided with an SM4 encryption and decryption unit, which is used for SM4 encryption and decryption of input and output data. The data processing method based on the terminal performs double encryption and decryption on the issued and reported data messages, so that the key data is not leaked, and the communication security between the boards is particularly strengthened, so that the sending and receiving of the data messages of the intelligent door lock terminal on the whole communication link is safe.

Description

Technical Field

[0001] This invention relates to the field of networked smart locks, and more particularly to a dual-encrypted networked smart lock terminal, and a dual-encrypted smart lock data processing method based on this terminal. Background Technology

[0002] With the increasing popularity of smart locks, their security is receiving more and more attention. However, smart lock systems often emphasize storage security and external network communication security, while neglecting the security of board-level communication data between chip modules. For example, the communication between the lock's MCU and the communication module, and between the communication module and the system platform, often employs encryption methods for network communication. However, if the communication protocol is public, this encryption is ineffective at the physical connection between the MCU and the communication module, making it vulnerable to interception. Furthermore, some smart locks add encryption chips to their circuit board design to enhance data encryption, but often overlook the physical communication between the MCU and the encryption chip. After the encryption chip decrypts the data, the data is transmitted to the MCU in plaintext, making it easily intercepted.

[0003] Meanwhile, smart locks are storing increasing amounts of personal privacy information, such as facial features and fingerprints. This private information can be easily exploited if the system is insecure, causing significant losses. Summary of the Invention

[0004] The technical problem to be solved by this invention is to provide a smart lock with enhanced security through dual data encryption and decryption, which can improve the security of key data in networked smart lock systems and has the advantages of being easy to implement and low in cost.

[0005] To achieve the above objectives, the present invention adopts the following technical solution:

[0006] The present invention provides a dual-encryption smart door lock terminal, the terminal comprising an encryption / decryption chip, a door lock MCU, a communication module, and a sensing / identification module.

[0007] The communication module is used for data input and output communication between the door lock and the IoT platform;

[0008] The encryption / decryption chip is used to perform SM1 encryption and decryption on the input data;

[0009] The door lock MCU is used for door lock control; the door lock MCU has a built-in SM4 encryption / decryption unit, which is used to encrypt and decrypt input data using SM4.

[0010] The sensing and identification module is used to collect, store, and identify biometric information;

[0011] The encryption / decryption chip and the door lock MCU are connected through a first board-level communication interface, and the communication module and the door lock MCU are connected through a second board-level communication interface.

[0012] Preferably, it also includes a motor drive module, an alarm module, a password input module, and an RFID card identification module.

[0013] Preferably, the first board-level communication interface can be an SPI bus interface, but is not limited to the SPI bus.

[0014] Preferably, the second board-level communication interface can be a UART connection interface, but is not limited to UART connection.

[0015] Preferably, the sensing and recognition module includes a face acquisition and recognition module and / or a fingerprint acquisition and recognition module, etc.

[0016] This invention application also provides a dual-encryption smart door lock data processing method, characterized in that the method includes a data sending processing method and a data reporting processing method;

[0017] The method for processing the distributed data specifically includes the following steps:

[0018] Step 101: The platform application service sends out data packets. The platform encryption and decryption service first encrypts the sent data packets using the national standard SM4, and then encrypts the SM4-encrypted data using the national standard SM1.

[0019] Step 102: The platform encryption and decryption service forwards the ciphertext, which is double-encrypted by SM1 and SM4, to the platform application service; the platform application service then sends the ciphertext, which is double-encrypted by SM1 and SM4, to the corresponding door lock.

[0020] Step 103: The door lock MCU receives the ciphertext sent to it and forwards the ciphertext to the encryption / decryption chip.

[0021] Step 104: The encryption / decryption chip performs SM1 decryption on the received ciphertext and then forwards the SM1 decrypted ciphertext to the door lock MCU.

[0022] Step 105: The door lock MCU performs SM4 decryption on the ciphertext decrypted by SM1. The result of SM4 decryption is the plaintext data packet sent by the platform application service.

[0023] The method for processing the reported data specifically includes the following steps:

[0024] Step 201: The door lock MCU encrypts the reported data packet using SM4 and forwards the ciphertext encrypted with SM4 to the encryption / decryption chip.

[0025] Step 202: The encryption / decryption chip encrypts the ciphertext encrypted with SM4 again with SM1 and forwards it to the door lock MCU;

[0026] Step 203: The door lock MCU reports the ciphertext, which is doubly encrypted by SM1 and SM4, to the platform application service;

[0027] Step 204: The platform application service forwards the double-encrypted ciphertext to the platform encryption / decryption service. The platform encryption / decryption service first performs SM1 decryption on the ciphertext data; then it performs SM4 decryption on the ciphertext after SM1 decryption.

[0028] Step 205: The platform encryption and decryption service reports the plaintext data after two decryptions to the platform application service. The platform application service parses and processes the reported plaintext data according to the agreed protocol definition.

[0029] The smart door lock of this invention ensures data security at the link layer between various functional units because it employs multiple encryption methods. This invention is highly efficient, practical, and its implementation is simple, easy to implement, and highly reliable. Attached Figure Description

[0030] Figure 1 This is a circuit block diagram of a dual-encryption smart door lock terminal according to the present invention.

[0031] Figure 2 This is another circuit block diagram of the present invention.

[0032] Figure 3 This is a flowchart of the data processing method for sending data in a dual-encryption smart door lock data processing method of the present invention.

[0033] Figure 4 This is a flowchart of the data processing method for reporting data in a dual-encryption smart door lock data processing method of the present invention.

[0034] In the diagram: 101, encryption / decryption chip; 102, first board-level communication interface; 103, door lock MCU; 104, motor drive module; 105, sensor identification module; 106, second board-level communication interface; 107, communication module; 108, alarm module; 109, password input module; 110, RFID card identification module; 111, power control module. Detailed Implementation

[0035] The present invention will be further described below with reference to the accompanying drawings and specific embodiments.

[0036] like Figure 1As shown, this invention discloses a dual-encryption smart door lock terminal. The terminal includes an encryption / decryption chip 101, a door lock MCU 103, a communication module 107, a sensing and identification module 105, and a motor drive module 104, all mounted on a main control board. MCU stands for Microcontroller Unit, also known as a single-chip microcomputer. It integrates a central processing unit (CPU) with appropriately reduced frequency and specifications, along with peripheral interfaces such as memory, timer, USB, A / D converter, UART, PLC, DMA, and even LCD drive circuitry, onto a single chip, forming a chip-level computer for different combinations of control in various applications.

[0037] The communication module 107 is used for data input and output communication between the door lock and the IoT platform. The communication module 107 can be selected from Wi-Fi modules, Cat.1 modules, NB-IoT modules, etc., depending on the application scenario requirements.

[0038] The encryption / decryption chip 101 is used to encrypt and decrypt input data using SM1. The SM1 algorithm is a block cipher algorithm with a block length of 128 bits and a key length of 128 bits. Its security strength and related hardware / software implementation performance are comparable to AES. The algorithm is not publicly disclosed and exists only as an IP core within the chip. This algorithm has been used to develop a series of security products, including chips, smart IC cards, smart cryptographic keys, encryption cards, and encryption machines, which are widely used in e-government, e-commerce, and various applications of the national economy. Therefore, the encryption / decryption chip 101 used in this implementation can employ an existing, mature SM1 encryption / decryption chip.

[0039] The door lock MCU103 is used for door lock control; the door lock MCU103 has a built-in SM4 encryption / decryption unit, which is used to encrypt and decrypt input data using SM4.

[0040] The SM4 algorithm is a block cipher algorithm used in wireless LAN products. The algorithm has a block size of 128 bits and a key length of 128 bits. Both the encryption and key expansion algorithms employ a 32-round non-linear iterative structure. The decryption algorithm has the same structure as the encryption algorithm, except that the order of the round keys is reversed; the decryption round keys are the reverse of the encryption round keys.

[0041] The sensing and identification module 105 is used to collect, store, and identify biometric information.

[0042] The encryption / decryption chip 101 and the door lock MCU 103 are connected via a first board-level communication interface 102. The communication method between the encryption / decryption chip 101 and the door lock MCU 103 only needs to meet the data communication rate requirements; that is, it is not limited to a specific communication connection method, such as SPI, UART, CAN, I2C, etc. In a preferred embodiment, the first board-level communication interface 102 adopts an SPI bus interface.

[0043] The communication module 107 and the door lock MCU 103 are connected via a second board-level communication interface 106. The communication connection method between the communication module and the door lock MCU is not limited to a specific method, such as UART, SPI, CAN, I2C, etc. In a preferred embodiment, the second board-level communication interface 106 uses a UART connection interface.

[0044] like Figure 2 As shown, in another preferred embodiment, the dual-encrypted smart lock terminal also includes an alarm module 108, a password input module 109, an RFID card identification module 110, and a power control module 111.

[0045] The sensor recognition module 105, alarm module 108, password input module 109, RFID card recognition module 110, and power control module 111 are connected to the door lock MCU 103 via connection circuits on the circuit board. The power control module 111 is used to supply power to each circuit module.

[0046] The sensing and recognition module 105 includes a face acquisition and recognition module and / or a fingerprint acquisition and recognition module, etc.

[0047] The smart door lock of this invention ensures data security at the link layer between various functional units because it employs multiple encryption methods. This invention is highly efficient, practical, and its implementation is simple, easy to implement, and highly reliable.

[0048] This embodiment of a dual-encrypted smart lock terminal implements the following functions for critical data sent from the server:

[0049] The door lock communication module 107 receives the ciphertext sent by the server;

[0050] The door lock communication module 107 forwards the encrypted message to the door lock MCU 103;

[0051] The door lock MCU103 forwards the ciphertext to the encryption / decryption chip 101;

[0052] The encryption / decryption chip 101 performs SM1 decryption on the received ciphertext;

[0053] The encryption / decryption chip 101 then forwards the ciphertext decrypted by SM1 to the door lock MCU 103;

[0054] The door lock MCU103 then performs SM4 decryption on the ciphertext decrypted by SM1. The result of SM4 decryption is the plaintext data packet sent by the server. Therefore, the door lock MCU can parse and process these plaintext data packets according to the agreed protocol definition.

[0055] When the door lock MCU103 transfers critical data to the sensor recognition module, access authentication is required for data interaction with the sensor recognition module, and the sensor recognition module provides data encryption and decryption functions. Therefore, calling these functions can ensure the security of data interaction between the MCU and the sensor recognition module.

[0056] In this embodiment, a dual-encrypted smart lock terminal implements the following functions for key data reported by the smart lock:

[0057] The door lock MCU103 encrypts the reported data packets using SM4;

[0058] The door lock MCU103 forwards the ciphertext encrypted with SM4 to the encryption / decryption chip 101;

[0059] The encryption / decryption chip 101 then performs SM1 encryption on the ciphertext encrypted with SM4;

[0060] The encryption / decryption chip 101 forwards the ciphertext encrypted by SM1 to the door lock MCU;

[0061] The door lock MCU103 reports the ciphertext, which is double-encrypted by SM1 and SM4, to the server.

[0062] Furthermore, the aforementioned functions are always transmitted in encrypted form during the data interaction process of the smart lock, thus ensuring the data security of the link layer between the various functional units.

[0063] like Figure 3 As shown, this invention implements a dual-encryption smart lock data processing method. This method is based on the dual-encryption smart lock terminal in this embodiment. Relying on its dual encryption function, the method maintains the security of data transmission between data chip modules by encrypting the sent and reported data packets twice using SM1 and SM4 algorithms, preventing leakage and malicious intrusion into the smart lock system. This ensures the data security of the packets received by the smart lock terminal and avoids malicious attacks on the smart lock board-level data communication. This dual protection of data during the smart lock system data processing improves the security performance of the smart lock system and terminal, preventing malicious attacks.

[0064] The method includes a method for processing data that is sent out and a method for processing data that is reported.

[0065] like Figure 4 As shown, the data processing method specifically includes the following steps:

[0066] Step 101: The platform application service sends out data packets. The platform encryption and decryption service first encrypts the sent data packets using the national standard SM4, and then encrypts the SM4-encrypted data using the national standard SM1.

[0067] Step 102: The platform encryption and decryption service forwards the ciphertext, which is double-encrypted by SM1 and SM4, to the platform application service; the platform application service then sends the ciphertext, which is double-encrypted by SM1 and SM4, to the corresponding door lock.

[0068] Step 103: The door lock MCU 103 receives the ciphertext sent to it and forwards the ciphertext to the encryption / decryption chip 101.

[0069] Step 104: The encryption / decryption chip 101 performs SM1 decryption on the received ciphertext and then forwards the SM1 decrypted ciphertext to the door lock MCU 103.

[0070] Step 105: The door lock MCU103 performs SM4 decryption on the ciphertext decrypted by SM1. The result of SM4 decryption is the plaintext data packet sent by the platform application service.

[0071] like Figure 4 As shown, the data processing method specifically includes the following steps:

[0072] Step 201: The door lock MCU 103 encrypts the reported data packet using SM4 and forwards the ciphertext after SM4 encryption to the encryption / decryption chip 101.

[0073] Step 202: The encryption / decryption chip 101 encrypts the ciphertext encrypted with SM4 with SM1 and forwards it to the door lock MCU 103;

[0074] Step 203: The door lock MCU103 reports the ciphertext, which is doubly encrypted by SM1 and SM4, to the platform application service;

[0075] Step 204: The platform application service forwards the double-encrypted ciphertext to the platform encryption / decryption service. The platform encryption / decryption service first performs SM1 decryption on the ciphertext data; then it performs SM4 decryption on the ciphertext after SM1 decryption.

[0076] Step 205: The platform encryption and decryption service reports the plaintext data after two decryptions to the platform application service. The platform application service parses and processes the reported plaintext data according to the agreed protocol definition.

[0077] The method described in this application employs dual encryption and decryption processing for both the sent and reported data packets to prevent data leakage. It particularly enhances the security of communication between boards, preventing malicious intrusion into the smart lock system and ensuring the security of data packets sent and received by the smart lock terminal throughout the entire communication link. This improves the security performance of the smart lock system and terminal, preventing malicious attacks.

[0078] Because the door lock terminal sends and receives ciphertext encrypted with SM1 and SM4 from the platform, it cannot be intercepted during communication transmission in the communication module 107. The data received by the door lock MCU 103 from the communication module 107 and forwarded to the door lock encryption / decryption chip 101 is also ciphertext encrypted with SM1 and SM4. After this ciphertext is transmitted to the encryption / decryption chip 101 and decrypted by SM1, it still results in SM4-encrypted ciphertext. Therefore, the data transmitted by the encryption / decryption chip 101 to the door lock MCU 103 through the first board-level communication interface 102 after decryption by SM1 is also ciphertext encrypted with SM4, making this communication process secure.

[0079] Similarly, the door lock MCU103 encrypts the reported data using SM4 encryption before transmitting it to the door lock encryption / decryption chip 101 via the first board-level communication interface 102, ensuring the same level of security. This SM4 encrypted data is then further encrypted using SM1 encryption by the door lock encryption / decryption chip 101, resulting in double-encrypted ciphertext, which is also transmitted to the door lock MCU103 via the first board-level communication interface 102, ensuring secure transmission. Therefore, this door lock board-level encryption / decryption scheme ensures encrypted transmission throughout the entire board-level transmission process, guaranteeing data security.

[0080] The embodiments of the present invention have been described in detail above. Specific examples have been used to illustrate the principles and implementation methods of the present invention. The description of the above embodiments is only for the purpose of helping to understand the method and core ideas of the present invention. At the same time, for those skilled in the art, there will be changes in the specific implementation methods and application scope based on the ideas of the present invention. Therefore, the content of this specification should not be construed as a limitation of the present invention.

Claims

1. A data processing method for a dual-encrypted smart door lock terminal, characterized in that, The terminal includes an encryption / decryption chip (101), a door lock MCU (103), a communication module (107), and a sensor identification module (105). The communication module (107) is used for data input and output communication between the door lock and the Internet of Things platform; The encryption / decryption chip (101) is used to perform SM1 encryption / decryption on the input data; The door lock MCU (103) is used for door lock control; the door lock MCU (103) has a built-in SM4 encryption and decryption unit, which is used to encrypt and decrypt input data using SM4; The sensing and identification module (105) is used to collect, store, and identify biometric information; The data processing method for the dual-encrypted smart lock terminal includes a data sending processing method and a data reporting processing method; The method for processing the distributed data specifically includes the following steps: Step 101: The platform application service sends out data packets. The platform encryption and decryption service first encrypts the sent data packets using the national standard SM4, and then encrypts the SM4-encrypted data using the national standard SM1. Step 102: The platform encryption and decryption service forwards the ciphertext, which is double-encrypted by SM1 and SM4, to the platform application service; the platform application service then sends the ciphertext, which is double-encrypted by SM1 and SM4, to the corresponding door lock. Step 103: The door lock MCU (103) receives the ciphertext sent to it and forwards the ciphertext to the encryption / decryption chip (101). Step 104: The encryption / decryption chip (101) decrypts the received ciphertext using SM1 and then forwards the ciphertext after SM1 decryption to the door lock MCU (103). Step 105, the door lock MCU (103) performs SM4 decryption on the ciphertext after SM1 decryption. The plaintext data packet obtained after SM4 decryption is the one sent by the platform application service. The method for processing the reported data specifically includes the following steps: Step 201: The door lock MCU (103) encrypts the reported data message using SM4 and forwards the ciphertext after SM4 encryption to the encryption / decryption chip (101). Step 202: The encryption / decryption chip (101) encrypts the ciphertext encrypted with SM4 with SM1 and forwards it to the door lock MCU (103). Step 203: The door lock MCU (103) reports the ciphertext, which is doubly encrypted by SM1 and SM4, to the platform application service; Step 204: The platform application service forwards the double-encrypted ciphertext to the platform encryption / decryption service. The platform encryption / decryption service first performs SM1 decryption on the ciphertext data; then it performs SM4 decryption on the ciphertext after SM1 decryption. Step 205: The platform encryption and decryption service reports the plaintext data after two decryptions to the platform application service. The platform application service parses and processes the reported plaintext data according to the agreed protocol definition.

2. The data processing method for a dual-encrypted smart door lock terminal according to claim 1, characterized in that, The encryption / decryption chip (101) and the door lock MCU (103) are connected through a first board-level communication interface (102), and the communication module (107) and the door lock MCU (103) are connected through a second board-level communication interface (106).

3. The data processing method for a dual-encrypted smart door lock terminal according to claim 1, characterized in that, The terminal also includes a motor drive module (104), an alarm module (108), a password input module (109), an RFID card identification module (110), and a power control module (111).

4. The data processing method for a dual-encrypted smart door lock terminal according to claim 2, characterized in that, The first board-level communication interface (102) adopts an SPI bus interface, but is not limited to the SPI bus.

5. The data processing method for a dual-encrypted smart door lock terminal according to claim 2, characterized in that, The second board-level communication interface (106) adopts a UART connection interface, but is not limited to UART connection.

6. The data processing method for a dual-encrypted smart door lock terminal according to claim 1, characterized in that, The sensing and recognition module (105) includes a face acquisition and recognition module and / or a fingerprint acquisition and recognition module.

Images