Door lock networking communication method and system based on dynamic factor and identity binding

Abstract

The invention discloses a door lock networking communication method and system based on dynamic factor and identity binding. The method comprises the following steps: an upper computer and door lock equipment read the same hotel authorization card to obtain the same hotel unique identifier ID; during communication, an upper computer generates a dynamic encryption key by using a timestamp of current communication, generates an initialization vector by using a hotel unique identifier ID, encrypts original data containing an anti-replay ID and functional data, and generates a plaintext frame header feature; after the door lock equipment receives the data packet, pre-checking the frame header features and checking the timeliness of the timestamps in sequence; and after the verification is passed, decrypting by using a locally stored hotel unique identifier ID as a vector, and carrying out ID replay prevention and integrity verification. According to the method and the device, the time is mapped into the secret key, the identity is mapped into the isolation vector, and the multi-stage verification funnel is matched, so that the problems of replay attack and multi-hotel signal crosstalk in a wireless environment are effectively solved, and the system security and the response efficiency are improved.

Description

Technical Field

[0001] This invention relates to the fields of intelligent security and Internet of Things communication technology, and in particular to a hotel door lock network communication method and system that can prevent replay attacks and multi-system interference. Background Technology

[0002] With the popularization of the smart hotel concept, networked electronic door locks have replaced traditional offline door locks as the mainstream. Networked door locks allow hotel front desks to remotely issue unlocking commands, modify door lock configurations (such as room extensions and changes), and collect door opening logs in real time via host computer software. Common communication methods include ZigBee, BLE (Bluetooth Low Energy), Wi-Fi, or the 433MHz wireless band.

[0003] However, the open nature of wireless communication environments presents existing networked door lock systems with significant security and stability challenges: Replay attack: A malicious third party can intercept a normal "unlock command" data packet using packet sniffing tools and resend the packet at a later time. If the door lock system lacks an effective replay protection mechanism, the door lock will be illegally opened.

[0004] Multi-hotel signal interference: In densely populated commercial areas, two adjacent hotels may use the same supplier's door lock system. If the communication protocol is not strictly physically isolated, the control signals of Hotel A may be received by the door lock of Hotel B and respond incorrectly, or Hotel B's door lock may be frequently woken up by Hotel A's signals to attempt decryption, causing the battery to be quickly depleted (i.e., a "deny to sleep" attack).

[0005] Key security: Traditional solutions often use fixed AES keys or have complex key exchange processes, which increases the computational burden and communication latency of low-power door locks.

[0006] Therefore, how to provide a communication method that can effectively defend against replay attacks, achieve strict isolation of multi-hotel data at the protocol level, and has high computational efficiency has become a technical problem that urgently needs to be solved in this field. Summary of the Invention

[0007] The main objective of this invention is to solve the above-mentioned technical problems and provide a door lock network communication method and system based on dynamic factors and identity binding.

[0008] To achieve the above objectives, this invention provides a door lock network communication method based on dynamic factors and identity binding, comprising the following steps: Identity binding step: The host computer and the door lock device respectively read the same hotel authorization card, and each parses and stores the same unique hotel identifier ID; Data packet generation step: The host computer responds to the operation command and generates a communication data packet, which includes a plaintext segment and a ciphertext segment; The plaintext segment at least includes the timestamp of the current communication and the frame header feature generated based on the timestamp; The ciphertext segment is generated by encrypting the original data, and the original data at least includes an anti-replay ID, a function code, and data content; Encryption step: When generating the ciphertext segment, the host computer uses a symmetric encryption algorithm to encrypt the timestamp according to a first preset rule. The data is then converted into an encryption key, and the hotel's unique identifier ID is converted into an initialization vector according to the second preset rule. The original data is then encrypted using the encryption key and the initialization vector. The receiving and pre-verification steps are as follows: The door lock device receives the communication data packet and extracts the timestamp and frame header features from the plaintext segment. The door lock device calculates a verification reference value based on the timestamp and performs a first-level verification against the frame header features. The decryption and execution steps are as follows: If the first-level verification passes, the door lock device uses the locally stored hotel's unique identifier ID as the decryption initialization vector and the timestamp as the decryption key to decrypt the ciphertext segment. The decrypted data undergoes anti-replay verification and integrity verification. After successful verification, the operation command corresponding to the function code is executed.

[0009] As can be seen, this invention uses the "hotel's unique identifier ID" as the initialization vector (IV) of the AES encryption algorithm. This ensures that even if two hotel door locks receive the exact same plaintext command, the door lock of the hotel in question cannot correctly decrypt the external signal due to the different IVs (the decryption result is garbled text). This achieves physical spatial isolation of data at the cryptographic level, completely solving the crosstalk problem. At the same time, the encryption key is directly generated from the "timestamp" of the current communication, realizing "one-time pad". Even if an attacker cracks the key for a certain communication, they will not be able to decrypt historical or future data packets, greatly improving the security of the system.

[0010] Furthermore, in the identity binding step, the hotel authorization card is a read-only IC card; the door lock device reads the hotel authorization card in the initialization configuration mode, generates a hotel unique identifier ID in hexadecimal format and writes it into the protected area of ​​the internal Flash memory; the protected area is configured to only allow erasure via the firmware burning interface and prohibits modification or deletion via wireless communication commands.

[0011] As can be seen, by using read-only attribute cards and write protection logic in the Flash area at the hardware level, the immutability of the hotel's unique identifier ID is ensured from the source, preventing security vulnerabilities caused by the copying of the configuration card or malicious rollback / clearing of the ID by hackers through wireless commands, thus ensuring the uniqueness and trustworthiness of the door lock's identity.

[0012] Furthermore, in the receiving and pre-verification steps, the specific logic of the first-level verification is as follows: the door lock device intercepts the last two bytes of the timestamp as a verification reference value; it determines whether the verification reference value is consistent with the received frame header characteristics; if they are inconsistent, the communication data packet is determined to be an illegal signal and is directly discarded without performing subsequent decryption operations; if they are consistent, the absolute value of the difference between the timestamp and the current system time of the door lock device is further calculated; if the absolute value of the difference exceeds the first preset threshold, the communication data packet is determined to be invalid and discarded; if the absolute value of the difference does not exceed the first preset threshold, the first-level verification is determined to be successful.

[0013] As can be seen, this invention, by setting a "frame header feature" strongly correlated with the timestamp in the plaintext segment, enables the door lock device to quickly filter out illegal signals, random noise, or signals not belonging to the system through simple bit operations and comparisons (first-level verification) before performing high-power decryption operations. For low-power door locks powered by batteries, this can greatly reduce the power consumption caused by invalid wake-ups and extend battery life.

[0014] Furthermore, the method also includes an automatic time synchronization step: if the absolute value of the difference exceeds the first preset threshold but is less than the second preset threshold, the door lock device determines that the data is invalid and triggers a clock synchronization mechanism to correct the current system time of the door lock device to the timestamp in the communication data packet.

[0015] As can be seen, the system can automatically correct the RTC clock drift of the door lock device by using the timestamp in the communication data packet, without the need for manual inspection and time calibration. This not only ensures the accuracy of local log records, but also prevents the problem of legitimate instructions being misjudged as expired data due to excessive clock deviation.

[0016] Furthermore, in the decryption and execution steps, the specific process of anti-replay verification is as follows: After successful decryption, the door lock device extracts the anti-replay ID from the original data; the extracted anti-replay ID is compared with the historical maximum ID recorded locally by the door lock device; if the extracted anti-replay ID is less than or equal to the historical maximum ID, it is determined to be replay attack data, and the processing is terminated; if the extracted anti-replay ID is greater than the historical maximum ID, the anti-replay verification is determined to be passed, and the historical maximum ID is updated to the extracted anti-replay ID.

[0017] It is evident that the combination of timestamp validity checks (to prevent expired data) and strict monotonically increasing anti-replay ID checks (to prevent repeated sending within the validity period) constitutes a double anti-replay barrier, completely eliminating the possibility of hackers recording old unlocking commands for replay attacks.

[0018] Furthermore, the original data also includes the user ID and message length; the end of the original data contains a checksum; the specific process of integrity verification is as follows: after decryption, the door lock device recalculates the local checksum using the CRC algorithm or MD5 algorithm based on the anti-replay ID, user ID, message length, function code and data content, and compares the local checksum with the decrypted checksum. If they match, the integrity verification is deemed to have passed.

[0019] As can be seen, integrity verification ensures the authenticity and reliability of the data after decryption, preventing the risk that attackers could tamper with the instruction content (such as modifying the unlocking object or function code) even if the key is cracked or there is an IV collision, without being detected.

[0020] Furthermore, in the encryption step, the symmetric encryption algorithm is AES-CBC mode; the first preset rule is: convert the timestamp into an 8-byte hexadecimal string, and construct an encryption key that meets the length requirements of the symmetric encryption algorithm based on the string; the second preset rule is: convert the hotel's unique identifier ID into an 8-byte hexadecimal string, and construct an initialization vector based on the string.

[0021] It is evident that by employing the mature AES-CBC algorithm and cleverly mapping the variable factors (time) and fixed factors (location / identity) in communication to Key and IV respectively, the algorithm's strength is guaranteed, and there is no need to establish a complex handshake session. This approach is suitable for door lock control scenarios requiring low power consumption and instant response.

[0022] Furthermore, the function code includes online unlocking instructions, configuration modification instructions, and configuration reading instructions. When the function code is an online unlocking instruction, the door lock device performs the unlocking action and records the unlocking event, which includes the operation time, operation type, and user ID from the original data. When the function code is a configuration modification instruction, the data content includes the room number, room type, and area flag. The door lock device updates the local configuration parameters based on the data content.

[0023] As can be seen, by extending the function codes, not only is the basic unlocking function realized, but configuration distribution and reading are also covered, and all operations are protected by the aforementioned security mechanisms, thus meeting the diverse business needs of smart hotels.

[0024] Furthermore, the structure of the communication data packet consists of a header, timestamp, frame header features, ciphertext segment, and packet trailer in sequence; among which, the frame header features are located before the ciphertext segment and are used to provide preliminary verification of the data source without decryption.

[0025] It is evident that a reasonable data packet structure design, especially placing plaintext features (timestamps, frame header features) used for fast filtering before the ciphertext segment, conforms to the "filter first, then decrypt" processing logic of door lock devices, thus optimizing processing efficiency.

[0026] This invention also provides a door lock networking system based on dynamic factors and identity binding, comprising: a hotel authorization card storing seed data for generating a unique hotel identifier ID, wherein the seed data cannot be modified after the card is distributed; a host computer including a card reading module and a first communication module, configured to read the hotel authorization card to generate the unique hotel identifier ID and configured to execute the data packet generation step and encryption step in the aforementioned method; and a door lock device including a wireless transceiver module, a secure storage module, and a central processing module; the secure storage module storing the unique hotel identifier ID obtained by reading the hotel authorization card and historical anti-replay ID; and the central processing module configured to execute the receiving and pre-verification step, and the decryption and execution step in the aforementioned method.

[0027] As can be seen, the system architecture provides a complete hardware foundation for the implementation of the aforementioned methods, and through hardware and software collaboration (authorization card, host computer, door lock MCU), it ensures closed-loop security throughout the entire process from initialization to daily operation. Attached Figure Description

[0028] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments of the invention and, together with their description, serve to explain the principles of the invention.

[0029] Figure 1 This is a flowchart illustrating the door lock network communication method provided in an embodiment of the present invention. Figure 2 This is a schematic diagram illustrating the structure and byte definition of a communication data packet provided in an embodiment of the present invention; Figure 3 This is an internal processing logic diagram of a door lock device receiving data, provided in an embodiment of the present invention. Figure 4 This is a block diagram of the overall architecture of the system provided in an embodiment of the present invention. Detailed Implementation

[0030] Various exemplary embodiments of the present invention will now be described in detail with reference to the accompanying drawings. It should be noted that, unless otherwise specifically stated, the relative arrangement, numerical expressions, and values ​​of the components and steps set forth in these embodiments do not limit the scope of the invention.

[0031] The following description of at least one exemplary embodiment is merely illustrative and is in no way intended to limit the invention or its application or use.

[0032] Techniques, methods, and equipment known to those skilled in the art may not be discussed in detail, but where appropriate, they should be considered part of the specification.

[0033] In all the examples shown and discussed herein, any specific values ​​should be interpreted as merely exemplary and not as limitations. Therefore, other examples of exemplary embodiments may have different values.

[0034] It should be noted that similar labels and letters in the following figures indicate similar items; therefore, once an item is defined in one figure, it does not need to be discussed further in subsequent figures.

[0035] Example 1: System Architecture and Initialization like Figure 4 As shown, the system in this embodiment includes a hotel authorization card 1, a host computer 2, a door lock device 3, and an optional card issuer.

[0036] During the system deployment phase, strict "identity binding" is required: Source generation: Create a read-only hotel authorization card 1, and write the hotel's exclusive seed data into the card.

[0037] Hardware binding: The installer puts the door lock device 3 into initialization mode and swipes the hotel authorization card 1. The wireless transceiver module in the door lock device 3 reads the card data and generates a 16-byte (128-bit) hexadecimal string through a specific algorithm (such as Hash operation) of the central processing module, which is defined as the "hotel unique identifier ID" (e.g., 4A 1B ... 9C).

[0038] Locking Mechanism: This ID is written to the internal secure storage module of the door lock device 3 (e.g., the protected Flash area of ​​the MCU). Firmware Logic Settings: Once the data in this area is written, unless the underlying firmware is re-flashed via a physical interface, no wireless command (including factory reset commands) can clear or modify this ID. This ensures that even if the door lock is stolen or the software is attacked, its ownership will not change.

[0039] Software binding: The host computer 2 reads the same hotel authorization card 1 through the connected card issuer, and generates and stores the "hotel unique identifier ID" using the exact same algorithm.

[0040] Example 2: Communication Protocol and Data Generation like Figure 2 As shown, the structure of the communication data packet 10 defined in this embodiment is as follows (assuming a total length of N bytes): | Packet header (1B) | Timestamp (4B) | Frame header features (2B) | [Ciphertext segment (multiples of 16 B)] | Packet trailer (1B) | Among them, timestamp 12 and frame header feature 13 belong to plaintext segment 11, and the subsequent part is ciphertext segment 14.

[0041] When host computer 2 needs to perform a "remote unlocking" operation, the processing flow is as follows (refer to...). Figure 1 ): Prepare the raw data: Anti-replay ID (4B): Auto-incrementing serial number, for example, 00 00 00 05.

[0042] User ID (4B): Operator ID, for example 00 00 00 88.

[0043] Message length (1B): The length of the subsequent data.

[0044] Function code (1B): 0x01 (represents remote unlocking).

[0045] Data content (kB): empty (no additional parameters required for unlocking) or contains specific instruction parameters.

[0046] Checksum (2B): This is a checksum calculated by concatenating the anti-replay ID, user ID, message length, function code, and data content in a preset order and then using either the Cyclic Redundancy Check (CRC16) algorithm or the Message Digest (MD5) algorithm.

[0047] Generate keys and vectors: Get the current standard timestamp 12 (e.g., 1738221356).

[0048] Encryption key generation: Basic conversion: Convert the 4-byte timestamp 12 to an 8-byte hexadecimal string (for example, if the timestamp Hex is 679B 33 2C, the corresponding 8-byte ASCII string is "679B332C").

[0049] Length adaptation: Since this embodiment uses the AES-128 encryption algorithm, its key length requirement is 128 bits (16 bytes). Therefore, the host computer 2 expands the above 8-byte string according to specific rules, such as concatenating it once to obtain a 16-byte Key ("679B332C679B332C"); or performs padding operations to meet the algorithm requirements.

[0050] Initialization Vector (IV) Generation: Similarly, read the "Hotel Unique Identifier ID". If its original format is an 8-byte hexadecimal string, expand it to 16 bytes using the same rules as the AES IV.

[0051] encryption: Using AES-CBC mode, the original data is encrypted using the Key and IV generated above, resulting in ciphertext segment 14.

[0052] Packaging: Calculate frame header feature 13: Take the last two bytes of the Hex value of timestamp 12 (e.g., 33 2C).

[0053] Assemble the final communication data packet 10.

[0054] Example 3: Reception and Multi-level Verification at the Door Lock Terminal like Figure 3 As shown, the processing logic of the door lock device 3 after receiving the wireless signal is the core of this invention, specifically including a "four-level funnel" verification: Level 1: Frame header feature verification (ultra-fast filtering) After receiving the communication data packet 10, the door lock device 3 will not decrypt it for the time being.

[0055] Extract the timestamp 12 and frame header features 13 from the plaintext.

[0056] The door lock device 3 calculates automatically: it extracts the last two bytes of the timestamp as the calculated feature value. The calculated feature value is compared with the received frame header feature 13.

[0057] If they are inconsistent, it means that the sender does not know the frame header generation rules or that it is random noise, so it should be discarded directly.

[0058] If they match: Proceed to the next step.

[0059] Level 2: Time validity verification (prevention of expiration / automatic time synchronization) The door lock device 3 reads the current system time recorded by its internal real-time clock (RTC) and calculates the absolute value of the difference between the current system time and the timestamp, and records the result as the time difference.

[0060] Determine the time difference: If the time difference is greater than 5 minutes (first threshold): the data packet is considered to have expired (it may be old data that was recorded) and is discarded.

[0061] Special handling: If 5 minutes < time difference < 30 minutes (second threshold) and the frame header feature verification passes, the door lock device 3 can determine that its own clock has drifted, perform automatic time synchronization, update the RTC to timestamp 12, but still discard this instruction to ensure security.

[0062] If the time difference is less than or equal to 5 minutes: the time is valid, proceed to the next step.

[0063] Level 3: Decryption and IV Verification (Physical Isolation) The door lock device 3 reads its own "hotel unique identifier ID" from the secure storage module.

[0064] Using this ID as the IV (after being expanded according to the same rules), and using the received timestamp 12 as the Key (after being expanded according to the same rules), the ciphertext 14 is decrypted using AES-CBC.

[0065] Key point: If the data packet comes from the neighboring hotel (different IV), the decrypted result will be all meaningless gibberish.

[0066] After decryption, extract the checksum at the end of the data.

[0067] The door lock device 3 recalculates the CRC of the decrypted original data.

[0068] Compare the received CRC with the calculated CRC.

[0069] If they are inconsistent (most likely due to an incorrect IV causing garbled text after decryption): discard directly.

[0070] If they match: This indicates that the data belongs to this hotel and the transmission is correct; proceed to the next step.

[0071] Level 4: Anti-replay ID verification (logical security) Extract the decrypted anti-replay ID (e.g., 00 00 00 05).

[0072] Read the historical anti-replay ID (e.g., 00 00 00 04) recorded by door lock device 3.

[0073] judge: If the current anti-replay ID is less than or equal to the historical anti-replay ID, it means that the old data has been resent, and the operation will be rejected.

[0074] If the current anti-replay ID is greater than the historical anti-replay ID: all verifications pass.

[0075] Update historical anti-replay ID to current anti-replay ID.

[0076] Example 4: Business Execution After all verifications pass, door lock device 3 executes the operation based on the function code: Function code 0x01 (online unlocking): Drives the motor to unlock, and the green light illuminates. Simultaneously, the user ID (operator), current time, and event type (remote door opening) are recorded in the log and reported to the host computer 2 via the wireless transceiver module.

[0077] Function code 0x02 (Modify Configuration): Parses the room number (e.g., "8201"), floor, room type, etc. in the data content, overwrites the local configuration, and reports a log indicating that the configuration modification was successful.

[0078] Function code 0x03 (Read Configuration): Packages the local configuration information (also through an encryption process) and reports it to the host computer 2.

[0079] In summary, this invention constructs a robust filtering system by deeply binding time and space (hotel ID) attributes at the protocol layer, effectively solving the security vulnerabilities and interference problems existing in the prior art.

[0080] While specific embodiments of the invention have been described in detail by way of examples, those skilled in the art should understand that the examples are for illustrative purposes only and not intended to limit the scope of the invention. Those skilled in the art should understand that modifications can be made to the above embodiments without departing from the scope and spirit of the invention. The scope of the invention is defined by the appended claims.

Claims

1. A door lock network communication method based on dynamic factor and identity binding, characterized in that, Includes the following steps: Identity binding steps: The host computer and the door lock device read the same hotel authorization card, and each parses and stores the same unique hotel identifier ID; Data packet generation step: The host computer responds to the operation command and generates a communication data packet, which includes a plaintext segment and a ciphertext segment; the plaintext segment at least includes the timestamp of the current communication and a frame header feature generated based on the timestamp; The ciphertext segment is generated by encrypting the original data, and the original data includes at least the anti-replay ID, function code, and data content; Encryption steps: When generating the ciphertext segment, the host computer uses a symmetric encryption algorithm to convert the timestamp into an encryption key according to a first preset rule, and converts the hotel's unique identifier ID into an initialization vector according to a second preset rule. The original data is then encrypted using the encryption key and the initialization vector. Reception and pre-verification steps: The door lock device receives the communication data packet, extracts the timestamp and the frame header feature from the plaintext segment; the door lock device calculates a verification reference value based on the timestamp, and performs a first-level verification between the verification reference value and the frame header feature; Decryption and execution steps: If the first-level verification passes, the door lock device uses the hotel's unique identifier ID stored locally as the decryption initialization vector and the timestamp as the decryption key to decrypt the ciphertext segment; The decrypted data is subjected to anti-replay verification and integrity verification. After the verification is passed, the operation instruction corresponding to the function code is executed.

2. The door lock network communication method based on dynamic factor and identity binding according to claim 1, characterized in that, In the identity binding step, the hotel authorization card is a read-only IC card; the door lock device reads the hotel authorization card in the initialization configuration mode, generates the hotel's unique identifier ID in hexadecimal format and writes it into the protected area of ​​the internal Flash memory; the protected area is configured to only allow erasure via the firmware burning interface and prohibits modification or deletion via wireless communication commands.

3. The door lock network communication method based on dynamic factor and identity binding according to claim 1, characterized in that, In the receiving and pre-verification steps, the specific logic of the first-level verification is as follows: The door lock device extracts the last two bytes of the timestamp as the verification reference value; Determine whether the verification reference value is consistent with the received frame header feature; If there is a discrepancy, the communication data packet is determined to be an illegal signal and is discarded directly without performing subsequent decryption operations; If they match, further calculate the absolute value of the difference between the timestamp and the current system time of the door lock device; If the absolute value of the difference exceeds the first preset threshold, the communication data packet is determined to be invalid and discarded; if the absolute value of the difference does not exceed the first preset threshold, the first-level verification is determined to be successful.

4. The door lock network communication method based on dynamic factor and identity binding according to claim 3, characterized in that, The method also includes an automatic time synchronization step: If the absolute value of the difference exceeds the first preset threshold but is less than the second preset threshold, the door lock device determines that the data is invalid and triggers a clock synchronization mechanism to correct the current system time of the door lock device to the timestamp in the communication data packet.

5. The door lock network communication method based on dynamic factor and identity binding according to claim 1, characterized in that, In the decryption and execution steps, the specific process of the anti-replay verification is as follows: After successful decryption, the door lock device extracts the anti-replay ID from the original data; The extracted anti-replay ID is compared with the historical maximum ID recorded locally by the door lock device; If the extracted anti-replay ID is less than or equal to the historical maximum ID, it is determined to be replay attack data, and the processing is terminated. If the extracted anti-replay ID is greater than the historical maximum ID, the anti-replay verification is deemed successful, and the historical maximum ID is updated to the extracted anti-replay ID.

6. The door lock network communication method based on dynamic factor and identity binding according to claim 1, characterized in that, The raw data also includes a user ID and message length; the raw data contains a checksum at the end. The specific process of the integrity verification is as follows: After decryption, the door lock device recalculates the local checksum using the CRC algorithm or MD5 algorithm based on the anti-replay ID, the user ID, the message length, the function code, and the data content. The local checksum is then compared with the decrypted checksum. If they match, the integrity verification is deemed to have passed.

7. The door lock network communication method based on dynamic factor and identity binding according to claim 1, characterized in that, In the encryption step, the symmetric encryption algorithm is AES-CBC mode; The first preset rule is: convert the timestamp into an 8-byte hexadecimal string, and construct the encryption key that meets the length requirement of the symmetric encryption algorithm based on the string; The second preset rule is: convert the hotel's unique identifier ID into an 8-byte hexadecimal string, and construct the initialization vector based on the string.

8. The door lock network communication method based on dynamic factor and identity binding according to claim 1, characterized in that, The function codes include online unlocking commands, configuration modification commands, and configuration reading commands; When the function code is the online unlocking command, the door lock device performs the unlocking action and records the unlocking event, which includes the operation time, operation type and user ID in the original data; When the function code is the configuration modification instruction, the data content includes the room number, room type, and area flag, and the door lock device updates the local configuration parameters according to the data content.

9. The door lock network communication method based on dynamic factor and identity binding according to claim 1, characterized in that, The structure of the communication data packet consists of a packet header, the timestamp, the frame header feature, the ciphertext segment, and the packet trailer in sequence; wherein, the frame header feature is located before the ciphertext segment and is used to provide preliminary verification of the data source without decryption.

10. A door lock networking system based on dynamic factors and identity binding, characterized in that, include: The hotel authorization card stores seed data used to generate the hotel's unique identifier ID, and this seed data cannot be modified after the card is distributed. The host computer includes a card reader module and a first communication module, used to read the hotel authorization card to generate the hotel's unique identifier ID, and configured to execute the data packet generation step and encryption step in the method of any one of claims 1 to 9; The door lock device includes a wireless transceiver module, a secure storage module, and a central processing module; The secure storage module is used to store the hotel's unique identifier ID and historical anti-replay ID obtained by reading the hotel authorization card; The central processing module is configured to execute the receiving and pre-verification steps, and the decryption and execution steps in the method of any one of claims 1 to 9.

Images