Cross-platform access authentication test method and device for smart home product

Abstract

The invention discloses a cross-platform access authentication test method and device for a smart home product, and the method comprises the steps: requesting a binding code and AP network access information of a target WLAN application terminal from a cloud platform according to a test task instruction generated by a test management platform, and carrying out the equipment legality verification of the target WLAN application terminal; if yes, a binding code and AP network access information are sent to the target WLAN application terminal; the target WLAN application terminal accesses the AP network according to the binding code and the AP network access information after the equipment identity authentication requested by the target WLAN application terminal to the cloud platform is passed; obtaining execution log data after the target WLAN application terminal accesses the AP network, and sending the execution log data to the test management platform; and the test management platform is used for verifying whether the target WLAN application terminal interface accords with a protocol consistency specification. According to the invention, the efficiency and accuracy of cross-platform access authentication testing of the smart home product are improved.

Description

Technical Field

[0001] The present invention relates to the field of network security technology, and in particular to a cross-platform access authentication test method and device for smart home products. Background Art

[0002] This section is intended to provide a background or context to the embodiments of the invention recited in the claims. No admission is made that the description herein is prior art by inclusion in this section.

[0003] With the rapid development of the smart home market, more and more smart home devices are produced by different manufacturers. However, due to the lack of unified standards and protocols, the smart home ecosystem is fragmented and smart home devices from different manufacturers cannot be interconnected. In order to solve this problem, various platform and equipment manufacturers in the industry have jointly developed cross-platform access authentication technology for smart home devices. This technology standardizes the discovery, network configuration, authentication, access, registration, and master control processes and interfaces of the smart home product application layer to achieve cross-platform interconnection between smart home devices of different manufacturers and brands. However, despite the cross-platform access authentication technology, there are currently no devices and systems specifically designed to test this technology.

[0004] The existing test systems and methods are mainly aimed at the communication and performance tests of smart home devices when they work independently, or the scenario and networking tests of the system composed of smart home devices of the same brand. These test systems and methods do not include application protocol tests for the interaction between smart home devices and other brands of devices or cloud platforms, nor do they have test cases and methods for cross-platform intercommunication protocols. In addition, the existing network distribution test control equipment and systems only support the Soft-AP network distribution test method, which is different from the process and interface used by the Soft-AP network distribution technology specified in the cross-platform access authentication protocol; therefore, the existing test cases and configuration files are not applicable to the Soft-AP network distribution test in the cross-platform access authentication protocol, and only support one network distribution method in the cross-platform access authentication protocol, and cannot test all network distribution methods. Summary of the invention

[0005] An embodiment of the present invention provides a cross-platform access authentication test method for a smart home product, which is used to improve the efficiency and accuracy of the cross-platform access authentication test for the smart home product. The method includes:

[0006] According to the test task instruction generated by the test management platform, request the binding code and AP network access information of the target WLAN application terminal from the cloud platform; the test task instruction is used to represent the test task generated by the test management platform for access authentication of the target WLAN application terminal; the target WLAN application terminal corresponds to the terminal of the smart home product;

[0007] According to the authentication signature information fed back by the target WLAN application terminal, the target WLAN application terminal is subjected to a device legitimacy check; the authentication signature information carries the authentication request message, session information, and the certificate and signature of the target WLAN application terminal issued by the network adapter;

[0008] If the device legitimacy check passes, the binding code and AP network access information are sent to the target WLAN application terminal through a pre-established secure connection channel; the secure connection channel is pre-established between the network adapter and the target WLAN application terminal; after the device identity authentication requested to the cloud platform passes, the target WLAN application terminal accesses the AP network according to the binding code and AP network access information;

[0009] The execution log data of the target WLAN application terminal after accessing the AP network is obtained, and the execution log data is sent to the test management platform; the test management platform is used to verify whether the target WLAN application terminal interface complies with the protocol consistency specification according to the execution log data, and generate a test report; the test report includes the test process data and the determination result of the protocol consistency of the target WLAN application terminal.

[0010] The embodiment of the present invention further provides a cross-platform access authentication test device for smart home products, which is used to improve the efficiency and accuracy of the cross-platform access authentication test of smart home products. The device includes:

[0011] A test task instruction sending module is used to request the binding code and AP network access information of the target WLAN application terminal from the cloud platform according to the test task instruction generated by the test management platform; the test task instruction is used to represent the test task generated by the test management platform for access authentication of the target WLAN application terminal; the target WLAN application terminal corresponds to the terminal of the smart home product;

[0012] The device legitimacy verification module is used to verify the legitimacy of the target WLAN application terminal according to the authentication signature information fed back by the target WLAN application terminal; the authentication signature information carries the authentication request message sent by the network adapter, session information, and the certificate and signature of the target WLAN application terminal;

[0013] The WLAN application terminal information sending module is used to send the binding code and AP network access information to the target WLAN application terminal through a pre-established secure connection channel if the device legitimacy check passes; the secure connection channel is pre-established between the network adapter and the target WLAN application terminal; after the device identity authentication requested to the cloud platform passes, the target WLAN application terminal accesses the AP network according to the binding code and AP network access information;

[0014] The test report generation module is used to obtain the execution log data of the target WLAN application terminal after accessing the AP network, and send the execution log data to the test management platform; the test management platform is used to verify whether the target WLAN application terminal interface complies with the protocol consistency specification based on the execution log data, and generate a test report; the test report includes the test process data and the determination result of the protocol consistency of the target WLAN application terminal.

[0015] An embodiment of the present invention also provides a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the cross-platform access authentication test method for the smart home product when executing the computer program.

[0016] An embodiment of the present invention further provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the cross-platform access authentication test method for the smart home product is implemented.

[0017] An embodiment of the present invention further provides a computer program product, which includes a computer program. When the computer program is executed by a processor, the cross-platform access authentication test method for the smart home product is implemented.

[0018] In the embodiment of the present invention, according to the test task instruction generated by the test management platform, the binding code and AP network access information of the target WLAN application terminal are requested from the cloud platform; the test task instruction is used to represent the test task generated by the test management platform for performing access authentication on the target WLAN application terminal; the target WLAN application terminal corresponds to the terminal of the smart home product; according to the authentication signature information fed back by the target WLAN application terminal, the device legitimacy verification is performed on the target WLAN application terminal; the authentication signature information carries the request authentication message sent by the network adapter, session information, the certificate and signature of the target WLAN application terminal; if the device legitimacy verification passes, the target WLAN application terminal is authenticated through the pre-established secure connection channel. The LAN application terminal sends the binding code and AP network access information; the secure connection channel is pre-established between the network adapter and the target WLAN application terminal; after the device identity authentication requested to the cloud platform is passed, the target WLAN application terminal accesses the AP network according to the binding code and AP network access information; the execution log data after the target WLAN application terminal accesses the AP network is obtained, and the execution log data is sent to the test management platform; the test management platform is used to verify whether the target WLAN application terminal interface complies with the protocol consistency specification according to the execution log data, and generate a test report; the test report includes the test process data and the judgment result on the protocol consistency of the target WLAN application terminal. The embodiment of the present invention requests the binding code and AP network access information of the target WLAN application terminal from the cloud platform according to the test task instruction generated by the test management platform, so that the cross-platform access authentication test can be based on the cross-platform access authentication protocol, rather than being limited to the test of a single device or brand; through interaction with the cloud platform, it is ensured that the test covers the interconnection and interoperability of devices of different brands and cloud platforms; by sending the binding code and AP network access information to the target WLAN application terminal after the device legitimacy verification is passed, it supports the application protocol test of the interaction between smart home devices and other brand devices or cloud platforms, and ensures that the test method can verify the protocol consistency in a cross-platform environment; by sending the binding code and AP network access information to the target WLAN application terminal after the device legitimacy verification is passed, it supports the application protocol test of the interaction between smart home devices and other brand devices or cloud platforms, and ensures that the test method can verify the protocol consistency in a cross-platform environment; The standard WLAN application terminal sends a request authentication message and receives the authentication signature information based on the authentication challenge value and the session information private key signature to verify the legitimacy of the device. This interaction and information verification between devices covers the key links when smart home products interact with other devices or cloud platforms; access to the AP network through the binding code supports various network configuration methods specified in the cross-platform access authentication protocol, ensuring that all network configuration methods during the test can be recorded and verified, improving the comprehensiveness and accuracy of the test; thereby efficiently testing the consistency of the development and design of the cross-platform access authentication protocol for smart home products, and improving the efficiency and accuracy of the cross-platform access authentication test of smart home products. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the prior art descriptions. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work. In the drawings:

[0020] Figure 1 A schematic diagram of a cross-platform access authentication test method for a smart home product in an embodiment of the present invention;

[0021] Figure 2 This is a connection diagram of a smart home product cross-platform access authentication protocol test system in an embodiment of the present invention;

[0022] Figure 3 This is a connection diagram of a smart home product cross-platform access authentication protocol test system in an embodiment of the present invention;

[0023] Figure 4 This is a connection diagram of a smart home product cross-platform access authentication protocol test system in an embodiment of the present invention;

[0024] Figure 5 This is a connection diagram of a smart home product cross-platform access authentication protocol test system in an embodiment of the present invention;

[0025] Figure 6 This is a connection diagram of a smart home product cross-platform access authentication protocol test system in an embodiment of the present invention;

[0026] Figure 7 This is a structural example diagram of a cross-platform access authentication test device for a smart home product according to an embodiment of the present invention;

[0027] Figure 8 Schematic diagram of a computer device used for cross-platform access authentication testing of smart home products in an embodiment of the present invention. DETAILED DESCRIPTION

[0028] To make the purpose, technical solution and advantages of the embodiments of the present invention more clear, the embodiments of the present invention are further described in detail below in conjunction with the accompanying drawings. Here, the exemplary embodiments of the present invention and their descriptions are used to explain the present invention, but are not intended to limit the present invention.

[0029] The term "and / or" herein only describes an association relationship, indicating that three relationships may exist. For example, A and / or B may represent three situations: A exists alone, A and B exist at the same time, and B exists alone. In addition, the term "at least one" herein represents any combination of at least two of any one or more of a plurality of. For example, including at least one of A, B, and C may represent including any one or more elements selected from the set consisting of A, B, and C.

[0030] In the description of this specification, the terms "include", "including", "have", "contain", etc. are all open terms, which mean including but not limited to. The descriptions with reference to the terms "one embodiment", "a specific embodiment", "some embodiments", "for example", etc. mean that the specific features, structures or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present application. In this specification, the schematic representations of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, structures or characteristics described may be combined in a suitable manner in any one or more embodiments or examples. The order of steps involved in each embodiment is used to schematically illustrate the implementation of the present application, and the order of steps is not limited and can be appropriately adjusted as needed.

[0031] The acquisition, storage, use, and processing of data in the technical solution of this application comply with the relevant provisions of national laws and regulations.

[0032] In order to solve the problem of fragmentation of the smart home ecosystem and the inability of smart home devices from different manufacturers to interconnect, various platform and equipment manufacturers in the industry have jointly developed a cross-platform access authentication technology for smart home devices. This technology standardizes the discovery, networking, authentication, access, registration, and master control processes and interfaces of the smart home product application layer to achieve cross-platform interconnection between smart home devices from different manufacturers and brands.

[0033] The existing testing systems and methods for smart home devices are all aimed at communication, performance, and other tests when smart home devices work independently, or scenario, networking, and other tests conducted on systems composed of smart home devices of the same brand. There are no devices and systems for testing application protocols for smart home products to interact with devices of different brands or cloud platforms, and the existing testing systems and devices do not have test cases and methods for testing cross-platform interoperability protocols.

[0034] Existing smart home device related testing systems and methods include the following:

[0035] Solution 1: A test method and device designed for the communication protocol used by smart home devices themselves. By analyzing data packets, it is determined whether the communication protocol used by smart home devices is a known protocol. A known protocol model is introduced and a new test method is designed for unknown protocols.

[0036] Solution 2: Network distribution test control equipment and system, the equipment includes: a main control chip, used to load a configuration file, wherein the configuration file includes: multiple test cases, each of the multiple test cases is used for network distribution test; at least one auxiliary chip, connected to the main control chip, used to control the terminal and the module equipment to perform network distribution test operations and obtain network distribution test results during the process of the main control chip running each test. The present invention solves the technical problem that the Soft-AP network distribution test method provided in the related art is easy to increase the test labor cost, time cost and test complexity, and is also prone to errors caused by human factors.

[0037] However, the current solution has the following problems:

[0038] Since the test system and method of Solution 1 only captures and analyzes the data packets of the smart home product itself, and does not include the data packets generated by the corresponding protocol when the smart home device interacts with other nodes, the above technical solution is not suitable for testing the protocol consistency test of the interaction between smart home devices and nodes. It is not suitable for protocol consistency testing of smart home devices that use cross-platform access authentication protocols.

[0039] The equipment and system tested in Solution 2 only test the Soft-AP network configuration test mode. This network configuration mode is different from the process and interface used by the Soft-AP network configuration technology specified in the cross-platform access authentication protocol. Therefore, the test cases and configuration files supported by this device and system are not applicable to the Soft-AP network configuration test in the cross-platform access authentication protocol, and are only one of the network configuration modes supported by the cross-platform access authentication protocol. All network configuration modes supported by the cross-platform access authentication protocol cannot be tested.

[0040] In order to solve the above problems, an embodiment of the present invention provides a cross-platform access authentication test method for a smart home product, so as to improve the efficiency and accuracy of the cross-platform access authentication test of the smart home product. Figure 1 FIG. 1 is a flow chart of a cross-platform access authentication test method for a smart home product according to an embodiment of the present invention. Figure 1 , the method may include:

[0041] Step 101: Requesting the binding code and AP network access information of the target WLAN application terminal from the cloud platform according to the test task instruction generated by the test management platform; the test task instruction is used to represent the test task generated by the test management platform for access authentication of the target WLAN application terminal; the target WLAN application terminal corresponds to the terminal of the smart home product;

[0042] Step 102: Performing a device legitimacy check on the target WLAN application terminal according to the authentication signature information fed back by the target WLAN application terminal; the authentication signature information carries the authentication request message sent by the network adapter, session information, and the certificate and signature of the target WLAN application terminal;

[0043] Step 103: If the device legitimacy check passes, the binding code and AP network access information are sent to the target WLAN application terminal through a pre-established secure connection channel; the secure connection channel is pre-established between the network adapter and the target WLAN application terminal; after the device identity authentication requested to the cloud platform passes, the target WLAN application terminal accesses the AP network according to the binding code and AP network access information;

[0044] Step 104: Obtain execution log data after the target WLAN application terminal accesses the AP network, and send the execution log data to the test management platform; the test management platform is used to verify whether the target WLAN application terminal interface complies with the protocol consistency specification based on the execution log data, and generate a test report; the test report includes test process data and a determination result on the protocol consistency of the target WLAN application terminal.

[0045] In the embodiment of the present invention, according to the test task instruction generated by the test management platform, the binding code and AP network access information of the target WLAN application terminal are requested from the cloud platform; the test task instruction is used to represent the test task generated by the test management platform for performing access authentication on the target WLAN application terminal; the target WLAN application terminal corresponds to the terminal of the smart home product; according to the authentication signature information fed back by the target WLAN application terminal, the device legitimacy verification is performed on the target WLAN application terminal; the authentication signature information carries the request authentication message sent by the network adapter, session information, the certificate and signature of the target WLAN application terminal; if the device legitimacy verification passes, the target WLAN application terminal is authenticated through the pre-established secure connection channel. The LAN application terminal sends the binding code and AP network access information; the secure connection channel is pre-established between the network adapter and the target WLAN application terminal; after the device identity authentication requested to the cloud platform is passed, the target WLAN application terminal accesses the AP network according to the binding code and AP network access information; the execution log data after the target WLAN application terminal accesses the AP network is obtained, and the execution log data is sent to the test management platform; the test management platform is used to verify whether the target WLAN application terminal interface complies with the protocol consistency specification according to the execution log data, and generate a test report; the test report includes the test process data and the judgment result on the protocol consistency of the target WLAN application terminal. The embodiment of the present invention requests the binding code and AP network access information of the target WLAN application terminal from the cloud platform according to the test task instruction generated by the test management platform, so that the cross-platform access authentication test can be based on the cross-platform access authentication protocol, rather than being limited to the test of a single device or brand; through interaction with the cloud platform, it is ensured that the test covers the interconnection and interoperability of devices of different brands and cloud platforms; by sending the binding code and AP network access information to the target WLAN application terminal after the device legitimacy verification is passed, it supports the application protocol test of the interaction between smart home devices and other brand devices or cloud platforms, and ensures that the test method can verify the protocol consistency in a cross-platform environment; by sending the binding code and AP network access information to the target WLAN application terminal after the device legitimacy verification is passed, it supports the application protocol test of the interaction between smart home devices and other brand devices or cloud platforms, and ensures that the test method can verify the protocol consistency in a cross-platform environment; The standard WLAN application terminal sends a request authentication message and receives the authentication signature information based on the authentication challenge value and the session information private key signature to verify the legitimacy of the device. This interaction and information verification between devices covers the key links when smart home products interact with other devices or cloud platforms; access to the AP network through the binding code supports various network configuration methods specified in the cross-platform access authentication protocol, ensuring that all network configuration methods during the test can be recorded and verified, improving the comprehensiveness and accuracy of the test; thereby efficiently testing the consistency of the development and design of the cross-platform access authentication protocol for smart home products, and improving the efficiency and accuracy of the cross-platform access authentication test of smart home products.

[0046] During the specific implementation, step 101 is first performed: according to the test task instruction generated by the test management platform, the binding code and AP network access information of the target WLAN application terminal are requested from the cloud platform; the test task instruction is used to represent the test task generated by the test management platform for access authentication of the target WLAN application terminal; the target WLAN application terminal corresponds to the terminal of the smart home product.

[0047] In the embodiment, in the cross-platform access authentication test method for smart home products, requesting the binding code and AP network access information of the target WLAN application terminal from the cloud platform according to the test task instruction generated by the test management platform is a key starting step. The test management platform serves as the control center of the entire test process, and the test task instruction generated by it carries the clear task requirements for access authentication testing of the target WLAN application terminal. This instruction is generated based on pre-set test strategies and process specifications, and is intended to comprehensively evaluate the various performance and protocol compliance of the target WLAN application terminal in the cross-platform access authentication scenario.

[0048] The target WLAN application terminal corresponds to the terminal of smart home products, which plays an important role in the smart home ecosystem. Smart home product terminals cover a variety of types such as smart lighting equipment, smart temperature control equipment, and smart security equipment. These terminals use WLAN technology to connect and interact with other devices or cloud platforms. During the cross-platform access certification test, obtaining the binding code and AP network access information of the target WLAN application terminal is a prerequisite for ensuring that it can be correctly accessed and work with the entire smart home system.

[0049] When requesting the above information from the cloud platform, a communication link is established between the network adapter device (as one of the key components in the test system) and the cloud platform. The network adapter device accurately sends a request to the cloud platform based on the relevant parameters and identification information in the test task instructions. The cloud platform processes the request of the network adapter device according to its own authentication mechanism and management strategy. The cloud platform first verifies the legitimacy of the request of the network adapter device, including checking its source, authority, etc. If the request is legitimate, the cloud platform will generate or search for the corresponding binding code and obtain the appropriate AP network access information based on the registration information and related configuration of the target WLAN application terminal in the platform. As part of the identity and authentication credentials of the target WLAN application terminal in the cloud platform, the binding code has uniqueness and security requirements to ensure that only legally authorized terminals can access the cloud platform and obtain corresponding services. AP network access information includes key parameters such as network name (SSID), password, network frequency band, encryption method, etc. These parameters determine how the target WLAN application terminal connects to the specified AP network, thereby realizing data transmission and interaction functions.

[0050] The entire request process involves the interaction of multiple communication protocols and data formats. The communication between the network distribution device and the cloud platform follows industry-standard secure communication protocols, such as HTTPS, to ensure the confidentiality, integrity, and authenticity of information transmission. In terms of data format, structured data formats (such as JSON or XML) are used to accurately transmit request and response information to ensure that both parties can correctly parse and process data. Through such a rigorous process of requesting and obtaining information, a solid foundation is laid for the subsequent access certification test of the target WLAN application terminal, so that the entire test process can be carried out in an orderly manner according to the predetermined test plan with the support of accurate information, so as to comprehensively and accurately evaluate the performance and compliance of cross-platform access certification of smart home products.

[0051] In one embodiment, the test management platform has multiple important functions in the smart home product cross-platform access authentication protocol test system, as follows:

[0052] 1. Test equipment maintenance function: responsible for the management and maintenance of various test equipment in the entire test system. This includes status monitoring of hardware equipment such as network distribution equipment and AP equipment to ensure the normal operation of the equipment. For example, real-time detection of the connection status of the equipment, the power or power consumption of the equipment, etc., so as to promptly detect equipment failures or abnormal conditions and take corresponding measures, such as reminding technicians to repair or replace the equipment to ensure the stability and reliability of the test environment.

[0053] 2. Test project creation function: A variety of test projects can be created according to different test requirements. For example, for different types of smart home products (such as smart lamps, smart door locks, smart cameras, etc.) or different test scenarios (such as tests in different network environments, tests with different security level requirements, etc.), the parameters and processes of the test projects can be flexibly set. When creating a test project, key information such as the test objectives, scope, and expected results can be specified to provide clear guidance and basis for subsequent test execution.

[0054] 3. Test process management function: During the test execution, the entire test process is fully managed. It can control the start, pause, resume and termination of the test to ensure that the test is carried out in the predetermined order and rhythm. At the same time, it can monitor the progress of the test in real time, such as the test steps currently being executed, the proportion of completed tests, the estimated remaining test time, etc., so that testers can understand the test dynamics in a timely manner. In addition, abnormal situations during the test process can also be handled. For example, when test data is abnormal or device communication is interrupted, the abnormal information can be recorded in time, and corresponding solutions can be taken according to the preset rules, such as trying to re-execute the current test steps or adjusting the test parameters to continue the test.

[0055] 4. Test report viewing function: After the test is completed, a detailed test report can be generated and a convenient viewing interface can be provided. The test report covers a wealth of information, including basic information of the test items (such as test time, test equipment information, tested smart home product information, etc.), various data during the test process (such as the execution results of each test step, interaction data between devices, network traffic data, etc.), verification results of whether the target WLAN application terminal interface complies with the protocol consistency specification, and the judgment conclusion on the consistency of the cross-platform access authentication protocol development and design of smart home products. Testers can use this function to intuitively view the test results, so as to evaluate the performance and compatibility of smart home products and provide strong data support for product improvement and optimization.

[0056] During the specific implementation, after performing step 101: requesting the binding code and AP network access information of the target WLAN application terminal from the cloud platform according to the test task instruction generated by the test management platform, perform step 102: perform device legitimacy verification on the target WLAN application terminal according to the authentication signature information fed back by the target WLAN application terminal; the authentication signature information carries the request authentication message issued by the network adapter, session information, and the certificate and signature of the target WLAN application terminal.

[0057] In the embodiment, in the cross-platform access authentication test process of smart home products, it is a crucial step to verify the legitimacy of the device based on the authentication signature information fed back by the target WLAN application terminal. When the network adapter receives the authentication signature information returned by the target WLAN application terminal, the device legitimacy verification program is immediately started.

[0058] First, the authentication signature information is parsed. The authentication signature information includes the authentication request message previously sent by the network provisioner, the session information of the current network security negotiation, the certificate of the target WLAN application terminal, and the signature generated based on a specific algorithm. The network provisioner uses the parsing rules and format agreed with the target WLAN application terminal to accurately extract these key elements from the authentication signature information.

[0059] For the authentication request message, the network adapter will check the integrity and accuracy of its content. Check whether the authentication request message is consistent with the previously sent one to ensure that it has not been tampered with during transmission. At the same time, verify whether the various parameters in the authentication request message (such as the authentication challenge value, etc.) conform to the expected format and value range to confirm the validity of the authentication request message.

[0060] For session information, the network adapter will analyze its continuity and consistency. Verify whether the current session information matches the session information negotiated when the secure connection channel was previously established, ensuring that the entire interaction process is in the same secure session context. By verifying the session information, security threats such as session hijacking can be prevented, ensuring the security and reliability of the test process.

[0061] The certificate of the target WLAN application terminal is an important proof of its identity legitimacy. The network provisioner conducts a comprehensive check on the certificate based on the industry standard certificate verification mechanism. This includes verifying whether the certificate issuing authority is legal and credible, whether the certificate is within the validity period, and whether the certificate signature is valid. The network provisioner will query the pre-configured trust anchor list to confirm the legitimacy of the certificate issuing authority. At the same time, the certificate signature is verified using the public key information in the certificate to ensure that the certificate content has not been tampered with.

[0062] Finally, for the signature part of the authentication signature information, the network adapter uses the verification algorithm corresponding to the signature of the target WLAN application terminal to verify. Usually, the network adapter uses the public key in the target WLAN application terminal certificate to decrypt the signature and compare the decrypted result with the authentication request message and session information. If the two are consistent, it means that the signature is valid, that is, the target WLAN application terminal has the private key corresponding to the certificate, thereby preliminarily confirming the legitimacy of the identity of the target WLAN application terminal.

[0063] During the entire device legitimacy verification process, the network adapter strictly follows the established security protocols and specifications, and uses a variety of verification technologies and algorithms to perform meticulous verification of each component in the authentication signature information. Only when all verification links are successfully passed, the network adapter determines that the device legitimacy verification of the target WLAN application terminal is successful, thereby providing a prerequisite guarantee for subsequent operations such as sending binding codes and AP network access information to the target WLAN application terminal. If any abnormality or non-compliance is found during the verification process, the network adapter will handle it accordingly according to the preset error handling mechanism, such as recording error information, terminating the current test process, or taking other safety measures to ensure the accuracy and security of the cross-platform access authentication test process of smart home products.

[0064] In one embodiment, it further includes:

[0065] Before performing device legitimacy verification on the target WLAN application terminal according to the authentication signature information fed back by the target WLAN application terminal, a request authentication message is sent to the target WLAN application terminal through the secure connection channel; the request authentication message carries authentication challenge value information; the target WLAN application terminal is used to sign the authentication challenge value information and the session information of the current network configuration security negotiation with a private key to obtain the authentication signature information.

[0066] In an embodiment, in a specific embodiment of the cross-platform access authentication test method for smart home products, first, a request authentication message is sent to the target WLAN application terminal through a pre-established secure connection channel. This secure connection channel is built based on a specific secure communication protocol, such as the TLS (Transport Layer Security) protocol, which is intended to ensure the confidentiality, integrity and authenticity of data transmission between the network distributor and the target WLAN application terminal.

[0067] The authentication request message carries the authentication challenge value information. The authentication challenge value information is random and unique, and is generated based on a secure random number algorithm to ensure that the authentication challenge value used in each test is different. This feature greatly enhances the security of the authentication process and effectively prevents security threats such as replay attacks. The authentication challenge value information is transmitted in an encrypted manner through a secure connection channel to prevent the information from being abnormally obtained during transmission.

[0068] After receiving the authentication request message, the target WLAN application terminal uses its own private key to sign the authentication challenge value information and the session information of the current network configuration security negotiation contained therein. The private key is an important part of the identity and security credentials of the target WLAN application terminal and is stored in the secure storage area of ​​the terminal to ensure its confidentiality and integrity. During the signing process, the target WLAN application terminal uses a digital signature algorithm that complies with industry standards, such as the RSA (Rivest–Shamir–Adleman) algorithm or the ECC (Elliptic Curve Cryptography) algorithm, to encrypt the authentication challenge value information and session information to generate the authentication signature information.

[0069] This authentication signature information not only contains the signature result of the target WLAN application terminal on the authentication challenge value information and session information, but may also contain the certificate information of the target WLAN application terminal. The certificate information is used to prove the legitimacy of its identity to the network adapter. It follows the standard certificate format such as X.509 and contains key information such as the terminal's public key, issuing authority, and validity period. After receiving the authentication signature information returned by the target WLAN application terminal, the network adapter will parse and verify the authentication signature information based on the pre-set verification rules and algorithms. The verification process includes multiple links such as checking the validity of the signature, verifying the legitimacy of the certificate, and comparing the authentication challenge value information. Only when all verification links are passed, the device legitimacy verification of the target WLAN application terminal is determined to be successful, and then the subsequent process is allowed to continue, such as sending the binding code and AP network access information to the target WLAN application terminal. This series of rigorous operation procedures ensures the authenticity and security of the device identity during the cross-platform access authentication test of smart home products, effectively prevents the access of illegal devices, and provides a solid guarantee for the stable operation of the smart home system.

[0070] During specific implementation, after performing step 102: performing a device legitimacy check on the target WLAN application terminal according to the authentication signature information fed back by the target WLAN application terminal, perform step 103: if the device legitimacy check passes, sending the binding code and AP network access information to the target WLAN application terminal through a pre-established secure connection channel; the secure connection channel is pre-established between the network adapter and the target WLAN application terminal; the target WLAN application terminal accesses the AP network according to the binding code and AP network access information after the device identity authentication requested to the cloud platform passes.

[0071] In the embodiment, in the cross-platform access authentication test process of smart home products, if the device legitimacy verification is successful, subsequent operations will be carried out in an orderly manner. At this time, the network adapter will send the binding code and AP network access information to the target WLAN application terminal through the pre-established secure connection channel.

[0072] This secure connection channel is built based on a series of secure communication protocols and encryption technologies. Its establishment process involves multiple security negotiations between the network adapter and the target WLAN application terminal. In the early stage of establishment, the two parties exchange key negotiation parameters and use mechanisms such as the Diffie-Hellman key exchange protocol to securely generate a shared key in an insecure network environment. Subsequently, the shared key is used to encrypt the communication data to ensure the confidentiality of data transmission. At the same time, a message authentication code (MAC) algorithm, such as HMAC (Hash-based Message Authentication Code), is used to perform integrity verification on the transmitted data to prevent data from being tampered with during transmission. After the secure connection channel is established, it has two-way communication capabilities, and the communication data is strictly protected during transmission.

[0073] After obtaining the binding code and AP network access information returned by the cloud platform, the network adapter will perform necessary format conversion and encapsulation processing on these information to make them conform to the format that the target WLAN application terminal can recognize and receive. The binding code is the identity of the target WLAN application terminal in the cloud platform and has uniqueness and confidentiality requirements. The network adapter combines the binding code with the AP network access information (including key parameters such as network name (SSID), password, network frequency band, encryption method, etc.) according to a predetermined data structure, and then sends it to the target WLAN application terminal through a secure connection channel.

[0074] After receiving the binding code and AP network access information, the target WLAN application terminal will not immediately access the AP network, but will first initiate a device identity authentication request to the cloud platform. When requesting device identity authentication from the cloud platform, the target WLAN application terminal will send its own device identification information (such as device serial number, device type, etc.) and the received binding code to the cloud platform. The cloud platform verifies the identity of the target WLAN application terminal based on its own authentication database and security policy. The cloud platform will check whether the binding code matches the registration information of the target WLAN application terminal, and verify the legitimacy of the device identification information. If the cloud platform confirms that the identity of the target WLAN application terminal is legitimate, it will return a response message of authentication success to the target WLAN application terminal.

[0075] After receiving the authentication response from the cloud platform, the target WLAN application terminal performs network connection operations based on the received AP network access information. It will set the network name (SSID) and password and other parameters in the AP network access information in the device's network configuration interface, and then initiate a connection request. During the connection process, the target WLAN application terminal selects appropriate wireless communication module parameters for configuration based on parameters such as the network frequency band and encryption method in the AP network access information to ensure that a stable and secure wireless connection can be established with the AP device. For example, if the AP network uses WPA2-PSK encryption, the target WLAN application terminal will configure its wireless communication module accordingly to use the same encryption algorithm for connection negotiation. Once the connection is successful, the target WLAN application terminal can exchange data with other devices or cloud platforms in the network where the AP device is located, and realize the normal operation of smart home products after cross-platform access authentication. This series of rigorous operation steps ensures the security, accuracy and reliability of smart home products during the cross-platform access authentication process, and effectively guarantees the stable operation of the smart home system.

[0076] In one embodiment, the cloud platform performs device identity authentication as follows:

[0077] After determining that the target WLAN application terminal needs to be authenticated, sending device authentication challenge value information to the device authentication;

[0078] Receiving device identity authentication information fed back by the target WLAN application terminal; the device identity authentication information is generated by the target WLAN application terminal according to the device identity authentication challenge value information and session information, and the certificate and signature of the target WLAN application terminal;

[0079] After verifying the device certificate and signature in the device authentication information, it is confirmed that the device authentication performed by the cloud platform is successful.

[0080] In a specific embodiment of the cross-platform access authentication test of smart home products, the cloud platform performs device identity authentication following a specific process and mechanism.

[0081] When it is determined that the target WLAN application terminal needs to be authenticated, the cloud platform first generates device authentication challenge value information. This challenge value information is generated based on a secure random number generation algorithm to ensure its randomness and unpredictability to enhance the security of the authentication process. The cloud platform then sends the device authentication challenge value information to the target WLAN application terminal through a secure communication channel. The communication channel uses industry-standard encryption protocols, such as HTTPS (Hypertext Transfer Protocol Secure), to ensure the confidentiality and integrity of information during transmission.

[0082] After receiving the device authentication challenge value information sent by the cloud platform, the target WLAN application terminal performs a series of operations to generate device authentication information in combination with the session information of the current network security negotiation, its own certificate, and private key. Specifically, the target WLAN application terminal uses the private key to digitally sign the device authentication challenge value information and session information. The digital signature algorithm uses industry standard algorithms such as RSA (Rivest–Shamir–Adleman) algorithm or ECC (Elliptic Curve Cryptography) algorithm to ensure the uniqueness and unforgeability of the signature. At the same time, the certificate information (which follows the standard certificate format such as X.509, including key elements such as public key, issuing authority, validity period, etc.) is combined with the signed information to form complete device authentication information. Subsequently, the target WLAN application terminal feeds back the device authentication information to the cloud platform through a secure communication channel.

[0083] After receiving the device authentication information fed back by the target WLAN application terminal, the cloud platform starts the verification process. First, the cloud platform parses the device authentication information and extracts the certificate and signature parts from it. For the certificate part, the cloud platform conducts a comprehensive check on the legitimacy of the certificate issuing authority, the certificate validity period, the integrity of the certificate chain, etc. according to the pre-configured trust anchor list and certificate verification rules. If the certificate verification fails, the cloud platform will immediately terminate the authentication process and record the corresponding error information. If the certificate verification is successful, the cloud platform uses the public key in the certificate to decrypt the signature and compares the decrypted result with the device authentication challenge value information and session information. If the comparison results are consistent, it means that the signature is valid, that is, it is confirmed that the target WLAN application terminal has the private key corresponding to the certificate, thereby determining that the device authentication performed by the cloud platform is successful. On the contrary, if the comparison results are inconsistent, the cloud platform will determine that the device authentication has failed, and take corresponding measures according to the preset security policy, such as rejecting the access request of the target WLAN application terminal or triggering a security alarm mechanism to ensure the security and reliability of the smart home system. This rigorous cloud platform device identity authentication process effectively prevents the access of illegal devices and provides a solid security guarantee for cross-platform access authentication of smart home products.

[0084] In one embodiment, the target WLAN application terminal accesses the AP network according to the binding code and the AP network access information in the following manner:

[0085] Send the binding code, device identification information and authenticated identity credentials to the cloud platform; the cloud platform verifies the binding code, device identification information and authenticated identity credentials, and after the verification passes, issues login information; the login information carries the registration result, login key and updated device identification;

[0086] Access the AP network based on the received login information.

[0087] In the embodiment, after the target WLAN application terminal obtains the binding code and AP network access information, it first sends the binding code, device identification information and authenticated identity credentials to the cloud platform. The device identification information is the unique identification mark of the target WLAN application terminal in the smart home system, which contains key information such as the device model, serial number, manufacturer, etc., and is used to accurately identify and distinguish different devices in the cloud platform. The authenticated identity credentials are key data obtained by the target WLAN application terminal in the previous authentication process to prove the legitimacy of its identity. Its generation and transmission follow strict security protocols and encryption algorithms to ensure its confidentiality and integrity.

[0088] After receiving the binding code, device identification information and authenticated identity credentials sent by the target WLAN application terminal, the cloud platform immediately starts the verification procedure. The cloud platform matches and verifies the binding code based on the device registration information database stored in itself to ensure that it is consistent with the registration record of the target WLAN application terminal. At the same time, the device identification information is checked for legitimacy to confirm whether it complies with the format and value range specified by the system, and whether there is a record in the cloud platform's device management list. For the authenticated identity credentials, the cloud platform uses a pre-set verification algorithm and key to decrypt and verify them to ensure their authenticity and validity. If any of the above verification links is abnormal or mismatched, the cloud platform will determine that the verification has failed, and return an error message to the target WLAN application terminal, terminating the access process.

[0089] If the verification passes, the cloud platform will generate login information and send it to the target WLAN application terminal. The login information contains the registration result, which is used to inform the target WLAN application terminal whether its registration request is successful. The value of the registration result can be "success" or "failure", and it is accompanied by corresponding detailed description information so that the target WLAN application terminal can understand the specific situation of the registration process. The login key is the key key used by the target WLAN application terminal in subsequent secure communication with the cloud platform and other devices. It is generated through a secure key generation algorithm and has high confidentiality and randomness to ensure the security of the communication process. The updated device identification is the result of the cloud platform updating the device identification information of the target WLAN application terminal according to system management requirements or security policies. It may include a new version number, updated device attribute information, etc., which is used to more accurately identify and manage the target WLAN application terminal in the smart home system.

[0090] After receiving the login information sent by the cloud platform, the target WLAN application terminal performs corresponding processing according to the registration result carried therein. If the registration result is "successful", the target WLAN application terminal will extract the login key and the updated device identifier for storage, and configure its own wireless communication module according to the network name (SSID), password, network frequency band, encryption method and other parameters in the AP network access information. The target WLAN application terminal first enters the SSID and password of the AP network in the network setting interface of the device, and then selects the appropriate communication frequency band according to the network frequency band for connection, and configures the corresponding encryption algorithm according to the encryption method for secure communication negotiation. For example, if the AP network adopts the WPA2-PSK encryption method, the target WLAN application terminal will enable the WPA2-PSK encryption algorithm to attempt to connect. After the configuration is completed, the target WLAN application terminal initiates a request to connect to the AP network. If the connection is successful, the target WLAN application terminal will establish a stable wireless connection with the AP network, so that it can interact with other devices or cloud platforms in the smart home system to realize the normal function operation of smart home products. If the registration result is "failed", the target WLAN application terminal will perform corresponding processing according to the error information returned by the cloud platform, such as prompting the user to check the device configuration or re-register. This complete access process ensures the security, accuracy and reliability of the target WLAN application terminal during the cross-platform access authentication process, providing a strong guarantee for the stable operation of the smart home system.

[0091] In one embodiment, the secure connection channel is pre-established as follows:

[0092] A secure connection channel is established between the network adapter and the target WLAN application terminal by adopting IP layer security negotiation.

[0093] During specific implementation, after performing step 103: if the device legitimacy check passes, the binding code and AP network access information are sent to the target WLAN application terminal through a pre-established secure connection channel, step 104 is performed: the execution log data after the target WLAN application terminal accesses the AP network is obtained, and the execution log data is sent to the test management platform; the test management platform is used to verify whether the target WLAN application terminal interface complies with the protocol consistency specification based on the execution log data, and generate a test report; the test report includes the test process data and the determination result of the protocol consistency of the target WLAN application terminal.

[0094] In the embodiment, after the target WLAN application terminal accesses the AP network, the network distributor device continuously monitors and obtains its execution log data. The execution log data covers a series of operation information and system status information of the target WLAN application terminal after accessing the AP network. The operation information includes but is not limited to the data interaction records between the terminal and other devices or cloud platforms, such as the content of the data packets sent and received, the format of the data packets, the timestamp of the data transmission, the source address and destination address of the data transmission, etc. The system status information includes the resource usage of the terminal, such as CPU usage, memory occupancy, network bandwidth occupancy, etc., as well as various event records generated by the terminal during operation, such as system start and stop events, device connection and disconnection events, application startup and shutdown events, etc. The network distributor obtains these execution log data in real time at a predetermined time interval or event trigger mechanism through a specific data acquisition channel established between the network distributor and the target WLAN application terminal. The data acquisition channel adopts a safe and reliable communication protocol to ensure the integrity and confidentiality of the execution log data during the transmission process and prevent the data from being abnormally acquired.

[0095] After obtaining the execution log data, the network distributor sends it to the test management platform. As the data analysis and management center of the entire test system, the test management platform has powerful data processing capabilities. After receiving the execution log data, the test management platform first performs preprocessing operations on the data, including data cleaning, format conversion, data classification, etc. The data cleaning process aims to remove noise data, erroneous data, and duplicate data in the execution log data to improve the accuracy and availability of the data. The format conversion operation uniformly converts execution log data of different formats into a standard format that can be processed by the test management platform, which is convenient for subsequent data analysis and comparison. Data classification divides the execution log data into different categories according to the type and source of the data, such as network communication data, device status data, application data, etc., so as to perform targeted analysis on different types of data.

[0096] Subsequently, the test management platform verifies whether the target WLAN application terminal interface complies with the protocol consistency specification based on the execution log data. The test management platform has a built-in standard specification model for the cross-platform access authentication protocol of smart home products, and compares the interface call information, data interaction format, etc. in the execution log data with the standard specification model. For example, check whether the interface function used by the terminal during data transmission complies with the interface definition specified in the protocol, whether the format of data transmission is consistent with the format required by the protocol, and whether the order and logic of data transmission comply with the protocol process. During the verification process, the test management platform uses an algorithm that combines exact matching and fuzzy matching. Exact matching is used for key protocol parameters and operation processes to ensure strict compliance with protocol requirements; fuzzy matching is used for some non-critical parameters or extended functions that may have a certain degree of flexibility, and judgment is made based on the preset tolerance range.

[0097] After comprehensive verification and comparison, the test management platform generates a test report. The test report records the data of the entire test process in detail, including the start time and end time of the test, test environment information (such as AP network configuration parameters, cloud platform version information, etc.), device information of the target WLAN application terminal (such as device model, firmware version, etc.), detailed content of the execution log data, and all abnormal situations and inconsistencies with the protocol found during the verification process. Based on this information, the test report gives the judgment result of the protocol consistency of the target WLAN application terminal, and the judgment results are divided into three situations: "pass", "fail" and "partially pass". "Pass" means that the target WLAN application terminal fully complies with the consistency specification of the cross-platform access authentication protocol of smart home products during the entire test process; "fail" means that there are serious violations of the protocol specifications, resulting in the product being unable to normally implement the cross-platform access authentication function; "partially pass" means that the target WLAN application terminal meets the requirements in some aspects of the protocol specifications, but there are some minor irregularities or areas that can be improved, which need to be further optimized and adjusted. The test report is presented in a structured and visual way, which is convenient for testers and related technical personnel to intuitively understand the test results, and provide strong data support and decision-making basis for the improvement and optimization of smart home products.

[0098] In one embodiment, the target WLAN application terminal is further used for:

[0099] Sending a registration request carrying a binding code, device identification information and authenticated identity credentials to a cloud platform; the cloud platform is also used to: verify the identity credentials and binding code carried in the registration request, and return the registration result, login key and updated device identification to the target WLAN application terminal after successful verification;

[0100] According to the registration result, the login key and the updated device identification, the login interface is started to perform a login operation.

[0101] In a specific embodiment, the target WLAN application terminal performs a series of operations related to registration and login at a specific stage, and the cloud platform performs verification and information feedback accordingly, thereby completing the complete registration and login process together.

[0102] After obtaining the binding code and completing the preliminary authentication process, the target WLAN application terminal enters the registration request phase. It will carefully construct a registration request message that carries the binding code, device identification information, and authenticated identity credentials. Device identification information is an inherent attribute of the target WLAN application terminal, which contains details such as manufacturer information, device model, unique serial number, etc. This information is used in the smart home system to accurately identify and distinguish different terminal devices to ensure the accuracy and effectiveness of system management. The authenticated identity credentials are generated by the target WLAN application terminal through the previous authentication link using a specific encryption algorithm and key. They are key data used to prove the legitimacy of its identity to the cloud platform. They have a high degree of confidentiality and cannot be tampered with to prevent identity forgery and illegal access.

[0103] The target WLAN application terminal sends this registration request to the cloud platform through a secure and reliable communication channel. The communication channel is established based on industry-standard security protocols, such as the TLS (Transport Layer Security) protocol, to ensure the confidentiality, integrity, and authenticity of the registration request during transmission and prevent information from being obtained abnormally.

[0104] After receiving the registration request sent by the target WLAN application terminal, the cloud platform immediately starts a strict verification procedure. For the identity credentials carried in the registration request, the cloud platform uses the verification algorithm and key corresponding to the target WLAN application terminal authentication process to perform decryption and verification operations. First, check whether the format of the identity credentials conforms to the predetermined standard format to ensure its integrity and standardization. Then, use the relevant key stored in the security key library inside the cloud platform to decrypt the identity credentials, and compare the decrypted content with the target WLAN application terminal authentication information recorded by the cloud platform to confirm the authenticity and validity of the identity credentials.

[0105] At the same time, the cloud platform verifies the binding code in the registration request. The cloud platform queries the registration information related to the target WLAN application terminal in its device management database, and compares whether the received binding code is consistent with the binding code of the device stored in the database to ensure the accuracy and validity of the binding code and prevent illegal devices from using the wrong binding code to register.

[0106] If the identity credentials and binding code are successfully verified during the above verification process, the cloud platform will generate a registration result, a login key, and updated device identification information. The registration result is used to clearly inform the target WLAN application terminal whether its registration request has been successfully accepted. Its value is "successful" or "failed", and it is accompanied by detailed explanation information so that the target WLAN application terminal can understand the specific situation of the registration process. The login key is a key key required for the target WLAN application terminal to communicate and interact securely with the cloud platform and other devices in the future. The cloud platform generates a high-intensity, highly random and unique login key through a powerful key generation algorithm to ensure the security and confidentiality of the communication process. The updated device identification information may include version updates, attribute supplements or corrections to the target WLAN application terminal device identification, which is used to more accurately manage and identify the device in the smart home system. The cloud platform then returns this information to the target WLAN application terminal through a secure communication channel.

[0107] After receiving the registration result, login key, and updated device identification returned by the cloud platform, the target WLAN application terminal performs corresponding processing according to the registration result. If the registration result is "successful", the target WLAN application terminal extracts the login key and updated device identification for secure storage to ensure the confidentiality and integrity of these key information. Subsequently, the target WLAN application terminal starts the login interface to perform the login operation. During the login process, the target WLAN application terminal uses the login key as the key parameter for identity authentication and performs secure identity authentication interaction with the cloud platform. It combines the login key with its own device identification information and other necessary login information, constructs a login request message in accordance with the login protocol format specified by the cloud platform, and sends it to the cloud platform through a secure communication channel.

[0108] After receiving the login request, the cloud platform will verify the validity of the login key and the legitimacy of the identity of the target WLAN application terminal again. If the verification is successful, the cloud platform will establish a login session for the target WLAN application terminal, so that it can officially access the smart home system and conduct comprehensive data interaction and functional operations with other devices and the cloud platform. If the registration result is "failed", the target WLAN application terminal will handle the error information returned by the cloud platform accordingly, such as prompting the user to check the device configuration, re-authenticate or register, etc., to ensure that the registration and login process can be completed smoothly, and the smart home product can operate normally after cross-platform access authentication. This complete and rigorous registration and login process ensures the legal identity identification and secure access of the target WLAN application terminal in the smart home system, providing a solid foundation for the stable operation and effective management of smart home products.

[0109] Two specific embodiments are given below to illustrate the specific application of the method of the present invention.

[0110] The first specific embodiment may involve the following steps:

[0111] 1. Test scenario construction

[0112] 1. Equipment preparation

[0113] Test management platform: installed on a well-configured PC with sufficient memory, storage capacity and processor performance to ensure smooth operation of the test management software. The software has been pre-configured with various parameters required for testing, including test templates and test case libraries for different types of smart home products.

[0114] Network distributor equipment: Select models with high-performance chips and stable communication modules, and the interfaces on its integrated motherboard are connected normally with other devices. The network distributor equipment has been installed with the latest version of test-related software, and the communication parameters with the test management platform and cloud platform have been correctly configured to ensure stable communication.

[0115] Smart home access cloud platform: It uses the platform of a well-known cloud service provider in the industry, has powerful data storage and processing capabilities, and has deployed the service modules required for cross-platform access authentication technology of smart home devices, including device authentication, data management, security policy execution and other functions.

[0116] AP equipment: Select commercial AP equipment that supports multiple network frequency bands (such as 2.4GHz and 5GHz) and encryption methods (such as WPA2-PSK, WPA3-SAE, etc.), set a specific WiFi network name (SSID) and password according to the test requirements, ensure that the network coverage meets the test environment requirements, and the network signal is stable.

[0117] Target WLAN application terminals: Taking a smart lighting device as an example, the device has built-in software modules that comply with the technical standards for cross-platform access authentication of smart home devices, and has the ability to communicate with network distribution devices and cloud platforms. The device's hardware (such as lamp drivers, sensors, etc.) and software (such as control programs, communication protocol stacks, etc.) are in normal working condition.

[0118] 2. Test Process Execution

[0119] 1. Test task start

[0120] The tester selects the cross-platform access certification test project for smart lighting devices on the test management platform and clicks the "Start Test" button. The test management platform generates detailed test task instructions based on the preset test process and strategy. The instructions contain the relevant identification information of the target smart lighting device (i.e. the target WLAN application terminal), test step requirements, etc., and sends them to the network distribution device.

[0121] 2. Obtaining the binding code and network access information

[0122] After receiving the test task instruction, the network adapter device sends a request to the smart home access cloud platform according to the information in the instruction, requesting to obtain the binding code and AP network access information of the target smart lighting device. After receiving the request, the cloud platform first verifies the authority of the network adapter device. After confirming that it is correct, it generates or searches for the corresponding binding code according to the registration information of the target smart lighting device on the platform, and obtains the network access information of the current AP device (such as SSID, password, frequency band, encryption method, etc.). The cloud platform encrypts this information and sends it back to the network adapter device.

[0123] 3. Equipment legality verification preparation

[0124] After receiving the information returned by the cloud platform, the network distributor sends a request authentication message to the target smart lighting device through the secure connection channel formed by the IP layer security negotiation method previously established with the target smart lighting device. The request authentication message contains a randomly generated authentication challenge value information, which is generated based on a secure random number algorithm and is unique and unpredictable.

[0125] 4. Equipment legality verification

[0126] After receiving the authentication request message, the target intelligent lighting device uses its own private key stored in the secure area to sign the authentication challenge value information and the current network security negotiation session information to generate authentication signature information. The authentication signature information also includes the certificate of the target intelligent lighting device, which follows the X.509 standard format and contains key information such as the device's public key, issuing authority, and validity period. The target intelligent lighting device returns the authentication signature information to the network distributor device through a secure connection channel.

[0127] After receiving the authentication signature information, the network distributor device parses it. First, verify whether the certificate in the authentication signature information is legal and valid, including checking whether the issuing authority of the certificate is credible, whether the certificate is within the validity period, and whether the signature of the certificate is correct. Then, use the public key in the certificate to decrypt the signature part, and compare the decrypted result with the authentication challenge value information and session information in the authentication request message. If the two are consistent, it is determined that the device legitimacy verification of the target intelligent lighting device has passed; if they are inconsistent, it is determined that the verification has failed and the corresponding error information is recorded.

[0128] 5. Sending binding code and network access information

[0129] If the device legitimacy verification passes, the network adapter device will encapsulate the binding code and AP network access information obtained from the cloud platform to ensure that the information format meets the receiving requirements of the target smart lighting device, and then send it to the target smart lighting device through a secure connection channel.

[0130] 6. Device authentication and network access

[0131] After receiving the binding code and AP network access information, the target smart lighting device does not immediately access the AP network, but first sends a device identity authentication request to the cloud platform. The request contains the binding code, the device's own identification information (such as device model, serial number, manufacturer information, etc.) and the authenticated identity credentials obtained in the previous authentication process. After receiving the request, the cloud platform strictly verifies the binding code, device identification information and identity credentials. The verification process includes comparing whether the binding code is consistent with the information stored in the platform, verifying the legitimacy of the device identification information, and checking the authenticity and validity of the identity credentials. If the verification passes, the cloud platform generates a registration result (the value is "success"), a login key (a high-strength key generated by a security algorithm) and an updated device identification (which may contain identification information after version updates or other attribute modifications), and sends this information back to the target smart lighting device.

[0132] After receiving the information returned by the cloud platform, the target smart lighting device extracts the login key and the updated device identifier for storage, and then configures its own network connection module according to the login key and the parameters in the AP network access information. It fills the SSID and password of the AP network into the corresponding configuration fields, selects the appropriate network frequency band and encryption method, and initiates a request to connect to the AP network. If the connection is successful, the target smart lighting device establishes a stable wireless connection with the AP device, and can exchange data with other devices or cloud platforms in the smart home system.

[0133] 7. Execution log data acquisition and test report generation

[0134] After the target intelligent lighting device is connected to the AP network, various execution log data generated during operation are acquired in real time by the network distributor. The execution log data includes data interaction records between the device and other devices or cloud platforms (such as the sending and receiving of control instructions, reporting of status information, etc.), device resource usage (such as CPU usage, memory usage, power consumption, etc.) and event records during device operation (such as device start and stop events, connection status change events, etc.). The network distributor sends these execution log data to the test management platform.

[0135] After receiving the execution log data, the test management platform first pre-processes the data, including data cleaning (removing noise data, erroneous data and duplicate data), format conversion (unifying data in different formats into a processable standard format) and data classification (dividing into network communication data, device status data, application data and other categories according to data type and source). Then, the test management platform verifies and compares the execution log data according to the built-in standard specification model of the cross-platform access authentication protocol for smart home products. The comparison process uses an algorithm that combines exact matching and fuzzy matching. Exact matching is used for key protocol parameters and operation processes to ensure strict compliance with protocol requirements; fuzzy matching is used for some non-critical parameters or extended functions, and judgments are made based on the preset tolerance range.

[0136] After comprehensive verification and comparison, the test management platform generates a test report. The test report records the entire test process information in detail, including the start time, end time, test environment parameters (such as network configuration of AP devices, version information of cloud platforms, etc.), device information of target smart lighting devices (such as device model, firmware version, etc.), detailed content of execution log data, and all abnormalities and inconsistencies with the protocol found during the verification and comparison process. The test report gives the judgment result of the protocol consistency of the target smart lighting device. If the target smart lighting device fully complies with the consistency specification of the cross-platform access authentication protocol of smart home products during the entire test process, the judgment result is "passed"; if there is a serious violation of the protocol specification, resulting in the product being unable to normally implement the cross-platform access authentication function, the judgment result is "failed"; if it meets the requirements in some aspects of the protocol specification, but there are some minor irregularities or areas that can be improved, the judgment result is "partially passed". The test report is presented in a clear, structured and visual way, which is convenient for testers and related technical personnel to intuitively understand the test results, and provide strong data support and decision-making basis for the improvement and optimization of smart lighting equipment.

[0137] Through the above application examples, the specific application process of the cross-platform access authentication test method for smart home products in the actual testing scenario of smart lighting equipment is demonstrated in detail, covering all aspects from the start of the test task to the final generation of the test report, reflecting the important role of this test method in ensuring the accuracy and reliability of cross-platform access authentication for smart home products.

[0138] The method involved in the first embodiment can rely on the following smart home product cross-platform access authentication protocol testing system, such as Figure 2 As shown, Figure 2 This is a connection diagram of a smart home product cross-platform access authentication protocol test system in an embodiment of the present invention, the system includes:

[0139] 1. The test management platform runs on the PC and has the following functions:

[0140] Maintaining test equipment;

[0141] Create a test project;

[0142] Manage the testing process;

[0143] View the test report;

[0144] Generate a test task instruction, where the test task instruction is used to represent a test task generated by a test management platform for performing access authentication on a target WLAN application terminal;

[0145] Receive and process execution log data from the network distributor;

[0146] According to the execution log data, verify whether the target WLAN application terminal interface complies with the protocol consistency specification, and generate a test report; the test report includes the test process data and the determination result of the target WLAN application terminal protocol consistency.

[0147] The test management platform runs on a computing device and is used to maintain test equipment information, create test items, manage test processes, and generate and view test reports, wherein the test reports include test process data and a determination result of the target WLAN application terminal protocol consistency;

[0148] 2. Network distribution equipment, which integrates the motherboard, chip, communication module and external interface test equipment, communicates with the cloud platform through software and has the following functions:

[0149] According to the test task instructions generated by the test management platform, request the binding code and AP network access information of the target WLAN application terminal from the cloud platform;

[0150] Discover the target WLAN application terminal and establish a secure connection channel with the target WLAN application terminal;

[0151] Sending an authentication request message to a target WLAN application terminal, wherein the authentication request message includes an authentication challenge value;

[0152] Receiving authentication signature information returned by the target WLAN application terminal, where the authentication signature information is signed by a private key of the target WLAN application terminal based on the authentication challenge value and the session information;

[0153] Perform device legitimacy verification on the target WLAN application terminal;

[0154] If the device legitimacy check passes, the binding code and AP network access information are sent to the target WLAN application terminal through the pre-established secure connection channel;

[0155] Obtain the execution log data of the target WLAN application terminal after it accesses the AP network, and send the execution log data to the test management platform.

[0156] Among them, the network distribution device integrates a mainboard, a chip, a communication module and an external interface, establishes a communication connection with the cloud platform through software, is used to receive the test task instructions of the test management platform, obtain the binding code and AP network access information of the target WLAN application terminal from the cloud platform according to the instructions, establish a secure connection channel with the target WLAN application terminal, send a request authentication message to the target WLAN application terminal, receive its authentication signature information and perform device legitimacy verification, send the binding code and AP network access information to the target WLAN application terminal after the verification is passed, and obtain the execution log data after the target WLAN application terminal accesses the AP network and send it to the test management platform;

[0157] 3. The cloud platform for smart home access realizes the following functions:

[0158] Generate a binding code for the target WLAN application terminal and return the binding code to the network provisioner;

[0159] Perform device identity authentication on the target WLAN application terminal;

[0160] Receive and process a registration request from a target WLAN application terminal, the registration request including a binding code, device identification information, and authenticated identity credentials;

[0161] Verify the binding code, device identification information and authenticated identity credentials;

[0162] After successful verification, the registration result, login key and updated device identification are returned to the target WLAN application terminal.

[0163] Among them, the smart home access cloud platform is used to store device registration information, generate and manage binding codes, device certificate revocation list information, and process the identity authentication request of the target WLAN application terminal, including receiving the network distribution device request and returning the binding code and device certificate revocation list information of the target WLAN application terminal, verifying the device identity authentication information of the target WLAN application terminal, and verifying the registration request of the target WLAN application terminal and returning the registration result, login key and updated device identification;

[0164] 4. AP equipment provides a WiFi network environment and controls the on / off of the network environment according to the test case requirements. It has the following functions: provides a WiFi network environment for access by the target WLAN application terminal; controls the on / off of the network environment to meet the requirements of different test scenarios.

[0165] Among them, the AP device provides a WiFi network environment according to the requirements of the test case, can set network parameters, including network name, password, frequency band, encryption method, and can control the on and off of the network environment.

[0166] Of course, it is understandable that the above detailed process may have other variations, and the relevant variations should all fall within the protection scope of the present invention.

[0167] Second specific embodiment:

[0168] This embodiment involves a smart home product cross-platform access authentication protocol testing system established by applying the above method as an example. The smart home device access authentication test covers multiple key processes, including discovery process, network configuration process, pre / post network configuration authentication process, registration process and login process.

[0169] During the registration process, the application terminal sends the binding code, device identification information, and authenticated identity credentials to the cloud platform. After receiving this information, the cloud platform verifies the binding code, device identification information, and authenticated identity credentials. If the verification is successful, the cloud platform returns the registration result, login key, and updated device identification (devID) to the application terminal.

[0170] The login process starts after the application terminal successfully registers on the cloud platform. At this time, the application terminal initiates the login operation and sends the device identifier (devID) and license information required for login to the cloud platform. After receiving this information, the cloud platform verifies it and returns the login result to the application terminal to determine whether the application terminal has successfully logged into the cloud platform, so as to realize the subsequent functional operations. The various links of the entire process are closely linked to ensure the accuracy and security of smart home device access authentication and realize the stable operation and interconnection of devices in the smart home system.

[0171] The above method is specifically explained as follows: The smart home product cross-platform access authentication protocol test device and system consists of multiple key parts, including a test management platform (in the form of software), a network distribution device, an AP device, and a smart home access cloud platform (referred to as the cloud platform).

[0172] The test management platform has the ability to run on the PC side. Its functions are rich and varied, covering the maintenance of test equipment, ensuring that the test equipment is in normal working condition and the relevant configuration is accurate; it can create a variety of test projects to meet the testing needs of different types of smart home products; it can also comprehensively manage the test process, from test start, pause, resume to termination, etc., and can effectively control the test progress, data interaction, etc. in real time; and it has the function of viewing test reports, which is convenient for testers to intuitively obtain test results.

[0173] As a professional testing device that integrates a motherboard, chip, communication module and external interface, the network distributor establishes a stable communication connection with the cloud platform through special software. It can accurately carry out testing work according to the test tasks issued by the test management platform and upload test results in a timely manner. In the entire test system, the network distributor also has the key function of testing the network distribution process and interface of the equipment to ensure the accuracy and stability of smart home products in the network distribution link.

[0174] The smart home cloud service platform plays an important role in the testing process. It is mainly responsible for implementing the authentication process of the device under test and accurately judging the legitimacy of the device through a series of complex algorithms and security mechanisms. At the same time, it can monitor the operating status of the device in real time, including the device's online status, working parameters, etc., and effectively control the device according to the test requirements, such as starting and stopping device functions. In addition, the cloud platform will also collect and organize relevant test data and report it in a timely manner to provide key data support for the entire test.

[0175] The AP device provides a stable and reliable WiFi network environment for the test environment according to the specific test case requirements. It can not only set appropriate network parameters, such as network name (SSID), password, frequency band, encryption method, etc., to meet the network access requirements of different smart home products, but also has the ability to control the on and off of the network environment. It can simulate different network states during the test, such as normal network connection, network interruption, etc., so as to comprehensively test the performance of smart home products under various network conditions.

[0176] Based on such a set of cross-platform access authentication protocol testing devices and systems for smart home products, it is possible to conduct automated protocol consistency testing on smart home products that support cross-platform access authentication protocols. By simulating various scenarios of smart home products in actual applications, such as device discovery, network configuration, access authentication, registration and other processes, the degree of compliance between the protocols supported by the devices and the standard requirements can be automatically detected, and the performance and compatibility of smart home products can be effectively evaluated to ensure that they can achieve stable, secure and efficient interconnection in the smart home ecosystem. The test content it supports is comprehensive and detailed, covering a series of key protocol contents such as smart home application terminal discovery and network configuration processes and interfaces, access authentication processes and interfaces, registration processes and interfaces, etc., to ensure the quality and reliability of smart home products from multiple dimensions.

[0177] The cross-platform access authentication protocol testing process for smart home products mainly covers the following four aspects:

[0178] 1. Discovery and network configuration process and interface, such as Figure 3 As shown, Figure 3This is a connection diagram of a smart home product cross-platform access authentication protocol test system in an embodiment of the present invention:

[0179] 1. First, make preparations. Power on the AP device and set up the WiFi network. At the same time, the target WLAN application terminal is also powered on and enters the network configuration mode.

[0180] 2. Then the test management platform sends the test task instructions to the network distributor.

[0181] 3. After receiving the command, the network adapter obtains the target WLAN application terminal registration information and AP network access information from the cloud according to the command.

[0182] 4. The network adapter is then connected to the network of the target WLAN application terminal, first establishing an IP layer connection, and then establishing a mutually trusted encrypted channel through IP layer security negotiation.

[0183] 5. After the channel is established, the network adapter sends AP network access information to the WLAN application terminal under test through the network adapter interface, and can also carry extended data at the same time.

[0184] 6. Before sending the AP network access information, the network adapter must verify the legitimacy of the device through the pre-access identity authentication process (see the subsequent process for details), and only issue the AP network access information after success.

[0185] 7. After the target WLAN application terminal obtains the information, it disconnects from the network adapter, turns off the network configuration mode, and then connects to the AP network.

[0186] 2. Pre-access identity authentication process and interface, such as Figure 4 As shown, Figure 4 This is a connection diagram of a smart home product cross-platform access authentication protocol test system in an embodiment of the present invention:

[0187] 1. After the network adapter discovers the target WLAN application terminal, it requests the binding code of the target WLAN application terminal from the cloud platform based on the device information obtained in the discovery phase. It should be noted that the WLAN application terminal under test needs to be authenticated before testing to verify the legitimacy of the application terminal connected to the network, and the binding code is generated by the cloud platform and is a key identifier in the authentication process before the interactive network configuration between the network adapter, the application terminal under test and the cloud platform.

[0188] 2. After the cloud platform generates the application terminal binding code, it returns the binding code and device certificate revocation list information to the network provisioner.

[0189] 3. The network adapter establishes a secure connection with the target WLAN application terminal.

[0190] 4. The network provisioner sends an authentication request message CertifyReq to the target WLAN application terminal, which carries information such as the authentication challenge value challengeA.

[0191] 5. After receiving the request, the target WLAN application terminal signs the authentication challenge value challengeA together with the session information of the current network configuration security negotiation with the private key, and returns a CertifyRsp response carrying the target WLAN application terminal certificate and signature.

[0192] 6. The network distributor verifies the legitimacy of the equipment. If it fails, it can choose whether to continue the network distribution based on the application logic.

[0193] 7. If the verification passes or the application logic chooses to continue network configuration, the network configuration device sends the AP network information and the target WLAN application terminal binding code to the target WLAN application terminal through the network configuration interface.

[0194] 8. Finally, the network adapter is disconnected from the target WLAN application terminal.

[0195] 3. Post-access identity authentication process and interface, such as Figure 5 As shown, Figure 5 This is a connection diagram of a smart home product cross-platform access authentication protocol test system in an embodiment of the present invention:

[0196] 1. The target WLAN application terminal accesses the cloud platform identity through one-way TLS / TLCP authentication and establishes a TLS / TLCP connection.

[0197] 2. The target WLAN application terminal requests identity authentication to access the cloud platform. The cloud platform determines whether to perform application layer identity authentication based on the actual situation. If not, it returns the authentication result and credentials. If so, it returns the authentication challenge value challengeS.

[0198] 3. After receiving the authentication challenge value, the target WLAN application terminal signs challengeS together with the current TLS session information with the private key, and sends the device certificate chain and signature to the cloud platform through the CloudCertifyRsp interface.

[0199] 4. The cloud platform verifies the device certificate and signature. If successful, it returns the target WLAN application terminal authentication result and credentials. If unsuccessful, it returns an error code.

[0200] 4. Registration process and interface, such as Figure 6 As shown, Figure 6 This is a connection diagram of a smart home product cross-platform access authentication protocol test system in an embodiment of the present invention:

[0201] 1. After authentication, the target WLAN application terminal initiates a registration request, carrying the binding code, device identification information (including the application terminal MAC address, model number productID, devId, etc.) and authenticated identity credentials to the cloud platform. After the network configuration is successful, authentication is required and the authentication process is followed. The cloud platform verifies the device certificate and signature, and returns the application terminal authentication result and credentials if successful, and returns an error code if unsuccessful.

[0202] 2. After receiving the message, the cloud platform verifies the device identity credentials and binding code.

[0203] 3. After successful verification by the cloud platform, the registration result, login key and updated devId are returned to the target WLAN application terminal.

[0204] 4. The WLAN terminal under test then starts the login interface to log in.

[0205] 5. The network adapter obtains the execution log and data of the WLAN terminal under test and sends it to the test management platform.

[0206] 6. The test management platform automatically verifies and compares the entire process interface based on the execution log and data to see if it complies with the protocol consistency specifications and generates a test report.

[0207] Each link in the entire process is closely linked, starting from discovery and network configuration, through pre-access and post-access identity authentication, to registration and login, and finally generating a test report through the test management platform. This comprehensively and systematically tests the cross-platform access authentication protocol of smart home products to ensure that the interfaces and protocols of smart home products in each process meet the standard requirements, thereby ensuring the stable operation of the smart home system and the interconnection between devices.

[0208] As mentioned above, for smart home devices supporting WLAN technology, they use the cross-platform access authentication protocol to achieve intercommunication with smart home products of different manufacturers, different platforms, and different brands. In order to verify whether the cross-platform access protocol development and design of the product is consistent with the protocol requirements, the system and method of the present invention can be used to carry out testing.

[0209] First, build the test system, prepare AP equipment, network distribution equipment and a PC with a test management platform installed, and ensure that all system equipment and test equipment are in normal working condition. Then select the test case on the test management platform, then choose to start executing the case, and wait for the interface to prompt that the test is completed. In this way, the cross-platform access authentication protocol test of the smart home device is completed.

[0210] The cross-platform access authentication protocol test device and system designed by the present invention can efficiently test the consistency of the development and design of the cross-platform access authentication protocol of smart home products. This test device and system belong to an automated test system, and its test method is strictly designed in accordance with the requirements of the cross-platform access protocol. The complexity of the system connection structure is low, the execution operation is simple and easy, and the test efficiency and accuracy can be greatly improved. This not only helps to ensure the quality of smart home products in cross-platform access authentication, but also promotes stable interconnection between different products in the smart home ecosystem.

[0211] The embodiment of the present invention constructs a set of cross-platform access certification test system for smart home products, which includes multiple important aspects. Among them, the design of the network distributor equipment and the design of the test management platform are particularly critical, and they work together to realize the functions of the entire test system. The network distributor device integrates the mainboard, chip, communication module and external interface in hardware, communicates with the cloud service platform through special software, and can carry out work according to the test tasks issued by the test management platform. It not only performs test operations but is also responsible for uploading test results, and has the ability to test the device network distribution process and interface. The test management platform runs on the PC side and undertakes important responsibilities such as maintaining test equipment, creating test projects, managing test processes, and viewing test reports.

[0212] The key to the embodiment of the present invention is to construct a network distributor and a cloud service platform to simulate the App and platform in the smart home cross-platform access system, and then build a complete smart home system link with the terminal to be tested, and finally successfully complete the full process operation of cross-platform access. With the help of the test management platform, the behavior of the network distributor and the cloud service platform is automatically controlled. During the entire test process, the network distributor and the cloud service platform will capture the data messages sent by the terminal to be tested, and then conduct in-depth analysis of these data messages to obtain the corresponding test judgment results. In this process, the behavior of the network distributor and the cloud service platform is precisely controlled by the test management platform to ensure the accuracy and efficiency of the test process, and the analysis of the data message provides an important basis for evaluating the performance of the terminal to be tested in the cross-platform access authentication protocol.

[0213] In summary, the cross-platform access certification test system and method for smart home products has formed a relatively complete and logically rigorous system from system construction, equipment function design to test process operation and judgment, aiming to ensure the reliability and stability of cross-platform access certification for smart home products, and effectively evaluate the consistency and compatibility of products in relevant protocols.

[0214] In addition, the test management platform plays a key role in automatic control during the cross-platform access certification test of smart home products. It can accurately and automatically control the behavior of the network distributor and cloud service platform, so that the entire test process can proceed in an orderly manner. At the same time, the network distributor and cloud service platform will capture the data messages sent by the terminal to be tested during the test process. These data messages cover the interaction information of the terminal to be tested in various operation links. After that, the captured data messages and related logs and data will be sent to the test management platform. The test management platform will perform a series of operations on these data. First, it will automatically verify and compare whether the entire process interface complies with the protocol consistency specification. By deeply analyzing the data message and other contents, it will strictly check whether the various parameters, data format, interaction logic, etc. of the interface are consistent with the protocol requirements, and then draw a test judgment. Finally, the test management platform will generate a test report based on the results of the verification and comparison. The report records in detail the various data in the test process, the problems found, and the final judgment conclusion on the consistency of the cross-platform access certification protocol of smart home products, providing an important basis for product improvement and optimization, thereby ensuring the reliability and stability of smart home products in cross-platform access certification.

[0215] Of course, it is understandable that the above detailed process may have other variations, and the relevant variations should all fall within the protection scope of the present invention.

[0216] The embodiment of the present invention also provides a cross-platform access authentication test device for smart home products, which is used to improve the efficiency and accuracy of the cross-platform access authentication test of smart home products. Figure 7 FIG. 1 is a structural example diagram of a cross-platform access authentication test device for a smart home product according to an embodiment of the present invention. Figure 7 As shown, the device comprises:

[0217] The test task instruction sending module 701 is used to request the binding code and AP network access information of the target WLAN application terminal from the cloud platform according to the test task instruction generated by the test management platform; the test task instruction is used to represent the test task generated by the test management platform for access authentication of the target WLAN application terminal; the target WLAN application terminal corresponds to the terminal of the smart home product;

[0218] The device legitimacy verification module 702 is used to verify the legitimacy of the target WLAN application terminal according to the authentication signature information fed back by the target WLAN application terminal; the authentication signature information carries the authentication request message sent by the network adapter, the session information, the certificate and signature of the target WLAN application terminal;

[0219] The WLAN application terminal information sending module 703 is used to send the binding code and AP network access information to the target WLAN application terminal through a pre-established secure connection channel if the device legitimacy check passes; the secure connection channel is pre-established between the network adapter and the target WLAN application terminal; after the device identity authentication requested to the cloud platform passes, the target WLAN application terminal accesses the AP network according to the binding code and AP network access information;

[0220] The test report generation module 704 is used to obtain the execution log data after the target WLAN application terminal accesses the AP network, and send the execution log data to the test management platform; the test management platform is used to verify whether the target WLAN application terminal interface complies with the protocol consistency specification based on the execution log data, and generate a test report; the test report includes the test process data and the determination result of the protocol consistency of the target WLAN application terminal.

[0221] In one embodiment, it further includes:

[0222] Before performing device legitimacy verification on the target WLAN application terminal according to the authentication signature information fed back by the target WLAN application terminal, a request authentication message is sent to the target WLAN application terminal through the secure connection channel; the request authentication message carries authentication challenge value information; the target WLAN application terminal is used to sign the authentication challenge value information and the session information of the current network configuration security negotiation with a private key to obtain the authentication signature information.

[0223] In one embodiment, the cloud platform performs device identity authentication as follows:

[0224] After determining that the target WLAN application terminal needs to be authenticated, sending device authentication challenge value information to the device authentication;

[0225] Receiving device identity authentication information fed back by the target WLAN application terminal; the device identity authentication information is generated by the target WLAN application terminal according to the device identity authentication challenge value information and session information, and the certificate and signature of the target WLAN application terminal;

[0226] After verifying the device certificate and signature in the device authentication information, it is confirmed that the device authentication performed by the cloud platform is successful.

[0227] In one embodiment, the target WLAN application terminal accesses the AP network according to the binding code and the AP network access information in the following manner:

[0228] Send the binding code, device identification information and authenticated identity credentials to the cloud platform; the cloud platform verifies the binding code, device identification information and authenticated identity credentials, and after the verification passes, issues login information; the login information carries the registration result, login key and updated device identification;

[0229] Access the AP network based on the received login information.

[0230] In one embodiment, the secure connection channel is pre-established as follows:

[0231] A secure connection channel is established between the network adapter and the target WLAN application terminal by adopting IP layer security negotiation.

[0232] In one embodiment, the target WLAN application terminal is further used for:

[0233] Sending a registration request carrying a binding code, device identification information and authenticated identity credentials to a cloud platform; the cloud platform is also used to: verify the identity credentials and binding code carried in the registration request, and return the registration result, login key and updated device identification to the target WLAN application terminal after successful verification;

[0234] According to the registration result, the login key and the updated device identification, the login interface is started to perform a login operation.

[0235] An embodiment of the present invention provides an embodiment of a computer device for implementing all or part of the contents of the cross-platform access authentication test method for smart home products. The computer device specifically includes the following contents:

[0236] Processor, memory, communication interface and bus; wherein the processor, memory and communication interface communicate with each other through the bus; the communication interface is used to realize information transmission between related devices; the computer device can be a desktop computer, a tablet computer and a mobile terminal, etc., but the present embodiment is not limited thereto. In the present embodiment, the computer device can be implemented with reference to the embodiment of the cross-platform access authentication test method for implementing smart home products and the embodiment of the cross-platform access authentication test device for implementing smart home products, the contents of which are incorporated herein and the repeated parts are not repeated.

[0237] Figure 8 FIG. 1 is a schematic block diagram of the system structure of the computer device 1000 according to an embodiment of the present application. Figure 8As shown, the computer device 1000 may include a central processor 1001 and a memory 1002; the memory 1002 is coupled to the central processor 1001. It is worth noting that Figure 8 is exemplary; other types of structures may also be used to supplement or replace this structure to implement telecommunication functions or other functions.

[0238] In one embodiment, the cross-platform access authentication test function of the smart home product may be integrated into the central processor 1001. The central processor 1001 may be configured to perform the following control:

[0239] According to the test task instruction generated by the test management platform, request the binding code and AP network access information of the target WLAN application terminal from the cloud platform; the test task instruction is used to represent the test task generated by the test management platform for access authentication of the target WLAN application terminal; the target WLAN application terminal corresponds to the terminal of the smart home product;

[0240] According to the authentication signature information fed back by the target WLAN application terminal, the target WLAN application terminal is subjected to a device legitimacy check; the authentication signature information carries the authentication request message, session information, and the certificate and signature of the target WLAN application terminal issued by the network adapter;

[0241] If the device legitimacy check passes, the binding code and AP network access information are sent to the target WLAN application terminal through a pre-established secure connection channel; the secure connection channel is pre-established between the network adapter and the target WLAN application terminal; after the device identity authentication requested to the cloud platform passes, the target WLAN application terminal accesses the AP network according to the binding code and AP network access information;

[0242] The execution log data of the target WLAN application terminal after accessing the AP network is obtained, and the execution log data is sent to the test management platform; the test management platform is used to verify whether the target WLAN application terminal interface complies with the protocol consistency specification according to the execution log data, and generate a test report; the test report includes the test process data and the determination result of the protocol consistency of the target WLAN application terminal.

[0243] In another embodiment, the cross-platform access authentication test device of the smart home product can be configured separately from the central processor 1001. For example, the cross-platform access authentication test device of the smart home product can be configured as a chip connected to the central processor 1001, and the cross-platform access authentication test function of the smart home product can be realized through the control of the central processor.

[0244] like Figure 8As shown, the computer device 1000 may also include: a communication module 1003, an input unit 1004, an audio processor 1005, a display 1006, and a power supply 1007. It is worth noting that the computer device 1000 does not necessarily have to include Figure 8 In addition, the computer device 1000 may also include Figure 8 For components not shown, reference may be made to the prior art.

[0245] like Figure 8 As shown, the central processor 1001 is sometimes also referred to as a controller or an operation control, and may include a microprocessor or other processor devices and / or logic devices. The central processor 1001 receives inputs and controls the operations of various components of the computer device 1000 .

[0246] The memory 1002 may be, for example, a cache, a flash memory, a hard drive, a removable medium, a volatile memory, a non-volatile memory or other suitable devices, or one or more thereof. The above-mentioned information related to the failure may be stored, and a program for executing the related information may also be stored. The central processing unit 1001 may execute the program stored in the memory 1002 to implement information storage or processing, etc.

[0247] The input unit 1004 provides input to the CPU 1001. The input unit 1004 is, for example, a key or a touch input device. The power supply 1007 is used to provide power to the computer device 1000. The display 1006 is used to display display objects such as images and text. The display may be, for example, an LCD display, but is not limited thereto.

[0248] The memory 1002 may be a solid-state memory, such as a read-only memory (ROM), a random access memory (RAM), a SIM card, etc. It may also be a memory that saves information even when the power is off, can be selectively erased, and is provided with more data, examples of which are sometimes referred to as EPROMs, etc. The memory 1002 may also be some other type of device. The memory 1002 includes a buffer memory 1021 (sometimes referred to as a buffer). The memory 1002 may include an application / function storage unit 1022, which is used to store application programs and function programs or processes for executing the operation of the computer device 1000 through the central processor 1001.

[0249] The memory 1002 may also include a data storage unit 1023 for storing data, such as contacts, digital data, pictures, sounds, and / or any other data used by the computer device. The driver storage unit 1024 of the memory 1002 may include various drivers for the computer device for communication functions and / or for executing other functions of the computer device (such as messaging applications, address book applications, etc.).

[0250] The communication module 1003 is a transmitter / receiver that sends and receives signals via the antenna 1008. The communication module (transmitter / receiver) 1003 is coupled to the central processor 1001 to provide input signals and receive output signals, which may be the same as the case of a conventional mobile communication terminal.

[0251] Based on different communication technologies, multiple communication modules 1003 may be provided in the same computer device, such as a cellular network module, a Bluetooth module and / or a wireless local area network module, etc. The communication module (transmitter / receiver) 1003 is also coupled to a speaker 1009 and a microphone 1010 via an audio processor 1005 to provide an audio output via the speaker 1009 and receive an audio input from the microphone 1010, thereby realizing a common telecommunication function. The audio processor 1005 may include any suitable buffer, decoder, amplifier, etc. In addition, the audio processor 1005 is also coupled to the central processor 1001, so that recording can be performed on the local machine through the microphone 1010, and the sound stored on the local machine can be played through the speaker 1009.

[0252] An embodiment of the present invention further provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the cross-platform access authentication test method for the smart home product is implemented.

[0253] An embodiment of the present invention further provides a computer program product, which includes a computer program. When the computer program is executed by a processor, the cross-platform access authentication test method for the smart home product is implemented.

[0254] In the embodiment of the present invention, according to the test task instruction generated by the test management platform, the binding code and AP network access information of the target WLAN application terminal are requested from the cloud platform; the test task instruction is used to represent the test task generated by the test management platform for performing access authentication on the target WLAN application terminal; the target WLAN application terminal corresponds to the terminal of the smart home product; according to the authentication signature information fed back by the target WLAN application terminal, the device legitimacy verification is performed on the target WLAN application terminal; the authentication signature information carries the request authentication message sent by the network adapter, session information, the certificate and signature of the target WLAN application terminal; if the device legitimacy verification passes, the target WLAN application terminal is authenticated through the pre-established secure connection channel. The LAN application terminal sends the binding code and AP network access information; the secure connection channel is pre-established between the network adapter and the target WLAN application terminal; after the device identity authentication requested to the cloud platform is passed, the target WLAN application terminal accesses the AP network according to the binding code and AP network access information; the execution log data after the target WLAN application terminal accesses the AP network is obtained, and the execution log data is sent to the test management platform; the test management platform is used to verify whether the target WLAN application terminal interface complies with the protocol consistency specification according to the execution log data, and generate a test report; the test report includes the test process data and the judgment result on the protocol consistency of the target WLAN application terminal. The embodiment of the present invention requests the binding code and AP network access information of the target WLAN application terminal from the cloud platform according to the test task instruction generated by the test management platform, so that the cross-platform access authentication test can be based on the cross-platform access authentication protocol, rather than being limited to the test of a single device or brand; through interaction with the cloud platform, it is ensured that the test covers the interconnection and interoperability of devices of different brands and cloud platforms; by sending the binding code and AP network access information to the target WLAN application terminal after the device legitimacy verification is passed, it supports the application protocol test of the interaction between smart home devices and other brand devices or cloud platforms, and ensures that the test method can verify the protocol consistency in a cross-platform environment; by sending the binding code and AP network access information to the target WLAN application terminal after the device legitimacy verification is passed, it supports the application protocol test of the interaction between smart home devices and other brand devices or cloud platforms, and ensures that the test method can verify the protocol consistency in a cross-platform environment; The standard WLAN application terminal sends a request authentication message and receives the authentication signature information based on the authentication challenge value and the session information private key signature to verify the legitimacy of the device. This interaction and information verification between devices covers the key links when smart home products interact with other devices or cloud platforms; access to the AP network through the binding code supports various network configuration methods specified in the cross-platform access authentication protocol, ensuring that all network configuration methods during the test can be recorded and verified, improving the comprehensiveness and accuracy of the test; thereby efficiently testing the consistency of the development and design of the cross-platform access authentication protocol for smart home products, and improving the efficiency and accuracy of the cross-platform access authentication test of smart home products.

[0255] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0256] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0257] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0258] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process in the computer or other programmable device. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0259] The specific embodiments described above further illustrate the objectives, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above description is only a specific embodiment of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

Claims

1. A cross-platform access authentication test method for smart home products, characterized in that: include: According to the test task instructions generated by the test management platform, request the binding code and AP network access information of the target WLAN application terminal from the cloud platform; The test task instruction is used to represent a test task generated by the test management platform for performing access authentication on a target WLAN application terminal; The target WLAN application terminal corresponds to the terminal of the smart home product; According to the authentication signature information fed back by the target WLAN application terminal, the target WLAN application terminal is subjected to a device legitimacy check; the authentication signature information carries the authentication request message, session information, and the certificate and signature of the target WLAN application terminal issued by the network adapter; If the device legitimacy check passes, the binding code and AP network access information are sent to the target WLAN application terminal through a pre-established secure connection channel; the secure connection channel is pre-established between the network adapter and the target WLAN application terminal; after the device identity authentication requested to the cloud platform passes, the target WLAN application terminal accesses the AP network according to the binding code and AP network access information; Obtain the execution log data after the target WLAN application terminal accesses the AP network, and send the execution log data to the test management platform; The test management platform is used to verify whether the target WLAN application terminal interface complies with the protocol consistency specification according to the execution log data, and generate a test report; the test report includes the test process data and the determination result of the target WLAN application terminal protocol consistency.

2. The method according to claim 1, characterized in that Also includes: Before performing device legitimacy verification on the target WLAN application terminal according to the authentication signature information fed back by the target WLAN application terminal, a request authentication message is sent to the target WLAN application terminal through the secure connection channel; the request authentication message carries authentication challenge value information; the target WLAN application terminal is used to sign the authentication challenge value information and the session information of the current network configuration security negotiation with a private key to obtain the authentication signature information.

3. The method according to claim 1, characterized in that The cloud platform performs device identity authentication as follows: After determining that the target WLAN application terminal needs to be authenticated, sending device authentication challenge value information to the device authentication; Receiving device identity authentication information fed back by the target WLAN application terminal; the device identity authentication information is generated by the target WLAN application terminal according to the device identity authentication challenge value information and session information, and the certificate and signature of the target WLAN application terminal; After verifying the device certificate and signature in the device authentication information, it is confirmed that the device authentication performed by the cloud platform is successful.

4. The method according to claim 1, characterized in that The target WLAN application terminal accesses the AP network according to the binding code and the AP network access information in the following manner: Sending the binding code, device identification information and authenticated identity credentials to the cloud platform; the cloud platform verifies the binding code, device identification information and authenticated identity credentials, and issues login information after the verification passes; The login information carries the registration result, login key and updated device identification; Access the AP network based on the received login information.

5. The method according to claim 1, characterized in that The secure connection channel is pre-established as follows: A secure connection channel is established between the network adapter and the target WLAN application terminal by adopting IP layer security negotiation.

6. The method according to claim 1, characterized in that The target WLAN application terminal is also used for: Sending a registration request carrying a binding code, device identification information and authenticated identity credentials to a cloud platform; the cloud platform is also used to: verify the identity credentials and binding code carried in the registration request, and return the registration result, login key and updated device identification to the target WLAN application terminal after successful verification; According to the registration result, the login key and the updated device identification, the login interface is started to perform a login operation.

7. A cross-platform access authentication test device for smart home products, characterized in that: include: A test task instruction sending module is used to request the binding code and AP network access information of the target WLAN application terminal from the cloud platform according to the test task instruction generated by the test management platform; the test task instruction is used to represent the test task generated by the test management platform for access authentication of the target WLAN application terminal; The target WLAN application terminal corresponds to the terminal of the smart home product; The device legitimacy verification module is used to verify the legitimacy of the target WLAN application terminal according to the authentication signature information fed back by the target WLAN application terminal; the authentication signature information carries the authentication request message sent by the network adapter, session information, and the certificate and signature of the target WLAN application terminal; The WLAN application terminal information sending module is used to send the binding code and AP network access information to the target WLAN application terminal through a pre-established secure connection channel if the device legitimacy check passes; the secure connection channel is pre-established between the network adapter and the target WLAN application terminal; after the device identity authentication requested to the cloud platform passes, the target WLAN application terminal accesses the AP network according to the binding code and AP network access information; The test report generation module is used to obtain the execution log data after the target WLAN application terminal accesses the AP network, and send the execution log data to the test management platform; The test management platform is used to verify whether the target WLAN application terminal interface complies with the protocol consistency specification according to the execution log data, and generate a test report; the test report includes the test process data and the determination result of the target WLAN application terminal protocol consistency.

8. A computer device comprising a memory, a processor and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the method according to any one of claims 1 to 6 is implemented.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method according to any one of claims 1 to 6 is implemented.

10. A computer program product, characterized in that The computer program product comprises a computer program, and when the computer program is executed by a processor, the method according to any one of claims 1 to 6 is implemented.

Images