Control method and device and intelligent equipment

By using the dual ranging scheme of BLE module and UWB module on smart devices, the attack is detected by comparing the duration associated with the ranging results, the unreliability problem of UWB technology under relay attacks is solved, and the security of the device is improved sex.

CN119152599APending Publication Date: 2024-12-17YINWANG INTELLIGENT TECHNOLOGIES CO LTD
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202310637880.2
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2023-05-31
Publication Date
2024-12-17

AI Technical Summary

Technical Problem

The existing range measurement scheme based on UWB technology is unreliable in the face of relay attacks. The attacker can reduce the flight time calculated by the UWB module by injecting malicious UWB signals, thereby making the output range measurement result much lower than the actual distance. Causes the vehicle to be controlled by the attacker.

Method used

Ranging the second device through two ranging modules (BLE module and UWB module) on the smart device, and verifying whether the ranging module is attacked by comparing the duration associated with the ranging results of the two modules, thereby improving The attack detection rate of the ranging module and ranging signal is improved to improve the safety of the equipment.

Benefits of technology

By verifying the duration associated with the distance measurement results of the two ranging modules, it can effectively detect that the ranging module is attacked, ensuring the security of the device and avoiding misunderstanding or misoperation caused by the attack.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119152599A_ABST
    Figure CN119152599A_ABST
Patent Text Reader

Abstract

The invention discloses a control method and device and intelligent equipment. The method comprises the following steps: determining a first duration and a second duration; wherein the first duration is associated with a distance measurement result of the BLE distance measurement module, the distance measurement result of the BLE distance measurement module indicates the distance between the intelligent device and the key device at the first moment, the second duration is associated with a distance measurement result of the UWB distance measurement module, and the distance measurement result of the UWB distance measurement module indicates the distance between the intelligent device and the key device at the second moment. The difference between the first moment and the second moment is smaller than or equal to first preset duration; when the difference value between the first duration and the second duration is smaller than or equal to the second preset duration, the intelligent device is controlled to execute the control instruction of the key device; or when the difference value is larger than the second preset duration, the intelligent device is controlled to carry out distance measurement alarm and / or ignore the control instruction of the key device. The technical scheme of the invention can be applied to intelligent equipment such as a new energy vehicle, and the safety of the intelligent equipment can be improved.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present application relates to the field of security control, and more specifically, to a control method, apparatus and intelligent device. Background Art

[0002] Digital car keys are convenient and therefore popular among users, and the rate of digital car keys is increasing year by year. However, in recent years, digital keys have become one of the most popular cyber attack surfaces for hackers. For example, according to data from Tracker, the largest lost vehicle recovery company in the UK, 92% and 93% of stolen vehicles in 2019 and 2020, respectively, were stolen through vulnerabilities in passive keyless entry (PKE) technology.

[0003] When using a digital key to unlock a vehicle, the distance between the digital key and the vehicle is calculated by the strength of the unlocking signal. When the distance is appropriate, the vehicle can be unlocked. Therefore, an attacker can perform a relay attack by simply amplifying the signal. In order to prevent relay attacks against digital keys, the Car Connectivity Consortium (CCC) released the "Third Generation Digital Key Specification" in July 2021, which clearly proposed the introduction of ultra-wideband (UWB) technology based on the IEEE802.15.4z standard to achieve secure ranging and locate digital keys.

[0004] However, the ranging scheme based on UWB technology is also unreliable. Attackers can inject malicious UWB signals to reduce the flight time calculated by the UWB module, causing the output ranging result to be far lower than the actual distance, causing the vehicle to be controlled by the attacker.

[0005] In view of this, a more reliable control scheme needs to be developed urgently. Summary of the invention

[0006] The present application provides a control method, an apparatus and an intelligent device. When a second device remotely controls a first device, the second device is ranged by two ranging modules of the first device. The ranging results of the two ranging modules are mutually verified, which helps to improve the detection rate of attacks against the ranging modules and / or ranging signals, thereby improving the security of the first device.

[0007] In the first aspect, a control method is provided, which can be executed by a smart device; or, it can also be executed by a key device or a cloud server that communicates with the smart device; or, it can also be executed by a computing platform of the smart device (or key device / cloud server); or, it can also be executed by a chip or circuit used for the smart device (or key device / cloud server), which is not limited in the present application.

[0008] The method includes: determining a first duration and a second duration; wherein the first duration is associated with a first ranging result of a first ranging module, the first ranging result indicates a first distance between a first device and a second device at a first moment, the second duration is associated with a second ranging result of a second ranging module, the second ranging result indicates a second distance between the first device and the second device at a second moment, the duration between the first moment and the second moment is less than or equal to a first preset duration, and the second device is used to control the first device; when the first duration and the second duration meet a preset condition, a preset operation is performed, and the preset operation is associated with the first device.

[0009] Exemplarily, the first device may be the above-mentioned smart device, and the second device may be the above-mentioned key device.

[0010] Exemplarily, the first ranging module is a Bluetooth low energy (BLE) module, and the second ranging module is a UWB module.

[0011] Exemplarily, the first duration is associated with the first ranging result of the first ranging module, which can be understood as: the first duration is determined according to the sending and receiving time of the signal sent by the first ranging module for obtaining the first ranging result; similarly, the second duration is associated with the second ranging result of the second ranging module, which can also be understood as: the second duration is determined according to the sending and receiving time of the signal sent by the second ranging module for obtaining the second ranging result.

[0012] In some possible implementations, when the ranging module is attacked by an attacker, the first duration and the second duration may be shortened or extended to varying degrees. For example, when the BLE module is based on phase difference ranging, the attacker can achieve a reduced distance attack through a phase slope flip attack, but the flip will cause the BLE signal transmission time to be extended, which in turn causes the BLE module to output the ranging result at a later time than the real time, so that the first duration is longer than the real duration. For another example, when the attacker introduces a false UWB signal to achieve a reduced distance attack on the UWB module, the flight time calculated by the UWB module may be reduced, resulting in a shortening of the second duration. Therefore, by comparing the durations associated with the ranging results output by the two ranging modules, it can be determined whether one or both of the BLE module and the UWB module are under attack.

[0013] In the above technical solution, it is possible to verify whether the two ranging modules are under attack based on the duration associated with the ranging results of the two ranging modules, and control the smart device based on the verification result, which helps to improve the security of the smart device. In particular, when both ranging modules are under attack by reducing the distance, so that the difference between the ranging results of the two ranging modules is less than or equal to the preset distance threshold, the difference between the durations associated with the ranging results of the two ranging modules can effectively detect that the ranging modules are under attack, and the above simple verification means can be used to detect more complex attack situations, thereby ensuring the security of the device.

[0014] In some possible implementations, the control method is executed by a computing platform of the first device, and when the computing platform of the first device determines that the first duration and the second duration meet corresponding preset conditions, a preset operation is executed.

[0015] In some possible implementations, the above-mentioned control method is executed by a second device. When the second device determines that the first time length and the second time length meet the corresponding preset conditions, the second device sends corresponding control information to the first device to enable the first device to perform a preset operation; or, when the second device determines that the first time length and the second time length meet the corresponding preset conditions, the second device sends a notification of the verification result to the first device to enable the first device to perform the preset operation.

[0016] In combination with the first aspect, in certain implementations of the first aspect, the method also includes: receiving control request information sent by the second device, the control request information being used to request the first device to perform a first preset operation; when the first duration and the second duration meet a preset condition, performing the preset operation, including: when the difference between the first duration and the second duration is less than or equal to the second preset duration, controlling the first device to perform the first preset operation according to the control request information; or, when the difference between the first duration and the second duration is greater than the second preset duration, ignoring the control request information.

[0017] Exemplarily, when the first device is a vehicle, the first preset operation may include but is not limited to: controlling operations of one or more components in the vehicle, such as unlocking doors, starting the vehicle, turning on the cabin air conditioning, etc.; when the first device is a smart door lock, the first preset operation may include unlocking the door lock; when the first device is other smart devices, the first preset operation may also be other operations that require security verification before they can be executed.

[0018] In the above technical solution, when the difference between the first time length and the second time length is less than or equal to the second preset time length, it is determined that the ranging module has not been attacked, and then the smart device is controlled to execute the control request of the key device; when the difference between the first time length and the second time length is greater than the second preset time length, it is determined that the ranging module has been attacked, and the ranging result of at least one of the two ranging modules is unreliable. At this time, the smart device ignores the control request, which helps to ensure the security of the smart device.

[0019] In combination with the first aspect, in certain implementations of the first aspect, controlling the first device to perform the first preset operation according to the control request information includes: when the difference between the first distance and the second distance is less than or equal to the first preset distance, controlling the first device to perform the first preset operation according to the control request information.

[0020] In some possible implementations, the BLE module determines the ranging result based on the RSSI principle, the attacker only attacks the BLE module, not the UWB module, and the attacker's attack on the BLE module does not cause a delay in the moment when the BLE module inputs the result. At this time, the difference in the distance between the first device and the second device determined by the UWB module and the BLE module can be used to determine whether the ranging module is under attack.

[0021] In the above technical solution, judging whether the ranging result is true or not is based on the comparison results of the distances determined by the two ranging modules and the comparison results of the time periods respectively associated with the two ranging results, which helps to improve the reliability of the judgment result and further ensure the security of the smart device.

[0022] In combination with the first aspect, in certain implementations of the first aspect, performing a preset operation includes: when the difference between the first duration and the second duration is greater than the preset duration, prompting a user that the distance measurement of the first device is abnormal.

[0023] Exemplarily, the preset time length and the second preset time length may be the same time length, or may be different time lengths. For example, the preset time length may be 2 microseconds (μs).

[0024] In the above technical solution, when the difference between the time lengths associated with the ranging results of the two ranging modules is greater than a preset threshold, it can be considered that at least one of the two ranging modules is attacked by an attacker. At this time, a ranging alarm is issued to prompt the user to take corresponding measures to ensure the security of the smart device.

[0025] In combination with the first aspect, in certain implementations of the first aspect, determining the first duration and the second duration includes: when the first distance is less than or equal to the second preset distance, and the second distance is less than or equal to the second preset distance, determining the first duration and the second duration.

[0026] In the above technical solution, when the distance between the key device and the smart device is less than or equal to a preset threshold, the process of determining the authenticity of the distance measurement result is started, which helps to save energy consumption of the smart device.

[0027] In some possible implementations, when at least one of the first distance and the second distance is less than or equal to the second preset distance, the two ranging modules are controlled to perform a preset number of ranging, respectively, and when the distances indicated by the multiple ranging results of the two ranging modules are less than or equal to the second preset distance, the first duration and the second duration are determined. Exemplarily, the preset number of times may be 3 times, or 5 times, or may also be other values.

[0028] In some possible implementations, when at least one of the first distance and the second distance is greater than a second preset distance, a distance measurement result alarm may be issued.

[0029] In combination with the first aspect, in some implementations of the first aspect, the method further includes: when the third distance between the first device and the second device determined by the first ranging module is less than or equal to a third preset distance, controlling the second ranging module to start ranging.

[0030] In the above technical solution, when the distance between the smart device and the key device is less than a preset threshold, the two modules are controlled to start distance measurement, which helps to save energy consumption required for distance measurement.

[0031] In a second aspect, a control method is provided, the method comprising: determining a first ranging result of a first ranging module, the first ranging result indicating a first distance between a first device and a second device at a first moment, determining a second ranging result of a second ranging module, the second ranging result indicating a second distance between the first device and the second device at a second moment, wherein a duration between the first moment and the second moment is less than or equal to a first preset duration, and the second device is used to control the first device; when the first distance and the second distance meet a preset condition, performing a preset operation, the preset operation being associated with the first device.

[0032] In the above technical solution, it is possible to verify whether the two ranging modules are under attack based on the distance determined by the two ranging modules, and control the smart device based on the verification result, which helps to improve the security of the smart device. When at least one of the two ranging modules is attacked by a reduced distance attack, the difference between the ranging results of the two ranging modules may be greater than a preset threshold. Therefore, the difference between the ranging results of the two ranging modules can effectively detect that the ranging module is under attack, thereby ensuring the security of the device.

[0033] For the description of the beneficial effects of other possible implementation methods of the second aspect, please refer to the description of the beneficial effects of the first aspect, which will not be repeated here.

[0034] In combination with the second aspect, in certain implementations of the second aspect, the method also includes: receiving control request information, the control request information being used to request the first device to perform a first preset operation; when the first distance and the second distance meet a preset condition, performing the preset operation, including: when the difference between the first distance and the second distance is less than or equal to the first preset distance, controlling the first device to perform the first preset operation according to the control request information; or, when the difference between the first distance and the second distance is greater than the first preset distance, ignoring the control request information.

[0035] In combination with the second aspect, in certain implementations of the second aspect, the method also includes: determining a first time length associated with the first ranging result, and a second time length associated with the second ranging result; controlling the first device to perform the first preset operation according to the control request information, including: when the difference between the first time length and the second time length is less than or equal to the second preset time length, controlling the first device to perform the first preset operation according to the control request information.

[0036] In combination with the second aspect, in certain implementations of the second aspect, controlling the first device to perform the first preset operation according to the control request information includes: when the first distance is less than or equal to the second preset distance, and the second distance is less than or equal to the second preset distance, controlling the first device to perform the first preset operation according to the control request information.

[0037] In combination with the second aspect, in some implementations of the second aspect, performing a preset operation includes: when the difference between the first distance and the second distance is greater than a preset distance, prompting a user that the distance measurement of the first device is abnormal.

[0038] Exemplarily, the preset distance and the first preset distance may be the same value, or may be different values. For example, the preset distance may be 11 meters.

[0039] In combination with the second aspect, in some implementations of the second aspect, the method further includes: when the third distance between the first device and the second device determined by the first ranging module is less than or equal to a third preset distance, controlling the second ranging module to start ranging.

[0040] In combination with the second aspect, in some implementations of the second aspect, the first ranging module is a BLE module, and the second ranging module is a UWB module.

[0041] In a third aspect, a control device is provided, the device comprising: a determination unit, used to determine a first duration and a second duration; wherein the first duration is associated with a first ranging result of a first ranging module, the first ranging result indicates a first distance between a first device and a second device at a first moment, the second duration is associated with a second ranging result of a second ranging module, the second ranging result indicates a second distance between the first device and the second device at a second moment, the duration between the first moment and the second moment is less than or equal to a first preset duration, and the second device is used to control the first device; and a processing unit, used to perform a preset operation when the first duration and the second duration meet a preset condition, and the preset operation is associated with the first device.

[0042] In combination with the third aspect, in certain implementations of the third aspect, the device also includes a transceiver unit, which is used to: receive control request information, where the control request information is used to request the first device to perform a first preset operation; the processing unit is used to: when the difference between the first duration and the second duration is less than or equal to the second preset duration, control the first device to perform the first preset operation according to the control request information; or, when the difference between the first duration and the second duration is greater than the first preset duration, ignore the control request information.

[0043] In combination with the third aspect, in certain implementations of the third aspect, the processing unit is used to: when the difference between the first distance and the second distance is less than or equal to the first preset distance, control the first device to perform the first preset operation according to the control request information.

[0044] In combination with the third aspect, in certain implementations of the third aspect, the processing unit is used to: when the difference between the first duration and the second duration is greater than a preset duration, prompt a user that the ranging of the first device is abnormal.

[0045] In combination with the third aspect, in certain implementations of the third aspect, the determination unit is used to determine the first duration and the second duration when the first distance is less than or equal to the second preset distance, and the second distance is less than or equal to the second preset distance.

[0046] In combination with the third aspect, in certain implementations of the third aspect, the processing unit is used to: when the third distance between the first device and the second device determined by the first ranging module is less than or equal to a third preset distance, control the second ranging module to start ranging.

[0047] In combination with the third aspect, in some implementations of the third aspect, the first ranging module is a BLE module, and the second ranging module is a UWB module.

[0048] In a fourth aspect, a control device is provided, the device comprising: a determination unit, used to: determine a first ranging result of a first ranging module, the first ranging result indicating a first distance between a first device and a second device at a first moment, determine a second ranging result of a second ranging module, the second ranging result indicating a second distance between the first device and the second device at a second moment, wherein a duration between the first moment and the second moment is less than or equal to a first preset duration, and the second device is used to control the first device; and a processing unit, used to perform a preset operation when the first distance and the second distance meet a preset condition, and the preset operation is associated with the first device.

[0049] In combination with the fourth aspect, in certain implementations of the fourth aspect, the device also includes a transceiver unit, used to: receive control request information, the control request information is used to request the first device to perform a first preset operation; the processing unit is used to: when the difference between the first distance and the second distance is less than or equal to the first preset distance, control the first device to perform the first preset operation according to the control request information; or, when the difference between the first distance and the second distance is greater than the first preset distance, ignore the control request information.

[0050] In combination with the fourth aspect, in certain implementations of the fourth aspect, the determination unit is further used to: determine a first duration associated with the first ranging result, and a second duration associated with the second ranging result; the processing unit is used to: when the difference between the first duration and the second duration is less than or equal to a second preset duration, control the first device to perform the first preset operation according to the control request information.

[0051] In combination with the fourth aspect, in certain implementations of the fourth aspect, the processing unit is used to: when the first distance is less than or equal to the second preset distance, and the second distance is less than or equal to the second preset distance, control the first device to perform the first preset operation according to the control request information.

[0052] In combination with the fourth aspect, in certain implementations of the fourth aspect, the processing unit is used to: when the difference between the first distance and the second distance is greater than a preset distance, prompt a user that the distance measurement of the first device is abnormal.

[0053] In combination with the fourth aspect, in certain implementations of the fourth aspect, the processing unit is further used to: when the third distance between the first device and the second device determined by the first ranging module is less than or equal to a third preset distance, control the second ranging module to start ranging.

[0054] In combination with the fourth aspect, in some implementations of the fourth aspect, the first ranging module is a BLE module, and the second ranging module is a UWB module.

[0055] In a fifth aspect, a control method is provided, the method comprising: a first device receives security level indication information, determines a security verification strategy according to the security level indication information, and verifies the authenticity of the distance between the first device and the second device measured by the ranging module according to the security verification strategy; wherein the second device is used to control the first device, the ranging module comprises a first ranging module and a second ranging module, and the security verification strategy comprises: verifying the authenticity of the ranging result according to whether the difference between the first duration and the second duration is less than or equal to the second preset duration, and / or verifying the authenticity of the ranging result according to whether the difference between the first distance and the second distance is less than or equal to the first preset distance; the first duration is associated with a first ranging result of the first ranging module, the first ranging result indicates a first distance between the first device and the second device at a first moment, the second duration is associated with a second ranging result of the second ranging module, the second ranging result indicates a second distance between the first device and the second device at the second moment, wherein the duration between the first moment and the second moment is less than or equal to the first preset duration.

[0056] It can be understood that the above-mentioned distance measurement result is the distance between the first device and the second device measured by the distance measurement module, and the distance measurement result includes the first distance measurement result and the second distance measurement result.

[0057] Exemplarily, the security level indication information may be sent by a legitimate device that controls the first device, for example, when the legitimate device receives a ranging signal sent by the first ranging module (and / or the second ranging module) of the first device, the security level indication information is sent to the first device; or, the legitimate device periodically sends the security level indication information to the first device. Alternatively, the security level indication information may also be sent by a cloud server, for example, the cloud server periodically sends the security level indication information to the first device.

[0058] In some possible implementations, the legal device that controls the first device includes a second device.

[0059] In some possible implementations, the first ranging module is a BLE module, and the second ranging module is a UWB module.

[0060] In some possible implementations, the security level indication information is used to directly indicate to the first device the security verification strategy used by the first device. For example, the security level indication information includes first indication information, second indication information, and third indication information, wherein the first indication information is used to indicate that the first device verifies the authenticity of the distance measurement result according to whether the difference between the first distance and the second distance is less than or equal to the first preset distance (hereinafter referred to as security verification strategy 1); the second indication information is used to indicate that the first device verifies the authenticity of the distance measurement result according to whether the difference between the first duration and the second duration is less than or equal to the second preset duration (hereinafter referred to as security verification strategy 2); the third indication information is used to indicate that the first device verifies the authenticity of the distance measurement result according to whether the difference between the first duration and the second duration is less than or equal to the second preset duration, and whether the difference between the first distance and the second distance is less than or equal to the first preset distance (hereinafter referred to as security verification strategy 3).

[0061] In one implementation, when one of the first ranging module and the second ranging module is attacked by an attacker, the difference between the first distance and the second distance will be greater than the first preset distance. At this time, it can be determined that the ranging result is abnormal, that is, the verification of the authenticity of the ranging result fails.

[0062] In another implementation, when both the first ranging module and the second ranging module are attacked by an attacker, the difference between the first distance and the second distance may be less than or equal to the first preset distance. At this time, it is unreliable to verify the authenticity of the ranging result only based on the first distance and the second distance. Therefore, the first time length and the second time length can be introduced to verify the authenticity of the ranging result. When both the first ranging module and the second ranging module are attacked by an attacker, the difference between the first time length and the second time length may be greater than the second preset time length. At this time, it can be determined that the ranging result is abnormal, that is, the verification of the authenticity of the ranging result fails.

[0063] In another implementation, when the first ranging module and / or the second ranging module is attacked by an attacker, the difference between the first distance and the second distance is less than or equal to the first preset distance, or the difference between the first duration and the second duration is less than or equal to the second preset duration. At this time, the authenticity of the ranging result can be verified based on whether the difference between the first duration and the second duration is less than or equal to the second preset duration, and whether the difference between the first distance and the second distance is less than or equal to the first preset distance. It can be understood that when the attacker attacks the first ranging module and / or the second ranging module, if the attack is successful, the probability that the difference between the first distance and the second distance is less than or equal to the first preset distance and the difference between the first duration and the second duration is less than or equal to the second preset duration is low.

[0064] It is understandable that the reliability of the above security verification strategies 1 to 3 is gradually increased, and at the same time, the computing power required for verification is also gradually increased. Using the above security verification strategy 3 to verify the authenticity of the distance measurement result can ensure the higher security of the first device.

[0065] In some possible implementations, the security level indication information is used to indicate the security level that the first device is currently in. The security verification strategy is determined according to the security level indication information, including: when the security level indication information indicates that the first device is in the first security level, the security verification strategy is determined as: verifying the authenticity of the distance measurement result according to whether the difference between the first duration and the second duration is less than or equal to the second preset duration, or verifying the authenticity of the distance measurement result according to whether the difference between the first distance and the second distance is less than or equal to the first preset distance; when the security level indication information indicates that the first device is in the second security level, the security verification strategy is determined as: verifying the authenticity of the distance measurement result according to whether the difference between the first duration and the second duration is less than or equal to the second preset duration, and whether the difference between the first distance and the second distance is less than or equal to the first preset distance; wherein the first security level is lower than the second security level.

[0066] In some possible implementations, when the first device passes the verification of the authenticity of the ranging result according to the security verification policy, the first device can execute the control request information of the second device; when the first device fails to verify the authenticity of the ranging result according to the security verification policy, the first device ignores the control request information of the second device.

[0067] In some possible implementations, the security level indication information includes control request information from the second device, and the control request information is used to request the first device to perform a first preset operation. Exemplarily, the security level of the first device is related to the operation requested by the control request information to be performed by the first device. For example, when the first device is a vehicle, and the control request information is used to request the vehicle to perform an operation of unlocking the door, the first device is considered to be at a first security level; when the control request information is used to request the vehicle to start the engine, the first device is considered to be at a second security level.

[0068] In the above technical solution, the smart device can select different security verification strategies to verify the authenticity of the ranging results for different application scenarios. In scenarios with lower security requirements, the security verification strategy corresponding to the lower security level can be selected for verification, which helps save computing power and thus save energy consumption; in scenarios with higher security requirements, the security verification strategy corresponding to the higher security level can be selected for verification, which helps to ensure the security of the first device. The above technical solution can achieve a balance between device security and computing platform computing power according to the application scenario.

[0069] In a sixth aspect, a control device is provided, comprising: a memory for storing a computer program; and a processor for executing the computer program stored in the memory, so that the device performs a method in any possible implementation of the first aspect, the second aspect, or the fifth aspect.

[0070] In a seventh aspect, a smart device is provided, which includes an apparatus as in any possible implementation of the third aspect, the fourth aspect, and the sixth aspect.

[0071] In combination with the seventh aspect, in some implementations of the seventh aspect, the smart device is a vehicle.

[0072] In an eighth aspect, a computer program product is provided, the computer program product comprising: a computer program code, when the computer program code is run on a computer, the computer executes a method in any possible implementation of the first aspect, the second aspect, and the fifth aspect.

[0073] It should be noted that the above-mentioned computer program code may be stored in whole or in part on a first storage medium, wherein the first storage medium may be packaged together with the processor or may be packaged separately from the processor.

[0074] In a ninth aspect, a computer-readable medium is provided, wherein the computer-readable medium stores instructions. When the instructions are executed by a processor, the processor implements a method in any possible implementation of the first aspect, the second aspect, and the fifth aspect.

[0075] In a tenth aspect, a chip is provided, which includes a circuit for executing a method in any possible implementation of the first aspect, the second aspect, and the fifth aspect. BRIEF DESCRIPTION OF THE DRAWINGS

[0076] Figure 1 It is a schematic diagram of the relationship between UWB pulse signal and time;

[0077] Figure 2 is a schematic block diagram of a control system provided in an embodiment of the present application;

[0078] Figure 3 is a schematic flow chart of a control method provided in an embodiment of the present application;

[0079] Figure 4 is another schematic flow chart of the control method provided in the embodiment of the present application;

[0080] Figure 5 is another schematic flow chart of the control method provided in the embodiment of the present application;

[0081] Figure 6is another schematic flow chart of the control method provided in the embodiment of the present application;

[0082] Figure 7 is another schematic flow chart of the control method provided in the embodiment of the present application;

[0083] Figure 8 is a schematic block diagram of a control device provided in an embodiment of the present application;

[0084] Fig. 9 This is another schematic block diagram of the control device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0085] In the description of the embodiments of the present application, unless otherwise specified, " / " means or, for example, A / B can mean A or B; "and / or" in this article is a kind of association relationship that describes associated objects, indicating that three relationships can exist, for example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone. In this application, "at least one" means one or more, and "multiple" means two or more. "At least one of the following items" or similar expressions refers to any combination of these items, including any combination of single items or plural items. For example, at least one of a, b, or c can mean: a, b, c, ab, ac, bc, or abc, where a, b, c can be single or multiple.

[0086] The prefixes such as "first" and "second" used in the embodiments of the present application are only used to distinguish different description objects, and have no limiting effect on the position, order, priority, quantity or content of the described objects. The use of prefixes such as ordinal numbers used to distinguish description objects in the embodiments of the present application does not constitute a limitation on the described objects. For the statement of the described objects, please refer to the description in the context of the claims or embodiments, and the use of such prefixes should not constitute an unnecessary limitation.

[0087] As mentioned above, in the ranging solution based on UWB technology, injecting malicious UWB signals can reduce the flight time calculated by the UWB module, making the output ranging result much lower than the actual distance, causing the vehicle to be controlled by the attacker. Figure 1 As shown, the UWB module screens the received UWB signal by correlation checking ( Figure 1The strongest peak in the image is the strongest peak in the image. This peak may come from the enhanced refraction signal caused by multipath propagation, so the UWB module will have a back-search window to find the real signal peak that meets the preset threshold. However, the malicious UWB signal (malicious signal peak) injected by the attacker may fall into this window and be identified as the corresponding real signal, resulting in the flight time calculated by the UWB module being smaller than the real flight time.

[0088] In order to increase the difficulty of relay attacks and reduce the probability of relay attacks, phase difference ranging can also be performed based on BLE signals. The so-called phase difference ranging is to calculate the distance using the phase difference between the transmitted BLE signal and the received BLE signal, and the difference in phase angle is proportional to the distance between the key device and the vehicle. BLE phase difference ranging generally uses the phase difference of multiple carrier signals with different frequencies to calculate the distance, and the maximum phase difference value 2π corresponds to the maximum ranging distance. For example, the common BLE signal frequency hopping difference is 2 megahertz (MHz), and the corresponding maximum ranging distance is 75 meters. After the phase difference exceeds 2π, the measured distance rolls to 0 meters. However, phase difference ranging is susceptible to phase slope flip attacks. By delaying the phase of the BLE signal, the attacker can achieve a phase difference exceeding 2π and flipping, thereby making the measured distance smaller than the actual distance (i.e., achieving a reduced distance attack).

[0089] In view of this, an embodiment of the present application provides a control method. When a smart device receives a control request from a key device, it is determined whether a relay attack has occurred in the PKE system based on the verification between the ranging results of the BLE module and the ranging results of the UWB module. When the ranging results between the BLE module and the UWB module differ too much, the smart device ignores the control request of the key device; when the ranging results of the BLE module and the ranging results of the UWB module meet preset conditions, the smart device executes the control request of the key device.

[0090] The technical solutions in the embodiments of the present application will be described below in conjunction with the accompanying drawings.

[0091] Figure 2 FIG. 1 is a schematic diagram showing the system architecture required for implementing the control method of an embodiment of the present application. Figure 2 As shown, the system includes a smart device 100 and a key device 200, wherein the key device 200 is a legitimate device for controlling the unlocking and / or starting of the smart device 100, for example, the key device 200 has been paired or authenticated with the smart device 100. Exemplarily, the smart device 100 includes a digital key signal processing module 110 and a device control module 120.

[0092] Specifically, the digital key signal processing module 110 includes a security verification module 111, a BLE module 112 and a UWB module 113. The BLE module 112 is used to receive a BLE signal from the key device 200 and determine the distance between the key device 200 and the smart device 100 according to the BLE signal; the UWB module is used to receive a UWB signal from the key device 200 and determine the distance between the key device 200 and the smart device 100 according to the UWB signal. The security verification module 111 is used to determine whether the BLE module and / or the UWB module is attacked by an attacker based on the distance measurement result of the BLE module 112 and the distance measurement result of the UWB module 113. When it is determined that the control system is not attacked by an attacker, the security verification module 111 notifies the device control module 120 to execute the control instruction from the key device 200; when it is determined that at least one of the BLE module and the UWB module is attacked by an attacker, the security verification module 111 notifies the device control module 120 to ignore the control instruction from the key device 200. In some possible implementations, when the security verification module 111 determines that at least one of the BLE module and the UWB module is attacked by an attacker, it can also notify the device control module 120 to issue a ranging abnormality alarm to prompt the user that the smart device 100 is at risk.

[0093] Exemplarily, the control instruction may be received via the UWB module 113 and / or the BLE module 112, or may be received via other communication technologies, which is not specifically limited in the embodiments of the present application.

[0094] Exemplarily, taking the smart device 100 as an example, the device control module 120 may include various controllers, for example, the controller may include a zone controller such as a vehicle integration unit (VIU), and for example, the controller may also include various domain controllers, such as a vehicle domain controller (VDC), an advanced driving domain controller (ADC), and a cockpit domain controller (CDC). At least one of them. Alternatively, the various controllers may also include an in-car application server (ICAS) controller, a body domain controller (BDC), a special equipment system (SAS), a media graphics unit (MGU), a body super core (BSC), an advanced driving assistant system super core (ADAS super core), etc., and this application does not limit this. Among them, ICAS may include at least one of the following: a vehicle control server ICAS1, an intelligent driving server ICAS2, an intelligent cockpit server ICAS3, and an infotainment server ICAS4.

[0095] Exemplarily, the digital key signal processing module 110, the device control module 120, and the key device 200 may include one or more processors, respectively. A processor is a circuit with the ability to process signals. In one implementation, the processor may be a circuit with the ability to read and run instructions, such as a central processing unit (CPU), a microprocessor, a graphics processing unit (GPU) (which can be understood as a microprocessor), or a digital signal processor (DSP); in another implementation, the processor may implement certain functions through the logical relationship of a hardware circuit, and the logical relationship of the hardware circuit is fixed or reconfigurable, such as a hardware circuit implemented by a processor as an application-specific integrated circuit (ASIC) or a programmable logic device (PLD), such as a field programmable gate array (FPGA). In a reconfigurable hardware circuit, the process of the processor loading a configuration document to implement the hardware circuit configuration can be understood as the process of the processor loading instructions to implement the functions of some or all of the above units. In addition, it can also be a hardware circuit designed for artificial intelligence, which can be understood as an ASIC, such as a neural network processing unit (NPU), a tensor processing unit (TPU), a deep learning processing unit (DPU), etc. In addition, the digital key signal processing module 110 and the device control module 120 can also include a memory, the memory is used to store instructions, and some or all of the processors in the processor can call the instructions in the memory and execute the instructions to achieve the corresponding functions.

[0096] The smart devices involved in this application may include road vehicles, water vehicles, air vehicles, industrial equipment, agricultural equipment, or entertainment equipment, etc. For example, the smart device may be a vehicle, which is a vehicle in a broad sense, and may be a vehicle (such as a commercial vehicle, a passenger car, a motorcycle, a flying car, a train, etc.), an industrial vehicle (such as a forklift, a trailer, a tractor, etc.), an engineering vehicle (such as an excavator, a bulldozer, a crane, etc.), agricultural equipment (such as a lawn mower, a harvester, etc.), amusement equipment, a toy vehicle, etc. The embodiments of this application do not specifically limit the type of vehicle. For another example, the smart device may be a vehicle such as an airplane or a ship, or a smart home such as a smart door lock.

[0097] The key device involved in this application may include a mobile terminal for controlling smart devices to unlock, start, etc., for example, various handheld devices with wireless communication functions, wearable devices, computing devices or other processing devices connected to a wireless modem, as well as various forms of terminals, mobile stations, user equipment, etc. For example, watches, bracelets, wireless headphones, electronic wallets, etc., which are not limited in the embodiments of this application.

[0098] Figure 3 A schematic flow chart of a control method provided in an embodiment of the present application is shown. The method 300 may be performed by Figure 2 The method 300 is performed by the smart device 100 shown in FIG. 1 . Exemplarily, the method 300 may be performed by the security verification module 111 in the smart device 100. The method 300 includes:

[0099] S301, determining a first duration and a second duration; wherein the first duration is associated with a first ranging result of a first ranging module, the first ranging result indicates a first distance between the first device and the second device at a first moment, and the second duration is associated with a second ranging result of a second ranging module, the second ranging result indicates a second distance between the first device and the second device at a second moment; the duration between the first moment and the second moment is less than or equal to a first preset duration, and the second device is used to control the first device.

[0100] Exemplarily, the first device may include the above-mentioned smart device 100 , and the second device may include the above-mentioned key device 200 .

[0101] Exemplarily, the first ranging module may be the above-mentioned BLE module, and the second ranging module may be the above-mentioned UWB module; or, the first ranging module and the second ranging module may also be other modules capable of sending and receiving ranging signals and used to measure distance.

[0102] Exemplarily, the BLE module can determine the ranging result based on the received signal strength indicator (RSSI), or the BLE module can determine the ranging result based on the phase difference ranging, or the BLE module can determine the ranging result based on other principles; the UWB module can determine the ranging result based on the time of flight (TOF), or the UWB module can determine the ranging result based on other principles.

[0103] For example, the first duration may be determined according to the time when the first ranging module determines or outputs the first ranging result. The second duration may be the flight time of the ranging signal determined by the second ranging module.

[0104] For example, the first distance measurement module sends a distance measurement signal at t1, and outputs the distance measurement result at t1', then the first duration can be (t1-t1') / 2; or the first duration can also be [(t1-t1')-Δt] / 2, where Δt is associated with the processing time of the key device, such as the time difference between the key device receiving the signal and sending the signal. For another example, the flight time output by the second distance measurement module based on the TOF principle is the second duration.

[0105] In an example, if the duration output by the second distance measurement module based on the TOF principle is twice the flight time, the first duration may also be t1-t1'.

[0106] When the ranging module is attacked by an attacker, the first duration and the second duration will be extended or shortened to varying degrees. For example, when the BLE module is based on phase difference ranging, the attacker can achieve a reduced distance attack through a phase slope flip attack, but the flip will cause the BLE signal transmission time to be extended, which will cause the BLE module to output the ranging result later than the real time. For another example, when the attacker introduces a false UWB signal to achieve a reduced distance attack on the UWB module, the flight time calculated by the UWB module may be reduced. Therefore, by comparing the time when the ranging results output by the two ranging modules are associated, it can be determined whether one or both of the BLE module and the UWB module are under attack.

[0107] Exemplarily, the first preset time length may be 2 μs, or may be other time lengths.

[0108] S302: When the first duration and the second duration meet a preset condition, perform a preset operation, where the preset operation is associated with the first device.

[0109] Exemplarily, executing the preset operation includes:

[0110] (1) When the difference between the first time duration and the second time duration is greater than a second preset time duration, the first device is controlled to prompt the user that the distance measurement is abnormal.

[0111] (2) When the difference between the first duration and the second duration is less than or equal to the second preset duration, the first device is controlled to perform a first preset operation according to the control request information from the second device. The control request information is used to request the first device to perform the first preset operation, and the first preset operation includes but is not limited to: controlling the operation of one or more components in the first device, such as unlocking a component (such as a door) of the first device (such as a vehicle), starting a component (such as an engine) of the first device, and turning on or off a component (such as a central control screen, air conditioning) in the first device.

[0112] Exemplarily, controlling the first device to perform a first preset operation according to control request information from the second device includes: the security verification module 111 sends the control request information to the device control module 120, and the device control module 120 performs the first preset operation according to the control request information.

[0113] (3) When the difference between the first duration and the second duration is greater than the second preset duration, the control request information from the second device is ignored. That is, when the difference between the first duration and the second duration is greater than the second preset duration, the security verification module 111 does not send the control request information to the device control module 120, so that the first device does not perform the first preset operation requested by the control request information.

[0114] Exemplarily, the second preset time length may be 1 μs, or 1.5 μs, or other values.

[0115] In some possible implementations, when the difference between the first duration and the second duration is less than or equal to the second preset duration, and the difference between the first distance and the second distance is less than or equal to the first preset distance, the first device is controlled to perform the first preset operation according to the control request information.

[0116] Exemplarily, the first preset distance may be 1 meter, or 1.5 meters, or other values.

[0117] In some possible implementations, when the first distance is less than or equal to the second preset distance, and the second distance is less than or equal to the second preset distance, the first duration and the second duration are determined.

[0118] Exemplarily, the second preset distance may be 10 meters, or 9 meters, or other values.

[0119] It can be understood that when the distance between the first device and the second device is less than a preset threshold, the process of determining the first time duration and the second time duration is started. At this time, a threshold can be used to compare the ranging result of the first ranging module (such as the first distance) and the ranging result of the second ranging module (such as the second distance). If the comparison results are inconsistent, for example, the first distance is greater than the above threshold, and the second distance is less than or equal to the above threshold, a ranging alarm can be directly issued, which helps to reduce the complexity of the ranging module detection process.

[0120] In some possible implementations, two thresholds may also be used to compare the ranging result of the first ranging module (such as the first distance) and the ranging result of the second ranging module (such as the second distance), for example, when the first distance is less than or equal to the first threshold, and the second distance is less than or equal to the second threshold, the first duration and the second duration are determined. Exemplarily, the first threshold may be 10 meters, and the second threshold may be 10.5 meters; or the first threshold may be 10 meters, and the second threshold may be 9.5 meters; or the first threshold and the second threshold may also be other values. Exemplarily, the difference between the first threshold and the second threshold may be less than the first preset distance.

[0121] In some possible implementations, when the third distance between the first device and the second device determined by the first ranging module is less than or equal to the third preset distance, the second ranging module is controlled to start ranging.

[0122] Exemplarily, the third preset distance may be greater than the second preset distance.

[0123] Exemplarily, the third preset distance may be 15 meters, or 12 meters, or other values.

[0124] Exemplarily, the third preset time length may be 2 μs, or may be other time lengths. The third preset time length and the first preset time length may be the same time length, or may be different time lengths.

[0125] The control method provided in the embodiment of the present application can verify whether the two ranging modules are under attack based on the duration associated with the ranging results of the two ranging modules, and control the smart device based on the verification result, which helps to improve the security of the smart device. Furthermore, the reliability of the verification result can be further improved by combining the size relationship between the difference between the first distance and the second distance and the preset threshold.

[0126] Figure 4 Another schematic flow chart of the control method provided in the embodiment of the present application is shown. The method 400 can be regarded as an extension of the method 300. The method 400 can be Figure 2 The method 400 is performed by the smart device 100 shown.

[0127] S401, determine the ranging result 1 based on the BLE phase difference principle.

[0128] The distance measurement result 1 may be understood as an example of the first distance measurement result.

[0129] Exemplarily, the distance measurement result 1 indicates the distance between the smart device and the key device. The BLE module determines the distance between the smart device and the key device based on the phase difference between the transmitted BLE signal and the received BLE signal, and the frequency of the BLE signal.

[0130] S401', determining the distance measurement result 2 based on the UWB time-of-flight principle.

[0131] The distance measurement result 2 may be understood as an example of the second distance measurement result.

[0132] Exemplarily, the distance measurement result 2 also indicates the distance between the smart device and the key device. The UWB module determines the flight time according to the time when the UWB signal is sent and received, and the time when the key device receives and sends the UWB signal, and then determines the distance between the smart device and the key device according to the product of the flight time and the speed of light.

[0133] In some possible implementations, the time difference between the moment when the BLE module sends a signal for determining ranging result 1 and the moment when the UWB module sends a signal for determining ranging result 2 is less than preset duration 1. The preset duration may be the third preset duration.

[0134] S402, determining whether the distance indicated by the distance measurement result 1 is less than or equal to the preset distance 1.

[0135] Exemplarily, the preset distance 1 may be the second preset distance mentioned above, or may be other values.

[0136] S402', determining whether the distance indicated by the distance measurement result 2 is less than or equal to the preset distance 1.

[0137] Specifically, when the distance indicated by the distance measurement result 1 and the distance indicated by the distance measurement result 2 are both less than or equal to the preset distance 1, S403 is executed; otherwise, S405 is executed.

[0138] S403 : Determine whether the difference between the duration associated with the ranging result 1 and the duration associated with the ranging result 2 is less than or equal to a preset difference 1 .

[0139] Exemplarily, the preset difference 1 may be the second preset duration mentioned above, or may be other values.

[0140] Exemplarily, the duration associated with ranging result 1 may be an example of the first duration mentioned above, and the duration associated with ranging result 2 may be an example of the second duration mentioned above. The method for determining the duration associated with ranging result 1 and ranging result 2 may refer to the description in method 300, which will not be repeated here.

[0141] Specifically, when the difference between the duration associated with the ranging result 1 and the duration associated with the ranging result 2 is less than or equal to the preset difference 1, S404 is executed; otherwise, S405 is executed.

[0142] S404, controlling the vehicle to be unlocked and / or the in-vehicle equipment to be turned on.

[0143] Exemplarily, the control request information for requesting vehicle unlocking and / or in-vehicle device activation may be sent by a key device. When S403 is executed to determine that the difference in relevant time lengths is less than or equal to a preset difference 1, the vehicle unlocking and / or in-vehicle device activation is controlled according to the control request information of the key device.

[0144] S405, prompting a ranging alarm.

[0145] In some possible implementations, the distance measurement alarm is prompted to the user through a key device, or the distance measurement alarm may also be prompted to the user through other legitimate devices that communicate with the smart device.

[0146] In some possible implementations, while the distance measurement alarm is prompted, the control request information of the key device is ignored.

[0147] In some possible implementations, it is not necessary to execute Figure 4 All operations in, for example, S402 and S402' may not be executed. In addition, Figure 4 The operations shown may also not be executed in the order shown in the figure, for example, S402 and S402' may be executed after S403.

[0148] The control method provided in the embodiment of the present application, when the UWB module is based on time-of-flight ranging and the BLE module is based on phase difference ranging, when at least one of the two ranging modules is subjected to a range reduction attack, the method provided in the embodiment of the present application can more easily detect that an attack has occurred, thereby ensuring the safety of the device.

[0149] Figure 5 Another schematic flow chart of the control method provided by the embodiment of the present application is shown. The method 500 can be Figure 2 The method 500 can be executed by the smart device 100 shown in the figure. The method 500 can be executed simultaneously with the method 300 or the method 400, or the method 500 can be executed before the method 300 or the method 400, or the method 500 can be regarded as an extension of the method 300.

[0150] Among them, the steps of S501, S501', S502, and S502' can refer to the descriptions of S401, S401', S402, and S402', respectively. The difference from method 400 is that when the distance indicated by the ranging result 1 and the distance indicated by the ranging result 2 are both less than or equal to the preset distance 1, it is determined whether the difference between the ranging result 1 and the ranging result 2 is less than or equal to the preset difference 2 (i.e., executing S503); otherwise, a ranging alarm is prompted.

[0151] It should be noted that the difference between the distance measurement result 1 and the distance measurement result 2 can be understood as: the difference between the distance indicated by the distance measurement result 1 and the distance indicated by the distance measurement result 2.

[0152] Exemplarily, the preset difference 2 may be the above-mentioned first preset distance, or may be other values.

[0153] In some possible implementations, ranging result 1 and ranging result 2 may also be determined by the UWB module and the BLE module based on other principles.

[0154] In some possible implementations, before executing S503, S502 and S502' may be repeatedly executed. That is, the two ranging modules are controlled to perform ranging for a preset number of times respectively, and when the distances indicated by the multiple ranging results of the two ranging modules are less than or equal to the second preset distance, S503 is executed. Exemplarily, the preset number of times may be 3 times, or 5 times, or other values; the second preset distance may be 10 meters, or 9 meters, or other values.

[0155] In some possible implementations, it is not necessary to execute Figure 5 All operations in, for example, S502 and S502' may not be executed. In addition, Figure 5 The operations shown may also not be executed in the order shown in the figure, for example, S502 and S502' may be executed after S503.

[0156] The control method provided in the embodiment of the present application can verify whether the two ranging modules are under attack based on the distance determined by the two ranging modules, and control the smart device based on the verification result, which helps to improve the security of the smart device. When one of the two ranging modules is attacked by a reduced distance attack, the difference between the ranging results of the two ranging modules is greater than a preset threshold. Therefore, no matter which principle the two ranging modules use for ranging, the difference between the ranging results of the two ranging modules can effectively detect that the ranging module is under attack, thereby ensuring the safety of the device.

[0157] In some possible implementations, method 400 and method 500 may be combined. For example, after executing S503 to determine that the difference between distance measurement result 1 and distance measurement result 2 is less than or equal to the preset difference value 2, executing S403, such as Figure 6 Alternatively, after S403 is executed to determine that the difference between the relevant durations is less than or equal to the preset difference value 1, S503 may be executed.

[0158] The above method for verifying whether the distance measurement module has been attacked can improve the reliability of the verification result, thereby improving the security of the smart device.

[0159] Figure 7 Another schematic flow chart of the control method provided in the embodiment of the present application is shown. The method 700 can be performed by Figure 2 The method 700 is performed by the smart device 100 shown in FIG. Exemplarily, the method 700 may be performed by the security verification module 111 and the device control module 120 in the smart device 100. The method 700 includes:

[0160] S701, the smart device receives security level indication information, and determines a security verification strategy according to the security level indication information.

[0161] The security level indication information may be sent by a legitimate device that controls the smart device, and the legitimate device may include a key device. For example, when the key device receives a ranging signal sent by a BLE module (and / or UWB module) of the smart device, the security level indication information is sent to the smart device; or, the key device periodically sends the security level indication information to the smart device. Alternatively, the security level indication information may also be sent by a cloud server, for example, the cloud server periodically sends the security level indication information to the smart device.

[0162] Exemplarily, the security verification strategy includes one of the following ① to ③:

[0163] ① Verify the authenticity of the distance measurement result based on whether the difference between the distance determined by the BLE module and the distance determined by the UWB module is less than or equal to a preset difference (such as the first preset distance mentioned above).

[0164] ② Verify the authenticity of the ranging result based on whether the difference between the duration associated with the ranging result of the BLE module (such as the first duration mentioned above) and the duration associated with the ranging result of the UWB module (such as the second duration mentioned above) is less than or equal to the preset difference (such as the second preset duration mentioned above).

[0165] ③ Verify the authenticity of the ranging result based on whether the difference between the duration associated with the ranging result of the BLE module and the duration associated with the ranging result of the UWB module is less than or equal to the preset difference, and whether the difference between the distance determined by the BLE module and the distance determined by the UWB module is less than or equal to the preset difference.

[0166] Exemplarily, the ranging result includes the ranging result of the BLE module (such as the ranging result 1 mentioned above) and the ranging result of the UWB module (such as the ranging result 2 mentioned above).

[0167] In one example, the security level indication information is used to directly indicate to the smart device which of the above ① to ③ to use to verify the authenticity of the distance measurement result.

[0168] In another example, the security level indication information is used to indicate the current security level of the smart device. Determining the security verification strategy according to the security level indication information includes: when the security level indication information indicates that the smart device is at a first security level, determining the security verification strategy to be ① or ②; when the security level indication information indicates that the first device is at a second security level, determining the security verification strategy to be ③; wherein the first security level is lower than the second security level.

[0169] In some possible implementations, the security level indication information includes control request information from a key device, and the control request information is used to request a first device to perform a first preset operation. Exemplarily, the security level of the smart device is related to the operation that the control request information requests the smart device to perform. For example, when the smart device is a vehicle, when the control request information is used to request the vehicle to perform an operation of unlocking a door, the smart device is considered to be at a first security level; when the control request information is used to request the vehicle to start an engine, the smart device is considered to be at a second security level.

[0170] S702: The smart device verifies the authenticity of the distance between the smart device and the key device measured by the distance measurement module according to the security verification strategy.

[0171] Exemplarily, the specific method for verifying the authenticity of the ranging result according to the security verification strategy can refer to the description in the above methods 300 to 600, which will not be repeated here.

[0172] In some possible implementations, when the smart device passes the verification of the authenticity of the ranging result according to the security verification policy, the smart device can execute the control request information of the key device; when the smart device fails to verify the authenticity of the ranging result according to the security verification policy, the smart device ignores the control request information of the key device and / or issues a ranging alarm.

[0173] In the control method provided in the embodiment of the present application, the smart device can select different security verification strategies to verify the authenticity of the ranging results for different application scenarios, so as to achieve a balance between device security and computing platform computing power. In scenarios with lower security requirements, a security verification strategy corresponding to a lower security level can be selected for verification, which helps save computing power and thus save energy consumption; in scenarios with higher security requirements, a security verification strategy corresponding to a higher security level can be selected for verification, which helps to ensure the security of the first device.

[0174] In the various embodiments of the present application, unless otherwise specified or logically conflicting, the terms and / or descriptions between the various embodiments are consistent and can be referenced to each other, and the technical features in different embodiments can be combined to form new embodiments according to their inherent logical relationships.

[0175] Combined with the above Figures 1 to 7 The method provided in the embodiment of the present application is described in detail. Figure 8 and Fig. 9 The device provided in the embodiment of the present application is described in detail. It should be understood that the description of the device embodiment corresponds to the description of the method embodiment, so the contents not described in detail can be referred to the method embodiment above, and for the sake of brevity, they will not be repeated here.

[0176] Figure 8 A schematic block diagram of a control device 2000 provided in an embodiment of the present application is shown. The device 2000 includes a determination unit 2010 and a processing unit 2020.

[0177] The apparatus 2000 may include a Figures 3 to 7 Furthermore, each unit in the device 2000 is respectively for implementing Figures 3 to 7 The corresponding process of the method embodiment in FIG.

[0178] Specifically, when the device 2000 is used to execute the method 300, the determination unit 2010 is used to determine a first duration and a second duration; wherein the first duration is associated with a first ranging result of the first ranging module, the first ranging result indicates a first distance between the first device and the second device at a first moment, the second duration is associated with a second ranging result of the second ranging module, the second ranging result indicates a second distance between the first device and the second device at a second moment, the duration between the first moment and the second moment is less than or equal to a first preset duration, and the second device is used to control the first device; the processing unit 2020 is used to perform a preset operation when the first duration and the second duration meet a preset condition, and the preset operation is associated with the first device.

[0179] In some possible implementations, the device 2000 also includes a transceiver unit, which is used to: receive control request information, where the control request information is used to request the first device to perform a first preset operation; the processing unit 2020 is used to: when the difference between the first duration and the second duration is less than or equal to the second preset duration, control the first device to perform the first preset operation according to the control request information; or, when the difference between the first duration and the second duration is greater than the first preset duration, ignore the control request information.

[0180] In some possible implementations, the processing unit 2020 is used to: when the difference between the first distance and the second distance is less than or equal to a first preset distance, control the first device to perform the first preset operation according to the control request information.

[0181] In some possible implementations, the processing unit 2020 is used to: when the difference between the first duration and the second duration is greater than a preset duration, prompt the user that the distance measurement of the first device is abnormal.

[0182] In some possible implementations, the determination unit 2010 is used to determine the first duration and the second duration when the first distance is less than or equal to a second preset distance, and the second distance is less than or equal to the second preset distance.

[0183] In some possible implementations, the processing unit 2020 is used to: when the third distance between the first device and the second device determined by the first ranging module is less than or equal to a third preset distance, control the second ranging module to start ranging.

[0184] In some possible implementations, the first ranging module is a BLE module, and the second ranging module is a UWB module.

[0185] Exemplarily, the apparatus 2000 can also be used to perform operations related to the method 500, for example, the determination unit 2010 is used to determine a first ranging result of a first ranging module, the first ranging result indicating a first distance between the first device and the second device at a first moment, and to determine a second ranging result of a second ranging module, the second ranging result indicating a second distance between the first device and the second device at a second moment, wherein the duration between the first moment and the second moment is less than or equal to a first preset duration, and the second device is used to control the first device; the processing unit 2020 is used to perform a preset operation when the first distance and the second distance meet a preset condition, and the preset operation is associated with the first device.

[0186] In some possible implementations, the device 2000 also includes a transceiver unit, which is used to: receive control request information, where the control request information is used to request the first device to perform a first preset operation; the processing unit 2020 is used to: when the difference between the first distance and the second distance is less than or equal to the first preset distance, control the first device to perform the first preset operation according to the control request information; or, when the difference between the first distance and the second distance is greater than the first preset distance, ignore the control request information.

[0187] In some possible implementations, the determination unit 2010 is further used to: determine a first duration associated with the first ranging result, and a second duration associated with the second ranging result; the processing unit 2020 is used to: when the difference between the first duration and the second duration is less than or equal to a second preset duration, control the first device to perform the first preset operation according to the control request information.

[0188] In some possible implementations, the processing unit 2020 is used to: when the first distance is less than or equal to the second preset distance, and the second distance is less than or equal to the second preset distance, control the first device to perform the first preset operation according to the control request information.

[0189] In some possible implementations, the processing unit 2020 is used to: when the difference between the first distance and the second distance is greater than a preset distance, prompt the user that the distance measurement of the first device is abnormal.

[0190] Exemplarily, the determining unit 2010 and the processing unit 2020 may be arranged in Figure 2 In the smart device 100 shown, more specifically, the determination unit 2010 may be disposed in the security verification module 111 , and the processing unit 2020 may be disposed in the device control module 120 .

[0191] In addition, all or part of the units in the above device can be integrated together, or can be implemented independently. In one implementation, these units are integrated together and implemented in the form of a system-on-a-chip (SoC). The SoC may include at least one processor for implementing any of the above methods or implementing the functions of each unit of the device. The type of the at least one processor may be different, for example, including a CPU and an FPGA, a CPU and an artificial intelligence processor, a CPU and a GPU, etc.

[0192] In a specific implementation process, the operations performed by the determination unit 2010 and the processing unit 2020 may be performed by one processor, or may be performed by different processors. Figure 2The processor in the smart device 100 shown; alternatively, the apparatus 2000 may be a chip arranged in the smart device 100.

[0193] Fig. 9 It is a schematic block diagram of a control device provided in an embodiment of the present application. Fig. 9 The control device 2100 shown may include: a processor 2110, a transceiver 2120, and a memory 2130. The processor 2110, the transceiver 2120, and the memory 2130 are connected via an internal connection path, the memory 2130 is used to store instructions, and the processor 2110 is used to execute the instructions stored in the memory 2130 to implement the methods in the above embodiments. Optionally, the memory 2130 may be coupled to the processor 2110 via an interface, or may be integrated with the processor 2110.

[0194] It should be noted that the transceiver 2120 may include but is not limited to a transceiver device such as an input / output interface to achieve communication between the device 2100 and other devices or a communication network.

[0195] The memory 2130 may be a read only memory (ROM), a static storage device, a dynamic storage device or a random access memory (RAM).

[0196] The transceiver 2120 uses a transceiver device such as but not limited to a transceiver to implement communication between the device 2100 and other devices or a communication network to receive / send data / information used to implement the methods in the above embodiments.

[0197] In the specific implementation process, the device 2100 can be set at Figure 2 In the smart device 100 shown.

[0198] An embodiment of the present application further provides a smart device, which includes the above-mentioned device 2000 or the above-mentioned device 2100.

[0199] In some possible implementations, the smart device may be a vehicle.

[0200] An embodiment of the present application further provides a computer program product, which includes a computer program code. When the computer program code runs on a computer, the computer implements the methods in the above embodiments of the present application.

[0201] An embodiment of the present application further provides a computer-readable storage medium, which stores computer instructions. When the computer instructions are executed on a computer, the computer implements the methods in the above embodiments of the present application.

[0202] An embodiment of the present application also provides a chip, including a circuit, for executing the methods in the above embodiments of the present application.

[0203] In the implementation process, each step of the above method can be completed by an integrated logic circuit of hardware in a processor or an instruction in the form of software. The method disclosed in conjunction with the embodiment of the present application can be directly embodied as a hardware processor for execution, or a combination of hardware and software modules in a processor for execution. The software module can be located in a storage medium mature in the art such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, or a power-on erasable programmable memory, a register, etc. The storage medium is located in a memory, and the processor reads the information in the memory and completes the steps of the above method in conjunction with its hardware. To avoid repetition, it is not described in detail here.

[0204] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0205] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0206] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0207] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0208] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A control method, characterized in that: include: Determine the first duration and the second duration; The first duration is associated with a first ranging result of a first ranging module, the first ranging result indicates a first distance between the first device and the second device at a first moment, the second duration is associated with a second ranging result of a second ranging module, the second ranging result indicates a second distance between the first device and the second device at a second moment, the duration between the first moment and the second moment is less than or equal to a first preset duration, and the second device is used to control the first device; When the first duration and the second duration meet a preset condition, a preset operation is performed, and the preset operation is associated with the first device.

2. The method according to claim 1, characterized in that The method further comprises: receiving control request information sent by the second device, where the control request information is used to request the first device to perform a first preset operation; When the first duration and the second duration meet a preset condition, performing a preset operation includes: When the difference between the first duration and the second duration is less than or equal to a second preset duration, controlling the first device to perform the first preset operation according to the control request information; or, When the difference between the first duration and the second duration is greater than the second preset duration, the control request information is ignored.

3. The method according to claim 2, characterized in that The controlling the first device to perform the first preset operation according to the control request information includes: When the difference between the first distance and the second distance is less than or equal to a first preset distance, the first device is controlled to perform the first preset operation according to the control request information.

4. The method according to any one of claims 1 to 3, characterized in that The performing of the preset operation includes: When the difference between the first time duration and the second time duration is greater than a preset time duration, a user is prompted that the distance measurement of the first device is abnormal.

5. The method according to any one of claims 1 to 4, characterized in that The determining of the first duration and the second duration comprises: When the first distance is less than or equal to a second preset distance, and the second distance is less than or equal to the second preset distance, the first duration and the second duration are determined.

6. The method according to any one of claims 1 to 5, characterized in that The method further comprises: When the third distance between the first device and the second device determined by the first ranging module is less than or equal to a third preset distance, the second ranging module is controlled to start ranging.

7. The method according to any one of claims 1 to 6, characterized in that The first ranging module is a Bluetooth low energy BLE module, and the second ranging module is an ultra-wideband UWB module.

8. A control method, characterized in that: include: Determine a first ranging result of a first ranging module, where the first ranging result indicates a first distance between the first device and the second device at a first moment; Determine a second ranging result of a second ranging module, where the second ranging result indicates a second distance between the first device and the second device at a second moment; The duration between the first moment and the second moment is less than or equal to a first preset duration, and the second device is used to control the first device; When the first distance and the second distance meet a preset condition, a preset operation is performed, where the preset operation is associated with the first device.

9. The method according to claim 8, characterized in that The method further comprises: receiving control request information sent by the second device, where the control request information is used to request the first device to perform a first preset operation; When the first distance and the second distance meet a preset condition, performing a preset operation includes: When the difference between the first distance and the second distance is less than or equal to a first preset distance, controlling the first device to perform the first preset operation according to the control request information; or, When the difference between the first distance and the second distance is greater than the first preset distance, the control request information is ignored.

10. The method according to claim 9, characterized in that The method further comprises: Determining a first duration associated with the first ranging result and a second duration associated with the second ranging result; The controlling the first device to perform the first preset operation according to the control request information includes: When the difference between the first duration and the second duration is less than or equal to a second preset duration, the first device is controlled to perform the first preset operation according to the control request information.

11. The method according to claim 9 or 10, characterized in that: The controlling the first device to perform the first preset operation according to the control request information includes: When the first distance is less than or equal to a second preset distance, and the second distance is less than or equal to the second preset distance, the first device is controlled to perform the first preset operation according to the control request information.

12. The method according to any one of claims 8 to 11, characterized in that The performing of the preset operation includes: When the difference between the first distance and the second distance is greater than a preset distance, a user is prompted that the distance measurement of the first device is abnormal.

13. The method according to any one of claims 8 to 12, characterized in that The method further comprises: When the third distance between the first device and the second device determined by the first ranging module is less than or equal to a third preset distance, the second ranging module is controlled to start ranging.

14. The method according to any one of claims 8 to 13, characterized in that The first ranging module is a Bluetooth low energy BLE module, and the second ranging module is an ultra-wideband UWB module.

15. A control device, characterized in that: include: A determining unit, configured to determine a first duration and a second duration; The first duration is associated with a first ranging result of a first ranging module, the first ranging result indicates a first distance between the first device and the second device at a first moment, the second duration is associated with a second ranging result of a second ranging module, the second ranging result indicates a second distance between the first device and the second device at a second moment, the duration between the first moment and the second moment is less than or equal to a first preset duration, and the second device is used to control the first device; A processing unit is configured to execute a preset operation when the first duration and the second duration meet a preset condition, wherein the preset operation is associated with the first device.

16. The device according to claim 15, characterized in that The device further comprises a transceiver unit, wherein the transceiver unit is used for: receiving control request information sent by the second device, where the control request information is used to request the first device to perform a first preset operation; The processing unit is used for: When the difference between the first duration and the second duration is less than or equal to a second preset duration, controlling the first device to perform the first preset operation according to the control request information; or, When the difference between the first duration and the second duration is greater than the second preset duration, the control request information is ignored.

17. The device according to claim 16, characterized in that The processing unit is used for: When the difference between the first distance and the second distance is less than or equal to a first preset distance, the first device is controlled to perform the first preset operation according to the control request information.

18. The device according to any one of claims 15 to 17, characterized in that The processing unit is used for: When the difference between the first time duration and the second time duration is greater than a preset time duration, a user is prompted that the distance measurement of the first device is abnormal.

19. The device according to any one of claims 15 to 18, characterized in that The determining unit is used for: When the first distance is less than or equal to a second preset distance, and the second distance is less than or equal to the second preset distance, the first duration and the second duration are determined.

20. The device according to any one of claims 15 to 19, characterized in that The processing unit is used for: When the third distance between the first device and the second device determined by the first ranging module is less than or equal to a third preset distance, the second ranging module is controlled to start ranging.

21. The device according to any one of claims 15 to 20, characterized in that The first ranging module is a Bluetooth low energy BLE module, and the second ranging module is an ultra-wideband UWB module.

22. A control device, characterized in that: include: a determining unit, configured to: determine a first ranging result of a first ranging module, the first ranging result indicating a first distance between a first device and a second device at a first moment, and determine a second ranging result of a second ranging module, the second ranging result indicating a second distance between the first device and the second device at a second moment; The duration between the first moment and the second moment is less than or equal to a first preset duration, and the second device is used to control the first device; A processing unit is configured to execute a preset operation when the first distance and the second distance meet a preset condition, wherein the preset operation is associated with the first device.

23. The device according to claim 22, characterized in that The device also includes a transceiver unit, which is used to: receiving control request information sent by the second device, where the control request information is used to request the first device to perform a first preset operation; The processing unit is used for: When the difference between the first distance and the second distance is less than or equal to a first preset distance, controlling the first device to perform the first preset operation according to the control request information; or, When the difference between the first distance and the second distance is greater than the first preset distance, the control request information is ignored.

24. The device according to claim 23, characterized in that The determining unit is further configured to: Determining a first duration associated with the first ranging result and a second duration associated with the second ranging result; The processing unit is used for: When the difference between the first duration and the second duration is less than or equal to a second preset duration, the first device is controlled to perform the first preset operation according to the control request information.

25. The device according to claim 23 or 24, characterized in that The processing unit is used for: When the first distance is less than or equal to a second preset distance, and the second distance is less than or equal to the second preset distance, the first device is controlled to perform the first preset operation according to the control request information.

26. The device according to any one of claims 22 to 25, characterized in that The processing unit is used for: When the difference between the first distance and the second distance is greater than a preset distance, a user is prompted that the distance measurement of the first device is abnormal.

27. The device according to any one of claims 22 to 26, characterized in that The processing unit is also used for: When the third distance between the first device and the second device determined by the first ranging module is less than or equal to a third preset distance, the second ranging module is controlled to start ranging.

28. The device according to any one of claims 22 to 27, characterized in that The first ranging module is a Bluetooth low energy BLE module, and the second ranging module is an ultra-wideband UWB module.

29. A control device, characterized in that: include: Memory for storing computer programs; A processor, configured to execute a computer program stored in the memory, so that the apparatus executes the method according to any one of claims 1 to 7, or executes the method according to any one of claims 8 to 14.

30. A smart device, characterized in that: Comprising the device as claimed in any one of claims 15 to 21, or the device as claimed in any one of claims 22 to 28.

31. A computer-readable storage medium, characterized in that: Instructions are stored thereon, and when the instructions are executed by a processor, the processor implements the method according to any one of claims 1 to 7; or the method according to any one of claims 8 to 14.