Processing method and electronic equipment

Abstract

The invention discloses a processing method and an electronic device, and belongs to the technical field of safety communication, the disclosed method is applied to a first electronic device, and the method comprises the following steps: obtaining public authentication information and public keys of a plurality of electronic devices in a device network; the first electronic device and the plurality of second electronic devices form the annular directed device network according to a preset sequence; acquiring auxiliary authentication information transmitted by second electronic equipment adjacent to the first electronic equipment; determining a communication key corresponding to the first electronic equipment based on the private key of the first electronic equipment, the public authentication information of the equipment network and the auxiliary authentication information of the previous adjacent second electronic equipment; wherein the auxiliary authentication information is data which is generated by the previous adjacent second electronic equipment and is related to at least part of the following information: a private key of the previous adjacent second electronic equipment, the public authentication information and a public key of each electronic equipment in the equipment network.

Description

Technical Field

[0001] The present application belongs to the field of secure communication technology, and in particular, relates to a processing method and electronic equipment. Background Art

[0002] The Jpake algorithm is a key negotiation algorithm in the near field communication scenario, which can simultaneously complete the device identity authentication and key negotiation between devices. The Jpake algorithm can only perform key negotiation between two devices. For scenarios where multiple devices are networked, the key negotiation process needs to be performed between each two devices, which results in a large number of data exchanges and key negotiations between devices, high costs, and low efficiency. Summary of the invention

[0003] To this end, this application discloses the following technical solutions:

[0004] A processing method is applied to a first electronic device, the processing method comprising:

[0005] Obtaining public authentication information in a device network and public keys of multiple electronic devices in the device network for key negotiation; wherein the first electronic device and multiple second electronic devices form a ring-shaped directed device network in a preset order;

[0006] Obtaining auxiliary authentication information transmitted by a second electronic device that is immediately adjacent to the first electronic device; the second electronic device that is immediately adjacent to the first electronic device is an electronic device in the device network that is directly connected to the first electronic device and points to the first electronic device;

[0007] Determining a communication key corresponding to the first electronic device based on the private key of the first electronic device, the public authentication information of the device network, and the auxiliary authentication information of the second electronic device adjacent to the first electronic device;

[0008] The auxiliary authentication information is data generated by the second electronic device that is adjacent to the previous device and is related to at least part of the following information: the private key of the second electronic device that is adjacent to the previous device, the public authentication information, and the public keys of each electronic device in the device network.

[0009] Optionally, obtaining public authentication information in the device network includes:

[0010] Obtaining first authentication information generated by the first electronic device, or obtaining second authentication information input into the first electronic device;

[0011] The public authentication information includes the first authentication information or the second authentication information; the second authentication information is authentication information input into the first electronic device based on authentication information generated and displayed by a corresponding second electronic device among the multiple second electronic devices.

[0012] Optionally, obtaining public keys of multiple electronic devices in the device network for key negotiation includes:

[0013] Reading the public key of the first electronic device;

[0014] Receive a public key that matches the second electronic device's own private key and is broadcasted by each second electronic device in a Bluetooth low energy manner.

[0015] Optionally, before obtaining the auxiliary authentication information transmitted by the second electronic device adjacent to the first electronic device, the method further includes:

[0016] Establishing a communication connection between every two adjacent electronic devices in the ring-shaped directed network;

[0017] The obtaining of auxiliary authentication information transmitted by a second electronic device adjacent to the first electronic device includes:

[0018] The auxiliary authentication information is received, which is transmitted by a second electronic device that is adjacent to the first electronic device through a target communication connection; the target communication connection is a communication connection between the first electronic device and a second electronic device that is adjacent to the first electronic device.

[0019] Optionally, obtaining auxiliary authentication information transmitted by a second electronic device that is adjacent to the first electronic device includes:

[0020] Obtaining first sub-auxiliary authentication information and second sub-auxiliary authentication information transmitted by a second electronic device adjacent to the first electronic device; the auxiliary authentication information includes the first sub-auxiliary authentication information and the second sub-auxiliary authentication information;

[0021] Among them, the first sub-auxiliary authentication information is data generated by the previous adjacent second electronic device and related to the private key of the previous adjacent second electronic device, the public authentication information and the public keys of each electronic device in the device network; the second sub-auxiliary authentication information is data generated by the previous adjacent second electronic device and related to the private key of the previous adjacent second electronic device.

[0022] Optionally, the determining the communication key corresponding to the first electronic device based on the private key of the first electronic device, the public authentication information of the device network, and the auxiliary authentication information of the second electronic device adjacent to the first electronic device includes:

[0023] A communication key corresponding to the first electronic device is determined based on the private key of the first electronic device, the public authentication information, the first sub-auxiliary authentication information, and the second sub-auxiliary authentication information.

[0024] Optionally, after determining the communication key corresponding to the first electronic device based on the private key of the first electronic device, the public authentication information of the device network and the auxiliary authentication information of the second electronic device adjacent to the first electronic device, the method further includes:

[0025] Based on the communication key, performing encrypted communication processing with the corresponding second electronic device;

[0026] Among them, the encrypted communication processing includes: the first electronic device uses the communication key to encrypt the data of the first electronic device and transmits it in the device network, and / or receives the transmission data sent by the second electronic device in the device network and decrypts it using the communication key.

[0027] Optionally, performing encrypted communication processing with a corresponding second electronic device based on the communication key includes:

[0028] If there is a direct communication connection with the corresponding second electronic device, using the direct communication connection to perform encrypted communication with the corresponding second electronic device based on the communication key;

[0029] If there is no direct communication connection with the corresponding second electronic device, a direct communication connection with the corresponding second electronic device is established, and encrypted communication with the corresponding second electronic device is performed based on the communication key using the established direct communication connection.

[0030] Optionally, the processing method further includes:

[0031] If an electronic device in the device network is changed, the processing method is triggered for each electronic device in the device network after the change, so that each electronic device in the device network after the change obtains a corresponding communication key.

[0032] An electronic device, comprising:

[0033] A memory for storing at least one set of computer instructions;

[0034] A processor is used to implement the processing method as described in any one of the above items by executing the instruction set stored in the memory. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the related technologies, the drawings required for use in the embodiments or the related technical descriptions are briefly introduced below. Obviously, the drawings described below are merely embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying any creative work.

[0036] Figure 1 It is a flow chart of the processing method provided by this application;

[0037] Figure 2 It is another flow chart of the processing method provided by the present application;

[0038] Figure 3 It is another flow chart of the processing method provided by this application;

[0039] Figure 4 It is another flow chart of the processing method provided by the present application;

[0040] Figure 5 It is a schematic diagram of two processing stages of the Jpake algorithm in the known technology;

[0041] Figure 6 This is a schematic diagram of the Jpake algorithm performing Pin-based identity authentication and key negotiation in a three-device networking scenario;

[0042] Figure 7 It is a schematic diagram of the present application performing Pin code-based identity authentication and key negotiation in the three-device networking scenario provided by the present application;

[0043] Figure 8 This is a processing flow chart of the application in the key negotiation initialization phase in the three-device networking scenario provided by the application;

[0044] Fig. 9 This application provides Figure 3 A flowchart of the key negotiation and generation process implemented by this application in a device networking scenario;

[0045] Fig.10 It is a timing diagram of the interaction between the devices in the three-device networking scenario provided by this application;

[0046] Fig.11 It is a composition structure diagram of the processing device provided by this application;

[0047] Fig.12 It is a structural diagram of the electronic device provided in this application. DETAILED DESCRIPTION

[0048] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0049] The embodiments of the present application provide a processing method and an electronic device for solving the problem that in a scenario where multiple devices are networked, the known technology requires a key negotiation process to be performed between every two devices, resulting in a large number of data exchanges and key negotiations between devices, high costs, and low efficiency.

[0050] The processing method provided in the embodiment of the present application can be applied to each electronic device in a multi-device networking scenario. The electronic device can be an electronic device in a variety of general or special computing device environments or configurations, such as: personal computers, server computers, handheld devices or portable devices, tablet devices, multi-processor devices, etc.

[0051] The multiple device networking scenario may be, but is not limited to, a multiple device networking scenario in a short-range communication scenario, such as a multiple device networking scenario in a Bluetooth communication scenario, etc.

[0052] In the embodiment of the present application, the execution subject of the method of the present application, that is, the electronic device to which the method of the present application is applied, is referred to as the first electronic device.

[0053] See also Figure 1 As shown in the method flow chart, the processing method provided in the embodiment of the present application may at least include the following steps 101 to 103, and these steps are described in detail below.

[0054] Step 101: Obtain public authentication information in a device network and public keys of multiple electronic devices in the device network for key negotiation.

[0055] The plurality of electronic devices include the first electronic device and a plurality of second electronic devices, and the device network is a ring-shaped directed network composed of the first electronic device and the plurality of second electronic devices in a preset order.

[0056] For the first electronic device and the multiple second electronic devices, the preset order can be any order that can form a ring-shaped directed network with the first electronic device and the multiple second electronic devices. In implementation, one of the optional orders that can form a ring-shaped directed network with the first electronic device and the multiple second electronic devices can be specifically selected to form a ring-shaped directed network with the first electronic device and the multiple second electronic devices, namely, the device network.

[0057] Assume that the device network has n devices D1, D2, ..., D n In the key negotiation phase, the n devices do not need to establish communication connections in pairs, but only need to establish connections in sequence. For example, if there are four devices D1, D2, ..., D n, these four devices can establish a ring-shaped directed network in the order of D1→D2→D3→D4→D1, and establish a communication connection between every two adjacent devices in the network.

[0058] In the embodiment of the present application, each electronic device in the device network is used to perform key negotiation with each other to support secure communication based on encryption and decryption between different electronic devices in the device network.

[0059] Optionally, the public authentication information may be a personal identification number (PIN) generated by one of the multiple electronic devices included in the device network. During implementation, one of the multiple electronic devices included in the device network may be agreed upon as the generator of the public authentication information. For example, for a scenario in which multiple devices are networked under a Bluetooth communication scenario, it may be specifically agreed that the public authentication information is generated by the requesting device that initiates the Bluetooth request, or it may be agreed that the public authentication information is generated by the receiving device that receives the Bluetooth request.

[0060] After the public authentication information is generated by one of the multiple electronic devices included in the device network, the electronic device that generates the public authentication information can display the generated public authentication information so that the user can input the displayed public authentication information into other devices in the device network, so that each electronic device in the device network can obtain the public authentication information. However, it is not limited to this, the electronic device that generates the public authentication information can also broadcast the public authentication information in a broadcasting manner so that other devices in the device network can receive the broadcasted public authentication information.

[0061] The broadcasting method may be, but is not limited to, a Bluetooth low energy broadcasting method.

[0062] Based on this, for the executor of the method of the present application, that is, the first electronic device, in this step 101, optionally, the first electronic device can directly obtain the first authentication information generated by itself (such as the Pin code generated by itself), and use the obtained first authentication information as the public authentication information.

[0063] In another optional implementation, the first electronic device may obtain second authentication information input into the first electronic device and use the second authentication information as the public authentication information, wherein the second authentication information is authentication information input into the first electronic device based on authentication information generated and displayed by a corresponding second electronic device among the plurality of second electronic devices.

[0064] In another optional implementation, the first electronic device may obtain authentication information such as a PIN code broadcasted by the corresponding second electronic device, and use the authentication information such as the PIN code obtained by receiving the broadcast information as the public authentication information.

[0065] In addition, each electronic device in the device network also generates its own public-private key pair based on a preset method, and the public-private key pair generated by each electronic device includes a private key and a public key matching the private key, and each electronic device broadcasts its own public key among the devices in the device network, so that each device in the device network can obtain the public keys of other devices in the device network. The broadcast method used here can also be, but is not limited to, a broadcast method based on Bluetooth low energy consumption.

[0066] Based on this, in this step 101, the first electronic device can specifically obtain the public keys of each electronic device in the device network through the following process: reading the public key of the first electronic device; receiving the public key of each second electronic device that matches its own private key and is broadcast based on Bluetooth low energy.

[0067] Step 102: Obtain auxiliary authentication information transmitted by a second electronic device that is immediately adjacent to the first electronic device; the second electronic device that is immediately adjacent to the first electronic device is an electronic device in the device network that is directly connected to the first electronic device and points to the first electronic device.

[0068] Among them, before obtaining the auxiliary authentication information transmitted by the second electronic device that is adjacent to the first electronic device, a communication connection can be first established between every two adjacent electronic devices in the ring-shaped directed network, for example, a Bluetooth communication connection can be established between every two adjacent electronic devices in the ring-shaped directed network. On this basis, in this step, the first electronic device can specifically receive the auxiliary authentication information transmitted by the second electronic device that is adjacent to the first electronic device through the target communication connection; the target communication connection is the communication connection between the first electronic device and the second electronic device that is adjacent to the first electronic device.

[0069] For the device network in which it is located, the first electronic device (i.e., the subject of the execution of the method of this application) determines the communication key corresponding to the first electronic device by setting itself as the terminating device in the device network and obtaining the auxiliary authentication information transmitted by the second electronic device adjacent to the first electronic device. Then, it is easy to understand that the starting device in the device network is the second electronic device adjacent to the first electronic device in the device network.

[0070] The second electronic device corresponding to the first electronic device in the device network and adjacent thereto is specifically an electronic device in the device network that is directly connected to the first electronic device and is pointed to by the first electronic device.

[0071] Take the device network as the above-mentioned directed ring network D1→D2→D3→D4→D1 as an example, if the first electronic device (i.e., the executor of the method of the present application) is D4, then D4 is the terminating device in the device network, and its adjacent D1 in the directed ring network is the starting device, while other devices such as D2 and D3 can be called intermediate devices. The first electronic device, i.e., D4, determines the communication key of the first electronic device itself by receiving the auxiliary authentication information transmitted by the second electronic device D3 that is adjacent to it. If the first electronic device is D3, then D3 is the terminating device in the device network, and its adjacent D4 in the directed ring network is the starting device, while other devices such as D1 and D2 can be intermediate devices. The first electronic device, i.e., D3, determines the communication key corresponding to D3 itself by receiving the auxiliary authentication information transmitted by the second electronic device D2 that is adjacent to it.

[0072] The auxiliary authentication information transmitted by the second electronic device immediately adjacent to the first electronic device is data generated by the second electronic device immediately adjacent to the first electronic device and is related to at least part of the following information: the private key of the second electronic device immediately adjacent to the first electronic device, the public authentication information, and the public keys of each electronic device in the device network. The auxiliary authentication information transmitted by the second electronic device immediately adjacent to the first electronic device is generated by the auxiliary authentication information transmitted by the second electronic device immediately adjacent to the first electronic device corresponding to the second electronic device immediately adjacent to the first electronic device in the device network, and so on, until it is pushed back to the starting device in the device network.

[0073] Still taking the device network as the above-mentioned directed ring network D1→D2→D3→D4→D1 as an example, assuming that the first electronic device, i.e., the executor of the method of the present application, is D4, then D4 is the terminating device in the device network, and D1 is the starting device in the device network. D4 specifically determines its corresponding communication key by receiving the auxiliary authentication information transmitted by the second electronic device D3 adjacent to it. The auxiliary authentication information transmitted by D3 to D4 is specifically generated by D3 by receiving the auxiliary authentication information transmitted by D2, and the auxiliary authentication information transmitted by D2 to D3 is specifically generated by D2 by receiving the auxiliary authentication information transmitted by the starting device D1. The auxiliary authentication information transmitted by D1 to D2 is generated by D1, and D1 does not need to rely on the auxiliary authentication information transmitted by other devices other than D1 in the device network when generating the auxiliary authentication information to be transmitted to D2, which is exactly consistent with the feature that D1 is the starting device in the device network.

[0074] In short, for the first electronic device (terminating device), it is necessary to generate corresponding auxiliary authentication information starting from the starting device of the device network in which it is located, and based on the pipeline transmission method, transmit the generated auxiliary authentication information along the direction of the ring directed network to the adjacent intermediate device. Each intermediate device generates its own corresponding auxiliary authentication information based on the auxiliary authentication information transmitted by its forward device, and continues to transmit it to the adjacent device until it is transmitted to the first electronic device (terminating device). Then, the first electronic device can generate its own communication key based on the received auxiliary authentication information.

[0075] Among them, the auxiliary authentication information generated by each intermediate device (i.e., each second electronic device other than the starting device) is specifically generated by the intermediate device based on its private key, the public authentication information, and the auxiliary authentication information transmitted by the second electronic device adjacent to the intermediate device. The auxiliary authentication information corresponding to the starting device (i.e., the second electronic device adjacent to the first electronic device in the device network) is generated by the starting device based on its own private key, the public secret, and the public keys of each electronic device in the device network.

[0076] Step 103: Determine a communication key corresponding to the first electronic device based on the private key of the first electronic device, the public authentication information of the device network, and the auxiliary authentication information of the second electronic device adjacent to the first electronic device.

[0077] On the basis of steps 101 and 102, the first electronic device may further generate a communication key corresponding to the first electronic device based on its own private key, the public authentication information and auxiliary authentication information transmitted by a second electronic device adjacent to the first electronic device.

[0078] The generated communication key can be used to perform secure data transmission based on encryption / decryption when there is a subsequent data transmission demand between the first electronic device and the corresponding second electronic device in the device network.

[0079] Based on the communication key generation method provided in the present application, it is easy to understand that the communication key corresponding to the first electronic device is essentially generated by the joint participation of the public key, private key of each electronic device in the device network and the public authentication information of the device network, and each electronic device is responsible for the operations required by itself at its location node in the device network. Ultimately, based on the participation of each electronic device, the communication key of the first electronic device is generated based on the key negotiation between the devices.

[0080] In practical applications, each electronic device in the device network can be used as a first electronic device to execute the processing method provided in the embodiment of the present application to generate its own communication key based on key negotiation between multiple devices. When each electronic device calculates its own communication key as a first electronic device, it uses the first electronic device as the terminating device in the device network, and the electronic device adjacent to the first electronic device as the starting device to complete the key negotiation between the electronic devices, so as to generate its own communication key in the first electronic device.

[0081] Furthermore, when each electronic device generates its own communication key, the directed ring of the device network used is the same.

[0082] It is worth noting that the same public authentication information is used for all electronic devices in the device network to generate their own communication keys. That is to say, in practical applications, only one electronic device in the device network needs to generate the public authentication information (such as generating a Pin code), and synchronize the generated public authentication information to other electronic devices in the device network (for example, synchronize to other electronic devices by broadcasting or manually input to other electronic devices by users, etc.), then all electronic devices in the device network can generate their own communication keys based on the public authentication information and through the key negotiation process between the electronic devices in the device network.

[0083] Furthermore, as long as the public authentication information obtained by each electronic device in the device network is the same during the key negotiation phase (for example, after a certain electronic device in the device network generates and displays a Pin code, the user correctly inputs the displayed Pin code into other electronic devices in the device network to ensure that each device obtains the same Pin code), and a key exchange is completed between each device in the device network (for example, each electronic device broadcasts its own public key between each device in the device network to achieve key exchange), each electronic device in the device network can generate the same communication key by running the processing method of the present application respectively. By enabling each electronic device to generate the same communication key, different electronic devices in the device network described later can be supported, and encrypted communication processing can be performed between different electronic devices based on their respective communication keys.

[0084] The Jpake algorithm in the known technology can only perform key negotiation between two devices. For the scenario of multiple devices networking, the key negotiation process needs to be performed between every two devices. In the scenario of n devices networking, the key exchange and negotiation cost is Times, that is, n(n-1) / 2 times, the key exchange and negotiation cost is high and the efficiency is low. For example, if three devices negotiate keys in pairs, three negotiations are required, and if four devices negotiate keys in pairs, six negotiations are required.

[0085] Different from the known technology, the processing method provided by the embodiment of the present application is to form a ring-shaped directed device network for key negotiation in a preset order, and based on the characteristics of the ring-shaped directed network, design a key negotiation mechanism between each device, so that only in the key negotiation stage, by making each electronic device in the device network obtain the same public authentication information, and completing a key exchange between each device in the device network (such as each electronic device broadcasts its own public key between each device in the device network to achieve key exchange), the key negotiation can be performed between each electronic device in the device network with the help of the ring connection characteristics of the ring-shaped directed network, and each communication key can be generated. There is no need to perform key exchange and negotiation between two devices separately. By triggering and running a key generation process based on key negotiation, each electronic device in the device network can generate its own communication key. Therefore, the present application optimizes the key generation scheme based on key negotiation, reduces the number and cost of data exchange and key negotiation between devices in the scenario of multiple device networking, and improves the efficiency of key negotiation.

[0086] It is worth noting that in the embodiment of the present application, each electronic device within the device network executes the processing method of the present application once based on the same public authentication information and the exchanged key, which can be regarded as running a key generation process based on key negotiation as a whole. In the key generation process based on key negotiation, each electronic device participates in the key negotiation and communication key generation process.

[0087] In an optional embodiment, each electronic device in the device network generates two public-private key pairs, that is, the number of public-private key pairs generated by each electronic device is 2. After generating its own two public-private key pairs, each electronic device broadcasts the two public keys it generated to all other devices in the device network, for example, via low-power Bluetooth broadcasting to all other devices in the device network, so as to support subsequent key negotiation by each electronic device in the device network based on the received public keys.

[0088] Optionally, the public key of each electronic device is based on the private key and base point of the electronic device, and the private key of each electronic device is obtained based on the target parameter calculation of a preset type of elliptic curve; the base point is a point on the preset type of elliptic curve set for data calculation in key negotiation.

[0089] The target parameter may be a prime order of the elliptic curve.

[0090] The Jpake algorithm is an authentication key negotiation algorithm, that is, two devices can generate symmetric keys without leaking any privacy and complete identity authentication at the same time.

[0091] The Jpake algorithm can be implemented based on elliptic curve encryption, mainly based on two basic operations of elliptic curves, elliptic curve addition and elliptic curve multiplication. The operation rule of elliptic curve addition is to add two points to get a new point, for example:

[0092] A+B=C;

[0093] That is, point A plus point B gets a new point C.

[0094] The operation rule of elliptic curve multiplication is that a number multiplied by a point gets a new point, for example:

[0095] q×G=P;

[0096] That is, the number q multiplied by the point G obtains a new point P. The present application refers to the point G as the base point.

[0097] On some specific elliptic curves, elliptic curve multiplication is one-way, that is, it is easy to calculate P using q and G, but it is difficult to infer q using P and G. This is a difficult mathematical problem (discrete logarithm problem). Elliptic curve encryption uses this feature, taking a large number q as the private key and the point P obtained by multiplication (large number q multiplied by the base point G) as the public key. As long as the private key is not leaked, the algorithm is safe.

[0098] Based on the above characteristics, in this embodiment, the above method can be followed, specifically a large number such as q is used as the private key of the electronic device, and P obtained by multiplying q by the base point G is used as the public key of the device. The large number q can be obtained based on the prime order operation of the elliptic curve. Different electronic devices and two private keys of the same device use different q. The base point G used by different devices is the same.

[0099] This embodiment designs the public and private keys of electronic devices by utilizing the above-mentioned characteristics of elliptic curves, thereby avoiding the risk of inferring the device private key from the device public key, strengthening the security of the private keys of each electronic device in the device network, and correspondingly improving the security of the communication keys generated in each electronic device based on key negotiation, and further improving the security of data transmission based on the communication keys.

[0100] In an optional embodiment, the implementation method of generating two public and private key pairs for each electronic device is matched, see Figure 2 As shown in the processing method flow chart, step 102 in the method provided by the present application, i.e., obtaining auxiliary authentication information transmitted by the second electronic device adjacent to the first electronic device, can be further implemented as follows:

[0101] Step 201: Obtain first sub-auxiliary authentication information and second sub-auxiliary authentication information transmitted by a second electronic device that is adjacent to the first electronic device.

[0102] The auxiliary authentication information transmitted by the second electronic device immediately preceding the first electronic device includes first sub-auxiliary authentication information and second sub-auxiliary authentication information transmitted by the second electronic device immediately preceding the first electronic device.

[0103] Among them, the first sub-auxiliary authentication information transmitted by the second electronic device adjacent to the first electronic device is data generated by the second electronic device and related to the private key of the second electronic device, the public authentication information and the public keys of each electronic device in the device network; the second sub-auxiliary authentication information transmitted by the second electronic device adjacent to the first electronic device is data generated by the second electronic device adjacent to the first electronic device and related to the private key of the second electronic device adjacent to the first electronic device.

[0104] In this embodiment, for each second electronic device other than the terminating device (first electronic device) in the device network, if the second electronic device is an intermediate device in the device network, the auxiliary authentication information generated by the second electronic device includes the first sub-auxiliary authentication information and the second sub-auxiliary authentication information generated by the second electronic device; if the second electronic device is the starting device in the device network, the auxiliary authentication information generated by the second electronic device includes the first sub-auxiliary authentication information generated by the second electronic device.

[0105] For each second electronic device that serves as an intermediate device, optionally, if the previous adjacent electronic device of the second electronic device in the device network is still an intermediate device, the first sub-auxiliary authentication information generated by the second electronic device is specifically generated by the second electronic device based on the second electronic device's own private key, the public authentication information and the first sub-auxiliary authentication information and the second sub-auxiliary authentication information generated by the previous adjacent device of the second electronic device (intermediate device); the second sub-auxiliary authentication information generated by the second electronic device is specifically generated by the second electronic device based on the second electronic device's own private key and the second sub-auxiliary authentication information generated by the previous adjacent device of the second electronic device (intermediate device).

[0106] On the contrary, if the previous adjacent electronic device of the second electronic device in the device network is a starting device, the first sub-auxiliary authentication information generated by the second electronic device is specifically generated by the second electronic device based on the second electronic device's own private key, the public authentication information and the first sub-auxiliary authentication information generated by the previous adjacent device of the second electronic device (the starting device); the second sub-auxiliary authentication information generated by the second electronic device is specifically generated by the second electronic device based on the second electronic device's own private key and the public key generated by the previous adjacent device of the second electronic device (the starting device).

[0107] Optionally, the auxiliary authentication information generated corresponding to each second electronic device may be a result determined based on at least one of an elliptic curve addition operation and an elliptic curve multiplication operation.

[0108] Accordingly, see Figure 2 , step 103 in the method provided in the embodiment of the present application, i.e., determining the communication key corresponding to the first electronic device based on the private key of the first electronic device, the public authentication information of the device network and the auxiliary authentication information of the second electronic device adjacent to the first electronic device, can be further implemented as follows:

[0109] Step 202: Determine a communication key corresponding to the first electronic device based on the private key of the first electronic device, the public authentication information, and first sub-auxiliary authentication information and second sub-auxiliary authentication information transmitted by a second electronic device adjacent to the first electronic device.

[0110] During implementation, a specific calculation formula can be designed for the first sub-auxiliary authentication information of the intermediate device, the second sub-auxiliary authentication information, the first sub-auxiliary authentication information of the starting device, and the communication key of the terminating device (first electronic device), and related data information can be calculated based on their respective calculation formulas.

[0111] It is worth noting that as long as the designed calculation formula is consistent with the parameter information required to generate each data information in the embodiment of the present application, and on the basis of the same public authentication information obtained by each electronic device in the device network and key exchange, it is possible to enable each device in the device network to generate the same communication key based on the designed calculation formula, which falls within the protection scope of the embodiment of the present application.

[0112] The following provides an example of determining the communication key of the first electronic device based on various calculation formulas designed in the present application.

[0113] In this example, it is assumed that there are n electronic devices for key negotiation, which are represented by D1, D2, ..., D n In the key negotiation phase, these n devices do not need to establish connections with each other, but only need to establish connections in sequence to form a directed ring network. For example, if there are four devices D1, D2, D3, and D4, they can be connected in the order of D1→D2→D3→D4→D1 to form a directed ring device network.

[0114] During the initialization phase, each device generates two pairs of keys (i.e., two public and private key pairs), and each device broadcasts the two public keys it generates to all other devices using low-power Bluetooth. The keys generated by each device are expressed as follows:

[0115] D1: {x1, G1}, {x2, G2}

[0116] D2: {x3, G3}, {x4, G4} ...

[0118] D k :{x 2k-1 , G 2k-1}, {x 2k , G 2k} ...

[0120] D n :{x 2n-1 , G 2n-1}, {x 2n , G 2n}.

[0121] Each of the above lines represents two pairs of keys generated by a corresponding device, where x i represents the private key, G i represents the public key, G i =x i ×G, G represents the base point. 1≤i≤2n, n is the number of devices that need to perform key negotiation, and both i and n are integers.

[0122] During the communication key generation phase, the communication key of each electronic device in the device network needs to be calculated by all participants, and all participants refer to all electronic devices in the device network.

[0123] The following is an electronic device D n The communication key K n Take the generation process of the communication key as an example to illustrate the generation process of the communication key. n The communication key K n For the generation process of n The execution subject of the method of the present application is the first electronic device, and D n The other electronic devices other than the second electronic device are the second electronic devices, and the starting device and the ending device in the device network are D1 and D n .

[0124] In this case, the electronic device D n The communication key K n The generation process includes:

[0125] Device D1 calculates its first sub-auxiliary authentication information Round1 and sends Round1 to D2.

[0126] An exemplary calculation formula for Round 1 is as follows:

[0127] Round1=(G1+G3+G4...+G 2n)×(x2*s).

[0128] Wherein, s represents public authentication information.

[0129] The device D2 calculates its first sub-auxiliary authentication information Round2 and second sub-auxiliary authentication information Round′2, and sends Round2 and Round′2 to the device D3.

[0130] The exemplary calculation formulas for Round2 and Round3 are as follows:

[0131] Round2=(Round1-(s*x4)×G2)×(x4)

[0132] =(G1+G3+G5+G6+...+G 2n )×(x2*x4*s)

[0133] Round′2=x4×G2.

[0134] The device D3 calculates its first sub-auxiliary authentication information Round3 and second sub-auxiliary authentication information Round3, and sends Round3 and Round′3 to the device D4.

[0135] The exemplary calculation formulas for Round3 and Round′3 are as follows:

[0136] Round3=(Round2-(s*x6)×Round′2)×(x4)

[0137] =(G1+G3+G5+G7+G8+...+G 2n )×(x2*x4*x6*s)

[0138] Round′3=x6×Round′2=x6×x4×G2.

[0139] And so on, until device D n-1 Round n-1 and Round′ n-1 Send to device D n .

[0140] Equipment D n Calculate the first sub-auxiliary authentication information Round n , the first sub-auxiliary authentication information Round n That is device D n The communication key K n , the exemplary calculation formula is as follows:

[0141] K n =(Round n-1-(s*x 2n )×Round′ n-1 )×(x 2n )

[0142] =(G1+G3+G5+...+G 2n-3 +G 2n-1 )×(x2*x4*x6*...*x 2n *s)

[0143] The following Table 1 further provides a comparison of the number of data transmissions in the key generation phase between the present application and the original Jpake algorithm in the known technology in a scenario where n devices are networked for key negotiation and generation.

[0144] Table 1

[0145]

[0146] At the same time, the following Table 2 provides information on the comparison of the number of data calculations (algorithm initialization phase + key generation phase) between the present application and the original Jpake algorithm in the known technology in a networking scenario of n devices.

[0147] Table 2

[0148]

[0149] Based on Table 1 and Table 2, it can be seen that for the scenario of n devices being networked for key negotiation and generation, the present application significantly reduces both the number of data transmissions and the number of data calculations compared to the Jpake algorithm of the known technology. Thus, the present application solves the problem of the known technology that the key negotiation process needs to be executed between every two devices, resulting in a large number of data exchanges and key negotiations between devices, high costs, and low efficiency.

[0150] To sum up, in this embodiment, each electronic device in the device network can use the ring directed network to conduct key negotiation between multiple devices and generate their own communication keys, which reduces the number and cost of data exchange and key negotiation between devices in the scenario of multiple device networking, and improves the key negotiation efficiency.

[0151] In an alternative embodiment, see Figure 3 As shown in the processing method flow chart, the processing method provided by the present application may further include the following processing after step 103:

[0152] Step 104: Based on the communication key, perform encrypted communication processing with the corresponding second electronic device.

[0153] When a first electronic device needs to transmit data with a corresponding second electronic device in a device network, the communication key can be used to perform encrypted communication processing between the first electronic device and the corresponding second electronic device.

[0154] The encrypted communication processing includes: the first electronic device uses the communication key to encrypt data of the first electronic device and transmits it in the device network, and / or receives transmission data sent by the second electronic device in the device network and decrypts it using the communication key.

[0155] Specifically, if the first electronic device needs to send data to the corresponding second electronic device, the first electronic device can use its own communication key to encrypt the data to be sent, and transmit the obtained encrypted data in the device network to transmit it to the corresponding second electronic device. Subsequently, the corresponding second electronic device can use its own communication key to decrypt the received data. If the first electronic device needs to receive data from the corresponding second electronic device, the corresponding second electronic device uses its own communication key to encrypt the data to be sent and transmits the obtained encrypted data. After receiving the encrypted data, the first electronic device uses the communication key of the first electronic device to decrypt it to restore the corresponding original data.

[0156] When the first electronic device performs encrypted communication processing with the corresponding second electronic device based on its communication key, optionally, it can also first determine whether there is a direct communication connection between the first electronic device and the corresponding second electronic device. If so, the direct communication connection is used to perform encrypted communication with the corresponding second electronic device based on the communication key. On the contrary, if there is no direct communication connection with the corresponding second electronic device, a direct communication connection is established with the corresponding second electronic device, and the established direct communication connection is used to perform encrypted communication with the corresponding second electronic device based on the communication key.

[0157] For example, for the ring directed network A→B→C→D→A, a communication connection between adjacent devices has been established in advance in the key negotiation phase. If the first electronic device is D, and assuming that D needs to communicate with A, the direct communication connection established between device D and device A can be directly reused to perform encrypted communication between the two devices; if device D needs to communicate with device B, a direct communication connection can be established between device D and device B, and encrypted communication can be performed based on the established direct communication connection.

[0158] The connection established between different devices may be, but is not limited to, a Bluetooth connection.

[0159] This embodiment uses the communication key generated based on the key negotiation to perform encrypted communication processing between different devices, thereby ensuring the communication security between different devices. In addition, when performing encrypted communication processing between devices based on the communication key, this embodiment transmits data based on the direct communication connection between different devices, which can effectively avoid the risk of data leakage on the transit device, further improving the communication security between different devices, and when a direct communication connection has been established between the corresponding devices during the key negotiation stage, the established direct communication connection is reused for data transmission, which reduces the processing workload and improves the communication efficiency.

[0160] In an alternative embodiment, see Figure 4 The processing method flow chart shown in the figure, the processing method provided by the present application may also include the following processing:

[0161] Step 105: If an electronic device in the device network is changed, the processing method is triggered for each electronic device in the device network after the change, so that each electronic device in the device network after the change obtains a corresponding communication key.

[0162] Specifically, if an electronic device exits or joins a device network, causing a change in the electronic device in the device network, the processing method of the embodiment of the present application is triggered for each electronic device in the device network after the change, so that each electronic device in the device network after the change runs the processing method of the embodiment of the present application once, thereby realizing key negotiation between the electronic devices after the change, and obtaining the communication key of each electronic device, so as to support subsequent encrypted communication processing between different electronic devices in the device network after the change as needed.

[0163] This embodiment triggers the processing method for each electronic device in the device network after the change, so that each electronic device in the device network after the change can participate in the key negotiation in real time to obtain its own communication key. In this way, in the case of a device exiting, a new communication key can be regenerated to avoid the possible key leakage caused by the device exiting. In the case of a device joining, a new communication key can be regenerated to ensure that each electronic device in the device network after the change participates in the key negotiation and has its own communication key, thereby ensuring the communication security between devices.

[0164] The following takes the scenario of three devices networking as an example to compare and illustrate the differences between the key negotiation process of the present application and the Jpake algorithm in the known technology, as well as the technical advantages of the present application.

[0165] The Jpake algorithm is an identity authentication key negotiation algorithm, which includes two stages: identity authentication and key negotiation. Figure 5 The schematic diagram of the two processing stages of the Jpake algorithm in the known technology shown, wherein the identity authentication stage completes the identity authentication between devices based on the Pin code, and on this basis, a key negotiation is performed between the two devices that have completed the identity authentication.

[0166] Since the Jpake algorithm can only be used for key negotiation between two devices, for scenarios with three devices in a network, see Figure 6 , it is necessary to perform Pin code-based identity authentication and key negotiation based on this between each two devices, and based on the present application method, such as Figure 7 As shown, it is only necessary to run a key negotiation process based on identity authentication once between the three devices to obtain their respective communication keys, and the three devices jointly participate in the key negotiation process.

[0167] Based on the present application method, the process of three devices negotiating a key simultaneously may include:

[0168] 1. Initialization phase

[0169] Assume that the three devices are represented by Alice, Bob and Charlie, and refer to Figure 8 As shown in the processing flow chart of the initialization phase, in the initialization phase, the public secret s can be obtained from three devices, namely Alice, Bob and Charlie. The public secret s refers to public authentication information such as the Pin code. After that, Alice, Bob and Charlie each generate two temporary public-private key pairs: x1, G1, x2, G2, x3, G3, x4, G4, x5, G5, x6, G6, and send their own public keys to the other two devices respectively.

[0170] Among them, x1, G1, x2, G2 are the two public-private key pairs generated by Alice; x3, G3, x4, G4 are the two public-private key pairs generated by Bob; x5, G5, x6, G6 are the two public-private key pairs generated by Charlie.

[0171] 2. Key negotiation and generation phase

[0172] In this stage, take Charlie's communication key generation as an example. At this time, the terminating device in the device network is Charlie, and it is assumed that the starting device in the device network is Alice. Fig. 9 , provides a process for generating a communication key on device Charlie based on key negotiation, including:

[0173] 1) Alice constructs the intermediate result A1 = (G1 + G3 + G4 + G5 + G6) × (x2*s).

[0174] The intermediate result constructed by Alice is the first sub-auxiliary authentication information generated by Alice.

[0175] 2) Alice sends the intermediate result A1 to Bob.

[0176] 3) Bob uses A1 to generate the intermediate result B2.

[0177] Among them, B2=(A1-(s*x4)×G2)×x4=(G1+G3+G5+G6)×(x2*x4*s).

[0178] The intermediate result B2 is the first sub-auxiliary authentication information generated by Bob.

[0179] 4) Bob calculates x4×G2 and sends x4×G2 and the intermediate result B2 to Charlie.

[0180] x4×G2 is the second sub-auxiliary authentication information generated by Bob.

[0181] 5) Charlie uses B2 and x4×G2 to generate his own communication key K c .

[0182] K c =(B2-(s*x6)×(x4×G2))×x6=(G1+G3+G5)×(x2*x4*xx6*s).

[0183] The key generation process for other devices such as Alice and Bob is similar and will not be elaborated on here.

[0184] See also Fig.10 , provides the interaction timing between the three devices in the application scenario. Through the provided interaction timing, the public key, the first sub-auxiliary information, the second sub-auxiliary information and other related information are exchanged between the devices to achieve key negotiation between the devices and the generation of communication keys for each device based on the key negotiation.

[0185] Optionally, the security prerequisites involved in the methods of the embodiments of the present application may be consistent with the original Jpake algorithm, for example, may include consistency in the following aspects of information: elliptical encryption type, zero-trust proof of the device's private key that needs to be transmitted in each round of negotiation, and key verification algorithm.

[0186] The following is a comparison of the number of data transmissions of the original Jpake algorithm in the present application and the known technology during the key negotiation process of three devices:

[0187] Table 3

[0188] algorithm Total number of transfers Number of transmissions per device Original Jpake algorithm 9 6 This algorithm 6 4 promote 33％ 33％

[0189] The following is a comparison of the number of data calculations of the original Jpake algorithm in the present application and the known technology during the key negotiation process of three devices:

[0190] Table 4

[0191]

[0192] According to Tables 3 and 4, in the scenario of networking multiple devices, both the number of data transmissions and the number of data calculations are greatly reduced in this application compared with the known technology, thereby optimizing the key negotiation and generation process in the scenario of networking multiple devices.

[0193] Corresponding to the above processing method, the embodiment of the present application further provides a processing device, which is applied to a first electronic device. The composition structure of the processing device is as follows: Fig.11 As shown, including:

[0194] A first acquisition module 1101 is used to obtain public authentication information in a device network and public keys of multiple electronic devices in the device network for key negotiation; wherein the first electronic device and multiple second electronic devices form a ring-shaped directed device network in a preset order;

[0195] The second acquisition module 1102 is used to obtain auxiliary authentication information transmitted by a second electronic device that is adjacent to the first electronic device; the second electronic device that is adjacent to the first electronic device is an electronic device in the device network that is directly connected to the first electronic device and points to the first electronic device;

[0196] A determination module 1103, configured to determine a communication key corresponding to the first electronic device based on the private key of the first electronic device, the public authentication information of the device network, and the auxiliary authentication information of the second electronic device adjacent to the first electronic device;

[0197] The auxiliary authentication information is data generated by the second electronic device that is adjacent to the previous device and is related to at least part of the following information: the private key of the second electronic device that is adjacent to the previous device, the public authentication information, and the public keys of each electronic device in the device network.

[0198] In an optional implementation manner, the first acquisition module 1101, when obtaining the public authentication information in the device network, is specifically used to:

[0199] Obtaining first authentication information generated by the first electronic device, or obtaining second authentication information input into the first electronic device;

[0200] The public authentication information includes the first authentication information or the second authentication information; the second authentication information is authentication information input into the first electronic device based on authentication information generated and displayed by a corresponding second electronic device among the multiple second electronic devices.

[0201] In an optional implementation manner, the first acquisition module 1101, when obtaining the public keys of multiple electronic devices in the device network for key negotiation, is specifically used to:

[0202] Reading the public key of the first electronic device;

[0203] Receive a public key that matches the second electronic device's own private key and is broadcasted by each second electronic device in a Bluetooth low energy manner.

[0204] In an optional implementation, the apparatus further includes a connection establishment module, which is used to: establish a communication connection between every two adjacent electronic devices in the ring-shaped directed network before obtaining the auxiliary authentication information transmitted by the second electronic device adjacent to the first electronic device;

[0205] The second acquisition module 1102 is specifically used to: receive the auxiliary authentication information transmitted by the second electronic device that is previously adjacent to the first electronic device through a target communication connection; the target communication connection is a communication connection between the first electronic device and the second electronic device that is previously adjacent to the first electronic device.

[0206] In an optional implementation manner, the second acquisition module 1102 is specifically configured to:

[0207] Obtaining first sub-auxiliary authentication information and second sub-auxiliary authentication information transmitted by a second electronic device adjacent to the first electronic device; the auxiliary authentication information includes the first sub-auxiliary authentication information and the second sub-auxiliary authentication information;

[0208] Among them, the first sub-auxiliary authentication information is data generated by the previous adjacent second electronic device and related to the private key of the previous adjacent second electronic device, the public authentication information and the public keys of each electronic device in the device network; the second sub-auxiliary authentication information is data generated by the previous adjacent second electronic device and related to the private key of the previous adjacent second electronic device.

[0209] In an optional implementation manner, the determination module 1103 is specifically configured to:

[0210] A communication key corresponding to the first electronic device is determined based on the private key of the first electronic device, the public authentication information, the first sub-auxiliary authentication information, and the second sub-auxiliary authentication information.

[0211] In an optional implementation, the apparatus includes an encrypted communication processing module, which is used to perform encrypted communication processing with the corresponding second electronic device based on the communication key after determining the communication key corresponding to the first electronic device;

[0212] Among them, the encrypted communication processing includes: the first electronic device uses the communication key to encrypt the data of the first electronic device and transmits it in the device network, and / or receives the transmission data sent by the second electronic device in the device network and decrypts it using the communication key.

[0213] In an optional implementation manner, when the encrypted communication processing module performs encrypted communication processing with the corresponding second electronic device based on the communication key, it is specifically used to:

[0214] If there is a direct communication connection with the corresponding second electronic device, using the direct communication connection to perform encrypted communication with the corresponding second electronic device based on the communication key;

[0215] If there is no direct communication connection with the corresponding second electronic device, a direct communication connection with the corresponding second electronic device is established, and encrypted communication with the corresponding second electronic device is performed based on the communication key using the established direct communication connection.

[0216] In an optional embodiment, the above-mentioned device also includes a change processing module, which is used to: if an electronic device in the device network changes, trigger the processing method for each electronic device in the device network after the change, so that each electronic device in the device network after the change obtains a corresponding communication key.

[0217] The present application also discloses an electronic device, the composition structure of the electronic device, such as Fig.12 As shown, including at least:

[0218] A memory 10, for storing a computer instruction set;

[0219] A set of computer instructions can be implemented in the form of a computer program.

[0220] The processor 20 is used to implement the processing method provided by any of the above method embodiments by executing a computer instruction set.

[0221] The processor 20 may be a central processing unit (CPU), an application-specific integrated circuit (ASIC), a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic devices.

[0222] The electronic device includes a display device and / or includes a display interface and can be connected to an external display device.

[0223] Optionally, the electronic device also includes a camera assembly, and / or is connected to an external camera assembly.

[0224] In addition, the electronic device may also include components such as a communication interface and a communication bus. The memory, the processor and the communication interface communicate with each other through the communication bus.

[0225] The communication interface is used for communication between electronic devices and other devices. The communication bus can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. The communication bus can be divided into an address bus, a data bus, a control bus, etc.

[0226] It should be noted that the various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0227] For the convenience of description, the above system or device is described by dividing it into various modules or units according to its functions. Of course, when implementing the present application, the functions of each unit can be implemented in the same or multiple software and / or hardware.

[0228] It can be known from the description of the above implementation methods that those skilled in the art can clearly understand that the present application can be implemented by means of software plus a necessary general hardware platform. Based on such an understanding, the technical solution of the present application can be essentially or the part that makes a creative contribution can be embodied in the form of a software product, which can be stored in a storage medium such as ROM / RAM, a disk, an optical disk, etc., including several instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment of the present application or some parts of the embodiments.

[0229] Finally, it should be noted that, in this article, relational terms such as first, second, third and fourth are used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "comprise", "include" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the statement "comprise a ..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0230] The above is only a preferred implementation of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present application. These improvements and modifications should also be regarded as the scope of protection of the present application.

Claims

1. A processing method, applied to a first electronic device, the processing method comprising: Obtaining public authentication information in a device network and public keys of multiple electronic devices in the device network for key negotiation; wherein the first electronic device and multiple second electronic devices form a ring-shaped directed device network in a preset order; Obtaining auxiliary authentication information transmitted by a second electronic device that is adjacent to the first electronic device; the second electronic device that is adjacent to the first electronic device is an electronic device in the device network that is directly connected to the first electronic device and points to the first electronic device; Determining a communication key corresponding to the first electronic device based on the private key of the first electronic device, the public authentication information of the device network, and the auxiliary authentication information of the second electronic device adjacent to the first electronic device; The auxiliary authentication information is data generated by the second electronic device that is adjacent to the previous device and is related to at least part of the following information: the private key of the second electronic device that is adjacent to the previous device, the public authentication information, and the public keys of each electronic device in the device network.

2. The processing method according to claim 1, wherein obtaining public authentication information in the device network comprises: Obtaining first authentication information generated by the first electronic device, or obtaining second authentication information input into the first electronic device; The public authentication information includes the first authentication information or the second authentication information; the second authentication information is authentication information input into the first electronic device based on authentication information generated and displayed by a corresponding second electronic device among the multiple second electronic devices.

3. The processing method according to claim 1, obtaining the public keys of multiple electronic devices in the device network for key negotiation, comprising: Reading a public key of the first electronic device; Receive a public key that matches the second electronic device's own private key and is broadcasted by each second electronic device based on the Bluetooth low energy mode.

4. The processing method according to claim 1, before obtaining the auxiliary authentication information transmitted by the second electronic device immediately adjacent to the first electronic device, further comprising: Establishing a communication connection between every two adjacent electronic devices in the ring-shaped directed network; The obtaining of auxiliary authentication information transmitted by a second electronic device adjacent to the first electronic device includes: Receiving the auxiliary authentication information transmitted by a second electronic device adjacent to the first electronic device through a target communication connection; The target communication connection is a communication connection between the first electronic device and a second electronic device adjacent to the first electronic device.

5. The processing method according to claim 1, wherein obtaining the auxiliary authentication information transmitted by the second electronic device immediately preceding the first electronic device comprises: Obtaining first sub-auxiliary authentication information and second sub-auxiliary authentication information transmitted by a second electronic device adjacent to the first electronic device; The auxiliary authentication information includes the first sub-auxiliary authentication information and the second sub-auxiliary authentication information; Among them, the first sub-auxiliary authentication information is data generated by the previous adjacent second electronic device and related to the private key of the previous adjacent second electronic device, the public authentication information and the public keys of each electronic device in the device network; the second sub-auxiliary authentication information is data generated by the previous adjacent second electronic device and related to the private key of the previous adjacent second electronic device.

6. The processing method according to claim 5, wherein the determining the communication key corresponding to the first electronic device based on the private key of the first electronic device, the public authentication information of the device network and the auxiliary authentication information of the second electronic device adjacent to the first electronic device comprises: A communication key corresponding to the first electronic device is determined based on the private key of the first electronic device, the public authentication information, the first sub-auxiliary authentication information, and the second sub-auxiliary authentication information.

7. The processing method according to any one of claims 1 to 6, after determining the communication key corresponding to the first electronic device based on the private key of the first electronic device, the public authentication information of the device network and the auxiliary authentication information of the second electronic device adjacent to the first electronic device, further comprising: Based on the communication key, performing encrypted communication processing with the corresponding second electronic device; Among them, the encrypted communication processing includes: the first electronic device uses the communication key to encrypt the data of the first electronic device and transmits it in the device network, and / or receives the transmission data sent by the second electronic device in the device network and decrypts it using the communication key.

8. The processing method according to any one of claim 7, wherein the encrypted communication processing with the corresponding second electronic device based on the communication key comprises: If there is a direct communication connection with the corresponding second electronic device, using the direct communication connection to perform encrypted communication with the corresponding second electronic device based on the communication key; If there is no direct communication connection with the corresponding second electronic device, a direct communication connection with the corresponding second electronic device is established, and encrypted communication with the corresponding second electronic device is performed based on the communication key using the established direct communication connection.

9. The processing method according to any one of claim 1, further comprising: If an electronic device in the device network is changed, the processing method is triggered for each electronic device in the device network after the change, so that each electronic device in the device network after the change obtains a corresponding communication key.

10. An electronic device, comprising: A memory for storing at least one set of computer instructions; A processor, configured to implement the processing method according to any one of claims 1 to 9 by executing the instruction set stored in the memory.

Images