WO2021155482A1

WO2021155482A1 - Data transmission method and ble device

Info

Publication number: WO2021155482A1
Application number: PCT/CN2020/074170
Authority: WO
Inventors: 袁明武
Original assignee: 深圳市汇顶科技股份有限公司
Priority date: 2020-02-03
Filing date: 2020-02-03
Publication date: 2021-08-12
Also published as: CN111788836A; CN111788836B

Abstract

Embodiments of the present application relate to a data transmission method and a Bluetooth low energy (BLE) device. The method comprises: a first BLE end encrypts original data by using a one-time encryption algorithm to obtain encrypted data; and the first BLE end sends the encrypted data to at least one BLE end by means of broadcasting. The data transmission method and the BLE device of the embodiments of the present application can ensure the security of data transmission while improving the transmission efficiency.

Description

Data transmission method and BLE device

Technical field

This application relates to the field of communication technology, and in particular to a method of data transmission and a BLE device.

Background technique

At present, Bluetooth Low Energy (BLE) technology is developing rapidly. With its polar power consumption characteristics, flexibility and convenience, it plays an increasingly important role in wireless transmission applications, and is widely used for identification (identifier, ID) recognition , Wireless control and other applications, but because the data transmitted by BLE is transmitted in the air, the security of data transmission has received strong attention.

The current mainstream practice of using BLE for communication is mainly to use the encryption binding function of BLE technology, or to encrypt the data layer when transmitting data. However, these encrypted communication methods need to establish a connection between BLE devices in order to perform ID identification and wireless control. Then in some scenarios that require fast identification or require encrypted communication and identification of multiple devices, these encryptions The communication method is inefficient and not very practical.

Summary of the invention

This application provides a data transmission method and a BLE device, which can ensure the security of data transmission while improving transmission efficiency.

In a first aspect, a method for BLE data transmission is provided. The method includes: a first BLE end uses a one-time encryption algorithm to encrypt original data to obtain encrypted data; In this way, the encrypted data is sent to at least one BLE end.

Therefore, in the method for BLE data transmission in the embodiment of the application, the BLE end can use a one-time encryption algorithm to encrypt data, and send encrypted data to other BLE ends by broadcasting, which can improve transmission At the same time of efficiency, the security of data transmission is ensured.

With reference to the first aspect, in an implementation manner of the first aspect, the first BLE end uses a one-time encryption algorithm to encrypt the original data, including: the first BLE end performs the encryption processing on the original data based on a time factor The data is encrypted.

In combination with the first aspect and the foregoing implementation manners of the first aspect, in another implementation manner of the first aspect, the first BLE end encrypts the original data based on a time factor, including: the first BLE end performs encryption processing on the original data according to The time and the preset time interval of the first BLE end determine a key; the first BLE end uses the key to encrypt the original data.

With reference to the first aspect and the foregoing implementation manners thereof, in another implementation manner of the first aspect, the first BLE terminal determines the key according to the time of the first BLE terminal and a preset time interval, including; The first BLE terminal determines the key according to the time of the first BLE terminal and the preset time interval according to the seed file.

With reference to the first aspect and the foregoing implementation manners, in another implementation manner of the first aspect, the one-time encryption algorithm is a dynamic password algorithm.

With reference to the first aspect and the foregoing implementation manners of the first aspect, in another implementation manner of the first aspect, the method further includes: performing time synchronization between the first BLE end and a second BLE end, and the second BLE end is One of the at least one BLE terminal.

With reference to the first aspect and the foregoing implementation manners, in another implementation manner of the first aspect, the time synchronization between the first BLE end and the second BLE end includes: the first BLE end The second BLE end sends a time synchronization request message, the time synchronization request message is used by the first BLE end to request time synchronization with the second BLE end; the first BLE end receives the second BLE end according to The time synchronization response message sent by the time synchronization request message; the first BLE end performs time synchronization with the second BLE end according to the time synchronization response message.

With reference to the first aspect and the foregoing implementation manners, in another implementation manner of the first aspect, the time synchronization request message includes the time of the first BLE end; and/or, the time synchronization response message includes the The time of the second BLE end.

With reference to the first aspect and the foregoing implementation manners thereof, in another implementation manner of the first aspect, a Bluetooth connection is not established between the first BLE terminal and the at least one BLE terminal.

With reference to the first aspect and the foregoing implementation manners, in another implementation manner of the first aspect, before the first BLE end and the second BLE end perform time synchronization, the method further includes: A BLE terminal establishes a Bluetooth connection with the second BLE terminal, and the Bluetooth connection is used for the time synchronization.

With reference to the first aspect and the foregoing implementation manners, in another implementation manner of the first aspect, the establishment of a Bluetooth connection between the first BLE terminal and the second BLE terminal includes: the first BLE terminal receives the A connection request message sent by the second BLE terminal, where the connection request message is used by the second BLE terminal to request the establishment of a connection with the first BLE terminal; the first BLE terminal sends the connection request message to the The second BLE end sends a connection response message.

In a second aspect, a method for data transmission between BLE terminals is provided. The method includes: a second BLE terminal receives encrypted data sent by a first BLE terminal by means of broadcasting; Algorithm to decrypt the encrypted data to obtain the original data.

Therefore, in the method for data transmission between BLE terminals in the embodiment of the present application, the BLE terminal adopts a one-time encryption algorithm to encrypt broadcast data, which can improve the transmission efficiency while ensuring the security of data transmission.

With reference to the second aspect, in an implementation manner of the second aspect, the second BLE terminal decrypts the encrypted data according to a one-time encryption algorithm, including: the second BLE terminal performs a decryption process on the encrypted data based on a time factor The encrypted data is decrypted.

In combination with the second aspect and the foregoing implementation manners of the second aspect, in another implementation manner of the second aspect, the second BLE terminal decrypts the encrypted data based on a time factor, including: the second BLE terminal decrypts the encrypted data according to The time of the second BLE end and the preset time interval determine the key; the second BLE end uses the key to decrypt the encrypted data.

With reference to the second aspect and the foregoing implementation manners of the second aspect, in another implementation manner of the second aspect, the second BLE terminal determines the key according to the time of the second BLE terminal and a preset time interval, including: The second BLE terminal determines the key according to the time of the second BLE terminal and the preset time interval according to the seed file.

With reference to the second aspect and the foregoing implementation manners of the second aspect, in another implementation manner of the second aspect, the method further includes: the second BLE end receiving the seed file sent by the application server.

In combination with the second aspect and the foregoing implementation manners, in another implementation manner of the second aspect, the one-time encryption algorithm is a dynamic password algorithm.

With reference to the second aspect and the foregoing implementation manners thereof, in another implementation manner of the second aspect, the method further includes: performing time synchronization between the second BLE terminal and the first BLE terminal.

With reference to the second aspect and the foregoing implementation manners, in another implementation manner of the second aspect, the time synchronization between the second BLE terminal and the first BLE terminal includes: the second BLE terminal receives the A time synchronization request message sent by the first BLE end, where the time synchronization request message is used by the first BLE end to request time synchronization with the second BLE end; the second BLE end according to the time synchronization request message , Sending a time synchronization response message to the first BLE end.

With reference to the second aspect and the foregoing implementation manners thereof, in another implementation manner of the second aspect, the time synchronization request message includes the time of the first BLE end; and/or, the time synchronization response message includes the The time of the second BLE end.

With reference to the second aspect and the foregoing implementation manners thereof, in another implementation manner of the second aspect, a Bluetooth connection is not established between the first BLE terminal and the at least one BLE terminal.

With reference to the second aspect and the foregoing implementation manners thereof, in another implementation manner of the second aspect, before the second BLE end and the first BLE end perform time synchronization, the method further includes: the first BLE end The second BLE terminal establishes a Bluetooth connection with the first BLE terminal, and the Bluetooth connection is used for the time synchronization.

With reference to the second aspect and the foregoing implementation manners of the second aspect, in another implementation manner of the second aspect, the establishment of a Bluetooth connection between the second BLE end and the first BLE end includes: the second BLE end The first BLE end sends a connection request message, the connection request message is used by the second BLE end to request to establish a connection with the first BLE end; the second BLE end receives the first BLE end according to the connection The connection response message sent by the request message; the second BLE terminal establishes a Bluetooth connection with the first BLE terminal according to the connection response message.

With reference to the second aspect and the foregoing implementation manners thereof, in another implementation manner of the second aspect, the method further includes: the second BLE terminal performs identity recognition on the first BLE terminal according to the original data .

In a third aspect, a BLE device is provided, which is used to execute the foregoing first aspect or any possible implementation of the first aspect. Specifically, the BLE device includes a unit for executing the foregoing first aspect or any possible implementation of the first aspect.

In a fourth aspect, a BLE device is provided, which is used to execute the foregoing second aspect or any possible implementation method of the second aspect. Specifically, the BLE device includes a unit for executing the foregoing second aspect or any possible implementation of the second aspect.

In a fifth aspect, a BLE device is provided, including: a storage unit and a processor, the storage unit is used to store instructions, the processor is used to execute the instructions stored in the memory, and when the processor executes the instructions stored in the memory The execution causes the processor to execute the method in the first aspect or any possible implementation manner of the first aspect.

In a sixth aspect, a BLE device is provided, including: a storage unit and a processor, the storage unit is used to store instructions, the processor is used to execute the instructions stored in the memory, and when the processor executes the instructions stored in the memory The execution causes the processor to execute the second aspect or the method in any possible implementation manner of the second aspect.

In a seventh aspect, a BLE chip is provided, which is used to implement the above-mentioned first aspect or the methods in each of its implementation manners. Specifically, the BLE chip includes: a processor, configured to call and run a computer program from the memory, so that the device installed with the BLE chip executes the method in the above-mentioned first aspect or each of its implementation manners.

In an eighth aspect, a BLE chip is provided, which is used to implement the method in the second aspect or each of its implementation manners. Specifically, the BLE chip includes: a processor, configured to call and run a computer program from the memory, so that the device installed with the BLE chip executes the method in the above-mentioned second aspect or each of its implementation manners.

In a ninth aspect, a computer-readable medium is provided for storing a computer program, and the computer program includes instructions for executing the first aspect or any possible implementation of the first aspect.

In a tenth aspect, a computer-readable medium is provided for storing a computer program, and the computer program includes instructions for executing the second aspect or any possible implementation of the second aspect.

In an eleventh aspect, a computer program product including instructions is provided. When the computer runs the instructions of the computer program product, the computer executes the first aspect or any possible implementation of the first aspect. method. Specifically, the computer program product may run on the BLE device of the third aspect.

In a twelfth aspect, a computer program product including instructions is provided. When the computer runs the instructions of the computer program product, the computer executes the second aspect or any possible implementation of the second aspect. method. Specifically, the computer program product can run on the BLE device of the fourth aspect.

Description of the drawings

Fig. 1 is a schematic flowchart of a method for BLE data transmission according to an embodiment of the present application.

Fig. 2 is a schematic diagram of an application scenario of data transmission between BLE devices according to an embodiment of the present application.

Fig. 3 is a schematic diagram of the working principle of encryption and decryption using a dynamic password according to an embodiment of the present application.

Fig. 4 is a schematic flowchart of a method for time synchronization between two BLE devices according to an embodiment of the present application.

Fig. 5 is a schematic block diagram of a BLE device according to an embodiment of the present application.

Fig. 6 is another schematic block diagram of a BLE device according to an embodiment of the present application.

Fig. 7 is a schematic block diagram of a BLE chip according to an embodiment of the present application.

Detailed ways

The technical solutions in the embodiments of the present application will be described below in conjunction with the accompanying drawings.

Fig. 1 shows a schematic flowchart of a method 100 for BLE data transmission according to an embodiment of the present application. As shown in FIG. 1, the method 100 includes: S110, encrypting the original data, that is, the first BLE end uses a one-time encryption algorithm to encrypt the original data to obtain encrypted data; S120, sending the encrypted data, that is, the first BLE end A BLE end sends the encrypted data by broadcasting. Correspondingly, at least one BLE end may receive the encrypted data; S130, decrypt the encrypted data. For example, taking the second BLE end as an example, the second The BLE end may be any one of the at least one BLE end that receives the encrypted data, and the second BLE end decrypts the encrypted data according to a one-time encryption algorithm to obtain the original data.

It should be understood that the first BLE terminal in the embodiments of the present application may refer to any BLE device or any chip, and the chip may be applied to a BLE device. The first BLE terminal is an encryption terminal, that is, it is used to encrypt data. And there may be one or more first BLE terminals. For ease of description, the following description takes the first BLE terminal as a BLE device as an example; the second BLE terminal in the embodiment of the present application may also refer to any BLE device or any one Chip, the chip can be applied to BLE devices, the second BLE end is the decryption end, that is, the second BLE end is the receiving end of encrypted data, the second BLE end receives the encrypted data broadcasted by the first BLE end, and can also There are one or more second BLE terminals. For ease of description, the following description takes the second BLE terminal as a BLE device as an example, but the embodiment of the present application is not limited to this.

It should be understood that the original data in the embodiments of the present application may refer to any data. For example, the original data may refer to any data used for data communication between the first BLE device and the second BLE device; for another example, the original data may also be It may refer to related data used for identification ID identification, and the embodiment of the present application is not limited to this.

Figure 2 shows a schematic diagram of an application scenario of data transmission between BLE devices. As shown in Figure 2, there are usually two roles in BLE wireless data distribution and transmission, which are called slave devices and master devices. )equipment. Among them, the slave device generally refers to the slave peripheral device, and the master device generally refers to the master central device. For example, as shown in Figure 2, the slave device can be used to send data, for example, it can be used to send advertising packets, that is, send data in a broadcast manner. For example, the first BLE device in this embodiment of the application can be Slave devices, such as smart bracelets and other wearable devices; and the master device can be used to scan data broadcast by the slave device, that is, scan advertising packets, or receive advertising packets. In addition, the master device can also be used to initiate connection requests (connection request). ), for example, the second BLE device in the embodiment of the present application may be a master device. Common master devices include long power supply devices such as mobile phones, but the embodiments of the present application are not limited to this.

It should be understood that the method 100 of the embodiment of the present application may be applied to a scenario where the first BLE device sends data to one or more BLE devices in a broadcast manner. Specifically, the current data transmission or data encryption process between BLE devices is done after the connection is established. For example, any two BLE devices can only transmit data after establishing a Bluetooth connection; however, the data can be transmitted by broadcasting. In the case that a Bluetooth connection is not established, a BLE device sends data to one or more other BLE devices. For example, the first BLE device in the embodiment of the present application may also communicate with the at least one BLE device on the receiving end. Establish a Bluetooth connection and transmit data directly through broadcast. This broadcast transmission method can greatly improve the efficiency of data transmission.

In addition, for scenarios that require multiple devices to communicate and identify, for example, there may be a scenario where a certain BLE device needs to send data to multiple BLE devices. The current transmission method is one-to-one, that is, the sending end BLE device needs to be sent sequentially. Send data to each receiving end BLE device; but if broadcast is used, regardless of whether a connection has been established between these devices, the sending end BLE device can directly send data to multiple BLE devices through broadcast, for example In the embodiment of the present application, the first BLE device may also send data to multiple BLE devices in a broadcast manner, thereby improving the efficiency of data transmission.

Considering the security of the broadcast transmission method, the method 100 of the embodiment of the present application uses a one-time encryption algorithm to encrypt the broadcast data while transmitting data in a broadcast manner. In this way, the one-time password (One Time Password, OTP) used in the one-time algorithm in the embodiments of this application has the most important advantage of being less susceptible to replay attacks, even if the attacker uses the static password for encryption. The packet meter captures data through the air interface, and will not brute force the key (KEY).

Therefore, the method for data transmission between BLE terminals in this embodiment of the application adopts a one-time encryption algorithm that can be efficiently run on the Microcontroller Unit (MCU) platform, encrypts the data, and then broadcasts it. To send encrypted data, this method can be applied to general-purpose BLE chips, and can ensure the security of data transmission while improving transmission efficiency.

The method 100 of the embodiment of the present application will be described in detail below in conjunction with specific embodiments.

In S110, the first BLE device uses a one-time encryption algorithm to encrypt the original data to obtain encrypted data. Specifically, the first BLE device uses a one-time encryption algorithm to encrypt the original data, that is, uses OTP to encrypt the original data. The OTP is also called a secret notebook, which is a kind of espionage technology applied in the military field. It uses a pre-appointed one-time secret notebook to encrypt and decrypt communication information. The used secret notebook is discarded and no longer used. It can be done once. One secret.

In the embodiment of the present application, the S110 may specifically include: the first BLE device encrypts the original data based on a time factor. For example, the first BLE device may use a dynamic password algorithm to encrypt the original data that needs to be broadcast, where the dynamic password algorithm is a type of OTP. In addition, in the method 100 of the embodiment of the present application, a dynamic password algorithm based on a time factor may be used for encryption processing.

Specifically, the first BLE device encrypts the original data based on the time factor, which may specifically include: the first BLE device determines the key according to the time of the first BLE device and a preset time interval; the first BLE The device uses the key to encrypt the original data. Among them, the preset time interval may indicate the update duration of the dynamic password, or may also be called the time step; and, the preset time interval can be set according to actual applications, and can be set to any value, for example, it can be set to 30s, 60s or other values, but the embodiment of the present application is not limited thereto.

It should be understood that the encryption process and the decryption process in the embodiment of the present application correspond to each other, and the process is the same. Figure 3 shows a schematic diagram of the working principle of encryption and decryption using dynamic passwords. As shown in Figure 3, the processes of encryption and decryption are the same. Both are based on time as a factor and use a non-functional pseudo-random number algorithm, which is simple , Fast, efficient, and can run in general BLE chips.

In the embodiment of the present application, the first BLE device may determine the key according to the seed file according to the time of the first BLE device and the preset time interval, and use the key to encrypt data. Specifically, the encryption terminal (for example, the first BLE device in the embodiment of this application) and the decryption terminal (for example, at least one second BLE device in the embodiment of this application) both store a seed file, that is, the key store in FIG. 3 The seed of the representative. For example, the seed file in the first BLE device and/or the second BLE device can be stored in the BLE chip; or, the seed file in the first BLE device and/or the second BLE device can also be obtained through the application server; or, The first BLE device and the second BLE device may also transmit the seed file to each other. For example, the seed file may be transmitted through a Bluetooth connection or other connection methods. For example, if a Bluetooth connection has been established between the first BLE device and the second BLE device, the seed file can be transferred to each other and the seed file can be saved, so that when there is or no Bluetooth connection between the two, Can guarantee to be able to use the seed file. For another example, the method 100 may further include: the second BLE device receiving the seed file sent by the application server. Specifically, as shown in FIG. 2, the second BLE device in the embodiment of the present application may be connected to the application server, or connected to the network side, to obtain related information, for example, the seed file may be obtained through the application server.

Considering that the encryption process and the decryption process in the embodiment of the present application are consistent, the following describes the first BLE device to encrypt the original data based on the time factor as an example. Specifically, as shown in FIG. 3, the first BLE device can be based on the time of the first BLE device (that is, the "clock" on the left in FIG. 3 represents the time of the first BLE device) and a preset time interval, according to the seed File, determine the key; the first BLE device uses the key to encrypt the original data (that is, the "broadcast data" in Figure 3, which means the original data to be broadcast), that is, the "cryptographic operation" in Figure 3 "Process to generate encrypted data.

After that, in S120, the first BLE device sends the encrypted data generated in S110 by broadcasting, for example, the encrypted data generated as shown in FIG. 3; correspondingly, at least one BLE device may receive the encrypted data . Taking the second BLE device as an example, the second BLE device may be any one of the at least one BLE device that has received encrypted data. In S130, the second BLE device receives the encrypted data in S120 according to the one-time encryption algorithm. The encrypted data is decrypted to obtain the original data. That is to say, after receiving the encrypted data, the second BLE device on the decryption side will perform a "decryption operation" corresponding to the encryption operation to obtain the original data, that is, to obtain the "broadcast data" in FIG. 3.

Optionally, consider that the first BLE device in the method 100 in the embodiment of the present application may use a dynamic password algorithm based on a time factor for encryption processing. At this time, the time synchronization between the first BLE device and the second BLE device is effective. Must be required. For example, the first BLE device and/or the second BLE device need to have an accurate real-time clock timer; for another example, the first BLE device and/or the second BLE device can also connect to the network to obtain the time; for another example, the first BLE device The device and the second BLE device can be connected to perform time synchronization, and the embodiment of the present application is not limited to this. Optionally, as an embodiment, the method 100 of the embodiment of the present application may further include: the first BLE device performs time synchronization with a second BLE device, where the second BLE device is a device that receives a broadcast from the first BLE device. Any one of at least one BLE device that encrypts data. Specifically, FIG. 4 shows a schematic diagram of a process 200 for performing time synchronization between the first BLE device and the second BLE device according to an embodiment of the present application. As shown in FIG. 4, the process 200 may include: the first BLE device performs time synchronization with the second BLE device, and may specifically include: S210, sending a time synchronization request message, that is, the first BLE device sends a time synchronization request message to the second BLE device. The BLE device sends a time synchronization request message, which is used by the first BLE device to request time synchronization with the second BLE device; S220, send a time synchronization response message, that is, the second BLE device synchronizes according to the received time Request message, sending a time synchronization response message to the first BLE device, so that the first BLE device can receive the time synchronization response message sent by the second BLE device, and perform time synchronization with the second BLE device according to the time response message .

Optionally, the time synchronization request message includes the time of the first BLE device, so that the second BLE device can learn the time of the second BLE device; and/or, the time response message includes the time of the second BLE device, In this way, the first BLE device can learn the time of the second BLE device. The first BLE device can perform time synchronization based on its own time and the time of the second BLE device. Similarly, the second BLE device can also perform time synchronization based on its own time and the time of the first BLE device, either way , Both can achieve the purpose of time synchronization between the first BLE device and the second BLE device, but the embodiment of the present application is not limited to this.

Optionally, as shown in FIG. 4, before the first BLE device and the second BLE device perform time synchronization in the process 200, the process 200 further includes: the first BLE device establishes with the second BLE device Bluetooth connection, which is used for time synchronization. Specifically, establishing a Bluetooth connection between the first BLE device and the second BLE device may include: S230, sending a connection request message, that is, the second BLE device sends a connection request message to the first BLE device, and the connection request message is used for The second BLE device requests to establish a connection with the first BLE device, and correspondingly, the first BLE device receives the connection request message sent by the second BLE device; S240, sends a connection response message, that is, the first BLE device receives The connection request message is sent to the second BLE device, so that the first BLE device can establish a connection with the second BLE device. Among them, in S230 and S240, the second BLE device sends a connection request message and the first BLE device sends a connection response message as an example; on the contrary, the first BLE device can also send a connection request message, and the second BLE device sends a connection request message. The BLE device sends a connection response message, and can also establish a Bluetooth connection between the first BLE device and the second BLE device. For the sake of brevity, details are not repeated here.

Optionally, different from the time synchronization after the first BLE device and the second BLE device are connected, the time synchronization can also be performed when the connection between the first BLE device and the second BLE device is not established, for example The time synchronization may be performed in a broadcast manner, or time synchronization may also be performed in other manners, and the embodiment of the present application is not limited to this.

In this way, under the condition that the time between the first BLE device and the second BLE device is synchronized, the dynamic password algorithm based on the time factor is used to encrypt the broadcast data, which can ensure that the encryption process is more accurate.

It should be understood that in the various embodiments of the present application, the size of the sequence number of the above-mentioned processes does not mean the order of execution, and the execution order of each process should be determined by its function and internal logic, and should not correspond to the embodiments of the present application. The implementation process constitutes any limitation.

The method for BLE data transmission according to the embodiments of the present application is described in detail above in conjunction with FIGS. 1 to 4, and the BLE device according to the embodiments of the present application will be described below in conjunction with FIGS.

As shown in FIG. 5, the BLE device 300 according to the embodiment of the present application may include: a processing unit 310 and a transceiving unit 320. Optionally, the BLE device 300 may be the first BLE device in the embodiment of the application. Specifically, the processing unit 310 is configured to: use a one-time encryption algorithm to encrypt the original data to obtain encrypted data; 320 is used to: send the encrypted data to at least one BLE device in a broadcast manner.

Optionally, as an embodiment, the processing unit 310 is configured to perform encryption processing on the original data based on a time factor.

Optionally, as an embodiment, the processing unit 310 is configured to: determine a key according to the seed file according to the time of the first BLE device and a preset time interval; use the key to compare the original The data is encrypted.

Optionally, as an embodiment, the one-time encryption algorithm is a dynamic password algorithm.

Optionally, as an embodiment, the processing unit 310 is further configured to: perform time synchronization with a second BLE device, and the second BLE device is one of the at least one BLE device.

Optionally, as an embodiment, the transceiving unit 320 is further configured to: send a time synchronization request message to the second BLE device, where the time synchronization request message is used to request time synchronization with the second BLE device Receiving the time synchronization response message sent by the second BLE device according to the time synchronization request message; the processing unit 310 is configured to: perform time synchronization with the second BLE device according to the time synchronization response message.

Optionally, as an embodiment, the time synchronization request message includes the time of the first BLE device; and/or, the time synchronization response message includes the time of the second BLE device.

Optionally, as an embodiment, a Bluetooth connection is not established between the first BLE device and the at least one BLE device.

Optionally, as an embodiment, the processing unit 310 is further configured to: before performing time synchronization with the second BLE device, establish a Bluetooth connection with the second BLE device, and the Bluetooth connection is used for the Time synchronization.

Optionally, as an embodiment, the transceiving unit 320 is further configured to: receive a connection request message sent by the second BLE device, where the connection request message is used by the second BLE device to request communication with the first BLE device. The BLE device establishes a connection; according to the connection request message, a connection response message is sent to the second BLE device.

It should be understood that the above-mentioned and other operations and/or functions of the units in the BLE device 300 of the embodiment of the present application described above are to implement the corresponding processes of the first BLE device in the respective methods in FIGS. 1 to 4, and for simplicity, I won't repeat them here.

Optionally, the BLE device 300 may also be the second BLE device in the embodiment of the application. Specifically, the transceiving unit 320 is configured to: receive encrypted data sent by the first BLE device in a broadcast manner; the processing The unit 310 is configured to: perform decryption processing on the encrypted data according to a one-time encryption algorithm to obtain original data.

Optionally, as an embodiment, the processing unit 310 is configured to perform decryption processing on the encrypted data based on a time factor.

Optionally, as an embodiment, the processing unit 310 is configured to: determine a key according to the seed file according to the time of the second BLE device and a preset time interval; use the key to encrypt the The data is decrypted.

Optionally, as an embodiment, the transceiving unit 320 is further configured to: receive the seed file sent by the application server.

Optionally, as an embodiment, the processing unit 310 is further configured to: perform time synchronization with the first BLE device.

Optionally, as an embodiment, the transceiving unit 320 is further configured to: receive a time synchronization request message sent by the first BLE device, where the time synchronization request message is used by the first BLE device to request communication with the The second BLE device performs time synchronization; according to the time synchronization request message, a time synchronization response message is sent to the first BLE device.

Optionally, as an embodiment, the processing unit 310 is further configured to: before performing time synchronization with the first BLE device, establish a Bluetooth connection with the first BLE device, and the Bluetooth connection is used for the Time synchronization.

Optionally, as an embodiment, the transceiving unit 320 is further configured to: send a connection request message to the first BLE device, where the connection request message is used to request to establish a connection with the first BLE device; The first BLE device sends a connection response message according to the connection request message; the processing unit 310 is configured to establish a Bluetooth connection with the first BLE device according to the connection response message.

Optionally, as an embodiment, the processing unit 310 is further configured to: perform identity recognition on the first BLE device according to the original data.

It should be understood that the foregoing and other operations and/or functions of the units in the BLE device 300 of the embodiment of the present application described above are to implement the corresponding procedures of the second BLE device in the respective methods in FIGS. 1 to 4, and for simplicity, I won't repeat them here.

Therefore, the BLE device of the embodiment of the present application adopts a one-time encryption algorithm that can run efficiently on the MCU platform, encrypts the data, and sends it by broadcast. This method can be applied to general BLE chips and can improve transmission At the same time of efficiency, the security of data transmission is ensured.

FIG. 6 is a schematic structural diagram of a BLE device 400 provided by an embodiment of the present application. The BLE device 400 shown in FIG. 6 includes a processor 410, and the processor 410 can call and run a computer program from a memory to implement the method in the embodiment of the present application.

Optionally, as shown in FIG. 6, the BLE device 400 may further include a memory 420. The processor 410 may call and run a computer program from the memory 420 to implement the method in the embodiment of the present application.

The memory 420 may be a separate device independent of the processor 410, or may be integrated in the processor 410.

Optionally, as shown in FIG. 6, the BLE device 400 may further include a transceiver 430, and the processor 410 may control the transceiver 430 to communicate with other devices. Specifically, it may send information or data to other devices, or receive other devices. Information or data sent by the device.

Wherein, the transceiver 430 may include a transmitter and a receiver. The transceiver 430 may further include an antenna, and the number of antennas may be one or more.

Optionally, the BLE device 400 may specifically be the first BLE device of the embodiment of the present application, and the BLE device 400 may implement the corresponding process implemented by the first device in each method of the embodiment of the present application. For the sake of brevity, here No longer.

Optionally, the BLE device 400 may specifically be the second BLE device of the embodiment of the present application, and the BLE device 400 may implement the corresponding procedures implemented by the second BLE device in the various methods of the embodiments of the present application. For the sake of brevity, This will not be repeated here.

Fig. 7 is a schematic structural diagram of a BLE chip according to an embodiment of the present application. The BLE chip 500 shown in FIG. 7 includes a processor 510, and the processor 510 can call and run a computer program from the memory to implement the method in the embodiment of the present application.

Optionally, as shown in FIG. 7, the BLE chip 500 may further include a memory 520. The processor 510 may call and run a computer program from the memory 520 to implement the method in the embodiment of the present application.

The memory 520 may be a separate device independent of the processor 510, or may be integrated in the processor 510.

Optionally, the BLE chip 500 may further include an input interface 530. The processor 510 can control the input interface 530 to communicate with other devices or chips, and specifically, can obtain information or data sent by other devices or chips.

Optionally, the BLE chip 500 may further include an output interface 540. The processor 510 can control the output interface 540 to communicate with other devices or chips, and specifically, can output information or data to other devices or chips.

Optionally, the BLE chip can be applied to the first BLE device in the embodiment of the present application, and the BLE chip can implement the corresponding process implemented by the first BLE device in each method of the embodiment of the present application. For the sake of brevity, here No longer.

Optionally, the BLE chip can be applied to the second BLE device in the embodiment of the present application, and the BLE chip can implement the corresponding process implemented by the second BLE device in each method of the embodiment of the present application. For the sake of brevity, here No longer.

It should be understood that the BLE chip mentioned in the embodiments of the present application may also be referred to as a system-on-chip, a system-on-chip, a system-on-chip, or a system-on-chip, etc.

It should be understood that the processor of the embodiment of the present application may be an integrated circuit chip with signal processing capability. In the implementation process, the steps of the foregoing method embodiments can be completed by hardware integrated logic circuits in the processor or instructions in the form of software. The above-mentioned processor may be a general-purpose processor, a digital signal processor (Digital Signal Processor, DSP), an application specific integrated circuit (ASIC), a ready-made programmable gate array (Field Programmable Gate Array, FPGA) or other Programming logic devices, discrete gates or transistor logic devices, discrete hardware components. The methods, steps, and logical block diagrams disclosed in the embodiments of the present application can be implemented or executed. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor or the like. The steps of the method disclosed in the embodiments of the present application may be directly embodied as being executed and completed by a hardware decoding processor, or executed and completed by a combination of hardware and software modules in the decoding processor. The software module can be located in a mature storage medium in the field, such as random access memory, flash memory, read-only memory, programmable read-only memory, or electrically erasable programmable memory, registers. The storage medium is located in the memory, and the processor reads the information in the memory and completes the steps of the above method in combination with its hardware.

It can be understood that the memory in the embodiments of the present application may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memory. Among them, the non-volatile memory can be read-only memory (Read-Only Memory, ROM), programmable read-only memory (Programmable ROM, PROM), erasable programmable read-only memory (Erasable PROM, EPROM), and electrically available Erase programmable read-only memory (Electrically EPROM, EEPROM) or flash memory. The volatile memory may be a random access memory (Random Access Memory, RAM), which is used as an external cache. By way of exemplary but not restrictive description, many forms of RAM are available, such as static random access memory (Static RAM, SRAM), dynamic random access memory (Dynamic RAM, DRAM), synchronous dynamic random access memory (Synchronous DRAM, SDRAM), Double Data Rate Synchronous Dynamic Random Access Memory (Double Data Rate SDRAM, DDR SDRAM), Enhanced Synchronous Dynamic Random Access Memory (Enhanced SDRAM, ESDRAM), Synchronous Link Dynamic Random Access Memory (Synchlink DRAM, SLDRAM) ) And Direct Rambus RAM (DR RAM). It should be noted that the memories of the systems and methods described herein are intended to include, but are not limited to, these and any other suitable types of memories.

It should be understood that the foregoing memory is exemplary but not restrictive. For example, the memory in the embodiment of the present application may also be static random access memory (static RAM, SRAM), dynamic random access memory (dynamic RAM, DRAM), Synchronous dynamic random access memory (synchronous DRAM, SDRAM), double data rate synchronous dynamic random access memory (double data rate SDRAM, DDR SDRAM), enhanced synchronous dynamic random access memory (enhanced SDRAM, ESDRAM), synchronous connection Dynamic random access memory (synch link DRAM, SLDRAM) and direct memory bus random access memory (Direct Rambus RAM, DR RAM) and so on. That is to say, the memory in the embodiments of the present application is intended to include, but is not limited to, these and any other suitable types of memory.

The embodiments of the present application also provide a computer-readable storage medium for storing computer programs.

Optionally, the computer-readable storage medium may be applied to the first BLE device in the embodiment of the present application, and the computer program causes the computer to execute the corresponding process implemented by the first BLE device in each method of the embodiment of the present application, in order to It's concise, so I won't repeat it here.

Optionally, the computer-readable storage medium may be applied to the second BLE device in the embodiment of the present application, and the computer program causes the computer to execute the corresponding process implemented by the second BLE device in each method of the embodiment of the present application, in order to It's concise, so I won't repeat it here.

The embodiments of the present application also provide a computer program product, including computer program instructions.

Optionally, the computer program product can be applied to the first BLE device in the embodiment of the present application, and the computer program instructions cause the computer to execute the corresponding process implemented by the first BLE device in each method of the embodiment of the present application, for the sake of brevity , I won’t repeat it here.

Optionally, the computer program product can be applied to the second BLE device in the embodiment of the present application, and the computer program instructions cause the computer to execute the corresponding process implemented by the second BLE device in each method of the embodiment of the present application, for the sake of brevity , I won’t repeat it here.

The embodiment of the present application also provides a computer program.

Optionally, the computer program can be applied to the first BLE device in the embodiment of the present application, and when the computer program runs on the computer, the computer is caused to execute the corresponding implementation of the first BLE device in the various methods of the embodiments of the present application. For the sake of brevity, the process will not be repeated here.

Optionally, the computer program can be applied to the second BLE device in the embodiment of the present application, and when the computer program runs on the computer, the computer is caused to execute the corresponding implementation of the second BLE device in the various methods of the embodiments of the present application. For the sake of brevity, the process will not be repeated here.

A person of ordinary skill in the art may be aware that the units and algorithm steps of the examples described in the embodiments disclosed in this document can be implemented by electronic hardware or a combination of computer software and electronic hardware. Whether these functions are executed by hardware or software depends on the specific application and design constraint conditions of the technical solution. Professionals and technicians can use different methods for each specific application to implement the described functions, but such implementation should not be considered beyond the scope of this application.

Those skilled in the art can clearly understand that, for the convenience and conciseness of the description, the specific working process of the system, device and unit described above can refer to the corresponding process in the foregoing method embodiment, which is not repeated here.

In the several embodiments provided in this application, it should be understood that the disclosed system, device, and method may be implemented in other ways. For example, the device embodiments described above are merely illustrative. For example, the division of the units is only a logical function division, and there may be other divisions in actual implementation, for example, multiple units or components may be combined or It can be integrated into another system, or some features can be ignored or not implemented. In addition, the displayed or discussed mutual coupling or direct coupling or communication connection may be indirect coupling or communication connection through some interfaces, devices or units, and may be in electrical, mechanical or other forms.

The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the objectives of the solutions of the embodiments.

In addition, the functional units in the various embodiments of the present application may be integrated into one processing unit, or each unit may exist alone physically, or two or more units may be integrated into one unit.

If the function is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer readable storage medium. Based on this understanding, the technical solution of the present application essentially or the part that contributes to the existing technology or the part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including Several instructions are used to make a computer device (which may be a personal computer, a server, or a network device, etc.) execute all or part of the steps of the methods described in the various embodiments of the present application. The aforementioned storage media include: U disk, mobile hard disk, read-only memory (Read-Only Memory,) ROM, random access memory (Random Access Memory, RAM), magnetic disk or optical disk and other media that can store program code .

The above are only specific implementations of this application, but the protection scope of this application is not limited to this. Any person skilled in the art can easily think of changes or substitutions within the technical scope disclosed in this application. Should be covered within the scope of protection of this application. Therefore, the protection scope of this application should be subject to the protection scope of the claims.

Claims

A method for data transmission of Bluetooth low energy BLE, which is characterized in that it includes:

The first BLE end uses a one-time encryption algorithm to encrypt the original data to obtain encrypted data;

The first BLE end sends the encrypted data to at least one BLE end in a broadcast manner.
The method according to claim 1, wherein the first BLE end uses a one-time encryption algorithm to encrypt the original data, comprising:

The first BLE terminal performs encryption processing on the original data based on the time factor.
The method according to claim 2, wherein the first BLE terminal encrypts the original data based on a time factor, comprising:

The first BLE terminal determines the key according to the seed file according to the time of the first BLE terminal and the preset time interval;

The first BLE end uses the key to encrypt the original data.
The method according to any one of claims 1 to 3, wherein the one-time encryption algorithm is a dynamic password algorithm.
The method according to any one of claims 1 to 4, wherein the method further comprises:

The first BLE terminal and the second BLE terminal perform time synchronization, and the second BLE terminal is one of the at least one BLE terminal.
The method according to claim 5, wherein the time synchronization between the first BLE terminal and the second BLE terminal comprises:

Sending, by the first BLE terminal, a time synchronization request message to the second BLE terminal, where the time synchronization request message is used by the first BLE terminal to request time synchronization with the second BLE terminal;

Receiving, by the first BLE terminal, a time synchronization response message sent by the second BLE terminal according to the time synchronization request message;

The first BLE terminal performs time synchronization with the second BLE terminal according to the time synchronization response message.
The method according to claim 6, wherein the time synchronization request message includes the time of the first BLE terminal; and/or,

The time synchronization response message includes the time of the second BLE terminal.
The method according to any one of claims 1 to 7, wherein a Bluetooth connection is not established between the first BLE terminal and the at least one BLE terminal.
The method according to any one of claims 5 to 7, characterized in that, before the first BLE terminal and the second BLE terminal perform time synchronization, the method further comprises:

The first BLE terminal establishes a Bluetooth connection with the second BLE terminal, and the Bluetooth connection is used for the time synchronization.
A method for data transmission of Bluetooth low energy BLE, which is characterized in that it includes:

The second BLE end receives the encrypted data sent by the first BLE end in a broadcast manner;

The second BLE end decrypts the encrypted data according to the one-time encryption algorithm to obtain the original data.
The method according to claim 10, wherein the second BLE terminal decrypts the encrypted data according to a one-time encryption algorithm, comprising:

The second BLE terminal performs decryption processing on the encrypted data based on the time factor.
The method according to claim 11, wherein the second BLE terminal decrypts the encrypted data based on a time factor, comprising:

The second BLE terminal determines the key according to the seed file according to the time of the second BLE terminal and the preset time interval;

The second BLE end uses the key to decrypt the encrypted data.
The method according to claim 12, wherein the method further comprises:

The second BLE end receives the seed file sent by the application server.
The method according to any one of claims 10 to 13, wherein the one-time encryption algorithm is a dynamic password algorithm.
The method according to any one of claims 10 to 14, wherein the method further comprises:

The second BLE terminal performs time synchronization with the first BLE terminal.
The method according to claim 15, wherein the time synchronization between the second BLE terminal and the first BLE terminal comprises:

Receiving, by the second BLE terminal, a time synchronization request message sent by the first BLE terminal, where the time synchronization request message is used by the first BLE terminal to request time synchronization with the second BLE terminal;

The second BLE end sends a time synchronization response message to the first BLE end according to the time synchronization request message.
The method according to claim 16, wherein the time synchronization request message includes the time of the first BLE terminal; and/or,

The time synchronization response message includes the time of the second BLE terminal.
The method according to any one of claims 10 to 17, wherein a Bluetooth connection is not established between the first BLE terminal and the at least one BLE terminal.
The method according to any one of claims 15 to 17, wherein before the second BLE terminal and the first BLE terminal perform time synchronization, the method further comprises:

The second BLE terminal establishes a Bluetooth connection with the first BLE terminal, and the Bluetooth connection is used for the time synchronization.
The method according to any one of claims 10 to 19, wherein the method further comprises:

The second BLE terminal performs identity recognition on the first BLE terminal according to the original data.
A BLE device, characterized in that it includes:

The processing unit is used to encrypt the original data with a one-time encryption algorithm to obtain encrypted data;

The transceiver unit is configured to send the encrypted data to at least one BLE device in a broadcast manner.
The BLE device according to claim 21, wherein the processing unit is configured to:

Based on the time factor, the original data is encrypted.
The BLE device according to claim 22, wherein the processing unit is configured to:

Determine the key according to the time of the first BLE device and the preset time interval according to the seed file;

Using the key, the original data is encrypted.
The BLE device according to any one of claims 21 to 23, wherein the one-time encryption algorithm is a dynamic password algorithm.
The BLE device according to any one of claims 21 to 24, wherein the processing unit is further configured to:

Perform time synchronization with a second BLE device, where the second BLE device is one of the at least one BLE device.
The BLE device according to claim 25, wherein the transceiver unit is further configured to:

Sending a time synchronization request message to the second BLE device, where the time synchronization request message is used to request time synchronization with the second BLE device;

Receiving a time synchronization response message sent by the second BLE device according to the time synchronization request message;

The processing unit is used for:

Perform time synchronization with the second BLE device according to the time synchronization response message.
The BLE device according to claim 26, wherein the time synchronization request message includes the time of the first BLE device; and/or,

The time synchronization response message includes the time of the second BLE device.
The BLE device according to any one of claims 21 to 27, wherein a Bluetooth connection is not established between the first BLE device and the at least one BLE device.
The BLE device according to any one of claims 25 to 27, wherein the processing unit is further configured to:

Before performing time synchronization with the second BLE device, establish a Bluetooth connection with the second BLE device, and the Bluetooth connection is used for the time synchronization.
A BLE device, characterized in that it includes:

The transceiver unit is configured to receive encrypted data sent by the first BLE device in a broadcast manner;

The processing unit is configured to perform decryption processing on the encrypted data according to a one-time encryption algorithm to obtain original data.
The BLE device of claim 30, wherein the processing unit is configured to:

Based on the time factor, the encrypted data is decrypted.
The BLE device according to claim 31, wherein the processing unit is configured to:

Determining the key according to the time of the second BLE device and the preset time interval according to the seed file;

Using the key to decrypt the encrypted data.
The BLE device according to claim 32, wherein the transceiver unit is further configured to:

Receiving the seed file sent by the application server.
The BLE device according to any one of claims 30 to 33, wherein the one-time encryption algorithm is a dynamic password algorithm.
The BLE device according to any one of claims 30 to 34, wherein the processing unit is further configured to:

Perform time synchronization with the first BLE device.
The BLE device according to claim 35, wherein the transceiver unit is further configured to:

Receiving a time synchronization request message sent by the first BLE device, where the time synchronization request message is used by the first BLE device to request time synchronization with the second BLE device;

According to the time synchronization request message, a time synchronization response message is sent to the first BLE device.
The BLE device according to claim 36, wherein the time synchronization request message includes the time of the first BLE device; and/or,

The time synchronization response message includes the time of the second BLE device.
The BLE device according to any one of claims 30 to 37, wherein a Bluetooth connection is not established between the first BLE device and the at least one BLE device.
The BLE device according to any one of claims 35 to 37, wherein the processing unit is further configured to:

Before performing time synchronization with the first BLE device, a Bluetooth connection is established with the first BLE device, and the Bluetooth connection is used for the time synchronization.
The BLE device according to any one of claims 30 to 39, wherein the processing unit is further configured to:

According to the original data, the first BLE device is identified.
A BLE device, characterized by comprising: a processor and a memory, the memory is used to store a computer program, the processor is used to call and run the computer program stored in the memory, and execute any of claims 1 to 9 The method described in one item.
A BLE device, characterized by comprising: a processor and a memory, the memory is used to store a computer program, the processor is used to call and run the computer program stored in the memory, and execute any of claims 10 to 20 The method described in one item.
A BLE chip, characterized by comprising: a processor, configured to call and run a computer program from a memory, so that a device installed with the chip executes the method according to any one of claims 1 to 9.
A BLE chip, characterized by comprising: a processor, configured to call and run a computer program from a memory, so that a device installed with the chip executes the method according to any one of claims 10 to 20.
A computer-readable storage medium, characterized in that it is used to store a computer program that enables a computer to execute the method according to any one of claims 1 to 9.
A computer-readable storage medium, characterized in that it is used to store a computer program that enables a computer to execute the method according to any one of claims 10 to 20.