Operation terminals, air conditioners and air conditioning systems

Abstract

The present invention provides an operation terminal comprising: an auxiliary controller capable of communicating with a main controller disposed in an air conditioner; an encryption chip capable of communicating with the auxiliary controller; an encryption chip randomly selected from a preset stock library; the auxiliary controller configured to perform startup management upon power-up, retrieve device information of the randomly configured encryption chip, and obtain the encryption chip type; retrieve the identity information of the encryption chip based on an authentication request sent by the main controller and transmit it to the main controller for legitimacy verification; respond to a challenge message sent by the main controller, perform decryption based on a preset decryption algorithm, and transmit a random number request to the encryption chip; encapsulate the decryption result and the random number generated by the encryption chip and transmit it to the main controller; and terminate startup management upon successful verification of the decryption result by the main controller and execute operational control to operate the air conditioner. Also provided are an air conditioner and an air conditioning system. The present invention can improve the safety of an air conditioning system.

Description

Technical Field

[0001] The present invention relates to the technical field of air conditioning, and in particular to an operating terminal, an air conditioner and an air conditioning system. Background Art

[0002] With the rapid growth of the air conditioning industry in recent years, counterfeit operating terminals have become increasingly common. Counterfeit operating terminals can pose security risks. Unauthorized access to air conditioning systems can lead to unauthorized changes, impacting equipment performance and causing malfunctions. These can include incorrect temperature settings, improper operating modes, or abnormal fan speed control. These issues can result in wasted energy and an uncomfortable environment.

[0003] The prior art generally uses software encryption algorithms to solve this problem, such as the solution disclosed in Chinese patent application (CN113091224A): "The solution includes a control chip and an encryption chip, wherein the control chip has a preset session key, pre-set information, and a second encryption algorithm. The encryption chip has the preset information fixed therein and a management password written therein, and further has a first encryption algorithm and a second encryption algorithm. Upon power-up, the control chip sends a pre-set session key seed for the preset session key to the encryption chip, which generates a session key by combining the pre-set session key seed with the management password using the first encryption algorithm. The control chip sends a random number to the encryption chip, which calculates a verification result using the second encryption algorithm based on the random number, the pre-set session key, and the pre-set information. The control chip calculates a result using the second encryption algorithm based on the random number, the pre-set session key, and the pre-set information, and obtains a verification result from the encryption chip. The control chip compares its own calculation result with the obtained verification result. If the comparison is consistent, the control chip enters the normal control program. If the comparison is inconsistent, the normal control program cannot enter."

[0004] However, during the actual production and sales process, some counterfeiters will intercept the communication messages between the control chip and the encryption chip, decrypt the communication content, and then forge an operating terminal to disrupt sales. Summary of the Invention

[0005] In response to the problem that during the actual production and sales process, some counterfeiters will intercept the communication telegrams between the control chip and the encryption chip, decrypt the communication content, and then forge an operation terminal to disrupt sales, the first aspect of this application designs and provides an operation terminal.

[0006] An operation terminal is used for operating an air conditioner, comprising: an auxiliary controller which can communicate with a main controller arranged in the air conditioner; and an encryption chip which can communicate with the auxiliary controller.

[0007] In one or more embodiments of the present application, the encryption chip is randomly selected from a preset stock library, and any stock library is provided with multiple encryption chips; the stock library is randomly selected from a material library, and the proportion of the multiple encryption chips in each stock library in the material library is different; the encryption chips in the material library all have the same packaging structure;

[0008] In one or more embodiments of the present application, the auxiliary controller is configured to perform power-on management after power-on, call the device information of the randomly set encryption chip and obtain the type of the encryption chip based on the device information; call the identity information of the encryption chip based on the authentication request sent by the main controller and send it to the main controller to verify the legitimacy of the encryption chip; after verifying the legitimacy of the encryption chip, respond to the challenge message sent by the main controller, decrypt based on a preset decryption algorithm and send a random number request to the encryption chip; encapsulate the decryption result and the random number generated by the encryption chip and send them to the main controller; when the main controller verifies that the decryption result is successful, end the power-on management and execute operation control to operate the air conditioner.

[0009] In one or more embodiments of the present application, the operating terminal is a wire-controlled control unit.

[0010] In one or more embodiments of the present application, the operation terminal is a centralized control unit.

[0011] In one or more embodiments of the present application, the challenge message is generated by the main controller in the following manner: using a random number generator to generate a random number to generate a first-layer ciphertext; receiving a public key generated based on an asymmetric encryption algorithm and using the public key to encrypt the first-layer ciphertext to generate a second-layer ciphertext; generating a random first symmetric key, using the first symmetric key to encrypt the random number to generate a third-layer ciphertext, using a cyclic redundancy check algorithm to perform a cyclic redundancy check on the third-layer ciphertext, and encapsulating the third-layer ciphertext and the cyclic redundancy check value into a first data packet; encoding the first data packet to generate a fourth-layer ciphertext, and using the fourth-layer ciphertext as the challenge message and transmitting it to the auxiliary controller via a text protocol.

[0012] In one or more embodiments of the present application, the auxiliary controller performs the following steps when decrypting based on a preset decryption algorithm: decoding the challenge message to restore the challenge message to first binary data; using the cyclic redundancy check algorithm to verify the first binary data; using the pre-shared first symmetric key to decrypt the first binary data to obtain a random number generated by the random number generator; using an asymmetric encryption algorithm to generate a private key to perform secondary encryption on the decrypted random number to obtain a decryption result.

[0013] In one or more embodiments of the present application, the auxiliary controller performs the following steps when encapsulating the decryption result and the random number generated by the encryption chip: generating a random second symmetric key, encrypting the decryption result and the random number generated by the encryption chip using the second symmetric key to generate encrypted data, performing a cyclic redundancy check on the encrypted data using the cyclic redundancy check algorithm, and encapsulating the encrypted data and the cyclic redundancy check value into a second data packet; encoding the second data packet to generate an encapsulation result and transmitting the encapsulation result to the main controller via a text protocol.

[0014] In one or more embodiments of the present application, the encapsulation result is decrypted by the main controller in the following manner: decoding the encapsulation result to restore the encapsulation result to second binary data; using the cyclic redundancy check algorithm to verify the second binary data; using a pre-shared second symmetric key to decrypt the second binary data to obtain the decryption result and the random number generated by the encryption chip; the main controller is configured to verify that the decryption result is successful when the correlation between the decryption result and the second-layer ciphertext meets a set condition; otherwise, verifying that the decryption result fails.

[0015] A second aspect of the present application provides an air conditioner, comprising a main controller, which can communicate with an auxiliary controller provided in an operation terminal, wherein the auxiliary controller is further provided with an encryption chip.

[0016] In one or more embodiments of the present application, the encryption chip is randomly selected from a preset stock library, and any stock library is provided with multiple encryption chips; the stock library is randomly selected from a material library, and the proportions of the multiple encryption chips in each of the material libraries are different; the encryption chips in the material library all have the same packaging structure.

[0017] In one or more embodiments of the present application, the main controller is configured to send an authentication request to the identified operation terminal after identifying the operation terminal, receive the randomly set encryption chip identity information sent by the auxiliary controller to verify the legitimacy of the encryption chip; after verifying the legitimacy of the encryption chip, generate a challenge message and send it to the auxiliary controller; receive the encapsulated decryption result output by the auxiliary controller, and allow the operation terminal to operate the air conditioner when the decryption result is verified to be successful.

[0018] In one or more embodiments of the present application, the main controller generates the challenge message by the following method: using a random number generator to generate a random number to generate a first-layer ciphertext; receiving a public key generated based on an asymmetric encryption algorithm and using the public key to encrypt the first-layer ciphertext to generate a second-layer ciphertext; generating a random first symmetric key, using the first symmetric key to encrypt the random number to generate a third-layer ciphertext, using a cyclic redundancy check algorithm to perform a cyclic redundancy check on the third-layer ciphertext, and encapsulating the third-layer ciphertext and the cyclic redundancy check value into a first data packet; encoding the first data packet to generate a fourth-layer ciphertext, and using the fourth-layer ciphertext as the challenge message and transmitting it to the auxiliary controller via a text protocol.

[0019] In one or more embodiments of the present application, the main controller is configured to detect whether there is a challenge message generated by other main controllers after identifying the operation terminal; if a challenge message generated by other main controllers is detected, it stops sending authentication requests to the identified operation terminal.

[0020] In one or more embodiments of the present application, before sending the authentication request, the main controller detects the number of identifiable operation terminals and sorts the identifiable operation terminals in order of identification, and sends authentication requests to the operation terminals in sequence according to the sorting.

[0021] A third aspect of the present application provides an air-conditioning system, comprising: an operation terminal in which an auxiliary controller and an encryption chip communicating with the auxiliary controller are provided; and an air conditioner in which a main controller is provided.

[0022] In one or more embodiments of the present application, the encryption chip is randomly selected from a preset stock library, and any stock library is provided with multiple encryption chips; the stock library is randomly selected from a material library, and the proportion of the multiple encryption chips in each stock library in the material library is different; the encryption chips in the material library all have the same packaging structure;

[0023] In one or more embodiments of the present application, the auxiliary controller is configured to perform power-on management after power-on, call device information of a randomly set encryption chip and obtain the type of the encryption chip based on the device information; call identity information of the encryption chip based on an authentication request sent by the main controller and send it to the main controller to verify the legitimacy of the encryption chip; after verifying the legitimacy of the encryption chip, respond to a challenge message sent by the main controller, perform decryption based on a preset decryption algorithm and generate a random number request to the encryption chip; encapsulate the decryption result and the random number generated by the encryption chip and send them to the main controller; and terminate the power-on management and perform operation control to operate the air conditioner when the main controller successfully verifies the decryption result.

[0024] In one or more embodiments of the present application, the main controller is configured to send an authentication request to the identified operation terminal after identifying the operation terminal, receive the randomly set encryption chip identity information sent by the auxiliary controller to verify the legitimacy of the encryption chip; after verifying the legitimacy of the encryption chip, generate a challenge message and send it to the auxiliary controller; receive the encapsulated decryption result output by the auxiliary controller, and allow the operation terminal to operate the air conditioner when the decryption result is verified to be successful.

[0025] In this application, the production personnel cannot obtain the type of the encryption chip. The air conditioner initiates an identity authentication request to the operation terminal. After several rounds of security information interaction, it is finally determined whether the operation terminal is a legal or illegal device. Even if the counterfeiter intercepts the communication message, since it cannot obtain the type of the encryption chip, it cannot infer the communication content of the air conditioner, which effectively improves security.

[0026] Other features and advantages of the present invention will become more apparent after reading the detailed description of the present invention in conjunction with the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following is a brief introduction to the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0028] Figure 1 A flowchart of an auxiliary controller in an operation terminal provided in one or more embodiments of the present application;

[0029] Figure 2 A flowchart of a master controller generating a challenge message in one or more embodiments of the present application;

[0030] Figure 3 This is a schematic diagram of the structure of a challenge message in one or more embodiments of the present application;

[0031] Figure 4 This is a flow chart of assisting the controller in decryption in one or more embodiments of the present application;

[0032] Figure 5 This is a flow chart of the auxiliary controller encapsulating the decryption result and the random number generated by the encryption chip in one or more embodiments of the present application;

[0033] Figure 6 This is a flow chart of the main controller decrypting the encapsulation result in one or more embodiments of the present application;

[0034] Figure 7 This is a flow chart of the main controller in one or more embodiments of the present application;

[0035] Figure 8 This is a flow chart of the main controller in one or more embodiments of the present application;

[0036] Figure 9 This is a flow chart of the main controller in one or more embodiments of the present application;

[0037] Figure 10 A flow chart of an air conditioning system in one or more embodiments of the present application;

[0038] Figure 11 This is a schematic diagram of the air conditioning system structure in one or more embodiments of the present application;

[0039] Figure 12 This is a schematic diagram of the air conditioning system structure in one or more embodiments of the present application;

[0040] Figure 13 This is a schematic diagram of the air conditioning system structure in one or more embodiments of the present application;

[0041] Figure 14 This is a schematic diagram of the structure of the material preparation warehouse in one or more embodiments of the present application.

[0042] In the figure, 10a, outdoor unit; 10b, outdoor unit; 20a, indoor unit; 20b, indoor unit; 20n, indoor unit; 30a, wire control unit; 30b, wire control unit; 30n, wire control unit; 21a, indoor unit; 21b, indoor unit; 21n, indoor unit; 31a, wire control unit; 31b, wire control unit; 31n, wire control unit; 40a, centralized operation unit; 40b, centralized operation unit; 100, air conditioner; 200, operation terminal; 102, main controller; 202, auxiliary controller; 204, encryption chip. DETAILED DESCRIPTION

[0043] The following will be combined with the drawings in the embodiments of this application to clearly and completely describe the technical solutions in the embodiments of this application. Obviously, the embodiments described are only part of the embodiments of this application, not all of the embodiments. Based on the embodiments in this application, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of this application.

[0044] In the description of this application, it should be understood that the terms "center", "up", "down", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inside", "outside", etc., indicating the orientation or position relationship, are based on the orientation or position relationship shown in the accompanying drawings, and are only for the convenience of describing this application and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation on this application.

[0045] The terms "first" and "second" are used for descriptive purposes only and should not be understood to indicate or imply relative importance or implicitly specify the number of the technical features indicated. Therefore, features specified as "first" and "second" may explicitly or implicitly include one or more of such features. In the description of this application, unless otherwise specified, "plurality" means two or more.

[0046] In the description of this application, it should be noted that, unless otherwise expressly specified or limited, the terms "mounted," "connected," and "connected" should be understood broadly. For example, they may refer to fixed, detachable, or integral connections; mechanical or electrical connections; direct or indirect connections through an intermediate medium; and internal communication between two components. Those skilled in the art will understand the specific meanings of the above terms in this application based on the specific circumstances.

[0047] In the present invention, unless otherwise expressly specified or limited, a first feature being "above" or "below" a second feature may include the first and second features being in direct contact, or may include the first and second features being in contact not directly but through another feature therebetween. Moreover, a first feature being "above," "above," and "above" a second feature includes the first feature being directly above and obliquely above the second feature, or simply means that the first feature is at a higher level than the second feature. A first feature being "below," "below," and "below" a second feature includes the first feature being directly below and obliquely below the second feature, or simply means that the first feature is at a lower level than the second feature.

[0048] The disclosure below provides many different embodiments or examples for realizing different structures of the present invention. In order to simplify the disclosure of the present invention, the components and settings of specific examples are described below. Of course, they are merely examples and are not intended to limit the present invention. In addition, the present invention may repeat reference numbers and / or reference letters in different examples. Such repetition is for the purpose of simplicity and clarity and does not in itself indicate the relationship between the various embodiments and / or settings discussed. In addition, the present invention provides examples of various specific processes and materials, but those skilled in the art will recognize the application of other processes and / or the use of other materials.

[0049] Figure 1 A schematic structural diagram of an air conditioning system provided by one or more embodiments of the present invention is shown; Figure 2 An example of a refrigerant circuit formed by the air-conditioning system according to the embodiment of the present invention is shown.

[0050] Air conditioning systems are installed in buildings such as apartments, hotels, office buildings, and residences, etc. The air conditioning systems are configured to selectively perform heating operation or cooling operation.

[0051] Air conditioning systems incorporate a refrigeration cycle. This cycle uses a compressor, condenser, throttling device, and evaporator. The refrigeration cycle involves a series of processes—compression, condensation, expansion, and evaporation—to cool or heat the indoor space.

[0052] In principle, low-temperature, low-pressure refrigerant enters the compressor, which compresses it into high-temperature, high-pressure refrigerant gas and discharges it. The discharged refrigerant gas flows into the condenser. The condenser condenses the compressed refrigerant into a liquid phase, releasing heat into the surrounding environment through the condensation process.

[0053] The throttling device expands the high-temperature, high-pressure liquid refrigerant condensed in the condenser into a low-pressure liquid. The evaporator evaporates the refrigerant expanded in the throttling device and returns the low-temperature, low-pressure refrigerant gas to the compressor. The evaporator achieves a cooling effect by utilizing the latent heat of evaporation to exchange heat with the material being cooled. Throughout this cycle, the air conditioning system regulates the temperature of the indoor space.

[0054] The air conditioning system includes an outdoor unit and an indoor unit connected to each other. Figure 11 A combination is shown in FIG, which includes two outdoor units 10a and 10b, wherein the outdoor unit 10a is matched with a plurality of indoor units (20a, 20b...20n), and the outdoor unit 10b is matched with a plurality of indoor units (21a, 21b...21n). In this application, there is no particular restriction on the number of outdoor units and indoor units. Figure 1 and Figure 2 In the manner shown, the indoor unit and the outdoor unit are the same, and only one indoor unit and one outdoor unit are arranged in one air conditioning system, or multiple indoor units and multiple outdoor units are arranged.

[0055] The outdoor unit is equipped with an outdoor controller, which serves as the outdoor unit, that is, the control device on the heat source side; the indoor unit is equipped with an indoor controller, which serves as the indoor unit, that is, the control device on the utilization side; the centralized operation unit is matched with the outdoor unit, such as Figure 11 As shown, a centralized operation unit 40a (centralized operation unit 40a) is matched with the outdoor unit 10a, and a centralized operation unit 40b (centralized operation unit 40b) is matched with the outdoor unit 10b. The centralized operation unit controls all indoor units connected to the outdoor unit. For example, the centralized operation unit 40b can control the indoor units 20a, 20b, ..., 20n; the centralized operation unit 40a can control the indoor units 21a, 21b, ..., 21n. The indoor units 20a, 20b, ..., 20n are respectively connected to the wire control control units 30a, 30b, ..., 30n. The indoor units 21a, 21b, ..., 21n are respectively connected to the wire control control units 31a, 31b, ..., 31n. The wire control control units control each indoor unit respectively.

[0056] The outdoor controller is connected to each indoor controller via a transmission line to form a control system for an air conditioning system.

[0057] The outdoor controller is provided with a processor, which is in communication with the indoor controller and is connected to actuators such as the compressor and outdoor fan, and controls the connected actuators. The processor in the outdoor controller can be a dedicated processor, a central processing unit (CPU), etc. The outdoor controller is also provided with a storage module, which can include volatile memory and / or non-volatile memory. The processor in the outdoor controller can access the storage module to execute instructions stored in the storage module to implement related functions. The outdoor controller is also equipped with an interface unit, which includes a hardware interface (e.g., a serial interface) and a software interface (e.g., a wireless communication protocol interface).

[0058] The indoor controller is provided with a processor, which is connected to the indoor controller, the centralized operation unit, and the wire control unit, and is also connected to actuators such as the indoor fan, and controls the connected actuators. The processor in the indoor controller can be a dedicated processor, a central processing unit (CPU), etc. The indoor controller is also provided with a storage module, which can include a volatile memory and / or a non-volatile memory. The processor in the indoor controller can access the storage module to execute the instructions stored in the storage module to implement related functions. The indoor controller is also provided with an interface unit, which includes a hardware interface (such as a serial interface) and a software interface (such as a wireless communication protocol interface).

[0059] The wire control control unit is provided with a wire control controller, and the wire control controller is provided with a processor. The wire control controller is connected to the indoor controller and is also connected to the display mechanism and / or buttons on the wire control control unit. The display mechanism and / or buttons can set operating modes such as heating and cooling. In addition, the set temperature can also be input. An indicator light or a temperature display unit can also be provided on the wire control control unit. The processor in the wire control control unit can be a dedicated processor, a central processing unit (CPU), etc. A storage module is also provided in the wire control controller, and the storage module can include volatile memory and / or non-volatile memory. The processor in the wire control controller can access the storage module to execute the instructions stored in the storage module to realize related functions. The wire control controller is also equipped with an interface unit, which includes a hardware interface (such as a serial interface) and a software interface (such as a wireless communication protocol interface).

[0060] The centralized operation unit is provided with a centralized controller, which is also provided with a processor. The centralized controller is connected to the indoor controller and is also connected to the display mechanism and / or buttons on the centralized operation unit. The centralized operation unit can input operating operations and temperature adjustment operations, and centrally monitor and control multiple indoor units. The centralized operation unit can be set in a designated room or designated area of ​​a building, and multiple indoor units are connected respectively through dedicated cables. The centralized operation unit is also provided with a storage module, which may include a volatile memory and / or a non-volatile memory. The processor in the centralized operation unit can access the storage module to execute the instructions stored in the storage module to realize related functions. The centralized operation unit is also equipped with an interface unit, which includes a hardware interface (such as a serial interface) and a software interface (such as a wireless communication protocol interface).

[0061] Both the centralized operation unit and the wired control unit are susceptible to counterfeiting. Using counterfeit centralized operation units and wired control units can lead to security issues, such as unauthorized access to the air conditioning system, unauthorized modifications, and performance issues that can cause malfunctions, including incorrect temperature settings, improper operating modes, or abnormal wind speed control. To address this issue, the first aspect of this application designs and provides an operation terminal for operating the air conditioner 100.

[0062] The operation terminal is provided with an auxiliary controller 202 , which can communicate with the main controller 102 provided in the air conditioner 100 .

[0063] In one or more embodiments of the present application, the operating terminal is a wired control unit, the auxiliary controller 202 is a wired controller, the air conditioner 100 corresponds to an indoor unit, and the main controller 102 is an indoor controller.

[0064] In one or more embodiments of the present application, the operation terminal is a centralized control unit, the auxiliary controller 202 is a centralized controller, the air conditioner 100 corresponds to an outdoor unit, and the main controller 102 is an outdoor controller.

[0065] The operation terminal is equipped with an encryption chip 204, which can communicate with the auxiliary controller 202. The encryption chip 204 (also known as a security chip or security element) is a hardware device specifically designed to store and process sensitive information. When the encryption chip 204 receives a random number generation request (RES request), it uses its internal random number generator to generate a random number. This random number is generated by hardware noise sources, clock jitter, or other physical random events and has a high degree of entropy (i.e., randomness), thus preventing prediction or guessing.

[0066] To prevent counterfeiters from reverse-engineering communication messages, this application employs a combination of hardware and software encryption. Encryption chips 204 are randomly selected from a pre-set stock library, with each stock library containing multiple encryption chips 204. Stock libraries are randomly selected from the material library, with each stock library containing a different ratio of multiple encryption chips 204. The encryption chips 204 within each stock library have the same packaging structure.

[0067] like Figure 14As shown, for example, any stockroom can contain four types of encryption chips 204. Within each stockroom, the ratios of the four encryption chips 204 vary. On the production side, the stockroom randomly selects from the material library. Each stockroom within the material library contains a different ratio of the various encryption chips 204, while the encryption chips 204 have the same packaging structure and soldering process. This makes it impossible to distinguish which encryption chip 204 is ultimately used in each operating terminal during the production phase, providing hardware-based security.

[0068] Communication library functions for all types of encryption chips 204 are configured in the main controller 102. The communication library functions include functions and methods for communicating with the encryption chip 204 and performing security operations. These library functions can further interact with the encryption chip 204 to implement functions including key management, encryption, decryption, digital signatures, and random number generation.

[0069] like Figure 1 As shown, the auxiliary controller 202 is configured to perform power-on management after power-on (for example, after the first power-on or initialization, such as Figure 1 As shown in step S101), the device information of the randomly set encryption chip 204 is called to obtain the type of the encryption chip 204 (such as Figure 1 Specifically, when performing boot management, the auxiliary controller 202 first scans the device ID of the encryption chip 204 and identifies the type of the encryption chip 204 using the returned device ID. For example, it determines which of the four types of encryption chips 204 the encryption chip 204 is. After confirming the type of the encryption chip 204, subsequent steps are executed.

[0070] Further, it is determined whether the authentication request sent by the main controller 102 is received (such as Figure 1 As shown in step S103), if the authentication request sent by the main controller 102 is received, the identity information of the encryption chip 204 is called based on the authentication request sent by the main controller 102 and sent to the main controller 102 to verify the legitimacy of the encryption chip 204 (such as Figure 1 Specifically, after receiving the authentication request sent by the main controller 102, the auxiliary controller 202 calls the digital signature certificate of the encryption chip 204. The content of the digital signature certificate includes but is not limited to the name of the air conditioner manufacturer and the name of the encryption chip 204 manufacturer.

[0071] Further, it is determined whether a challenge message (such as Figure 1 If the challenge message sent by the main controller 102 is received, the challenge message is decrypted based on the preset decryption algorithm and a random number request is sent to the encryption chip 204 (as shown in step S105). Figure 1 (as shown in step S106).

[0072] Further, the decryption result and the random number generated by the encryption chip 204 are packaged and sent to the main controller 102 (eg Figure 1 If the main controller 102 verifies that the decryption result is successful (as shown in step S107), Figure 1 As shown in step S108 in FIG. 1 , the boot management is terminated (as shown in FIG. Figure 1 As shown in step S109), execute operation control (as ... Figure 1 The operation terminal has the authority to operate the air conditioner 100.

[0073] For the operation terminal provided in the first aspect of this application, the production personnel cannot obtain the type of the encryption chip 204 therein. The air conditioner 100 initiates an identity authentication request for the operation terminal. After several rounds of security information interaction, it is finally determined whether the operation terminal is a legal or illegal device. Even if the counterfeiter intercepts the communication message, since it cannot obtain the type of the encryption chip 204 therein, it cannot infer the communication content of the air conditioner 100, which effectively improves security.

[0074] like Figure 2 As shown, in one or more embodiments of the present application, the challenge message is generated by the main controller 102 in the following manner:

[0075] Use a random number generator to generate random numbers and generate the first layer of ciphertext, such as Figure 2 As shown in step S201 in FIG. illustratively, a set of 32-byte random numbers R1 can be generated as starting data.

[0076] Receive the public key generated based on the asymmetric encryption algorithm and use the public key to encrypt the first layer of ciphertext to generate the second layer of ciphertext, such as Figure 2 As shown in step S202, for example, the RSA asymmetric encryption algorithm is selected to generate an asymmetric key pair, including a public key and a private key. The public key is used to encrypt the random number R1 to generate the second-layer ciphertext C1, that is, a set of 128-byte check values.

[0077] Generate a random first symmetric key, use the first symmetric key to encrypt the random number, generate a third-layer ciphertext, use a cyclic redundancy check algorithm to perform a cyclic redundancy check on the third-layer ciphertext, and encapsulate the third-layer ciphertext and the cyclic redundancy check value into a first data packet, such as Figure 2As shown in step S203. For example, the random number R1 is then encrypted using the AES symmetric algorithm. The third-layer ciphertext is 256 bytes of encrypted data. A cyclic redundancy check is performed on this 256-byte data, and the third-layer ciphertext and cyclic redundancy check value are encapsulated into a first data packet. Alternatively, the third-layer ciphertext and cyclic redundancy check value can be packaged into a library file, providing an API interface for use by software engineers of the operation terminal and the air conditioner 100.

[0078] The first data packet is encoded to generate a fourth-layer ciphertext, and the fourth-layer ciphertext is used as a challenge message and transmitted to the auxiliary controller 202 via a text protocol, such as Figure 2 As shown in step S204 in the above example, BASE64 can be used to perform a final encryption package on the plain text to increase the difficulty for a third party to crack the message, making the data more secure.

[0079] Figure 3 The following is a diagram of the structure of a challenge message. An example of the fourth-layer ciphertext is as follows:

[0080]

[0081]

[0082]

[0083]

[0084]

[0085] like Figure 4 As shown, the auxiliary controller 202 performs the following steps when decrypting based on a preset decryption algorithm:

[0086] The challenge message is decoded to restore the challenge message to the first binary data (plain text), such as Figure 4 As shown in step S301;

[0087] The first binary data is checked using the same cyclic redundancy check algorithm, such as Figure 4 As shown in step S302;

[0088] The first binary data is decrypted using the pre-shared first symmetric key to obtain a random number generated by the random number generator, such as Figure 4 As shown in step S303;

[0089] Use an asymmetric encryption algorithm to generate a private key and encrypt the decrypted random number twice to get the decrypted result, such as Figure 4 As shown in step S304.

[0090] That is, after the auxiliary controller 202 receives the challenge message, it performs the outermost three layers of primary decryption to obtain the random value sent by the main controller 102, and then calls the private key generated by the asymmetric encryption algorithm for calculation, and performs secondary encryption on the decrypted random number to obtain the decryption result.

[0091] The auxiliary controller 202 further encapsulates the decryption result and the random number generated by the encryption chip 204, specifically using the following method: Figure 5 Multiple steps shown.

[0092] Generate a random second symmetric key, such as Figure 5 As shown in step S401.

[0093] The decryption result and the random number generated by the encryption chip 204 are encrypted using the second symmetric key to generate encrypted data, such as Figure 5 As shown in step S402.

[0094] The encrypted data is subjected to a cyclic redundancy check (CRC) algorithm, and the encrypted data and the CRC value are encapsulated into a second data packet, such as Figure 5 As shown in step S403.

[0095] Encode the second data packet to generate an encapsulation result and transmit the encapsulation result to the main controller 102 via the text protocol, such as Figure 5 As shown in step S404.

[0096] That is, the data sent from the auxiliary controller 202 to the main controller 102 is also data encrypted and encapsulated by AES, CRC and BASE64.

[0097] The encapsulation result is decrypted by the main controller 102 in the following manner to decode the encapsulation result to restore the encapsulation result to the second binary data (such as Figure 6 501 in step S502); using a cyclic redundancy check algorithm to check the second binary data (as shown in FIG. Figure 6 decrypting the second binary data using the pre-shared second symmetric key to obtain a decryption result and a random number generated by the encryption chip 204 (such as Figure 6 Determine whether the correlation between the decryption result and the second-layer ciphertext meets the set conditions (such as Figure 6 The main controller 102 is configured to verify the success of the decryption result when the correlation between the decryption result and the second layer ciphertext meets the set conditions (such as Figure 6 Otherwise, the verification decryption result fails (as shown in step S505). Figure 6 (as shown in step S506), send warning information.

[0098] A second aspect of the present application provides an air conditioner 100, comprising a main controller 102, which can communicate with an auxiliary controller 202 disposed in an operating terminal. The auxiliary controller 202 includes an encryption chip 204. Upon detecting that an operating terminal is connected to a communication bus, the air conditioner 100 can proactively initiate an authentication request for the operating terminal. After several rounds of security information exchange, the air conditioner 100 can ultimately determine whether the operating terminal is a legitimate device or an illegitimate device.

[0099] Specifically, the encryption chip 204 is randomly selected from a preset stock library, and any stock library is provided with multiple encryption chips 204; the stock library is randomly selected from the material library, and the proportions of the multiple encryption chips 204 in each stock library in the material library are different; the encryption chips 204 in the material library all have the same packaging structure.

[0100] In one or more embodiments of the present application, the main controller 102 executes the following Figure 7 Multiple steps in .

[0101] Identify the operating terminal, such as Figure 7 As shown in step S601.

[0102] Send an authentication request to the identified operation terminal, such as Figure 7 As shown in step S602.

[0103] Receive the randomly set encryption chip 204 identity information sent by the auxiliary controller 202 to verify the legitimacy of the encryption chip 204, such as Figure 7 As shown in step S603.

[0104] Verify the legitimacy of the encryption chip 204, such as Figure 7 As shown in step S604.

[0105] When the encryption chip 204 is legal, a challenge message is generated and sent to the auxiliary controller 202, such as Figure 7 As shown in step S605.

[0106] The receiving auxiliary controller 202 outputs the encapsulation and decryption result, such as Figure 7 As shown in step S606.

[0107] Verify the decryption result, such as Figure 7 As shown in step S607.

[0108] When the decryption result is successfully verified, the operation terminal is allowed to operate the air conditioner 100, such as Figure 7 As shown in step S608.

[0109] In one or more embodiments of the present application, the challenge message is generated by the main controller 102 in the following manner:

[0110] A random number generator is used to generate a random number to generate the first-level ciphertext. For example, a set of 32-byte random numbers R1 can be generated as the starting data.

[0111] A public key generated using an asymmetric encryption algorithm is received and used to encrypt the first-layer ciphertext, generating a second-layer ciphertext. For example, the RSA asymmetric encryption algorithm is used to generate an asymmetric key pair, including a public key and a private key. The public key is used to encrypt a random number R1 to generate the second-layer ciphertext C1, which is a 128-byte check value.

[0112] A random first symmetric key is generated, and the random number is encrypted using the first symmetric key to generate a third-layer ciphertext. A cyclic redundancy check algorithm is used to perform a cyclic redundancy check on the third-layer ciphertext, and the third-layer ciphertext and the cyclic redundancy check value are encapsulated into a first data packet. For example, the random number R1 is then encrypted using the AES symmetric algorithm, and the third-layer ciphertext is 256 bytes of encrypted data. A cyclic redundancy check is performed on this 256-byte data, and the third-layer ciphertext and the cyclic redundancy check value are encapsulated into a first data packet. Alternatively, the third-layer ciphertext and the cyclic redundancy check value can be packaged into a library file, providing an API interface so that software engineers of the operation terminal and the air conditioner 100 can call and use it.

[0113] The first data packet is encoded to generate a fourth-layer ciphertext, which is then transmitted as a challenge message to the auxiliary controller 202 via a text protocol. For example, BAS E64 can be used to perform a final encryption encapsulation on the plaintext, increasing the difficulty for third parties to crack the message and making the data more secure.

[0114] An example of the fourth-level ciphertext is as follows:

[0115]

[0116]

[0117]

[0118]

[0119]

[0120] The auxiliary controller 202 performs the following steps when decrypting based on a preset decryption algorithm:

[0121] Decoding the challenge message to restore the challenge message to first binary data (plain text);

[0122] Using the same cyclic redundancy check algorithm to check the first binary data;

[0123] Decrypting the first binary data using the pre-shared first symmetric key to obtain a random number generated by a random number generator;

[0124] The private key generated by the asymmetric encryption algorithm is used to encrypt the decrypted random number twice to obtain the decrypted result.

[0125] That is, after the auxiliary controller 202 receives the challenge message, it performs the outermost three layers of primary decryption to obtain the random value sent by the main controller 102, and then calls the private key generated by the asymmetric encryption algorithm for calculation, and performs secondary encryption on the decrypted random number to obtain the decryption result.

[0126] The auxiliary controller 202 further encapsulates the decryption result and the random number generated by the encryption chip 204, specifically using the following method: Figure 5 Multiple steps shown.

[0127] Generate a random second symmetric key.

[0128] The decryption result and the random number generated by the encryption chip 204 are encrypted using the second symmetric key to generate encrypted data.

[0129] A cyclic redundancy check algorithm is used to perform a cyclic redundancy check on the encrypted data, and the encrypted data and the cyclic redundancy check value are encapsulated into a second data packet.

[0130] The second data packet is encoded to generate an encapsulation result, and the encapsulation result is transmitted to the main controller 102 through the text protocol.

[0131] That is, the data sent from the auxiliary controller 202 to the main controller 102 is also data encrypted and encapsulated by AES, CRC and BASE64.

[0132] The encapsulation result is decrypted by the main controller 102 in the following manner: decoding the encapsulation result to restore the encapsulation result to the second binary data; using a cyclic redundancy check algorithm to verify the second binary data; using a pre-shared second symmetric key to decrypt the second binary data to obtain a decryption result and a random number generated by the encryption chip 204; judging whether the correlation between the decryption result and the second-layer ciphertext meets the set conditions, such as whether they are equal; the main controller 102 is configured to verify that the decryption result is successful when the correlation between the decryption result and the second-layer ciphertext meets the set conditions; otherwise, the verification of the decryption result fails and an early warning message is sent.

[0133] Since the air conditioner 100 and the operation terminal are not strictly one-to-one installation relationships, in some usage scenarios, there are multiple air conditioners 100 and one operation terminal. To solve this problem, the air conditioner 100 of this application is designed with a first preemptive authentication mechanism, such as Figure 8 As shown, the main controller 102 is configured to detect whether there is a challenge message generated by other main controllers 102 (such as Figure 8 If a challenge message generated by another main controller 102 is detected, the authentication request is stopped from being sent to the identified operation terminal (eg, Figure 8 (as shown in step S703).

[0134] Because the air conditioners 100 and the operator terminal are connected via a communication bus, each air conditioner 100 can monitor all information on the communication bus. Therefore, the first preemptive authentication mechanism is that if an air conditioner 100 detects the presence of an operator terminal but detects a challenge message from another air conditioner 100 before initiating the authentication process, it terminates its own authentication process, ensuring that only one air conditioner 100 on the communication bus is authenticating the operator terminal. If the authentication process is normal, all air conditioners 100 continue to operate. Otherwise, if the authenticated air conditioner 100 reports that the operator terminal authentication failed, the other air conditioners 100 will also receive the alarm information, and the alarm information will be synchronized with the other air conditioners 100.

[0135] In some usage scenarios, there is one air conditioner 100 and multiple operation terminals. To solve this problem, the air conditioner 100 of this application is designed with a second preemptive authentication mechanism, such as Figure 9 As shown, before sending the authentication request, the main controller 102 detects the number of identifiable operation terminals and sorts the identifiable operation terminals in the order of identification, and sends the authentication request to the operation terminals in sequence according to the sorting. That is, the main controller 102 sorts the identifiable operation terminals in the order of identification (such as Figure 9 ), sends an authentication request to the first-ranked operation terminal (as shown in step S803). Figure 9 In step S804), the authentication process is executed until it ends, and then an authentication request is sent to the second-ranked operation terminal (as shown in FIG. Figure 9 (as shown in step S811) until the authentication of all sorted operation terminals is completed.

[0136] That is, before initiating authentication, the air conditioner 100 will monitor the total number of operating terminals on the communication bus, and then sort them based on the first received operating terminal. For example, at intervals of one hour, each operating terminal will be encrypted and authenticated one by one.

[0137] The first preemption authentication mechanism and the second preemption authentication mechanism help to realize resource sharing without causing deadlock or resource contention problems.

[0138] The third aspect of the present application provides an air conditioning system, comprising an operation terminal and an air conditioner 100. The operation terminal is provided with an auxiliary controller 202 and an encryption chip 204 capable of communicating with the auxiliary controller 202, and the air conditioner 100 is provided with a main controller 102. Figure 10 This is the flow chart of the air conditioning system. Figures 11 to 13 Schematic diagram of the air conditioning system.

[0139] The encryption chips 204 are randomly selected from a preset stock library, and any stock library is provided with multiple encryption chips 204; the stock library is randomly selected from the material library, and the ratio of the multiple encryption chips 204 in each stock library is different; the encryption chips 204 in the material library all have the same packaging structure;

[0140] The auxiliary controller 202 is configured to perform power-on management after power-on, call the device information of the randomly set encryption chip 204 and obtain the type of the encryption chip 204 based on the device information; call the identity information of the encryption chip 204 based on the authentication request sent by the main controller 102 and send it to the main controller 102 to verify the legitimacy of the encryption chip 204; after verifying the legitimacy of the encryption chip 204, respond to the challenge message sent by the main controller 102, decrypt based on a preset decryption algorithm and send a random number request to the encryption chip 204; encapsulate the decryption result and the random number generated by the encryption chip 204 and send it to the main controller 102; when the main controller 102 successfully verifies the decryption result, the power-on management ends and the operation control is executed to operate the air conditioner 100;

[0141] The main controller 102 is configured to send an authentication request to the identified operation terminal after identifying the operation terminal, receive the randomly set encryption chip 204 identity information sent by the auxiliary controller 202 to verify the legitimacy of the encryption chip 204; after verifying the legitimacy of the encryption chip 204, generate a challenge message and send it to the auxiliary controller 202; receive the encapsulated decryption result output by the auxiliary controller 202, and allow the operation terminal to operate the air conditioner 100 when the verification decryption result is successful.

[0142] In the description of the above embodiments, specific features, structures, materials or characteristics may be combined in an appropriate manner in any one or more embodiments or examples.

[0143] The above are only specific embodiments of the present invention, but the scope of protection of the present invention is not limited thereto. Any changes or substitutions that can be easily conceived by a person skilled in the art within the technical scope disclosed in this invention should be included in the scope of protection of the present invention. Therefore, the scope of protection of the present invention should be based on the scope of protection of the claims.

Claims

1. Operation terminal, used to operate the air conditioner, including: an auxiliary controller capable of communicating with a main controller provided in the air conditioner; an encryption chip capable of communicating with the auxiliary controller; It is characterized in that The encryption chips are randomly selected from a preset stock library, and any stock library is provided with multiple encryption chips; the stock library is randomly selected from a material library, and the proportion of multiple encryption chips in each stock library in the material library is different; the encryption chips in the material library all have the same packaging structure; The auxiliary controller is configured to perform power-on management after power-on, call device information of a randomly set encryption chip and obtain the type of the encryption chip based on the device information; call the identity information of the encryption chip based on an authentication request sent by the main controller and send it to the main controller to verify the legitimacy of the encryption chip; after verifying the legitimacy of the encryption chip, respond to the challenge message sent by the main controller, decrypt the message based on a preset decryption algorithm and send a random number request to the encryption chip; encapsulate the decryption result and the random number generated by the encryption chip and send it to the main controller; and when the main controller successfully verifies the decryption result, terminate the power-on management and execute operation control to operate the air conditioner; The main controller is configured to send an authentication request to the identified operation terminal after identifying the operation terminal, receive the randomly set encryption chip identity information sent by the auxiliary controller to verify the legitimacy of the encryption chip; after verifying the legitimacy of the encryption chip, generate a challenge message and send it to the auxiliary controller; receive the encapsulated decryption result output by the auxiliary controller, and allow the operation terminal to operate the air conditioner when the decryption result is successfully verified.

2. The operation terminal according to claim 1, characterized in that The challenge message is generated by the main controller in the following manner: Use a random number generator to generate random numbers and generate the first layer of ciphertext; receiving a public key generated based on an asymmetric encryption algorithm and encrypting the first layer of ciphertext using the public key to generate a second layer of ciphertext; Generating a random first symmetric key, encrypting the random number using the first symmetric key to generate a third-layer ciphertext, performing a cyclic redundancy check on the third-layer ciphertext using a cyclic redundancy check algorithm, and encapsulating the third-layer ciphertext and the cyclic redundancy check value into a first data packet; The first data packet is encoded to generate a fourth-layer ciphertext, and the fourth-layer ciphertext is used as the challenge message and transmitted to the auxiliary controller through a text protocol.

3. The operation terminal according to claim 2, characterized in that: The auxiliary controller performs the following steps when decrypting based on a preset decryption algorithm: Decoding the challenge message to restore the challenge message to first binary data; Using the cyclic redundancy check algorithm to check the first binary data; Decrypting the first binary data using the pre-shared first symmetric key to obtain a random number generated by the random number generator; An asymmetric encryption algorithm is used to generate a private key, and the decrypted random number is encrypted twice to obtain a decryption result.

4. The operation terminal according to claim 3, characterized in that: The auxiliary controller performs the following steps when packaging the decryption result and the random number generated by the encryption chip: Generating a random second symmetric key, encrypting the decryption result and the random number generated by the encryption chip using the second symmetric key to generate encrypted data, performing a cyclic redundancy check on the encrypted data using the cyclic redundancy check algorithm, and encapsulating the encrypted data and the cyclic redundancy check value into a second data packet; The second data packet is encoded to generate an encapsulation result, and the encapsulation result is transmitted to the main controller through a text protocol.

5. The operation terminal according to claim 4, characterized in that: The encapsulation result is decrypted by the main controller in the following manner: decoding the encapsulation result to restore the encapsulation result to second binary data; and verifying the second binary data using the cyclic redundancy check algorithm; Decrypting the second binary data using a pre-shared second symmetric key to obtain the decryption result and the random number generated by the encryption chip; The main controller is configured to verify that the decryption result is successful when the correlation between the decryption result and the second-layer ciphertext meets a set condition; otherwise, verify that the decryption result fails.

6. Air conditioners, including: A main controller, which can communicate with an auxiliary controller provided in the operation terminal, wherein the auxiliary controller is also provided with an encryption chip; It is characterized by: The encryption chips are randomly selected from a preset stock library, and any stock library is provided with multiple encryption chips; the stock library is randomly selected from a material library, and the proportion of multiple encryption chips in each stock library in the material library is different; the encryption chips in the material library all have the same packaging structure; The auxiliary controller is configured to perform power-on management after power-on, call device information of a randomly set encryption chip and obtain the type of the encryption chip based on the device information; call identity information of the encryption chip based on an authentication request sent by the main controller and send the information to the main controller to verify the legitimacy of the encryption chip; after verifying the legitimacy of the encryption chip, respond to a challenge message sent by the main controller, perform decryption based on a preset decryption algorithm and send a random number request to the encryption chip; encapsulate the decryption result and the random number generated by the encryption chip and send them to the main controller; and terminate the power-on management when the main controller successfully verifies the decryption result and performs operation control to operate the air conditioner; The main controller is configured to send an authentication request to the identified operation terminal after identifying the operation terminal, receive the randomly set encryption chip identity information sent by the auxiliary controller to verify the legitimacy of the encryption chip; after verifying the legitimacy of the encryption chip, generate a challenge message and send it to the auxiliary controller; receive the encapsulated decryption result output by the auxiliary controller, and allow the operation terminal to operate the air conditioner when the decryption result is successfully verified.

7. The air conditioner according to claim 6, characterized in that The main controller generates the challenge message by the following method: Use a random number generator to generate random numbers and generate the first layer of ciphertext; receiving a public key generated based on an asymmetric encryption algorithm and encrypting the first layer of ciphertext using the public key to generate a second layer of ciphertext; Generating a random first symmetric key, encrypting the random number using the first symmetric key to generate a third-layer ciphertext, performing a cyclic redundancy check on the third-layer ciphertext using a cyclic redundancy check algorithm, and encapsulating the third-layer ciphertext and the cyclic redundancy check value into a first data packet; The first data packet is encoded to generate a fourth-layer ciphertext, and the fourth-layer ciphertext is used as the challenge message and transmitted to the auxiliary controller through a text protocol.

8. The air conditioner according to claim 6, characterized in that The main controller is configured to detect whether there is a challenge message generated by other main controllers after identifying the operation terminal; if a challenge message generated by other main controllers is detected, stop sending the authentication request to the identified operation terminal.

9. The air conditioner according to claim 6, characterized in that Before sending the authentication request, the main controller detects the number of identifiable operation terminals and sorts the identifiable operation terminals in order of identification, and sends the authentication request to the operation terminals in order of the sorting.

10. An air conditioning system, characterized in that: include: An operating terminal, wherein an auxiliary controller and an encryption chip communicating with the auxiliary controller are provided; An air conditioner having a main controller; It is characterized by: The encryption chips are randomly selected from a preset stock library, and any stock library is provided with multiple encryption chips; the stock library is randomly selected from a material library, and the proportion of multiple encryption chips in each stock library in the material library is different; the encryption chips in the material library all have the same packaging structure; The auxiliary controller is configured to perform power-on management after power-on, call device information of a randomly set encryption chip and obtain the type of the encryption chip based on the device information; call identity information of the encryption chip based on an authentication request sent by the main controller and send the information to the main controller to verify the legitimacy of the encryption chip; after verifying the legitimacy of the encryption chip, respond to a challenge message sent by the main controller, perform decryption based on a preset decryption algorithm and send a random number request to the encryption chip; encapsulate the decryption result and the random number generated by the encryption chip and send them to the main controller; and terminate the power-on management when the main controller successfully verifies the decryption result and performs operation control to operate the air conditioner; The main controller is configured to send an authentication request to the identified operation terminal after identifying the operation terminal, receive the randomly set encryption chip identity information sent by the auxiliary controller to verify the legitimacy of the encryption chip; after verifying the legitimacy of the encryption chip, generate a challenge message and send it to the auxiliary controller; receive the encapsulated decryption result output by the auxiliary controller, and allow the operation terminal to operate the air conditioner when the decryption result is successfully verified.

Images