Equipment networking method, electronic equipment and storage medium

Abstract

The invention discloses a device networking method, an electronic device and a storage medium, and relates to the technical field of wireless communication, and the specific implementation scheme is as follows: in response to a device networking instruction, obtaining initiating device identity authentication information; transmitting the identity authentication information of the initiating equipment to the receiving equipment, and acquiring a networking identification code fed back by the receiving equipment after verifying the identity authentication information of the initiating equipment; and networking with the receiving equipment according to the networking identification code. According to the embodiment of the invention, through encrypted transmission of the verification networking identification code based on the identity authentication information between the devices, secure communication between the devices is ensured, and the initiating device performs networking with the receiving device through the securely shared networking identification code, so that the tedious step of manually inputting the networking identification code by a user is simplified, the user experience is improved, and the user experience is improved. The non-inductive networking between the devices is realized, and the beneficial effect of improving the networking efficiency is achieved.

Description

Technical Field

[0001] The present invention relates to the field of wireless communication technology, and in particular to a device networking method, electronic equipment and storage medium. Background Art

[0002] With the rapid development of information technology, the network connection function of smart devices has greatly broadened the time and space for users to access network resources and interact with each other, and multi-device networking technology enables various smart devices to interconnect through the network. As an open, intelligent and secure IoT operating system, the OpenHarmony system provides strong support for the discovery, connection, networking and transmission between devices based on distributed soft bus technology. However, to ensure the credibility of networking devices, the OpenHarmony system introduces a device authentication method based on personal identification number (PIN). In this way, one device displays the PIN, and the other device needs to manually enter the same PIN, and then the password authentication key exchange protocol and secure tunnel service protocol are used to achieve secure communication connection between devices. However, although the PIN-based device authentication method performs well in terms of security, it still has two major flaws: First, when a new device joins the network, the user needs to manually enter the PIN, which increases the complexity of user operations and reduces the user experience; second, when large-scale device networking is carried out, the networking between each two devices also requires manual entry of the PIN, which greatly reduces the efficiency of the network, especially when there are a large number of networked devices. This problem is particularly prominent. Therefore, how to simplify the user operation process and improve the user experience and networking efficiency while ensuring the security of device networking has become an urgent problem to be solved in the OpenHarmony system. Summary of the invention

[0003] The present invention provides a device networking method, an electronic device and a storage medium, which simplifies the user's operation process, improves the user experience, realizes seamless networking between devices, and improves networking efficiency.

[0004] In one aspect of an embodiment of the present invention, a device networking method is provided, which is applied to an initiating device, and the method includes:

[0005] In response to the device networking instruction, obtain the initiating device identity authentication information;

[0006] Transmit the initiating device identity authentication information to the receiving device, and obtain the network identification code fed back by the receiving device after verifying the initiating device identity authentication information;

[0007] Network with the receiving device based on the network identification code.

[0008] In one aspect of an embodiment of the present invention, another device networking method is provided, which is applied to a receiving device, and the method includes:

[0009] Obtaining the initiating device identity authentication information transmitted by the initiating device, and verifying the initiating device identity authentication information;

[0010] Determine that the initiating device identity authentication information has passed the verification, and generate the receiving device authentication information including the networking identification code;

[0011] Transmit the receiving device authentication information to the initiating device for networking.

[0012] Another aspect of an embodiment of the present invention provides an electronic device, including:

[0013] at least one processor;

[0014] and a memory communicatively coupled to the at least one processor;

[0015] The memory stores a computer program that can be executed by at least one processor, and the computer program is executed by at least one processor so that the at least one processor can execute any one of the device networking methods in the embodiments of the present invention.

[0016] According to another aspect of the present invention, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the device networking method of any embodiment of the present invention when executed.

[0017] In an embodiment of the present invention, an initiating device can receive a device networking instruction for triggering a device to perform networking through a receiving module equipped thereon. After the initiating device obtains the device networking instruction, it can respond to the device networking instruction, that is, after the initiating device obtains the device networking instruction, the initiating device performs an operation of obtaining the initiating device identity authentication information to obtain the initiating device identity authentication information. The initiating device transmits the obtained initiating device identity authentication information to the receiving device. After the receiving device receives the initiating device identity authentication information, it can verify the initiating device identity authentication information. After the verification is passed, the receiving device can generate a networking identification code and feed back the generated networking identification code to the initiating device. The initiating device is responsible for receiving the networking identification code fed back by the receiving device. After the initiating device receives the networking identification code, it establishes networking authentication with the corresponding receiving device according to the networking identification code to complete the networking of the initiating device and the receiving device. After the networking of the initiating device and the receiving device is successful, the initiating device and the receiving device can communicate securely. The embodiments of the present invention ensure secure communication between devices by verifying identity authentication information between devices and encrypting and transmitting networking identification codes. Networking is directly performed with a receiving device based on a networking identification code fed back by the receiving device, thereby simplifying the tedious steps of users manually entering networking identification codes and improving user experience. By sharing networking identification codes between devices, seamless networking between devices is achieved, thereby achieving the beneficial effect of improving networking efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0019] Figure 1 is a flow chart of a device networking method applied to an initiating device according to Embodiment 1 of the present invention;

[0020] Figure 2 is a flow chart of a device networking method applied to a receiving device according to Embodiment 2 of the present invention;

[0021] Figure 3 is a flow chart of another device networking method applied to an initiating device according to Embodiment 3 of the present invention;

[0022] Figure 4 is a flow chart of another device networking method applied to a receiving device according to Embodiment 4 of the present invention;

[0023] Figure 5 This is a schematic diagram of a non-sensing network provided by Embodiment 5 of the present invention;

[0024] Figure 6 is a schematic diagram of an overview of device certification provided according to Embodiment 5 of the present invention;

[0025] Figure 7 This is a flow chart of a non-sensing network provided according to Embodiment 5 of the present invention;

[0026] Figure 8 It is a schematic diagram of the structure of an apparatus for implementing a device networking method applied to an initiating device provided in an embodiment of the present invention;

[0027] Fig. 9 It is a schematic diagram of the structure of an apparatus for implementing a device networking method applied to a receiving device provided in an embodiment of the present invention;

[0028] Fig.10 It is a structural schematic diagram of an electronic device for implementing the device networking method according to an embodiment of the present invention. DETAILED DESCRIPTION

[0029] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0030] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0031] Embodiment 1

[0032] Figure 1 The present invention provides a flow chart of a device networking method applied to an initiating device. This embodiment is applicable to the case of realizing a senseless networking between devices. The method can be executed by a device networking device. The device networking device can be implemented in the form of hardware and / or software. The device networking device can be configured in an electronic device. Figure 1As shown, the method includes:

[0033] S101. In response to a device networking instruction, obtain an initiating device identity authentication information.

[0034] In an embodiment of the present invention, a device networking instruction may be understood as a signal for triggering a device to perform networking. For example, the source of the device networking instruction may include: a user manually issuing a device networking instruction through an interactive interface or the system automatically triggering the device networking instruction according to preset logic, etc.

[0035] The initiating device identity authentication information may be understood as a data set used to verify the identity of the initiating device. For example, the initiating device identity authentication information may include: initiating device certification, initiating device identification, or device signature data.

[0036] Specifically, the initiating device can receive the device networking instruction used to trigger the device to network through the receiving module it is equipped with. After the initiating device obtains the device networking instruction, it can respond to the device networking instruction. That is, after the initiating device obtains the device networking instruction, the initiating device executes the operation of obtaining the initiating device identity authentication information to obtain the initiating device identity authentication information, wherein the role of the initiating device identity authentication information is to verify the identity of the initiating device.

[0037] S102: Transmit the initiating device identity authentication information to the receiving device, and obtain the networking identification code fed back by the receiving device after verifying the initiating device identity authentication information.

[0038] In the embodiment of the present invention, the networking identification code can be understood as a piece of data used for subsequent networking authentication between devices. The secure sharing of the networking identification code ensures the security of network communication and mutual authentication between devices during the device networking process.

[0039] Specifically, the initiating device identity authentication information is obtained, and the initiating device transmits the obtained initiating device identity authentication information to the receiving device. After receiving the initiating device identity authentication information, the receiving device can verify the initiating device identity authentication information. After the verification is passed, the receiving device can generate a networking identification code and feed back the generated networking identification code to the initiating device. The initiating device is responsible for receiving the networking identification code fed back by the receiving device.

[0040] For example, the manner in which the initiating device transmits the acquired initiating device identity authentication information to the receiving device may include: the initiating device may establish a communication connection with the receiving device through a communication protocol, and transmit the acquired initiating device identity authentication information to the receiving device through the established communication connection.

[0041] For example, the step of generating a networking identification code by a receiving device may include: using a public key signature algorithm to authenticate the identity authentication information of the initiating device. After the identity authentication information of the initiating device is authenticated, an authentication success instruction may be sent to a distributed management module in the receiving device. After receiving the authentication success instruction, the distributed management module may generate a networking identification code.

[0042] For example, the step of verifying the identity authentication information of the initiating device may include: verifying the authenticity of the identity authentication information and verifying the integrity of the identity authentication information.

[0043] For example, the step of the initiating device receiving the networking identification code fed back by the receiving device may include: the initiating device receives the receiving device identity authentication information including the networking identification code, verifies the receiving device identity authentication information, and after the verification is passed, decrypts the receiving device identity authentication information to obtain the networking identification code.

[0044] S103, networking with a receiving device according to the networking identification code.

[0045] Specifically, after the initiating device receives the networking identification code, it establishes networking authentication with the corresponding receiving device according to the networking identification code to complete the networking of the initiating device and the receiving device. After the networking of the initiating device and the receiving device is successful, the initiating device and the receiving device can communicate securely.

[0046] For example, before networking with the receiving device based on the networking identification code, it can also include: the receiving device feeds back the receiving device authentication information containing the networking identification code after verifying the initiating device authentication information, verifying the receiving device authentication information, and extracting the networking identification code from the verified receiving device authentication information.

[0047] In an embodiment of the present invention, an initiating device can receive a device networking instruction for triggering a device to perform networking through a receiving module equipped thereon. After the initiating device obtains the device networking instruction, it can respond to the device networking instruction, that is, after the initiating device obtains the device networking instruction, the initiating device performs an operation of obtaining the initiating device identity authentication information to obtain the initiating device identity authentication information. The initiating device transmits the obtained initiating device identity authentication information to the receiving device. After the receiving device receives the initiating device identity authentication information, it can verify the initiating device identity authentication information. After the verification is passed, the receiving device can generate a networking identification code and feed back the generated networking identification code to the initiating device. The initiating device is responsible for receiving the networking identification code fed back by the receiving device. After the initiating device receives the networking identification code, it establishes networking authentication with the corresponding receiving device according to the networking identification code to complete the networking of the initiating device and the receiving device. After the networking of the initiating device and the receiving device is successful, the initiating device and the receiving device can communicate securely. The embodiments of the present invention ensure secure communication between devices by verifying identity authentication information between devices and encrypting and transmitting networking identification codes. Networking is directly performed with a receiving device based on a networking identification code fed back by the receiving device, thereby simplifying the tedious steps of users manually entering networking identification codes and improving user experience. By sharing networking identification codes between devices, seamless networking between devices is achieved, thereby achieving the beneficial effect of improving networking efficiency.

[0048] Embodiment 2

[0049] Figure 2 The present invention provides a flow chart of a device networking method applied to a receiving device according to an embodiment of the present invention. Based on the above-mentioned embodiment, the present invention provides a device networking method applied to a receiving device. Figure 2 As shown, the method includes:

[0050] S201: Acquire the initiating device identity authentication information transmitted by the initiating device, and verify the initiating device identity authentication information.

[0051] Specifically, a preset identity authentication information verification rule can be obtained, and the receiving device can receive the initiating device identity authentication information transmitted by the initiating device through a receiving module equipped by the receiving device itself, and can verify the received initiating device identity authentication information according to the preset identity authentication information verification rule to obtain a verification result, and perform subsequent operations based on the verification result.

[0052] For example, the step of verifying the received initiating device identity authentication information according to preset identity authentication information verification rules may include: using a public key signature algorithm to authenticate the initiating device identity authentication information, obtaining key data such as device identity proof or device identification, continuing to verify the key data, obtaining a verification result, and performing subsequent operations based on the verification result.

[0053] For example, the step of verifying the initiating device identity authentication information may include: verifying the authenticity of the initiating device identity authentication information and verifying the integrity of the identity authentication information.

[0054] S202: Determine whether the initiating device identity authentication information has passed the verification, and generate receiving device authentication information including a networking identification code.

[0055] Specifically, after the receiving device obtains the initiating device identity authentication information, the receiving device verifies the received initiating device identity authentication information. When it is determined that the initiating device identity authentication information passes the verification, the receiving device can generate the receiving device identity authentication information including the networking identification code.

[0056] For example, the steps of generating receiving device identity authentication information including a networking identification code may include: using a public key encryption algorithm to encrypt the networking identification to obtain a ciphertext identification code, using a private key signature algorithm to sign the initiating device identity information and the ciphertext networking identification code to generate a receiving device signature, and assembling the receiving device identity information, the ciphertext networking identification code and the receiving device signature into the receiving device identity authentication information.

[0057] S203: Transmit the receiving device authentication information to the initiating device for networking.

[0058] Specifically, the receiving device transmits the generated receiving device authentication information to the initiating device, and the sending device can be networked with the receiving device based on the received receiving device authentication information.

[0059] In an embodiment of the present invention, a preset identity authentication information verification rule can be obtained, and the receiving device can receive the initiating device identity authentication information transmitted by the initiating device through the receiving module equipped by the receiving device itself, and can verify the received initiating device identity authentication information according to the preset identity authentication information verification rule. When it is determined that the initiating identity authentication information passes the verification, the receiving device can generate the receiving device identity authentication information including the networking identification code, and the receiving device transmits the generated receiving device authentication information to the initiating device. The sending device performs networking with the receiving device based on the received receiving device authentication information. In an embodiment of the present invention, by verifying the identity authentication information of the initiating device, after determining that the identity authentication information passes the verification, the receiving device identity authentication information including the networking identification code is generated and sent to the initiating device, the identities of both devices can be effectively verified and the networking identification code can be safely shared, thereby enhancing the security of device networking. By transmitting the networking identification code to the initiating device for networking, the cumbersome steps of the user manually inputting the networking identification code are reduced, and the networking process is simplified. After the networking identification code is successfully transmitted, the initiating device and the receiving device can automatically perform networking, thereby improving the networking efficiency between devices.

[0060] It can be understood that based on the above steps S101, S102, S103, S201, S202 and S203, an integrated device networking method can also be constructed, which covers the complete networking process from the initiating device to the receiving device. The method includes: when the initiating device obtains the device networking instruction, the initiating device will automatically respond to the device networking instruction and respond to the device networking instruction, that is, obtain the initiating device identity authentication information used to verify its own identity, the initiating device transmits the obtained initiating device identity authentication information to the receiving device, and the receiving device verifies the initiating device identity authentication information after receiving the initiating device identity authentication information. When the verification result is that the identity authentication information passes the verification, the receiving device generates a receiving device identity authentication information including a networking identification code, and sends the receiving device identity authentication information back to the initiating device. After the initiating device verifies the receiving device identity authentication information, it will decrypt the receiving device identity information to obtain the networking identification code. The initiating device establishes networking authentication with the receiving device based on the obtained networking identification code to complete the networking process.

[0061] Embodiment 3

[0062] Figure 3 This is a flow chart of another device networking method applied to an initiating device provided by an embodiment of the present invention. Based on the above embodiment, the embodiment of the present invention provides another device networking method applied to an initiating device. Figure 3 As shown, the method includes:

[0063] S301. In response to a device networking instruction, obtain an initiating device certificate and an initiating device identifier of an initiating device.

[0064] In an embodiment of the present invention, the initiating device certificate can be understood as a type of information used to prove the identity of the initiating device. By way of example, the initiating device certificate may include: an initiating device public key or an initiating device identification, etc. The initiating device certificate is composed of a trusted signature generated by the signing center's trusted private key for the data in the device certificate, and the trusted signature can be verified by the signing center's trusted public key.

[0065] The initiator device identifier can be understood as a string of identification codes used to distinguish different initiator devices in the network. For example, the initiator device identifier can be the initiator device serial number, which is generated by the initiator device hardware and is guaranteed to be unique and cannot be tampered with.

[0066] Specifically, the initiating device obtains a device networking instruction for triggering the device to perform networking. After obtaining the device networking instruction, the initiating device can respond to the device networking instruction. That is, after the initiating device obtains the device networking instruction, the initiating device will execute an operation of obtaining the initiating device certificate and the initiating device identification of the initiating device, thereby obtaining the initiating device certificate and the initiating device identification of the initiating device. Among them, obtaining the initiating device certificate and the device identification of the initiating device can ensure the authenticity and uniqueness of the initiating device.

[0067] S302: Call the challenge value generation rule to generate a verification random number as a challenge value.

[0068] In the embodiment of the present invention, the challenge value generation rule can be understood as a set of algorithms for generating true random numbers, wherein a true random number is a completely unpredictable random number, and the challenge value generation rule can ensure that the verification random number generated each time is unique.

[0069] The verification random number can be understood as a string of numbers that cannot be predicted. Using the verification random number as a challenge value for subsequent identity authentication can effectively prevent replay attacks from malicious devices.

[0070] The challenge value can be understood as a random number generated by the challenge value generation rule and used for subsequent identity authentication.

[0071] Specifically, a preset challenge value generation rule is obtained, and a verification random number for subsequent identity authentication is generated according to the preset challenge value generation rule, and the verification random number is used as the challenge value for this identity authentication, wherein the verification random number is unique.

[0072] S303: Use the initiating device private key to process the challenge value and the initiating device identification into an initiating device signature.

[0073] In the embodiment of the present invention, the initiating device private key is the specific manifestation or data content of the private key in the asymmetric encryption algorithm, which is used to decrypt data or generate a digital signature. It is generated in a secure environment, can only be owned by this device, and cannot be made public.

[0074] The initiator device signature can be understood as an identifier. The initiator device signature can ensure the authenticity of the identity of the initiator of the communication and ensure the integrity of the data during the transmission process. By introducing the initiator device signature, the communication security can be improved and malicious device spoofing attacks can be prevented.

[0075] Specifically, the challenge value and the initiating device identification are obtained, and the challenge value and the device identification can be digitally signed using the initiating device private key to obtain the initiating device signature, wherein the digital signature is a cryptography-based data processing technology.

[0076] For example, the challenge value and the device identification can be digitally signed using the initiating device private key. The steps of obtaining the initiating device signature may include: concatenating the challenge value and the initiating device identification in a specified form to form a data block to be signed, and based on a private key signature algorithm, signing the data block to be signed using the initiating device private key to generate a digital signature, and using the digital signature as the initiating device signature, wherein the private key signature algorithm is a cryptographic algorithm used to ensure the integrity and authenticity of the data.

[0077] S304: Use the initiating device certificate, the initiating device identification, the challenge value and the initiating device signature as the initiating device identity authentication information.

[0078] Specifically, the initiating device certificate, initiating device identification, challenge value and initiating device signature are obtained, and the obtained initiating device certificate, initiating device identification, challenge value and initiating device signature can be integrated to form a complete data packet, and the complete data packet is used as the initiating device identity authentication information.

[0079] S305 , calling the soft bus communication protocol to transmit the initiating device identity authentication information to the receiving device.

[0080] In the embodiment of the present invention, the soft bus communication protocol can be understood as a standard followed by devices for communication. The soft bus communication protocol specifies the format, rate and method of data transmission between devices.

[0081] Specifically, the initiating device can establish a communication connection with the receiving device based on the soft bus communication protocol, and transmit the initiating device identity authentication information to the receiving device through the established communication connection, and the receiving device performs subsequent operations based on the received initiating device identity authentication information.

[0082] S306: Receive the receiving device identity authentication information including the networking identification code fed back by the receiving device after verifying the initiating device identity authentication information.

[0083] In an embodiment of the present invention, the receiving device identity authentication information can be understood as a data set used to verify the identity of the receiving device. By way of example, the receiving device identity authentication information may include: device certification of the receiving device, device identification of the receiving device and a networking identification code, etc. It can be understood that the networking identification code is extracted from the receiving device identity authentication information.

[0084] Specifically, the initiating device sends the initiating device identity authentication information to the receiving device, and the receiving device verifies the initiating device identity authentication information. After the verification is passed, the receiving device generates a receiving device identity authentication information containing a networking identification code and used to verify the identity of the receiving device, and sends the receiving device identity authentication information to the initiating device. The initiating device is responsible for receiving the receiving device identity authentication information fed back by the receiving device, wherein the receiving device identity authentication information includes at least: a networking identification code.

[0085] S307: Use the signature center's trusted public key to verify the receiving device's identity authentication information, and extract the networking identification code from the verified receiving device's identity authentication information.

[0086] In this civilized embodiment, the signature center trusted public key can be understood as a digital sequence generated and distributed by the signature center, which is used to decrypt the receiving device authentication information. The signature center trusted public key is injected into the initiating device by the signature center in a secure environment.

[0087] Specifically, obtain the signature center's trusted public key generated by the signature center and distributed to the initiating device, which is used to decrypt the receiving device's authentication information. In the initiating device, use the signature center's trusted public key to perform authentication operations on the receiving device's authentication information. After the authentication is passed, use the initiating device's private key to decrypt the receiving device's authentication information. Look for the network identification code in the decrypted receiving device's authentication information, and extract the found network identification code from the receiving device's authentication information to obtain the network identification code.

[0088] S308: Networking with the receiving device according to the networking identification code.

[0089] In an embodiment of the present invention, an initiating device obtains a device networking instruction for triggering a device to perform networking. After the initiating device obtains the device networking instruction, it can respond to the device networking instruction, that is, after the initiating device obtains the device networking instruction, the initiating device will execute an operation of obtaining an initiating device certificate and an initiating device identification of the initiating device, thereby obtaining the initiating device certificate and the initiating device identification of the initiating device, obtaining a preset challenge value generation rule, and generating a verification random number for subsequent identity authentication according to the preset challenge value generation rule, using the verification random number as the challenge value for this identity verification, and using the initiating device private key to digitally sign the challenge value and the device identification to obtain the initiating device signature, and the obtained initiating device certificate, initiating device identification, challenge value and initiating device signature can be integrated to form a complete data packet, and the complete data packet can be sent to the server. The packet is used as the initiating device identity authentication information. The initiating device can establish a communication connection with the receiving device based on the soft bus communication protocol, and transmit the initiating device identity authentication information to the receiving device through the established communication connection. The receiving device verifies the initiating device identity authentication information. After the verification is passed, the receiving device will generate a receiving device identity authentication information containing a networking identification code and used to verify the identity of the receiving device, and send the receiving device identity authentication information to the initiating device. The receiving device authentication information is authenticated using the signature center's trusted public key. After the authentication is passed, the receiving device authentication information can be decrypted using the initiating device private key. The network identification code is searched for in the decrypted receiving device authentication information, and the found network identification code is extracted from the receiving device authentication information to obtain the network identification code. The initiating device is networked with the receiving device according to the network identification code. The embodiment of the present invention generates a verification random number as a challenge value by calling a challenge value generation rule, and verifies the device identity based on the challenge value, which can effectively prevent malicious devices from performing replay attacks. The verification of device certification, device identification and device signature can effectively prevent the risk of malicious device identity impersonation and forgery. The device identity certification, device identification, challenge value and initiator signature are integrated into identity authentication information, so that the receiving device and the initiating device can receive and verify all necessary information at one time, which simplifies the cumbersome process of identity authentication. A communication connection is established through a soft bus communication protocol to ensure the efficiency and stability of information transmission. The authentication information of the receiving device is authenticated by using the signature center public key, and the key information such as the networking identification code is decrypted by the device private key, etc., which ensures the confidentiality, authenticity and integrity of the information, enhances the security of the network, and networks with the receiving device based on the networking identification code securely transmitted by the receiving device, thereby realizing seamless networking between devices, simplifying the networking process, and thus improving the networking efficiency of the device.

[0090] On the basis of the above-mentioned embodiments, the embodiments of the present invention use the signature center's trusted public key to verify the receiving device's identity authentication information, and extract the networking identification code from the verified receiving device's identity authentication information, including: extracting the receiving device certificate, receiving device identification, receiving device ciphertext and receiving device signature from the receiving device's identity authentication information; verifying the device identification in the receiving device certificate with the receiving device identification; using the signature center's trusted public key to verify the receiving device certificate; using the receiving device public key in the receiving device certificate to verify the receiving device signature; when the receiving device identification, receiving device certificate and receiving device signature are all verified, calling the initiating device private key to decrypt the receiving device ciphertext to obtain the networking identification code.

[0091] In the embodiment of the present invention, the receiving device certificate may be understood as information used to prove the identity of the receiving device. For example, the receiving device certificate may include: a receiving device public key or a receiving device identification, etc.

[0092] The receiving device identifier can be understood as another string of identification codes used to distinguish different receiving devices in the network. For example, the receiving device identifier can be the receiving device serial number or the receiving device media access control address, which is generated by the receiving device hardware and can be guaranteed to be unique and cannot be tampered with.

[0093] The receiving device ciphertext can be understood as a type of encrypted information. For example, the receiving device ciphertext at least includes: a network identification code.

[0094] The receiving device signature can be understood as another identifier. The receiving device signature can ensure the authenticity of the identity of the recipient of the communication and ensure the integrity of the data during the transmission process. By introducing the receiving device signature, the communication security can be improved and malicious device deception attacks can be prevented.

[0095] The receiving device public key can be understood as another digital sequence used to verify the receiving device signature.

[0096] The initiating device private key can be understood as another digital sequence used to decrypt the receiving device ciphertext.

[0097] Specifically, after the initiating device obtains the receiving device authentication information, it can decrypt the receiving device authentication information, extract the receiving device certificate, receiving device identification, receiving device ciphertext and receiving device signature from the decrypted receiving device authentication information, use the actual device identification obtained from the receiving device to verify the receiving device identification extracted from the receiving device authentication information, and obtain a first verification result, use the signature center's trusted public key to verify the receiving device certificate extracted from the parsed identity authentication information, and obtain a second verification result, obtain the receiving device public key in the receiving device certificate, and use the receiving device public key in the receiving device certificate to verify the receiving device signature to obtain a third verification result. When the first verification result, the second verification result and the third verification result all pass the verification, the receiving device ciphertext is decrypted using the initiating device private key to obtain a networking identification code, and based on the networking identification code, the initiating device and the receiving device are networked.

[0098] For example, the steps of extracting the receiving device certificate, receiving device identification, receiving device ciphertext and receiving device signature from the receiving device authentication information may include: using a decryption algorithm to decrypt the receiving device authentication information to obtain the receiving device certificate, receiving device identification, receiving device ciphertext and receiving device signature.

[0099] For example, the steps of verifying various types of data may include: calculating a hash value of the original data and a hash value of the verified data, and if the hash values ​​are completely consistent, the verification result may be considered to have passed the verification.

[0100] Embodiment 4

[0101] Figure 4 This is a flow chart of another device networking method applied to a receiving device provided by an embodiment of the present invention. Based on the above embodiment, the embodiment of the present invention provides another device networking method applied to a receiving device. Figure 4 As shown, the method includes:

[0102] S401, receiving the initiator device identity authentication information through the soft bus communication protocol.

[0103] Specifically, the receiving device establishes a communication connection with the initiating device through the soft bus communication protocol, and the receiving device receives the initiating device identity authentication information from the initiating device through the communication connection.

[0104] S402: parse the initiating device identity authentication information to obtain the initiating device certificate, the initiating device identifier, the challenge value and the initiating device signature.

[0105] Specifically, the receiving device receives the initiating device identity authentication information transmitted by the initiating device, and parses the initiating device identity authentication information, and extracts the initiating device identity certificate, the initiating device identifier, the challenge value and the initiating device signature from the parsed initiating device identity authentication information.

[0106] S403: Verify the device identification in the initiating device certificate with the initiating device identification.

[0107] Specifically, an initiating device certificate that proves the identity of the initiating device is obtained, the initiating device certificate of the initiating device identity can be parsed, the actual device identification of the initiating device can be extracted from the initiating device certificate of the initiating device identity, and the initiating device identification can be compared and verified using the device identification extracted from the parsed initiating device certificate to obtain a verification result.

[0108] S404: Use the signature center's trusted public key to verify the initiating device certificate.

[0109] Specifically, the signature center's trusted public key is used to extract the initiating device certificate from the parsed identity authentication information for verification.

[0110] For example, the step of verifying the initiating device certificate using the signature center's trusted public key may include verifying the validity of the signature in the initiating device certificate and the authenticity of the contents of the initiating device certificate using the signature center's trusted public key based on a key verification algorithm.

[0111] S405: Use the initiating device public key in the initiating device certificate to verify the initiating device signature.

[0112] In the embodiment of the present invention, the initiator device public key can be understood as the specific manifestation or data content of the public key in the asymmetric encryption algorithm, which is used to encrypt data or verify digital signatures and is generated in a secure environment.

[0113] The initiator device signature can be understood as an identifier. The device signature can ensure the authenticity of the identity of the initiator of the communication and ensure the integrity of the data during the transmission process. By introducing the initiator device signature, the communication security can be improved and malicious device spoofing attacks can be prevented.

[0114] Specifically, the receiving device can call the initiating device public key in the initiating device certificate to verify the initiating device signature extracted from the parsed identity authentication information. After the verification is passed, the initiating device identifier and challenge value can be considered to be authentic and complete.

[0115] For example, the step of verifying the signature of the receiving device using the initiating device public key in the initiating device certificate may include: assembling the initiating device identification and the challenge value into a data block, and using the initiating device public key in the initiating device certificate to call the public key signature verification algorithm, passing in the above data block and the initiating device signature, and if the result of the public key signature verification algorithm passes, it can be considered that the authentication is passed.

[0116] S406: When the initiating device certificate, the initiating device identification, and the sending device signature are all successfully verified, it is determined that the initiating device identity authentication information has passed the verification.

[0117] Specifically, the receiving device verifies the initiating device certificate, the initiating device identification and the sending device signature to obtain a verification result. If the verification results are all successful, it can be considered that the initiating device identity authentication information has passed the verification, and subsequent operations can continue.

[0118] S407: After the initiating device identity authentication information is verified, the distributed device management module is called to generate a networking identification code.

[0119] In the embodiment of the present invention, the distributed device management module can be understood as a component in the receiving device, which is used to generate a networking identification code.

[0120] Specifically, when the identity authentication information of the initiator passes the verification, a verification success instruction can be sent to the distributed device management module of the receiving device. After receiving the verification success instruction, the distributed device management module can generate a networking identification code based on the verification success instruction.

[0121] S408: Obtain the receiving device certificate and the receiving device identification, and extract the challenge value of the initiating device identity authentication information and the initiating device identification.

[0122] Specifically, the receiving device performs the operation of obtaining the initiating device certificate, the initiating device identification and the initiating device identity authentication information of the initiating device, obtains the receiving device certificate, the receiving device identification and the initiating device identity authentication information of the receiving device, verifies the initiating device identity authentication information and then decrypts it, extracts the challenge value and the initiating device identification from the verified and decrypted initiating device identity authentication information, wherein obtaining the receiving device certificate and the receiving device identification can ensure the authenticity and uniqueness of the initiating device. .

[0123] S409: Call the initiating device public key in the initiating device certificate to encrypt the challenge value, the receiving device identifier, the initiating device identifier and the networking identification code into a receiving device ciphertext.

[0124] Specifically, the receiving device can assemble the networking identification code, the initiating device identification, the receiving device identification, and the challenge value in the initiating device identity authentication information into a data block, and can use the initiating device public key to encrypt the data block to generate the receiving device ciphertext.

[0125] S410: Call the private key of the receiving device to process the receiving device identification and the receiving device ciphertext into a receiving device signature.

[0126] In the embodiment of the present invention, the private key of the receiving device can be understood as the specific manifestation or data content of the private key in the asymmetric encryption algorithm, which is used to generate a digital signature in a secure environment.

[0127] Specifically, the receiving device identification and the receiving device ciphertext are obtained, and the obtained receiving device identification and the receiving device ciphertext can be encrypted together using the receiving device private key to obtain the receiving device signature.

[0128] S411. Use the receiving device certificate, receiving device identification, receiving device ciphertext and receiving device signature as receiving device identity authentication information.

[0129] Specifically, the receiving device certificate, receiving device identification, receiving device ciphertext and receiving device signature are obtained, and the obtained receiving device certificate, receiving device identification, receiving device ciphertext and receiving device signature can be integrated to form a complete data packet, and the complete data packet is used as the initiator of receiving identity authentication information.

[0130] S412: Call the soft bus communication protocol to transmit the receiving device identity authentication information to the initiating device.

[0131] Specifically, the receiving device establishes a communication connection with the initiating device based on the soft bus communication protocol, and transmits the receiving device identity authentication information to the initiating device through the established communication connection, and the initiating device performs subsequent operations based on the received receiving device identity authentication information.

[0132] In an embodiment of the present invention, a receiving device establishes a communication connection with an initiating device through a soft bus communication protocol, and the receiving device receives the initiating device identity authentication information of the initiating device through the communication connection, parses the initiating device identity authentication information, extracts the initiating device identity certificate, the initiating device identifier, the challenge value and the initiating device signature from the parsed initiating device identity authentication information, uses the device identifier extracted from the parsed initiating device certificate to compare and verify the initiating device identifier, uses the signature center's trusted public key to verify the initiating device certificate extracted from the parsed identity authentication information, and can call the initiating device public key in the initiating device certificate to verify the initiating device signature extracted from the parsed identity authentication information. If the above verification results are all successful, it can be considered that the identity authentication information of the initiating device has passed the verification, and a successful verification instruction can be sent to the distributed device management module of the receiving device. After receiving the successful verification instruction, the distributed device management module can generate a networking identification code based on the successful verification instruction, and the receiving device executes the acquisition. The initiating device certificate, the initiating device identification and the initiating device identity authentication information of the initiating device are operated to obtain the receiving device certificate, the receiving device identification and the initiating device identity authentication information of the receiving device. The initiating device identity authentication information can be verified and then decrypted, and the challenge value and the initiating device identification can be extracted from the verified and decrypted initiating device identity authentication information. The receiving device can assemble the networking identification code, the initiating device identification, the receiving device identification and the challenge value in the initiating device identity authentication information into a data block, and the initiating device public key can be used to encrypt the data block to generate a receiving device ciphertext, and the obtained receiving device certificate, receiving device identification, receiving device ciphertext and receiving device signature are integrated to form a complete data packet, and the complete data packet is used as the initiating receiving identity authentication information. The receiving device establishes a communication connection with the initiating device based on the soft bus communication protocol, and transmits the receiving device identity authentication information to the initiating device through the established communication connection. The initiating device performs subsequent operations based on the received receiving device identity authentication information. The embodiment of the present invention verifies the identity of the initiating device by parsing the initiating device identity authentication information. When the verification is successful, the receiving device generates the receiving device identity authentication information including the ciphertext networking identification code and sends it to the initiating device, thereby ensuring the authenticity and reliability of the identities between devices. By securely sharing the networking identification code, seamless networking between devices is achieved, the networking process is simplified, and the networking efficiency of the devices is improved.

[0133] Embodiment 5

[0134] The embodiment of the present invention is a senseless networking method based on the OpenHarmony soft bus, which provides device identity authentication and plaintext personal identification number (PIN) security sharing capabilities through device authentication and asymmetric cryptography. The embodiment of the present invention can optimize the operation of users manually entering PINs and realize senseless networking authentication of users during device networking. The overview of senseless networking is as follows: Figure 5 As shown in the figure, the way of exchanging PIN codes is changed during the soft bus networking process, and compatibility with the manual PIN input networking method is maintained. When multiple devices are networked, the manual PIN input networking can also participate in the device networking. After the networking devices hold the same plaintext PIN, they use OpenHarmony's original Password Authenticated Key Exchange (PAKE) and Security Token Service (STS) to generate the same session key to achieve a secure communication connection for the device network.

[0135] Using asymmetric cryptography and a trusted signature center, the device identity and related information are signed to generate a verifiable device certificate. The device certificate overview is as follows Figure 6 As shown: The device injects the signature center's trusted public key, device certificate and device private key issued by the trusted signature center in a secure environment, and implements trusted identity authentication and PIN security sharing of both devices through device certificate. The device certificate issued by the trusted signature center contains: device public key, device identification, and trusted signature and other information.

[0136] The embodiment of the present invention uses device certification and asymmetric cryptography to realize the device identity certification and plain text PIN security sharing in the device soft bus networking authentication process, wherein the senseless networking process is as follows: Figure 7As shown: first obtain the device certificate and the initiator device identity (IDENTITY, ID), generate a challenge value, use the initiator device private key to generate the initiator signature value of "device ID + challenge value", and send the "initiator device certificate + initiator device ID + challenge value + initiator signature value" to the receiving end through the soft bus; then, the receiving end verifies the initiator identity and generates a receiving end identity authentication information including the ciphertext PIN: parse the initiator device certificate to obtain the device ID, verify it with the initiator device ID, continue to execute if the verification succeeds, and exit if the identity authentication fails if the verification fails, use the signature center trusted public key to verify the initiator device certificate, verify whether the device certificate is issued by the trusted signature center, continue to execute if it succeeds, and exit if the identity authentication fails if it fails, and use the initiator public key in the initiator device certificate to verify the initiator signature value, if it succeeds, the identity authentication passes, and if it fails, the identity authentication fails. After the initiator passes the identity authentication, the receiver generates the receiver identity authentication information including the ciphertext PIN. The generation process includes: obtaining the receiver device certificate, the receiver device ID, obtaining the plaintext PIN generated by the OpenHarmony distributed device management module, assembling the "challenge value + initiator device ID + receiver device ID + plaintext PIN" into the information to be encrypted, encrypting the above information to be encrypted using the initiator public key of the initiator device certificate, generating the receiver ciphertext, using the receiver device private key to generate the receiver signature for the "receiver device ID + receiver ciphertext", and sending the "receiver device certificate + receiver device ID + receiver ciphertext + receiver signature" to the initiator through the soft bus; finally, the initiator verifies the identity of the receiver and decrypts the plaintext PIN: parsing the receiver device certificate, obtaining the device ID field in the receiver device certificate, verifying it with the receiver device ID, and successfully continuing to execute If it fails, the authentication fails and exits. The trusted public key of the signature center is used to verify the receiving device certificate to verify whether the device certificate is issued by the trusted signature center. If it succeeds, continue to execute. If it fails, the authentication fails and exits. The receiving public key of the receiving device certificate is used to verify the receiving signature value. If the authentication succeeds, the authentication passes. If it fails, the authentication fails. After the identity authentication passes, the PIN is decrypted from the receiving ciphertext. The process includes: using the initiator's private key to decrypt the receiving ciphertext, decrypting the challenge value, the initiator's device ID, the receiving device ID, and the plaintext PIN, verifying the decrypted challenge value, the initiator's device ID, and the receiving device ID. If the verification passes, continue. If it fails, exit. After the identity authentication passes, the PIN is extracted from the decrypted information and the plaintext PIN is given to the distributed device management module of OpenHarmony for the subsequent generation of communication session keys of OpenHarmony.

[0137] Embodiment 6

[0138] Figure 8The present invention provides a schematic diagram of a device networking apparatus for an initiator device according to an embodiment of the present invention. Figure 8 As shown, the device comprises:

[0139] The information acquisition module 501 is used to obtain the initiating device identity authentication information in response to the device networking instruction;

[0140] The identification code acquisition module 502 is used to transmit the initiating device identity authentication information to the receiving device, and obtain the network identification code fed back by the receiving device after verifying the initiating device identity authentication information;

[0141] The networking module 503 is used to establish a network with the receiving device according to the networking identification code.

[0142] In an embodiment of the present invention, an initiating device can receive a device networking instruction for triggering a device to perform networking through a receiving module equipped thereon. After the initiating device obtains the device networking instruction, it can respond to the device networking instruction, that is, after the initiating device obtains the device networking instruction, the initiating device performs an operation of obtaining the initiating device identity authentication information to obtain the initiating device identity authentication information. The initiating device transmits the obtained initiating device identity authentication information to the receiving device. After the receiving device receives the initiating device identity authentication information, it can verify the initiating device identity authentication information. After the verification is passed, the receiving device can generate a networking identification code and feed back the generated networking identification code to the initiating device. The initiating device is responsible for receiving the networking identification code fed back by the receiving device. After the initiating device receives the networking identification code, it establishes networking authentication with the corresponding receiving device according to the networking identification code to complete the networking of the initiating device and the receiving device. After the networking of the initiating device and the receiving device is successful, the initiating device and the receiving device can communicate securely. The embodiments of the present invention ensure secure communication between devices by verifying identity authentication information between devices and encrypting and transmitting networking identification codes. Networking is directly performed with a receiving device based on a networking identification code fed back by the receiving device, thereby simplifying the tedious steps of users manually entering networking identification codes and improving user experience. By sharing networking identification codes between devices, seamless networking between devices is achieved, thereby achieving the beneficial effect of improving networking efficiency.

[0143] Based on the above embodiment, the information acquisition module 501 is specifically used for:

[0144] Obtain the initiator device certificate and initiator device identification of the initiator device;

[0145] Call the challenge value generation rule to generate a verification random number as the challenge value;

[0146] The challenge value and the initiator device identifier are processed into an initiator device signature using the initiator device private key;

[0147] The initiating device certificate, initiating device identification, challenge value and initiating device signature are used as the initiating device identity authentication information.

[0148] The identification code acquisition module 502 also includes: an information transmission unit, which calls the soft bus communication protocol to transmit the initiating device identity authentication information to the receiving device; an information receiving unit, which receives the receiving device identity authentication information containing the networking identification code fed back by the receiving device after verifying the initiating device identity authentication information; an identification code extraction unit, which is used to verify the receiving device identity authentication information using the signature center's trusted public key, and extract the networking identification code from the verified receiving device identity authentication information.

[0149] The identification code extraction unit is specifically used for:

[0150] Extracting the receiving device certificate, receiving device identification, receiving device ciphertext and receiving device signature from the receiving device identity authentication information;

[0151] Verify the device identification in the receiving device certificate with the receiving device identification;

[0152] Use the signature authority's trusted public key to verify the receiving device's certificate;

[0153] Verify the receiving device signature using the receiving device public key in the receiving device certificate;

[0154] When the receiving device identification, receiving device certification and receiving device signature are all verified, the initiating device private key is called to decrypt the receiving device ciphertext to obtain the networking identification code.

[0155] Embodiment 7

[0156] Fig. 9 The present invention provides a schematic diagram of a device networking apparatus for a receiving device according to an embodiment of the present invention. Fig. 9 As shown, the device comprises:

[0157] The information verification module 601 is used to obtain the initiating device identity authentication information transmitted by the initiating device and verify the initiating device identity authentication information;

[0158] The identification code generation module 602 is used to determine whether the initiating device identity authentication information has passed the verification and generate the receiving device authentication information including the networking identification code;

[0159] The identification code transmission module 603 is used to transmit the receiving device authentication information to the initiating device for networking.

[0160] In an embodiment of the present invention, a preset identity authentication information verification rule can be obtained, and the receiving device can receive the initiating device identity authentication information transmitted by the initiating device through the receiving module equipped by the receiving device itself, and can verify the received initiating device identity authentication information according to the preset identity authentication information verification rule. When it is determined that the initiating identity authentication information passes the verification, the receiving device can generate the receiving device identity authentication information including the networking identification code, and the receiving device transmits the generated receiving device authentication information to the initiating device. The sending device performs networking with the receiving device based on the received receiving device authentication information. In an embodiment of the present invention, by verifying the identity authentication information of the initiating device, after determining that the identity authentication information passes the verification, the receiving device identity authentication information including the networking identification code is generated and sent to the initiating device, the identities of both devices can be effectively verified and the networking identification code can be safely shared, thereby enhancing the security of device networking. By transmitting the networking identification code to the initiating device for networking, the cumbersome steps of the user manually inputting the networking identification code are reduced, and the networking process is simplified. After the networking identification code is successfully transmitted, the initiating device and the receiving device can automatically perform networking, thereby improving the networking efficiency between devices.

[0161] The verification information module 601 is specifically used for:

[0162] Receive initiator device identity authentication information through a soft bus communication protocol;

[0163] Parse the initiator device identity authentication information to obtain the initiator device certificate, initiator device identifier, challenge value and initiator device signature;

[0164] Verify the device identification in the initiating device identity certificate with the initiating device identification;

[0165] Use the signature center's trusted public key to verify the originating device's certificate;

[0166] Use the initiator device public key in the initiator device certificate to verify the initiator device signature;

[0167] When the initiating device certification, the initiating device identification, and the initiating device signature are all successfully verified, it is determined that the initiating device identity authentication information passes the verification.

[0168] The identification code generation module 602 is specifically used for:

[0169] After the initiating device identity authentication information is verified, the distributed device management module is called to generate a network identification code;

[0170] Obtain the receiving device certificate and the receiving device identification, and extract the challenge value of the initiating device identity authentication information and the initiating device identification;

[0171] The initiating device public key in the initiating device certificate is called to encrypt the challenge value, the receiving device identifier, the initiating device identifier, and the networking identification code into a receiving device ciphertext;

[0172] The private key of the receiving device is called to process the receiving device identification and the receiving device ciphertext into the receiving device signature;

[0173] The receiving device certificate, receiving device identification, receiving device ciphertext and receiving device signature are used as receiving device authentication information.

[0174] The identification code transmission module 603 is specifically used to call the soft bus communication protocol to transmit the receiving device authentication information to the initiating device.

[0175] Embodiment 8

[0176] Fig.10 A schematic diagram of an electronic device that can be used to implement an embodiment of the present invention is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device may also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown in the embodiments of the present invention, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the embodiments of the present invention described and / or required herein.

[0177] like Fig.10 As shown, the electronic device includes at least one processor 11, and a memory connected to the at least one processor 11, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc., wherein the memory stores a computer program that can be executed by at least one processor, and the processor 11 can perform various appropriate actions and processes according to the computer program stored in the ROM 12 or the computer program loaded from the storage unit 18 to the RAM 13. In the RAM 13, various programs and data required for the operation of the electronic device 10 can also be stored. The processor 11, the ROM 12, and the RAM 13 are connected to each other through a bus 14. The input / output (I / O) interface 15 is also connected to the bus 14.

[0178] A number of components in the electronic device are connected to the I / O interface 15, including: an input unit 16, such as a keyboard, a mouse, etc.; an output unit 17, such as various types of displays, speakers, etc.; a storage unit 18, such as a disk, an optical disk, etc.; and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 19 allows the electronic device to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0179] The processor 11 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the processor 11 include, but are not limited to, a central processing unit, a graphics processing unit, various special artificial intelligence computing chips, various processors running machine learning model algorithms, digital signal processors, and any appropriate processors, controllers, microcontrollers, etc. The processor 11 executes the various methods and processes described above, for example, the device networking method.

[0180] In some embodiments, the device networking method may be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as a storage unit 18. In some embodiments, part or all of the computer program may be loaded and / or installed on the electronic device via the ROM 12 and / or the communication unit 19. When the computer program is loaded into the RAM 13 and executed by the processor 11, one or more steps of the device networking method may be performed. Alternatively, in other embodiments, the processor 11 may be configured as the device networking method in any other appropriate manner (e.g., by means of firmware).

[0181] Various implementations of the systems and techniques described above in the embodiments of the present invention may be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays, application specific integrated circuits, application specific standard products, systems on a chip, load programmable logic devices, computer hardware, firmware, software, and / or combinations thereof. These various implementations may include: being implemented in one or more computer programs, which may be executed and / or interpreted on a programmable system including at least one programmable processor, which may be a dedicated or general programmable processor, which may receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0182] The computer programs for implementing the methods of the embodiments of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that when the computer programs are executed by the processor, the functions / operations specified in the flow chart and / or block diagram are implemented. The computer programs may be executed entirely on the machine, partially on the machine, partially on the machine and partially on a remote machine as a stand-alone software package, or entirely on a remote machine or server.

[0183] In the context of an embodiment of the present invention, a computer-readable storage medium may be a tangible medium that may contain or store a computer program for use by an instruction execution system, device or equipment or used in combination with an instruction execution system, device or equipment. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices or equipment, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a RAM, a ROM, an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0184] To provide interaction with a user, the systems and techniques described herein may be implemented on an electronic device having: a display device (e.g., a cathode ray tube or a liquid crystal display monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or a trackball) through which the user can provide input to the electronic device. Other types of devices may also be used to provide interaction with the user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form (including: acoustic input, voice input, or tactile input).

[0185] The systems and techniques described herein may be implemented in a computing system that includes backend components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes frontend components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such backend components, middleware components, or frontend components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: local area networks, wide area networks, blockchain networks, and the Internet.

[0186] A computing system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The client and server relationship is generated by computer programs running on the respective computers and having a client-server relationship with each other. The server may be a cloud server, also known as a cloud computing server or cloud host, which is a host product in the cloud computing service system to solve the defects of difficult management and weak business scalability in traditional physical hosts and virtual private server services.

[0187] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps described in the present invention can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solution of the present invention can be achieved, and this document does not limit this.

[0188] The above specific implementations do not constitute a limitation on the protection scope of the embodiments of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A device networking method, characterized in that: Applied to an initiating device, the method comprises: In response to the device networking instruction, obtain the initiating device identity authentication information; Transmitting the initiating device identity authentication information to the receiving device, and obtaining the networking identification code fed back by the receiving device after verifying the initiating device identity authentication information; Networking is performed with the receiving device according to the networking identification code.

2. The method according to claim 1, characterized in that: The obtaining of the initiating device identity authentication information includes: Obtaining an initiator device certificate and an initiator device identifier of the initiator device; Call the challenge value generation rule to generate a verification random number as the challenge value; Using the initiating device private key, processing the challenge value and the initiating device identifier into an initiating device signature; The initiating device certificate, the initiating device identification, the challenge value and the initiating device signature are used as the initiating device identity authentication information.

3. The method according to claim 1, characterized in that: The transmitting the initiating device identity authentication information to the receiving device, and obtaining the networking identification code fed back by the receiving device after verifying the initiating device identity authentication information, includes: Invoking a soft bus communication protocol to transmit the initiating device identity authentication information to the receiving device; Receiving the receiving device identity authentication information including the networking identification code fed back by the receiving device after verifying the initiating device identity authentication information; The receiving device identity authentication information is verified using the signature center's trusted public key, and the networking identification code is extracted from the verified receiving device identity authentication information.

4. The method according to claim 3, characterized in that: The using of the signature center trusted public key to verify the receiving device identity authentication information and extracting the networking identification code from the verified receiving device identity authentication information includes: Extracting the receiving device certificate, the receiving device identification, the receiving device ciphertext and the receiving device signature from the receiving device identity authentication information; Verifying the device identification in the receiving device certificate with the receiving device identification; Verify the receiving device certificate using the signature authority's trusted public key; Verifying the receiving device signature using the receiving device public key in the receiving device certificate; When the receiving device identification, the receiving device certificate and the receiving device signature are all verified, the initiating device private key is called to decrypt the receiving device ciphertext to obtain the networking identification code.

5. A device networking method, characterized in that: Applied to a receiving device, the method comprises: Acquire the initiating device identity authentication information transmitted by the initiating device, and verify the initiating device identity authentication information; Determining that the initiating device identity authentication information passes the verification, and generating receiving device authentication information including a networking identification code; The receiving device authentication information is transmitted to the initiating device for networking.

6. The method according to claim 5, characterized in that: The obtaining the initiating device identity authentication information transmitted by the initiating device and verifying the initiating device identity authentication information includes: Receiving the initiator device identity authentication information through a soft bus communication protocol; Parsing the initiating device identity authentication information to obtain an initiating device certificate, an initiating device identifier, a challenge value, and an initiating device signature; Verifying the device identification in the initiating device identity certificate with the initiating device identification; Verify the initiating device certificate using the signature center trusted public key; Verifying the initiating device signature using the initiating device public key in the initiating device certificate; When the initiating device certificate, the initiating device identification, and the initiating device signature are all successfully verified, it is determined that the initiating device identity authentication information passes the verification.

7. The method according to claim 5, characterized in that: The step of determining that the initiating device identity authentication information passes the verification and generating the receiving device authentication information including the networking identification code includes: After the initiating device identity authentication information is verified, calling the distributed device management module to generate a networking identification code; Obtaining a receiving device certificate and a receiving device identifier, and extracting the challenge value of the initiating device identity authentication information and the initiating device identifier; Calling the initiating device public key in the initiating device certificate to encrypt the challenge value, the receiving device identifier, the initiating device identifier and the networking identification code into a receiving device ciphertext; Invoke the receiving device private key to process the receiving device identification and the receiving device ciphertext into a receiving device signature; The receiving device certificate, the receiving device identification, the receiving device ciphertext and the receiving device signature are used as the receiving device authentication information.

8. The method according to claim 5, characterized in that: The transmitting the receiving device authentication information to the initiating device for networking includes: The soft bus communication protocol is called to transmit the receiving device authentication information to the initiating device.

9. An electronic device, characterized in that: The electronic device comprises: at least one processor; and a memory communicatively connected to the at least one processor; wherein, The memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the device networking method according to any one of claims 1 to 8.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the device networking method according to any one of claims 1 to 8 when executed.

Images