Operation terminal, air conditioner and air conditioning system

Abstract

The present invention provides an operation terminal comprising: an auxiliary controller capable of communicating with a main controller provided in an air conditioner; an encryption chip capable of communicating with the auxiliary controller; the encryption chip is randomly selected in a preset stock library; the auxiliary controller is configured to execute startup management after being powered on, call equipment information of the encryption chip which is set randomly and obtain the type of the encryption chip; calling identity information of the encryption chip based on an authentication request sent by the main controller and sending the identity information to the main controller to verify legality; a challenge message sent by the main controller is responded, decryption is carried out based on a preset decryption algorithm, and a random number request is sent to the encryption chip; a decryption result and a random number generated by the encryption chip are packaged and sent to the main controller; and when the main controller verifies the decryption result successfully, starting management is ended, and operation control is executed to operate the air conditioner. The invention further provides an air conditioner and an air conditioning system. The safety of the air conditioning system can be improved.

Description

Technical Field

[0001] The present invention relates to the technical field of air conditioning, and in particular to an operating terminal, an air conditioner and an air conditioning system. Background Art

[0002] With the rapid growth of the air conditioning industry in recent years, more and more counterfeit operation terminals have emerged. Counterfeit operation terminals may cause security issues. Unauthorized access to the air conditioning system may lead to unauthorized changes, affecting the performance of the equipment and causing malfunctions, including incorrect temperature settings, improper working modes or abnormal wind speed control, which may lead to energy waste or an uncomfortable environment.

[0003] In the prior art, software encryption algorithms are usually used to solve this problem, such as the solution disclosed in Chinese patent application (CN113091224A): "including a control chip and an encryption chip, the control chip has a preset session key, prefabricated information and a second encryption algorithm; the encryption chip has the preset information solidified and written into the management password, and the encryption chip also has a first encryption algorithm and a second encryption algorithm; after power-on startup, the control chip sends the preset session key seed of the preset session key to the encryption chip, and the encryption chip generates a session key by using the session key seed of the preset session key and the management password through the first encryption algorithm; the control chip sends a random number to the encryption chip, and the encryption chip calculates a verification result by using the second encryption algorithm based on the random number, the prefabricated session key and the prefabricated information; the control chip calculates the result by using the second encryption algorithm based on the random number, the prefabricated session key and the prefabricated information, and the control chip obtains the verification result of the encryption chip, and compares its own calculation result with the obtained verification result. When the comparison is consistent, the normal control program is entered, and when the comparison is inconsistent, the normal control program cannot be entered."

[0004] However, in the actual production and sales process, some counterfeiters will intercept the communication telegrams between the control chip and the encryption chip, reverse the communication content, and then forge an operating terminal to disrupt sales. Summary of the invention

[0005] In order to address the problem that during the actual production and sales process, some counterfeiters will intercept the communication telegrams between the control chip and the encryption chip, reverse the communication content, and then forge an operation terminal to disrupt sales, the first aspect of this application designs and provides an operation terminal.

[0006] An operation terminal, used for operating an air conditioner, comprises: an auxiliary controller, which can communicate with a main controller arranged in the air conditioner; and an encryption chip, which can communicate with the auxiliary controller.

[0007] In one or more embodiments of the present application, the encryption chip is randomly selected from a preset stock library, and any stock library is provided with a plurality of encryption chips; the stock library is randomly selected from a material library, and the proportions of the plurality of encryption chips in each stock library in the material library are different; the encryption chips in the material library all have the same packaging structure;

[0008] In one or more embodiments of the present application, the auxiliary controller is configured to perform power-on management after power-on, call the device information of the randomly set encryption chip and obtain the type of the encryption chip based on the device information; call the identity information of the encryption chip based on the authentication request sent by the main controller and send it to the main controller to verify the legitimacy of the encryption chip; after verifying the legitimacy of the encryption chip, respond to the challenge message sent by the main controller, decrypt based on a preset decryption algorithm and send a random number request to the encryption chip; package the decryption result and the random number generated by the encryption chip and send them to the main controller; when the main controller verifies that the decryption result is successful, end the power-on management and execute operation control to operate the air conditioner.

[0009] In one or more embodiments of the present application, the operating terminal is a wire-controlled control unit.

[0010] In one or more embodiments of the present application, the operation terminal is a centralized control unit.

[0011] In one or more embodiments of the present application, the challenge message is generated by the main controller in the following manner: using a random number generator to generate a random number to generate a first layer of ciphertext; receiving a public key generated based on an asymmetric encryption algorithm and using the public key to encrypt the first layer of ciphertext to generate a second layer of ciphertext; generating a random first symmetric key, using the first symmetric key to encrypt the random number to generate a third layer of ciphertext, using a cyclic redundancy check algorithm to perform a cyclic redundancy check on the third layer of ciphertext, and encapsulating the third layer of ciphertext and the cyclic redundancy check value into a first data packet; encoding the first data packet to generate a fourth layer of ciphertext, and using the fourth layer of ciphertext as the challenge message and transmitting it to the auxiliary controller via a text protocol.

[0012] In one or more embodiments of the present application, the auxiliary controller performs the following steps when decrypting based on a preset decryption algorithm: decoding the challenge message to restore the challenge message to first binary data; using the cyclic redundancy check algorithm to verify the first binary data; using the pre-shared first symmetric key to decrypt the first binary data to obtain the random number generated by the random number generator; using an asymmetric encryption algorithm to generate a private key to perform secondary encryption on the decrypted random number to obtain a decryption result.

[0013] In one or more embodiments of the present application, the auxiliary controller performs the following steps when encapsulating the decryption result and the random number generated by the encryption chip: generating a random second symmetric key, encrypting the decryption result and the random number generated by the encryption chip using the second symmetric key to generate encrypted data, performing a cyclic redundancy check on the encrypted data using the cyclic redundancy check algorithm, and encapsulating the encrypted data and the cyclic redundancy check value into a second data packet; encoding the second data packet to generate an encapsulation result and transmitting the encapsulation result to the main controller via a text protocol.

[0014] In one or more embodiments of the present application, the encapsulation result is decrypted by the main controller in the following manner: decoding the encapsulation result to restore the encapsulation result to second binary data; using the cyclic redundancy check algorithm to verify the second binary data; using a pre-shared second symmetric key to decrypt the second binary data to obtain the decryption result and the random number generated by the encryption chip; the main controller is configured to verify that the decryption result is successful when the correlation between the decryption result and the second-layer ciphertext meets a set condition; otherwise, verifying that the decryption result fails.

[0015] A second aspect of the present application provides an air conditioner, including a main controller, which can communicate with an auxiliary controller arranged in an operation terminal, and the auxiliary controller is also provided with an encryption chip.

[0016] In one or more embodiments of the present application, the encryption chip is randomly selected from a preset stock library, and any stock library is provided with multiple encryption chips; the stock library is randomly selected from a material library, and the proportions of the multiple encryption chips in each of the material libraries are different; the encryption chips in the material library all have the same packaging structure.

[0017] In one or more embodiments of the present application, the main controller is configured to send an authentication request to the identified operation terminal after identifying the operation terminal, receive the randomly set encryption chip identity information sent by the auxiliary controller to verify the legitimacy of the encryption chip; after verifying the legitimacy of the encryption chip, generate a challenge message and send it to the auxiliary controller; receive the encapsulated decryption result output by the auxiliary controller, and allow the operation terminal to operate the air conditioner when the decryption result is verified to be successful.

[0018] In one or more embodiments of the present application, the main controller generates the challenge message by the following method: using a random number generator to generate a random number to generate a first-layer ciphertext; receiving a public key generated based on an asymmetric encryption algorithm and using the public key to encrypt the first-layer ciphertext to generate a second-layer ciphertext; generating a random first symmetric key, using the first symmetric key to encrypt the random number to generate a third-layer ciphertext, using a cyclic redundancy check algorithm to perform a cyclic redundancy check on the third-layer ciphertext, and encapsulating the third-layer ciphertext and the cyclic redundancy check value into a first data packet; encoding the first data packet to generate a fourth-layer ciphertext, and using the fourth-layer ciphertext as the challenge message and transmitting it to the auxiliary controller via a text protocol.

[0019] In one or more embodiments of the present application, the main controller is configured to detect whether there is a challenge message generated by other main controllers after identifying the operation terminal; if a challenge message generated by other main controllers is detected, stop sending authentication requests to the identified operation terminal.

[0020] In one or more embodiments of the present application, before sending the authentication request, the main controller detects the number of identifiable operation terminals and sorts the identifiable operation terminals in order of identification, and sends authentication requests to the operation terminals in order of sorting.

[0021] A third aspect of the present application provides an air conditioning system, comprising: an operation terminal, in which an auxiliary controller and an encryption chip communicating with the auxiliary controller are disposed; and an air conditioner, in which a main controller is disposed.

[0022] In one or more embodiments of the present application, the encryption chip is randomly selected from a preset stock library, and any stock library is provided with a plurality of encryption chips; the stock library is randomly selected from a material library, and the proportions of the plurality of encryption chips in each stock library in the material library are different; the encryption chips in the material library all have the same packaging structure;

[0023] In one or more embodiments of the present application, the auxiliary controller is configured to perform power-on management after power-on, call the device information of the randomly set encryption chip and obtain the type of the encryption chip based on the device information; call the identity information of the encryption chip based on the authentication request sent by the main controller and send it to the main controller to verify the legitimacy of the encryption chip; after verifying the legitimacy of the encryption chip, respond to the challenge message sent by the main controller, decrypt based on a preset decryption algorithm and generate a random number request to the encryption chip; encapsulate the decryption result and the random number generated by the encryption chip and send them to the main controller; end the power-on management and perform operation control to operate the air conditioner when the main controller verifies that the decryption result is successful;

[0024] In one or more embodiments of the present application, the main controller is configured to send an authentication request to the identified operation terminal after identifying the operation terminal, receive the randomly set encryption chip identity information sent by the auxiliary controller to verify the legitimacy of the encryption chip; after verifying the legitimacy of the encryption chip, generate a challenge message and send it to the auxiliary controller; receive the encapsulated decryption result output by the auxiliary controller, and allow the operation terminal to operate the air conditioner when the decryption result is verified to be successful.

[0025] In the present application, the production personnel cannot obtain the type of the encryption chip. The air conditioner initiates an identity authentication request to the operation terminal. After several rounds of security information interaction, it is finally determined whether the operation terminal is a legal or illegal device. Even if the counterfeiter intercepts the communication message, since it cannot obtain the type of the encryption chip, it cannot infer the communication content of the air conditioner, which effectively improves security.

[0026] After reading the specific embodiments of the present invention in conjunction with the accompanying drawings, other features and advantages of the present invention will become more clear. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0028] Figure 1 A flowchart of an auxiliary controller in an operation terminal provided by one or more embodiments of the present application;

[0029] Figure 2 A flowchart of a main controller generating a challenge message in one or more implementation modes of the present application;

[0030] Figure 3 A schematic diagram of the structure of a challenge message in one or more implementation modes of the present application;

[0031] Figure 4 A flowchart of assisting a controller in decrypting in one or more embodiments of the present application;

[0032] Figure 5 This is a flow chart of the auxiliary controller packaging the decryption result and the random number generated by the encryption chip in one or more embodiments of the present application;

[0033] Figure 6 This is a flow chart of when the main controller decrypts the encapsulation result in one or more implementation modes of the present application;

[0034] Figure 7 A flowchart of a main controller in one or more embodiments of the present application;

[0035] Figure 8 A flowchart of a main controller in one or more embodiments of the present application;

[0036] Fig. 9 A flowchart of a main controller in one or more embodiments of the present application;

[0037] Fig.10 A flow chart of an air conditioning system in one or more embodiments of the present application;

[0038] Fig.11 This is a schematic diagram of the air conditioning system structure in one or more embodiments of the present application;

[0039] Fig.12 This is a schematic diagram of the air conditioning system structure in one or more embodiments of the present application;

[0040] Fig.13 This is a schematic diagram of the air conditioning system structure in one or more embodiments of the present application;

[0041] Fig.14 This is a schematic diagram of the structure of a material preparation warehouse in one or more embodiments of the present application.

[0042] In the figure, 10a, outdoor unit; 10b, outdoor unit; 20a, indoor unit; 20b, indoor unit; 20n, indoor unit; 30a, wire control unit; 30b, wire control unit; 30n, wire control unit; 21a, indoor unit; 21b, indoor unit; 21n, indoor unit; 31a, wire control unit; 31b, wire control unit; 31n, wire control unit; 40a, centralized operation unit; 40b, centralized operation unit; 100, air conditioner; 200, operation terminal; 102, main controller; 202, auxiliary controller; 204, encryption chip. DETAILED DESCRIPTION

[0043] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0044] In the description of the present application, it should be understood that the terms "center", "up", "down", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inside", "outside", etc., indicating orientations or positional relationships, are based on the orientations or positional relationships shown in the accompanying drawings and are only for the convenience of describing the present application and simplifying the description, and do not indicate or imply that the referred device or element must have a specific orientation, be constructed and operated in a specific orientation, and therefore should not be understood as a limitation on the present application.

[0045] The terms "first", "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Thus, a feature defined as "first" or "second" may explicitly or implicitly include one or more of the features. In the description of this application, unless otherwise specified, "plurality" means two or more.

[0046] In the description of this application, it should be noted that, unless otherwise clearly specified and limited, the terms "installed", "connected", and "connected" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be an indirect connection through an intermediate medium, or it can be the internal communication of two components. For ordinary technicians in this field, the specific meanings of the above terms in this application can be understood according to specific circumstances.

[0047] In the present invention, unless otherwise clearly stipulated and limited, a first feature being "above" or "below" a second feature may include that the first and second features are in direct contact, or may include that the first and second features are not in direct contact but are in contact through another feature between them. Moreover, a first feature being "above", "above" and "above" a second feature includes that the first feature is directly above and obliquely above the second feature, or simply means that the first feature is higher in level than the second feature. A first feature being "below", "below" and "below" a second feature includes that the first feature is directly below and obliquely below the second feature, or simply means that the first feature is lower in level than the second feature.

[0048] The disclosure below provides many different embodiments or examples to realize different structures of the present invention. In order to simplify the disclosure of the present invention, the parts and settings of specific examples are described below. Of course, they are only examples, and the purpose is not to limit the present invention. In addition, the present invention can repeat reference numbers and / or reference letters in different examples, and this repetition is for the purpose of simplicity and clarity, which itself does not indicate the relationship between the various embodiments and / or settings discussed. In addition, the present invention provides various specific examples of processes and materials, but those of ordinary skill in the art can be aware of the application of other processes and / or the use of other materials.

[0049] Figure 1 A schematic diagram showing the structure of an air conditioning system provided by one or more embodiments of the present invention; Figure 2 An example of a refrigerant circuit formed by the air conditioning system according to the embodiment of the present invention is shown.

[0050] The air conditioning system is installed in buildings such as apartments, hotels, office buildings, and houses, etc. The air conditioning system is configured to selectively perform a heating operation or a cooling operation.

[0051] A refrigeration cycle is integrated into the air conditioning system. A compressor, condenser, throttling device and evaporator are used in the refrigeration cycle. The refrigeration cycle includes a series of processes involving compression, condensation, expansion and evaporation to cool or heat the indoor space.

[0052] From a principle perspective, low-temperature, low-pressure refrigerant enters the compressor, which compresses it into high-temperature, high-pressure refrigerant gas and discharges the compressed refrigerant gas. The discharged refrigerant gas flows into the condenser. The condenser condenses the compressed refrigerant into a liquid phase, and the heat is released to the surrounding environment through the condensation process.

[0053] The throttling device expands the high-temperature and high-pressure liquid refrigerant condensed in the condenser into a low-pressure liquid refrigerant. The evaporator evaporates the refrigerant expanded in the throttling device and returns the refrigerant gas in a low-temperature and low-pressure state to the compressor. The evaporator can achieve a refrigeration effect by utilizing the latent heat of evaporation of the refrigerant to exchange heat with the material to be cooled. In the entire cycle, the air conditioning system can adjust the temperature of the indoor space.

[0054] The air conditioning system includes an outdoor unit and an indoor unit connected to each other. Fig.11 A combination is shown in FIG. 1 , which includes two outdoor units 10a and 10b, wherein the outdoor unit 10a is matched with a plurality of indoor units (20a, 20b...20n), and the outdoor unit 10b is matched with a plurality of indoor units (21a, 21b...21n). In the present application, there is no particular restriction on the number of outdoor units and indoor units. Figure 1 and Figure 2 In the same manner as shown in the indoor unit and the outdoor unit, only one indoor unit and one outdoor unit are arranged in one air conditioning system, or multiple indoor units and multiple outdoor units are arranged.

[0055] The outdoor unit is provided with an outdoor controller, which serves as the outdoor unit, that is, the control device on the heat source side; the indoor unit is provided with an indoor controller, which serves as the indoor unit, that is, the control device on the utilization side; the centralized operation unit is matched with the outdoor unit, such as Fig.11 As shown, a centralized operation unit 40a (centralized operation unit 40a) is matched with the outdoor unit 10a, and a centralized operation unit 40b (centralized operation unit 40b) is matched with the outdoor unit 10b. The centralized operation unit controls all indoor units connected to the outdoor unit. For example, the centralized operation unit 40b can control the indoor units 20a, 20b, ..., 20n; the centralized operation unit 40a can control the indoor units 21a, 21b, ..., 21n, the indoor units 20a, 20b, ..., 20n are respectively connected to the wire control control units 30a, 30b, ..., 30n, and the indoor units 21a, 21b, ..., 21n are respectively connected to the wire control control units 31a, 31b, ..., 31n, and the wire control control units control each indoor unit respectively.

[0056] The outdoor controller is connected to each indoor controller via a transmission line to form a control system as an air conditioning system.

[0057] The outdoor controller is provided with a processor, which is in communication connection with the indoor controller, and is connected to actuators such as a compressor and an outdoor fan, and controls the connected actuators. The processor in the outdoor controller may be a dedicated processor, a central processing unit (CPU), etc. The outdoor controller is also provided with a storage module, which may include a volatile memory and / or a non-volatile memory. The processor in the outdoor controller may access the storage module to execute instructions stored in the storage module to implement related functions. The outdoor controller is also provided with an interface unit, which includes a hardware interface (e.g., a serial interface) and a software interface (e.g., a wireless communication protocol interface).

[0058] The indoor controller is provided with a processor, and the processor in the indoor controller is connected to the indoor controller, the centralized operation unit, and the wire control unit, and is also connected to actuating elements such as the indoor fan, and controls the connected actuating elements. The processor in the indoor controller may be a dedicated processor, a central processing unit (CPU), etc. The indoor controller is also provided with a storage module, and the storage module may include a volatile memory and / or a non-volatile memory. The processor in the indoor controller may access the storage module to execute the instructions stored in the storage module to implement related functions. The indoor controller is also provided with an interface unit, and the interface unit includes a hardware interface (such as a serial interface) and a software interface (such as a wireless communication protocol interface).

[0059] A wire control controller is provided in the wire control control unit, and a processor is provided in the wire control controller. The wire control controller is connected to the indoor controller, and is also connected to the display mechanism and / or button on the wire control control unit. The display mechanism and / or button can set the operation mode such as heating and cooling, and can also input the set temperature, etc. An indicator light or a temperature display unit can also be provided on the wire control control unit. The processor in the wire control control unit can be a dedicated processor, a central processing unit (CPU), etc. A storage module is also provided in the wire control controller, and the storage module can include a volatile memory and / or a non-volatile memory. The processor in the wire control controller can access the storage module to execute the instructions stored in the storage module to realize related functions. The wire control controller is also equipped with an interface unit, and the interface unit includes a hardware interface (such as a serial interface) and a software interface (such as a wireless communication protocol interface).

[0060] The centralized operation unit is provided with a centralized controller, and the centralized controller is also provided with a processor. The centralized controller is connected to the indoor controller, and is also connected to the display mechanism and / or button on the centralized operation unit. The centralized operation unit can input operation operations and temperature adjustment operations, and centrally monitor and control multiple indoor units. The centralized operation unit can be set in a designated room or designated area of ​​a building, and multiple indoor units are connected respectively through dedicated cables. The centralized operation unit is also provided with a storage module, and the storage module may include a volatile memory and / or a non-volatile memory. The processor in the centralized operation unit can access the storage module to execute the instructions stored in the storage module to realize related functions. The centralized operation unit is also equipped with an interface unit, and the interface unit includes a hardware interface (such as a serial interface) and a software interface (such as a wireless communication protocol interface).

[0061] The centralized operation unit and the wire control unit are both forged objects. If a forged centralized operation unit and wire control unit are used, it will cause security problems, such as unauthorized access to the air conditioning system, leading to unauthorized changes, affecting the performance of the equipment and causing failures, including incorrect temperature settings, improper working modes, or abnormal wind speed control, etc. To solve this problem, the first aspect of the present application designs and provides an operation terminal, which is used to operate the air conditioner 100.

[0062] An auxiliary controller 202 is provided in the operation terminal, and the auxiliary controller 202 can communicate with the main controller 102 provided in the air conditioner 100 .

[0063] In one or more embodiments of the present application, the operating terminal is a wire control unit, the auxiliary controller 202 is a wire control controller, the air conditioner 100 corresponds to an indoor unit, and the main controller 102 is an indoor controller.

[0064] In one or more embodiments of the present application, the operating terminal is a centralized control unit, the auxiliary controller 202 is a centralized control controller, the air conditioner 100 corresponds to an outdoor unit, and the main controller 102 is an outdoor controller.

[0065] The operation terminal is provided with an encryption chip 204, which can communicate with the auxiliary controller 202. The encryption chip 204 (also called a security chip or a security element) is a hardware device specially designed for storing and processing sensitive information. When the encryption chip 204 receives a random number generation request (RES request), the encryption chip 204 uses an internal random number generator to generate a random number. This random number is generated by a hardware noise source, clock jitter or other physical random events, and has a high degree of entropy (i.e., randomness), thereby preventing prediction or guessing.

[0066] In order to prevent the counterfeiter from reversely deducing the communication message, the present application adopts a combination of hardware and software encryption. The encryption chip 204 is randomly selected from the preset stock library, and any stock library is provided with a variety of encryption chips 204. The stock library is randomly selected from the material library, and the proportion of the multiple encryption chips 204 in each stock library in the material library is different. The encryption chips 204 in the material library have the same packaging structure.

[0067] like Fig.14As shown, for example, four encryption chips 204 can be set in any stock warehouse, and the proportions of the four encryption chips 204 are different in each stock warehouse. On the production side, the stock warehouse randomly selects from the material warehouse; the proportions of the multiple encryption chips 204 in each stock warehouse in the material warehouse are different, and the encryption chips 204 have the same packaging structure and welding process. In this way, in the production stage, it is impossible to distinguish which encryption chip 204 is finally used in each operation terminal, forming a security protection from the hardware perspective.

[0068] Communication library functions of all types of encryption chips 204 are configured in the main controller 102. The communication library functions include functions and methods for communicating with the encryption chip 204 and performing security operations. These library functions can further interact with the encryption chip 204 to implement functions including key management, encryption, decryption, digital signature, random number generation, etc.

[0069] like Figure 1 As shown, the auxiliary controller 202 is configured to perform power-on management after power-on (for example, perform power-on management after the first power-on or initialization, such as Figure 1 As shown in step S101), the device information of the randomly set encryption chip 204 is called to obtain the type of the encryption chip 204 (such as Figure 1 Specifically, when performing boot management, the auxiliary controller 202 first scans the device ID of the encryption chip 204, and identifies the type of the encryption chip 204 through the returned device ID, for example, determines which type of the encryption chip 204 is one of the four encryption chips 204, and executes subsequent steps after confirming the type of the encryption chip 204.

[0070] Further, it is determined whether an authentication request sent by the main controller 102 is received (such as Figure 1 If the authentication request sent by the main controller 102 is received, the identity information of the encryption chip 204 is called based on the authentication request sent by the main controller 102 and sent to the main controller 102 to verify the legitimacy of the encryption chip 204 (such as Figure 1 Specifically, after receiving the authentication request sent by the main controller 102, the auxiliary controller 202 will call the digital signature certificate of the encryption chip 204, and the content of the digital signature certificate includes but is not limited to the name of the air conditioner manufacturer and the name of the encryption chip 204 manufacturer.

[0071] Further, it is determined whether a challenge message (such as Figure 1 If the challenge message sent by the main controller 102 is received, the challenge message is decrypted based on a preset decryption algorithm and a random number request is sent to the encryption chip 204 (such as Figure 1 (as shown in step S106).

[0072] Further, the decryption result and the random number generated by the encryption chip 204 are packaged and sent to the main controller 102 (such as Figure 1 If the main controller 102 verifies that the decryption result is successful (as shown in step S107), Figure 1 As shown in step S108 in the figure), the boot management is terminated (as shown in step S108 in the figure). Figure 1 As shown in step S109), execute operation control (such as Figure 1 The operation terminal has the authority to operate the air conditioner 100.

[0073] For the operation terminal provided in the first aspect of the present application, the production personnel cannot obtain the type of the encryption chip 204 therein, and the air conditioner 100 initiates an identity authentication request for the operation terminal. After several rounds of security information interaction, it is finally determined whether the operation terminal is a legal or illegal device. Even if the counterfeiter intercepts the communication message, since it cannot obtain the type of the encryption chip 204 therein, it cannot infer the communication content of the air conditioner 100, thereby effectively improving security.

[0074] like Figure 2 As shown, in one or more embodiments of the present application, the challenge message is generated by the main controller 102 in the following manner:

[0075] Use a random number generator to generate random numbers and generate the first layer of ciphertext, such as Figure 2 As shown in step S201 in the above example, a set of 32-byte random numbers R1 may be generated as the starting data.

[0076] Receive the public key generated based on the asymmetric encryption algorithm and use the public key to encrypt the first layer of ciphertext to generate the second layer of ciphertext, such as Figure 2 As shown in step S202. Exemplarily, the RSA asymmetric encryption algorithm is selected to generate an asymmetric key pair, including a public key and a private key. The public key is used to encrypt the random number R1 to generate the second layer ciphertext C1, that is, a set of 128-byte checkvalues.

[0077] Generate a random first symmetric key, use the first symmetric key to encrypt the random number, generate a third-layer ciphertext, use a cyclic redundancy check algorithm to perform a cyclic redundancy check on the third-layer ciphertext, and encapsulate the third-layer ciphertext and the cyclic redundancy check value into a first data packet, such as Figure 2As shown in step S203. Exemplarily, the random number R1 is then encrypted using the AES symmetric algorithm, and the third-layer ciphertext is 256 bytes of encrypted data. The 256-byte data is subjected to a cyclic redundancy check, and the third-layer ciphertext and the cyclic redundancy check value are packaged as a first data packet. The third-layer ciphertext and the cyclic redundancy check value can also be packaged into a library file, and an API interface is provided so that the operating terminal software engineer and the air conditioner 100 software engineer can call and use it.

[0078] The first data packet is encoded to generate a fourth-layer ciphertext, and the fourth-layer ciphertext is used as a challenge message and transmitted to the auxiliary controller 202 through a text protocol, such as Figure 2 As shown in step S204. For example, BASE64 can be used to perform a final encryption encapsulation on the plain text, increasing the difficulty of a third party to crack the message, making the data more secure.

[0079] Figure 3 The structure diagram of the challenge message is as follows:

[0080]

[0081]

[0082]

[0083]

[0084]

[0085] like Figure 4 As shown, the auxiliary controller 202 performs the following steps when decrypting based on a preset decryption algorithm:

[0086] The challenge message is decoded to restore the challenge message to the first binary data (plain text), such as Figure 4 As shown in step S301;

[0087] The first binary data is verified using the same cyclic redundancy check algorithm, such as Figure 4 As shown in step S302;

[0088] The first binary data is decrypted using the pre-shared first symmetric key to obtain a random number generated by a random number generator, such as Figure 4 As shown in step S303;

[0089] Use an asymmetric encryption algorithm to generate a private key and re-encrypt the random number obtained by decryption to obtain the decryption result, such as Figure 4 As shown in step S304.

[0090] That is, after receiving the challenge message, the auxiliary controller 202 performs the outermost three layers of primary decryption to obtain the random value sent by the main controller 102, and then calls the private key generated by the asymmetric encryption algorithm for calculation, and performs secondary encryption on the decrypted random number to obtain the decryption result.

[0091] The auxiliary controller 202 further encapsulates the decryption result and the random number generated by the encryption chip 204, specifically using the following method: Figure 5 Multiple steps shown.

[0092] Generate a random second symmetric key, such as Figure 5 As shown in step S401.

[0093] The decryption result and the random number generated by the encryption chip 204 are encrypted using the second symmetric key to generate encrypted data, such as Figure 5 As shown in step S402.

[0094] A cyclic redundancy check algorithm is used to perform a cyclic redundancy check on the encrypted data, and the encrypted data and the cyclic redundancy check value are encapsulated into a second data packet, such as Figure 5 As shown in step S403.

[0095] Encode the second data packet to generate an encapsulation result and transmit the encapsulation result to the main controller 102 via a text protocol, such as Figure 5 As shown in step S404.

[0096] That is, the data sent by the auxiliary controller 202 to the main controller 102 is also data encrypted and encapsulated by AES, CRC and BASE64.

[0097] The encapsulation result is decrypted by the main controller 102 in the following manner to decode the encapsulation result to restore the encapsulation result to the second binary data (such as Figure 6 ); using a cyclic redundancy check algorithm to check the second binary data (such as Figure 6 Using the pre-shared second symmetric key to decrypt the second binary data to obtain a decryption result and a random number generated by the encryption chip 204 (such as Figure 6 Determine whether the correlation between the decryption result and the second-layer ciphertext satisfies the set condition (such as Figure 6 The main controller 102 is configured to verify the success of the decryption result when the correlation between the decryption result and the second layer ciphertext meets the set condition (such as Figure 6 Otherwise, the verification of the decryption result fails (as shown in step S505). Figure 6 (as shown in step S506), send warning information.

[0098] The second aspect of the present application provides an air conditioner 100, which includes a main controller 102, which can communicate with an auxiliary controller 202 provided in an operation terminal, and an encryption chip 204 is provided in the auxiliary controller 202. After detecting that an operation terminal is connected to the communication bus, the air conditioner 100 can actively initiate an identity authentication request for the operation terminal, and after several rounds of security information interaction, finally determine whether the operation terminal is a legal device or an illegal device.

[0099] Specifically, the encryption chip 204 is randomly selected from a preset stock library, and any stock library is provided with multiple encryption chips 204; the stock library is randomly selected from the material library, and the proportions of the multiple encryption chips 204 in each stock library in the material library are different; the encryption chips 204 in the material library all have the same packaging structure.

[0100] In one or more embodiments of the present application, the main controller 102 executes the following Figure 7 Multiple steps in .

[0101] Identify the operating terminal, such as Figure 7 As shown in step S601.

[0102] Send an authentication request to the identified operation terminal, such as Figure 7 As shown in step S602.

[0103] Receive the randomly set encryption chip 204 identity information sent by the auxiliary controller 202 to verify the legitimacy of the encryption chip 204, such as Figure 7 As shown in step S603.

[0104] Verify the legitimacy of the encryption chip 204, such as Figure 7 As shown in step S604.

[0105] When the encryption chip 204 is legitimate, a challenge message is generated and sent to the auxiliary controller 202, such as Figure 7 As shown in step S605.

[0106] The receiving auxiliary controller 202 outputs the encapsulation and decryption result, such as Figure 7 As shown in step S606.

[0107] Verify the decryption result, such as Figure 7 As shown in step S607.

[0108] When the decryption result is successfully verified, the operation terminal is allowed to operate the air conditioner 100, such as Figure 7 As shown in step S608.

[0109] In one or more embodiments of the present application, the challenge message is generated by the main controller 102 in the following manner:

[0110] A random number generator is used to generate a random number to generate the first-layer ciphertext. For example, a set of 32-byte random numbers R1 can be generated as the starting data.

[0111] Receive a public key generated based on an asymmetric encryption algorithm and use the public key to encrypt the first layer of ciphertext to generate a second layer of ciphertext. Exemplarily, select the RSA asymmetric encryption algorithm to generate an asymmetric key pair, including a public key and a private key. Use the public key to encrypt the random number R1 to generate the second layer of ciphertext C1, that is, a set of 128-byte check values.

[0112] Generate a random first symmetric key, use the first symmetric key to encrypt the random number, generate a third-layer ciphertext, use a cyclic redundancy check algorithm to perform a cyclic redundancy check on the third-layer ciphertext, and encapsulate the third-layer ciphertext and the cyclic redundancy check value into a first data packet. Exemplarily, the random number R1 is then encrypted using the AES symmetric algorithm, and the third-layer ciphertext is 256 bytes of encrypted data. Perform a cyclic redundancy check on this 256-byte data, and encapsulate the third-layer ciphertext and the cyclic redundancy check value into a first data packet. The third-layer ciphertext and the cyclic redundancy check value can also be packaged into a library file, and an API interface is provided so that the operating terminal software engineer and the air conditioner 100 software engineer can call and use it.

[0113] The first data packet is encoded to generate a fourth-layer ciphertext, and the fourth-layer ciphertext is used as a challenge message and transmitted to the auxiliary controller 202 through a text protocol. For example, BAS E64 can be used to perform a final encryption encapsulation on the plaintext to increase the difficulty of a third party to crack the message, making the data more secure.

[0114] An example of the fourth-level ciphertext is as follows:

[0115]

[0116]

[0117]

[0118]

[0119]

[0120] The auxiliary controller 202 performs the following steps when decrypting based on a preset decryption algorithm:

[0121] Decoding the challenge message to restore the challenge message to first binary data (plain text);

[0122] Using the same cyclic redundancy check algorithm to check the first binary data;

[0123] Decrypting the first binary data using a pre-shared first symmetric key to obtain a random number generated by a random number generator;

[0124] Use an asymmetric encryption algorithm to generate a private key and perform secondary encryption on the decrypted random number to obtain the decrypted result.

[0125] That is, after receiving the challenge message, the auxiliary controller 202 performs the outermost three layers of primary decryption to obtain the random value sent by the main controller 102, and then calls the private key generated by the asymmetric encryption algorithm for calculation, and performs secondary encryption on the decrypted random number to obtain the decryption result.

[0126] The auxiliary controller 202 further encapsulates the decryption result and the random number generated by the encryption chip 204, specifically using the following method: Figure 5 Multiple steps shown.

[0127] Generate a random second symmetric key.

[0128] The decryption result and the random number generated by the encryption chip 204 are encrypted using the second symmetric key to generate encrypted data.

[0129] A cyclic redundancy check algorithm is used to perform a cyclic redundancy check on the encrypted data, and the encrypted data and the cyclic redundancy check value are encapsulated into a second data packet.

[0130] The second data packet is encoded to generate an encapsulation result, and the encapsulation result is transmitted to the main controller 102 through a text protocol.

[0131] That is, the data sent by the auxiliary controller 202 to the main controller 102 is also data encrypted and encapsulated by AES, CRC and BASE64.

[0132] The encapsulation result is decrypted by the main controller 102 in the following manner: decoding the encapsulation result to restore the encapsulation result to the second binary data; using a cyclic redundancy check algorithm to verify the second binary data; using a pre-shared second symmetric key to decrypt the second binary data to obtain a decryption result and a random number generated by the encryption chip 204; judging whether the correlation between the decryption result and the second-layer ciphertext meets the set conditions, such as whether they are equal; the main controller 102 is configured to verify that the decryption result is successful when the correlation between the decryption result and the second-layer ciphertext meets the set conditions; otherwise, verifying the decryption result fails and sending an early warning message.

[0133] Since the air conditioner 100 and the operation terminal are not strictly one-to-one installation relationships, in some usage scenarios, there are multiple air conditioners 100 and one operation terminal. To solve this problem, the air conditioner 100 of the present application is designed with a first preemptive authentication mechanism, such as Figure 8 As shown, the main controller 102 is configured to detect whether there is a challenge message generated by other main controllers 102 (such as Figure 8 If a challenge message generated by another main controller 102 is detected, the authentication request is stopped from being sent to the identified operation terminal (eg, Figure 8 (as shown in step S703).

[0134] Since the air conditioner 100 and the operation terminal are connected via a communication bus, each air conditioner 100 can monitor all information on the communication bus. Therefore, the first preemptive authentication mechanism is that if an air conditioner 100 finds that there is an operation terminal, but before initiating the authentication process, it detects a challenge message from another air conditioner 100, it terminates its own authentication process to ensure that only one air conditioner 100 on the communication bus is authenticating the operation terminal. If the authentication process is normal, they all continue to operate. Otherwise, if the authenticated air conditioner 100 alarms that the authentication of the operation terminal fails, other air conditioners 100 will also obtain the alarm information, that is, the alarm information will be synchronized to other air conditioners 100.

[0135] In some usage scenarios, there is one air conditioner 100 and multiple operation terminals. To solve this problem, a second preemptive authentication mechanism is designed in the air conditioner 100 of the present application, such as Fig. 9 As shown, before sending the authentication request, the main controller 102 detects the number of identifiable operation terminals and sorts the identifiable operation terminals in the order of identification, and sends the authentication request to the operation terminals in sequence according to the order. That is, the main controller 102 sorts the identifiable operation terminals in the order of identification (such as Fig. 9 ), sending an authentication request to the first ranked operation terminal (as shown in step S803). Fig. 9 The authentication process is executed until it is completed, and then an authentication request is sent to the second-ranked operation terminal (as shown in step S804). Fig. 9 As shown in step S811), until the authentication of all the sorted operation terminals is completed.

[0136] That is, before initiating authentication, the air conditioner 100 will monitor the total number of operating terminals on the communication bus, and then sort them based on the operating terminal received first, for example, performing encryption authentication on each operating terminal one by one at an interval of one hour.

[0137] The first preemption authentication mechanism and the second preemption authentication mechanism help to achieve resource sharing without causing deadlock or resource contention problems.

[0138] The third aspect of the present application provides an air conditioning system, including an operation terminal and an air conditioner 100. The operation terminal is provided with an auxiliary controller 202 and an encryption chip 204 that can communicate with the auxiliary controller 202, and the air conditioner 100 is provided with a main controller 102. Fig.10 The flow chart of the air conditioning system is shown in Figure 1. Figures 11 to 13 It is a structural diagram of the air conditioning system.

[0139] The encryption chip 204 is randomly selected from a preset stock library, and any stock library is provided with a plurality of encryption chips 204; the stock library is randomly selected from a material library, and the proportion of the plurality of encryption chips 204 in each stock library in the material library is different; the encryption chips 204 in the material library all have the same packaging structure;

[0140] The auxiliary controller 202 is configured to perform power-on management after power-on, call the device information of the randomly set encryption chip 204 and obtain the type of the encryption chip 204 based on the device information; call the identity information of the encryption chip 204 based on the authentication request sent by the main controller 102 and send it to the main controller 102 to verify the legitimacy of the encryption chip 204; after verifying the legitimacy of the encryption chip 204, respond to the challenge message sent by the main controller 102, decrypt based on a preset decryption algorithm and generate a random number request to the encryption chip 204; encapsulate the decryption result and the random number generated by the encryption chip 204 and send them to the main controller 102; when the main controller 102 successfully verifies the decryption result, the power-on management ends and the operation control is performed to operate the air conditioner 100;

[0141] The main controller 102 is configured to send an authentication request to the identified operation terminal after identifying the operation terminal, receive the randomly set encryption chip 204 identity information sent by the auxiliary controller 202 to verify the legitimacy of the encryption chip 204; after verifying the legitimacy of the encryption chip 204, generate a challenge message and send it to the auxiliary controller 202; receive the encapsulated decryption result output by the auxiliary controller 202, and allow the operation terminal to operate the air conditioner 100 when the verification and decryption result are successful.

[0142] In the description of the above embodiments, specific features, structures, materials or characteristics may be combined in a suitable manner in any one or more embodiments or examples.

[0143] The above are only specific embodiments of the present invention, but the protection scope of the present invention is not limited thereto. Any changes or substitutions that can be easily thought of by a person skilled in the art within the technical scope disclosed by the present invention should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims

1. Operation terminal, used to operate the air conditioner, including: an auxiliary controller that can communicate with a main controller disposed in the air conditioner; an encryption chip, which can communicate with the auxiliary controller; It is characterized in that The encryption chip is randomly selected from a preset stock library, and any stock library is provided with a plurality of encryption chips; the stock library is randomly selected from a material library, and the proportions of the plurality of encryption chips in each stock library in the material library are different; the encryption chips in the material library all have the same packaging structure; The auxiliary controller is configured to perform power-on management after power-on, call the device information of the randomly set encryption chip and obtain the type of the encryption chip based on the device information; call the identity information of the encryption chip based on the authentication request sent by the main controller and send it to the main controller to verify the legitimacy of the encryption chip; after verifying the legitimacy of the encryption chip, respond to the challenge message sent by the main controller, decrypt based on a preset decryption algorithm and send a random number request to the encryption chip; encapsulate the decryption result and the random number generated by the encryption chip and send them to the main controller; when the main controller verifies that the decryption result is successful, end the power-on management and perform operation control to operate the air conditioner.

2. The operation terminal according to claim 1, characterized in that: The challenge message is generated by the main controller in the following manner: Use a random number generator to generate random numbers and generate the first layer of ciphertext; Receiving a public key generated based on an asymmetric encryption algorithm and encrypting the first layer of ciphertext using the public key to generate a second layer of ciphertext; Generate a random first symmetric key, use the first symmetric key to encrypt the random number, generate a third-layer ciphertext, use a cyclic redundancy check algorithm to perform a cyclic redundancy check on the third-layer ciphertext, and encapsulate the third-layer ciphertext and the cyclic redundancy check value into a first data packet; The first data packet is encoded to generate a fourth-layer ciphertext, and the fourth-layer ciphertext is used as the challenge message and transmitted to the auxiliary controller through a text protocol.

3. The operation terminal according to claim 2, characterized in that: The auxiliary controller performs the following steps when decrypting based on a preset decryption algorithm: Decoding the challenge message to restore the challenge message to first binary data; Using the cyclic redundancy check algorithm to check the first binary data; Decrypting the first binary data using the pre-shared first symmetric key to obtain a random number generated by the random number generator; The private key is generated using an asymmetric encryption algorithm and the random number obtained by decryption is encrypted again to obtain a decryption result.

4. The operation terminal according to claim 3, characterized in that: The auxiliary controller performs the following steps when packaging the decryption result and the random number generated by the encryption chip: Generate a random second symmetric key, use the second symmetric key to encrypt the decryption result and the random number generated by the encryption chip to generate encrypted data, use the cyclic redundancy check algorithm to perform a cyclic redundancy check on the encrypted data, and encapsulate the encrypted data and the cyclic redundancy check value into a second data packet; The second data packet is encoded to generate an encapsulation result, and the encapsulation result is transmitted to the main controller through a text protocol.

5. The operation terminal according to claim 4, characterized in that: The encapsulation result is decrypted by the main controller in the following manner: decoding the encapsulation result to restore the encapsulation result to second binary data; and verifying the second binary data using the cyclic redundancy check algorithm; Decrypting the second binary data using a pre-shared second symmetric key to obtain the decryption result and the random number generated by the encryption chip; The main controller is configured to verify that the decryption result is successful when the correlation between the decryption result and the second-layer ciphertext meets a set condition; otherwise, verify that the decryption result fails.

6. Air conditioners, including: A main controller, which can communicate with an auxiliary controller disposed in the operation terminal, wherein the auxiliary controller is also provided with an encryption chip; It is characterized by: The encryption chip is randomly selected from a preset stock library, and any stock library is provided with a plurality of encryption chips; the stock library is randomly selected from a material library, and the proportions of the plurality of encryption chips in each stock library in the material library are different; the encryption chips in the material library all have the same packaging structure; The main controller is configured to send an authentication request to the identified operation terminal after identifying the operation terminal, receive the randomly set encryption chip identity information sent by the auxiliary controller to verify the legitimacy of the encryption chip; after verifying the legitimacy of the encryption chip, generate a challenge message and send it to the auxiliary controller; receive the encapsulated decryption result output by the auxiliary controller, and allow the operation terminal to operate the air conditioner when the decryption result is successfully verified.

7. The air conditioner according to claim 6, characterized in that: The main controller generates the challenge message by the following method: Use a random number generator to generate random numbers and generate the first layer of ciphertext; Receiving a public key generated based on an asymmetric encryption algorithm and encrypting the first layer of ciphertext using the public key to generate a second layer of ciphertext; Generate a random first symmetric key, use the first symmetric key to encrypt the random number, generate a third-layer ciphertext, use a cyclic redundancy check algorithm to perform a cyclic redundancy check on the third-layer ciphertext, and encapsulate the third-layer ciphertext and the cyclic redundancy check value into a first data packet; The first data packet is encoded to generate a fourth-layer ciphertext, and the fourth-layer ciphertext is used as the challenge message and transmitted to the auxiliary controller through a text protocol.

8. The air conditioner according to claim 6, characterized in that: The main controller is configured to detect whether there is a challenge message generated by other main controllers after identifying the operation terminal; if a challenge message generated by other main controllers is detected, stop sending the authentication request to the identified operation terminal.

9. The air conditioner according to claim 6, characterized in that: Before sending the authentication request, the main controller detects the number of identifiable operation terminals and sorts the identifiable operation terminals in the order of identification, and sends the authentication request to the operation terminals in sequence according to the order.

10. An air conditioning system, characterized in that: include: An operating terminal, wherein an auxiliary controller and an encryption chip communicating with the auxiliary controller are provided; An air conditioner, wherein a main controller is provided; It is characterized in that The encryption chip is randomly selected from a preset stock library, and any stock library is provided with a plurality of encryption chips; the stock library is randomly selected from a material library, and the proportions of the plurality of encryption chips in each stock library in the material library are different; the encryption chips in the material library all have the same packaging structure; The auxiliary controller is configured to perform power-on management after power-on, call the device information of the randomly set encryption chip and obtain the type of the encryption chip based on the device information; call the identity information of the encryption chip based on the authentication request sent by the main controller and send it to the main controller to verify the legitimacy of the encryption chip; after verifying the legitimacy of the encryption chip, respond to the challenge message sent by the main controller, decrypt based on a preset decryption algorithm and generate a random number request to the encryption chip; encapsulate the decryption result and the random number generated by the encryption chip and send them to the main controller; end the power-on management and perform operation control to operate the air conditioner when the main controller verifies that the decryption result is successful; The main controller is configured to send an authentication request to the identified operation terminal after identifying the operation terminal, receive the randomly set encryption chip identity information sent by the auxiliary controller to verify the legitimacy of the encryption chip; after verifying the legitimacy of the encryption chip, generate a challenge message and send it to the auxiliary controller; receive the encapsulated decryption result output by the auxiliary controller, and allow the operation terminal to operate the air conditioner when the decryption result is successfully verified.

Images