Bluetooth remote trust interaction channel establishment method and device for intelligent machine body

Abstract

This invention discloses a method and apparatus for establishing a Bluetooth remote trust interaction channel for intelligent devices, relating to the field of Bluetooth communication security technology. The method can be implemented through pure software, pure hardware, firmware, or a combination of both. It includes: entering a Bluetooth discoverable state in response to a master recognition trigger operation and outputting a pairing confirmation credential; completing Bluetooth secure pairing with out-of-band credential verification and exchanging link encryption keys; extracting the terminal device's hardware identity identifier and strongly binding it with the key as a trust anchor point for storage; and exiting the discoverable mode after master recognition is complete, accepting data interaction only from trusted devices. The apparatus includes a Bluetooth pairing module, a trust anchor point management module, and a channel access control module, which are sequentially connected in communication. This invention achieves secure management of the entire lifecycle of Bluetooth pairing and interaction channels, reducing the risk of unauthorized access and unauthorized operations. It has wide adaptability and can cover various implementation scenarios.

Description

Technical Field

[0001] This invention relates to the field of Bluetooth communication security technology, and in particular to a method and apparatus for establishing a Bluetooth remote trust interaction channel for intelligent devices. Background Technology

[0002] Bluetooth communication is a common short-range interaction method between intelligent devices and terminal devices, widely used in intelligent robots, industrial intelligent terminals, and home intelligent devices. Current Bluetooth pairing schemes for intelligent devices mostly adopt the common Bluetooth standard pairing process, which has several security vulnerabilities: the pairing process is easily hijacked, allowing unauthorized devices to access the intelligent device by forging pairing information; after pairing, there is no lifecycle-long access control, and the identity of the accessing device cannot be continuously verified, posing a risk of unauthorized operation; furthermore, existing solutions struggle to effectively resolve the permission conflicts between remote Bluetooth interaction and local device interaction, easily leading to interaction chaos.

[0003] Meanwhile, existing solutions are mostly limited to a single hardware or software implementation method, making it difficult to adapt to intelligent devices with different hardware configurations and application scenarios. They have poor adaptability and limited protection scope, making it difficult to fully cover different implementation scenarios. Summary of the Invention

[0004] The technical problem to be solved by the present invention is to address the above-mentioned shortcomings of the prior art by proposing a method and device for establishing a Bluetooth remote trust interaction channel for intelligent devices. This method and device can realize secure management of Bluetooth pairing and the entire life cycle of the channel, reduce the risk of unauthorized access and unauthorized operation, and can be adapted to various implementation methods to cover different intelligent device application scenarios.

[0005] To achieve the above objectives, the present invention adopts the following technical solution: A method for establishing a Bluetooth remote trust interaction channel for intelligent devices can be implemented through pure software, pure hardware, firmware, or a combination of software and hardware, and includes the following steps: S1. In response to a valid owner recognition trigger operation, enter the Bluetooth discoverable state and output a unique pairing confirmation credential; S2. Receive Bluetooth connection request from terminal device, complete secure pairing with pairing confirmation credential verification, and exchange link encryption keys between the two parties; S3. Extract the unique hardware identity of the terminal device that initiates the pairing, strongly bind the hardware identity to the link encryption key, and store it as a trust anchor in the local trusted device area. S4. After the owner recognition is completed, exit the Bluetooth discoverable mode and only accept data interaction from terminal devices that have stored hardware identity identifiers in the trusted device area and whose link encryption key verification has passed.

[0006] Furthermore, in step S3, the trust anchor is a unique binding combination of the terminal device hardware identity identifier, the link encryption key, and the corresponding user identity, and each trust anchor corresponds to a unique legitimate access permission; the terminal device hardware identity identifier includes one or more of the following: Bluetooth MAC address, device chip ID, and terminal unique serial number.

[0007] Furthermore, in step S1, the pairing confirmation credential is output through one or more of the following methods: screen display, LED light array encoding, buzzer encoding, and audio broadcast; the pairing confirmation credential is valid for a preset or dynamically configured effective time and is automatically refreshed after the timeout; the owner recognition trigger operation includes one or more of the following: physical button operation, touch operation, and voice command operation.

[0008] Furthermore, in step S2, if the terminal device continuously inputs incorrect pairing confirmation credentials more than the preset or dynamically configured number of times, the current master recognition mode is terminated, and the Bluetooth pairing function is locked for the preset or dynamically configured duration; after multiple consecutive pairing failures, the lock duration increases according to the preset rules.

[0009] Furthermore, in step S3, the trusted device area stores a maximum of a preset or dynamically configured number of trusted anchors; before storage, the hardware identity identifier and the link encryption key are encrypted with the unique hardware identifier of the intelligent body, and multi-mode redundant storage is adopted.

[0010] Furthermore, it also includes trusted device data processing steps: when receiving data from a trusted device, the data type is automatically identified; if it is a text message, it is sorted by serial number, buffer flow control, excessive length truncation and instruction frequency limitation are performed before it is sent to the semantic segmentation process; if it is a voice stream, the audio input link is switched to Bluetooth audio input and the voice stream is sent to the voice front-end processing circuit.

[0011] Furthermore, if the Bluetooth voice stream does not contain a wake word, but the current Bluetooth device is already in the trusted device zone and is bound to a user identity, then the voice stream is directly assigned to the bound user, without needing to execute the wake-up process again.

[0012] Furthermore, it also includes the coordinated steps of remote interaction and on-site interaction: on-site voice wake-up and Bluetooth remote interaction are monitored in parallel, with the first trigger locking the interaction permission; when the on-site voice wake-up successfully recognizes the registered user, the current interaction identity is switched to the local user, the remote interaction permission is suspended, and a session suspension prompt is sent to the original remote user.

[0013] Furthermore, it also includes an unbinding step: in response to a preset unbinding trigger operation, mandatory identity verification is required. After successful verification, the hardware identity identifier, link encryption key, and trust anchor stored in the trusted device area corresponding to the unbinding operation are erased.

[0014] The present invention also provides a Bluetooth remote trust interaction channel device for a smart device, comprising a Bluetooth pairing module, a trust anchor management module, and a channel access control module connected in sequence. The Bluetooth pairing module is used to perform the above steps S1 and S2, the trust anchor management module is used to perform the above step S3, and the channel access control module is used to perform the above step S4. Each module can be implemented by pure hardware logic circuits, software programs, firmware, or a combination of hardware and software.

[0015] Compared with the prior art, the present invention has the following beneficial effects: 1. This invention achieves secure management of the entire lifecycle of Bluetooth pairing and interaction channels by triggering owner recognition, out-of-band credential verification and pairing, trust anchor binding and storage, and closed-loop management of channel permissions. This effectively reduces the risks of pairing hijacking, unauthorized access, and unauthorized operation, and improves the security of Bluetooth interaction between smart devices.

[0016] 2. The solution of this invention can be adapted to various implementation methods such as pure software, pure hardware, firmware, and a combination of software and hardware. It can cover intelligent devices with different hardware configurations and application scenarios, thus having wider adaptability and comprehensively covering different implementation scenarios, thereby expanding the application scope of the solution.

[0017] 3. This invention improves the convenience and stability of Bluetooth interaction and solves the permission conflict problem of multiple interaction sources by using auxiliary mechanisms such as trusted device data classification and processing, wake-up-free identity attribution, and remote and local interactive collaboration. At the same time, through a configurable parameter mechanism, it can adapt to the application requirements of different security levels, making it more flexible. Detailed Implementation

[0019] The present invention will be further described in detail below with reference to specific embodiments.

[0020] This embodiment provides a method for establishing a Bluetooth remote trust interaction channel for intelligent robots. This method can be implemented through pure software, pure hardware, firmware, or a combination of both, and is applied to industrial inspection intelligent robots. Specifically, it includes the following steps: S1. In response to a valid trigger operation by the user pressing and holding the physical master recognition button on the robot body, the robot enters the Bluetooth master recognition mode, the Bluetooth module enters the discoverable state, and generates a 6-digit random number as a unique pairing confirmation credential, which is displayed on the robot's touch screen.

[0021] If the touchscreen is unavailable, a pairing confirmation certificate can be output by encoding the number of flashes of the LED array on the device and the number of beeps. The validity period of the pairing confirmation certificate is set to 60 seconds, and it will be automatically refreshed after the timeout.

[0022] S2. The Bluetooth module receives the Bluetooth connection request from the operator's mobile terminal. The operator enters the pairing confirmation credential on the mobile terminal. After the robot completes the credential verification, it executes the Bluetooth standard secure pairing process, and the two parties exchange link encryption keys.

[0023] If the mobile terminal enters the wrong pairing confirmation credential three times in a row, the current owner recognition mode will be terminated and the Bluetooth pairing function will be locked for 5 minutes; after multiple consecutive pairing failures, the lock time will increase by 2 times.

[0024] S3. Extract the Bluetooth MAC address of the mobile terminal that initiated the pairing as a unique hardware identity identifier. Strongly bind the MAC address with the exchanged link encryption key as a trust anchor. After XOR encryption with the robot's own unique hardware serial number, write it into the local trust device area using a three-mode redundancy storage method.

[0025] The Trusted Device Zone can store up to 8 sets of Trust Anchors, each set of Trust Anchors corresponding to a unique terminal device, user identity, and access permissions.

[0026] S4. After the master recognition process is completed, the Bluetooth module immediately exits the discoverable mode, turns off Bluetooth broadcast, and only accepts data interaction from terminal devices whose MAC addresses have been stored in the trusted device area and whose link encryption keys have been verified. Connection requests from other devices are directly rejected.

[0027] Optionally, this embodiment also includes a trusted device data processing step: when receiving data from a trusted device, the data type is automatically identified; if it is a text control message, it is sorted by serial number, buffer flow control, excessive content truncation, and instruction frequency limitation are performed before being sent to the semantic segmentation process; if it is a voice stream, the audio input link is switched to Bluetooth audio input, and the voice stream is sent to the voice front-end processing circuit. If the Bluetooth voice stream does not contain a wake-up word, but the current Bluetooth device is already bound to a user identity, the voice stream is directly assigned to the corresponding bound user without needing to execute the wake-up process again.

[0028] Optionally, this embodiment also includes a remote and local interaction coordination step: the main body voice wake-up and Bluetooth remote interaction are monitored in parallel, and the interaction permission is locked by the first trigger; when the main body voice wake-up successfully recognizes the registered user, the current interaction identity is switched to the local user, the remote interaction permission is suspended and a session suspension prompt is sent to the original remote user; when the Bluetooth remote interaction is active, the trigger threshold of the main body voice wake-up is automatically increased by 20%.

[0029] Optionally, this embodiment also includes an unbinding step: in response to the user's double-click of the physical master button, local voiceprint verification is forcibly required. After successful verification, the trust anchor point, hardware identity identifier and link encryption key corresponding to the unbinding operation stored in the trusted device area are erased.

[0030] This embodiment also provides a Bluetooth remote trust interaction channel device for intelligent devices, including a Bluetooth pairing module, a trust anchor management module, and a channel access control module that are sequentially connected in communication, wherein: The Bluetooth pairing module is used to perform the following steps: triggering the owner recognition mode, outputting the pairing confirmation credential, and performing Bluetooth pairing and key exchange operations in steps S1 and S2 above. The trust anchor management module communicates with the Bluetooth pairing module and is used to perform the hardware identity extraction, trust anchor binding, and encrypted storage operations in step S3 above. The channel access control module communicates with the trust anchor management module and is used to perform the discoverable mode exit and channel access control operations in step S4 above. The above modules can be implemented through MCU hardware logic circuits, embedded software programs, chip firmware, or a combination of hardware and software.

[0031] Those skilled in the art will understand that the above embodiments are merely preferred embodiments of the present invention and are not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the protection scope of the present invention.

Claims

1. A method for establishing a Bluetooth remote trust interaction channel for an intelligent device, which can be implemented through pure software, pure hardware, firmware, or a combination of software and hardware, characterized in that... Includes the following steps: S1. In response to a valid owner recognition trigger operation, enter the Bluetooth discoverable state and output a unique pairing confirmation credential; S2. Receive Bluetooth connection request from terminal device, complete secure pairing with pairing confirmation credential verification, and exchange link encryption keys between the two parties; S3. Extract the unique hardware identity of the terminal device that initiates the pairing, strongly bind the hardware identity to the link encryption key, and store it as a trust anchor in the local trusted device area. S4. After the owner recognition is completed, exit the Bluetooth discoverable mode and only accept data interaction from terminal devices that have stored hardware identity identifiers in the trusted device area and whose link encryption key verification has passed.

2. The method according to claim 1, characterized in that, In step S3, the trust anchor is a unique combination of the terminal device hardware identity identifier, the link encryption key, and the corresponding user identity, and each trust anchor corresponds to a unique legitimate access permission; the terminal device hardware identity identifier includes one or more of the following: Bluetooth MAC address, device chip ID, and terminal unique serial number.

3. The method according to claim 1, characterized in that, In step S1, the pairing confirmation credential is output through one or more of the following methods: screen display, LED light array encoding, buzzer encoding, and audio broadcast; the pairing confirmation credential is valid for a preset or dynamically configured effective time and is automatically refreshed after the timeout; the owner recognition trigger operation includes one or more of the following: physical button operation, touch operation, and voice command operation.

4. The method according to claim 1, characterized in that, In step S2, if the terminal device continuously enters an incorrect pairing confirmation credential more than the preset or dynamically configured number of times, the current master recognition mode will be terminated, and the preset or dynamically configured duration of the Bluetooth pairing function will be locked. After multiple consecutive pairing failures, the lock duration increases according to a preset rule.

5. The method according to claim 1, characterized in that, In step S3, the trusted device area stores a maximum of a preset or dynamically configured number of trusted anchors; before storage, the hardware identity identifier and the link encryption key are encrypted with the unique hardware identifier of the intelligent body and stored using multi-mode redundancy.

6. The method according to claim 1, characterized in that, It also includes trusted device data processing steps: when receiving data from a trusted device, the data type is automatically identified; if it is a text message, it is sorted by serial number, buffer flow control, excessive length truncation and instruction frequency limitation are performed before it is sent to the semantic segmentation process; if it is a voice stream, the audio input link is switched to Bluetooth audio input and the voice stream is sent to the voice front-end processing circuit.

7. The method according to claim 6, characterized in that, If the Bluetooth voice stream does not contain a wake word, but the current Bluetooth device is already in the trusted device zone and is bound to a user identity, then the voice stream will be directly assigned to the bound user, and there is no need to execute the wake-up process again.

8. The method according to claim 1, characterized in that, It also includes a coordinated step between remote interaction and on-site interaction: on-site voice wake-up and Bluetooth remote interaction are monitored in parallel, with the first trigger locking the interaction permission; when on-site voice wake-up successfully recognizes a registered user, the current interaction identity is switched to the local user, the remote interaction permission is suspended, and a session suspension prompt is sent to the original remote user.

9. The method according to claim 1, characterized in that, It also includes an unbinding step: in response to a preset unbinding trigger operation, it forces identity verification. After successful verification, it erases the hardware identity identifier, link encryption key and trust anchor stored in the trusted device area that correspond to the unbinding operation.

10. A Bluetooth remote trust interaction channel device for intelligent machines, characterized in that, The system includes a Bluetooth pairing module, a trust anchor management module, and a channel access control module that are connected in sequence. The Bluetooth pairing module is used to execute steps S1 and S2 as described in claim 1, the trust anchor management module is used to execute step S3 as described in claim 1, and the channel access control module is used to execute step S4 as described in claim 1. Each module can be implemented through pure hardware logic circuits, software programs, firmware, or a combination of hardware and software.