WO2016145820A1

WO2016145820A1 - Near field communication data transmission method, device, computer storage medium

Info

Publication number: WO2016145820A1
Application number: PCT/CN2015/090616
Authority: WO
Inventors: 沙爽
Original assignee: 中兴通讯股份有限公司
Priority date: 2015-08-19
Filing date: 2015-09-24
Publication date: 2016-09-22
Also published as: CN106470386A

Abstract

Disclosed in an embodiment of the present invention are a secure access method, device, terminal and storage medium. The method comprises: inputting via a preset password input interface a required access password of an object to be accessed, determining whether the access password has passed an identity verification of the object to be accessed, and if the access password has passed the identity verification of the object to be accessed, then jumping to the object to be accessed and granting authorization to access the same, while if the access password has not passed the identity verification of the object to be accessed, refusing access to the object to be accessed.

Description

Near field communication data transmission method and device, computer storage medium

Technical field

The present invention relates to the field of communications, and in particular, to a near field communication data transmission method and apparatus, and a computer storage medium.

Background technique

Near Field Communication (NFC), also known as short-range wireless communication, is a short-range high-frequency wireless communication technology that allows non-contact point-to-point data transmission (within ten centimeters) between electronic devices. data.

NFC can be used as a short-range technology in which files and other content can be passed when several devices are very close together. This feature is useful for places that need to collaborate, such as when you need to share files or when multiple players play games.

Existing NFC point-to-point data transmission, direct access to the two NFC terminals within a distance of 4CM can directly carry out data transmission. There is no process of trusted authority management between terminals, so there is a certain crisis of trust.

Summary of the invention

In order to solve the above technical problem, an embodiment of the present invention provides a near field communication data transmission method and apparatus, and a computer storage medium, which solves the problem of poor security of data transmission by near field communication in the prior art.

The near field communication data transmission method provided by the embodiment of the present invention includes:

Turn on near field communication and establish a near field communication wireless channel;

Perform security verification before transmitting the data to be sent to the other device;

After the verification is passed, the to-be-transmitted data is transmitted to the counterpart device.

In an embodiment of the invention, the performing the security verification comprises: performing security verification on the counterpart device.

In an embodiment of the present invention, the performing security verification on the counterpart device includes:

Performing identity security verification on the counterpart device;

or

Performing identity security verification on the counterpart device, and performing data authority verification on the counterpart device after the verification is passed.

In an embodiment of the present invention, the performing identity security verification on the counterpart device includes:

Receiving an identity security identifier sent by the remote device, determining whether the identity security identifier is the same as its own identity security identifier, and if the same, the identity security verification is passed;

or

Receiving an identity of the counterpart device, determining whether the identity identifier is in a preset security list, and if yes, identity security verification is passed;

or

Receiving an identity security identifier and an identity identifier of the remote device, determining whether the identity security identifier is the same as its own identity security identifier, and determining whether the identity identifier is in a preset security list, if the identity security identifier is the same and is in advance Within the security list, the identity security verification is passed.

In an embodiment of the present invention, the performing data authority verification on the counterpart device includes: acquiring data authority corresponding to the counterpart device; determining whether data corresponding to the data authority of the counterpart device includes the to-be-sent Data; if included, data permission validation passes.

In an embodiment of the present invention, the acquiring the data authority corresponding to the counterpart device comprises: finding the data authority corresponding to the counterpart device according to the identity security identifier or the identity identifier of the counterpart device.

In an embodiment of the present invention, the performing data authority verification on the counterpart device includes: acquiring all devices having the right to send data, determining whether the device is included, and if so, verifying data rights by.

In an embodiment of the present invention, the acquiring, by the device having the right to send data, the method includes: acquiring an identity security identifier or an identity identifier corresponding to all devices that have the data to be sent; The counterpart device includes: determining whether the identity security identifier or the identity identifier corresponding to the counterpart device is included.

In an embodiment of the present invention, the performing the security verification further comprises: accepting the peer device to perform security verification on itself.

In an embodiment of the present invention, the receiving the peer device to perform security verification on itself includes:

Accepting the identity device to perform identity security verification on itself;

or

The other device is accepted to perform identity security verification on itself, and the data authority verification is performed on itself after the verification is passed.

The near field communication data transmission apparatus provided by the embodiment of the invention comprises an opening module, a security module and a transmission module:

The opening module is configured to enable near field communication and establish a near field communication wireless channel;

The security module is configured to perform security verification before transmitting the data to be sent to the other device;

The transmission module is configured to transmit the to-be-transmitted data to the counterpart device after the verification is passed.

In an embodiment of the invention, the security module is further configured to perform security verification on the counterpart device.

In an embodiment of the invention, the security module includes an identity security submodule or data a security submodule: the identity security submodule is configured to perform identity security verification on the counterpart device; the data security submodule is configured to perform identity security verification on the counterpart device, and perform verification on the counterpart device Data permission verification.

In an embodiment of the invention, the security module is further configured to accept the peer device to perform security verification on itself.

In an embodiment of the present invention, the security module is further configured to accept the identity device to perform identity security verification on itself, or accept the identity device to perform identity security verification on itself, and perform data permission on itself after the verification is passed. verification.

The computer storage medium provided by the embodiment of the present invention stores a computer program for executing the near field communication data transmission method.

The beneficial effects of the invention are:

The near field communication data transmission method and device and the computer storage medium provided by the embodiments of the present invention enable the near field communication to establish a near field communication wireless channel; perform security verification before transmitting the data to be sent to the other device; after the verification is passed, The data to be transmitted is transmitted to the other device. Compared with the prior art, the data is sent to the other terminal without being close to the other terminal, and the security verification is performed. Only after the security verification is passed, the data is sent to the other terminal, and the NFC device in the current technical application is solved. There is no problem of trusted authentication between data transmission. It provides a reliable guarantee for users to use the terminal safely, and provides a meaningful supplement to the standard protocol specification.

DRAWINGS

1 is a schematic flowchart of a near field communication data transmission method according to Embodiment 1 of the present invention;

2 is a schematic flowchart of a near field communication data transmission method according to Embodiment 2 of the present invention;

3 is a schematic flowchart of a near field communication data transmission method according to Embodiment 3 of the present invention;

4 is a schematic structural diagram 1 of a near field communication data transmission apparatus according to Embodiment 4 of the present invention;

5 is a schematic structural diagram 2 of a near field communication data transmission apparatus according to Embodiment 4 of the present invention;

6 is a schematic structural diagram 3 of a near field communication data transmission apparatus according to Embodiment 4 of the present invention;

FIG. 7 is a schematic structural diagram of a centralized management software system according to Embodiment 4 of the present invention.

detailed description

The technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the drawings in the embodiments of the present invention. It is a partial embodiment of the invention, and not all of the embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

In order to better understand the embodiments of the present invention, the related art is further described.

In a Peer-to-Peer (P2P) application, the data format between devices is as follows:

{LLCP{SNEP{NDEF{RTD}}}}

That is, the Logical Link Control Protocol (LLCP) usually carries SNEP data; the Simple NFC Exchange Protocol (SNEP) usually carries NDEF data; the NDEF carries RTD data; RTD data is the actual application data;

(1) LLCP protocol

The Logical Link Control Protocol (NFCForum-TS-LLCP1.1.pdf) provides the means for transmitting upper layer information units between two NFC devices, including link activation, management, deactivation, and protocol multiplexing. Connection-oriented transport: Provides a serialized, error-free data transmission service connectionless transmission: the protocol overhead is small, using the request and response mechanism.

(2) SNEP agreement

Simple NDEF Exchange Protocol (NFCForum-TS-SNEP_1.0.pdf) is an application layer protocol (using request and response mode). It is applicable to P2P mode to send or receive NDEF application data between two NFC devices. The client sends a request to the server, the message includes: protocol version, request method, length, and information data; the server performs the specified operation. Then respond to the packet: protocol version, status code, length, information data.

(3) NDEF

NFC Data Exchange Format (NFCForum-TS-NDEF_1.0.pdf) NDEF is a lightweight, compact binary format with various data types defined by URL, vCard and NFC. The information exchanged by NDEF consists of a series of records, each of which contains a payload, which can be a URL, MIME, or a custom data type. Each payload is described by a type, length, and an optional identifier. The maximum data size of an NDEF is 4GB.

Embodiment 1

The near field communication data transmission method of this embodiment, as shown in FIG. 1, includes the following steps:

Step S101: Turn on near field communication, and establish a near field communication wireless channel;

In this step, it should be understood that it is necessary to activate the near field communication NFC, so that the NCFs of the two devices performing data interaction are both turned on and on, and the wireless channel is established.

Step S102: Perform security verification before transmitting the to-be-transmitted data to the other device.

In this step, the transmitted data herein may include an address book, a file, a gallery, a music library, and the like stored in the terminal. It should be understood that the data to be sent here is the various shared data that is intended to be transmitted. The counterpart device and the device itself may be any device or device device having an NFC function (ie, having an NFC chip communication system), and of course, other systems such as communication, display, audio, and the like. The specific device may be a smart terminal, such as a mobile phone, a tablet computer, or the like. It is mainly to provide data security in its own device, to prevent some important data from being transmitted to unfamiliar devices, and to perform security verification on the other device to improve data security.

Step S103: After the verification is passed, the data to be sent is transmitted to the counterpart device.

In this step, after the security verification is passed, the data to be transmitted is transmitted to the other device, which improves security. If the verification fails, you can stop the data transmission to be sent, you can Our devices do not exchange untrusted data with any device, allowing our data protection and secure communications to go a step further.

In the above step S102, performing security verification may be performing security verification on the counterpart device, and performing security verification on the counterpart device specifically includes performing identity security verification on the counterpart device.

The specific identity security verification for the other device may be the identity security identifier sent by the receiving device, and determine whether the identity security identifier is the same as its own identity security identifier. If the identity is the same, the identity security verification is passed. It should be understood that for the device and all other counterpart devices, the identity security identifier is pre-stored so that the device can identify the identity security identifier of the peer device, and multiple identity security identifiers are stored in the device. Taking the device as an example of the mobile phone, Zhang San is the sender of the local device, and in the case of Zhang San’s mobile phone, the family identity security identifier A, the colleague identity security identifier B and the classmate identity security identifier C are pre-stored, and Zhang Yi Zhang Er is the family of Zhang San, Li Si and Wang Wu are colleagues of Zhang San, Zhao Liu and Zhao Qi are Zhang San’s classmates. Then there are identity security signs A, B and C in Zhang San’s mobile phone, identity security ID A in Zhang Yi and Zhang Er’s mobile phones, and identity security ID B in Li Si and Wang Wu’s mobile phones. In the mobile phones of Zhao Liu and Zhao Qi, the identity security identifier C is stored. If Zhang San and Li Si conduct data transmission, then before the data transmission by Zhang San and Li Si, Li Si will identify his identity security B. For Zhang San mobile phone, Zhang San mobile phone judges that it has the same identity security identifier B, and if so, it is considered to be trustworthy. If there is no identity security identity, or the identity security identity is different from its own, it is considered to be untrusted, and the verification fails.

The specific identity security verification of the counterpart device may be to receive the identity identifier of the counterpart device, determine whether the identity identifier is in the preset security list, and if so, the identity security verification is passed. It should be understood that for the device and all other counterpart devices, there will be corresponding identification, such as the number of the device and the identification information of the number, so that the device can identify the opposite device, and what is preset in the device A list of identities corresponding to devices that can be trusted. Of course, the list here means that devices that can be trusted are stored, not just in the form of lists, other forms. Can also be included. Taking the device as a mobile phone as an example, in the case of the mobile phone of Zhang San (sender), the safety list pre-stored in Zhang San mobile phone contains Zhang San’s family Zhang Yi and Zhang Er, Zhang San’s colleagues Li Si and Wang Wu Zhang San’s classmates Zhao Liu and Zhao Qi. If Zhang San and Li Si carry out data transmission, then before the data transmission of Zhang San and Li Si, Li Si will give his identity (mobile number) to Zhang San mobile phone, and Zhang San mobile phone judges that he has a safe list. Li Si’s mobile phone is considered trustworthy and verified.

In order to further improve security, multi-layer verification can be performed, and data transmission can be performed only when it is satisfied at the same time. That is, the specific identity security verification of the counterpart device may also be to receive the identity security identifier and the identity identifier of the counterpart device, determine whether the identity security identifier is the same as its own identity security identifier, and determine whether the identity identifier is in the preset security list, if The identity security ID is the same and within the preset security list, the identity security verification is passed. It should be understood that for the device and all other counterpart devices, the identity security identifier is pre-stored so that the device can identify the identity security identifier of the peer device, and multiple identity security identifiers are stored in the device. And for the device and all other counterpart devices, there will be corresponding identity, such as the number of the device and the identification information of the number, so that the device can identify the peer device, and in the device, which ones are pre-set can be trusted. A list of identities corresponding to the device. Taking the device as an example of the mobile phone, combined with the example of Zhang San above, if Zhang Sanwei and Li Si carry out data transmission, then before the data transmission by Zhang San and Li Si, Li Si will give his identity security mark B to Zhang San mobile phone, Zhang San mobile phone judges that it has the same identity security identity B, if it is, it is considered that the trusted identity security identity B is the same as its own identity security identity B, and will also determine the identity of Li Si ( Whether the mobile number is in its own safe list, if it is, the verification is passed. Because the identity security logo only means that there is this identity security logo, it does not specifically care who it is, and it may be stolen by the stranger. If the identity verification is further strengthened, the security is improved.

It is worth noting that the above-mentioned identity security verification of the other device is only for the purpose of understanding. For example, other ways to implement identity security verification of the other device should also be included.

Further, in order to improve the security of the data, performing security verification on the other device further includes: performing identity security verification on the other device first, and then performing data authority verification on the other device after the verification is passed. That is, the identity security verification is performed first, and after the identity security verification is passed, the data authentication of the other device is performed, and the data transmission is performed after the data authority verification is passed. The data permission here refers to the data that the other device can share, for example, the family can share their own life photos, the second working files are generally not shared, the colleagues can share the working documents, but generally do not share their own life photos.

The specific data authority verification for the other device may be to obtain the data authority corresponding to the counterpart device; determine whether the data corresponding to the data authority of the counterpart device includes the data to be sent; if yes, the data authority verification is passed. Specifically, obtaining the data authority corresponding to the counterpart device includes: finding the data authority corresponding to the counterpart device according to the identity security identifier or the identity identifier of the counterpart device. In combination with the above example of Zhang San, when Zhang San and Li Si conduct data transmission, after Zhang San’s identity verification of Li Si is passed, he can find identity security identity B or Li Si according to Li Si’s identity security identity B. Which data rights are corresponding to the mobile phone number, such as working files, music and video, and whether the data to be transmitted is in it. If it is, it can be transmitted, for example, a working file, then it can be transmitted. If not, for example, Life photos cannot be transferred. Preferably, the data security rights are correspondingly set in advance corresponding to the data security identifiers, and the corresponding data identifiers are also correspondingly set for each identity identifier.

The specific data authority verification for the other device may also be to obtain all devices having the right to send data, and determine whether the device is included. If yes, the data authority is verified. Specifically, obtaining all the devices having the right to send data includes: acquiring an identity security identifier or an identity identifier corresponding to all devices that have data to be sent; determining whether the device includes the counterpart device includes: determining whether the identity security identifier or identity corresponding to the counterpart device is included Logo. Combining the above examples of Zhang San The child explains that when Zhang San and Li Si carry out data transmission, after Zhang San’s identity verification of Li Si is passed, for example, the data to be transmitted is a life photo, then the identity security identifier A corresponding to the life photo is found, or the corresponding identity is obtained. The mobile phone number identifying Zhang Yi and the mobile phone number of Zhang Er, since it is Li Si at this time, then it is not included, and the above cannot be transmitted. If the data to be transmitted is a working file at this time, the corresponding identity security identifier B, or the corresponding mobile phone number of the identity identifier Li Si and the mobile phone number of Wang Wu, including the Li Si, can be transmitted.

It is worth noting that the above-mentioned data authority verification for the other device is only for the sake of easy understanding. Other ways of performing identity security verification on the other device should also be included.

Specifically, setting the identity security identifier in the device and the corresponding data authority may be implemented in the form of an app on the terminal device (ie, the device), so that a designated terminal is used as a management role, and all the controlled devices can be managed. Letter NFC terminal equipment, including equipment information, identity security identity, and transmittable data type. The NFC terminal device that needs to write the controlled data to the NFC terminal device and the management terminal can write the data such as the identity security identifier by means of the NFC tag reading and writing. It can also be implemented on a PC device. Users can use the home computer and office computer to install centralized management software as a management role to manage all trusted NFC terminal devices that need to be controlled. The device information, the identity security identifier, and the transmittable data authority are connected to the controlled terminal through the USB cable to write data such as the identity security identifier.

Further, in order to improve the security, hardware chip storage or software storage may be selected, wherein the hardware chip, for a system with a higher security level requirement, may save the rights data related to the trusted NFC device, including the identity security identifier and the data authority. In the hardware chip, such as eSE, encrypted T card, access and read and write through the common chip interface, and even provide protection for encrypted storage; software storage, for the general security level system, can save the authority data related to the trusted NFC device In the file system of the device, it can be saved in plain text or encrypted.

In the above step S102, the security verification may be performed by the receiving device to perform security verification on itself, and specifically accepting the security verification by the counterpart device itself, including accepting the identity verification of the identity by the counterpart device.

The specific acceptance of the identity verification by the counterpart device may be to send its own identity security identifier to the counterpart device, and let the counterpart device determine whether the identity security identifier is the same as the identity security identifier of the counterpart device itself, and if the identity is the same, the identity security verification is passed. It should be understood that the identity security identifier is pre-stored for the counterpart device itself and all other counterpart devices, so that the counterpart device can identify the identity security identifier of the local device, and multiple identity security identifiers are stored in the counterpart device. Taking the device as a mobile phone as an example, in the case of Zhang San’s mobile phone, Zhang San is the other party’s device, that is, the recipient, pre-stored the family identity security identity A, the colleague identity security identity B, and the classmate identity security identity C, and Zhang Yihe Zhang Er is the family of Zhang San, Li Si and Wang Wu are Zhang's colleagues, Zhao Liu and Zhao Qi are Zhang San's classmates. Then there are identity security signs A, B and C in Zhang San’s mobile phone, identity security ID A in Zhang Yi and Zhang Er’s mobile phones, and identity security ID B in Li Si and Wang Wu’s mobile phones. In the mobile phones of Zhao Liu and Zhao Qi, the identity security identifier C is stored. If Zhang San and Li Si conduct data transmission, then before the data transmission by Zhang San and Li Si, Li Si will identify his identity security B. To Zhang San mobile phone, accept Zhang San mobile phone to judge that he has the same identity security identity B, if any, it is considered trust. If there is no identity security identity, or the identity security identity is different from its own, it is considered to be untrusted, and the verification fails. After the verification is passed, Zhang San Mobile will feedback to tell Li Si to pass the security verification, or if the failure message of Zhang San is not received within the preset time, Li Si believes that the security verification has passed.

The specific acceptance of the remote device for authenticating the identity of the identity may be to send the identity of the device, and let the other device determine whether the identity is in the preset security list of the other device, and if so, the identity security verification is passed. It should be understood that the local device and all other devices will have corresponding identity, such as the number of the device and the identification information of the number, so that the other device can Identifying the local device, in the other device, it will store a list of identities corresponding to the devices that can be trusted. Of course, the list here means that the device can be trusted, not only in the form of a list, but also in other forms. Can be included. Taking the device as an example of the mobile phone, Zhang San is the other party's device, that is, the receiving party. In Zhang San's mobile phone, for example, Zhang San's family Zhang Yi and Zhang Er, Zhang San's colleagues, are included in the safety list pre-stored by Zhang San mobile phone. Li Si and Wang Wu, Zhang San's classmates Zhao Liu and Zhao Qi. If Zhang San and Li Si carry out data transmission, then before the data transmission of Zhang San and Li Si, Li Si will give his identity (mobile number) to Zhang San mobile phone, and Zhang San mobile phone judges that he has a safe list. Li Si’s mobile phone is considered to be trustworthy, verified, and then told Li Si, so that Li Si can transfer data to Zhang San.

In order to further improve security, multi-layer verification can be performed, and data transmission can be performed only when it is satisfied at the same time. That is, the specific identity security verification of the counterpart device may also be to send the identity security identifier and the identity identifier to the other device, and the counterpart device determines whether the identity security identifier is the same as its own identity security identifier, and whether the identity identifier is preset. In the security list, if the identity security ID is the same and is in the preset security list, the identity security verification is passed. It should be understood that for the device and other devices, the identity security identifier is pre-stored in the other device, so that the other device can identify the identity security identifier of the local device, that is, multiple identity security identifiers are stored in the other device. . And for the device and all other devices, there will be corresponding identification, such as the number of the device and the identification information of the number, so that the other device can identify the local device, and the pre-set devices that are trusted can be stored in the other device. A list of corresponding identities. Taking the device as an example of the mobile phone, combined with the example of Zhang San above, if Zhang San and Li Si carry out data transmission, and Zhang San is the receiver, then before the data transmission by Zhang San and Li Si, Zhang Sanhui The identity security sign B of his own is given to the Li Si mobile phone. The Li Si mobile phone judges that it has the same identity security identifier B. If it is, it is considered that the trusted identity security identity B is the same as its own identity security identity B. Determine whether Li Si's identity (mobile number) is in his or her own safe list. If yes, the verification is passed. Because identity security identity It only means that there is this identity security logo, and it doesn't care who it is. It may be stolen by strangers. If the identity verification is further strengthened, the security will be improved.

It should be noted that the foregoing method for accepting the identity verification of the local device by the counterpart device is only for the sake of easy understanding. Other ways of accepting the identity verification of the identity of the local device by the counterpart device should also be included.

Further, in order to improve the security of the data, the security verification of the local device by the receiving device includes: first accepting the identity verification of the local device by the other device, and after receiving the verification, accepting the data verification of the local device by the other device. That is, the peer device is first accepted for identity security verification. After the identity security verification is passed, the other device is accepted to perform data authority verification on the local device, and data transmission is performed after the data authority verification is passed. The data permission here refers to which data the local device can share, that is, which data can be received by the counterpart device, and which data cannot be received. It is worth noting that the security verification method performed by the other device is the same as the security verification method performed by the local device on the other device, and the main verification is that the execution subject is different from each other, and the repeated description will not be repeated here.

Embodiment 2

In the near field communication data transmission method of the embodiment, the NFC P2P data transmission device terminal uses the identity security identifier to identify the trusted device to determine whether the data can be transmitted. The example is illustrated, as shown in Figure 2, including the following steps:

Step S201: The transmitting end selects to send a communication business card and activates P2P transmission through the P2P data sharing operation interface system;

Step S202: The transmitting end is close to the receiving end, and the transmitting field is sent by the NFC antenna transmitting system, and the wireless channel is established with the receiving end;

In this step, the receiving end receives the NFC radio frequency field of the transmitting end.

Step S203: The sending end acquires the identity security identifier sent by the receiving end, that is, the receiving end reads the permission identifier from the P2P authority identifier storage system through the P2P data transmission system, and writes the NDEF data structure to the sending end;

In this step, the receiving end also records related information of the transmitting end.

Step S204: The transmitting end determines, according to the identity security identifier of the receiving end, whether the receiving end is trusted by the NFC device. If it is not a trusted device, the process terminates; if it is a trusted device, proceeds to step S205;

Step S205: The P2P data transmission system at the transmitting end reads the data rights that can be transmitted and received from the receiving end from the P2P rights identification storage system, and if the transmission of the address book business card is not allowed, the process is terminated; if the transmission of the business card is allowed, the process proceeds to S206;

Step S206: The P2P data transmission system at the transmitting end sends the selected address book business card to the NDEF data structure and sends it to the receiving end, and the process is completed.

In this step, the receiving end receives the business card and stores it.

It should be noted that the transmitting end in this example is the device, and the receiving end is the counterpart device. In the NFC data exchange P2P application in this example, the data format between devices is as follows:

{LLCP{SNEP{NDEF{RTD}}}}

In this example, the identity security identifier is exchanged between the P2P devices by the extended NDEF data type and whether data transmission is allowed. NDEF information and standard format description: text (T), can carry information strings, can also be included in other NDEF information as its description text. URI(U), which can be used to store website addresses, emails, phone numbers, and stored in an optimized binary form. Smart poster (Sp) for entering URLs, text messages or phone numbers into NFC tags and how to pass them between devices. Universal control of the RTD. Sign the RTD.

Embodiment 3

The near field communication data transmission method of this embodiment, as shown in FIG. 3, includes the following steps:

Step S301: The P2P centralized management software system allocates a trusted P2P data transmission identity security standard Knowledge and restrictions can send data rights;

Step S302: The trusted P2P data transmission identity security identifier is stored in the P2P identity security identifier storage system; the storage system herein may be local to the device or in the related storage device;

Step S303: two terminal devices having an NFC chip, one of which (the transmitting end) opens a P2P data sharing operation interface system, and selects data to be transmitted, that is, data to be transmitted;

Step S304: The transmitting end of the P2P is close to the receiving end NFC terminal device, triggering the NFC antenna transmitting system to perform wireless communication docking;

Step S305: The P2P data transmission system performs data transmission, reads the permission identifier from the P2P authority identification storage system, and determines whether the communication parties belong to the same trusted group, that is, whether they have the same identity security identifier, if they do not belong to the same trusted The group blocks the P2P data transmission of this time; if it belongs to the same trusted group, the sender further reads the corresponding transmission data authority from the P2P identity security identifier storage system, and determines the current P2P data sharing operation interface system. Whether the selected data is allowed to be sent, if not allowed, the P2P data transmission fails.

It should be noted that the wireless communication method in this embodiment is an NFC short-range wireless communication method.

This embodiment provides a method for establishing a trusted P2P data transmission device group in NFC short-range communication. Therefore, steps S301 and S302 are performed before the NFC device uses the P2P data connection, to indicate which scenarios belong to the NFC device. Before using P2P data connections, here are a few possible scenarios: (1) transferring photos between family members; (2) transferring videos between friends; and (3) transferring files between colleagues. It should be noted that steps S301 and S302 in this embodiment are performed before the NFC device uses the P2P data connection. Therefore, when the two NFC terminals perform P2P data transmission through the short-range communication mode, the P2P centralized management software system needs to first store the trusted P2P data transmission authority identifier in the P2P authority identification storage system, so that when the P2P data transmission system is used, , get the identity and manage device permissions. It should be understood that we can manage all controlled devices through the centralized management system before data transmission. Write an identity security ID for them. Then, before using NFC point-to-point transmission, the two terminals first perform certain information verification through data communication, such as a trusted identity security identifier, determining whether the device currently transmitting data is trusted, and then determining whether to transmit. The operation, which is supplemented by existing agreements. With this addition, we can set up different groups of trusted devices, as well as data for data rights that each group can share. For example, a family trusted device group can share data of all data rights; a friend trusted device group can share data of data rights such as business cards, pictures, videos, audios, etc.; a trusted device group of colleagues can share business cards Data for document data permissions. The device does not exchange untrusted data with any terminal, allowing data protection and secure communication to go further.

Embodiment 4

The present embodiment provides a near field communication data transmission device 400, as shown in FIG. 4, including an opening module 401, a security module 402, and a transmission module 403: the opening module 401 is configured to enable near field communication and establish a near field communication wireless channel; The security module 402 is configured to perform security verification before transmitting the to-be-transmitted data to the counterpart device; the transmission module 403 is configured to transmit the to-be-transmitted data to the counterpart device after the verification is passed.

Specifically, the security module 402 is further configured to perform security verification on the counterpart device.

The embodiment further provides a near field communication data transmission device 400. As shown in FIG. 5, the security module 402 includes an identity security submodule 4021: the identity security submodule 4021 is configured to perform identity security verification on the counterpart device.

The embodiment further provides a near field communication data transmission device 400. As shown in FIG. 6, the security module 402 includes a data security submodule 4022: the data security submodule 4022 is configured to perform data authority verification on the counterpart device.

Specifically, the security module 402 is further configured to accept the peer device to perform security verification on itself.

Specifically, the security module 402 is further configured to accept the identity verification of the identity of the remote device; or accept the identity security verification of the remote device by itself; According to the authority verification.

For better description, how to write the identity security identifier into each device is described. A centralized management software system 700 is provided for description. As shown in FIG. 7, the P2P centralized management software module 701 and P2P permissions are included. The storage module 702 and the P2P data transmission module 703 are identified.

The P2P centralized management software module 701 is configured to distribute trusted device group identity security identifiers in different NFC terminal devices, such as a home trusted group, a classmate trusted group, and a colleague trusted group, and each group Different identity security identifiers are available, and only NFC terminal devices that match the rights identifier can transmit data to each other. The system can also manage data rights that can be sent between the same trusted group device to prevent private data from being sent to unpredictable devices.

The P2P authority identifier storage module 702 is configured to save the identity security identifier and the transmittable data weight allocated by the 501 centralized management system, and the storage system can be placed in the eSE chip, the SE chip, and the terminal virtual eSE to provide storage for the 502 and 503 systems. Taking the interface, the storage system can provide an encryption mechanism to ensure that the saved data is safe and reliable.

The P2P data transmission module 703 is configured to transmit data between different NFC terminal devices. Before transmitting the actual data, the identity security identifier assigned by the centralized management module 701 needs to be read from the rights identifier storage module 702 to different terminals to determine whether the subsequent data transmission process can be performed.

In practical applications, each unit module in the near field communication data transmission device may be a central processing unit (CPU) in a near field communication data transmission device, or a digital signal processor (DSP), or Field-Programmable Gate Array (FPGA) implementation.

The apparatus for tracking the service signaling according to the embodiment of the present invention may also be stored in a computer readable storage medium if it is implemented in the form of a software function module and sold or used as a separate product. Based on such understanding, the technical solution of the embodiments of the present invention may be embodied in the form of a software product in essence or in the form of a software product. Stored in a storage medium, including instructions for causing a computer device (which may be a personal computer, server, or network device, etc.) to perform all or part of the methods described in various embodiments of the present invention. The foregoing storage medium includes various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read only memory (ROM), a magnetic disk, or an optical disk. Thus, embodiments of the invention are not limited to any specific combination of hardware and software.

Correspondingly, an embodiment of the present invention further provides a computer storage medium, wherein a computer program for executing a near field communication data transmission method of an embodiment of the present invention is stored.

One of ordinary skill in the art will appreciate that all or a portion of the above steps may be accomplished by a program that instructs the associated hardware, such as a read-only memory, a magnetic disk, or an optical disk. Alternatively, all or part of the steps of the above embodiments may also be implemented using one or more integrated circuits. Correspondingly, each module/unit in the foregoing embodiment may be implemented in the form of hardware or in the form of a software function module. The invention is not limited to any specific form of combination of hardware and software.

The above embodiments are only intended to illustrate the technical solutions of the present invention and are not to be construed as limiting the invention. It should be understood by those skilled in the art that the present invention may be modified or equivalently substituted without departing from the spirit and scope of the invention.

Claims

A near field communication data transmission method includes:

Turn on near field communication and establish a near field communication wireless channel;

Perform security verification before transmitting the data to be sent to the other device;

After the verification is passed, the to-be-transmitted data is transmitted to the counterpart device.
The near field communication data transmission method according to claim 1, wherein said performing security verification comprises performing security verification on said counterpart device.
The near field communication data transmission method according to claim 2, wherein said performing security verification on said counterpart device comprises:

Performing identity security verification on the counterpart device;

or

Performing identity security verification on the counterpart device, and performing data authority verification on the counterpart device after the verification is passed.
The near field communication data transmission method according to claim 3, wherein said performing identity security verification on said counterpart device comprises:

Receiving an identity security identifier sent by the remote device, determining whether the identity security identifier is the same as its own identity security identifier, and if the same, the identity security verification is passed;

or

Receiving an identity of the counterpart device, determining whether the identity identifier is in a preset security list, and if yes, identity security verification is passed;

or

Receiving an identity security identifier and an identity identifier of the remote device, determining whether the identity security identifier is the same as its own identity security identifier, and determining whether the identity identifier is in a preset security list, if the identity security identifier is the same and is in advance Within the security list, the identity security verification is passed.
The near field communication data transmission method according to claim 3, wherein the performing data authority verification on the counterpart device comprises: acquiring data authority corresponding to the counterpart device; and determining data corresponding to data authority of the counterpart device Whether the data to be sent is included; if it is included, the data permission is verified.
The near field communication data transmission method according to claim 5, wherein the obtaining the data authority corresponding to the counterpart device comprises: finding the data authority corresponding to the counterpart device according to the identity security identifier or the identity identifier of the counterpart device .
The near field communication data transmission method according to claim 3, wherein said performing data authority verification on said counterpart device comprises: acquiring all devices having said to-be-issued data authority, determining whether said counterpart device is included, if Including, the data permission verification is passed.
The near field communication data transmission method according to claim 7, wherein the obtaining all the devices having the right to send data comprises: acquiring an identity security identifier or an identity identifier corresponding to all devices having the data to be sent; Whether the determining whether the device includes the counterpart device includes: determining whether the identity security identifier or the identity identifier corresponding to the counterpart device is included.
The near field communication data transmission method according to claim 1, wherein the performing the security verification further comprises: accepting the peer device to perform security verification on itself.
The near field communication data transmission method according to claim 9, wherein the accepting the peer device to perform security verification on itself comprises:

Accepting the identity device to perform identity security verification on itself;

or

The other device is accepted to perform identity security verification on itself, and the data authority verification is performed on itself after the verification is passed.
A near field communication data transmission device includes an opening module, a security module and a transmission module:

The opening module is configured to enable near field communication and establish a near field communication wireless channel;

The security module is configured to perform security verification before transmitting the data to be sent to the other device;

The transmission module is configured to transmit the to-be-transmitted data to the counterpart device after the verification is passed.
The near field communication data transmission device of claim 11, wherein the security module is further configured to perform security verification on the counterpart device.
The near field communication data transmission device of claim 12, wherein the security module comprises an identity security submodule or a data security submodule: the identity security submodule is configured to perform identity security verification on the counterpart device; The data security submodule is configured to perform identity security verification on the counterpart device, and perform data authority verification on the counterpart device after the verification is passed.
The near field communication data transmission device of claim 11, wherein the security module is further configured to accept the peer device to perform security verification on itself.
The near field communication data transmission device according to claim 14, wherein the security module is further configured to accept the identity device to perform identity security verification on itself; or accept the identity device to perform identity security verification on itself, and verify the adoption. After that, data authority verification is performed on itself.
A computer storage medium having stored therein computer executable instructions configured to perform the near field communication data transmission method of any of claims 1-10.