Data processing method and device for smart home, equipment and medium
By building a smart home management platform and collecting healthy data, and using symmetric encryption and asymmetric encryption technologies, the problem of insufficient cloud data sharing efficiency and security in smart homes is solved, and efficient and secure data sharing and management is achieved.
Patent Information
- Application Number
- CN202411525906.5
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-10-30
- Publication Date
- 2025-03-07
AI Technical Summary
The prior art is difficult to effectively improve the sharing efficiency and security of cloud data in smart homes, especially in the lack of customized functions and fine data access control under the specific needs of the home.
Build a smart home management platform, bind smart home devices, collect health data of family members, and ensure the secure transmission and storage of data through a combination of symmetric encryption and asymmetric encryption.
It enables efficient and secure sharing of health data in a smart home environment, ensuring that only authorized family members have access to specific data, protecting personal privacy and simplifying data management processes.
Smart Images

Figure CN119583237A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of data processing technology, and in particular to a data processing method, device, equipment and medium for a smart home. Background Art
[0002] Smart home refers to a home environment that integrates various devices and services in the home through Internet connection and intelligent technology to achieve automatic control and intelligent management. The data generated by smart devices in a smart home can be uploaded to the cloud server through the Internet for storage, processing and analysis in the cloud.
[0003] Data processing in smart homes mainly focuses on data transmission between smart home devices, access rights management of family members to information, and data security and privacy protection. Among them, the existing smart home management system provides a basic framework for device management. Users can control smart devices in their homes through voice commands or mobile applications. These systems support multi-user environments, but usually do not have sufficient control over data security and data sharing between family members. In terms of data transmission and storage, existing technologies use standardized encryption protocols for data encryption. However, for sensitive data unique to home environments, such as health monitoring data processing, these standardized encryption technologies cannot fully meet specific privacy protection requirements. In enterprise-level information systems, role-based access control is a common implementation method, while implementation in smart home environments focuses more on user-friendliness and needs to find a balance between ease of use and strict security. Some existing technologies use a combination of smart home management systems and enhanced data protection measures, combined with end-to-end encryption technology and customized access control policies to achieve secure data sharing. This solution can meet the basic needs of a family to a certain extent, but usually lacks functions tailored to the specific needs of the family: most enhanced data protection measures use general encryption technology rather than dedicated encryption policies for data characteristics in a home environment; there is no centralized home management platform, which makes it complicated to manage multiple devices and user permissions, thereby reducing the efficiency of data sharing; although there is a basic division of user roles, it is often not sophisticated enough when dealing with data sharing between specific family members, and personalized data access control cannot be achieved.
[0004] Therefore, how to improve the sharing efficiency and security of cloud data in smart homes is an urgent problem that needs to be solved. Summary of the invention
[0005] The present invention intends to provide a data processing method, device, equipment and medium for a smart home to solve the problem existing in the prior art of how to improve the sharing efficiency and security of cloud data of a smart home. The technical problem to be solved by the present invention is achieved through the following technical solution.
[0006] The present application provides a data processing method for a smart home, the method comprising:
[0007] Building a smart home management platform and inviting multiple family members to join the smart home management platform;
[0008] Binding smart home devices through the smart home management platform, and collecting health data of the multiple family members based on the bound smart home devices;
[0009] Performing symmetric encryption on the health data to obtain a symmetric encryption key corresponding to the health data, and performing asymmetric encryption on the symmetric encryption key to obtain target encrypted data;
[0010] The target encrypted data is transmitted to a pre-configured cloud database so that any family member can view the health data of other family members in the cloud database in real time through the smart home management platform.
[0011] In one embodiment of the present application, the step of inviting multiple family members to join the smart home management platform includes:
[0012] The administrator of the smart home management platform sends an invitation link for joining the smart home management platform to the multiple family members through a pre-matched instant messaging application;
[0013] When the multiple family members receive the invitation link, they register their identities in the smart home management platform through the invitation link and join the smart home management platform based on the registered identities.
[0014] In one embodiment of the present application, after registering the identity in the smart home management platform through the invitation link, the process further includes:
[0015] Acquire the registration information of the family member, the registration information including the identity identifier and key of the registration client;
[0016] constructing an authorization request locator according to the identity identifier and key of the registered client, and directing the family member to the authorization request locator;
[0017] When the administrator authorizes access to the registered client, matching an authorization code to the authorization request locator;
[0018] According to the authorization code, a token request is constructed so that the registered client obtains the data in the smart home management platform according to the token request.
[0019] In one embodiment of the present application, the symmetric encryption of the health data to obtain a symmetric encryption key corresponding to the health data, and asymmetric encryption of the symmetric encryption key to obtain target encrypted data includes:
[0020] Perform byte replacement, row shift and column obfuscation on the health data through a preset number of iterations to obtain the symmetric encryption key;
[0021] By presetting an asymmetric encryption public key, asymmetric encryption is performed on the symmetric encryption key to obtain an asymmetric encryption key;
[0022] The target encrypted data is obtained based on the symmetric encryption key and the asymmetric encryption key.
[0023] In one embodiment of the present application, any one of the family members can view the health data of other family members in the cloud database in real time through the smart home management platform, including:
[0024] Any family member obtains the preset asymmetric encryption private key of the registered client through the smart home management platform;
[0025] Based on the preset asymmetric encryption private key, decrypt the asymmetric encryption key to obtain the symmetric encryption key;
[0026] Based on the symmetric encryption key, the symmetric encrypted ciphertext is decrypted to obtain the health data of the other family members.
[0027] In one embodiment of the present application, the symmetric encryption of the health data to obtain a symmetric encryption key corresponding to the health data, and asymmetric encryption of the symmetric encryption key to obtain target encrypted data includes:
[0028] Symmetrically encrypt the health data using a stream cipher and a message authentication code to obtain the symmetric encryption key;
[0029] Based on the elliptic curve, asymmetrically encrypt the symmetric encryption key to obtain an asymmetric encryption key;
[0030] The target encrypted data is obtained based on the symmetric encryption key and the asymmetric encryption key.
[0031] In one embodiment of the present application, after collecting the health data of the multiple family members, the method further includes:
[0032] Performing set operations and grouping aggregation on the health data to obtain aggregated health data;
[0033] Dividing the aggregated health data into time periods;
[0034] Maintaining the status information in the aggregated health data through counters, accumulators, and timestamps;
[0035] The time in the aggregated health data is processed through filtering, projection and connection processing.
[0036] The present application also provides a data processing device for a smart home, the device comprising:
[0037] A platform construction module, used to construct a smart home management platform and invite multiple family members to join the smart home management platform;
[0038] A data collection module, used to bind smart home devices through the smart home management platform, and collect health data of the multiple family members based on the bound smart home devices;
[0039] An encryption module, used to symmetrically encrypt the health data to obtain a symmetric encryption key corresponding to the health data, and asymmetrically encrypt the symmetric encryption key to obtain target encrypted data;
[0040] The data transmission module is used to transmit the target encrypted data to a pre-configured cloud database so that any family member can view the health data of other family members in the cloud database in real time through the smart home management platform.
[0041] An embodiment of the present application further provides a computer-readable storage medium, wherein the computer-readable storage medium includes a stored computer program, wherein when the computer program is run, the smart home data processing method as described in any one of the above items is executed.
[0042] An embodiment of the present application also provides an electronic device, including a memory and a processor, wherein the memory stores a computer program, and the processor is configured to execute the smart home data processing method as described in any one of the above items through the computer program.
[0043] The embodiments of the present invention include the following advantages:
[0044] The data processing method, device, equipment and medium for a smart home provided by an embodiment of the present invention first build a smart home management platform and invite multiple family members to join the smart home management platform; then, through the smart home management platform, bind smart home devices, and collect health data of the multiple family members based on the bound smart home devices; then, symmetrically encrypt the health data to obtain a symmetric encryption key corresponding to the health data, and asymmetrically encrypt the symmetric encryption key to obtain target encrypted data; finally, transmit the target encrypted data to a pre-configured cloud database so that any family member can view the health data of other family members in the cloud database in real time through the smart home management platform.
[0045] In the present invention, a smart home management platform is constructed and family members are invited to join. The data of all family members can be managed on one platform, which simplifies the operation process. The platform can set different permission levels to ensure that only authorized family members can access specific data; binding smart home devices and collecting health data can ensure that the collected data is complete and accurate; symmetric encryption is performed on the health data, and symmetric encryption is suitable for processing large amounts of data. Even if the data is intercepted during transmission, it cannot be directly read, thereby protecting the privacy of the data; asymmetric encryption is performed on the symmetric encryption key, which provides higher security and ensures that the key will not be stolen during transmission. Each family member can use his or her own public key to encrypt the key, and the private key is stored locally, ensuring that only the family member holding the private key can decrypt the data; the target encrypted data is transmitted to a cloud database, which usually has high availability and fault tolerance to ensure the reliability and durability of the data; through permission control and encryption mechanisms, it is ensured that only authorized family members can access specific data, thereby protecting personal privacy. BRIEF DESCRIPTION OF THE DRAWINGS
[0046] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:
[0047] Figure 1 is a schematic diagram of an application environment of a data processing method for a smart home shown in an exemplary embodiment of the present application;
[0048] Figure 2 is a flowchart of a data processing method for a smart home shown in an exemplary embodiment of the present application;
[0049] Figure 3 is a schematic diagram of a data processing device for a smart home shown in an exemplary embodiment of the present application;
[0050] Figure 4 It is a schematic diagram of the structure of an electronic device shown in an exemplary embodiment of the present application. DETAILED DESCRIPTION
[0051] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present application.
[0052] It should be noted that the terms used herein are only for describing specific embodiments and are not intended to limit the exemplary embodiments according to the present application. As used herein, unless the context clearly indicates otherwise, the singular form is also intended to include the plural form. In addition, it should also be understood that when the terms "comprise" and / or "include" are used in this specification, it indicates the presence of features, steps, operations, devices, components and / or combinations thereof.
[0053] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the terms used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein.
[0054] In addition, the terms "include" and "have" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product, or apparatus that includes a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units that are not explicitly listed or inherent to these processes, methods, products, or apparatuses.
[0055] Among them, the existing smart home management systems do not provide sufficient security to protect user identity and data, resulting in users' sensitive information such as health data or identity documents being easily intercepted or tampered with; in addition, the user identity authentication process is too complicated in some systems and inconvenient for users to operate, which affects the user experience and may limit the widespread application of the system; in addition, some systems cannot provide a centralized platform to effectively manage family members, devices and data sharing permissions, resulting in users having difficulty in real-time control and adjustment of permission settings; in addition, privacy protection measures are insufficient, and the privacy of family members may be inadvertently leaked, especially in terms of data sharing and access control. There is a lack of clear definition; finally, the data encryption measures in some existing solutions are insufficient, and they fail to fully protect the security of data during transmission or storage, making them vulnerable to external attacks.
[0056] In one embodiment of the present application, a data processing method for a smart home is provided. Optionally, as an optional implementation, the data processing method for a smart home can be applied to, but is not limited to, Figure 1 in the environment shown. Figure 1 is a schematic diagram of an application environment of a smart home data processing method shown in an exemplary embodiment of the present application, see Figure 1 , the smart home control terminal 101 may be, but is not limited to, a host computer, a desktop computer, a laptop computer, etc. with local computing capabilities. The smart home control terminal 101 may, but is not limited to, communicate with the registered client 102 and the server 103 through the network. The server 103 may, but is not limited to, perform operations on the database, such as write data operations or read data operations. The above-mentioned smart home control terminal 101 may, but is not limited to, include a human-computer interaction screen, a processor, and a memory. The above-mentioned human-computer interaction screen may, but is not limited to, be used to display the data processing process of the smart home. The above-mentioned processor may, but is not limited to, be used to respond to the above-mentioned human-computer interaction operations, perform corresponding operations, or generate corresponding instructions, and send the generated instructions to the server 103. The above-mentioned memory is used to store relevant data, such as health data of multiple family members.
[0057] As an optional method, the following steps in the smart home data processing method may be performed on the smart home control terminal 101:
[0058] Building a smart home management platform and inviting multiple family members to join the smart home management platform;
[0059] Binding smart home devices through the smart home management platform, and collecting health data of the multiple family members based on the bound smart home devices;
[0060] Performing symmetric encryption on the health data to obtain a symmetric encryption key corresponding to the health data, and performing asymmetric encryption on the symmetric encryption key to obtain target encrypted data;
[0061] The target encrypted data is transmitted to a pre-configured cloud database so that any family member can view the health data of other family members in the cloud database in real time through the smart home management platform.
[0062] As an optional method, the server 103 can obtain the target encrypted data transmitted by the smart home control terminal 101 and then perform subsequent processing.
[0063] In the above method, a smart home management platform is built and family members are invited to join. The data of all family members can be managed on one platform, which simplifies the operation process. The platform can set different permission levels to ensure that only authorized family members can access specific data; binding smart home devices and collecting health data can ensure that the collected data is complete and accurate; symmetric encryption of health data, which is suitable for processing large amounts of data, cannot be directly read even if the data is intercepted during transmission, thus protecting the privacy of the data; asymmetric encryption of symmetric encryption keys provides higher security, ensuring that the keys will not be stolen during transmission, each family member can use his or her own public key to encrypt the key, and the private key is stored locally, ensuring that only family members holding the private key can decrypt the data; transmitting the target encrypted data to a cloud database, which usually has high availability and fault tolerance, ensuring the reliability and durability of the data; through permission control and encryption mechanisms, ensuring that only authorized family members can access specific data, thus protecting personal privacy.
[0064] Optionally, in this embodiment, the smart home control terminal 101 may be a terminal device configured with a target client, which may include but is not limited to at least one of the following: a laptop, a tablet computer, a PDA, a desktop computer, etc. The target client may be a client that supports data processing applications for smart homes, such as a video client, an instant messaging client, a browser client, and an education client. The network may include but is not limited to: a wired network, a wireless network, wherein the wired network includes: a local area network, a metropolitan area network, and a wide area network, and the wireless network includes: Bluetooth, WIFI (wireless network communication technology) and other networks that implement wireless communication.
[0065] Optionally, the server may be a single server, or a server cluster consisting of multiple servers, or a cloud server. The above is only an example, and this embodiment does not impose any limitation on this.
[0066] As an optional example, this embodiment does not limit the execution subject of the above-mentioned smart home data processing method. Some or all steps of the above-mentioned smart home data processing method can be executed on the smart home control terminal 101. For example, when the smart home control terminal 101 is a desktop computer, some or all steps of the above-mentioned smart home data processing method can be executed on the desktop computer.
[0067] In one embodiment of the present application, a data processing method for a smart home is provided. Figure 2 is a flowchart of a data processing method for a smart home shown in an exemplary embodiment of the present application, see Figure 2 The data processing method of the smart home includes the following steps S210 to S250:
[0068] In step S210, a smart home management platform is constructed, and multiple family members are invited to join the smart home management platform.
[0069] Among them, the smart home management platform includes: a central control system, as the core of the platform, responsible for connecting all smart devices to achieve remote control of home appliances such as lighting, temperature, and security systems; family member account management, supporting the creation of main accounts and sub-accounts, each family member can access or control specific functions or devices according to permissions; task allocation and reminders, family members can assign housework tasks and set reminders through the platform to ensure that each task is completed on time; health monitoring and emergency response, integrating health monitoring functions, such as elderly fall detection, child activity monitoring, etc., automatically sending alarms to designated contacts when abnormal situations occur; data security protection, using the latest encryption technology to ensure the security of user personal information and family privacy.
[0070] When inviting multiple family members to join the smart home management platform, it is allowed to invite family members to join the platform through various methods such as email, text messages, social media, etc. The master account can set different operation permissions for each family member, such as read-only permission, edit permission, or full control permission. Provide a convenient way to add or delete family members and keep the family circle up to date. Built-in chat tools facilitate family members to discuss and communicate about family affairs.
[0071] For example, Mr. Zhang is a busy office worker who wants to use technology to take better care of his family. Mr. Zhang first registered a master account on the smart home management platform and connected his home's smart light bulbs, air conditioners, cameras and other devices to the platform. Then, he used the platform's invitation function to invite his wife, daughter and mother-in-law to join the platform by SMS and WeChat respectively. After Mr. Zhang's wife joined the platform, she could check and adjust the temperature at home, check her daughter's learning at home, and ensure the safety of the child. The daughter was given the permission to check the weather forecast and remind herself to bring an umbrella, which helped to cultivate her self-management ability. Although Mr. Zhang's mother-in-law was not very familiar with the operation of smart devices, she was given simple permissions, such as turning on and off the lights in the room through voice commands, or using the platform's built-in video call function to keep in touch with her family.
[0072] In step S220, the smart home devices are bound through the smart home management platform, and the health data of the multiple family members are collected based on the bound smart home devices.
[0073] When binding smart home devices, the platform supports multiple brands and types of smart devices, including but not limited to smart watches, blood pressure monitors, blood glucose meters, sleep monitors, etc. It automatically searches for nearby connectable smart devices through wireless technologies such as Bluetooth, and provides a one-click pairing function to simplify the user's operation steps. It provides an intuitive and easy-to-use interface to display the status information of bound devices, such as battery power, online status, etc., and supports adding, deleting, and updating devices.
[0074] Among them, based on the bound smart home devices, when collecting the health data of the multiple family members, the health data is automatically synchronized from the bound smart devices to the platform server to ensure the real-time and accuracy of the data. The collected data is classified and stored according to the device type and personal tags (such as age and gender), and the algorithm model is used for analysis to generate personalized health reports. Set thresholds, and when the monitored data exceeds the normal range, the platform will promptly send warning notifications to relevant family members.
[0075] In step S230, the health data is symmetrically encrypted to obtain a symmetric encryption key corresponding to the health data, and the symmetric encryption key is asymmetrically encrypted to obtain target encrypted data.
[0076] Wherein, when the health data is symmetrically encrypted, an efficient symmetric encryption algorithm, such as AES (Advanced Encryption Standard), is used to encrypt the health data. AES is a widely used symmetric encryption standard with high security and performance. A random symmetric encryption key is generated for encrypting and decrypting health data. The key length is usually 128 bits, 192 bits or 256 bits to ensure sufficient security. The health data is encrypted using the generated symmetric encryption key to generate encrypted health data.
[0077] Among them, symmetric encryption keys need to be properly managed to ensure that only authorized systems or users can access and use them. Symmetric encryption keys cannot be stored directly in databases or file systems and require further protection. When the symmetric encryption key is asymmetrically encrypted, an asymmetric encryption algorithm, such as RSA (Rivest-Shamir-Adleman), is used to encrypt the symmetric encryption key. The asymmetric encryption algorithm uses a pair of keys, the public key is used for encryption, and the private key is used for decryption. Obtain a public key from a server or other trusted source to encrypt the symmetric encryption key. Use the public key to encrypt the symmetric encryption key to generate an encrypted symmetric encryption key. The encrypted symmetric encryption key is securely transmitted to the server or other place where data needs to be decrypted. Use the private key to decrypt the symmetric encryption key on the server side, and then use the decrypted symmetric encryption key to decrypt the health data.
[0078] In step S240, the target encrypted data is transmitted to a pre-configured cloud database so that any family member can view the health data of other family members in the cloud database in real time through the smart home management platform.
[0079] Exemplarily, when transmitting the target encrypted data to a pre-configured cloud database, the target encrypted data processed by symmetric encryption and asymmetric encryption is prepared to ensure the security and integrity of the data. The database is configured in advance on the cloud service provider to ensure the security and high availability of the database. The target encrypted data is transmitted to the cloud database using a secure communication protocol. The integrity and confidentiality of the data should be ensured during the transmission process. The received target encrypted data is stored in the cloud database, and the persistence and reliability of the data are ensured.
[0080] For example, family members need to authenticate before using the smart home management platform to ensure that only authorized users can access the data. After the platform obtains the target encrypted data from the cloud database, it uses the private key to decrypt the symmetric encryption key, and then uses the decrypted symmetric encryption key to decrypt the health data. The decrypted health data is displayed to family members through the platform's user interface, supporting real-time viewing and historical data query. The platform supports fine-grained permission management to ensure that each family member can only view health data that matches their permissions.
[0081] By adopting the above-mentioned embodiments provided by the present application, a smart home management platform is constructed and family members are invited to join. The data of all family members can be managed on one platform, which simplifies the operation process. The platform can set different permission levels to ensure that only authorized family members can access specific data; binding smart home devices and collecting health data can ensure that the collected data is complete and accurate; symmetric encryption is performed on the health data. Symmetric encryption is suitable for processing large amounts of data. Even if the data is intercepted during transmission, it cannot be directly read, thereby protecting the privacy of the data; asymmetric encryption is performed on the symmetric encryption key, which provides higher security and ensures that the key will not be stolen during transmission. Each family member can use his or her own public key to encrypt the key, and the private key is stored locally to ensure that only family members holding the private key can decrypt the data; the target encrypted data is transmitted to a cloud database. The cloud database usually has high availability and fault tolerance to ensure the reliability and persistence of the data; through permission control and encryption mechanisms, it is ensured that only authorized family members can access specific data to protect personal privacy.
[0082] In one embodiment of the present application, the inviting multiple family members to join the smart home management platform includes:
[0083] The administrator of the smart home management platform sends an invitation link for joining the smart home management platform to the multiple family members through a pre-matched instant messaging application;
[0084] When the multiple family members receive the invitation link, they register their identities in the smart home management platform through the invitation link and join the smart home management platform based on the registered identities.
[0085] Among them, when determining the pre-matched instant messaging applications, select the instant messaging applications commonly used by users, such as WeChat, etc. These applications have a wide user base and mature communication functions. The smart home management platform is integrated with the instant messaging application through an interface to realize the automatic sending and receiving of messages. Instant messaging applications usually have a simple and easy-to-use interface, which is convenient for family members to quickly understand and operate.
[0086] The smart home management platform generates a unique invitation link, each of which contains a unique invitation code to identify the invitee. The invitation link contains necessary parameters, such as platform address, invitation code, validity period, etc., to ensure the effectiveness and security of the link. The administrator sends the invitation link to family members through the instant messaging application, and family members click the link to enter the registration process.
[0087] When registering for an identity, after a family member clicks on the invitation link, they enter the registration page of the smart home management platform and fill in the necessary personal information, such as name, mobile phone number, email address, etc. The platform verifies the identity of the family member through SMS verification codes, email verification codes, etc. to ensure the authenticity and validity of the registration information. The administrator can set different permissions for newly registered family members in the background, such as viewing permissions, editing permissions, etc. After registration is completed, the family member's account is automatically activated and can start using the various functions of the smart home management platform.
[0088] In this embodiment, an invitation link is sent through an instant messaging application, covering multiple communication channels and improving the success rate of the invitation. After receiving the invitation, family members can immediately click on the link to register without downloading additional applications, simplifying the operation steps. Each invitation link contains a unique invitation code to ensure that the invitation of each family member is independent and secure. The authenticity and security of the registration information are ensured through multiple verification mechanisms (such as SMS verification codes and email verification codes) to prevent malicious registration. Family members only need to click on the link to enter the registration page and fill in a small amount of information to complete the registration. The operation is simple and fast. The user interface of the instant messaging application is user-friendly, and family members can easily understand and operate it, which improves user satisfaction. Administrators can set different permissions for each family member to ensure that family members can only access and operate functions that match their permissions. The platform provides convenient account management functions, supports adding, deleting and modifying family members' account information, and keeps the family circle up to date.
[0089] In one embodiment of the present application, after registering the identity in the smart home management platform through the invitation link, the method further includes:
[0090] Acquire the registration information of the family member, the registration information including the identity identifier and key of the registration client;
[0091] constructing an authorization request locator according to the identity identifier and key of the registered client, and directing the family member to the authorization request locator;
[0092] When the administrator authorizes access to the registered client, matching an authorization code to the authorization request locator;
[0093] According to the authorization code, a token request is constructed so that the registered client obtains the data in the smart home management platform according to the token request.
[0094] Each registered client generates a unique identity (Client identity) when registering, which is used to uniquely identify the client. The key is used for secure communication between the client and the platform. The key should be kept confidential to prevent it from being obtained by unauthorized users.
[0095] When the authorization request locator is used, an authorization request locator (Authorization Request URL) is constructed based on the registered client's identity and key. The URL (Uniform Resource Locator) contains necessary parameters, such as the client's identity, redirection URL, response type, etc.
[0096] Among them, when the family member is directed to the authorization request locator, after the family member clicks the registration link, the system redirects him to the constructed authorization request locator. The family member confirms on the authorization page whether to allow the client to access his data, and if he agrees, proceed to the next step. When matching the authorization code for the authorization request locator, when the family member agrees to the authorization, the platform generates an authorization code and returns the authorization code to the registered client through the redirection URL. The registered client uses the authorization code to construct a token request and sends a request to the token endpoint of the platform to obtain an access token.
[0097] In this embodiment, each registered client has a unique identity and key to ensure that the registration information of each client is unique. The key is used for secure communication between the client and the platform to prevent unauthorized access. Family members explicitly agree to the authorization on the authorization page to ensure the transparency of data access and the user's right to know. Through the authorization code mechanism, each authorization request is ensured to be temporary and unique, improving security. The registered client obtains an access token through the authorization code, and can use the token to access the data in the platform, ensuring the flexibility and security of data access. The platform can manage the life cycle of the access token, such as setting an expiration time, refreshing the token regularly, etc. Family members can complete the authorization process with simple clicks and confirmation operations, and the user experience is good. After successful authorization, family members can immediately start using the various functions of the platform without complicated configuration and settings.
[0098] In one embodiment of the present application, the symmetric encryption of the health data to obtain a symmetric encryption key corresponding to the health data, and asymmetric encryption of the symmetric encryption key to obtain target encrypted data includes:
[0099] Perform byte replacement, row shift and column obfuscation on the health data through a preset number of iterations to obtain the symmetric encryption key;
[0100] By presetting an asymmetric encryption public key, asymmetric encryption is performed on the symmetric encryption key to obtain an asymmetric encryption key;
[0101] The target encrypted data is obtained based on the symmetric encryption key and the asymmetric encryption key.
[0102] Exemplarily, an advanced symmetric encryption algorithm, such as AES (Advanced Encryption Standard), is used to encrypt health data. A fixed number of iterations is preset to increase the complexity and security of encryption. The number of iterations can be adjusted according to actual needs, and is usually set to 10 times or more. In each iteration, an S-box (Substitution Box) is used to replace bytes, replacing each byte with another byte to increase the confusion of the data. The rows of the data matrix are shifted to change the position of the data in the matrix, increasing the diffusion of the data. The columns of the data matrix are obfuscated, and the Mix Columns algorithm is used to create dependencies between columns of data, further enhancing the complexity of the data.
[0103] Exemplarily, an asymmetric encryption algorithm, such as RSA (Rivest-Shamir-Adleman), is used to encrypt the symmetric encryption key. A public key is obtained from a server or other trusted source to encrypt the symmetric encryption key. The symmetric encryption key is encrypted using the public key to generate an asymmetric encryption key. The asymmetric encryption key is securely transmitted to a server or other place where data needs to be decrypted. The asymmetric encryption key is decrypted using a private key on the server side, and then the decrypted symmetric encryption key is used to decrypt the health data.
[0104] In this embodiment, through multiple iterations and complex byte replacement, row shift and column confusion operations, the encrypted health data is difficult to crack, thereby improving the security of the data. The symmetric encryption key is encrypted using the public key to ensure the security of the key during transmission and prevent man-in-the-middle attacks. Symmetric encryption algorithms such as AES have high encryption and decryption speeds and are suitable for processing large amounts of data. It is mainly used to encrypt symmetric keys, reducing the computational burden of asymmetric encryption of large amounts of data. The preset number of iterations can be adjusted according to actual needs to flexibly respond to different security requirements. Different symmetric encryption and asymmetric encryption algorithms can be selected to adapt to different application scenarios and security requirements. Through byte replacement operations, ensure that each part of the data is fully obfuscated to prevent the data from being partially cracked. Through row shift and column confusion operations, the data is distributed more evenly in the matrix, increasing the complexity and integrity of the data.
[0105] In one embodiment of the present application, any one of the family members can view the health data of other family members in the cloud database in real time through the smart home management platform, including:
[0106] Any family member obtains the preset asymmetric encryption private key of the registered client through the smart home management platform;
[0107] Based on the preset asymmetric encryption private key, decrypt the asymmetric encryption key to obtain the symmetric encryption key;
[0108] Based on the symmetric encryption key, the symmetric encrypted ciphertext is decrypted to obtain the health data of the other family members.
[0109] Exemplarily, each family member generates a preset asymmetric encryption private key when registering, and the private key is used to decrypt the symmetric encryption key. The private key needs to be properly kept and is usually stored on a local device or a protected server to ensure that only authorized family members can access it. Family members obtain the preset asymmetric encryption private key through the smart home management platform. Use the private key to decrypt the asymmetric encryption key obtained from the cloud database to restore the symmetric encryption key. Family members obtain the symmetrically encrypted health data ciphertext from the cloud database. Use the decrypted symmetric encryption key to decrypt the symmetrically encrypted health data ciphertext to restore the original health data.
[0110] In this embodiment, a combination of asymmetric encryption and symmetric encryption is used to ensure the security of health data during transmission and storage. Asymmetric encryption is used to protect symmetric encryption keys, and symmetric encryption is used to protect actual health data. The private key of each family member is only stored locally or in a protected environment, reducing the risk of private key leakage. Symmetric encryption is performed using advanced encryption standards (such as AES) to ensure the integrity and immutability of the data. The asymmetric encryption key and the symmetric encryption ciphertext are decrypted by the private key to ensure that the decrypted data is consistent with the original data. Family members can easily obtain private keys and decrypt data through the smart home management platform, and the operation is simple and intuitive. Family members can view the health data of other family members in real time and keep abreast of the health status of family members. The platform supports fine-grained permission management, and administrators can set different access rights for each family member to ensure the security and privacy of the data. Family members need to authenticate their identities before viewing the data to ensure that only authorized users can access the data. Symmetric encryption algorithms (such as AES) have high encryption and decryption speeds and are suitable for processing large amounts of data. Asymmetric encryption is mainly used to protect symmetric encryption keys, reducing the computational burden of asymmetric encryption of large amounts of data.
[0111] In one embodiment of the present application, the symmetric encryption of the health data to obtain a symmetric encryption key corresponding to the health data, and asymmetric encryption of the symmetric encryption key to obtain target encrypted data includes:
[0112] Symmetrically encrypt the health data using a stream cipher and a message authentication code to obtain the symmetric encryption key;
[0113] Based on the elliptic curve, asymmetrically encrypt the symmetric encryption key to obtain an asymmetric encryption key;
[0114] The target encrypted data is obtained based on the symmetric encryption key and the asymmetric encryption key.
[0115] For example, a stream cipher is a symmetric encryption algorithm that generates a pseudo-random key stream and performs a bit-by-bit XOR operation with the plaintext to achieve data encryption. A message authentication code is used to ensure the integrity and authenticity of data. Common message authentication codes are based on hash functions, which generate a fixed-length authentication code by hashing the key and data together.
[0116] Exemplarily, the encryption process may be: generating a random symmetric encryption key; encrypting health data using a stream cipher algorithm; generating a message authentication code to ensure the integrity and authenticity of the data; and combining the encrypted health data and the message authentication code into a final symmetric encryption ciphertext.
[0117] Exemplarily, elliptic curve cryptography is an asymmetric encryption algorithm based on the discrete logarithm problem on the elliptic curve, which has higher security and shorter key length and is suitable for resource-constrained environments.
[0118] When a pair of elliptic curve public and private keys are generated, the public key is used to encrypt the symmetric encryption key and the private key is used to decrypt it. The symmetric encryption key is asymmetrically encrypted using the elliptic curve public key to generate an asymmetric encryption key. The asymmetric encryption key is securely transmitted to the server or other places where decrypted data is required. The symmetric encryption ciphertext and the asymmetric encryption key are combined into the final target encrypted data. The target encrypted data is transmitted to the cloud database through a secure communication protocol.
[0119] In this embodiment, the stream cipher algorithm generates a pseudo-random key stream to ensure that the result of each encryption is unique, thereby increasing the randomness and security of the data. The message authentication code ensures the integrity and authenticity of the data and prevents the data from being tampered with during transmission. Elliptic curve cryptography provides higher security and shorter key lengths, which is suitable for resource-constrained environments and improves the efficiency of key management. The message authentication code is used to ensure the integrity of the data during transmission and prevent the data from being tampered with. During the decryption process, the message authentication code is verified to ensure that the decrypted data is consistent with the original data. The stream cipher algorithm has a high encryption and decryption speed and is suitable for processing large amounts of data. The key length of the elliptic curve encryption algorithm is shorter, which reduces the computational burden of encryption and decryption.
[0120] In one embodiment of the present application, after collecting the health data of the plurality of family members, the method further includes:
[0121] Performing set operations and grouping aggregation on the health data to obtain aggregated health data;
[0122] Dividing the aggregated health data into time periods;
[0123] Maintaining the status information in the aggregated health data through counters, accumulators, and timestamps;
[0124] The time in the aggregated health data is processed through filtering, projection and connection processing.
[0125] Exemplarily, set operations are performed on the collected health data, such as intersection, union, difference, etc., to extract common features or difference features. Group the data according to specific attributes (such as family members, health indicator types, etc.), and calculate the statistical information of each group, such as average, maximum, minimum, etc. Select appropriate grouping keys, such as family member identity, health indicator type, etc. Use aggregation functions to calculate the statistical information of each group. Divide the aggregated health data according to the time dimension, for example, by time units such as hours, days, weeks, and months. Define a time interval, such as 00:00 to 23:59 every day as a time interval. Use a timestamp to record the time information of each data point.
[0126] Among them, the counter records the number of data points in each time interval for frequency statistics; the accumulator accumulates the values in each time interval for calculating the cumulative value; the timestamp records the time information of each data point to ensure the time sequence and integrity of the data. The counter, accumulator and timestamp are used to maintain the status information of the data, such as the number of data points and cumulative value in a certain time period.
[0127] Exemplarily, data is filtered according to specific conditions (such as time range, health indicator threshold, etc.) to remove data points that do not meet the conditions. Define filtering conditions, such as time range (2023-01-01 to 2023-01-31), health indicator threshold (heart rate greater than 100), etc.
[0128] When projecting, select the fields of interest to reduce the dimensions of the data, improve processing efficiency, and select the fields that need to be retained, such as timestamps, family member identification, health indicator values, etc. When joining, connect data from different sources to merge into a complete data set, and select appropriate join keys, such as family member identification, timestamp, etc.
[0129] In this embodiment, the common features and difference features of the data are extracted through set operations to ensure the accuracy and consistency of the data. Statistical information is calculated by grouping and aggregation to provide a more comprehensive data view to help users better understand the data. Data is divided according to the time dimension to facilitate analysis and display by time period. The time information of each data point is recorded to ensure the time order and integrity of the data, which is convenient for time series analysis. The number of data points is recorded to help users understand the frequency distribution of the data. Data values are accumulated to provide cumulative statistical information to help users understand the trend changes of the data. Time information is recorded to ensure the time order and integrity of the data, which is convenient for time series analysis. Data points that do not meet the conditions are removed through filtering, unnecessary data processing is reduced, and processing efficiency is improved. Fields of interest are selected to reduce the dimensions of the data and improve processing efficiency and storage efficiency. Data from different sources are connected and merged into a complete data set to provide a more comprehensive data view.
[0130] It can be seen from the above embodiments that, through the method in this embodiment, a smart home management platform is constructed and family members are invited to join. The data of all family members can be managed on one platform, which simplifies the operation process. The platform can set different permission levels to ensure that only authorized family members can access specific data; binding smart home devices and collecting health data can ensure that the collected data is complete and accurate; symmetric encryption is performed on health data. Symmetric encryption is suitable for processing large amounts of data. Even if the data is intercepted during transmission, it cannot be directly read, thereby protecting the privacy of the data; asymmetric encryption of symmetric encryption keys provides higher security and ensures that the keys will not be stolen during transmission. Each family member can use his or her own public key to encrypt the key, and the private key is stored locally to ensure that only family members holding the private key can decrypt the data; the target encrypted data is transmitted to a cloud database. The cloud database usually has high availability and fault tolerance to ensure the reliability and persistence of the data; through permission control and encryption mechanisms, it is ensured that only authorized family members can access specific data to protect personal privacy.
[0131] In one embodiment of the present application, a data processing device for a smart home is also provided. Figure 3 is a schematic diagram of a data processing device for a smart home shown in an exemplary embodiment of the present application, see Figure 3 , the device comprises:
[0132] The platform construction module 301 is used to construct a smart home management platform and invite multiple family members to join the smart home management platform;
[0133] The data collection module 302 is used to bind smart home devices through the smart home management platform, and collect health data of the multiple family members based on the bound smart home devices;
[0134] The encryption module 303 is used to symmetrically encrypt the health data to obtain a symmetric encryption key corresponding to the health data, and asymmetrically encrypt the symmetric encryption key to obtain target encrypted data;
[0135] The data transmission module 304 is used to transmit the target encrypted data to a pre-configured cloud database so that any family member can view the health data of other family members in the cloud database in real time through the smart home management platform.
[0136] The data processing device of the smart home in the embodiment of the present application builds a smart home management platform and invites family members to join. The data of all family members can be managed on one platform, which simplifies the operation process. The platform can set different permission levels to ensure that only authorized family members can access specific data; bind smart home devices and collect health data to ensure that the collected data is complete and accurate; symmetric encryption is performed on the health data. Symmetric encryption is suitable for processing large amounts of data. Even if the data is intercepted during transmission, it cannot be directly read, thereby protecting the privacy of the data; asymmetric encryption is performed on the symmetric encryption key, which provides higher security and ensures that the key will not be stolen during transmission. Each family member can use his or her own public key to encrypt the key, and the private key is stored locally to ensure that only family members holding the private key can decrypt the data; the target encrypted data is transmitted to a cloud database. The cloud database usually has high availability and fault tolerance to ensure the reliability and durability of the data; through permission control and encryption mechanisms, it is ensured that only authorized family members can access specific data to protect personal privacy.
[0137] The specific embodiments of the data processing device for smart home in the present application can refer to the examples shown in the above-mentioned data processing method for smart home, which will not be repeated here.
[0138] In one embodiment of the present application, an electronic device for implementing the above-mentioned smart home data processing method is also provided. The electronic device includes a memory and a processor, the memory stores a computer program, and the processor is configured to execute the above-mentioned smart home data processing method through the computer program.
[0139] See also Figure 4 , Figure 4 404 is a schematic diagram of the structure of an electronic device shown in an exemplary embodiment of the present application. The computer system 400 includes a central processing unit (CPU) 401, which can perform various appropriate actions and processes according to the program stored in the read-only memory (ROM) 402 or the program loaded from the storage part 408 to the random access memory (RAM) 403, such as executing the method described in the above embodiment. In RAM 403, various programs and data required for system operation are also stored. CPU 401, ROM 402 and RAM 403 are connected to each other via bus 404. Input / output (I / O) interface 405 is also connected to bus 404.
[0140] The following components are connected to the I / O interface 405: an input section 406 including a keyboard, a mouse, etc.; an output section 407 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker, etc.; a storage section 408 including a hard disk, etc.; and a communication section 409 including a network interface card such as a LAN (Local Area Network) card, a modem, etc. The communication section 409 performs communication processing via a network such as the Internet. A drive 410 is also connected to the I / O interface 405 as needed. A removable medium 411, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 410 as needed so that a computer program read therefrom is installed into the storage section 408 as needed.
[0141] In particular, according to an embodiment of the present application, the process described above with reference to the flowchart can be implemented as a computer software program. For example, an embodiment of the present application includes a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a computer program for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication section 409, and / or installed from a removable medium 411. When the computer program is executed by a central processing unit (CPU) 401, various functions defined in the system of the present application are executed.
[0142] It should be noted that the computer-readable medium shown in the embodiment of the present application can be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. The computer-readable storage medium can be, for example, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media can include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM), a flash memory, an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present application, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, wherein a computer-readable computer program is carried. This propagated data signal can take a variety of forms, including but not limited to an electromagnetic signal, an optical signal, or any suitable combination of the above. A computer-readable signal medium may also be any computer-readable medium other than a computer-readable storage medium, which may send, propagate or transmit a program for use by or in conjunction with an instruction execution system, apparatus or device. A computer program contained on a computer-readable medium may be transmitted using any appropriate medium, including but not limited to: wireless, wired, etc., or any suitable combination of the above.
[0143] The flowchart and block diagram in the accompanying drawings illustrate the possible architecture, functions and operations of the system, method and computer program product according to various embodiments of the present application. Wherein, each box in the flowchart or block diagram can represent a module, a program segment, or a part of the code, and the above-mentioned module, program segment, or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flowchart, and the combination of boxes in the block diagram or flowchart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.
[0144] The units involved in the embodiments described in this application may be implemented by software or hardware, and the units described may also be set in a processor. The names of these units do not, in some cases, constitute limitations on the units themselves.
[0145] Another aspect of the present application further provides a computer-readable storage medium, the computer-readable storage medium including a stored computer program, wherein the computer program executes the above-mentioned smart home data processing method when it is run. The computer-readable storage medium may be included in the electronic device described in the above-mentioned embodiment, or may exist independently without being assembled into the electronic device.
[0146] Another aspect of the present application further provides a computer program product or a computer program, which includes a computer instruction stored in a computer-readable storage medium. A processor of a computer device reads the computer instruction from the computer-readable storage medium, and the processor executes the computer instruction, so that the computer device executes the data processing method of the smart home provided in each of the above embodiments.
[0147] In the above detailed description, reference is made to the accompanying drawings, which form a part of this document. In the accompanying drawings, similar symbols typically identify similar components unless the context indicates otherwise. The illustrated embodiments described in the detailed description, drawings, and claims are not meant to be limiting. Other embodiments may be used, and other changes may be made, without departing from the spirit or scope of the subject matter presented herein.
[0148] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.
Claims
1. A data processing method for a smart home, characterized in that: The method comprises: Building a smart home management platform and inviting multiple family members to join the smart home management platform; Binding smart home devices through the smart home management platform, and collecting health data of the multiple family members based on the bound smart home devices; Performing symmetric encryption on the health data to obtain a symmetric encryption key corresponding to the health data, and performing asymmetric encryption on the symmetric encryption key to obtain target encrypted data; The target encrypted data is transmitted to a pre-configured cloud database so that any family member can view the health data of other family members in the cloud database in real time through the smart home management platform.
2. The data processing method for a smart home as claimed in claim 1, characterized in that: Inviting multiple family members to join the smart home management platform includes: The administrator of the smart home management platform sends an invitation link for joining the smart home management platform to the multiple family members through a pre-matched instant messaging application; When the multiple family members receive the invitation link, they register their identities in the smart home management platform through the invitation link and join the smart home management platform based on the registered identities.
3. The data processing method for a smart home as claimed in claim 2, characterized in that: After the identity is registered in the smart home management platform through the invitation link, the method further includes: Acquire the registration information of the family member, the registration information including the identity identifier and key of the registration client; constructing an authorization request locator according to the identity identifier and key of the registered client, and directing the family member to the authorization request locator; When the administrator authorizes access to the registered client, matching an authorization code to the authorization request locator; According to the authorization code, a token request is constructed so that the registered client obtains the data in the smart home management platform according to the token request.
4. The data processing method for a smart home as claimed in claim 3, characterized in that: The symmetric encryption of the health data to obtain a symmetric encryption key corresponding to the health data, and asymmetric encryption of the symmetric encryption key to obtain target encrypted data includes: Perform byte replacement, row shift and column obfuscation on the health data through a preset number of iterations to obtain the symmetric encryption key; By presetting an asymmetric encryption public key, asymmetric encryption is performed on the symmetric encryption key to obtain an asymmetric encryption key; The target encrypted data is obtained based on the symmetric encryption key and the asymmetric encryption key.
5. The data processing method for a smart home as claimed in claim 4, characterized in that: Any of the family members can view the health data of other family members in the cloud database in real time through the smart home management platform, including: Any family member obtains the preset asymmetric encryption private key of the registered client through the smart home management platform; Based on the preset asymmetric encryption private key, decrypt the asymmetric encryption key to obtain the symmetric encryption key; Based on the symmetric encryption key, the symmetric encrypted ciphertext is decrypted to obtain the health data of the other family members.
6. The data processing method for a smart home as claimed in claim 1, characterized in that: The symmetric encryption of the health data to obtain a symmetric encryption key corresponding to the health data, and asymmetric encryption of the symmetric encryption key to obtain target encrypted data includes: Symmetrically encrypt the health data using a stream cipher and a message authentication code to obtain the symmetric encryption key; Based on the elliptic curve, asymmetrically encrypt the symmetric encryption key to obtain an asymmetric encryption key; The target encrypted data is obtained based on the symmetric encryption key and the asymmetric encryption key.
7. The data processing method for a smart home as claimed in claim 1, characterized in that: After collecting the health data of the plurality of family members, the method further includes: Performing set operations and grouping aggregation on the health data to obtain aggregated health data; Dividing the aggregated health data into time periods; Maintaining the status information in the aggregated health data through counters, accumulators, and timestamps; The time in the aggregated health data is processed through filtering, projection and connection processing.
8. A data processing device for a smart home, characterized in that: The device comprises: A platform construction module, used to construct a smart home management platform and invite multiple family members to join the smart home management platform; A data collection module, used to bind smart home devices through the smart home management platform, and collect health data of the multiple family members based on the bound smart home devices; An encryption module, used to symmetrically encrypt the health data to obtain a symmetric encryption key corresponding to the health data, and asymmetrically encrypt the symmetric encryption key to obtain target encrypted data; The data transmission module is used to transmit the target encrypted data to a pre-configured cloud database so that any family member can view the health data of other family members in the cloud database in real time through the smart home management platform.
9. A computer-readable storage medium, characterized in that: The computer-readable storage medium includes a stored computer program, wherein the computer program executes the smart home data processing method according to any one of claims 1 to 7 when running.
10. An electronic device comprising a memory and a processor, characterized in that: The memory stores a computer program, and the processor is configured to execute the smart home data processing method according to any one of claims 1 to 7 through the computer program.
Citation Information
Cited By
Equipment binding management method and system, storage medium and electronic device
CN121441664A
Device binding management method, system, storage medium, and electronic device
CN121441664B