Method for operating home equipment, method for operating gateway equipment and related devices

Abstract

The present disclosure relates to a method for operating a home appliance, a method for operating a gateway device, and related devices. A method for operating a home appliance in a home scene, the home scene includes home appliances, and a gateway device, a mobile terminal, and a cloud server configured to manage the home appliances and communicate with each other, the method comprising: encrypting configuration information of the home appliance based on a first public key configured in the home appliance, the configuration information including at least one of control information and current state information of a controllable attribute of the home appliance, the control information indicating a possible state that the controllable attribute can be controlled to enter, and the current state information indicating a state that the controllable attribute is currently controlled to enter; and sending the encrypted configuration information to a gateway device, the gateway device having a first private key corresponding to the first public key.

Description

Technical Field

[0001] The present disclosure relates to the field of smart home technology, and more specifically, to a method for operating home devices in a home scene and associated home devices, a method for operating a gateway device in a home scene and associated gateway devices, a non-transitory storage medium, and a computer program product. Background Art

[0002] With the development of information communication and Internet of Things technology, home appliances in users' homes can realize real-time data interaction with users' mobile terminals through gateway devices, so that users can experience services such as remote reading of energy consumption information, air conditioning temperature control system control, and lighting equipment control. Summary of the invention

[0003] A brief overview of the disclosure is given below in order to provide a basic understanding of some aspects of the disclosure. However, it should be understood that this overview is not an exhaustive overview of the disclosure. It is not intended to identify the key or important parts of the disclosure, nor is it intended to limit the scope of the disclosure. Its purpose is simply to give some concepts of the disclosure in a simplified form as a prelude to a more detailed description given later.

[0004] According to a first aspect of the present disclosure, a method for operating home appliances in a home scene is provided, wherein the home scene includes home appliances, and a gateway device, a mobile terminal, and a cloud server configured to manage the home appliances and communicate with each other, the method comprising: encrypting configuration information of the home appliances based on a first public key configured in the home appliances, the configuration information comprising at least one of control information and current status information of controllable attributes of the home appliances, the control information indicating possible states that the controllable attributes can be controlled to enter, and the current status information indicating a state that the controllable attributes are currently controlled to enter; and sending the encrypted configuration information to the gateway device, the gateway device having a first private key corresponding to the first public key.

[0005] In some embodiments, the first public key is generated by the manufacturer of the home appliance and pre-configured in the home appliance, or the first public key is generated by the mobile terminal based on predetermined rules and uploaded to the cloud server, and then sent by the cloud server to the home appliance via the gateway device.

[0006] In some embodiments, the method includes: receiving a control instruction from a gateway device, the control instruction carrying a digital signature generated based on a first private key, verifying the digital signature based on a first public key; and executing the control instruction in response to successful verification.

[0007] In some embodiments, the method includes: before the home device joins the home scene, encrypting a network access request for joining the home scene based on a second public key generated by the manufacturer of the home device and pre-configured in the home device, and sending the encrypted network access request to a gateway device, and the gateway device has a second private key corresponding to the second public key.

[0008] In some embodiments, the second public key is the same as the first public key and the second private key is the same as the first private key, or the second public key is different from the first public key and the second private key is different from the first private key.

[0009] In some embodiments, the home scene includes a home device group, and the home device belongs to the home device group. The method includes: receiving a first group public key for the home device group encrypted based on a third public key from a gateway device, wherein the first group public key is generated based on a first private key and corresponds to the first private key, and the gateway device has a third public key; decrypting the encrypted first group public key based on a third private key corresponding to the third public key generated by the manufacturer of the home device and pre-configured in the home device to obtain the first group public key; and encrypting configuration information of the home device based on the first group public key and sending the encrypted configuration information to the gateway device.

[0010] In some embodiments, the first group public key is generated based on the first private key in combination with at least one of group identification information of the home device group and the current time.

[0011] In some embodiments, the method includes: receiving a control instruction from a gateway device, the control instruction carrying a digital signature generated based on a first private key; verifying the digital signature based on a first group public key; and executing the control instruction in response to successful verification.

[0012] In some embodiments, the method includes when deleting or adding one or more home devices from a home device group, receiving a second group public key for the home device group encrypted based on a third public key from a gateway device, wherein the second group public key is generated based on a first private key and corresponds to the first private key; decrypting the encrypted second group public key based on the third private key to obtain the second group public key; and encrypting configuration information of the home device based on the second group public key and sending the encrypted configuration information to the gateway device.

[0013] In some embodiments, the second group public key is generated based on the first private key in combination with at least one of updated group identification information of the home device group after deletion or addition and the current time.

[0014] In some embodiments, the method includes when a home device replaces an original home device in a home device group: receiving configuration information of the original home device encrypted based on a third public key from a gateway device; decrypting the encrypted configuration information of the original home device based on a third private key to obtain the configuration information of the original home device; and configuring based on the configuration information of the original home device.

[0015] According to a second aspect of the present disclosure, a method for operating a gateway device in a home scene is provided, wherein the home scene includes home devices, and a gateway device, a mobile terminal and a cloud server configured to manage the home devices and communicate with each other, the gateway device has a first private key, and the method includes: receiving configuration information from the home device that is encrypted based on a first public key configured in the home device, the first public key corresponds to a first private key, the configuration information includes at least one of control information and current status information of a controllable attribute of the home device, the control information indicates a possible state that the controllable attribute can be controlled to enter, and the current status information indicates a state that the controllable attribute is currently controlled to enter; decrypting the encrypted configuration information based on the first private key to obtain the configuration information; and sending the configuration information to the mobile terminal.

[0016] In some embodiments, the first private key is generated by the manufacturer of the home appliance and uploaded to the cloud server, which is then forwarded by the cloud server to the gateway device via the mobile terminal; or the first private key is generated by the mobile terminal based on a predetermined rule and sent to the gateway device.

[0017] In some embodiments, the method includes: receiving a control instruction from a mobile terminal or a cloud server; digitally signing the control instruction based on a first private key; and sending the control instruction carrying the digital signature to the home device.

[0018] In some embodiments, the method includes: receiving a network access request from a home device that is encrypted based on a second public key generated by the manufacturer of the home device and pre-configured in the home device, the gateway device having a second private key corresponding to the second public key; decrypting the encrypted network access request based on the second private key to obtain the network access request; verifying the network access request; and in response to successful verification, sending the network access request to a mobile terminal.

[0019] In some embodiments, the second public key is the same as the first public key, and the second private key is the same as the first private key; or the second public key is different from the first public key, and the second private key is different from the first private key.

[0020] In some embodiments, a home scene includes a home device group, the home device group includes multiple home devices, a third private key is generated by the manufacturers of the multiple home devices and pre-configured in each of the multiple home devices, and the method includes: receiving a first group public key for the home device group from a mobile terminal, wherein the first group public key is generated based on the first private key and corresponds to the first private key; encrypting the first group public key based on a third public key corresponding to the third private key, and the gateway device has the third public key; and sending the encrypted first group public key to each home device in the home device group respectively.

[0021] In some embodiments, the first group public key is generated based on the first private key in combination with at least one of group identification information of the home device group and the current time.

[0022] In some embodiments, the method includes when one or more home devices are deleted from or added to a home device group: receiving a second group public key for the home device group from a mobile terminal, wherein the second group public key is generated based on a first private key and corresponds to the first private key; encrypting the second group public key based on a third public key; and sending the encrypted second group public key to each home device in the home device group respectively.

[0023] In some embodiments, the second group public key is generated based on the first private key in combination with at least one of updated group identification information of the home device group after deletion or addition and the current time.

[0024] In some embodiments, the method includes: receiving configuration information encrypted based on a group public key from a first home device in a home device group; and decrypting the encrypted configuration information of the first home device based on a first private key to obtain the configuration information of the first home device.

[0025] In some embodiments, the method includes: in response to receiving a replacement instruction from a mobile terminal for replacing a first home device with a second home device in a home device group, encrypting configuration information of the first home device based on a third public key, and sending the configuration information of the first home device encrypted based on the third public key to the second home device.

[0026] In some embodiments, the mobile terminal is a first mobile terminal, the home device is a first home device, the first private key is a first-first private key and is associated with the first mobile terminal, the first public key is a first-first public key, the home scene also includes a second mobile terminal and a second home device, the gateway device, the second mobile terminal, and the cloud server are configured to manage the second home device, the gateway device also has a second-first private key associated with the second mobile terminal, and the second-first public key corresponding to the second-first private key is configured in the second home device.

[0027] In some embodiments, the method includes: in response to a unidirectional or bidirectional authorization between a first mobile terminal and a second mobile terminal, storing a unidirectional or bidirectional mapping relationship between the first mobile terminal and the second mobile terminal corresponding to the unidirectional or bidirectional authorization; receiving a first control instruction from the first mobile terminal, the first control instruction being used to control a second home device; in response to determining based on the mapping relationship that the first mobile terminal has the right to control the second home device, performing a first digital signature on the first control instruction based on a second first private key; and sending the first control instruction carrying the first digital signature to the second home device.

[0028] In some embodiments, the method includes: in response to a unidirectional or bidirectional authorization between a first mobile terminal and a second mobile terminal, storing a unidirectional or bidirectional mapping relationship between the first mobile terminal and the second mobile terminal corresponding to the unidirectional or bidirectional authorization; receiving configuration information encrypted based on a second first public key from a second home device; decrypting the encrypted configuration information of the second home device based on a second first private key to obtain the configuration information of the second home device; and sending the configuration information of the second home device to the first mobile terminal based on the mapping relationship.

[0029] In some embodiments, the first home device is a physical scene panel, and the method includes: in response to a unidirectional or bidirectional authorization between the first mobile terminal and the second mobile terminal, binding the second first private key to the physical scene panel.

[0030] In some embodiments, the method includes: receiving a first control instruction from a first mobile terminal, the first control instruction being used to control a second home device; performing a first digital signature on the first control instruction based on a first private key; and sending the first control instruction carrying the first digital signature to a physical scene panel, wherein the physical scene panel is configured to: verify the first digital signature based on the first public key, and in response to successful verification, perform a second digital signature on the first control instruction based on a second private key and send the first control instruction carrying the second digital signature to the second home device.

[0031] In some embodiments, the second first private key is bound to the first button of the physical scene panel, and the method includes: receiving a second control command encrypted based on the first first public key from the physical scene panel, the second control instruction is used to control a second home device and is generated in response to the first button being pressed; decrypting the second control instruction encrypted based on the first first public key based on the first first private key to obtain the second control instruction; performing a first digital signature on the second control instruction based on the first first private key; and sending the second control instruction carrying the first digital signature to the physical scene panel, wherein the physical scene panel is configured to: verify the first digital signature based on the first first public key, and in response to the verification being passed, perform a second digital signature on the second control instruction based on the second first private key and send the second control instruction carrying the second digital signature to the second home device.

[0032] In some embodiments, the method includes: receiving configuration information of a second home device encrypted based on a first public key from a physical scene panel, and sending the configuration information of the second home device to a first mobile terminal, wherein the configuration information of the second home device is obtained by decrypting the configuration information from the second home device encrypted based on a second first public key by the physical scene panel based on a second first private key.

[0033] In some embodiments, the method includes: after receiving the configuration information of the second home device encrypted based on the first public key, decrypting the encrypted configuration information of the second home device based on the first private key to obtain the configuration information of the second home device, and sending the decrypted configuration information of the second home device to the first mobile terminal.

[0034] According to a third aspect of the present disclosure, a home appliance is provided, comprising: a processor; and a memory storing computer executable instructions, wherein when the computer executable instructions are executed by the processor, the processor executes the method for operating a home appliance in a home scene according to the first aspect of the present disclosure.

[0035] According to a fourth aspect of the present disclosure, a gateway device is provided, comprising: a processor; and a memory storing computer executable instructions, wherein when the computer executable instructions are executed by the processor, the processor executes the method for operating a gateway device in a home scenario according to the second aspect of the present disclosure.

[0036] According to a fifth aspect of the present disclosure, a non-volatile storage medium having computer executable instructions stored thereon is provided. When the computer executable instructions are executed by a processor, the processor executes the method according to the first aspect or the second aspect of the present disclosure.

[0037] According to a sixth aspect of the present disclosure, a computer program product is provided. The computer program product includes instructions, and when the instructions are executed by a processor, the method according to the first aspect or the second aspect of the present disclosure is implemented. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] The foregoing and other features and advantages of the present disclosure will become apparent from the following description of the embodiments of the present disclosure in conjunction with the accompanying drawings. The accompanying drawings are incorporated herein and form a part of the specification, and are further used to explain the principles of the present disclosure and enable those skilled in the art to make and use the present disclosure. Among them:

[0039] Figure 1 A schematic block diagram showing a non-limiting example home scene on which embodiments of the present disclosure may be implemented;

[0040] Figure 2 A flowchart of a method for operating a home device in a home scene according to some embodiments of the present disclosure is shown;

[0041] Figure 3 A flowchart of a method for operating a gateway device in a home scenario according to some embodiments of the present disclosure is shown;

[0042] Figure 4 A schematic block diagram of a household device according to some embodiments of the present disclosure is shown;

[0043] Figure 5 A schematic block diagram of a gateway device according to some embodiments of the present disclosure is shown;

[0044] Figure 6 A schematic block diagram of a computer system is shown on which embodiments of the present disclosure may be implemented.

[0045] Note that in the embodiments described below, sometimes the same reference numerals are used in common between different drawings to represent the same parts or parts with the same functions, and their repeated descriptions are omitted. In some cases, similar numbers and letters are used to represent similar items, so once an item is defined in one drawing, it does not need to be further discussed in subsequent drawings.

[0046] For ease of understanding, the position, size, range, etc. of each structure shown in the drawings and the like may not represent the actual position, size, range, etc. Therefore, the present disclosure is not limited to the position, size, range, etc. disclosed in the drawings and the like. DETAILED DESCRIPTION

[0047] Various exemplary embodiments of the present disclosure will be described in detail below with reference to the accompanying drawings. It should be noted that unless otherwise specifically stated, the relative arrangement of components and steps, numerical expressions and numerical values ​​set forth in these embodiments do not limit the scope of the present disclosure.

[0048] The following description of at least one exemplary embodiment is in fact merely illustrative and is in no way intended to limit the present disclosure and its application or use. That is, the structures and methods herein are shown in an exemplary manner to illustrate different embodiments of the structures and methods in the present disclosure. However, those skilled in the art will appreciate that they merely illustrate exemplary ways of the present disclosure that can be implemented, rather than exhaustive ways. In addition, the drawings need not be drawn to scale, and some features may be enlarged to illustrate the details of specific components.

[0049] In addition, technologies, methods, and equipment known to ordinary technicians in the relevant art may not be discussed in detail, but where appropriate, the technologies, methods, and equipment should be considered as part of the specification.

[0050] In all examples shown and discussed herein, any specific values ​​should be interpreted as merely exemplary and not as limiting. Therefore, other examples of the exemplary embodiments may have different values.

[0051] Figure 1 Schematic block diagram of a non-limiting example home scene on which embodiments of the present disclosure may be implemented. Figure 1 As shown, the home scene 100 may include home devices 104-106 (for example, but not limited to, home cameras, smart screens, smart TVs, lamps, air conditioners, scene panels, smart sockets, etc.), as well as a gateway device 103, a mobile terminal 102, and a cloud server 101 configured to manage the home devices 104-106 and communicate with each other. In the home scene, the home devices 104-106, the gateway device 103, the mobile terminal 102, and the cloud server 101 often interact with each other via a wireless network. For example, the home account created by the user on the mobile terminal 102 and the personal information entered will be uploaded to the cloud server 101 via a wireless network, or the control instructions used by the user to operate the home devices 104-106 will be sent to the gateway device 103 via the mobile terminal 102 through the wireless network, and then sent to the home devices 104-106 by the gateway device 103 via the wireless network to execute the control instructions.

[0052] For these data interactions in the home scene, the home devices 104-106, gateway device 103, mobile terminal 102 and cloud server 101 have not taken any security measures to prevent data leakage. Unauthorized malicious third-party devices can join the home scene 100 according to the standard network protocol to directly obtain sensitive information related to the user, so as to achieve malicious purposes such as data tampering and privacy infringement. In addition, home devices with certain computing power may also be maliciously tampered or operated incorrectly by attackers during the network distribution process.

[0053] To this end, the present disclosure provides a method for operating home appliances in a home scene, which encrypts and transmits data from the home appliances through a public key configured in the home appliances and decrypts the encrypted and transmitted data through a corresponding private key configured in a gateway device, a mobile terminal or a cloud server, thereby ensuring data interaction between the home appliances and the gateway device, the mobile terminal or the cloud server to operate the home appliances, and preventing leakage of data transmitted in the home scene, thereby ensuring the data security of users and improving the user experience.

[0054] In addition, in the present disclosure, the mobile terminal may be, for example, a smart phone, a tablet computer, or a removable device on a fixed terminal device, which has a certain computing power and includes an input / output device capable of display and operation. The mobile terminal may be registered and authenticated on a cloud server. The cloud server may manage the joining, communication, and logout / exit of the current account process of the mobile terminal through the management authority provided by the manufacturer in the factory settings.

[0055] Figure 2 FIG. 2 is a flow chart showing a method 200 for operating a home device in a home scene according to some embodiments of the present disclosure. Figure 2 As shown, the method 200 includes steps S202 to S204.

[0056] At step S202, the configuration information of the home appliance is encrypted based on the first public key configured in the home appliance. Here, the configuration information includes at least one of the control information of the controllable attributes of the home appliance and the current state information, the control information indicates the possible states that the controllable attributes can be controlled to enter, and the current state information indicates the state that the controllable attributes are currently controlled to enter. For example, for lamps in a home scene, the controllable attributes of the lamps include power supply, light intensity, color temperature, etc., wherein the possible states of the power supply are "on" and "off", the possible states of the light intensity are "low", "medium", and "high", and the possible states of the color temperature are "cold tones" and "warm tones". The controllable attributes of different home appliances may be different, depending on the nature of the home appliance and the settings of the home appliance manufacturer.

[0057] In step S204, the encrypted configuration information is sent to a gateway device, and the gateway device has a first private key corresponding to the first public key.

[0058] Therefore, by applying the first public key to encrypt data transmission in the home scene, the user's data security can be guaranteed, the safe use of home devices with increasingly advanced functions and computing power is promoted, and the risk of data leakage in the process of home devices reporting data (such as control preference information, etc.) is reduced.

[0059] In some embodiments, the first public key may be generated by the manufacturer of the home appliance and pre-configured in the home appliance. For example, during the factory settings of the home appliance, the manufacturer may configure the first public key generated according to the manufacturer's specific key algorithm in the home appliance. Accordingly, in this embodiment, the first private key may be generated by the manufacturer in association with the first public key and uploaded to the cloud server, and then forwarded by the cloud server to the gateway device via the mobile terminal. Thus, based on the manufacturer's preset key, for third-party devices that are not manufactured by the manufacturer, they do not have the first private key, and even if they obtain the relevant information uploaded by the home appliance, they cannot decrypt the relevant information encrypted by the first public key, thereby ensuring the user's data security.

[0060] In other embodiments, the first public key may be generated by the mobile terminal based on a predetermined rule and uploaded to the cloud server, and then sent by the cloud server to the home device via the gateway device. Here, the predetermined rule may be based on a key generation algorithm built into an application developed by the manufacturer and deployed on the mobile terminal, so that the first public key and the first private key are generated by the application on the mobile terminal. Accordingly, in this embodiment, the first private key may be generated by the mobile terminal in association with the first public key and sent to the gateway device. Thus, based on the key generated by the user's mobile terminal, different user families may generate different keys, thereby ensuring the privacy and security of each user's home scene.

[0061] In some embodiments, the method 200 may include: receiving a control instruction from a gateway device, the control instruction carrying a digital signature generated based on a first private key; verifying the digital signature based on a first public key; and executing the control instruction in response to passing the verification. Thus, the home appliance can ensure that the received control instruction is from a legitimate source and has not been tampered with by verifying the digital signature, thereby ensuring the safety of the home appliance.

[0062] In some embodiments, for home devices that have not yet joined the home scene, method 200 may include: encrypting a network access request for joining the home scene based on a second public key generated by the manufacturer of the home device and pre-configured in the home device, and sending the encrypted network access request to a gateway device, the gateway device having a second private key corresponding to the second public key.

[0063] Here, the second public key can be preset in the home appliance by the manufacturer when the home appliance is factory set, and the second private key is generated by the manufacturer in association with the second public key and uploaded to the cloud server, which is then forwarded to the gateway device by the cloud server via the mobile terminal. Thus, the data transmission in the network access verification process of the home appliance to be added to the home scene can be encrypted by the second public key and the second private key, which can prevent malicious third-party devices from stealing the network access verification data according to the standard communication protocol.

[0064] Additionally or optionally, in some embodiments, the second public key may be the same as the first public key, and the second private key may be the same as the first private key. For the first public key and the second public key generated by the manufacturer or the mobile device, when the second public key is the same as the first public key and the second private key is the same as the first private key, this means that the keys (including the public key and the private key) generated by the manufacturer or the mobile device can be used for network access authentication of the home appliance, and can also be used for data transmission encryption after the home appliance joins the home scene, thereby reducing the number of keys stored in the home appliance, the gateway device, and the mobile terminal, and the number of keys used for data interaction in the home scene, and reducing the memory requirements and computing power requirements of the home appliance, the gateway device, and the mobile terminal.

[0065] In some embodiments, the second public key may be different from the first public key, and the second private key may be different from the first private key. For example, the first public key and the first private key may be generated by a mobile terminal based on a predetermined rule, wherein the first public key is uploaded by the mobile terminal to a cloud server, and then sent by the cloud server to the home appliance via a gateway device, and the first private key is sent by the mobile terminal to the gateway device; the second public key and the second private key may be generated by the manufacturer of the home appliance, wherein the second public key is pre-configured in the home appliance by the manufacturer, and the second private key is generated by the manufacturer in association with the second public key and uploaded to the cloud server, and then forwarded by the cloud server to the gateway device via the mobile terminal. In this way, the data transmission in the network access verification process of the home appliance to be added to the home scene can be encrypted, and the privacy and security of each user's home scene can be guaranteed.

[0066] Continue to refer Figure 1 In some embodiments, the home scene may include a home device group 105. The home device group 105 may be created by a user for multiple home devices on the mobile terminal 102, and the information of the home device group 105 may be synchronized to the cloud server 101 via the mobile terminal 102.

[0067] For a home device belonging to a home device group, in some embodiments, the method 200 for operating the home device may include: receiving a first group public key for the home device group that is encrypted based on a third public key from a gateway device, wherein the first group public key is generated based on a first private key and corresponds to the first private key, and the gateway device has the third public key; decrypting the encrypted first group public key based on a third private key corresponding to the third public key that is generated by the manufacturer of the home device and pre-configured in the home device to obtain the first group public key; and encrypting configuration information of the home device based on the first group public key and sending the encrypted configuration information to the gateway device.

[0068] In this embodiment, the third public key and the third private key can be generated by the manufacturer of the home appliance in association, wherein the third public key can be uploaded by the manufacturer to the cloud server, and then forwarded by the cloud server to the gateway device via the mobile terminal, and the third private key can be pre-configured in the home appliance by the manufacturer. The third public key and the third private key can be used to encrypt the transmitted information when the cloud server, the mobile terminal, the gateway device and the home appliance communicate one-to-one, thereby preventing the leakage of information (such as the first group public key mentioned above).

[0069] In some embodiments, method 200 may include: receiving a control instruction from a gateway device, the control instruction carrying a digital signature generated based on a first private key; verifying the digital signature based on a first group public key; and executing the control instruction in response to successful verification.

[0070] Therefore, multiple home devices in the same home device group can encrypt reported information based on the group public key of the home device group, and the gateway device only needs the first private key to decrypt the reported information from multiple home devices in the home device group that is encrypted by the group public key, thereby realizing batch operation of home devices in the home scene, eliminating the need for users to configure multiple home devices in the home device group one by one, and improving the convenience of users in operating home devices.

[0071] In some embodiments, the first group public key is generated based on the first private key combined with at least one of the group identification information of the home device group and the current time. Here, the group identification information may include or be based on the identification information of the home devices in the home device group (for example, a device code that uniquely identifies the home device, etc.). For example, the first group public key may be generated by the mobile terminal based on the first private key combined with the group identification information and the current time. The mobile terminal may first upload the generated first group public key to the cloud server and then the cloud server may send it to the gateway device, or the generated first group public key may be directly sent to the gateway device. Then, the gateway device sends the first group public key encrypted by the third public key to each home device in the home device group.

[0072] In the case of deleting or adding one or more home devices from a home device group, in some embodiments, method 200 may include: receiving a second group public key for the home device group that is encrypted based on a third public key from a gateway device, wherein the second group public key is generated based on the first private key and corresponds to the first private key; decrypting the encrypted second group public key based on the third private key to obtain the second group public key; and encrypting configuration information of the home device based on the second group public key and sending the encrypted configuration information to the gateway device.

[0073] In some embodiments, the second group public key is generated based on the first private key combined with at least one of the updated group identification information of the household device group after deletion or addition and the current time. For example, whenever the mobile terminal changes the household device in the household device group, the mobile terminal can generate a new group public key based on the first private key combined with the updated group identification information and the current time to replace the previous group public key, so as to ensure the accuracy of batch control of household devices and enhance data security.

[0074] It can be understood that in the case of adding a home device to a home device group, when the home device to be added is not yet connected to the network, the home device can be connected to the network first according to the aforementioned embodiment of home device connection, and then the home device can be added to the home device group.

[0075] In addition, it can also be understood that a home scene may include multiple home device groups, each of which may correspond to a set of group keys to facilitate isolation of encrypted transmissions of different groups.

[0076] For a home device that replaces an original home device in a home device group, in some embodiments, the method 200 for operating the home device may include: receiving configuration information of the original home device encrypted based on a third public key from a gateway device; decrypting the encrypted configuration information of the original home device based on a third private key to obtain the configuration information of the original home device; and configuring based on the configuration information of the original home device.

[0077] Therefore, when it is necessary to replace the original home device in the home device group, by synchronizing the home device newly added to the home device group with the configuration information of the original home device, the need for the user to reconfigure the new home device can be eliminated, thereby improving the user experience.

[0078] When a home scene includes two mobile terminals, namely, the first mobile terminal of user A and the second mobile terminal of user B, for user A and user B in the same family, they can respectively control the corresponding home appliances in the home scene through their own mobile terminals. For example, user A can control the first home appliance in the living room based on the first mobile terminal, and user B can control the second home appliance in the bedroom based on the second mobile terminal. User A and user B are mutually trusted users, so in some cases, user A wants to control the second home appliance controlled by user B through the first mobile terminal, or user B wants to control the first home appliance controlled by user A through the second mobile terminal.

[0079] In some embodiments, the home scene includes a first mobile terminal, a first home device, a second mobile terminal, and a second home device. The gateway device, the first mobile terminal, and the cloud server are configured to manage the first home device. The gateway device, the second mobile terminal, and the cloud server are configured to manage the second home device. The gateway device has a first first private key associated with the first mobile terminal and a second first private key associated with the second mobile terminal. The first first public key corresponding to the first first private key is configured in the first home device. The second first public key corresponding to the second first private key is configured in the second home device.

[0080] For a home appliance that is a second home appliance managed by a second mobile terminal, in some embodiments, a method 200 for operating the home appliance may include: receiving a first control instruction from a gateway device, the first control instruction originating from the first mobile terminal and carrying a first digital signature generated for the first control instruction by the gateway device based on a second first private key; verifying the first digital signature based on the second first public key; and executing the first control instruction in response to successful verification.

[0081] Continue to refer Figure 1 In the case where the first home device is the physical scene panel 106, for the home device that is a second home device managed by the second mobile terminal, in some embodiments, the method 200 for operating the home device may include: receiving a first control instruction from the physical scene panel, the first control instruction originates from the first mobile terminal and carries a second digital signature generated for the first control instruction via the physical scene panel based on the second first private key; verifying the second digital signature based on the second first public key; and executing the first control instruction in response to the verification being passed.

[0082] Thus, the second home device can execute the control instruction issued by the first mobile terminal, or the first mobile terminal can control the second home device managed by the second mobile terminal, thereby improving the user experience.

[0083] In some embodiments, the method 200 may further include: sending configuration information encrypted by the second first public key. For example, in response to completing the execution of the first control instruction, the second home device may send the configuration information encrypted by the second first public key to the gateway device or the physical scene panel.

[0084] refer to Figure 3 , which shows a flow chart of a method 300 for operating a gateway device in a home scenario according to some embodiments of the present disclosure. Figure 3 As shown, the method 300 includes steps S302 to S306.

[0085] At step S302, configuration information encrypted based on a first public key configured in the home device is received from the home device. Here, the first public key corresponds to the first private key, and the configuration information includes at least one of control information and current state information of a controllable property of the home device, the control information indicates a possible state that the controllable property can be controlled to enter, and the current state information indicates a state that the controllable property is currently controlled to enter.

[0086] In step S304, the encrypted configuration information is decrypted based on the first private key to obtain the configuration information.

[0087] In step S306, the configuration information is sent to the mobile terminal.

[0088] In some examples, the mobile terminal is configured to send the configuration information to a cloud server after receiving the configuration information to synchronize the cloud information with the local information.

[0089] In some embodiments, the first private key is generated by the manufacturer of the home device and uploaded to the cloud server, which is then forwarded by the cloud server to the gateway device via the mobile terminal. In other embodiments, the first private key is generated by the mobile terminal based on a predetermined rule and sent to the gateway device.

[0090] In some embodiments, the method 300 may include: receiving a control instruction from a mobile terminal or a cloud server; digitally signing the control instruction based on a first private key; and sending the control instruction with the digital signature to the home device. For example, when the user is at home, the gateway device may directly receive the control instruction from the user's mobile terminal; and when the user is not at home, the gateway device may receive the control instruction from the mobile terminal forwarded by the cloud server.

[0091] In some embodiments, when a home appliance wants to join a home scene, method 300 may include: receiving a network access request from the home appliance that is encrypted based on a second public key generated by the manufacturer of the home appliance and pre-configured in the home appliance, and the gateway device has a second private key corresponding to the second public key; decrypting the encrypted network access request based on the second private key to obtain the network access request; verifying the network access request; and in response to successful verification, sending the network access request to the mobile terminal. In this embodiment, the mobile terminal may be configured to receive and verify the network access request; in response to successful verification, sending the network access request to the cloud server to complete the network access of the home appliance.

[0092] In some embodiments, the second public key is the same as the first public key, and the second private key is the same as the first private key. In some embodiments, the second public key is different from the first public key, and the second private key is different from the first private key.

[0093] In some embodiments, a home scene may include a home device group, the home device group may include multiple home devices, and the third private key is generated by the manufacturers of the multiple home devices and pre-configured in each of the multiple home devices. In this embodiment, method 300 may include: receiving a first group public key for a home device group from a mobile terminal, wherein the first group public key is generated based on the first private key and corresponds to the first private key; encrypting the first group public key based on a third public key corresponding to the third private key, the gateway device having the third public key; and sending the encrypted first group public key to each home device in the home device group.

[0094] In some embodiments, the first group public key is generated based on the first private key in combination with at least one of group identification information of the home device group and the current time.

[0095] In some embodiments, when one or more home devices are deleted from or added to a home device group, method 300 may include: receiving a second group public key for the home device group from a mobile terminal, wherein the second group public key is generated based on a first private key and corresponds to the first private key; encrypting the second group public key based on a third public key; and sending the encrypted second group public key to each home device in the home device group respectively.

[0096] In some embodiments, the second group public key is generated based on the first private key in combination with at least one of updated group identification information of the home device group after deletion or addition and the current time.

[0097] In some embodiments, method 300 may include: receiving configuration information encrypted based on a group public key from a first home device in a home device group; and decrypting the encrypted configuration information of the first home device based on a first private key to obtain the configuration information of the first home device.

[0098] In some embodiments, method 300 may include: in response to receiving a replacement instruction from a mobile terminal for replacing a first home device with a second home device in a home device group, encrypting configuration information of the first home device based on a third public key, and sending the configuration information of the first home device encrypted based on the third public key to the second home device.

[0099] In some embodiments, the home scene includes a first mobile terminal, a first home device, a second mobile terminal, and a second home device. The gateway device, the first mobile terminal, and the cloud server are configured to manage the first home device. The gateway device, the second mobile terminal, and the cloud server are configured to manage the second home device. The gateway device has a first first private key associated with the first mobile terminal and a second first private key associated with the second mobile terminal. The first first public key corresponding to the first first private key is configured in the first home device. The second first public key corresponding to the second first private key is configured in the second home device.

[0100] In some embodiments, method 300 may include: in response to a unidirectional or bidirectional authorization between a first mobile terminal and a second mobile terminal, storing a unidirectional or bidirectional mapping relationship between the first mobile terminal and the second mobile terminal corresponding to the unidirectional or bidirectional authorization; receiving a first control instruction from the first mobile terminal, the first control instruction being used to control a second home device; in response to determining that the first mobile terminal has the right to control the second home device based on the mapping relationship, performing a first digital signature on the first control instruction based on a second first private key; and sending the first control instruction carrying the first digital signature to the second home device.

[0101] For example, as mentioned above, user A and user B trust each other, so user A and user B can authorize each other's devices on the first mobile terminal and the second mobile terminal respectively, so that the other party can control the home devices controlled by themselves. After the first mobile terminal and the second mobile terminal are mutually authorized, the gateway device can store the bidirectional mapping relationship between the first mobile terminal and the second mobile terminal. User A can send a first control instruction for controlling the second home device of user B to the gateway device. After receiving the first control instruction, the gateway device can call the second first private key corresponding to user B to digitally sign the first control instruction according to the stored bidirectional mapping relationship, and then send the first control instruction carrying the digital signature to the second home device. The second home device can execute the first control instruction after verifying the digital signature with the second first public key. Similarly, for the control instruction from the second mobile terminal for controlling the first home device, the gateway device can call the first first private key to digitally sign the control instruction.

[0102] In some embodiments, method 300 may include: in response to a unidirectional or bidirectional authorization between a first mobile terminal and a second mobile terminal, storing a unidirectional or bidirectional mapping relationship between the first mobile terminal and the second mobile terminal corresponding to the unidirectional or bidirectional authorization; receiving configuration information encrypted based on a second first public key from a second home device; decrypting the encrypted configuration information of the second home device based on a second first private key to obtain the configuration information of the second home device; and sending the configuration information of the second home device to the first mobile terminal based on the mapping relationship.

[0103] For example, accordingly, the second home device can report the current configuration information after executing the first control instruction. After receiving the configuration information of the second home device encrypted by the second first public key, the gateway device uses the second first private key to decrypt it and send the configuration information to the first mobile terminal of user A.

[0104] In some embodiments, the first home device is a physical scene panel, and method 300 may include: in response to a unidirectional or bidirectional authorization between the first mobile terminal and the second mobile terminal, binding the second first private key to the physical scene panel.

[0105] In some embodiments, method 300 may include: receiving a first control instruction from a first mobile terminal, the first control instruction being used to control a second home appliance; performing a first digital signature on the first control instruction based on a first first private key; and sending the first control instruction carrying the first digital signature to a physical scene panel. In this embodiment, the physical scene panel is configured to: verify the first digital signature based on the first first public key, and in response to the verification being passed, perform a second digital signature on the first control instruction based on the second first private key and send the first control instruction carrying the second digital signature to the second home appliance. The second home appliance can execute the first control instruction after verifying the second digital signature with the second first public key. Thus, user A can control the second home appliance managed by user B through the relay of the physical scene panel.

[0106] In some embodiments, the second first private key is bound to the first button of the physical scene panel, and the method 300 includes: receiving a second control command encrypted based on the first first public key from the physical scene panel, the second control instruction is used to control the second home device and is generated in response to the first button being pressed; decrypting the second control instruction encrypted based on the first first public key based on the first first private key to obtain the second control instruction; performing a first digital signature on the second control instruction based on the first first private key; and sending the second control instruction carrying the first digital signature to the physical scene panel. In this embodiment, the physical scene panel is configured to: verify the first digital signature based on the first first public key, and in response to the verification passing, perform a second digital signature on the second control instruction based on the second first private key and send the second control instruction carrying the second digital signature to the second home device. Thus, user A can also operate the second home device managed by user B through the buttons of the physical scene panel.

[0107] In some embodiments, method 300 may include: receiving configuration information of a second home device encrypted based on a first public key from a physical scene panel, and sending the configuration information of the second home device to a first mobile terminal, wherein the configuration information of the second home device is obtained by decrypting the configuration information from the second home device encrypted based on a second first public key by the physical scene panel based on a second first private key.

[0108] In this embodiment, the method 300 may further include: after receiving the configuration information of the second home appliance encrypted based on the first first public key, decrypting the encrypted configuration information of the second home appliance based on the first first private key to obtain the configuration information of the second home appliance, and sending the decrypted configuration information of the second home appliance to the first mobile terminal. Alternatively, the encrypted configuration information of the second home appliance may be directly sent to the first mobile terminal, and the first mobile terminal may decrypt it by itself using the first first private key.

[0109] It can be understood that method 200 and method 300 correspond to each other, and therefore various embodiments described with respect to each other can be referred to each other, which will not be described in detail herein.

[0110] The present disclosure also provides a home device, which may include: a processor; and a memory storing computer-executable instructions, wherein when the computer-executable instructions are executed by the processor, the processor executes a method for operating a home device in a home scenario according to any of the aforementioned embodiments.

[0111] refer to Figure 4 , which shows a schematic block diagram of a home device 400 according to some embodiments of the present disclosure. Figure 4 As shown, the home device 400 includes a processor 402, and a memory 404 storing computer executable instructions, which, when executed by the processor 402, causes the processor 402 to perform the method 200 according to any of the aforementioned embodiments. The processor 402 may be, for example, a central processing unit (CPU) of the home device 400. The processor 402 may be any type of general-purpose processor, or may be a processor specifically designed to operate home devices in a home scenario, such as an application-specific integrated circuit ("ASIC"). The memory 404 may be coupled to the processor 402, and may include various computer-readable media accessible by the processor 402. In various embodiments, the memory 404 described herein may include volatile and non-volatile media, removable and non-removable media. For example, the memory 404 may include any combination of the following: random access memory ("RAM"), dynamic RAM ("DRAM"), static RAM ("SRAM"), read-only memory ("ROM"), flash memory, cache memory, and / or any other type of non-transitory computer-readable media. The memory 404 may store instructions that, when executed by the processor 402 , enable the processor 402 to perform the method 200 according to any of the aforementioned embodiments of the present disclosure.

[0112] The home device 400 is configured to execute the method 200 described in any of the aforementioned embodiments, and therefore reference may be made to the aforementioned descriptions of the various embodiments of the method 200 , which will not be repeated herein.

[0113] The present disclosure also provides a gateway device, which may include: a processor; and a memory storing computer-executable instructions, wherein when the computer-executable instructions are executed by the processor, the processor executes the method for operating the gateway device in a home scenario according to any of the aforementioned embodiments.

[0114] refer to Figure 5 , which shows a schematic block diagram of a gateway device 500 according to some embodiments of the present disclosure. Figure 5 As shown, the gateway device 500 includes a processor 502, and a memory 504 storing computer executable instructions, which, when executed by the processor 502, causes the processor 502 to perform the method 300 according to any of the foregoing embodiments. The processor 502 may be, for example, a central processing unit (CPU) of the gateway device 500. The processor 502 may be any type of general-purpose processor, or may be a processor specifically designed to operate a gateway device in a home scenario, such as an application-specific integrated circuit ("ASIC"). The memory 504 may be coupled to the processor 502, and may include various computer-readable media accessible by the processor 502. In various embodiments, the memory 504 described herein may include volatile and non-volatile media, removable and non-removable media. For example, the memory 504 may include any combination of the following: random access memory ("RAM"), dynamic RAM ("DRAM"), static RAM ("SRAM"), read-only memory ("ROM"), flash memory, cache memory, and / or any other type of non-transitory computer-readable media. The memory 504 may store instructions that, when executed by the processor 502 , enable the processor 502 to perform the method 300 according to any of the aforementioned embodiments of the present disclosure.

[0115] The gateway device 500 is configured to execute the method 300 described in any of the aforementioned embodiments, and therefore the description of the various embodiments of the method 300 may be referred to above and will not be repeated here.

[0116] The present disclosure also provides a non-volatile storage medium having computer executable instructions stored thereon, which, when executed by a processor, enables the processor to execute the method according to any of the aforementioned embodiments of the present disclosure.

[0117] The present disclosure also provides a computer program product, which includes instructions, which implement the method according to any of the aforementioned embodiments of the present disclosure when executed by a processor. The instructions can be any instruction set to be executed directly by the processor, such as machine code, or any instruction set to be executed indirectly, such as a script. The instructions can be stored in an object code format for direct processing by the processor, or stored in any other computer language, including scripts or collections of independent source code modules that are interpreted on demand or compiled in advance.

[0118] Figure 6A schematic block diagram of a computer system 600 on which an embodiment of the present disclosure may be implemented is shown. The computer system 600 includes a bus 602 or other communication mechanism for transmitting information, and a processing device 604 coupled to the bus 602 for processing information. The computer system 600 also includes a memory 606 coupled to the bus 602 for storing instructions to be executed by the processing device 604, which may be a random access memory (RAM) or other dynamic storage device. The memory 606 may also be used to store temporary variables or other intermediate information during the execution of instructions to be executed by the processing device 604. The computer system 600 also includes a read-only memory (ROM) 608 or other static storage device coupled to the bus 602 for storing static information and instructions for the processing device 604. A storage device 610 such as a magnetic disk or optical disk is provided and coupled to the bus 602 for storing information and instructions. The computer system 600 may be coupled to an output device 612 via the bus 602 for providing output to a user, such as, but not limited to, a display (such as a cathode ray tube (CRT) or a liquid crystal display (LCD)), a speaker, etc. An input device 614 such as a keyboard, a mouse, a microphone, etc. is coupled to the bus 602 for transmitting information and command selections to the processing device 604. The computer system 600 may perform embodiments of the present disclosure. In accordance with certain implementations of the present disclosure, the results are provided by the computer system 600 in response to the processing device 604 executing one or more sequences of one or more instructions contained in the memory 606. Such instructions may be read from another computer-readable medium such as the storage device 610 into the memory 606. The execution of the sequence of instructions contained in the memory 606 causes the processing device 604 to perform the methods described herein. Alternatively, hard-wired circuitry may be used instead of software instructions or in combination with software instructions to implement the present teachings. Therefore, implementations of the present disclosure are not limited to any specific combination of hardware circuitry and software. In various embodiments, computer system 600 can be connected to one or more other computer systems such as computer system 600 across a network via network interface 616 to form a networked system. The network can include a private network or a public network such as the Internet. In a networked system, one or more computer systems can store data and supply data to other computer systems. The term "computer-readable medium" as used herein refers to any medium that participates in providing instructions to processing device 604 for execution. Such media can take many forms, including but not limited to non-volatile media, volatile media, and transmission media. Non-volatile media include, for example, optical disks or disks such as storage device 610. Volatile media include dynamic memories such as memory 606. Transmission media include coaxial cables, copper wires, and optical fibers, including wiring that includes bus 602.Common forms of computer-readable media or computer program products include, for example, floppy disks, flexible disks, hard disks, tapes, or any other magnetic media, CD-ROMs, digital video disks (DVDs), Blu-ray disks, any other optical media, thumb drives, memory cards, RAMs, PROMs and EPROMs, flash EPROMs, any other memory chips or boxes, or any other tangible media from which a computer can read. Various forms of computer-readable media may be involved when carrying one or more sequences of one or more instructions to processing device 604 for execution. For example, instructions may initially be carried on a disk of a remote computer. The remote computer may load instructions into its dynamic memory and send the instructions over a telephone line using a modem. A modem local to computer system 600 may receive data over a telephone line and convert the data into an infrared signal using an infrared transmitter. An infrared detector coupled to bus 602 may receive the data carried in the infrared signal and place the data on bus 602. Bus 602 carries the data to memory 606, and processing device 604 retrieves instructions from memory 606 and executes the instructions. Optionally, the instructions received by memory 606 may be stored on storage device 610 either before or after execution by processing device 604 .

[0119] According to various embodiments, instructions configured to be executed by a processing device to perform a method are stored on a computer-readable medium. A computer-readable medium may be a device that stores digital information. For example, a computer-readable medium includes a compact disk read-only memory (CD-ROM) as known in the art for storing software. The computer-readable medium is accessed by a processor adapted to execute the instructions configured to be executed.

[0120] One or more exemplary embodiments of the present disclosure are described above. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recorded in the claims can be performed in an order different from that in the embodiments and still achieve the desired results. In addition, the processes depicted in the drawings do not necessarily require the specific order or continuous order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0121] The systems, devices, modules or units described in the above embodiments may be implemented by computer chips or entities, or by products with certain functions. A typical implementation device is a server system. Of course, the present disclosure does not exclude that with the development of computer technology in the future, the computer that implements the functions of the above embodiments may be, for example, a personal computer, a laptop computer, a vehicle-mounted human-computer interaction device, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or a combination of any of these devices.

[0122] Although one or more embodiments of the present disclosure provide method operation steps as described in the embodiments or flowcharts, more or fewer operation steps may be included based on conventional or non-creative means. The order of steps listed in the embodiments is only one way of executing the order of many steps and does not represent the only execution order. When the device or terminal product in practice is executed, it can be executed in sequence or in parallel according to the method shown in the embodiments or the drawings (for example, in a parallel processor or multi-threaded processing environment, or even a distributed data processing environment).

[0123] The terms "comprises", "includes" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, product or apparatus comprising a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, product or apparatus. In the absence of further restrictions, it is not excluded that there are other identical or equivalent elements in the process, method, product or apparatus comprising the elements. For example, if the words "first", "second" and the like are used to indicate names, they do not indicate any particular order.

[0124] For the convenience of description, the above devices are described in various modules according to their functions. Of course, when implementing one or more embodiments of the present disclosure, the functions of each module can be implemented in the same or more software and / or hardware, or the module implementing the same function can be implemented by a combination of multiple sub-modules or sub-units, etc. The device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0125] The present disclosure is described with reference to the flowchart and / or block diagram of the method, device (system), and computer program product according to the embodiment of the present disclosure. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the process and / or box in the flowchart and / or block diagram can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device produce a device for implementing the functions specified in one process or multiple processes in the flowchart and / or one box or multiple boxes in the block diagram.

[0126] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a particular manner, so that the instructions stored in the computer-readable memory produce an article of manufacture including an instruction device that implements the functions specified in one or more flows of a flowchart and / or one or more blocks of a block diagram. These computer program instructions may also be loaded onto a computer or other programmable data processing device so that a series of operating steps are performed on the computer or other programmable device to produce a computer-implemented process, so that the instructions executed on the computer or other programmable device provide steps for implementing the functions specified in one or more flows of a flowchart and / or one or more blocks of a block diagram.

[0127] Those skilled in the art should understand that one or more embodiments of the present disclosure may be in the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, one or more embodiments of the present disclosure may be in the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

[0128] One or more embodiments of the present disclosure may be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. One or more embodiments of the present disclosure may also be practiced in distributed computing environments where tasks are performed by remote processing devices connected through a communications network. In a distributed computing environment, program modules may be located in local and remote computer storage media, including storage devices.

[0129] The same or similar parts between the various embodiments of the present disclosure can refer to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts refer to the partial description of the method embodiment. In the description of the present disclosure, the description of the reference terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present disclosure. In the present disclosure, the schematic representation of the above terms does not necessarily target the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described can be combined in any one or more embodiments or examples in a suitable manner. In addition, those skilled in the art can combine and combine the different embodiments or examples described in the present disclosure and the features of the different embodiments or examples without contradiction.

[0130] In addition, when used in the present disclosure, the words "herein," "above," "below," "hereunder," "above," and words of similar meaning shall refer to the present disclosure as a whole rather than to any particular portion of the present disclosure. Furthermore, unless expressly stated otherwise or understood otherwise in the context of use, conditional language used herein, such as "may," "might," "for example," "such as," and the like, is generally intended to express that certain embodiments include, while other embodiments do not include, certain features, elements, and / or states. Thus, such conditional language is generally not intended to imply that one or more embodiments require features, elements, and / or states in any way, or whether such features, elements, and / or states are included or performed in any particular embodiment.

[0131] The above description is only an example of one or more embodiments of the present disclosure, and is not intended to limit one or more embodiments of the present disclosure. For those skilled in the art, one or more embodiments of the present disclosure may have various changes and variations. Any modification, equivalent substitution, improvement, etc. made within the spirit and principle of the present disclosure shall be included in the scope of the claims.

Claims

1. A method for operating a home appliance in a home scene, wherein the home scene includes the home appliance, and a gateway device, a mobile terminal, and a cloud server configured to manage the home appliance and communicate with each other, the method comprising: Encrypting configuration information of the home device based on a first public key configured in the home device, the configuration information including at least one of control information and current state information of a controllable attribute of the home device, the control information indicating a possible state into which the controllable attribute can be controlled, and the current state information indicating a state into which the controllable attribute is currently controlled; as well as The encrypted configuration information is sent to the gateway device, the gateway device having a first private key corresponding to the first public key.

2. The method according to claim 1, wherein: The first public key is generated by the manufacturer of the household device and pre-configured in the household device; or The first public key is generated by the mobile terminal based on a predetermined rule and uploaded to the cloud server, and then sent by the cloud server to the home device via the gateway device.

3. The method according to claim 1, comprising: receiving a control instruction from the gateway device, the control instruction carrying a digital signature generated based on the first private key; Verifying the digital signature based on the first public key; as well as In response to the verification being successful, the control instruction is executed.

4. The method according to claim 1, wherein: The method comprises: Before the home device joins the home scene, a network access request for joining the home scene is encrypted based on a second public key generated by the manufacturer of the home device and pre-configured in the home device, and the encrypted network access request is sent to the gateway device, and the gateway device has a second private key corresponding to the second public key.

5. The method according to claim 4, wherein: The second public key is the same as the first public key, and the second private key is the same as the first private key; or The second public key is different from the first public key, and the second private key is different from the first private key.

6. The method according to claim 1, wherein: The home scene includes a home device group, the home device belongs to the home device group, and the method includes: Receiving a first group public key for the home device group encrypted based on a third public key from the gateway device, wherein the first group public key is generated based on the first private key and corresponds to the first private key, and the gateway device has the third public key; Decrypting the encrypted first group public key based on a third private key corresponding to the third public key generated by the manufacturer of the home device and pre-configured in the home device to obtain the first group public key; and The configuration information of the home device is encrypted based on the first group public key and the encrypted configuration information is sent to the gateway device.

7. The method according to claim 6, wherein: The first group public key is generated based on the first private key in combination with at least one of group identification information of the home device group and current time.

8. The method according to claim 6, comprising: receiving a control instruction from the gateway device, the control instruction carrying a digital signature generated based on the first private key; verifying the digital signature based on the first group public key; as well as In response to the verification being successful, the control instruction is executed.

9. The method according to claim 6, comprising when one or more home devices are deleted from or added to the home device group: receiving a second group public key for the home device group encrypted based on the third public key from the gateway device, wherein: The second group public key is generated based on the first private key and corresponds to the first private key; decrypting the encrypted second group public key based on the third private key to obtain the second group public key; as well as The configuration information of the home device is encrypted based on the second group public key and the encrypted configuration information is sent to the gateway device.

10. The method according to claim 9, wherein: The second group public key is generated based on the first private key in combination with at least one of updated group identification information of the home device group after the deletion or the addition and a current time.

11. The method according to claim 6, comprising: when the home device replaces an existing home device in the home device group: Receiving configuration information of the original home device encrypted based on the third public key from the gateway device; Decrypting the encrypted configuration information of the original home appliance based on the third private key to obtain the configuration information of the original home appliance; and The configuration is performed based on the configuration information of the original home appliance.

12. A method for operating a gateway device in a home scene, the home scene comprising home devices, and the gateway device, mobile terminal and cloud server configured to manage the home devices and communicate with each other, the gateway device having a first private key, the method comprising: Receiving configuration information encrypted based on a first public key configured in the home device from the home device, the first public key corresponding to the first private key, the configuration information including at least one of control information and current state information of a controllable attribute of the home device, the control information indicating a possible state into which the controllable attribute can be controlled, and the current state information indicating a state into which the controllable attribute is currently controlled; Decrypting the encrypted configuration information based on the first private key to obtain the configuration information; as well as The configuration information is sent to the mobile terminal.

13. The method according to claim 12, wherein: The first private key is generated by the manufacturer of the household device and uploaded to the cloud server, and then forwarded by the cloud server to the gateway device via the mobile terminal; or The first private key is generated by the mobile terminal based on a predetermined rule and sent to the gateway device.

14. The method according to claim 12, comprising: Receiving a control instruction from the mobile terminal or the cloud server; Digitally signing the control instruction based on the first private key; as well as The control instruction carrying the digital signature is sent to the home device.

15. The method according to claim 12, wherein: The method comprises: Receiving a network access request from the home device that is encrypted based on a second public key generated by a manufacturer of the home device and pre-configured in the home device, the gateway device having a second private key corresponding to the second public key; decrypting the encrypted network access request based on the second private key to obtain the network access request; Verifying the network access request; and In response to the verification being successful, the network access request is sent to the mobile terminal.

16. The method according to claim 15, wherein: The second public key is the same as the first public key, and the second private key is the same as the first private key; or The second public key is different from the first public key, and the second private key is different from the first private key.

17. The method according to claim 12, wherein: The home scene includes a home device group, the home device group includes a plurality of home devices, a third private key is generated by a manufacturer of the plurality of home devices and pre-configured in each of the plurality of home devices, and the method includes: receiving a first group public key for the home device group from the mobile terminal, wherein the first group public key is generated based on the first private key and corresponds to the first private key; encrypting the first group public key based on a third public key corresponding to the third private key, the gateway device having the third public key; The encrypted first group public key is respectively distributed to each home appliance in the home appliance group.

18. The method according to claim 17, wherein: The first group public key is generated based on the first private key in combination with at least one of group identification information of the home device group and current time.

19. The method according to claim 17, comprising when one or more home devices are deleted from or added to the home device group: receiving a second group public key for the home device group from the mobile terminal, wherein: The second group public key is generated based on the first private key and corresponds to the first private key; encrypting the second group public key based on the third public key; as well as The encrypted second group public key is respectively distributed to each home appliance in the home appliance group.

20. The method according to claim 19, wherein: The second group public key is generated based on the first private key in combination with at least one of updated group identification information of the home device group after the deletion or the addition and a current time.

21. The method according to claim 17, comprising: Receiving configuration information encrypted based on the group public key from a first home device in the home device group; The encrypted configuration information of the first home device is decrypted based on the first private key to obtain the configuration information of the first home device.

22. The method according to claim 21, comprising: In response to receiving a replacement instruction from the mobile terminal for replacing the first household device with a second household device in the household device group, encrypting the configuration information of the first household device based on the third public key, and sending the configuration information of the first household device encrypted based on the third public key to the second household device.

23. The method according to claim 12, wherein: The mobile terminal is a first mobile terminal, the home device is a first home device, the first private key is a first first private key and is associated with the first mobile terminal, and the first public key is a first first public key, The home scene also includes a second mobile terminal and a second home device. The gateway device, the second mobile terminal, and the cloud server are configured to manage the second home device. The gateway device also has a second first private key associated with the second mobile terminal, and a second first public key corresponding to the second first private key is configured in the second home device.

24. The method according to claim 23, comprising: In response to a unidirectional or bidirectional authorization between the first mobile terminal and the second mobile terminal, storing a unidirectional or bidirectional mapping relationship between the first mobile terminal and the second mobile terminal corresponding to the unidirectional or bidirectional authorization; receiving a first control instruction from the first mobile terminal, where the first control instruction is used to control the second home device; In response to determining that the first mobile terminal has the right to control the second home device based on the mapping relationship, performing a first digital signature on the first control instruction based on the second first private key; as well as The first control instruction carrying the first digital signature is sent to the second home device.

25. The method according to claim 23, comprising: In response to a unidirectional or bidirectional authorization between the first mobile terminal and the second mobile terminal, storing a unidirectional or bidirectional mapping relationship between the first mobile terminal and the second mobile terminal corresponding to the unidirectional or bidirectional authorization; Receiving configuration information encrypted based on the second first public key from the second home device; decrypting the encrypted configuration information of the second home device based on the second first private key to obtain the configuration information of the second home device; as well as The configuration information of the second home device is sent to the first mobile terminal based on the mapping relationship.

26. The method of claim 23, wherein: The first household device is a physical scene panel, and the method includes: In response to the unidirectional or bidirectional authorization between the first mobile terminal and the second mobile terminal, the second first private key is bound to the entity scene panel.

27. The method according to claim 26, comprising: receiving a first control instruction from the first mobile terminal, where the first control instruction is used to control the second home device; Performing a first digital signature on the first control instruction based on the first first private key; as well as sending the first control instruction carrying the first digital signature to the physical scene panel, Wherein, the entity scene panel is configured as follows: verifying the first digital signature based on the first public key, and In response to the verification being successful, a second digital signature is performed on the first control instruction based on the second first private key, and the first control instruction carrying the second digital signature is sent to the second home device.

28. The method according to claim 26, wherein: The second first private key is bound to a first button of the entity scene panel, and the method includes: Receiving a second control command encrypted based on the first first public key from the physical scene panel, where the second control command is used to control the second home device and is generated in response to the first button being pressed; decrypting the second control instruction encrypted based on the first first public key based on the first first private key to obtain the second control instruction; Performing a first digital signature on the second control instruction based on the first first private key; and sending the second control instruction carrying the first digital signature to the physical scene panel, Wherein, the entity scene panel is configured as follows: verifying the first digital signature based on the first public key, and In response to the verification being successful, a second digital signature is performed on the second control instruction based on the second first private key, and the second control instruction carrying the second digital signature is sent to the second home device.

29. The method according to claim 26, comprising: receiving configuration information of the second home device encrypted based on the first first public key from the physical scene panel, and sending the configuration information of the second home device to the first mobile terminal, The configuration information of the second home appliance is obtained by decrypting the configuration information from the second home appliance encrypted based on the second first public key by the physical scene panel based on the second first private key.

30. The method according to claim 29, comprising: After receiving the configuration information of the second home device encrypted based on the first first public key, the encrypted configuration information of the second home device is decrypted based on the first first private key to obtain the configuration information of the second home device, and the decrypted configuration information of the second home device is sent to the first mobile terminal.

31. A household device comprising: processor; as well as A memory storing computer executable instructions, wherein when the computer executable instructions are executed by the processor, the processor executes the method for operating a home device in a home scene according to any one of claims 1 to 11.

32. A gateway device, comprising: processor; as well as A memory storing computer executable instructions, which, when executed by the processor, causes the processor to perform the method for operating a gateway device in a home scenario according to any one of claims 12 to 30.

33. A non-transitory storage medium having stored thereon computer executable instructions which, when executed by a processor, cause the processor to perform the method according to any one of claims 1 to 30.

34. A computer program product comprising instructions which, when executed by a processor, implement the method according to any one of claims 1 to 30.

Images