Equipment binding method and device, equipment and storage medium

Abstract

The invention discloses an equipment binding method and device, equipment and a storage medium, and the method comprises the steps: receiving a binding request sent by intelligent equipment, and the binding request comprises an equipment identifier and a household unique identifier; generating an authentication token according to the equipment identifier and the unique home identifier; the authentication token is sent to the security authentication platform, the authentication token is used for the security authentication platform to perform authentication and sends the device identifier and the broadband account information to the device management platform under the condition that the authentication is passed, and the device management platform binds the intelligent device with the broadband account information according to the device identifier of the intelligent device. The broadband account information is determined according to the unique home identifier.

Description

Technical Field

[0001] The present application belongs to the technical field of Internet of Things, and in particular, relates to a device binding method, apparatus, device and storage medium. Background Art

[0002] With the continuous development of Internet of Things technology, the popularity of smart home devices or intelligent devices is increasing, and their functions are becoming more and more abundant. However, as IoT devices, many of their functions require networking to be realized. Generally speaking, users need to configure and bind smart home devices through mobile terminal apps, and then connect smart home devices to the user's home WiFi and then network. Many functions of smart home devices can be used.

[0003] The currently used smart device network binding solution requires users to use the corresponding mobile app to manually operate each smart device to complete the network binding. The network binding process is complicated and requires many user operation steps, which affects the user experience. Summary of the invention

[0004] In view of one or more of the above problems, the present invention provides a device binding method, apparatus, device and storage medium, which can simplify the operation steps of network configuration binding.

[0005] In a first aspect, an embodiment of the present application provides a device binding method, including:

[0006] Receive a binding request sent by a smart device, the binding request including a device identifier and a unique home identifier;

[0007] Generate an authentication token based on the device ID and the unique family ID;

[0008] The authentication token is sent to the security authentication platform. The authentication token is used for authentication on the security authentication platform. If the authentication is passed, the device ID and broadband account information are sent to the device management platform. The device management platform binds the smart device to the broadband account information based on the device ID of the smart device. The broadband account information is determined based on the unique household ID.

[0009] In some possible implementations, generating an authentication token based on the device identifier and the unique home identifier includes:

[0010] Generate a random number corresponding to the device ID and the unique home ID;

[0011] The device ID, the unique home ID and the random number are combined to obtain an authentication token.

[0012] In some possible implementations, the device identifier, the family unique identifier, and the random number are combined to obtain an authentication token, including:

[0013] Add a random number to the preset position of the family's unique identifier;

[0014] Combine the unique home ID with the random number added and the device ID to get a verification token.

[0015] In some possible implementations, before receiving the binding request sent by the smart device, the method further includes:

[0016] Temporary networking with smart devices;

[0017] When temporary networking is successful, obtain the smart device information of the smart device;

[0018] Send smart device information to the device management platform for verification;

[0019] If the verification is successful, the network access information is sent to the smart device, and the network access information is used to officially connect to the Internet.

[0020] In some possible implementations, before receiving a temporary networking request from a smart device and temporarily networking with the smart device information, the method further includes:

[0021] Send authentication negotiation information to the security authentication platform;

[0022] Receive the successful authentication result returned by the security authentication platform, which is used as the trust root of the smart device.

[0023] In a second aspect, an embodiment of the present application provides another device binding method, including:

[0024] Receive the authentication token sent by the gateway device, the binding request includes the device ID and the unique home ID of the smart device;

[0025] Authentication based on authentication tokens;

[0026] If the authentication is successful, the device identification and broadband account information are sent to the device management platform, and the smart device is bound to the broadband account information based on the device identification of the smart device through the device management platform;

[0027] Receive a unique user ID assigned to the smart device by the device management platform, where the unique user ID is obtained based on the device ID and broadband account information;

[0028] Send the user's unique ID to the smart device.

[0029] In some possible implementations, before receiving the authentication token sent by the gateway device and the binding request including the device identifier and the household unique identifier of the smart device, the method further includes:

[0030] Receiving authentication negotiation information sent by the gateway device, the authentication negotiation information includes the user network registration code;

[0031] Initiate an authentication request for authentication negotiation information to the family open platform;

[0032] If the authentication is successful, the user account information associated with the user's network registration code sent by the home open platform is received;

[0033] Obtain the authentication negotiation success result based on the user account information;

[0034] Send the authentication negotiation success result to the gateway device.

[0035] In a third aspect, an embodiment of the present application provides another device binding method, including:

[0036] Call the pre-integrated network distribution component to send device information to the gateway device;

[0037] Connect to the network according to the network access information sent by the gateway device;

[0038] Send a binding request to the gateway device based on its own device identification and authentication identification;

[0039] Receive the unique user ID sent by the security authentication platform;

[0040] Obtain online request information according to the user's unique ID and device ID;

[0041] Send online request information to the device management platform to bind with broadband account information.

[0042] In a fourth aspect, an embodiment of the present application provides a device binding apparatus, the apparatus comprising:

[0043] A receiving module, used to receive a binding request sent by a smart device, the binding request including a device identifier and a unique home identifier;

[0044] A generation module, used to generate an authentication token according to a device identifier and a unique family identifier;

[0045] The sending module is used to send the authentication token to the security authentication platform. The authentication token is used for authentication on the security authentication platform. If the authentication is passed, the device identification and broadband account information are sent to the device management platform. The device management platform binds the smart device and the broadband account information according to the device identification of the smart device. The broadband account information is determined based on the unique household identification.

[0046] In a fifth aspect, an embodiment of the present application provides a device binding device, the device comprising: a processor, and a memory storing computer program instructions; the processor reads and executes the computer program instructions to implement the device binding method as described above.

[0047] In a sixth aspect, an embodiment of the present application provides a computer-readable storage medium, characterized in that computer program instructions are stored on the computer storage medium, and when the computer program instructions are executed by a processor, the device binding method as described above is implemented.

[0048] The device binding method, apparatus, equipment and storage medium of the embodiment of the present application receive a binding request sent by a smart device, the binding request includes a device identifier and a unique household identifier; generate an authentication token based on the device identifier and the unique household identifier; send the authentication token to a security authentication platform, the authentication token is used for authentication by the security authentication platform, and when the authentication is passed, send the device identifier and broadband account information to the device management platform, and the device management platform binds the smart device to the broadband account information based on the device identifier of the smart device, and the broadband account information is determined based on the unique household identifier. Receive the binding request sent by the smart device and generate an authentication token, transfer the authentication token to the security authentication platform for authentication, and when the authentication is successful, bind the smart device to the broadband account information. Then, automatic device binding is achieved, and the user end only needs to control the smart device bound to the broadband account based on the broadband account, which can simplify the operation steps of network configuration binding and improve user experience. BRIEF DESCRIPTION OF THE DRAWINGS

[0049] The present invention can be better understood from the following description of specific embodiments of the present invention in conjunction with the accompanying drawings, in which:

[0050] Other features, objects and advantages of the present invention will become more apparent from the following detailed description of non-limiting embodiments with reference to the accompanying drawings, in which the same or similar reference numerals represent the same or similar features.

[0051] Figure 1 It is a flowchart of a device binding method provided by an embodiment of the present application;

[0052] Figure 2 is a flowchart of a device binding method provided by another embodiment of the present application;

[0053] Figure 3 is a flowchart of a device binding method provided by another embodiment of the present application;

[0054] Figure 4 It is the process sequence diagram of the gateway authentication negotiation phase;

[0055] Figure 5 It is a timing diagram of the network configuration process of smart devices;

[0056] Figure 6 It is a timing diagram of the smart device binding process;

[0057] Figure 7 is a structural schematic diagram of a device binding apparatus provided by another embodiment of the present application;

[0058] Figure 8 It is a schematic diagram of the hardware structure of the device binding device provided in the embodiment of the present application. DETAILED DESCRIPTION

[0059] The features and exemplary embodiments of various aspects of the present invention will be described in detail below. In the detailed description below, many specific details are proposed to provide a comprehensive understanding of the present invention. However, it is obvious to those skilled in the art that the present invention can be implemented without the need for some of these specific details. The following description of the embodiments is only to provide a better understanding of the present invention by illustrating examples of the present invention. The present invention is by no means limited to any specific configuration and algorithm proposed below, but covers any modification, replacement and improvement of elements, parts and algorithms without departing from the spirit of the present invention. In the accompanying drawings and the following description, known structures and technologies are not shown to avoid unnecessary ambiguity to the present invention.

[0060] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the statement "include..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0061] Access Point (AP): It is a basic device in a wireless LAN and is the connection point between wireless devices and wireless networks. AP is usually provided by a wireless router and is used to connect devices equipped with wireless network cards to a wired LAN or WAN, allowing wireless devices to share and use network resources.

[0062] With the continuous development of Internet of Things technology, the popularity of smart home devices or intelligent devices is increasing, and their functions are becoming more and more abundant. However, as IoT devices, many of their functions require networking to be realized. Generally speaking, users need to configure and bind smart home devices through mobile terminal apps, and then connect smart home devices to the user's home WiFi and then network. Many functions of smart home devices can be used. Users can control bound smart home devices through mobile terminals.

[0063] The main smart device network binding technologies currently used include the following: one is to send a UDP message containing the target router WiFi hotspot name and password through a related mobile phone APP through broadcast or multicast, and the smart device to be networked directly connects to the target WiFi after listening to and obtaining this UDP message, and binds with the user information after connecting to the target WiFi;

[0064] The other method is to put the smart home device to be networked in AP mode. After the mobile phone connects to the WiFi hotspot of the smart device to be networked, it sends the WiFi hotspot name and password of the target router to the smart device to be networked. After receiving the information, the smart home device to be networked automatically connects to the WiFi of the target router and binds.

[0065] The inventor has studied the above problem and found that since the control of smart devices requires the user terminal to bind with the smart devices, and currently smart devices cannot automatically bind with user terminals, the current smart device network configuration and binding solution requires users to manually operate each smart device to complete the network configuration and binding. The network configuration and binding process is complicated and the user operation steps are many, which affects the user experience. By adding an authentication plug-in to the gateway device, the smart device can be authenticated through this authentication plug-in after startup, and then automatically configure and bind to the network, which can simplify the network configuration and binding process.

[0066] Figure 1 FIG. 1 is a flow chart showing a device binding method provided by an embodiment of the present application. Figure 1 As shown, the device binding method provided in the embodiment of the present application is applied to a gateway device or an authentication plug-in in a gateway device, and includes the following steps S101 to S103.

[0067] S101: receiving a binding request sent by a smart device, where the binding request includes a device identifier and a unique household identifier.

[0068] Smart devices can refer to any device, instrument or machine with computing and processing capabilities, which combines traditional electrical equipment with computer technology, data processing technology, control theory, sensor technology, network communication technology, power electronics technology, etc. These devices can transmit and interact with information through network communication technology to achieve intelligent perception, decision-making and control. In this embodiment, smart devices are specifically smart home devices, such as smart lights, smart speakers, smart TVs, etc.

[0069] The binding request may be a signal to establish a connection between the smart device and the user for binding. It is understandable that the smart home device and the gateway device usually need to be in the same network to receive the binding request.

[0070] The device ID can be a unique code for a smart home device. The device ID can help the gateway send the signal to the correct device. Through the device ID, you may be able to get the type, model, version number, manufacturer and other information of the device.

[0071] The home unique identifier can be a unique identifier of the home network. It is understandable that in a house, there is usually only one interface connected to the external network. For example, when using smart home devices, the smart home devices will connect to the external Internet through a wireless router, and the wireless router will connect to the external Internet through a modem. The home unique identifier can be a unique identifier when connecting to the external Internet, such as an IP address, account number, etc.

[0072] In a specific implementation, when a smart home device is started, it will connect to the gateway device, and the smart home device will send a binding request to the gateway, which includes the device ID and the home unique ID of the device. The gateway device will receive the binding request sent by the smart device.

[0073] S102: Generate an authentication token according to the device identifier and the unique family identifier.

[0074] The authentication token may be a temporary key generated by the gateway device based on the device identification and the unique home identification.

[0075] In the specific implementation, the device ID and the home unique ID are obtained from the binding request of the smart home device. This can be achieved by parsing the data packet of the binding request. Once the device ID and the home unique ID are obtained, the information can be used to generate an authentication token. This process usually involves the use of some encryption and hashing algorithms to ensure that the generated token is secure and unique.

[0076] S103: Send the authentication token to the security authentication platform. The authentication token is used for authentication on the security authentication platform. If the authentication is passed, the device identification and broadband account information are sent to the device management platform. The device management platform binds the smart device to the broadband account information based on the device identification of the smart device. The broadband account information is determined based on the unique household identification.

[0077] The security authentication platform can be a security authentication system. This platform is mainly responsible for the identity authentication and security authorization management of smart home devices, which can ensure that only legitimate devices can access the home network and control the permissions and access of different devices.

[0078] It is understandable that generally, when connecting to the external Internet, a broadband account is usually required. Therefore, the broadband account information can be the broadband account information used by the gateway device when accessing the Internet.

[0079] The device management platform can be responsible for the addition, configuration, control and monitoring of smart home devices, which can facilitate users to uniformly manage and operate smart home devices.

[0080] In the specific implementation, the authentication token is sent to the security authentication platform via the Internet, and the security authentication platform forwards the relevant information to the device management platform for binding after authentication.

[0081] The device binding method of the embodiment of the present application receives a binding request sent by a smart device, the binding request includes a device identifier and a unique household identifier; generates an authentication token based on the device identifier and the unique household identifier; sends the authentication token to a security authentication platform, the authentication token is used for authentication by the security authentication platform, and when the authentication is passed, the device identifier and broadband account information are sent to the device management platform, and the smart device is bound to the broadband account information through the device management platform based on the device identifier of the smart device, and the broadband account information is determined based on the unique household identifier. Receive the binding request sent by the smart device and generate an authentication token, transfer the authentication token to the security authentication platform for authentication, and when the authentication is successful, bind the smart device to the broadband account information. Then, automatic device binding is achieved, and the user end only needs to control the smart device bound to the broadband account based on the broadband account, which can simplify the operation steps of network configuration binding and improve user experience.

[0082] In some implementations, the step of generating an authentication token based on the device identifier and the household unique identifier specifically includes:

[0083] Generate a random number that corresponds to the device ID and the unique home ID.

[0084] In the specific implementation, first obtain the device ID and the home unique ID from the binding request of the smart home device. Use the appropriate algorithm and seed to generate a random number corresponding to the device ID and the home unique ID. This random number should be generated based on the uniqueness of the device ID and the home unique ID to ensure that there is a mapping relationship between the generated random number and the device ID and the home unique ID. For example, because only one device request will be processed at the same time, the timestamp can be used as the seed to generate the random number.

[0085] The device ID, the unique home ID and the random number are combined to obtain an authentication token.

[0086] In a specific implementation, the device identifier can be combined with a random number and then combined with a unique household identifier to generate an authentication token.

[0087] The above-mentioned implementation mode of the present application obtains a verification token by combining a random number with the smart device information, thereby preventing the occurrence of counterfeit tokens.

[0088] In some implementations, the step of combining the device identifier, the household unique identifier, and the random number to obtain an authentication token specifically includes:

[0089] Add a random number in the preset position of the family's unique identifier.

[0090] In a specific implementation, the random number obtained above is added to a preset position of the family unique identifier. The preset position may be a specific position of the family unique identifier, such as the lowest or highest bit, or a specific identification bit in the family unique identifier.

[0091] Combine the unique home ID with the random number added and the device ID to get a verification token.

[0092] In the specific implementation, the unique home ID with a random number added is combined with the device ID to generate a verification token. This process usually involves the use of some encryption and hashing algorithms to ensure that the generated token is secure and unique.

[0093] The above-mentioned implementation mode of the present application uses a preset unique family identifier and combines randomness with the identification code. The generated verification token has sufficient complexity and randomness to prevent it from being guessed or predicted by attackers, thereby increasing the security of the unique family identifier.

[0094] In some implementations, before receiving the binding request sent by the smart device, the method further includes:

[0095] Temporary networking with smart devices.

[0096] Temporary networking means that the AP opens a wireless network that can be connected without a password, allowing other devices to connect to this wireless network to temporarily access the network and connect to the AP.

[0097] In a specific implementation, a temporary authorization code or key may be provided to the smart device to enable specific operations for a period of time. The smart device may have specific usage restrictions after being temporarily connected to the Internet, such as being able to be used only for specific services or operations.

[0098] When temporary networking is successful, obtain the smart device information of the smart device.

[0099] In a specific implementation, the device information returned from the smart device can be parsed. The information may be encoded in different forms. After the device information is parsed, key information needs to be extracted from it.

[0100] Send smart device information to the device management platform for verification.

[0101] In the specific implementation, the gateway device needs to package the acquired smart device information, which is usually encoded into a specific data format and packaged into data packets. Then, the gateway device needs to send the packaged data packets to the device management platform for verification through a certain communication protocol.

[0102] If the verification is successful, the network access information is sent to the smart device, and the network access information is used to officially connect to the Internet.

[0103] The network access information may be the name and password of the wireless network that is fixed and always open by the AP, and the smart device may access the wireless network based on this information.

[0104] In the specific implementation, according to the verification result returned by the device management platform, if the verification is successful, a connection information for network access can be created. This connection information may include some specific parameters, such as the network IP address, port number, security key, etc., which are used to establish a connection with the smart device. After receiving the network access information, the smart device will establish a connection with the network based on this information.

[0105] The above implementation mode of the present application enhances security by temporarily connecting to a smart device and allowing the device to be verified before officially connecting to the network.

[0106] In some implementations, before receiving a temporary networking request from a smart device and temporarily networking with the smart device information, the method further includes:

[0107] Send authentication negotiation information to the security authentication platform.

[0108] The authentication negotiation information may be the security parameters or information exchanged and negotiated between the gateway device and the security authentication platform when executing the authentication protocol after the gateway device is connected to the network. Specifically, it may include parameter information such as the device information of the gateway device and the gateway network registration code.

[0109] In the specific implementation, after the gateway is connected to the network, the authentication plug-in integrated in the gateway device is called to pass the gateway network registration code and gateway device information assigned after the gateway successfully connects to the authentication platform for gateway authentication. The authentication plug-in pre-encrypts the gateway information to enhance the security of the authentication process; then a secure connection is established with the home security authentication platform to initiate the negotiation process.

[0110] Receive the successful authentication result returned by the security authentication platform, which is used as the trust root of the smart device.

[0111] A root of trust is a source in a cryptographic system that can always be trusted. Since cryptographic security relies on keys to encrypt and decrypt data and perform functions such as generating digital signatures and verifying signatures, a source of trust is needed to verify itself and facilitate secure operations on the system.

[0112] In the specific implementation, once the successful authentication result is received, the gateway device needs to store it as the root of trust for the smart device. This root of trust can be the public key, certificate, or a specific identifier of the device for subsequent trust verification. In the subsequent communication process, your device can use this root of trust to verify the identity and legitimacy of the smart device. For example, the device can use this root of trust to verify the authenticity and integrity of the data or instructions sent by the smart device, or use this root of trust to generate or verify a digital signature.

[0113] The above implementation mode of the present application authenticates the security authentication platform through the gateway, and the authentication negotiation result is used as the trust root to ensure that the devices and services within the home are not directly exposed to the outside.

[0114] You can refer to Figure 2 , Figure 2 It is a flowchart of a device binding method provided by another embodiment of the present application.

[0115] As an embodiment of the present application, this method is applied to a security authentication platform, and the method includes steps S201 to S205.

[0116] S201: Receive an authentication token sent by a gateway device, where the authentication token includes a device identifier of the smart device and a unique household identifier.

[0117] In a specific implementation, the authentication token from the gateway device can be monitored. This can be achieved by setting a specific port or protocol on the security authentication platform. When the gateway device sends the authentication token, the security authentication platform can immediately receive the token.

[0118] S202: Perform authentication based on the authentication token.

[0119] In a specific implementation, the unique family identifier in the token can be used to confirm whether the device identifier of the smart device corresponds to the unique family identifier, that is, to determine whether the smart device has mistakenly connected to someone else's network. If the device identifier of the smart device corresponds to the unique family identifier, the authentication is successful.

[0120] S203: When the authentication is successful, the device identification and the broadband account information are sent to the device management platform, and the smart device is bound to the broadband account information according to the device identification of the smart device through the device management platform.

[0121] In the specific implementation, the security authentication platform pre-stores the broadband account information corresponding to the unique household identifier. When the authentication is successful, the received device identifier and the pre-stored broadband account information are sent to the device management platform, allowing the device management platform to record the correspondence between the two and bind the smart device to the broadband account information.

[0122] S204: Receive a unique user identifier assigned to the smart device by the device management platform, where the unique user identifier is obtained based on the device identifier and broadband account information.

[0123] The user unique identifier can be the unique identity identifier of the smart device in this smart device management system. It is a specific rule character group that cannot be modified, repeated, and is not open to users.

[0124] In a specific implementation, after the device management platform binds the smart device with the broadband account information, it assigns a unique identifier to the smart device, namely the user unique identifier, and then sends it to the security authentication platform. The security authentication platform receives the user unique identifier.

[0125] S205: Send the user unique identifier to the smart device.

[0126] The above method of the embodiment of the present application can realize automatic device binding. The user end only needs to control the smart device bound to the broadband account according to the broadband account, which can simplify the operation steps of network configuration binding and improve user experience.

[0127] In some implementations, before receiving the authentication token sent by the gateway device and the binding request including the device identifier and the household unique identifier of the smart device, the method further includes:

[0128] Receive the authentication negotiation information sent by the gateway device, where the authentication negotiation information includes the user network access registration code.

[0129] In the specific implementation, the gateway device initiates authentication negotiation, sends the network registration code and gateway device information to the security authentication platform, and securely receives this authentication negotiation information.

[0130] Initiate an authentication request for authentication negotiation information to the home open platform.

[0131] The family open platform may be a cloud platform storing network access information of multiple users. Specifically, the family open platform may be a one-stop collaborative family open platform of China Mobile.

[0132] In a specific implementation, the security authentication platform sends a network registration code to the home open platform for authentication.

[0133] If the authentication is successful, the user account information associated with the user's network registration code sent by the home open platform is received.

[0134] The authentication negotiation success result is obtained based on the user account information.

[0135] Send the authentication negotiation success result to the gateway device.

[0136] You can refer to Figure 3 , Figure 3 It is a flowchart of a device binding method provided by another embodiment of the present application.

[0137] As an embodiment of the present application, this method is applied to a smart device, and the method includes steps S301 to S306.

[0138] S301: Call the pre-integrated network distribution component to send device information to the gateway device.

[0139] The network configuration component may be a hardware device or software component pre-installed in the smart device. The network configuration component may allow the smart device to automatically connect to the gateway device temporarily.

[0140] In the specific implementation, after being turned on, the smart device will search for the gateway device through the network configuration component and try to temporarily connect to it. After the temporary connection is successful, the device information will be sent to the gateway device.

[0141] S302: Connecting to the network according to the network access information sent by the gateway device.

[0142] In the specific implementation, after the temporary networking is successful and the device information is sent to the gateway device, the verification result after verification based on the device information is waited for. After the verification is passed, the network access information sent by the gateway device is received, and this network access information is used to formally connect to the network.

[0143] S303: Send a binding request to the gateway device according to its own device identification and family unique identification.

[0144] In a specific implementation, the smart device initiates a binding request to the gateway device and sends its own device identifier and unique home identifier to the gateway device.

[0145] S304: Receive the unique user identifier sent by the security authentication platform.

[0146] In the specific implementation, after the smart device initiates a binding request, it waits for the binding result. After the binding is completed, the security authentication platform will send a user unique identifier corresponding to the smart device and receive this user unique identifier.

[0147] S305: Obtain online request information according to the user unique identifier and the device identifier.

[0148] In a specific implementation, the user unique identifier and the device identifier are combined to obtain online request information.

[0149] S306: Sending online request information to the device management platform to bind with the broadband account information.

[0150] The above-mentioned solution of the present application can be easily integrated into smart devices by utilizing distribution network components, such as a pre-developed unified SDK, to facilitate large-scale promotion and use of the solution.

[0151] As an embodiment of the present application, the gateway will first access the network before the smart device is connected to the network and bound. Figure 4 .

[0152] In this embodiment, it can include smart home devices or smart devices, gateway devices, smart device management platform or simply called management platform, home security authentication platform or simply called full authentication platform, provincial home open platform or simply called home open platform.

[0153] Among them, after the gateway is powered on and connected to the network, it calls the authentication plug-in integrated in the gateway device to pass the gateway network registration code and gateway device information assigned after the gateway successfully connects to the network to the authentication platform for gateway authentication.

[0154] The authentication plug-in pre-encrypts the gateway information to enhance the security of the authentication process; it then establishes a secure connection with the home security authentication platform and initiates the negotiation process.

[0155] The home security authentication platform initiates a request to the provincial home opening platform based on the parameter information such as the gateway network registration code brought by the authentication plug-in to verify the gateway information and the network registration code. If the verification and authentication are successful, the provincial home opening platform returns the home broadband account associated with the network registration code. Generally speaking, this will include user network information such as the user's mobile phone number; the home security authentication platform generates a server-related random number and assigns an encrypted unique home identifier, and at the same time returns the authentication success result to the authentication plug-in; if the authentication fails, the authentication process ends.

[0156] The gateway authentication plug-in receives the family unique identifier and other related parameters returned by the authentication platform, decrypts them locally and caches them, and sets the parameter cache duration according to the policy returned at the same time.

[0157] The gateway plug-in that has successfully completed the authentication negotiation can issue tokens required for automatic login capabilities for devices and applications within the LAN, and can also serve as an authentication center for new device access authentication.

[0158] Through the above steps, the gateway can be used as an authentication center to complete authentication in the local area network, which speeds up authentication and saves network resources. The authentication negotiation result based on the operator's home gateway network registration code is used as the trust root for authenticating the devices and applications in the home network. The authentication trust root does not leave the device, is not transmitted on the public network, and the operator's home gateway device cannot be easily cracked. This can ensure that the devices and services in the home are not directly exposed to the outside world, effectively ensuring the security of home assets.

[0159] After the gateway device authentication negotiation is completed, when the user needs to configure and bind the smart device, the user powers on or resets the smart device, and the terminal configuration SDK integrated in the smart device and the networking plug-in of the smart networking terminal complete automatic temporary networking. It is understandable that in some cases, the gateway also has a router function, then this smart networking terminal is the gateway device. In another part of the case, the gateway does not have a router function, then in addition to the gateway, there will generally be a router device in the home, and the router is directly connected to the gateway. Logically, the router and the gateway can also be regarded as one. The smart device then reports the device information to request access to the formal WiFi network, and the networking plug-in forwards the smart device information to the smart home device management platform for inspection to ensure that the smart device is legal. After the inspection is successful, the networking plug-in sends the network access information, which includes information such as the WiFi hotspot name, key, and encryption algorithm / mode. The smart device then completes the access to the WiFi network based on the network access information. For details, please refer to Figure 5 .

[0160] After the networking plug-in is temporarily connected to the smart device, it receives the smart device information and verifies the smart device information. If the verification is successful, it sends the WiFi information, and the smart device configures the network according to the WiFi information. At this point, the network configuration operation of the smart device is completed, and the smart device can officially connect to the Internet.

[0161] When the smart device is successfully verified and network configuration is completed, the smart home device management platform will perform a verification check on the device information. If the check passes, a unique user ID will be assigned to the smart device, and the smart device will be bound to the home broadband account. This way, the smart device can carry the unique user ID to request to log in to the smart home management platform. After successfully logging in, the smart device can be viewed or operated on the application logged in to the home broadband account.

[0162] Specifically, refer to Figure 6 , the smart device carries the device ID, SN serial number, product service code sourceID, and online application of the home security authentication platform to initiate a request to bind the device to the gateway authentication plug-in. Among them, the device ID and SN serial number represent the specific device and are the device identification of the device. The specific information of the device can be obtained based on the device ID and SN serial number. The product service code sourceID is the identity authentication information assigned to each family, and the unique home ID homeId can be obtained through sourceID.

[0163] The gateway authentication plug-in generates the function based on the smart device information: token = homeId||HMAC-SHA256(password,cnonce||devId||devSn||sourceId)

[0164] Among them, homeId is the unique identifier of the home, cnonce is the random number on the terminal, password is the network registration code, devId is the device ID, and devSn is the device SN serial number.

[0165] A token is generated locally and verified on the home security authentication platform. After the authentication platform token verification passes, the device ID, device SN serial number, and home broadband account information userInfo are forwarded to the smart home device management platform for device binding.

[0166] The smart home device management platform performs a verification check on the device ID and device SN serial number. If the check passes, a user unique identifier userid is assigned to the requesting device, and the user's broadband mobile phone account in the home broadband account information is bound at the same time.

[0167] The smart device carries the user's unique identification and other information to request to log in to the smart home device management platform. After the online login is successful, the user can view the device information on the APP logged in with the home broadband mobile phone number.

[0168] The above solution allows the smart device to connect to the networking plug-in for temporary networking after startup for verification. After successful verification, network configuration is performed and the smart device is bound to the home broadband account through the smart home device management platform. Automatic network configuration and binding with a unified account are achieved, improving the user experience.

[0169] Based on the device binding method provided in the above embodiment, the present application also provides a specific implementation of the device binding apparatus. Please refer to the following embodiment.

[0170] See first Figure 7 The device binding apparatus 700 provided in the embodiment of the present application includes the following modules:

[0171] The receiving module 701 is used to receive a binding request sent by a smart device, where the binding request includes a device identifier and a unique family identifier;

[0172] A generating module 702, configured to generate an authentication token according to a device identifier and a unique family identifier;

[0173] The sending module 703 is used to send the authentication token to the security authentication platform. The authentication token is used for authentication on the security authentication platform and, if the authentication is passed, the device identification and broadband account information are sent to the device management platform. The device management platform binds the smart device to the broadband account information based on the device identification of the smart device. The broadband account information is determined based on the unique household identification.

[0174] The above method of this embodiment can realize automatic device binding. The user end only needs to control the smart device bound to this broadband account according to the broadband account, which can simplify the operation steps of network configuration binding and improve user experience.

[0175] As an implementation of the present application, the generating module 702 is also used to generate a random number corresponding to the device identifier and the unique household identifier. In this implementation, the device binding apparatus 700 may also include:

[0176] The combination module is used to combine the device identification, the family unique identification and the random number to obtain an authentication token.

[0177] The above method of this embodiment obtains a verification token by combining a random number with the smart device information, thereby preventing the occurrence of counterfeit tokens.

[0178] As an implementation of the present application, the combination module is also used to combine the unique home identifier with the random number added and the device identifier to obtain a verification token. In this implementation, the device binding apparatus 700 may also include:

[0179] Added module for adding a random number at the preset position of the family unique identifier.

[0180] The above method of this embodiment increases the security of the unified account by using the identification code of the preset unified account and combining the random number with the identification code.

[0181] As an implementation of the present application, the sending module 703 is also used to send network access information to the smart device when the verification is successful, and the network access information is used to formally connect to the Internet. In this implementation, the device binding apparatus 700 may also include:

[0182] Networking module, used for temporary networking with smart devices;

[0183] An acquisition module, used to acquire smart device information of the smart device when temporary networking is successful;

[0184] The verification module is used to send the smart device information to the device management platform for verification.

[0185] The above method of this embodiment enhances security by temporarily connecting to the network first and then allowing the device to be verified before officially connecting to the network.

[0186] As an implementation of the present application, the sending module 703 is also used to send authentication negotiation information to the security authentication platform. In this implementation, the device binding apparatus 700 may also include:

[0187] The receiving module is used to receive the successful authentication result returned by the security authentication platform, and the successful authentication result is used as the trust root of the smart device.

[0188] In the above method of this embodiment, after the gateway authenticates to the security authentication platform, the authentication negotiation result is used as the trust root to ensure that the devices and services in the home are not directly exposed to the outside.

[0189] Another embodiment of the present application provides a device binding apparatus, including the following modules:

[0190] A receiving module, used to receive an authentication token sent by a gateway device, wherein the binding request includes a device identifier and a unique home identifier of the smart device;

[0191] Authentication module, used for authentication based on authentication tokens;

[0192] The sending module is used to send the device identification and broadband account information to the device management platform when the authentication is successful, and bind the smart device with the broadband account information according to the device identification of the smart device through the device management platform;

[0193] The receiving module is further used to receive a unique user identifier assigned by the device management platform to the smart device, where the unique user identifier is obtained based on the device identifier and the broadband account information;

[0194] The sending module is also used to send the user's unique identification to the smart device.

[0195] As an implementation of the present application, the receiving module is further used to receive authentication negotiation information sent by the gateway device, and the authentication negotiation information includes the user network registration code; the authentication module is further used to initiate an authentication request for the authentication negotiation information to the home open platform; the receiving module is further used to receive the user account information associated with the user network registration code sent by the home open platform when the authentication is successful; the sending module is further used to send the authentication negotiation success result to the gateway device. In this implementation, the above-mentioned device binding device may also include:

[0196] The processing module is used to obtain the authentication negotiation success result according to the user account information.

[0197] Another embodiment of the present application provides a device binding apparatus, including the following modules:

[0198] A sending module, used to call the pre-integrated network distribution component to send device information to the gateway device;

[0199] A networking module, used to connect to the network according to the network access information sent by the gateway device;

[0200] A sending module, used to send a binding request to the gateway device according to its own device identification and authentication identification;

[0201] The sending module is also used to receive the user's unique identification sent by the security authentication platform;

[0202] A processing module, used for obtaining online request information according to a user unique identifier and a device identifier;

[0203] The sending module is also used to send online request information to the device management platform for binding with the broadband account information.

[0204] The above-mentioned method of this embodiment can be easily integrated into smart devices through the pre-developed unified distribution network components, which facilitates the large-scale promotion and use of the solution.

[0205] Figure 8 A schematic diagram of the hardware structure of a device binding device provided in an embodiment of the present application is shown.

[0206] The data processing device may include a processor 801 and a memory 802 storing computer program instructions.

[0207] Specifically, the processor 801 may include a central processing unit (CPU), or an application specific integrated circuit (ASIC), or may be configured to implement one or more integrated circuits of the embodiments of the present application.

[0208] The memory 802 may include a large capacity memory for data or instructions. By way of example and not limitation, the memory 802 may include a hard disk drive (HDD), a floppy disk drive, a flash memory, an optical disk, a magneto-optical disk, a magnetic tape, or a universal serial bus (USB) drive or a combination of two or more of these. In appropriate cases, the memory 802 may include a removable or non-removable (or fixed) medium. In appropriate cases, the memory 802 may be inside or outside the integrated gateway disaster recovery device. In a specific embodiment, the memory 802 is a non-volatile solid-state memory.

[0209] The memory may include a read-only memory (ROM), a random access memory (RAM), a magnetic disk storage medium device, an optical storage medium device, a flash memory device, an electrical, optical or other physical / tangible memory storage device. Therefore, typically, the memory includes one or more tangible (non-transitory) computer-readable storage media (e.g., a memory device) encoded with software including computer-executable instructions, and when the software is executed (e.g., by one or more processors), it is operable to perform the operations described with reference to the data processing method according to any one embodiment of the present disclosure.

[0210] The processor 801 implements any one of the data processing methods in the above embodiments by reading and executing computer program instructions stored in the memory 802 .

[0211] In one example, the data processing device may further include a communication interface 803 and a bus 810. Figure 8 As shown, the processor 801, the memory 802, and the communication interface 803 are connected via a bus 810 and communicate with each other.

[0212] The communication interface 803 is mainly used to implement communication between various modules, devices, units and / or equipment in the embodiments of the present application.

[0213] Bus 810 includes hardware, software or both, and the parts of online data flow billing equipment are coupled to each other. For example, but not limitation, bus may include accelerated graphics port (AGP) or other graphics bus, enhanced industrial standard architecture (EISA) bus, front-end bus (FSB), hypertransport (HT) interconnection, industrial standard architecture (ISA) bus, infinite bandwidth interconnection, low pin count (LPC) bus, memory bus, micro channel architecture (MCA) bus, peripheral component interconnection (PCI) bus, PCI-Express (PCI-X) bus, serial advanced technology attachment (SATA) bus, video electronics standard association local (VLB) bus or other suitable bus or two or more of these combinations. In appropriate cases, bus 810 may include one or more buses. Although the present application embodiment describes and shows a specific bus, the application considers any suitable bus or interconnection.

[0214] In addition, in combination with the data processing method in the above embodiments, the present application embodiment can provide a computer storage medium for implementation. The computer storage medium stores computer program instructions; when the computer program instructions are executed by a processor, any one of the data processing methods in the above embodiments is implemented.

[0215] However, it should be clear that the present invention is not limited to the specific configurations and processes described above and shown in the figures. Moreover, for the sake of simplicity, a detailed description of known methods and techniques is omitted here. In the above embodiments, several specific steps are described and shown as examples. However, the method process of the present invention is not limited to the specific steps described and shown, and those skilled in the art can make various changes, modifications and additions, or change the order between the steps after understanding the spirit of the present invention.

[0216] The functional blocks shown in the above block diagram can be implemented as hardware, software, firmware or a combination thereof. When implemented in hardware, it can be, for example, an electronic circuit, an application specific integrated circuit (ASIC), appropriate firmware, a plug-in, a function card, etc. When implemented in software, the elements of the present invention are programs or code segments that are used to perform the required tasks. Programs or code segments can be stored in machine-readable media, or transmitted on a transmission medium or a communication link by a data signal carried in a carrier wave. "Machine-readable media" can include any medium capable of storing or transmitting information. Examples of machine-readable media include electronic circuits, semiconductor memory devices, ROM, flash memory, erasable ROM (EROM), floppy disks, CD-ROMs, optical disks, hard disks, optical fiber media, radio frequency (RF) links, etc. Code segments can be downloaded via computer networks such as the Internet, intranets, etc.

[0217] The present invention can be implemented in other specific forms without departing from its spirit and essential features. For example, the algorithms described in the specific embodiments can be modified, and the system architecture does not depart from the basic spirit of the present invention. Therefore, the current embodiments are regarded as exemplary and non-restrictive in all aspects, and the scope of the present invention is defined by the appended claims rather than the above description, and all changes falling within the meaning and equivalent scope of the claims are thus included in the scope of the present invention.

[0218] Those skilled in the art should understand that the above embodiments are exemplary rather than restrictive. Different technical features appearing in different embodiments can be combined to achieve beneficial effects. Based on the study of the drawings, the specification and the claims, those skilled in the art should be able to understand and implement other variations of the disclosed embodiments. In the claims, the term "comprising" does not exclude other devices or steps; the indefinite article "a" does not exclude a plurality; the terms "first" and "second" are used to indicate names rather than to indicate any specific order. Any figure marks in the claims should not be understood as limiting the scope of protection. The functions of multiple parts appearing in the claims can be implemented by a single hardware or software module. The appearance of certain technical features in different dependent claims does not mean that these technical features cannot be combined to achieve beneficial effects.

Claims

1. A device binding method, characterized in that: The method is applied to a gateway device, and the method comprises: Receiving a binding request sent by a smart device, wherein the binding request includes a device identifier and a unique home identifier; Generate an authentication token based on the device identifier and the unique household identifier; The authentication token is sent to a security authentication platform. The authentication token is used for authentication on the security authentication platform. If the authentication is passed, the device identification and broadband account information are sent to a device management platform. The device management platform binds the smart device to the broadband account information based on the device identification of the smart device. The broadband account information is determined based on the unique household identification.

2. The device binding method according to claim 1, characterized in that: The generating of the authentication token according to the device identifier and the unique family identifier includes: Generate a random number corresponding to the device identifier and the household unique identifier; The device identifier, the unique family identifier and the random number are combined to obtain an authentication token.

3. The device binding method according to claim 2, characterized in that: The step of combining the device identifier, the unique family identifier, and the random number to obtain an authentication token includes: Add the random number at a preset position of the unique identification of the family; The unique household identifier to which the random number is added is combined with the device identifier to obtain a verification token.

4. The device binding method according to claim 1, characterized in that: Before receiving the binding request sent by the smart device, the method further includes: Temporarily connecting to the smart device; When the temporary networking is successful, obtaining the smart device information of the smart device; Sending the smart device information to the device management platform for verification; If the verification is successful, network access information is sent to the smart device, and the network access information is used to officially connect to the Internet.

5. The device binding method according to claim 1, characterized in that: Before receiving a temporary networking request from a smart device and temporarily networking with the smart device information, the method further includes: Send authentication negotiation information to the security authentication platform; Receive a successful authentication result returned by the security authentication platform, where the successful authentication result is used as a trust root for the smart device.

6. A device binding method, characterized in that: The method is applied to a security authentication platform, and the method comprises: Receive an authentication token sent by a gateway device, wherein the authentication token includes a device identifier of the smart device and a unique home identifier; Authenticating based on the authentication token; If the authentication is successful, the device identification and broadband account information are sent to the device management platform, and the device management platform binds the smart device to the broadband account information according to the device identification of the smart device; Receive a unique user identifier assigned by the device management platform to the smart device, where the unique user identifier is obtained based on the device identifier and broadband account information; The user unique identifier is sent to the smart device.

7. The device binding method according to claim 6, characterized in that: Before the receiving of the authentication token sent by the gateway device and the binding request including the device identification and the home unique identification of the smart device, the method further includes: Receiving authentication negotiation information sent by the gateway device, wherein the authentication negotiation information includes a user network access registration code; Initiate an authentication request for authentication negotiation information to the family open platform; In case the authentication is successful, receiving user account information associated with the user network registration code sent by the home open platform; Obtaining a successful authentication negotiation result according to the user account information; Send the authentication negotiation success result to the gateway device.

8. A device binding method, characterized in that: The method is applied to a smart device, and the method comprises: Call the pre-integrated network distribution component to send device information to the gateway device; Connecting to the network according to the network access information sent by the gateway device; Send a binding request to the gateway device according to its own device identification and family unique identification; Receive the unique user ID sent by the security authentication platform; Obtaining online request information according to the user unique identifier and the device identifier; The online request information is sent to the device management platform to be bound with the broadband account information.

9. A device binding apparatus, characterized in that: The device comprises: A receiving module, used to receive a binding request sent by a smart device, wherein the binding request includes a device identifier and a unique home identifier; A generating module, used for generating an authentication token according to the device identifier and the unique family identifier; A sending module is used to send the authentication token to a security authentication platform. The authentication token is used for authentication on the security authentication platform and, if the authentication is passed, the device identification and broadband account information are sent to a device management platform. The device management platform binds the smart device to the broadband account information according to the device identification of the smart device. The broadband account information is determined according to the unique household identification.

10. A device binding device, characterized in that: The device comprises: a processor, and a memory storing computer program instructions; the processor reads and executes the computer program instructions to implement the device binding method according to any one of claims 1 to 5.

11. A computer-readable storage medium, characterized in that: The computer storage medium stores computer program instructions, and when the computer program instructions are executed by a processor, the device binding method according to any one of claims 1 to 5 is implemented.

Images