Method for establishing communication link, and communication apparatus and system

Abstract

A method for establishing a communication link, and a communication apparatus and system, which can be applied to the field of communication security, and in particular, to the field of on-board diagnosis. The technical solution of the present application can be executed by a communication system, and the communication system comprises a first node, a second node and a third node, wherein a communication link has been established between the second node and the third node, and communication content between the second node and the third node is encrypted and / or decrypted by means of a first communication key; and when the first node and the second node are mutually trusted devices, a second communication key for communication can be negotiated between the first node and the third node on the basis of the first communication key, so as to establish a communication link between the first node and the third node. According to the technical solution of the present application, by reusing communication keys of existing communication links, the time required for link establishment can be reduced, thereby reducing the probability of link establishment timeout, and improving the link establishment performance.

Description

Method, communication device and system for establishing communication link

[0001] This application claims priority to the Chinese patent application filed with the State Intellectual Property Office of China on March 5, 2024, with application number 202410251548.7 and invention name “Method, communication device and system for establishing a communication link”, the entire contents of which are incorporated by reference into this application. Technical Field

[0002] The present application relates to the field of communication security, and more specifically, to a method, a communication device, and a system for establishing a communication link. Background Art

[0003] On-board diagnostics (OBD) refers to the process of determining a vehicle's technical condition and identifying the location and cause of a fault without disassembling the vehicle. OBD includes both local and remote diagnostics. Local diagnostics involves connecting a diagnostic instrument to a diagnostic interface and sending diagnostic commands directly to the target ECU. Remote diagnostics involves a cloud-based diagnostic platform sending diagnostic commands via a wireless communication network to a device inside the vehicle that communicates with external devices, such as a telematics box (T-Box). The T-Box then forwards the commands to the target ECU for further diagnosis. Local diagnostics require the vehicle to be returned to a repair center to obtain fault information. Compared to local diagnostics, remote diagnostics allows remote interaction with the vehicle to quickly locate the fault and provide appropriate driving guidance. Furthermore, remote diagnostics, in conjunction with over-the-air (OTA) technology, can help quickly mitigate faults, avoiding the time and financial losses associated with returning the vehicle to the repair center.

[0004] Currently, an increasing number of vehicles support remote diagnosis. These vehicles typically maintain a persistent connection with the diagnostic platform based on the MQTT (message queuing telemetry transport) protocol. The vehicle regularly reports its vehicle history record (VHR) related to its health status to the diagnostic platform through this persistent connection. When the diagnostic platform detects an anomaly based on the data reported by the vehicle, if detailed fault location is necessary, it will further analyze and locate the fault through a remote unified diagnostic service (UDS). To ensure the security of information exchange during the diagnostic process (e.g., preventing relay attacks), the vehicle's diagnostic agent module and the diagnostic platform establish a separate, secure, point-to-point communication diagnostic channel.

[0005] However, the current process of establishing a communication link for diagnosis includes too many time-consuming operations, which may cause the link establishment to time out, affecting the availability and stability of the remote diagnosis service. Summary of the Invention

[0006] The present application provides a method, communication device and system for establishing a communication link, which can reduce the time required for negotiating communication keys between communication nodes, thereby reducing the probability of link establishment timeout, and helping to improve the availability and stability of related services.

[0007] In a first aspect, a method for establishing a communication link is provided. The method can be performed by a communication device or a component (such as a chip or chip system) within the communication device. The following description uses the communication device as a first node. In some specific implementation scenarios, the first node can be a diagnostic agent node in a smart device.

[0008] The method includes: receiving a first security key from a second node, the first security key being generated based on a first communication key, and the first communication key being used to encrypt and / or decrypt communication content between the second node and a third node; wherein the second node is a node that has passed the security authentication of the first node; generating a second communication key based on the first security key, and the second communication key being used to encrypt and / or decrypt information transmitted between the first node and the third node.

[0009] In some implementations, if the first node and the second node are nodes located in the same entity, for example, both nodes are located in a vehicle, then the first node and the second node are considered to have mutually authenticated each other. Alternatively, if the first node and the second node are located in different entities, then the first node and the second node may be authenticated using a shared key or certificate.

[0010] In the above technical solution, since the security of the communication key of the existing communication connection can be guaranteed, by reusing the communication key of the existing communication link, the time-consuming operations such as certificate transmission, multi-level certificate verification, temporary key pair generation, temporary public key signing and verification required in the certificate-based chain building mode can be omitted, which can save chain building time and thus reduce the probability of chain building timeout, help improve chain building performance, and at the same time reduce the consumption of communication resources and computing and storage resources of communication nodes.

[0011] In combination with the first aspect, in certain implementations of the first aspect, the method also includes: receiving second key exchange information from a third node, the second key exchange information carries a first temporary public key, and a shared parameter for generating the first temporary public key, the first temporary public key being generated based on the shared parameter and a first random number; generating a second temporary public key based on the shared parameter and the second random number; sending third key exchange information to the third node, the third key exchange information carries a second temporary public key, the second temporary public key being used to generate a second communication key for the third node; generating a second security key based on the first temporary public key and the second random number; generating a second communication key based on the first security key, including: generating a second communication key based on the first security key and the second security key.

[0012] Exemplarily, the first temporary public key and the second temporary public key may be DHE (Diffie-Hellman Ephemeral) keys.

[0013] In the above technical solution, generating a new key by using a temporary key and a reused communication key of an existing communication link helps to further improve the reliability of the new key, thereby improving the link establishment performance.

[0014] In combination with the first aspect, in certain implementations of the first aspect, the first node is a diagnostic agent node of the smart device, the third node is a diagnostic platform, and the second communication key is used to encrypt and / or decrypt information associated with the diagnosis transmitted between the diagnostic agent node and the diagnostic platform.

[0015] It should be noted that the diagnosis platform communicates with the diagnosis agent node of the smart device through a wireless communication network.

[0016] In some implementations, the information associated with the diagnosis includes information and / or a diagnosis result for instructing the diagnosis agent node to diagnose the node to be diagnosed in the smart device.

[0017] When the above technical solution is applied to the field of remote diagnosis, the diagnostic agent node can generate a second communication key after receiving a remote diagnosis request to avoid changes in the first security key, which may cause the previously generated communication key to become invalid, thereby helping to further improve the reliability of the second communication key.

[0018] In combination with the first aspect, in certain implementations of the first aspect, the second node is a communication node of a smart device, and a second communication key is generated based on the first security key, including: when receiving a diagnostic request information from the communication node, generating the second communication key based on the first security key; wherein the diagnostic request information instructs the diagnostic agent node to perform preparations for the diagnosis.

[0019] Exemplarily, the preparation work for diagnosis may include: establishing a communication link between the diagnosis agent node and the diagnosis platform.

[0020] For scenarios such as remote diagnosis that have relatively strict requirements on link establishment delay, the technical solution of this application can effectively reduce the link establishment delay and improve the link establishment performance without affecting security.

[0021] In combination with the first aspect, in some implementations of the first aspect, the method further includes: sending first key exchange information to the third node, where the first key exchange information indicates the first security key.

[0022] Exemplarily, the first key exchange information may carry an identifier of the first security key.

[0023] In combination with the first aspect, in some implementations of the first aspect, the first security key is a pre-shared key (PSK).

[0024] In the above technical solution, generating communication keys based on lightweight keys helps shorten the time required for link establishment, greatly improves link establishment efficiency, and prevents link establishment timeouts.

[0025] A second aspect provides a method for establishing a communication link. This method can be performed by a communication device or a component (such as a chip or chip system) within the communication device. The following description uses the communication device as a third node as an example. In some specific implementation scenarios, the third node can be a diagnostic platform (or cloud server).

[0026] The method includes: receiving first key exchange information from a first node, the first key exchange information indicating a first security key, the first security key being generated based on a first communication key, and the first communication key being used to encrypt communication content between a second node and a third node; determining the first security key from at least one security key according to the first key exchange information, each security key in the at least one security key being associated with a communication node; generating a second communication key according to the first security key, and the second communication key being used to encrypt and / or decrypt information associated with diagnosis transmitted between the first node and the third node.

[0027] In some implementations, the third node stores multiple security keys, each of which is associated with a communication node or a service. Specifically, one security key is used to generate a communication key for a communication link transmitting a service, or one security key is used to generate a communication key for a communication link between the third node and a communication node. Determining the first security key based on the first key exchange information includes: determining the first security key from the multiple security keys based on an identifier carried in the first key exchange information.

[0028] In combination with the second aspect, in certain implementations of the second aspect, the method also includes: generating a first temporary public key based on the shared parameters and the first random number; sending second key exchange information to the first node, the second key exchange information carrying the first temporary public key and the shared parameters; receiving third key exchange information from the first node, the third key exchange information carrying the second temporary public key, the second temporary public key being generated based on the shared parameters and the second random number; generating a second security key based on the second temporary public key and the first random number; generating a second communication key based on the first security key, including: generating the second communication key based on the first security key and the second security key.

[0029] In combination with the second aspect, in certain implementations of the second aspect, the first node is a diagnostic agent node of the smart device, the third node is a diagnostic platform, and the second communication key is used to encrypt and / or decrypt relevant information for diagnosis transmitted between the diagnostic agent node and the diagnostic platform.

[0030] In combination with the second aspect, in some implementations of the second aspect, the method further includes: generating a first security key based on the first communication key.

[0031] In some implementations, the first communication key is a symmetric key, and the third node generates a first security key based on the first communication key.

[0032] In some further implementations, the first communication key may also be an asymmetric key. When the first communication key is an asymmetric key, the method further includes: receiving a first security key from the second node, where the first security key is generated by the second node.

[0033] In combination with the second aspect, in some implementations of the second aspect, the first security key is PSK.

[0034] In a third aspect, a method for establishing a communication link is provided. This method can be performed by a communication device or a component (such as a chip or chip system) in the communication device. The following description uses the communication device as the second node as an example. In some specific implementation scenarios, the second node can be a communication node in a smart device.

[0035] The method includes: obtaining a first communication key, the first communication key is used to encrypt the communication content between the second node and the third node; generating a first security key based on the first communication key; sending the first security key to the first node, the first security key is used to generate a second communication key, and the second communication key is used to encrypt and / or decrypt information transmitted between the first node and the third node.

[0036] In combination with the third aspect, in certain implementations of the third aspect, the second node is a communication node of the smart device, the third node is a diagnostic platform, and a first security key is generated based on the first communication key, including: when receiving a diagnostic startup instruction from the diagnostic platform, generating a first security key based on the first communication key; wherein the diagnostic startup instruction instructs the smart device to start the diagnostic process.

[0037] In some implementations, initiating the diagnostic process may include: establishing a communication link between the third node and the first node; or triggering a process of negotiating a second communication key between the first node and the third node.

[0038] In combination with the third aspect, in some implementations of the third aspect, the first security key is PSK.

[0039] In a fourth aspect, a communication device is provided, comprising a transceiver unit (or transceiver module) and a processing unit (or processing module). The transceiver unit is configured to receive a first security key from a second node, the first security key being generated based on a first communication key, and the first communication key being used to encrypt and / or decrypt communication content between the second node and a third node; wherein the second node is a node that has passed security authentication by the first node. The processing unit is configured to generate a second communication key based on the first security key, and the second communication key being used to encrypt and / or decrypt information transmitted between the first node and the third node.

[0040] In combination with the fourth aspect, in some implementations of the fourth aspect, the transceiver unit is further used to: send first key exchange information to the third node, where the first key exchange information indicates the first security key.

[0041] In combination with the fourth aspect, in certain implementations of the fourth aspect, the transceiver unit is further used to: receive second key exchange information from a third node, the second key exchange information carries a first temporary public key, and a shared parameter for generating the first temporary public key, the first temporary public key being generated based on the shared parameter and a first random number; the processing unit is further used to: generate a second temporary public key based on the shared parameter and the second random number; the transceiver unit is further used to: send third key exchange information to the third node, the third key exchange information carries a second temporary public key, the second temporary public key is used to generate a second communication key for the third node; generate a second security key based on the first temporary public key and the second random number; the processing unit is used to: generate a second communication key based on the first security key and the second security key.

[0042] In combination with the fourth aspect, in certain implementations of the fourth aspect, the first node is a diagnostic agent node of the smart device, the third node is a diagnostic platform, and the second communication key is used to encrypt and / or decrypt information associated with the diagnosis transmitted between the diagnostic agent node and the diagnostic platform.

[0043] In combination with the fourth aspect, in certain implementations of the fourth aspect, the second node is a communication node of an intelligent device, and the processing unit is used to: generate a second communication key based on the first security key when the transceiver unit receives a diagnostic request message from the communication node; wherein the diagnostic request information instructs the diagnostic agent node to perform preparations for the diagnosis.

[0044] In a fifth aspect, a communication device is provided, comprising a transceiver unit and a processing unit. The transceiver unit is configured to: receive first key exchange information from a first node, the first key exchange information indicating a first security key, the first security key being generated based on the first communication key, and the first communication key being used to encrypt communication content between a second node and a third node. The processing unit is configured to: determine the first security key from at least one security key based on the first key exchange information, each of the at least one security key being associated with a communication node; and generate a second communication key based on the first security key, the second communication key being used to encrypt and / or decrypt information associated with diagnosis transmitted between the first node and the third node.

[0045] In combination with the fifth aspect, in certain implementations of the fifth aspect, the processing unit is further used to: generate a first temporary public key based on the shared parameters and the first random number; the transceiver unit is further used to: send second key exchange information to the first node, the second key exchange information carries the first temporary public key and the shared parameters; and receive third key exchange information from the first node, the third key exchange information carries the second temporary public key, and the second temporary public key is generated based on the shared parameters and the second random number; the processing unit is used to: generate a second communication key based on the first security key and the second security key.

[0046] In combination with the fifth aspect, in certain implementations of the fifth aspect, the first node is a diagnostic agent node of the smart device, the third node is a diagnostic platform, and the second communication key is used to encrypt and / or decrypt relevant information for diagnosis transmitted between the diagnostic agent node and the diagnostic platform.

[0047] In combination with the fifth aspect, in some implementations of the fifth aspect, the processing unit is further used to: generate a first security key based on the first communication key.

[0048] In the sixth aspect, a communication device is provided, which includes a transceiver unit and a processing unit, wherein the transceiver unit is used to: obtain a first communication key, the first communication key is used to encrypt the communication content between the second node and the third node; the processing unit is used to: generate a first security key based on the first communication key; the transceiver unit is also used to: send the first security key to the first node, the first security key is used to generate a second communication key, and the second communication key is used to encrypt and / or decrypt information transmitted between the first node and the third node.

[0049] In combination with the sixth aspect, in certain implementations of the sixth aspect, the second node is a communication node of the smart device, the third node is a diagnostic platform, and the processing unit is used to: generate a first security key based on the first communication key when the transceiver unit receives a diagnostic startup instruction from the diagnostic platform; wherein the diagnostic startup instruction instructs the smart device to start the diagnostic process.

[0050] In combination with any one of the fourth to sixth aspects, in certain implementations of any one of the fourth to sixth aspects, the first security key is PSK.

[0051] In a seventh aspect, the present application provides a communication device comprising at least one processor, the at least one processor being coupled to at least one memory, the at least one memory being used to store computer programs or instructions, and the at least one processor being used to call and run the computer program or instructions from the at least one memory, so that the communication device executes the method of any one of the first to third aspects, or the method in any possible implementation of the first to third aspects.

[0052] In an eighth aspect, the present application provides a communication system, comprising the communication device according to aspects 4 to 6.

[0053] In a ninth aspect, the present application provides a smart device comprising the communication apparatus according to the fourth and sixth aspects.

[0054] In combination with the ninth aspect, in certain implementations of the ninth aspect, the above-mentioned smart device is a vehicle.

[0055] In the tenth aspect, the present application provides a computer-readable storage medium, which stores computer instructions. When the computer instructions are executed on a computer, the method in any one of the first to third aspects or any possible implementation thereof is implemented.

[0056] In an eleventh aspect, the present application provides a computer program product, which includes a computer program code. When the computer program code runs on a computer, the method in any one of the first to third aspects or any possible implementation thereof is implemented.

[0057] In a twelfth aspect, a chip is provided, which includes a circuit for executing the method in any possible implementation of the first aspect, the second aspect, or the third aspect.

[0058] The beneficial effects not described in detail in the above-mentioned second to twelfth aspects can be specifically referred to the description of the beneficial effects in the first aspect, and will not be repeated here. BRIEF DESCRIPTION OF THE DRAWINGS

[0059] FIG1 is a schematic diagram of a diagnostic system provided in an embodiment of the present application;

[0060] FIG2 is a schematic flow chart of a method for establishing a communication link provided in an embodiment of the present application;

[0061] FIG3 is another schematic flowchart of a method for establishing a communication link provided in an embodiment of the present application;

[0062] FIG4 is another schematic flow chart of a method for establishing a communication link according to an embodiment of the present application;

[0063] FIG5 is a schematic block diagram of a communication device provided in an embodiment of the present application;

[0064] FIG6 is another schematic block diagram of a communication device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0065] The technical solution in this application will be described below with reference to the accompanying drawings.

[0066] Figure 1 shows a diagnostic system provided by an embodiment of the present application. As shown in Figure 1, taking the smart device as a vehicle as an example, the system 100 includes a diagnostic platform 110 and a vehicle 140. Among them, the vehicle 140 includes a communication module 120, a diagnostic agent module 130 and a plurality of devices to be diagnosed, such as device 1 to be diagnosed and device 2 to be diagnosed. Specifically, the diagnostic platform 110 can be a physical server or a virtual server. When the diagnostic platform 110 is a virtual server, it can be located all over the world and provide services to vehicles in different countries and regions. The diagnostic platform 110 can be connected to the diagnostic agent module 130 through a wireless communication network, and the diagnosis of the devices to be diagnosed in the vehicle 140 can be realized through the diagnostic agent module 130.

[0067] More specifically, the communication module 120 can maintain a communication link 1 with the diagnostic platform 110, and the vehicle 140 can report vehicle-related data, such as VHR data, to the diagnostic platform 110 through the communication module 120. When the diagnostic platform 110 discovers an abnormality based on the data reported by the vehicle, if it is necessary to locate and / or analyze the fault, the diagnostic platform 110 will send a remote diagnostic instruction to the communication module 120 to request the vehicle 140 to start the diagnosis. After receiving the remote diagnostic instruction, the communication module 120 sends the instruction to the diagnostic agent module 130 so that the diagnostic agent module 130 can perform pre-diagnosis preparations. In order to ensure the security of the diagnostic process, after receiving the remote diagnostic instruction, the diagnostic agent module 130 will initiate the process of establishing a communication link 2 with the diagnostic platform 110. After the communication link is established, the diagnostic platform 110 sends diagnostic information to the diagnostic agent module 130 through the communication link 2 so that the diagnostic agent module 130 can diagnose the device to be diagnosed, thereby locating and / or analyzing the fault. It should be noted that the above-mentioned process of establishing a communication link can be understood as: the process of the two nodes that need to communicate negotiating the communication key required for communication. The completion of the security key negotiation represents the completion of the communication link establishment. The two nodes that need to communicate subsequently encrypt and / or decrypt the communication content through the communication key negotiated by the two parties.

[0068] Under current technology, a communication link (hereinafter referred to as "link establishment") is typically established between the diagnostic agent module 130 and the diagnostic platform 110 based on a certificate. During the link establishment process, multiple certificate verifications are required between the diagnostic agent module 130 and the diagnostic platform 110 to complete the link establishment. However, in actual implementation, these multiple certificate verifications are time-consuming and may cause the communication link between the diagnostic agent module 130 and the diagnostic platform 110 to time out, thereby affecting the fault diagnosis process.

[0069] In this application, the diagnostic agent module 130 and the diagnostic platform 110 can establish a link based on the security key associated with the communication key used by the communication link 1. Therefore, no multi-level certificate verification is required during the chain establishment process, which can save the time required for chain establishment and reduce the probability of chain establishment timeout to ensure the availability and stability of the fault diagnosis service.

[0070] In an embodiment of the present application, the communication module 120 may include a device that supports wireless communication, such as a telematics box (T-box). The diagnostic agent module 130 may include any one of a vehicle domain controller (VDC), an advanced driving domain controller (ADC), and a cockpit domain controller (CDC). For another example, the diagnostic agent module 130 may also include any one of an in-car application-server (ICAS) controller, a body domain controller (BDC), a special equipment system (SAS), a media graphics unit (MGU), a body super core (BSC), and an advanced driving assistant system super core (ADAS super core), and this application does not limit this. Among them, the ICAS may include at least one of the following: a vehicle control server ICAS1, an intelligent driving server ICAS2, an intelligent cockpit server ICAS3, and an infotainment server ICAS4. In some implementations, the diagnostic agent module 130 may also be a T-box.

[0071] Illustratively, the above-mentioned device to be diagnosed may include but is not limited to: an ECU and a domain control unit (DCU).

[0072] The system provided by the embodiment of the present application is introduced above in conjunction with Figure 1, and the method provided by the embodiment of the present application is described in detail below in conjunction with Figures 2 to 4.

[0073] Figure 2 shows a schematic flow chart of a method for establishing a communication link provided by an embodiment of the present application, which method can be performed by a first node, a second node and a third node. A communication link has been established between the second node and the third node, and the second node and the third node encrypt and / or decrypt the communication content between the two based on the first communication key. The second node and the first node are mutually trusted devices, and the above-mentioned "trusted devices" can be understood as: a communication link has been established between the first node and the second node, or the first node and the second node have passed security authentication with each other. When the method 200 is executed by the system shown in Figure 1, the first node may include a diagnostic agent module 130, the second node may include a communication module 120, and the third node may include a diagnostic platform 110. The method 200 includes some or all of the steps in S210 to S280.

[0074] S210: The second node obtains a first communication key, where the first communication key is used to encrypt and / or decrypt communication content between the second node and the third node.

[0075] S220: The second node generates a first security key based on the first communication key.

[0076] In some implementations, the second node executes S220 when or after receiving the first indication information from the third node, wherein the first indication information is used to instruct the second node to trigger or notify the first node to establish a communication link with the third node.

[0077] S230: The second node sends a first security key to the first node.

[0078] S240: The first node sends first key exchange information to the third node, where the first key exchange information indicates a first security key.

[0079] In some implementations, the first node executes S240 when or after receiving the second indication information from the second node, wherein the second indication information is used to instruct the first node to initiate a process of establishing a communication link with the third node.

[0080] Exemplarily, the first key exchange information includes an identifier of the first security key.

[0081] S250: The first node generates a second communication key based on the first security key.

[0082] In some implementations, S240 and S250 may be executed simultaneously, or S250 may be executed before S240.

[0083] S260: The third node generates a second communication key based on the first security key.

[0084] In some implementations, before executing S250 and S260, the method further includes: S1, the third node generates a first temporary public key based on the shared parameters and the first random number. S2, the first node receives second key exchange information from the third node, the second key exchange information carries the first temporary public key and the shared parameters for generating the first temporary public key. S3, the first node generates a second temporary public key based on the shared parameters and the second random number. S4, generates a second security key based on the first temporary public key and the second random number. Further, S250 can be refined as: generating a second communication key based on the first security key and the second security key.

[0085] In some implementations, the method further includes: S5, the third node receiving third key exchange information from the first node, the third key exchange information carrying the second temporary public key. S6, the third node generating a second security key based on the second temporary public key and the first random number. Furthermore, S260 can be further refined to: generating a second communication key based on the first security key and the second security key.

[0086] Optionally, the method further includes: S270, the third node sends information confidentialized by the second communication key to the first node; and S280, the first node decrypts the information according to the second communication key.

[0087] The method for establishing a communication link provided in the embodiment of the present application can omit the time-consuming operations such as certificate transmission, multi-level certificate verification, temporary key pair generation, and temporary public key signing and verification required in the certificate-based chain establishment mode by reusing the communication key of the existing communication link. It can save the time of chain establishment, thereby reducing the probability of chain establishment timeout and helping to improve chain establishment performance.

[0088] 3 and 4 , the process of establishing a communication link involved in method 200 will be described in detail by taking the first node as a vehicle diagnostic agent node, the second node as a vehicle communication node, and the third node as a diagnostic platform as an example.

[0089] FIG3 shows another schematic flow chart of a method for establishing a communication link provided by an embodiment of the present application. When method 300 is executed by the system shown in FIG1 , the vehicle may include vehicle 140 shown in FIG1 , the communication node may include communication module 120 , the diagnostic agent node may include diagnostic agent module 130 , and the diagnostic platform may include diagnostic platform 110 . Method 300 includes S301 to S310 .

[0090] S301, the diagnosis platform sends a diagnosis start instruction to the communication node, and the diagnosis start instruction is encrypted based on the communication key 1.

[0091] Exemplarily, the diagnosis start instruction is used to request the start of remote diagnosis. The diagnosis start instruction may be transmitted via a communication link between the diagnosis platform and the communication node, and the communication key 1 is a key used to encrypt information transmitted in the above communication link.

[0092] S302, the communication node generates security key 1 according to communication key 1.

[0093] Exemplarily, the communication key 1 and the security key 1 may both be shared keys (SK), wherein the security key 1 may be generated by the communication node according to the random number 1 and the communication key 1.

[0094] Among them, the communication key 1 can be regarded as an example of the first communication key, the security key 1 can be regarded as an example of the first security key, and the remote diagnosis start instruction can be regarded as an example of the first indication information.

[0095] S303 : The communication node sends a diagnosis request message to the diagnosis agent node, where the diagnosis request message carries security key 1 .

[0096] Exemplarily, the diagnosis request information is used to instruct the diagnosis agent node to perform preparations related to remote diagnosis, such as establishing a communication link for diagnosis. The diagnosis request information can be regarded as an example of the second instruction information mentioned above.

[0097] In some implementations, the diagnosis request information and the security key 1 may also be sent separately.

[0098] S304: The diagnosis agent node stores the security key 1.

[0099] Optionally, the method further includes: S303', the communication node sends information of the security key 1 to the diagnosis platform. S303 and S303' can be performed simultaneously or sequentially.

[0100] Alternatively, the diagnostic platform may also generate the security key 1 by itself according to the communication key 1. It is understandable that the diagnostic platform may store the security keys of multiple vehicles.

[0101] S305: The diagnosis agent node sends a link establishment request to the diagnosis platform. The link establishment request carries at least one encryption component supported by the diagnosis agent node.

[0102] Exemplarily, each of the at least one encryption component indicates an algorithm for generating a key. The at least one encryption component may be an encryption component using lightweight key technology, such as a PSK-based encryption component or other encryption component for generating lightweight keys. Exemplarily, the at least one encryption component includes, but is not limited to, TLS_PSK_WITH_RC4_128_SHA, TLS_PSK_WITH_AES_128_CBC_SHA, TLS_PSK_WITH_AES_256_CBC_SHA, and TLS_PSK_WITH_3DES_EDE_CBC_SHA.

[0103] Exemplarily, the diagnosis agent node sends a link establishment request to the diagnosis platform according to the remote diagnosis call request, that is, the link establishment request is sent when or after the remote diagnosis call request is received.

[0104] S306: The diagnosis platform sends a link establishment response to the diagnosis agent node. The link establishment response carries information about the encryption component 1 selected by the diagnosis platform.

[0105] Exemplarily, the diagnosis platform selects an encryption component 1 supported by itself from at least one encryption component, and sends information of the encryption component 1 to the diagnosis agent node through a link establishment response.

[0106] In some implementations, the diagnostic platform may support multiple encryption components in the at least one encryption component, and the diagnostic platform selects encryption component 1 from the multiple encryption components.

[0107] S307 , the diagnosis agent node sends key exchange information to the diagnosis platform, where the key exchange information carries the identifier of security key 1 .

[0108] In some implementations, the diagnostic platform supports multiple encryption components in at least one encryption component, and in S306 the diagnostic platform sends information of multiple encryption components to the diagnostic agent node through a link establishment response. The diagnostic agent node can also carry information of the encryption components used subsequently (such as encryption component 1) in the key exchange information.

[0109] The key exchange information may be regarded as an example of first key exchange information.

[0110] S308 , the diagnostic platform determines security key 1 according to the key exchange information, and generates communication key 2 according to security key 1 .

[0111] Exemplarily, the diagnostic platform extracts security key 1 from the security keys associated with multiple vehicles stored in its own storage based on the identifier of security key 1. Furthermore, communication key 2 is generated by encryption component 1 and security key 1. For example, if the algorithm indicated by encryption component 1 is P^() and security key 1 is k1, then communication key 2 can be P^(k1). It is understandable that P^() can be any algorithm among TLS_PSK_WITH_RC4_128_SHA, TLS_PSK_WITH_AES_128_CBC_SHA, TLS_PSK_WITH_AES_256_CBC_SHA, TLS_PSK_WITH_3DES_EDE_CBC_SHA, or other algorithms.

[0112] S309 , the diagnosis agent node generates a communication key 2 according to the security key 1 .

[0113] Exemplarily, S307 and S309 may be executed simultaneously, or S309 may be executed before S307.

[0114] The specific implementation method of the diagnosis agent node generating the communication key 2 can refer to the description in S308 and will not be repeated here.

[0115] S310 , the diagnosis platform and the diagnosis agent node perform remote diagnosis based on the communication key 2 .

[0116] For example, the diagnostic platform encrypts the diagnostic instruction using communication key 2 and sends it to the diagnostic agent node. The diagnostic agent node decrypts the diagnostic instruction using communication key 2 and diagnoses the device under diagnosis based on the decrypted diagnostic instruction to obtain a diagnostic result. Furthermore, the diagnostic agent node encrypts the diagnostic result using communication key 2 and sends it to the diagnostic platform. The diagnostic platform reads the diagnostic result using communication key 2.

[0117] The method for establishing a communication link provided in the embodiment of the present application can effectively reduce the link establishment delay and resource consumption of the diagnosis platform for scenarios such as remote diagnosis without affecting security, thereby helping to improve the reliability of remote diagnosis services.

[0118] FIG4 shows another schematic flow chart of a method for establishing a communication link provided by an embodiment of the present application. When method 400 is executed by the system shown in FIG1 , the vehicle may include vehicle 140 shown in FIG1 , the communication node may include communication module 120 , and the diagnostic agent node may include diagnostic agent module 130 . Method 400 includes S401 to S413 .

[0119] The specific implementation methods of S401 to S404 can refer to the description of S301 to S304, which will not be repeated here. The specific implementation methods of S405 to S413 are described in detail below.

[0120] S405: The diagnosis agent node sends a link establishment request to the diagnosis platform. The link establishment request carries at least one encryption component supported by the diagnosis agent node.

[0121] Exemplarily, each encryption component in at least one encryption component indicates an algorithm for generating a key, and at least one encryption component can be an encryption component based on a PSK algorithm and a temporary key algorithm. For example, taking the temporary key algorithm as the DHE algorithm, at least one encryption component can include but is not limited to TLS_DHE_PSK_WITH_RC4_128_SHA, TLS_DHE_PSK_WITH_AES_128_CBC_SHA, TLS_DHE_PSK_WITH_AES_256_CBC_SHA, and TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA.

[0122] S406: The diagnosis platform sends a link establishment response to the diagnosis proxy node. The link establishment response carries the encryption component 2 selected by the diagnosis platform.

[0123] S407 , the diagnosis platform sends a key exchange message 1 to the diagnosis agent node. The key exchange message 1 carries a temporary public key 1 generated by the diagnosis platform and parameters used to generate the temporary public key 1 .

[0124] Exemplarily, the diagnostic platform determines the encryption component 2 and generates a temporary public key 1 according to the encryption component 2. For example, the temporary public key 1 may be A(a, g, p), where a is a random number generated by the diagnostic platform, g and p are respectively a prime number and a primitive root shared by the diagnostic agent node and the diagnostic platform, and g and p may be considered as some examples of parameters for generating the temporary public key.

[0125] Furthermore, the diagnosis platform carries g, p, and A(a, g, p) in the key exchange information 1 and sends it to the diagnosis agent node.

[0126] Among them, the key exchange information 1 can be regarded as an example of the above-mentioned second key exchange information, the temporary public key 1 can be regarded as an example of the first temporary public key, and the parameters p and g can be regarded as an example of shared parameters.

[0127] In some implementations, S406 and S407 may be performed synchronously.

[0128] S408 , the diagnosis agent node sends key exchange information 2 to the diagnosis platform. The key exchange information 2 carries the identifier of the security key 1 and the temporary public key 1 generated by the diagnosis agent node.

[0129] In some implementations, the diagnostic agent node receives the key exchange information 1 and generates a temporary public key 2 based on the encryption component 2 and the parameters used to generate the temporary public key 1. For example, the temporary public key 2 can be A(b, g, p), where b is a random number generated by the diagnostic agent node.

[0130] Among them, the key exchange information 2 can be regarded as an example of the above-mentioned first key exchange information, and the temporary public key 2 can be regarded as an example of the second temporary public key.

[0131] S409 , the diagnostic platform generates a security key 2 according to the temporary public key 2 .

[0132] Exemplarily, the diagnostic platform generates a security key 2 according to the temporary public key 2 and a random number used to generate the temporary public key 1. For example, the security key 2 may be A(a, b, g, p).

[0133] S410 , the diagnostic platform generates a communication key 3 according to the security key 1 and the security key 2 .

[0134] Exemplarily, the diagnostic platform extracts security key 1 from the security keys associated with multiple smart devices stored in the diagnostic platform according to the identifier of security key 1. Then, the encryption component 2 is used to generate communication key 3 based on security key 1 and security key 2. For example, the algorithm indicated by the encryption component 2 is P_D^(), and the security key 1 is k1, then the communication key 3 can be P_D^(k1, A(a, b, g, p)). It can be understood that P_D^() can be any algorithm among TLS_DHE_PSK_WITH_RC4_128_SHA, TLS_DHE_PSK_WITH_AES_128_CBC_SHA, TLS_DHE_PSK_WITH_AES_256_CBC_SHA, TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA, or it can also be other algorithms.

[0135] S411 , the diagnosis agent node generates a security key 2 according to the temporary public key 1 .

[0136] Exemplarily, the diagnosis agent node generates the security key 2 according to the temporary public key 1 and a random number used to generate the temporary public key 2.

[0137] S412 , the diagnosis agent node generates a communication key 3 according to the security key 1 and the security key 2 .

[0138] The specific implementation method of the diagnosis agent node generating the communication key 3 can refer to the description in S410 and will not be repeated here.

[0139] S413 , the diagnosis platform and the diagnosis agent node perform remote diagnosis based on the communication key 3 .

[0140] For matters not described in detail in method 400 , please refer to the description in method 300 and will not be repeated here.

[0141] The method for establishing a communication link provided in the embodiment of the present application generates a communication key for diagnosis based on an existing communication key and a temporary key, which helps to further improve the forward security of the communication key used for diagnosis, thereby improving the reliability of remote diagnosis services.

[0142] In the various embodiments of the present application, unless otherwise specified or there is a logical conflict, the terms and / or descriptions between the various embodiments are consistent and can be referenced by each other. The technical features in different embodiments can be combined to form new embodiments according to their inherent logical relationships.

[0143] The method for establishing a communication link provided by an embodiment of the present application is described in detail above with reference to Figures 1 to 4 . The apparatus provided by an embodiment of the present application will be described in detail below with reference to Figures 5 and 6 . It should be understood that the description of the apparatus embodiment corresponds to the description of the method embodiment. Therefore, for matters not described in detail, reference can be made to the method embodiment above, and for the sake of brevity, no further description will be given here.

[0144] Figure 5 shows a schematic block diagram of a communication device 2000 provided in an embodiment of the present application, and the device 2000 may include units for executing the methods in Figures 2, 3, and 4. In addition, each unit in the device 2000 is for implementing the corresponding process of the above method embodiments.

[0145] The device 2000 includes a transceiver unit 2010, which can be used to implement corresponding data acquisition or transceiver functions. The device 2000 also includes a processing unit 2020, which can be used to implement corresponding processing functions.

[0146] Optionally, the device 2000 also includes a storage unit, which can be used to store instructions and / or data. The processing unit 2020 can read the instructions and / or data in the storage unit so that the device implements the relevant actions in the aforementioned method embodiments.

[0147] In one example, when the device 2000 is applied to the first node in the above embodiment, the transceiver unit 2010 is used to: receive a first security key from the second node, the first security key is generated based on the first communication key, and the first communication key is used to encrypt and / or decrypt the communication content between the second node and the third node; the processing unit 2020 is used to: generate a second communication key based on the first security key, and the second communication key is used to encrypt and / or decrypt information transmitted between the first node and the third node.

[0148] In another example, when the device 2000 is applied to the second node in the above embodiment, the transceiver unit 2010 is used to: obtain a first communication key, and the first communication key is used to encrypt the communication content between the second node and the third node; the processing unit 2020 is used to: generate a first security key based on the first communication key; the transceiver unit 2010 is also used to: send the first security key to the first node, and the first security key is used to generate a second communication key, and the second communication key is used to encrypt and / or decrypt information transmitted between the first node and the third node.

[0149] In another example, when the apparatus 2000 is applied to the third node in the above embodiment, the transceiver unit 2010 is configured to: receive first key exchange information from the first node, the first key exchange information indicating a first security key, the first security key being generated based on the first communication key, and the first communication key being used to encrypt communication content between the second node and the third node. The processing unit 2020 is configured to: determine the first security key from at least one security key based on the first key exchange information, each of the at least one security key being associated with a communication node; and generate a second communication key based on the first security key, the second communication key being used to encrypt and / or decrypt diagnosis-related information transmitted between the first node and the third node.

[0150] It should be understood that the specific process of each unit executing the above corresponding steps has been described in detail in the above method embodiment, and for the sake of brevity, it will not be repeated here.

[0151] It should also be understood that the apparatus 2000 herein is embodied in the form of functional units. The term "module" or "unit" herein may refer to an application-specific ASIC, electronic circuitry, a processor (e.g., a shared processor, a dedicated processor, or a group of processors, etc.) and memory for executing one or more software or firmware programs, combined logic circuitry, and / or other suitable components that support the described functionality.

[0152] The apparatus 2000 of each of the above-described solutions has the function of implementing the corresponding steps in the above-described methods. The functions can be implemented by hardware, or by hardware executing corresponding software implementations. The hardware or software includes one or more modules corresponding to the above-described functions; for example, the transceiver unit can be replaced by a transceiver, and other units, such as the processing unit, can be replaced by a processor to perform the relevant processing operations in each method embodiment.

[0153] The processor in this application is a circuit with signal processing capabilities. In one implementation, the processor can be a circuit with instruction reading and execution capabilities, such as a central processing unit (CPU), a microprocessor, a graphics processing unit (GPU) (which can be understood as a microprocessor), or a digital signal processor (DSP). In another implementation, the processor can implement certain functions through the logical relationship of a hardware circuit, and the logical relationship of the hardware circuit is fixed or reconfigurable. For example, the processor is a hardware circuit implemented by an application-specific integrated circuit (ASIC) or a programmable logic device (PLD), such as a field programmable gate array (FPGA). In a reconfigurable hardware circuit, the process of the processor loading a configuration document to implement the hardware circuit configuration can be understood as the process of the processor loading instructions to implement the functions of some or all of the above units. In addition, the processor can also be a hardware circuit designed for artificial intelligence, which can be understood as an ASIC, such as a neural network processing unit (NPU), a tensor processing unit (TPU), a deep learning processing unit (DPU), etc.

[0154] In a specific implementation process, the various units in the above apparatus may be fully or partially integrated together, or may also be implemented independently. In one implementation, these units are integrated together and implemented in the form of a system-on-a-chip (SoC).

[0155] Figure 6 is another schematic block diagram of a communication device provided in an embodiment of the present application. The communication device 2100 shown in Figure 6 may include: a processor 2110, a transceiver 2120, and a memory 2130. The processor 2110, the transceiver 2120, and the memory 2130 are connected via an internal connection path. The memory 2130 is used to store instructions, and the processor 2110 is used to execute the instructions stored in the memory 2130 to implement the methods in the above embodiments. Optionally, the memory 2130 can be coupled to the processor 2110 via an interface or integrated with the processor 2110.

[0156] It should be noted that the transceiver 2120 may include but is not limited to a transceiver device such as an input / output interface to implement communication between the device 2100 and other devices or a communication network.

[0157] Memory 2130 may be a volatile memory and / or a non-volatile memory. The non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM). For example, RAM may be used as an external cache. By way of example and not limitation, RAM includes the following forms: static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM), and direct rambus RAM (DR RAM).

[0158] The transceiver 2120 uses a transceiver device such as but not limited to a transceiver to implement communication between the device 2100 and other devices or communication networks to receive / send data / information used to implement the methods in the above embodiments.

[0159] An embodiment of the present application further provides an intelligent device, which includes the first node and the second node in the above embodiment; or includes the diagnostic agent node and the communication node in the above embodiment.

[0160] The smart devices described in this application may include land vehicles, water vehicles, air vehicles, industrial equipment, agricultural equipment, or entertainment equipment. For example, the smart device may be a vehicle, which is a vehicle in a broad sense, and may be a vehicle (such as a commercial vehicle, a passenger car, a motorcycle, a flying car, a train, etc.), an industrial vehicle (such as a forklift, a trailer, a tractor, etc.), an engineering vehicle (such as an excavator, a bulldozer, a crane, etc.), agricultural equipment (such as a mower, a harvester, etc.), amusement equipment, a toy vehicle, etc. The embodiments of this application do not specifically limit the type of vehicle. For another example, the smart device may be an intelligent robot, a smart home device, a drone, an airplane, or a ship, etc.

[0161] An embodiment of the present application further provides a computer program product, which includes computer program code. When the computer program code runs on a computer, the computer implements the methods in the above embodiments of the present application.

[0162] An embodiment of the present application further provides a computer-readable storage medium, which stores computer instructions. When the computer instructions are executed on a computer, the computer implements the methods in the above embodiments of the present application.

[0163] An embodiment of the present application also provides a chip, including a circuit, for executing the methods in the above embodiments of the present application.

[0164] Those skilled in the art will clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0165] In the description of the embodiments of the present application, unless otherwise specified, " / " means or, for example, A / B can mean A or B; "and / or" in this article is a kind of association relationship that describes associated objects, indicating that there can be three relationships, for example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone. In this application, "at least one" refers to one or more, and "more than one" refers to two or more. "At least one of the following items" or similar expressions refers to any combination of these items, including any combination of single items or plural items. For example, at least one of a, b, or c can mean: a, b, c, ab, ac, bc, or abc, where a, b, c can be single or multiple.

[0166] In the embodiments of this application, prefixes such as "first" and "second" are used only to distinguish different description objects and have no limiting effect on the position, order, priority, quantity, or content of the described objects. The use of prefixes such as ordinal numbers in the embodiments of this application to distinguish description objects does not constitute a limitation on the described objects. For a statement of the described objects, please refer to the description in the context of the claims or embodiments, and the use of such prefixes should not constitute an unnecessary limitation.

[0167] In the several embodiments provided in this application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are merely schematic. For example, the division of the units is merely a logical function division. In actual implementation, there may be other division methods, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0168] In the various embodiments of the present application, unless otherwise specified or there is a logical conflict, the terms and / or descriptions between the various embodiments are consistent and can be referenced by each other. The technical features in different embodiments can be combined to form new embodiments according to their inherent logical relationships.

[0169] The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple network units. Some or all of these units may be selected to achieve the purpose of this embodiment according to actual needs.

[0170] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0171] The above description is merely a specific embodiment of the present application, but the scope of protection of the present application is not limited thereto. Any changes or substitutions that can be easily conceived by a person skilled in the art within the technical scope disclosed in this application should be included in the scope of protection of this application. Therefore, the scope of protection of this application should be based on the scope of protection of the claims.

Claims

1. A method for establishing a communication link, characterized in that: Applied to the first node, the method includes: receiving a first security key from the second node, where the first security key is generated based on the first communication key, and the first communication key is used to encrypt and / or decrypt communication content between the second node and a third node; The second node is a node that has passed the security authentication of the first node; A second communication key is generated according to the first security key, where the second communication key is used to encrypt and / or decrypt information transmitted between the first node and the third node.

2. The method according to claim 1, characterized in that The method further comprises: receiving second key exchange information from the third node, where the second key exchange information carries a first temporary public key and a shared parameter for generating the first temporary public key, where the first temporary public key is generated based on the shared parameter and a first random number; Generate a second temporary public key according to the shared parameter and the second random number; Sending third key exchange information to the third node, where the third key exchange information carries the second temporary public key, and the second temporary public key is used by the third node to generate the second communication key; Generate a second security key based on the first temporary public key and the second random number; The generating a second communication key according to the first security key includes: The second communication key is generated according to the first security key and the second security key.

3. The method according to claim 1 or 2, characterized in that The first node is a diagnostic agent node of a smart device, the third node is a diagnostic platform, and the second communication key is used to encrypt and / or decrypt diagnosis-related information transmitted between the diagnostic agent node and the diagnostic platform.

4. The method according to claim 3, characterized in that The second node is a communication node of the smart device, and generating a second communication key according to the first security key includes: upon receiving a diagnostic request message from the communication node, generating a second communication key based on the first security key; The diagnosis request information instructs the diagnosis agent node to perform preparation work for diagnosis.

5. The method according to any one of claims 1 to 4, characterized in that The method further comprises: First key exchange information is sent to the third node, where the first key exchange information indicates a first security key.

6. The method according to any one of claims 1 to 5, characterized in that The first security key is a pre-shared key PSK.

7. A method for establishing a communication link, characterized in that: Applied to the third node, the method includes: receiving first key exchange information from the first node, where the first key exchange information indicates a first security key, where the first security key is generated based on the first communication key, and the first communication key is used to encrypt communication content between the second node and the third node; determining the first security key from at least one security key according to the first key exchange information, each security key in the at least one security key being associated with a communication node; A second communication key is generated according to the first security key, and the second communication key is used to encrypt and / or decrypt information associated with diagnosis transmitted between the first node and the third node.

8. The method according to claim 7, characterized in that The method further comprises: Generate a first temporary public key according to the shared parameter and the first temporary number; Sending second key exchange information to the first node, where the second key exchange information carries the first temporary public key and the shared parameter; receiving third key exchange information from the first node, where the third key exchange information carries a second temporary public key, where the second temporary public key is generated according to the shared parameter and a second random number; generating a second security key according to the second temporary public key and the first random number; The generating a second communication key according to the first security key includes: The second communication key is generated according to the first security key and the second security key.

9. The method according to claim 7 or 8, characterized in that The first node is a diagnostic agent node of an intelligent device, the third node is a diagnostic platform, and the second communication key is used to encrypt and / or decrypt relevant information for diagnosis transmitted between the diagnostic agent node and the diagnostic platform.

10. The method according to any one of claims 7 to 9, characterized in that The first security key is a pre-shared key PSK.

11. A method for establishing a communication link, characterized in that: Applied to the second node, the method includes: Obtaining a first communication key, where the first communication key is used to encrypt communication content between the second node and the third node; generating a first security key based on the first communication key; The first security key is sent to the first node, where the first security key is used to generate a second communication key, and the second communication key is used to encrypt and / or decrypt information transmitted between the first node and the third node.

12. The method according to claim 11, characterized in that The second node is a communication node of the smart device, the third node is a diagnostic platform, and generating a first security key according to the first communication key includes: upon receiving a diagnosis start instruction from the diagnostic platform, generating a first security key based on the first communication key; The diagnosis start instruction instructs the smart device to start a diagnosis process.

13. The method according to claim 11 or 12, characterized in that The first security key is a pre-shared key PSK.

14. A communication device, characterized in that: The method comprises a module or a unit for executing the method according to any one of claims 1 to 6, or for executing the method according to any one of claims 7 to 10, or for executing the method according to any one of claims 11 to 13.

15. A communication device, characterized in that: The method comprises at least one processor coupled to at least one memory, wherein the at least one processor is configured to execute a computer program or instruction stored in the at least one memory, so as to cause the communication device to perform the method according to any one of claims 1 to 6, or the method according to any one of claims 7 to 10, or the method according to any one of claims 11 to 13.

16. A communication system, characterized in that: including a first node, a second node and a third node; wherein, The first node is configured to perform the method according to any one of claims 1 to 6; The third node is configured to perform the method according to any one of claims 7 to 10; The second node is configured to execute the method according to any one of claims 11 to 13.

17. A smart device, characterized in that: comprising a first node and a second node; wherein, The first node is configured to perform the method according to any one of claims 1 to 6; The second node is configured to execute the method according to any one of claims 11 to 13.

18. A computer-readable storage medium, characterized in that Instructions are stored thereon, and when the instructions are executed by a processor, the processor implements the method according to any one of claims 1 to 6, or the method according to any one of claims 7 to 10; or the method according to any one of claims 11 to 13.

19. A computer program product, characterized in that The computer program product comprises: a computer program code, which, when executed, implements the method according to any one of claims 1 to 6, or the method according to any one of claims 7 to 10; or the method according to any one of claims 11 to 13.

20. A chip, characterized in that: The chip comprises a circuit configured to execute the method according to any one of claims 1 to 6, or the method according to any one of claims 7 to 10; or the method according to any one of claims 11 to 13.

Images