Secure communication method, communication device and storage medium

Abstract

The embodiment of the invention provides a secure communication method, communication equipment and a storage medium. The method comprises the following steps: establishing initial connection with terminal equipment; bidirectional key cross verification with the terminal equipment is completed through the initial connection, and the bidirectional key cross verification is that both parties needing communication actively generate keys and verification is carried out through decryption results of the opposite parties; and confirming that the verification is passed, and completing communication with the terminal equipment. Through the embodiment of the invention, the security of communication between the physiological parameter acquisition equipment and the terminal equipment can be remarkably improved, and the user privacy data acquired by the physiological parameter acquisition equipment is prevented from being stolen to the greatest extent.

Description

Technical Field

[0001] The present application relates to the field of communications, and specifically, embodiments of the present application relate to a secure communication method, communication device, and storage medium. Background Art

[0002] Existing medical devices (as examples of physiological parameter collection devices) communicate with terminal devices such as mobile phones through traditional Bluetooth (such as BLE 4.2 and below) or other communication protocols to transmit the physiological parameter values ​​of personal users collected by them to corresponding terminal devices such as mobile phones. However, due to the lack of secure communication measures in related short-range wireless communication technologies, there is a greater risk of leakage when using these short-range wireless communications to transmit private information (for example, personal health data collected by medical devices).

[0003] For example, the Bluetooth protocol that uses related technologies has the following security risks: weak authentication mechanism, the default PIN code (such as "0000") or one-way authentication can be easily cracked by brute force, and attackers can disguise themselves as legitimate devices to steal sensitive data such as blood sugar and heart rate (MITM attack success rate >78%); physical layer attacks, Bluetooth signal power consumption analysis (cost <$100) can reversely infer encryption keys, resulting in the circulation of patient medical history and DNA information on the black market.

[0004] Therefore, how to ensure secure communication between medical physiological parameter acquisition equipment and terminal devices to better protect the physiological parameter information of individual users has become a technical problem that needs to be solved urgently. Summary of the Invention

[0005] The purpose of the embodiments of the present application is to provide a method, communication device and storage medium for secure communication. Through the embodiments of the present application, the security of communication between the physiological parameter acquisition device and the terminal device can be significantly improved, and the user privacy data collected by the physiological parameter acquisition device can be guaranteed to the greatest extent that it will not be stolen.

[0006] In the first aspect, an embodiment of the present application provides a method for secure communication, which is applied to a physiological information acquisition device, and the method includes: establishing an initial connection with a terminal device; completing a two-way key cross-verification with the terminal device through the initial connection, wherein the two-way key cross-verification is that both parties who need to communicate actively generate keys and verify the decryption results of the other party; confirming that the verification is passed, and completing the communication with the terminal device.

[0007] The embodiments of the present application create a closed-loop verification chain, breaking through the traditional one-way verification mode and improving the security of the transmission of private data such as personal health collected by the physiological parameter acquisition device to the terminal device.

[0008] In some embodiments, the bidirectional key cross-verification with the terminal device is completed through the initial connection, including: decrypting the encrypted first random key K_app_enc to obtain the first random key to be verified K_app_dec, wherein the encrypted first random key is obtained by the terminal device encrypting the original first random key K_app_plain according to the encryption algorithm, and the first random key to be verified K_app_dec is plain text; generating the original second random key K_dev_plain, and encrypting the original second random key K_dev_plain to obtain the encrypted second random key K_dev_enc; sending the encrypted second random key K_dev_enc to the terminal device. Send a verification data packet containing the first random key K_app_dec to be verified and the encrypted second random key K_dev_enc, so that the terminal device confirms whether the first random key K_app_dec to be verified is consistent with the original first random key K_app_plain to complete the verification of the first direction in the cross-verification, and enables the terminal device to decrypt the encrypted second random key K_dev_enc to obtain the second random key K_dev_dec to be verified; receive and verify whether the second random key K_dev_dec to be verified is consistent with the original second random key K_dev_plain to complete the verification of the second direction in the cross-verification.

[0009] The verification data packet sent by the physiological parameter acquisition device of the embodiment of the present application includes the random key transmission of the terminal device obtained by decryption, and the random key obtained by decryption is sent to the terminal device in plain text form (not double-encrypted). On the one hand, the embodiment of the present application uses the plain text return mechanism as a verification trap to increase the attack cost. On the other hand, the closed-loop two-way verification chain can block the man-in-the-middle attack path, forcing the attacker to crack the two-way key at the same time before invading the system, significantly increasing the attack cost.

[0010] In some embodiments, the verification data packet structure includes: a multiple-byte header for carrying attribute information of the physiological parameter acquisition device; multiple bytes for carrying the first random key K_app_dec to be verified; multiple bytes for carrying the encrypted second random key K_dev_enc; and multiple bytes for carrying a dynamic verification code. The dynamic verification code is related to the unique serial number of the physiological parameter acquisition device.

[0011] The embodiments of the present application carry a dynamic verification code in the verification package and use the dynamic verification code to bind the device hardware identification and the time factor, thereby preventing replay attacks and improving the security of communications.

[0012] In some embodiments, the confirmation verification is passed and the communication with the terminal device is completed, including: calculating the dynamic calibration factor γ based on the current environmental parameters and the session key; generating an encrypted calibration instruction containing the dynamic calibration factor γ and sending it to the terminal device, so that the terminal device corrects the physiological data display value according to the dynamic calibration factor.

[0013] The embodiments of the present application deeply integrate security keys into medical parameter calibration, achieving security and functional coupling, thereby improving device performance while enhancing communication security.

[0014] In some embodiments, establishing an initial connection with the terminal device includes: sending a Bluetooth name and UUID information to the terminal device via broadcasting, wherein the Bluetooth name is used by the terminal device to determine the type of the physiological parameter acquisition device and the UUID information is used by the terminal device to determine the model of the physiological parameter acquisition device, or the Bluetooth name is used by the terminal device to determine the type and model of the physiological parameter acquisition device; receiving the Bluetooth connection establishment information sent by the terminal device, and establishing the initial connection, wherein the terminal device sends the Bluetooth connection establishment information after determining the type and model of the physiological parameter acquisition device; wherein the type and the model are used to establish a mapping relationship with the collected data.

[0015] Some embodiments of the present application obtain the type and model of the physiological parameter acquisition device by establishing a Bluetooth connection process, and then can record the corresponding relationship between the detailed information of the device and the collected data, thereby improving the tracking feedback of the accuracy of the device measurement results.

[0016] In a second aspect, some embodiments of the present application provide a method for secure communication, which is applied to a terminal device, and the method includes: establishing an initial connection with the physiological parameter acquisition device; generating an original first random key, and encrypting the original first random key according to an encryption algorithm to obtain an encrypted first random key; sending the encrypted first random key to the physiological parameter acquisition device so that the physiological parameter acquisition device decrypts the encrypted first random key to obtain a first random key to be verified; in response to a verification package received from the physiological parameter acquisition device containing the first random key to be verified and the encrypted second random key, decrypting the encrypted second random key to obtain a second random key to be verified and confirming whether the first random key to be verified is consistent with the original first random key; sending the second random key to be verified to the physiological parameter acquisition device so that the physiological parameter acquisition device verifies whether the second random key to be verified is consistent with the original second random key.

[0017] In some embodiments, establishing an initial connection with the physiological parameter acquisition device includes: in response to the Bluetooth name and UUID information received from the physiological parameter acquisition device, determining the type and model of the physiological parameter acquisition device according to the Bluetooth name; recording the type and the model, wherein the type and the model are used to establish a mapping relationship with the acquired data; sending Bluetooth connection establishment information to the physiological parameter acquisition device to establish the initial connection; wherein the type and the model are used to establish a mapping relationship with the acquired data.

[0018] Some embodiments of the present application can determine the type and model of the physiological parameter acquisition device through the Bluetooth name and record this information so that a correspondence between the data collected by the physiological parameter acquisition device and the device attribute information can be established subsequently through this information, so that the working performance and other characteristics of the physiological parameter acquisition device can be understood in a timely manner for convenient maintenance.

[0019] In some embodiments, establishing an initial connection with the physiological parameter acquisition device includes: in response to the Bluetooth name and UUID information received from the physiological parameter acquisition device, determining the type of the physiological parameter acquisition device according to the Bluetooth name and providing a model selection interface according to the UUID information; in response to a selection operation of multiple model options displayed on the model selection interface, determining the model of the physiological parameter acquisition device; recording the type and the model; sending Bluetooth connection establishment information to the physiological parameter acquisition device to establish the initial connection; wherein, the type and the model are used to establish a mapping relationship with the collected data.

[0020] Some embodiments of the present application are directed to multiple models of the same type of product. First, the device type is determined by the Bluetooth name. Then, by displaying the model options to the user and receiving the user's confirmation of the specific model of the device, the specific information is recorded so that the corresponding relationship between the data collected by the physiological parameter acquisition device and the attribute information of the device can be established later through this information. The working performance and other characteristics of the physiological parameter acquisition device can be understood in a timely manner for convenient maintenance. On the third aspect, some embodiments of the present application provide a method for secure communication, the method comprising: a terminal device obtains the broadcast information of the physiological parameter acquisition device and establishes a Bluetooth connection with the physiological parameter acquisition device; based on the Bluetooth connection, the following two-way key cross-verification phase is initiated: the terminal device generates an original first random key K_app_plain, and uses an asymmetric encryption algorithm to encrypt the original first random key to obtain an encrypted first random key K_app_enc; the terminal device sends the encrypted first random key K_app_enc to the physiological parameter acquisition device; the physiological parameter acquisition device decrypts the encrypted first random key K_app_enc to obtain the first random key to be verified K_app_dec; the physiological parameter acquisition device generates an original second random key K_dev_plain, and uses a symmetric encryption algorithm to encrypt the original second The random key K_dev_plain is encrypted to generate an encrypted second random key K_dev_enc; the physiological parameter acquisition device sends a verification data packet containing the plaintext of the first random key K_app_dec to be verified and the encrypted second random key K_dev_enc to the terminal device; the terminal device verifies whether the first random key K_app_dec to be verified is equal to the original first random key K_app_plain, and terminates the connection if not; the terminal device decrypts the encrypted second random key K_dev_enc to obtain the second random key K_dev_dec to be verified and sends it to the physiological parameter acquisition device; if the physiological parameter acquisition device verifies whether the second random key K_dev_dec to be verified is equal to the original second random key K_dev_plain, the connection is terminated if not, and a secure communication channel is established if they are equal.

[0021] In a fourth aspect, some embodiments of the present application provide a physiological parameter acquisition device, which includes: an initial communication link establishment module, configured to establish an initial connection with a terminal device; a verification module, configured to: complete a two-way key cross-verification with the terminal device through the initial connection, wherein the two-way key cross-verification is that both parties who need to communicate actively generate keys and verify the decryption results of the other party; a secure communication module, configured to confirm that the verification is passed, establish a secure channel and use the secure channel to complete communication with the terminal device.

[0022] In a fifth aspect, some embodiments of the present application provide a computer program product, comprising computer program instructions, which, when read and executed by a processor, can implement the method described in any one of the embodiments of the first aspect.

[0023] In a sixth aspect, some embodiments of the present application provide an electronic device comprising a memory, a processor, and a computer program stored on the memory and executable on the processor, wherein when the processor executes the computer program, the method described in any one of the embodiments included in the first aspect can be implemented. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the following is a brief introduction to the drawings required for use in the embodiments of the present application. It should be understood that the following drawings only show certain embodiments of the present application and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other relevant drawings can be obtained based on these drawings without creative work.

[0025] Figure 1 A schematic diagram of the structure of the secure communication system provided in an embodiment of the present application;

[0026] Figure 2 One of the flowcharts of the secure communication method provided in an embodiment of the present application;

[0027] Figure 3 One of the flowcharts of the secure communication method provided in an embodiment of the present application;

[0028] Figure 4 Flowchart 3 of the secure communication method provided in an embodiment of the present application;

[0029] Figure 5 A block diagram of the composition of the physiological parameter acquisition device provided in an embodiment of the present application;

[0030] Figure 6 A schematic diagram of the electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0031] The technical solutions in the embodiments of the present application will be described below in conjunction with the drawings in the embodiments of the present application.

[0032] It should be noted that similar reference numerals and letters represent similar items in the following drawings. Therefore, once an item is defined in one drawing, it does not need to be further defined or explained in subsequent drawings. At the same time, in the description of this application, the terms "first", "second", etc. are only used to distinguish the description and should not be understood as indicating or implying relative importance.

[0033] At least in order to solve the technical defects of the prior art pointed out in the background technology part, the embodiment of the present application provides a method for secure communication, which includes: a physiological parameter acquisition device and a terminal device establish a connection and maintain a connection state; a first original random key is generated through the connected terminal device (an application program that can process data collected by the physiological parameter acquisition device is installed on the terminal device) and encrypted to obtain an encrypted first original key, and the encrypted key is sent to the physiological parameter acquisition device in ciphertext form; the physiological parameter acquisition device parses the received encrypted data to obtain a first random key to be verified, and generates an original second original random key and encrypts it to obtain an encrypted second random key; the physiological parameter acquisition device sends a verification package including the first random key to be verified and the encrypted second random key to the terminal device; the terminal device confirms whether the first random key to be verified is consistent with the original first random key, and if not, disconnects the connection; the terminal device decrypts the encrypted second random key to obtain the second random key to be verified, and sends the second random key to be verified to the physiological parameter acquisition device; the physiological parameter acquisition device verifies whether the second random key to be verified is consistent with the original second random key, and if not, disconnects the connection; if consistent, a secure communication link is established to perform data transmission between the terminal device and the physiological parameter acquisition device.

[0034] The embodiments of the present application create a closed-loop verification chain, breaking through the traditional one-way verification mode and improving the security of physiological parameter acquisition devices transmitting personal health and other private data to terminal devices.

[0035] Please see Figure 1 , Figure 1 The secure communication system provided in the embodiment of the present application includes: a physiological parameter acquisition device 100 and a terminal device 200, wherein the physiological parameter acquisition device 100 exemplarily includes medical devices such as a sphygmomanometer and a blood oximeter, as well as non-medical devices for physiological parameter acquisition, and the terminal device 200 exemplarily includes a mobile phone or a computer, etc., which has stronger display capabilities or stronger data processing capabilities than the physiological parameter acquisition device.

[0036] For example, in some embodiments of the present application, the physiological parameter acquisition device transmits the parameter values ​​of the physiological parameters acquired by it to a mobile phone terminal for display or further data processing.

[0037] The following combination Figure 2 A method for secure communication performed by a physiological parameter acquisition device is exemplarily described, the method comprising:

[0038] S110: Establish an initial connection with the terminal device.

[0039] The initial connection may be a short-range communication connection such as Bluetooth or UWB, or other connection methods. For example, if the terminal device is a mobile terminal and the physiological parameter acquisition device is a medical device, then S110 may include: the mobile terminal obtains broadcast information of the medical device and establishes a Bluetooth connection.

[0040] For example, in some embodiments of the present application, S110 exemplarily includes: establishing a Bluetooth connection with the terminal device.

[0041] S120, completing a two-way key cross-verification with the terminal device through the initial connection, wherein the two-way key cross-verification is that both parties who need to communicate actively generate a key and verify the decryption result of the other party.

[0042] It should be noted that in the embodiments of the present application, the terminal device is an application installed with an application for processing data collected by the physiological parameter acquisition device. For example, the processing program APP can display results or perform further calculations based on the data collected from the physiological parameter acquisition device. For example, the types of terminal devices include mobile terminals or computers.

[0043] In the embodiment of the present application, the two parties that need to communicate are the physiological parameter acquisition device and the terminal device. In the embodiment of the present application, two-way key cross-verification is performed, that is, each party in the communication needs to verify whether the data decrypted by the other party is consistent with the original key stored by itself. This can maximize the legitimacy of the identities of the communicating parties and thereby improve the security of the transmission of personal privacy data from the physiological parameter acquisition device to other devices.

[0044] S130, confirming that the verification is successful and completing the communication with the terminal device.

[0045] For example, in some embodiments of the present application, if both parties pass cross-verification, a secure communication channel may be established between the two parties for data transmission. For example, the physiological parameter acquisition device may send the parameter values ​​of the physiological parameters of the individual user collected by it to the terminal device through the established secure channel, or the physiological parameter acquisition device may send the correction parameter values ​​to the terminal device through the established secure channel so that the terminal device can display the values ​​more clearly and accurately.

[0046] In some embodiments of the present application, the process of completing the bidirectional key cross-verification with the terminal device through the initial connection in S120 (this process is performed by the physiological parameter acquisition device) exemplarily includes:

[0047] In the first step, the encrypted first random key K_app_enc is decrypted to obtain the first random key to be verified K_app_dec, wherein the encrypted first random key is obtained by the terminal device encrypting the original first random key K_app_plain according to the encryption algorithm, and the first random key to be verified K_app_dec is plain text.

[0048] The second step is to generate an original second random key K_dev_plain, and encrypt the original second random key K_dev_plain to obtain an encrypted second random key K_dev_enc.

[0049] The third step is to send a verification data packet containing the first random key K_app_dec to be verified and the encrypted second random key K_dev_enc to the terminal device, so that the terminal device can confirm whether the first random key K_app_dec to be verified is consistent with the original first random key K_app_plain to complete the verification of the first direction in the cross-verification, and enable the terminal device to decrypt the encrypted second random key K_dev_enc to obtain the second random key K_dev_dec to be verified.

[0050] The fourth step is to receive the second random key to be verified from the terminal device and verify whether the second random key to be verified K_dev_dec is consistent with the original second random key K_dev_plain to complete the verification of the second direction in the cross-validation.

[0051] It is understandable that in some embodiments of the present application, the physiological parameter acquisition device may first generate the corresponding random key, and the terminal device may regenerate the original first random key when receiving the encrypted second random key from the physiological parameter acquisition device and provide the encrypted first random key to the generating parameter acquisition device.

[0052] As an example, the verification data packet structure of some embodiments of the present application includes: a multiple-byte header for carrying attribute information of the physiological parameter acquisition device (for example, the attribute information includes: for example, the manufacturer to which the device belongs, or the specific product model, etc.), multiple bytes for carrying the first random key K_app_dec to be verified, multiple bytes for carrying the encrypted second random key K_dev_enc, and multiple bytes for carrying a dynamic check code, wherein the dynamic check code is related to the unique serial number of the physiological parameter acquisition device.

[0053] For example, in some embodiments of the present application, the dynamic check code is a 4-byte dynamic check code, which is calculated as follows:

[0054]

[0055] SN is the unique serial number of the device, and Timestamp is the last 4 bytes of the current timestamp.

[0056] In some embodiments of the present application, the confirmation verification is passed and the communication with the terminal device is completed, including: calculating the dynamic calibration factor γ based on the current environmental parameters and the session key; generating an encrypted calibration instruction containing the dynamic calibration factor γ and sending it to the terminal device, so that the terminal device corrects the physiological data display value according to the dynamic calibration factor.

[0057] The following combination Figure 3 The following exemplary embodiments provide a method for secure communication performed by a terminal device, including:

[0058] S210: Establish an initial connection with the physiological parameter acquisition device.

[0059] For example, establish a Bluetooth connection with a physiological parameter collection device.

[0060] S220: Generate an original first random key, and encrypt the original first random key according to an encryption algorithm to obtain an encrypted first random key.

[0061] S230: Send the encrypted first random key to the physiological parameter acquisition device, so that the physiological parameter acquisition device decrypts the encrypted first random key to obtain a first random key to be verified.

[0062] S240, in response to a verification package received from the physiological parameter acquisition device and containing the first random key to be verified and the encrypted second random key, decrypt the encrypted second random key to obtain the second random key to be verified and confirm whether the first random key to be verified is consistent with the original first random key.

[0063] S250: Send the second random key to be verified to the physiological parameter acquisition device, so that the physiological parameter acquisition device verifies whether the second random key to be verified is consistent with the original second random key.

[0064] It is understandable that some embodiments of the present application Figure 2 and Figure 3 The method can better complete the secure communication between the physiological parameter acquisition device and the terminal device.

[0065] That is, some embodiments of the present application provide a method for secure communication, which is applied between a physiological parameter acquisition device and a terminal device, and includes:

[0066] In the first step, the terminal device obtains the broadcast information of the physiological parameter acquisition device and establishes a Bluetooth connection with the physiological parameter acquisition device.

[0067] In the second step, the following two-way key cross-verification is initiated based on the Bluetooth connection and communication is completed:

[0068] The terminal device generates an original first random key K_app_plain, and uses an asymmetric encryption algorithm to encrypt the original first random key to obtain an encrypted first random key K_app_enc; the terminal device sends the encrypted first random key K_app_enc to the physiological parameter acquisition device; the physiological parameter acquisition device decrypts the encrypted first random key K_app_enc to obtain a first random key to be verified K_app_dec; the physiological parameter acquisition device generates an original second random key K_dev_plain, and uses a symmetric encryption algorithm to encrypt the original second random key to obtain an encrypted second random key K_dev_enc; the physiological parameter acquisition device sends the encrypted first random key K_app_enc to the terminal device; the physiological parameter acquisition device decrypts the encrypted first random key K_app_enc to obtain a first random key to be verified K_app_dec; the physiological parameter acquisition device generates an original second random key K_dev_plain, and uses a symmetric encryption algorithm to encrypt the original second random key to obtain an encrypted second random key K_dev_enc; the physiological parameter acquisition device sends the encrypted first random key K_app_enc to the terminal device. The device sends a verification data packet containing the plaintext of the first random key K_app_dec to be verified and the encrypted second random key K_dev_enc; the terminal device verifies whether the first random key K_app_dec to be verified is equal to the original first random key K_app_plain, and terminates the connection if they are not equal; the terminal device decrypts the encrypted second random key K_dev_enc to obtain the second random key K_dev_dec to be verified and sends it to the physiological parameter acquisition device; if the physiological parameter acquisition device verifies whether the second random key K_dev_dec to be verified is equal to the original second random key K_dev_plain, terminates the connection if they are not equal, and establishes a secure communication channel if they are equal.

[0069] Below Figure 4 Taking a mobile phone as an example, a secure communication method jointly performed by a terminal device (taking a mobile phone as an example) and a physiological parameter acquisition device is exemplified. The method includes:

[0070] S301, the physiological parameter acquisition device sends a broadcast, that is, the physiological parameter acquisition device sends a Bluetooth broadcast to the outside, and the broadcast information is used to carry the Bluetooth name and UUID.

[0071] S302: The terminal device scans the physiological parameter acquisition device. For example, the scan is initiated by an application App on the terminal device.

[0072] S303: The terminal device identifies the device according to the Bluetooth name and the universally unique identifier (UUID) in the broadcast.

[0073] The process of identifying a device (ie, determining the type and model of the device) includes the following embodiments.

[0074] In some embodiments of the present application, the terminal device can determine the type and model of the physiological parameter acquisition device based on the Bluetooth name, and record the type and model so as to subsequently record the correspondence between the collected data and the type and model, thereby facilitating the performance evaluation or maintenance of the physiological parameter acquisition device.

[0075] In some embodiments of the present application, the terminal device first determines the type of the physiological parameter acquisition device based on the Bluetooth name, and then determines all optional models corresponding to this type of product by UUID and displays them on the terminal device. The user selects the specific model of the physiological parameter acquisition device from the optional models, and records the type and specific model of the physiological parameter acquisition device so as to subsequently record the correspondence between the collected data and the type and model, which is convenient for evaluating the performance of the physiological parameter acquisition device or maintaining it.

[0076] For example, the type of physiological parameter acquisition device corresponds to a device that collects different physiological parameters. For example, the types of physiological parameter acquisition devices include: oximeters or blood pressure monitors. The model of a physiological parameter acquisition device is used to describe devices of a certain type of physiological parameter acquisition device developed at different times or different versions of the device. For example, physiological parameter acquisition devices of the type of oximeter may include three or five different models of products. The functions of different models may differ or the types of communication protocols they use may differ.

[0077] It should be noted that in some embodiments of the present application, the terminal device obtains the scan result and confirms that the physiological parameter acquisition device is the target physiological parameter acquisition device based on the Bluetooth name and UUID in the scan result. For example, if the target physiological parameter acquisition device is a physiological parameter acquisition device produced by a manufacturer of interest, device identification is completed upon identification of the target device.

[0078] S304: The terminal device records the Bluetooth ID after identification and obtains the target Bluetooth device according to the Bluetooth ID.

[0079] For example, in some embodiments of the present application, after identifying that the physiological parameter acquisition device sending the broadcast is the target physiological parameter acquisition device, the corresponding target Bluetooth device is obtained according to the Bluetooth ID in the broadcast.

[0080] S305: The terminal device sends a Bluetooth connection to the physiological parameter acquisition device.

[0081] That is to say, the application APP on the terminal device initiates a connection to the target Bluetooth device.

[0082] S306: The physiological parameter acquisition device returns a successful connection, that is, the terminal device and the physiological parameter acquisition device are successfully connected.

[0083] S307: The terminal device sends an instruction to obtain services and monitor to the physiological parameter acquisition device. That is, the terminal device obtains services from the Bluetooth device and monitors.

[0084] S308, the physiological parameter acquisition device initiates Bluetooth pairing with the terminal device, that is, after receiving the monitoring signal, the physiological parameter acquisition device initiates pairing with the mobile phone, and the mobile phone pops up a window to prompt the user to pair.

[0085] S309: The terminal device returns a message indicating that the pairing is acceptable, indicating that the user has agreed to the pairing.

[0086] S310, the physiological parameter acquisition device sends a pairing success and monitoring success message to the terminal device.

[0087] S311: The terminal device, i.e., the mobile phone, generates an original first random key and encrypts the original first random key to obtain an encrypted first random key. In other words, a random key is generated on the APP side and encrypted using the RSA, AES, or CCM algorithm.

[0088] S312, the terminal device, i.e., the mobile phone, sends the encrypted first random key to the physiological parameter collection device, i.e., sends the encrypted APP-side secret key to the physiological parameter information collection device, and also requests the secret key of the biological information collection device.

[0089] In step S313, the physiological parameter acquisition device decrypts the encrypted first random key to obtain the first random key to be verified. In other words, the physiological parameter acquisition device parses the APP-side secret key using a corresponding algorithm to obtain the first random key to be verified, and subsequently provides the first random key to be verified in plain text to the terminal device.

[0090] S314: The physiological parameter acquisition device generates an original second random key and encrypts the original second random key to obtain an encrypted second random key. In other words, the physiological parameter acquisition device generates the random key of the device end.

[0091] S315, the physiological parameter acquisition device sends the first random key to be verified and the encrypted second random key to the terminal device, that is, the physiological parameter acquisition device sends the parsed APP-side secret key and the encrypted device-side secret key of the generated parameter acquisition device.

[0092] S316, the terminal device determines whether the first random key to be verified matches the original first random key, and if not, disconnects the connection, otherwise continues to execute subsequent steps.

[0093] S317. The terminal device decrypts the encrypted second random key to obtain the to-be-verified second random key. For example, the terminal device continues to parse the device-side secret key of the physiological parameter collection device through the RSA algorithm, and then provides the decrypted to-be-verified second random key to the physiological parameter collection device in plaintext, that is, the APP side sends the to-be-verified second random key to the physiological parameter collection device in plaintext.

[0094] S318. The terminal device, i.e., the mobile phone, sends the to-be-verified second random key to the physiological parameter collection device.

[0095] S319. The physiological parameter collection device determines whether the to-be-verified second random key matches the original second random key. If not, the connection is disconnected; if so, the next step is executed.

[0096] S320. If all the keys match correctly, a connection is established, and subsequent communication is carried out based on this connection. For example, personal sensitive data such as personal health data collected by the physiological parameter collection device is transmitted to the terminal device.

[0097] For example, in some embodiments of the present application, an asymmetric encryption algorithm such as the RSA algorithm can be used for random key encryption processing. This algorithm示例性 includes the following steps: key generation, encryption process, and decryption process. Among them, the key generation includes: randomly selecting two large prime numbers p and q; calculating n = p×q, and n is part of the public key; calculating the Euler function Select an integer e that satisfies and e is relatively prime to e is also part of the public key; calculate the modular inverse d of e with respect to that is, satisfy d is the private key; finally, the public key is (n, e), and the private key is (n, d); the encryption process includes: assuming that the plaintext message to be encrypted is m, and m < n, encrypt m using the public key (n, e) to obtain the ciphertext c, and the encryption formula is: c = me mod n; the decryption process includes: decrypt the ciphertext c using the private key (n, d) to obtain the plaintext m, and the decryption formula is: m = cd mod n. It can be understood that in network communication, the sender can encrypt sensitive information using the receiver's public key, and only the receiver with the corresponding private key can decrypt it, thereby ensuring the confidentiality of data transmission. The sender signs the hash value of the message using its own private key, and the receiver verifies the validity of the signature using the sender's public key to ensure the integrity and non-repudiation of the message. The advantage is high security.

[0098] Please refer to Figure 5 , Figure 5 shows a physiological parameter collection device according to an embodiment of the present application. It should be understood that this device is the same as the above Figure 2The method embodiment corresponds to the method embodiment and can execute each step involved in the above method embodiment. The specific functions of the device can be found in the description above. To avoid repetition, a detailed description is omitted here. The device includes at least one software function module that can be stored in a memory in the form of software or firmware or embedded in the device's operating system. The physiological parameter collection device includes: an initial communication link establishment module 510, a verification module 520, and a secure communication module 530.

[0099] The initial communication link establishing module 510 is configured to establish an initial connection with the terminal device.

[0100] The verification module 520 is configured to complete a two-way key cross-verification with the terminal device through the initial connection, wherein the two-way key cross-verification is that both parties who need to communicate actively generate keys and verify the decryption results of the other party.

[0101] The secure communication module 530 is configured to confirm that the verification is successful, establish a secure channel, and use the secure channel to complete communication with the terminal device.

[0102] Those skilled in the art will clearly understand that, for the convenience and brevity of description, the specific working process of the device described above can refer to the corresponding process in the aforementioned method, and will not be described in detail here.

[0103] Some embodiments of the present application provide a computer program product, including computer program instructions. When the computer program instructions are read and executed by a processor, the method described in any one of the embodiments of the secure communication method can be implemented.

[0104] like Figure 6 As shown, some embodiments of the present application provide an electronic device 600, which includes a memory 610, a processor 620, and a computer program stored on the memory 610 and executable on the processor 620, wherein the processor 620 reads the program from the memory 610 through a bus 630 and executes the computer program to implement the technical solution in any one of the embodiments included in the above-mentioned method of secure communication.

[0105] Processor 620 can process digital signals and can include various computing architectures, such as a complex instruction set computer architecture, a reduced instruction set computer architecture, or an architecture that implements a combination of multiple instruction sets. In some examples, processor 620 can be a microprocessor.

[0106] The memory 610 may be used to store instructions executed by the processor 620 or data related to the execution of instructions. These instructions and / or data may include code for implementing some or all functions of one or more modules described in the embodiments of the present application. The processor 620 of the embodiment of the present disclosure may be used to execute the instructions in the memory 610 to implement Figure 2-Figure 4 The memory 610 includes a dynamic random access memory, a static random access memory, a flash memory, an optical memory or other memory known to those skilled in the art.

[0107] In the several embodiments provided in this application, it should be understood that the disclosed devices and methods can also be implemented in other ways. The device embodiments described above are merely illustrative. For example, the flowcharts and block diagrams in the accompanying drawings show the possible architectures, functions and operations of the devices, methods and computer program products according to the multiple embodiments of the present application. In this regard, each box in the flowchart or block diagram can represent a module, a program segment or a part of the code, and the module, program segment or a part of the code contains one or more executable instructions for implementing the specified logical functions. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in an order different from that marked in the accompanying drawings. For example, two consecutive boxes can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flowchart, and the combination of boxes in the block diagram and / or flowchart, can be implemented using a dedicated hardware-based system that performs the specified function or action, or can be implemented using a combination of dedicated hardware and computer instructions.

[0108] In addition, the functional modules in each embodiment of the present application can be integrated together to form an independent part, or each module can exist independently, or two or more modules can be integrated to form an independent part.

[0109] If the functions are implemented in the form of software function modules and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0110] The foregoing is merely an embodiment of the present application and is not intended to limit the scope of protection of the present application. Various modifications and variations are possible for those skilled in the art. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present application shall be included within the scope of protection of the present application. It should be noted that similar reference numerals and letters represent similar items in the following figures. Therefore, once an item is defined in one figure, it does not need to be further defined or explained in subsequent figures.

[0111] The above description is merely a specific embodiment of the present application, but the scope of protection of the present application is not limited thereto. Any changes or substitutions that can be easily conceived by a person skilled in the art within the technical scope disclosed in the present application should be included in the scope of protection of the present application. Therefore, the scope of protection of the present application should be based on the scope of protection of the claims.

[0112] It should be noted that, in this document, relational terms such as first and second, etc., are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply the existence of any such actual relationship or order between these entities or operations. Moreover, the terms "comprises," "comprising," or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article, or device comprising a series of elements includes not only those elements, but also other elements not explicitly listed, or elements inherent to such process, method, article, or device. In the absence of further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of other identical elements in the process, method, article, or device comprising the element.

Claims

1. A secure communication method, applied to a physiological parameter acquisition device, comprising: Establishing an initial connection with the terminal device; Completing a two-way key cross-verification with the terminal device through the initial connection, wherein the two-way key cross-verification is that both parties who need to communicate actively generate a key and verify the decryption result of the other party; Confirm that the verification is successful and complete the communication with the terminal device.

2. The method according to claim 1, wherein The completing the bidirectional key cross-verification with the terminal device through the initial connection includes: decrypting the encrypted first random key K_app_enc to obtain the first random key to be verified K_app_dec, wherein the encrypted first random key is obtained by the terminal device encrypting the original first random key K_app_plain according to the encryption algorithm, and the first random key to be verified K_app_dec is plain text; Generate an original second random key K_dev_plain, and encrypt the original second random key K_dev_plain to obtain an encrypted second random key K_dev_enc; Sending a verification data packet including the first random key to be verified K_app_dec and the encrypted second random key K_dev_enc to the terminal device, so that the terminal device confirms whether the first random key to be verified K_app_dec is consistent with the original first random key K_app_plain to complete the verification of the first direction in the cross-validation, and enables the terminal device to decrypt the encrypted second random key K_dev_enc to obtain the second random key to be verified K_dev_dec; Receive and verify whether the second random key K_dev_dec to be verified is consistent with the original second random key K_dev_plain to complete the verification of the second direction in the cross-validation.

3. The method according to claim 2, wherein The verification data packet includes: A multiple-byte packet header for carrying attribute information of the physiological parameter acquisition device; Multiple bytes used to carry the first random key K_app_dec to be verified; Multiple bytes used to carry the encrypted second random key K_dev_enc; A plurality of bytes used to carry a dynamic check code, wherein the dynamic check code is related to a unique serial number of the physiological parameter acquisition device.

4. The method according to claim 3, wherein The confirmation verification is passed, and the communication with the terminal device is completed, including: Calculate the dynamic calibration factor γ based on the current environment parameters and the session key; An encrypted calibration instruction including the dynamic calibration factor γ is generated and sent to the terminal device, so that the terminal device corrects the physiological data display value according to the dynamic calibration factor.

5. The method according to any one of claims 1 to 4, wherein The establishing of an initial connection with the terminal device includes: Sending a Bluetooth name and UUID information to the terminal device by broadcasting, wherein the Bluetooth name is used by the terminal device to determine the type of the physiological parameter acquisition device and the UUID information is used by the terminal device to determine the model of the physiological parameter acquisition device, or the Bluetooth name is used by the terminal device to determine the type and model of the physiological parameter acquisition device; Receiving Bluetooth connection establishment information sent by the terminal device, and establishing the initial connection, wherein the terminal device sends the Bluetooth connection establishment information after determining the type and model of the physiological parameter acquisition device; The type and the model are used to establish a mapping relationship with the collected data.

6. A secure communication method, applied to a terminal device, comprising: Establishing an initial connection with the physiological parameter acquisition device; Generate an original first random key, and encrypt the original first random key according to an encryption algorithm to obtain an encrypted first random key; Sending the encrypted first random key to the physiological parameter acquisition device, so that the physiological parameter acquisition device decrypts the encrypted first random key to obtain a first random key to be verified; In response to a verification packet received from the physiological parameter acquisition device and containing the first random key to be verified and the encrypted second random key, decrypting the encrypted second random key to obtain the second random key to be verified and confirming whether the first random key to be verified is consistent with the original first random key; The second random key to be verified is sent to the physiological parameter acquisition device, so that the physiological parameter acquisition device verifies whether the second random key to be verified is consistent with the original second random key.

7. The method according to claim 6, wherein The establishing of an initial connection with the physiological parameter acquisition device includes: In response to the Bluetooth name and UUID information received from the physiological parameter acquisition device, determining the type and model of the physiological parameter acquisition device according to the Bluetooth name; Recording the type and the model, wherein the type and the model are used to establish a mapping relationship with the collected data; Sending Bluetooth connection establishment information to the physiological parameter acquisition device to establish the initial connection; The type and the model are used to establish a mapping relationship with the collected data.

8. The method according to claim 6, wherein The establishing of an initial connection with the physiological parameter acquisition device includes: In response to the Bluetooth name and UUID information received from the physiological parameter acquisition device, determining the type of the physiological parameter acquisition device according to the Bluetooth name and providing a model selection interface according to the UUID information; In response to a selection operation on a plurality of model options displayed on the model selection interface, determining a model of the physiological parameter acquisition device; Recording said type and said model; Sending Bluetooth connection establishment information to the physiological parameter acquisition device to establish the initial connection; The type and the model are used to establish a mapping relationship with the collected data.

9. A method for secure communication, the method comprising: The terminal device obtains the broadcast information of the physiological parameter acquisition device and establishes a Bluetooth connection with the physiological parameter acquisition device; The following two-way key cross-verification phase is initiated based on the Bluetooth connection: The terminal device generates an original first random key K_app_plain, and encrypts the original first random key using an asymmetric encryption algorithm to obtain an encrypted first random key K_app_enc; The terminal device sends the encrypted first random key K_app_enc to the physiological parameter acquisition device; The physiological parameter acquisition device decrypts the encrypted first random key K_app_enc to obtain a first random key to be verified K_app_dec; The physiological parameter acquisition device generates an original second random key K_dev_plain, and uses a symmetric encryption algorithm to encrypt the original second random key to obtain an encrypted second random key K_dev_enc; The physiological parameter acquisition device sends a verification data packet including the plain text of the first random key K_app_dec to be verified and the encrypted second random key K_dev_enc to the terminal device; The terminal device verifies whether the first random key to be verified K_app_dec is equal to the original first random key K_app_plain, and terminates the connection if they are not equal; The terminal device decrypts the encrypted second random key K_dev_enc to obtain the second random key to be verified K_dev_dec and sends it to the physiological parameter acquisition device; If the physiological parameter acquisition device verifies whether the second random key to be verified K_dev_dec is equal to the original second random key K_dev_plain, if not, the connection is terminated; if equal, a secure communication channel is established.

10. A physiological parameter acquisition device, characterized in that: The physiological parameter acquisition device comprises: An initial communication link establishing module, configured to establish an initial connection with a terminal device; The verification module is configured to: complete a two-way key cross-verification with the terminal device through the initial connection, wherein the two-way key cross-verification is that both parties who need to communicate actively generate a key and verify the decryption result of the other party; The secure communication module is configured to confirm that the verification is successful, establish a secure channel and use the secure channel to complete communication with the terminal device.

11. A computer program product, characterized in that The method comprises computer program instructions, which can implement the method according to any one of claims 1 to 9 when the computer program instructions are read and executed by a processor.

12. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein: When the processor executes the computer program, the method according to any one of claims 1 to 9 can be implemented.

Images