KR20210049653A - Method for communicating with external electronic apparatus and electronic appratus thereof - Google Patents

Abstract

The present invention relates to a method for communicating with an external electronic apparatus to securely communicate between trusted apparatuses and an electronic apparatus thereof. According to the present invention, the electronic apparatus comprises: a memory storing a certificate list including first certificate data of the electronic apparatus and second certificate data of an external electronic apparatus; a short-range wireless communication circuit; and a processor operatively coupled to the memory and the short-range communication circuit. The memory stores instructions to allow the processor, during execution, to detecting a trigger event for executing an operation of establishing a communication connection with an apparatus around the electronic apparatus; control the short-range wireless communication circuit to broadcast an advertisement packet generated on the basis of the first certificate data in response to detecting the trigger event; acquire third certificate data from the response packet when a response packet is received from the external electronic apparatus in response to the advertisement packet; authenticate the external electronic apparatus on the basis of the second certificate data and the third certificate data; and establish a secure communication channel with the external electronic apparatus when the external electronic apparatus is authenticated.

Description

A method of communicating with an external electronic device, and the electronic device thereof TECHNICAL FIELD [Method FOR COMMUNICATING WITH EXTERNAL ELECTRONIC APPARATUS AND ELECTRONIC APPRATUS THEREOF}

The embodiments disclosed in this document relate to a technology in which an electronic device recognizes an external electronic device and connects communication in order to transmit or receive data.

As various electronic devices are supplied, connection between devices and content sharing are increasing. Short-range wireless communication may be used to transmit and receive data between devices located within a short distance. Short-range wireless communication includes a method in which devices connected to an access point communicate through an access point, and a method in which devices are directly paired to communicate with each other. For example, methods of directly pairing and communicating between devices using a WiFi (wireless-fidelity) module include an adhoc method, a mobile access point, and a WiFi direct.

Data transmission between devices using a short-range wireless communication method is inconvenient for a user to manually configure settings for short-range wireless communication. Therefore, it is difficult for users who do not have knowledge or are not familiar with wireless communication to perform the process of pairing devices.

When a user intends to provide content of his/her electronic device to another external electronic device, it is difficult to specify what external electronic device the user wants to provide the content to.

An electronic device according to an embodiment disclosed in the present document includes a memory for storing a certificate list including first certificate data of the electronic device and second certificate data of an external electronic device, a short-range wireless communication circuit, and the memory and A processor operatively connected to the short-range wireless communication circuit, and the memory, when executed, detects a trigger event that causes the processor to execute an operation of establishing a communication connection with a device surrounding the electronic device, In response to detection of the trigger event, controlling the short-range wireless communication circuit to broadcast an advertisement packet generated based on the first certificate data, and receiving a response packet from the external electronic device in response to the advertisement packet In one case, third certificate data is obtained from the response packet, the external electronic device is authenticated based on the second certificate data and the third certificate data, and when the external electronic device is authenticated, the external electronic device and Instructions for establishing a secure communication channel can be stored.

In addition, the electronic device according to an embodiment disclosed in the present document may provide first certificate data of the electronic device, first user identification information of the external electronic device, and second certificate data corresponding to the first user identification information. A memory to store, a short-range wireless communication circuit, and a processor operatively connected to the memory and the short-range wireless communication circuit, the memory, when executed, the processor, a third certificate through the short-range wireless communication circuit When an advertisement packet including data is received, and in response to the reception of the advertisement packet, the third certificate data is compared with the second certificate data, and the third certificate data and the second certificate data are matched, A response packet generated based on the first certificate data is transmitted to the external electronic device through the short-range wireless communication circuit, and a response of the external electronic device to the transmitted response packet through the short-range wireless communication circuit Instructions for establishing a secure communication channel with the external electronic device may be stored.

In addition, an electronic device according to an embodiment disclosed in the present document includes a memory for storing first certificate data of the electronic device and second certificate data of an external electronic device, a short-range wireless communication circuit, a long-range wireless communication circuit, and the A memory, the short-range wireless communication circuit, and a processor operatively connected to the long-distance wireless communication circuit, wherein the memory, when executed, the processor, through the long-range wireless communication circuit, to an external server in a user account Trigger to perform an operation of performing a login based on the remote, receiving an account key value corresponding to the user account from the external server through the remote wireless communication circuit, and establishing a communication connection with a device around the electronic device Detecting an event and controlling the short-range wireless communication circuit to broadcast a message including the account key value in response to detection of the trigger event, and having the same key value as the account key value based on the message Checking the external electronic device, transmitting the first certificate data to the external electronic device through the short-range wireless communication circuit, receiving third certificate data from the external electronic device through the short-range wireless communication circuit, , Instructions for authenticating the external electronic device based on the second certificate data and the third certificate data may be stored.

In addition, an electronic device according to an embodiment disclosed in the present document includes a memory for storing first certificate data of the electronic device and second certificate data of an external electronic device, a short-range wireless communication circuit, a long-range wireless communication circuit, and the A memory, the short-range wireless communication circuit, and a processor operatively connected to the long-distance wireless communication circuit, wherein the memory, when executed, the processor, through the long-range wireless communication circuit, to an external server in a user account Login is performed on the basis of, through the remote wireless communication circuit, receiving an account key value corresponding to the user account from the external server, and receiving a message including the account key value through the short-range wireless communication circuit, , Based on the message, identify the external electronic device having the same key value as the account key value, receive third certificate data from the external electronic device through the short-range wireless communication circuit, and the second certificate data And an instruction for authenticating the external electronic device based on the third certificate data, and transmitting the first certificate data to the external electronic device through the short-range wireless communication circuit when the authentication of the external electronic device is completed. You can save them.

In addition, a method of performing communication by an electronic device with an external electronic device according to an embodiment disclosed in this document includes storing first certificate data of the electronic device and second certificate data of the external electronic device, and the An operation of detecting a trigger event for establishing a communication connection with a device around the electronic device, an operation of broadcasting an advertisement packet generated based on the first certificate data in response to detection of the trigger event, and the advertisement packet When a response packet is received from the external electronic device as a response, acquiring third certificate data from the response packet, and authenticating the external electronic device based on the second certificate data and the third certificate data And establishing a secure communication channel with the external electronic device when the external electronic device is authenticated.

In addition, a method of performing communication by an electronic device with an external electronic device according to an embodiment disclosed in this document includes storing first certificate data of the electronic device and second certificate data of the external electronic device, 3 An operation of receiving an advertisement packet including certificate data, an operation of comparing the third certificate data with the second certificate data in response to receiving the advertisement packet, and the third certificate data and the second certificate data If matched, transmitting a response packet generated based on the first certificate data to the external electronic device, and secure communication with the external electronic device based on a response of the external electronic device to the transmitted response packet It may include an operation of establishing a channel.

In addition, a method of performing communication by an electronic device with an external electronic device according to an embodiment disclosed in this document includes: storing first certificate data of the electronic device and second certificate data of the external electronic device, and Logging in to a server based on a user account, receiving an account key value corresponding to the user account from the external server, and detecting a trigger event for establishing a communication connection with a device around the electronic device , In response to detection of the trigger event, broadcasting a message including the account key value, identifying the external electronic device having the same key value as the account key value based on the message, the external Transmitting the first certificate data to an electronic device, receiving third certificate data from the external electronic device, and authenticating the external electronic device based on the second certificate data and the third certificate data It may include.

In addition, a method of performing communication by an electronic device with an external electronic device according to an embodiment disclosed in this document includes: storing first certificate data of the electronic device and second certificate data of the external electronic device, and Logging in to a server based on a user account, receiving an account key value corresponding to the user account from the external server, and receiving a message including the account key value through the short-range wireless communication circuit , Based on the message, identifying the external electronic device having the same key value as the account key value, receiving third certificate data from the external electronic device, the second certificate data and the third certificate data An operation of authenticating the external electronic device based on and, when authentication of the external electronic device is completed, transmitting the first certificate data to the external electronic device.

According to the embodiments disclosed in this document, the electronic device and the external electronic device connect communication without the need for a user or users of the electronic device and the external electronic device to manually configure settings for wireless communication between the electronic device and the external electronic device. I can.

According to the embodiments disclosed in this document, since the electronic device and the external electronic device perform mutual authentication using the electronic device registered for the user account and the certificate of the external electronic device, communication between trusted devices can be securely connected. I can.

According to embodiments disclosed in this document, using contact information registered for the electronic device, the electronic device may connect communication with an external electronic device of another user that is related to the user of the electronic device.

According to the embodiments disclosed in this document, information for identifying an external electronic device may be provided to a user by using contact information registered for the electronic device. It can be made to be able to easily identify the user of the device.

In addition to this, various effects that are directly or indirectly identified through this document can be provided.

1 illustrates an electronic device in a network environment according to various embodiments of the present disclosure.
2 is a diagram illustrating a connection structure between devices through which an electronic device connects communication with an external electronic device, according to an exemplary embodiment.
3 is a flowchart illustrating a process in which an electronic device connects communication with an external electronic device, according to an exemplary embodiment.
4 is a flowchart illustrating a process in which an electronic device connects communication with an external electronic device logged in with the same user account, according to an embodiment.
5 is a flowchart illustrating a process of acquiring an account key value shared by an electronic device and acquiring a certificate list according to an embodiment.
6 is a flowchart illustrating a process in which an electronic device connects communication with an external electronic device of another user, according to an exemplary embodiment.
7 is a conceptual diagram illustrating a method of obtaining a certificate list from a server by an electronic device according to an embodiment.
8 illustrates an example of a list of certificates acquired by an electronic device and an external electronic device, according to an embodiment.
9 is a flowchart illustrating a process of performing mutual authentication between an electronic device and an external electronic device, according to an exemplary embodiment.
10 is a flowchart illustrating a process of obtaining certificate data of an external electronic device by an electronic device according to an exemplary embodiment.
11 illustrates an example of a transmission protocol for an electronic device to recognize an external electronic device by using data modulated using a random number value, according to an embodiment.
12 illustrates an example in which an electronic device detects a trigger event through a user interface, according to an embodiment.
13 conceptually illustrates a structure in which an electronic device authenticates an external electronic device and connects communication according to an exemplary embodiment.
14 illustrates an example of a screen displayed by the electronic device and the external electronic device in a process in which the electronic device shares content using a communication channel connected to an external electronic device logged in with the same user account, according to an embodiment.
15 illustrates an example of a screen displayed by the electronic device and the external electronic device in a process in which the electronic device shares content using a communication channel connected to an external electronic device of another user, according to an embodiment.
16 illustrates a UI indicating a data sharing state according to an embodiment.
17 is a diagram illustrating a sharing UI of an electronic device according to an embodiment.
18 illustrates examples of icons according to a data sharing situation according to an embodiment.
19 illustrates a UI indicating a data sharing state according to an embodiment.
20 illustrates a UI indicating a data sharing state according to an embodiment.
21 illustrates a connection request UI from an external electronic device.
In connection with the description of the drawings, the same or similar reference numerals may be used for the same or similar elements.

Hereinafter, various embodiments of the present invention will be described with reference to the accompanying drawings. However, this is not intended to limit the present invention to a specific embodiment, it should be understood to include various modifications, equivalents, and/or alternatives of the embodiments of the present invention.

1 is a block diagram of an electronic device 101 in a network environment 100 according to various embodiments. Referring to FIG. 1, in a network environment 100, the electronic device 101 communicates with the electronic device 102 through a first network 198 (for example, a short-range wireless communication network), or a second network 199 It is possible to communicate with the electronic device 104 or the server 108 through (eg, a long-distance wireless communication network). According to an embodiment, the electronic device 101 may communicate with the electronic device 104 through the server 108. According to an embodiment, the electronic device 101 includes a processor 120, a memory 130, an input device 150, an audio output device 155, a display device 160, an audio module 170, and a sensor module ( 176, interface 177, haptic module 179, camera module 180, power management module 188, battery 189, communication module 190, subscriber identification module 196, or antenna module 197 ) Can be included. In some embodiments, at least one of these components (for example, the display device 160 or the camera module 180) may be omitted or one or more other components may be added to the electronic device 101. In some embodiments, some of these components may be implemented as one integrated circuit. For example, the sensor module 176 (eg, a fingerprint sensor, an iris sensor, or an illuminance sensor) may be implemented while being embedded in the display device 160 (eg, a display).

The processor 120, for example, executes software (eg, a program 140) to implement at least one other component (eg, a hardware or software component) of the electronic device 101 connected to the processor 120. It can be controlled and can perform various data processing or operations. According to an embodiment, as at least a part of data processing or operation, the processor 120 may transfer commands or data received from other components (eg, the sensor module 176 or the communication module 190) to the volatile memory 132. It is loaded into, processes commands or data stored in the volatile memory 132, and the result data may be stored in the nonvolatile memory 134. According to an embodiment, the processor 120 includes a main processor 121 (eg, a central processing unit or an application processor), and a secondary processor 123 (eg, a graphic processing unit, an image signal processor) that can be operated independently or together. , A sensor hub processor, or a communication processor). Additionally or alternatively, the coprocessor 123 may be set to use lower power than the main processor 121 or to be specialized for a designated function. The secondary processor 123 may be implemented separately from the main processor 121 or as a part thereof.

The co-processor 123 is, for example, in place of the main processor 121 while the main processor 121 is in an inactive (eg, sleep) state, or the main processor 121 is active (eg, executing an application). ) While in the state, together with the main processor 121, at least one of the components of the electronic device 101 (for example, the display device 160, the sensor module 176, or the communication module 190) It is possible to control at least some of the functions or states associated with it. According to an embodiment, the coprocessor 123 (eg, an image signal processor or a communication processor) may be implemented as a part of other functionally related components (eg, the camera module 180 or the communication module 190). have.

The memory 130 may store various data used by at least one component of the electronic device 101 (eg, the processor 120 or the sensor module 176 ). The data may include, for example, software (eg, the program 140) and input data or output data for commands related thereto. The memory 130 may include a volatile memory 132 or a nonvolatile memory 134.

The program 140 may be stored as software in the memory 130, and may include, for example, an operating system 142, middleware 144, or an application 146.

The input device 150 may receive a command or data to be used for a component of the electronic device 101 (eg, the processor 120) from outside (eg, a user) of the electronic device 101. The input device 150 may include, for example, a microphone, a mouse, a keyboard, or a digital pen (eg, a stylus pen).

The sound output device 155 may output an sound signal to the outside of the electronic device 101. The sound output device 155 may include, for example, a speaker or a receiver. The speaker can be used for general purposes such as multimedia playback or recording playback, and the receiver can be used to receive incoming calls. According to one embodiment, the receiver may be implemented separately from the speaker or as part of the speaker.

The display device 160 may visually provide information to the outside of the electronic device 101 (eg, a user). The display device 160 may include, for example, a display, a hologram device, or a projector and a control circuit for controlling the device. According to an embodiment, the display device 160 may include a touch circuitry set to sense a touch, or a sensor circuit (eg, a pressure sensor) set to measure the strength of a force generated by the touch. have.

The audio module 170 may convert sound into an electrical signal, or conversely, may convert an electrical signal into sound. According to an embodiment, the audio module 170 acquires sound through the input device 150, the sound output device 155, or an external electronic device (eg: Sound may be output through the electronic device 102 (for example, a speaker or headphones).

The sensor module 176 detects an operating state (eg, power or temperature) of the electronic device 101, or an external environmental state (eg, a user state), and generates an electrical signal or data value corresponding to the detected state. can do. According to an embodiment, the sensor module 176 is, for example, a gesture sensor, a gyro sensor, an atmospheric pressure sensor, a magnetic sensor, an acceleration sensor, a grip sensor, a proximity sensor, a color sensor, an infrared (IR) sensor, a biometric sensor, It may include a temperature sensor, a humidity sensor, or an illuminance sensor.

The interface 177 may support one or more designated protocols that may be used for the electronic device 101 to directly or wirelessly connect with an external electronic device (eg, the electronic device 102). According to an embodiment, the interface 177 may include, for example, a high definition multimedia interface (HDMI), a universal serial bus (USB) interface, an SD card interface, or an audio interface.

The connection terminal 178 may include a connector through which the electronic device 101 can be physically connected to an external electronic device (eg, the electronic device 102). According to an embodiment, the connection terminal 178 may include, for example, an HDMI connector, a USB connector, an SD card connector, or an audio connector (eg, a headphone connector).

The haptic module 179 may convert an electrical signal into a mechanical stimulus (eg, vibration or movement) or an electrical stimulus that a user can perceive through tactile or motor sensations. According to an embodiment, the haptic module 179 may include, for example, a motor, a piezoelectric element, or an electrical stimulation device.

The camera module 180 may capture a still image and a video. According to an embodiment, the camera module 180 may include one or more lenses, image sensors, image signal processors, or flashes.

The power management module 188 may manage power supplied to the electronic device 101. According to an embodiment, the power management module 188 may be implemented as at least a part of, for example, a power management integrated circuit (PMIC).

The battery 189 may supply power to at least one component of the electronic device 101. According to an embodiment, the battery 189 may include, for example, a non-rechargeable primary cell, a rechargeable secondary cell, or a fuel cell.

The communication module 190 includes a direct (eg, wired) communication channel or a wireless communication channel between the electronic device 101 and an external electronic device (eg, the electronic device 102, the electronic device 104, or the server 108). It is possible to support establishment and communication through the established communication channel. The communication module 190 operates independently of the processor 120 (eg, an application processor) and may include one or more communication processors supporting direct (eg, wired) communication or wireless communication. According to an embodiment, the communication module 190 is a wireless communication module 192 (eg, a cellular communication module, a short-range wireless communication module, or a global navigation satellite system (GNSS) communication module) or a wired communication module 194 (eg : A local area network (LAN) communication module, or a power line communication module) may be included. Among these communication modules, a corresponding communication module is a first network 198 (for example, a short-range communication network such as Bluetooth, WiFi direct or IrDA (infrared data association)) or a second network 199 (for example, a cellular network, the Internet, Alternatively, it may communicate with the external electronic device 104 through a computer network (eg, a telecommunication network such as a LAN or WAN). These various types of communication modules may be integrated into a single component (eg, a single chip), or may be implemented as a plurality of separate components (eg, multiple chips). The wireless communication module 192 uses subscriber information stored in the subscriber identification module 196 (eg, International Mobile Subscriber Identifier (IMSI)) in a communication network such as the first network 198 or the second network 199. The electronic device 101 can be checked and authenticated.

The antenna module 197 may transmit a signal or power to the outside (eg, an external electronic device) or receive from the outside. According to an embodiment, the antenna module 197 may include one antenna including a conductor formed on a substrate (eg, a PCB) or a radiator formed of a conductive pattern. According to an embodiment, the antenna module 197 may include a plurality of antennas. In this case, at least one antenna suitable for a communication method used in a communication network such as the first network 198 or the second network 199 is, for example, provided by the communication module 190 from the plurality of antennas. Can be chosen. The signal or power may be transmitted or received between the communication module 190 and an external electronic device through the at least one selected antenna. According to some embodiments, other components (eg, RFIC) other than the radiator may be additionally formed as part of the antenna module 197.

At least some of the components are connected to each other through a communication method (e.g., bus, general purpose input and output (GPIO), serial peripheral interface (SPI), or mobile industry processor interface (MIPI))) between peripheral devices and signals ( E.g. commands or data) can be exchanged with each other.

According to an embodiment, commands or data may be transmitted or received between the electronic device 101 and the external electronic device 104 through the server 108 connected to the second network 199. Each of the external electronic devices 102 and 104 may be a device of the same or different type as the electronic device 101. According to an embodiment, all or part of the operations executed by the electronic device 101 may be executed by one or more of the external electronic devices 102, 104, or 108. For example, when the electronic device 101 needs to perform a function or service automatically or in response to a request from a user or another device, the electronic device 101 In addition or in addition, it is possible to request one or more external electronic devices to perform the function or at least part of the service. One or more external electronic devices receiving the request may execute at least a part of the requested function or service, or an additional function or service related to the request, and transmit a result of the execution to the electronic device 101. The electronic device 101 may process the result as it is or additionally and provide it as at least a part of a response to the request. For this, for example, cloud computing, distributed computing, or client-server computing technology may be used.

In the present specification, an electronic device (eg, the electronic device 101 of FIG. 1), an external electronic device (eg, the electronic device 102 of FIG. 1, the electronic device 104), or a server (eg, the server of FIG. 108)) may be understood as being executed by a processor (eg, the processor 120 of FIG. 1) executing instructions stored in a memory (eg, the memory 130 of FIG. 1). However, it is not limited thereto. For another example, an operation of an electronic device, an external electronic device, or a server may be performed using hardware external to the device through a distributed computing technology.

FIG. 2 illustrates an electronic device 201 (eg, the electronic device 101 of FIG. 1) is an external electronic device 202 (eg, the electronic device 102 and the electronic device 104 of FIG. 1) according to an embodiment. ) And communication.

The electronic device 201 according to an embodiment may include a processor 221, a memory 222, and a short-range wireless communication circuit 223. According to another embodiment, the electronic device 201 may further include a long-distance wireless communication circuit 224 configured to communicate with the server 203. In this case, the short-range wireless communication circuit 223 and the long-range wireless communication circuit 224 may be configured as separate chips or modules, or may be formed as one chip or module. According to an embodiment, the electronic device 201 may communicate with the server 203 through a long-distance wireless communication protocol (eg, a protocol supporting the second network 199 of FIG. 1 ). The processor 221 may control the electronic device 201 to operate by executing instructions stored in the memory 222.

The external electronic device 202 according to an embodiment may include a processor 231, a memory 232, and a short-range wireless communication circuit 233. According to another embodiment, the external electronic device 202 may further include a long-distance wireless communication circuit 234 configured to communicate with the server 203. In this case, the short-range wireless communication circuit 233 and the long-range wireless communication circuit 234 may be configured as separate chips or modules, or may be formed as a single chip or module (for example, the wireless communication module 192 of FIG. 1 ). . According to an embodiment, the external electronic device 202 may communicate with the server 203 through a long-distance wireless communication protocol (eg, a protocol supporting the second network 199 of FIG. 1 ). The processor 231 may control the external electronic device 202 to operate by executing instructions stored in the memory 232.

According to an embodiment, in order to share content, the electronic device 201 may establish a communication connection 210 for transmitting and receiving data with the external electronic device 202. The communication connection 210 may be, for example, a peer-to-peer (P2P) communication connection such as a WiFi Adhoc method, a mobile access point, and a WiFi direct. The content may be data stored in the memory 222 or data output by the electronic device 201 (eg, the display device 160 of FIG. 1 or the sound output device 155 ). For example, the content may include multimedia data or text data stored in the memory 222. Alternatively, the content may include a link address or at least a part of a page displayed on the display of the electronic device through a browser.

In order for the electronic device 201 to establish a communication connection 210 with the external electronic device 202, the communication module of the electronic device 201 (for example, the communication module 190 in FIG. 1) is activated, and the external electronic device ( 202). In order to select the external electronic device 202 from recognized nearby devices, the electronic device 201 displays a list representing nearby devices, and selects an item corresponding to the external electronic device 202 from the list. Can receive input. The electronic device 201 may display a list of nearby devices to indicate information such as model names of nearby devices, but it is difficult for the user to know which device is the device to which the user wants to connect from only the model name.

In addition, when the electronic device 201 automatically connects with the external electronic device 202, communication with an untrusted device may be connected and data may be transmitted, contrary to the intention of the user.

Accordingly, according to an embodiment, the processor 221 transmits public certificate data (hereinafter, may be referred to as “first certificate data”) including information that can uniquely identify the electronic device 201 to a server ( 203). In addition, the processor 231 of the external electronic device 202 according to an embodiment also includes public certificate data (hereinafter referred to as “second certificate data”) including information that can uniquely identify the external electronic device 202. Can be) can be registered in the server 203. For example, the first certificate data may include at least a part (eg, a public key) of a key pair generated by the electronic device 201. The second certificate data may include at least a portion (eg, a public key) of a key pair generated by the external electronic device 202.

Also, the electronic device 201 according to an embodiment may download a certificate list including public certificate data of trusted devices from the server 203. According to another embodiment, the electronic device 201 may not directly receive the certificate list, but may use the certificate list stored in the server 203 using cloud computing. The electronic device 201 may exchange public certificate data with the external electronic device 202 located nearby, and perform mutual authentication using the public certificate data.

According to an embodiment, the electronic device 201 and the external electronic device 202 may register public certificate data in association with a user account logged in to the server 203. The server 203 may allow a device logged in to the server 203 based on the user account to access the registered public certificate data in association with the user account. Therefore, when the user's electronic device 201 logs in to the server 203 with a user account, the processor 221 accesses the public certificate data of the devices registered by the user as the user's own device or You can have them download.

According to an embodiment, the electronic device 201 and the external electronic device 202 may be devices that log in to the server with the same user account. When a trigger event occurs, the processor 221 may establish a communication connection 210 for sharing content with the external electronic device 202. That is, a user may manipulate the electronic device 201 to share content among a plurality of devices owned by the user. For example, the electronic device 201 may receive a user input for selecting a share button for a photo file stored in the memory 222 with another device. For another example, the processor 221 may receive an input of a “copy” or “paste to another device” command while at least some of the content displayed on the electronic device 201 is selected. The trigger event means that an instruction for establishing a communication connection through which the electronic device 201 transmits data to the external electronic device 202 or receives data from the external electronic device 202 is executed, and the above-described example It is not limited to

When the electronic device 201 and the external electronic device 202 log in to the server 203 with a user account, the electronic device 201 and the external electronic device 202 receive an account key value corresponding to the user account from the server 203 through a remote wireless communication circuit 224 or 234 can do. The account key value may include a key value generated by the server 203 for a user account. Accordingly, a device logged in with the same user account may receive the same account key value from the server 203. For example, the electronic device 201 may store the account key value in a communication chip including the short-range wireless communication circuit 223. When user information on a user is registered in the server 203 through the electronic device 201 or another device, the server 203 may generate an account key value based on the user information. For example, the server 203 may obtain an account key value by inputting user information into a function for generating an account key value. User information may include information capable of identifying a user. For example, the user information may include account credentials for the user account.

The processor 221 may control the short-range wireless communication circuit 223 to broadcast a message including an account key value of the electronic device 201. The short-range wireless communication circuit 223 may broadcast a message through a short-range wireless communication (eg, Bluetooth™ Low Energy (BLE) protocol-based communication) signal. The processor 221 may merge and modulate the account key with a random number, and broadcast the modulated account key by including it in a message. For example, the processor 221 may modulate a message including an account key using a bloom filter. The processor 231 of the external electronic device 202 may receive a message through the short-range wireless communication circuit 233. The processor 231 may control the external electronic device 202 to transmit a message including an account key value of the external electronic device 202 to the electronic device 201 in response to the broadcast message. The processor 221 of the electronic device 201 may recognize the external electronic device 202 having the same account key value based on a message received from the external electronic device 202. The electronic device 201 may exchange certificate data with the recognized external electronic device 202 through secure communication (eg, secure communication through the communication module 190 of FIG. 1 ).

When the electronic device 201 transmits the first certificate data of the electronic device 201 to the external electronic device 202, the processor 231 of the external electronic device 202 is stored in the server 203 or the server 203 It can be verified whether the certificate list received from) includes the first certificate data. When the certificate list includes the first certificate data, the processor 231 may control the external electronic device 202 to transmit the second certificate data of the external electronic device 202 to the electronic device 201. The processor 221 of the electronic device 201 may authenticate the external electronic device 202 based on whether the list of certificates stored in the server 203 or received from the server 203 includes the second certificate data. have. When the certificate list does not include the first certificate data, the external electronic device 202 may terminate the communication connection without transmitting the second certificate data to the electronic device 201. When the electronic device 201 and the external electronic device 202 authenticate each other using the certificate data, the processor 221 allows the electronic device 201 and the external electronic device 202 to share a session key with each other, and the session key The electronic device 201 may be controlled to form the encryption channel 210 based on the data. The encryption channel 210 may be configured in a communication connection method capable of transmitting and receiving data such as an adhoc method, a mobile access point, and a WiFi direct.

According to another embodiment, the electronic device 201 and the external electronic device 202 may be devices that log in to the server 203 based on different user accounts. For example, a user may wish to transmit content from his or her device to a friend's device located nearby, or to receive content from a friend's device. The electronic device 201 according to an embodiment is a certificate including second certificate data based on user identification information capable of identifying a correlation between a user of the electronic device 201 and a user of the external electronic device 202 You can receive a list or access a list of certificates. For example, the user identification information is the identification information of the external electronic device 202 stored in the contact storage of the electronic device 201 (for example, a contact database configured on the memory 222) (a more specific example, a phone number, Contact information such as a mail address or mail account, device-specific identification information such as International Mobile Equipment Identity (IMEI), or service subscriber identification information such as a social media service account). The user identification information does not have to be stored in the electronic device 201, but may be stored in a separate device.

The processor 221 registers the first certificate data of the electronic device 201 and user identification information of the electronic device 201 (hereinafter, may be referred to as “first user identification information”) to the server 203. The electronic device 201 can be controlled. The electronic device 201 according to an embodiment includes user identification information on the external electronic device 202 stored by the user of the electronic device 201 (hereinafter may be referred to as “second user identification information”) A list of user identification information (hereinafter may be referred to as a "first user identification information list") may be provided to the server 203. User identification information stored by a user of the electronic device 201 and user identification information stored in the server 203 may be synchronized. That is, when a change to the user identification information stored by the user of the electronic device 201 occurs, the user identification information stored in the server 203 may also be changed according to the changed content. The external electronic device 202 may also register second certificate data of the external electronic device and second user identification information of the external electronic device 202 in the server 203. In addition, the external electronic device 202 is also a user identification information list including first user identification information on the electronic device 201 stored by the user of the external electronic device 202 (hereinafter, "second user identification information list"). May be referred to as) can be provided to the server 203.

The server 203 may generate a certificate list based on user identification information provided from the electronic device 201 and the external electronic device 202. According to an embodiment, when the first user identification information list includes the second user identification information and the second user identification information list includes the first user identification information, the server 203 Can be determined to be a trusted user. The server 203 may generate a certificate list (hereinafter may be referred to as “first certificate list”) including second certificate data. The electronic device 201 may log in with a user account to access the first certificate list or download the first certificate list. In addition, the server 203 may generate a certificate list (hereinafter may be referred to as a “second certificate list”) including first certificate data. According to an embodiment, the certificate list may be provided in a form in which certificate data is added to a user identification information list (eg, a contact list).

When a trigger event occurs, the processor 221 according to an embodiment may control the short-range wireless communication circuit 223 to broadcast an advertisement packet in response to the detected trigger event. The advertisement packet may be generated based on the first certificate data. For example, the processor 221 may generate an advertisement packet to include modulated data by merging a random number value with the first certificate data. For another example, the processor 221 may obtain a hash value by inputting the first certificate data into a hash function, and generate an advertisement packet to include the obtained hash value. According to another embodiment, the electronic device 201 may obtain a shared key shared with the external electronic device 202 and generate an advertisement packet to include the encrypted first certificate data based on the shared key.

The processor 231 of the external electronic device 202 may receive an advertisement packet broadcast through the short-range wireless communication circuit 233. The processor 231 may obtain the first certificate data from the received advertisement packet. The processor 231 may authenticate the electronic device 201 based on whether the obtained first certificate data is included in the certificate list provided from the server 203. For example, when a hash value of the first certificate data is included in the advertisement packet, the first certificate data may be obtained from the hash value. For another example, the certificate list includes a hash value of certificate data, and the processor 231 may authenticate the electronic device 201 by comparing the hash values.

When authentication for the electronic device 201 is successfully completed, the external electronic device 202 may transmit a response packet including the second certificate data to the electronic device 201. If the electronic device 201 is not authenticated, the external electronic device 202 may not transmit a response packet. The processor 221 of the electronic device 201 may obtain second certificate data from the received response packet. The processor 221 determines whether the obtained second certificate data is included in the first certificate list (that is, whether the certificate data received from the server 203 matches the certificate data obtained from the response packet). The electronic device 202 may be authenticated. For example, when a hash value of the second certificate data is included in the response packet, the second certificate data may be obtained from the hash value. For another example, the certificate list includes a hash value of certificate data, and the processor 221 may authenticate the external electronic device 202 by comparing the hash values. When authentication of the external electronic device 202 is successfully completed, the processor 221 may control the electronic device 201 to form a secure communication channel 210 with the external electronic device 202.

FIG. 3 is a flowchart illustrating a process in which an electronic device (eg, the electronic device 201 of FIG. 2) connects communication with an external electronic device (eg, the external electronic device 202 of FIG. 2) according to an embodiment ( 300).

In operation 310, the electronic device may detect a trigger event. For example, if an electronic device captures a photo using a camera (eg, the camera module 180 of FIG. 1) and then selects the “Share to nearby trusted devices” menu item displayed on the electronic device, The electronic device may determine that a trigger event has occurred. For another example, a user whose electronic device receives a user input of selecting “copy” to save data to the clipboard or selects “paste to another device” while data is stored on the clipboard. Upon receiving an input, the electronic device may determine that a trigger event has occurred.

In operation 320, the electronic device may recognize an external electronic device located nearby. For example, the electronic device may transmit an advertisement packet through a short-range wireless communication signal and receive a response packet from an external electronic device as a response to the advertisement packet.

In operation 330, the electronic device may perform mutual authentication based on the first certificate data of the electronic device and the second certificate data of the external electronic device. The electronic device and the external electronic device according to an embodiment may have public certificate data for a trusted device in advance. Alternatively, according to an embodiment, the electronic device and the external electronic device may access the certificate data stored in the server (eg, the server 203 of FIG. 2) through a long-distance wireless communication circuit to verify the received certificate data.

In operation 340, the electronic device may determine whether the external electronic device has been successfully authenticated. When the external electronic device is successfully authenticated, the electronic device may establish a secure communication channel with the external electronic device in operation 350. When the trigger event is a command to transmit data of content to an external electronic device, the electronic device may transmit data to the external electronic device through an established secure communication channel.

FIG. 4 illustrates an external electronic device 402 (eg, the external electronic device 202 of FIG. 2) to which the electronic device 401 (eg, the electronic device 201 of FIG. 2) logs in with the same user account, according to an embodiment. )) is a flow chart 400 showing a process of connecting communication with.

In operation 411, the electronic device 411 may receive an account key value from an external server (eg, the server 203 of FIG. 2) logged in through a long-distance wireless communication protocol. Also, in operation 412, the external electronic device 402 may also receive the same account key value from an external server through a long-distance wireless communication protocol.

When a trigger event is detected in operation 413, the electronic device 401 may broadcast a message including an account key value in operation 415 through a short-range wireless communication (eg, BLE communication) signal. The external electronic device 402 may scan a short-range wireless communication signal periodically or for a specified period in order to receive a broadcast signal.

When the external electronic device 402 receives the broadcast message in operation 417, in operation 419, the electronic device 401 and the external electronic device 402 communicate with the electronic device 401 that is the user's device within a short distance based on the account key value. ) Or, it may be recognized that the external electronic device 402 is located. When the external electronic device 402 is recognized, the electronic device 401 activates a processor (eg, an application processor) of the electronic device 401, and establishes an encrypted channel to exchange a certificate with the recognized external electronic device 402. Can be formed.

In operation 421, the electronic device 401 may transmit first certificate data of the electronic device to the external electronic device 402 in order to attempt mutual authentication with the external electronic device 402. When the first certificate data is received, the external electronic device 402 may authenticate the electronic device 401 based on the first certificate data in operation 423. According to an embodiment, the external electronic device 402 may authenticate the electronic device 401 through the same or similar process as in operation 427.

When authentication for the electronic device 401 is successfully completed, in operation 425, the external electronic device 402 may transmit the second certificate data of the external electronic device 402 to the electronic device 401 to the electronic device. In operation 427, the electronic device 401 may authenticate the external electronic device 402 based on the received second certificate data. In order to authenticate the external electronic device 402, the electronic device 401 according to an embodiment includes a certificate list including certificate data of at least one device registered as a trusted device in a user account. If included, it may be determined that the external electronic device 402 is an authenticated device. The electronic device 401 according to an embodiment may obtain a certificate list for authenticating the external electronic device 402 from an external server. When authentication of the external electronic device 402 is successfully completed in operation 427, in operation 429, the electronic device 401 shares a session key with the external electronic device 402 and establishes a secure communication channel for communicating based on the session key. Can be established.

FIG. 5 is a flowchart 500 illustrating a process of acquiring a shared account key value and acquiring a certificate list by an electronic device (eg, the electronic device 201 of FIG. 2) according to an embodiment. The transmission of information between the electronic device and the external server described below may be performed through a long-distance wireless communication protocol.

In operation 510, the electronic device may log in to an external server (eg, the server 203 of FIG. 2) based on the user account. For example, the electronic device may register user information to an external server through a service subscription process, create a user account, and then form a login session with the external server based on the created user account.

In operation 520, the electronic device may transmit user-specific information for identifying a user to an external server. For example, the electronic device may transmit account proof for the user's account to an external server. The external server receiving the user-specific information may generate an account key value based on the user-specific information. In operation 530, the electronic device may receive an account key value generated by an external server.

The electronic device may generate certificate data. For example, the electronic device may generate a key pair including a private key and a public key generated based on a unique seed value of the electronic device. Here, public certificate data that can be shared externally may include a public key. In operation 540, the electronic device may register public certificate data to an external server. The external server may register public certificate data for a user account logged in by the electronic device.

The operation of registering the certificate data to the external server may be performed by a plurality of devices. When operations 510 to 540 are performed through the same user account, the external server may register a plurality of certificate data for one user account. The external server may generate a certificate list including data of one or more certificates registered for one user account. In operation 550, the electronic device may receive a certificate list from an external server.

6 illustrates an electronic device 601 (eg, the electronic device 201 of FIG. 2) and an external electronic device 602 of another user (eg, the external electronic device 202 of FIG. 2) according to an embodiment. A flowchart 600 illustrating a process of connecting communications.

When a trigger event is detected in operation 611, in operation 613, the electronic device 601 may broadcast an advertisement packet including first certificate data of the electronic device 601.

When the external electronic device 602 receives the advertisement packet in operation 615, the external electronic device 602 may authenticate the electronic device 601 based on first certificate data included in the advertisement packet in operation 617. According to an embodiment, the external electronic device 602 may authenticate the electronic device 601 through the same or similar process as the operation 621.

When authentication for the electronic device 601 is successfully completed, in operation 619, the external electronic device 602 may transmit a response packet including the second certificate data of the external electronic device to the electronic device 601. In operation 621, the electronic device 601 may authenticate the external electronic device 602 based on the second certificate data obtained from the received response packet. In order to authenticate the external electronic device 602, the electronic device 601 according to an embodiment includes the second certificate data in a certificate list including certificate data for at least one device trusted from an external server. It may be determined that the external electronic device 602 is an authenticated device.

According to an embodiment, the electronic device 601 may obtain a certificate list from an external server (eg, the server 203 of FIG. 2 ). The external server obtains a first user identification information list including first user identification information that can identify a user of the electronic device 601 and information that can identify other users stored by the user of the electronic device 601 can do. The first user identification information and the first user identification information list may be provided by the electronic device 601, but may also be provided through another device logged in to an external server with the same user account as the electronic device 601. In addition, the external server includes second user identification information that can identify a user of the external electronic device 602 and information that can identify other users stored by the user of the external electronic device 602. You can get a list of information. The second user identification information and the second user identification information list may be provided by the external electronic device 602, but may be provided through another device logged in to the external server with the same user account as the external electronic device 602. . When the external server includes the first user identification information list and the second user identification information and the second user identification information list includes the first user identification information, the external server is the second certificate data of the external electronic device 602 A certificate list including a may be provided to the electronic device 601. For example, a user using a smartphone assigned with 1234 as a phone number stores contact information with a phone number 5678 in the contact store of the smartphone, and a user using a smartphone with a phone number 5678 If contact information with a phone number of 1234 is stored in the contact storage of the smartphone, the external server that received the contact information from the two smartphones may determine the two devices as mutually trusted devices. When authentication for the external electronic device 602 is successfully completed in operation 621, in operation 623, the electronic device 601 shares a session key with the external electronic device 602 and communicates based on the session key. Can be established.

FIG. 7 illustrates a method of obtaining a certificate list from a server 703 (eg, the server 203 of FIG. 2) by the electronic device 701 (eg, the electronic device 201 of FIG. 2 ), according to an embodiment. Shown conceptually.

Referring to FIG. 7, the electronic device 701 is a device to which a phone number 000-xxxx-yyyy is assigned as first user identification information 711. The electronic device 701 may generate first certificate data 712 as unique information for identifying the electronic device 701. The electronic device 701 stores a first user identification information list 713 including second user identification information 714. When the electronic device 701 logs in to the server 703, the electronic device 701 sends the first user identification information 711, the first certificate data 712, and the first user identification information list 713 to the server 703. ) Can be transmitted.

Referring to FIG. 7, the external electronic device 702 is a device to which the phone number 010-aaaa-bbbb is assigned as the second user identification information 721. The external electronic device 702 may generate second certificate data 722 as unique information for identifying the external electronic device 702. The external electronic device 702 stores a second user identification information list 723 including the first user identification information 724. When the external electronic device 702 logs in to the server 703, the external electronic device 702 sends a list of second user identification information 721, second certificate data 722, and second user identification information to the server 703. (723) can be transmitted.

The server 703 may compare the first user identification information 711 and the second user identification information list 723, and compare the second user identification information 721 and the first user identification information list 713. The server 703 may provide certificate lists 715 and 725 generated based on the comparison result to the electronic device 701 and the external electronic device 702, respectively. According to an embodiment, when the second user identification information list 723 includes the first user identification information 711 and the first user identification information list 713 includes the second user identification information 721 , The certificate list 715 may include second certificate data 722, and the certificate list 725 may include first certificate data 712. 7 illustrates an embodiment in which the first certificate data 712 and the second certificate data 722 are transmitted through the certificate lists 715 and 725, respectively, but according to another embodiment, the server 703 is After including the certificate data 722 in the first user identification information list 713, the first user identification information list 713 is transmitted to the electronic device 701, and the first certificate data 712 is identified as a second user. After being included in the information list 723, the second user identification information list 723 may be transmitted to the external electronic device 702. According to another embodiment, the server 703 includes the certificate list 715 including the second certificate data 722 in the first user identification information list 713 and then the first user identification information list 713. After transmitting to the electronic device 701 and including the certificate list 725 including the first certificate data 712 in the second user identification information list 723, the second user identification information list 723 is transferred to an external electronic device. To the device 702.

FIG. 8 conceptually illustrates an example of a certificate list acquired by an electronic device (701 in FIG. 7) and an external electronic device (702 in FIG. 7) according to an embodiment.

Referring to FIG. 8, a certificate list 815 acquired by an electronic device (701 in FIG. 7) includes user identification information 801 and second certificate data 802 of an external electronic device (702 in FIG. 7). I can. Also, the certificate list 825 acquired by the external electronic device (702 in FIG. 7) may include user identification information 803 and first certificate data 804 of the electronic device (701 in FIG. 7 ).

Although not shown in FIG. 8, according to other embodiments, the electronic device (701 in FIG. 7) and the external electronic device (702 in FIG. 7) do not receive a separate certificate list (815 or 825), and a user identification information list. Through this, it is possible to obtain the certificate data of the other device. For example, the electronic device (701 in FIG. 7) includes the user identification information 801 and the second certificate data 802 of the external electronic device (702 in FIG. 7). 713) is obtained from the server (703 in FIG. 7), and the external electronic device (702 in FIG. 7) includes the user identification information 803 and the first certificate data 804 of the electronic device (701 in FIG. 7). The second user identification information list (723 in FIG. 7) may be obtained from the server (703 in FIG. 7).

9 illustrates mutual authentication between an electronic device 901 (eg, the electronic device 201 of FIG. 2) and an external electronic device 902 (eg, the external electronic device 202 of FIG. 2 ), according to an embodiment. A flowchart 900 showing the process to be performed.

When the electronic device 901 succeeds in recognizing the external electronic device 902 as a result of performing an operation for recognizing the external electronic device 902 (eg, operations 415 to 419 in FIG. 4 ), the electronic device 901 succeeds in recognizing the external electronic device 902 In operation 911, the electronic device 901 may connect communication with the external electronic device 902 based on a generic attribute profile (GATT) in operation 911.

The electronic device 901 according to an embodiment may exchange a key with the external electronic device 902 in operation 913 based on a Transport Layer Security (TLS) protocol. Here, the exchanged key may include first certificate data of the electronic device 901 and second certificate data of the external electronic device 902. The electronic device 901 and the external electronic device 902 may authenticate each other based on TLS. When mutual authentication is successful, the electronic device 901 may transmit data (eg, content) to the external electronic device 902.

When the electronic device 901 and the external electronic device 902 succeed in mutual authentication (915 ), the electronic device 901 and the external electronic device 902 may establish a secure communication connection in operation 917. When the electronic device 901 and the external electronic device 902 fail to mutually authenticate in operation 919, the electronic device 901 may terminate the GATT-based communication connection in operation 921.

When the electronic device 901 performs an operation to recognize the external electronic device 902 but the external electronic device 902 is not recognized (920), a process between the electronic device 901 and the external electronic device 902 is performed. May not be performed.

In the example of FIG. 9, the electronic device 901 and the external electronic device 902 may create a secure connection 915 after mutual authentication (eg, operation 913 ). The electronic device 901 and the external electronic device 902 may share a personal identification number code (PIN) for creating a secure channel through the secure connection 915. For example, a PIN code can be used to create a secure network channel. Only electronic devices (eg, electronic device 901 and external electronic device 902) having a corresponding PIN code can access the secure network channel. In this case, the electronic device 901 may allow the external electronic device to access the secure network channel by sharing the PIN code with another trusted external electronic device.

10 is a flowchart illustrating a process of obtaining certificate data of an external electronic device (eg, the external electronic device 202 of FIG. 2) by an electronic device (eg, the electronic device 201 of FIG. 2 ), according to an embodiment (1000).

In operation 1010, the electronic device may log in to an external server based on the user account. According to an embodiment, the electronic device may display a service subscription screen for performing a service subscription process for creating a user account on an external server, and receive information for service subscription. Using the service subscription screen, the electronic device may receive a user input regarding consent to provide the first user identification information and the second user identification information.

In operation 1020, the electronic device may register first user identification information of the electronic device as information for identifying a user in an external server. The electronic device may generate first certificate data and register the generated first certificate data in an external server. In operation 1030, the electronic device registering the first user identification information and the first certificate data may transmit the second user identification information as identification information of a trusted user to an external server. The second user identification information may be stored by a user of the electronic device or may be information fetched by a user of the electronic device from a separate device that stores the identification information.

When an external electronic device that has registered the second user identification information as its own identification information in the external server transmits the first user identification information as the identification information of a trusted device to the external server, in operation 1040, the electronic device is removed from the external server. 2 It is possible to obtain second certificate data corresponding to user identification information.

FIG. 11 illustrates an external electronic device 1102 (eg, FIG. 2) using data modulated by using a random number value by an electronic device 1101 (eg, the electronic device 201 of FIG. 2 ), according to an embodiment. An example of a transmission protocol for recognizing the external electronic device 202 is shown.

The electronic device 1101 according to an embodiment may obtain a hash value from the selected account key 1111 using a hash algorithm (eg, SHA-256). The electronic device 1101 may obtain a true/false array 1103 for the account key 1111 by applying a bloom hash filter to the obtained hash value.

The electronic device 1101 may generate a random number value and obtain a true/false array 1115 for the random number value by applying a bloom hash filter to the generated random number value. The electronic device 1101 may generate the final true/false array 1117 by performing an OR operation on the true/false array 1115 for random values at least once. The electronic device 1101 may broadcast the bloom filter 1117 configured in the final true/false arrangement.

The external electronic device 1102 may obtain a hash value from the selected account key using a hash algorithm, and obtain a true/false array 1121 by applying a bloom hash filter to the obtained hash value. When the external electronic device 1102 receives the broadcasted bloom filter 1117, it may recognize with a high probability that the electronic device 1101 is nearby compared to the true/false array 1121.

Through the process illustrated in FIG. 11, the electronic device 1101 and the application processor (eg, the processor 120 of FIG. 1) of the electronic device 1101 and the external electronic device 1102 may be activated (or awakened).

The bloom filter has a feature that it is determined that an element does not belong to a set by the bloom filter, but there is no negative error that the element belongs to the set. Therefore, if the account-based signal generated by the electronic device 1101 is modulated and transmitted by utilizing the characteristics of the bloom filter, the case where the authentication procedure is not performed even though the external electronic device 1102 is the user's device does not occur. Since the authentication procedure is performed even if it is not the user's device, it occurs with a very low probability, so that the user's device can be recognized with high accuracy.

Also, the data structure of the bloom filter occupies only a small space. Accordingly, it may be transmitted in real time through a short-range wireless communication signal that transmits small data such as a BLE signal. If the method of modulating the signal transmitted by the electronic device 1101 is changed, a privacy and tracking problem that the user is not aware of can be prevented.

12 illustrates an example in which the electronic device 1201 (eg, the electronic device 201 of FIG. 2) detects a trigger event through a user interface, according to an exemplary embodiment.

According to an embodiment, the electronic device 1201 is a user interface item for receiving a user input detected as a trigger event for establishing a communication connection with an external electronic device (for example, the external electronic device 202 of FIG. 2 ). 1210) can be output. For example, referring to FIG. 12, the electronic device 1201 may sense a touch input for selecting a user interface item 1210 for inputting a command to transmit a picture 1205 to a nearby device.

The electronic device 1201 according to an embodiment may perform a process (eg, 300 of FIG. 3, 400 of FIG. 4, and 600 of FIG. 6) for establishing a communication connection with an external electronic device.

13 illustrates an electronic device 1301 (eg, the electronic device 201 of FIG. 2) authenticates an external electronic device 1302 (eg, the external electronic device 202 of FIG. 2) according to an embodiment. It conceptually represents a structure that connects communication and communication

The electronic device 1301 according to an embodiment may register the first certificate data of the electronic device 1301 with the server 1303. The server 1303 may obtain second certificate data of the external electronic device 1302 from the external electronic device 1302. The server 1303 may generate certificate data in a certificate list of devices that the electronic device 1301 can trust among devices registered with the server 1303. For example, when two devices log in to the server 1303 with the same user account, or when two devices have each other's user identification information, the server 1303 may determine that the two devices are mutually trusted devices. have. The electronic device 1301 may obtain a certificate list including the second certificate data 1312 from the server 1303.

The electronic device 1301 includes the second certificate data 1312 in the certificate list of the electronic device 1301 among devices 1330 located nearby, and the first certificate data 1311 of the electronic device 1301 A secure communication connection 1320 with the external electronic device 1302 having a may be established. The electronic device 1301 may not establish a communication connection with the device 1304 that does not include certificate data in the certificate list of the electronic device 1301 or does not have the first certificate data of the electronic device 1301.

13 illustrates an embodiment in which certificate data is generated from a separate certificate list, according to other embodiments, the certificate list or certificate data may be included in the user identification information list. For example, the server 1303 may convert the second certificate data of the external electronic device 1302 or a certificate list including the second certificate data into a user identification information list of the electronic device 1301 (for example, the first user of FIG. 7 ). After inserting into the identification information list 713, the electronic device 1301 may obtain the second certificate data through the first user identification information list 713 received from the server 1303.

14 illustrates an electronic device 1301 and an external electronic device in a process in which an electronic device 1301 shares content using a communication channel connected to an external electronic device 1302 logged in with the same user account, according to an embodiment. 1302) shows an example of a screen displayed.

The electronic device 1301 according to an embodiment identifies a device for the external electronic device 1302 registered in the external server together with the certificate of the external electronic device 1302 from an external server (eg, the server 203 of FIG. 2) You can receive information. The device identification information may be, for example, a nickname set by a user for the external electronic device 1302 registered in the external server. Alternatively, device identification information for the external electronic device 1302 may be set locally in the electronic device 1301. According to an embodiment, when a communication connection with the external electronic device 1302 is established (for example, operation 429 in FIG. 4), the electronic device 1301 according to an embodiment displays a visual item 1410 indicating device identification information for the external electronic device 1302. ) Can be displayed.

According to an embodiment, the electronic device 1301 may display a device list including device identification information indicating at least one external electronic device 1302 for which mutual authentication has been completed. When a user input for selecting device identification information indicating the external electronic device 1302 in the device list is received, the electronic device 1301 may transmit data for sharing content to the external electronic device 1302.

When content is received through a communication connection connected to the electronic device 1301, the external electronic device 1302 according to an embodiment displays a visual item 1420 indicating device identification information indicating the electronic device 1301 that transmitted the content. Can be displayed.

15 illustrates a process in which the electronic device 1301 shares content using a communication channel connected to the external electronic device 1302 of another user, according to an embodiment, the electronic device 1301 and the external electronic device 1302 An example of a screen to be displayed is shown.

The electronic device 1301 may associate and store the second certificate data of the certificate list with the second user identification information of the external electronic device 1302 stored in a storage (eg, contact storage) of the electronic device 1301. For example, when the second user identification information is the father's contact information, the electronic device 1301 may store the father's contact information including the second certificate data. Alternatively, the electronic device 1301 may receive contact information including second certificate data from an external server (eg, the server 203 of FIG. 2 ).

When the electronic device 1301 establishes a communication connection with the external electronic device 1302 based on the second certificate data, the electronic device 1301 displays a visual item 1510 indicating second user identification information (for example, the display device of FIG. 1 ( 160)). The visual item 1510 representing the second user identification information may be, for example, a nickname included in the contact information.

According to an embodiment, the electronic device 1301 may display a device list including user identification information indicating at least one external electronic device 1302 for which mutual authentication has been completed. When a user input for selecting user identification information representing the external electronic device 1302 in the device list is received, the electronic device 1301 may attempt to transmit data for sharing content to the external electronic device 1302 .

When receiving content through a communication connection established based on the first certificate data of the electronic device 1301, the external electronic device 1302 according to an embodiment provides first user identification information indicating the electronic device 1301. The indicated visual item 1520 may be displayed.

16 illustrates a setting UI 1602 of an electronic device according to an embodiment.

In FIG. 16, the electronic device 1601 (eg, the electronic device 201 of FIG. 2) may provide a setting UI 1602 on the display 1660. For example, the setting UI 1602 may provide a setting for sharing content. For example, the setting UI 1602 may include an interface 1610 for setting activation of content sharing. For example, the electronic device 1601 may activate or deactivate a content sharing function based on an input to the interface 1610.

For example, the setting UI 1602 may provide a content sharing range setting. When the friend mode 1620 is set, the electronic device 1601 may share content only with the external electronic device stored in the contact information of the electronic device 1601 and the user's electronic device. When the all mode 1630 is set, the electronic device 1601 may share content with all nearby external electronic devices. For example, in the friend mode 1620, the electronic device 1601 displays the advertising packet even if it receives an advertising packet from an electronic device other than the user's electronic device and/or an external electronic device that is not stored in the contact information (1660). May not be displayed on.

According to an embodiment, the electronic device 1601 indicates completion when content sharing is activated (e.g., when sharing is activated in response to receiving an input to the interface 1610) or when content sharing is activated. When an input (eg, an input to Done of button 1640) is received, an advertising signal may be broadcast (eg, operation 415 of FIG. 4 or operation 613 of FIG. 6 ).

17 illustrates a sharing UI 1701 of an electronic device according to an embodiment.

For example, the electronic device 1601 (eg, the electronic device 201 of FIG. 2) may display a shared UI 1701 providing information and selection on the recognized external electronic device on the display 1660. have. For example, external electronic devices displayed on the sharing UI 1701 may be external electronic devices recognized by receiving advertising signals from external electronic devices.

According to an embodiment, the electronic device 1601 may generate a list of external electronic devices based on the type of the external electronic device. For example, the sharing UI 1701 may include its own device list 1710, a contact-based device list 1720, and another device list 1730. The own device list 1710 may include information on other electronic devices belonging to the same account as the electronic device 1601 (eg, the first same account device 1711 and the second same account device 1712). . The contact-based device list 1720 includes external electronic devices that match the contact information of the electronic device 1601 (for example, a first external electronic device 1721, a second external electronic device 1722, and a third external electronic device ( 1723)). For example, the contact-based device list 1720 is an external electronic device (eg, a first external device) that has transmitted a response signal (eg, an advertising signal) to the advertising signal transmitted by the electronic device 1601. It may include at least one of the electronic device 1721, the second external electronic device 1722, or the third external electronic device 1722. For example, the electronic device 201 may include identification information received from an external electronic device (eg, contact information such as a phone number, email address, or mail account, device-specific identification information such as international mobile equipment identity), or social A contact-based device list 1720 may be displayed based on service subscriber identification information such as a media service account). The other electronic device list 1730 may include information on electronic devices that do not belong to the account of the electronic device 1601 and do not match contact information (for example, the first other device 1731 and the second other device 1732). I can.

According to an embodiment, the electronic device 1601 includes a list of external electronic devices displayed on the sharing UI 1701 (eg, its own device list 1710, a contact-based device list 1720, or another device list 1730). An input for selecting at least one external electronic device to transmit content among the external electronic devices of )) may be received. The electronic device 1601 establishes a secure communication channel by transmitting a connection request signal to at least one external electronic device based on the selection input and receiving a response thereto from at least one external electronic device (e.g., the operation of FIG. 6 ). 623).

According to an embodiment, when an external electronic device having the same account as its own account is found in the vicinity, the electronic device 1601 may display the corresponding external electronic device on the electronic device list 1710 of the electronic device 1601. For example, the electronic device 1601 may display the external electronic device in its electronic device list 1710 without performing a separate mutual authentication of the external electronic device of the account. When the electronic device 1601 transmits data to an external electronic device included in the electronic device list 1710, the electronic device 1601 may authenticate the external electronic device using certificate data stored in the electronic device 1601. When authentication is successfully performed, the electronic device 1601 may transmit content (eg, data) to a corresponding external electronic device.

According to an embodiment, when an external electronic device included in its contact storage is found, the electronic device 1601 may display the external electronic device in the contact-based device list 1720. When data is transmitted to an external electronic device included in the contact-based device list 1720, authentication for the external electronic device may be performed. For example, the electronic device 1601 includes data (eg, a certificate and/or hash information related to a certificate) received from an external electronic device and data stored in a contact information (eg, a certificate and/or certificate) Hash information related to), it is possible to recognize and authenticate an external electronic device. For example, when transmitting data to an external electronic device in the contact-based device list 1720, the electronic device 1601 may perform mutual authentication with the external electronic device using a certificate in the contact storage. The electronic device 1601 may transmit data to the external electronic device when mutual authentication is successfully performed.

According to an embodiment, when an external electronic device other than the electronic device and the contact's electronic device is found, the electronic device 1601 may display the external electronic device on the other electronic device list 1730. When data is transmitted to an external electronic device included in the other electronic device list 1730, authentication for the external electronic device may be performed. According to an embodiment, the electronic device 1601 may authenticate an external electronic device included in the other electronic device list 1730 based on a personal identification number (PIN) code. For example, the electronic device 1601 may not store certificate data for an external electronic device in the other electronic device list 1730. In this case, the electronic device 1601 may generate a PIN code for establishing a secure channel and perform mutual authentication for the external electronic device based on the PIN code.

According to an embodiment, the electronic device 1601 may display only some of the identified external electronic devices on the sharing UI 1701. For example, based on the state of the external electronic device received from the external electronic devices, the electronic device 1601 may determine whether to display the external electronic device. When the external electronic device transmits information indicating the screen off state, the electronic device 1601 may not display the corresponding external electronic device on the shared UI 1701. When the external electronic device transmits information indicating the screen-on state, the electronic device 1601 may display the corresponding external electronic device on the shared UI 1701. Only when the external electronic device allows content sharing, the electronic device 1601 may be set to display the corresponding external electronic device on the sharing UI 1701.

In the example of FIG. 17, when the electronic device 1601 is set to the friend mode 1620 of FIG. 16, the electronic device 1601 may omit the other device list 1730 from the sharing UI 1701.

18 illustrates examples of icons according to a data sharing situation according to an embodiment.

According to an embodiment, the electronic device (eg, the electronic device 1601 of FIG. 17) may display the status of the external electronic device through an icon of the sharing UI 1701. In FIG. 18, various status display icons based on the first external electronic device 1721 of FIG. 17 may be described.

According to an embodiment, the electronic device 1601 may display an icon based on a communication state. The first icon 1801 indicates that data transmission to a corresponding external electronic device is waiting. For example, when data for another external electronic device is being transmitted, and the corresponding external electronic device is waiting to receive data after data transmission to the other external electronic device is completed, the corresponding electronic device is indicated by a first icon 1801 It can be displayed in a form similar to. The second icon 1802 indicates that a secure connection to a corresponding external electronic device is being established. For example, while performing operations 415 to 429 of FIG. 4, the electronic device 1601 may display the external electronic device in a form similar to the second icon 1802. A third icon 1803 indicates that data is being transmitted to a corresponding external electronic device. A fourth icon 1804 indicates that data transmission to the corresponding external electronic device has been successfully completed. A fifth icon 1805 indicates that at least part of data transmission to the corresponding external electronic device has failed.

The icons illustrated in FIG. 18 are exemplary, and embodiments of the present document are not limited thereto. For example, the electronic device 1601 may display the state of the external electronic device using text information.

19 illustrates a UI 1991 indicating a data sharing state according to an embodiment.

In the example of FIG. 19, the electronic device 1601 (eg, the electronic device 201 of FIG. 2) may display a UI 1991 indicating a data sharing state on the display 1660. The electronic device 1601 may provide sharing status information using an icon and text. For example, the first electronic device 1901 is waiting, the second electronic device 1902 is connecting, the third electronic device 1902 fails to transmit data, and the fourth electronic device 1904 is transmitting data. Then, the fifth electronic device 1905 may indicate completion of data transmission.

When an input for activating the notification bar (eg, a drag input 1990) is received, the electronic device 1601 may display the UI of FIG. 20 on the display 1660.

20 illustrates a UI indicating a data sharing state according to an embodiment.

Referring to reference number 2001, in response to an input for activating the notification bar of FIG. 19 (eg, a drag input 1990), the electronic device 1601 displays a notification bar including a data sharing status notification 2010. Can be displayed. The sharing status notification 2010 may include brief information on data sharing (eg, information on an external electronic device to be shared).

When an input for the sharing status notification 2010 is received with reference to 2002, the electronic device 1601 may provide a specific sharing status. For example, the sharing state information of reference numeral 2001 may include more specific information than the UI 1991 indicating the sharing state of FIG. 19. For example, in the case of the third electronic device 1903, the electronic device 1601 may display on the display 1660 how many of several files have failed to be transmitted. In the case of the fifth electronic device 1905, the electronic device 1601 may display on the display 1660 how many files have been successfully transmitted.

21 illustrates a connection request UI from an external electronic device.

According to an embodiment, the electronic device (eg, the electronic device 1601 of FIG. 15) may transmit a connection request to the external electronic device 2102 (eg, the external electronic device 202 of FIG. 2 ). For example, after authentication of the external electronic device 2102 (eg, operation 621 in FIG. 6), and before establishing a secure communication channel (eg, operation 623 in FIG. 6), the electronic device 1601 ), you can send a connection request. For example, when the connection request is accepted by the external electronic device 2102, the electronic device 1601 may establish a secure communication channel.

The connection request UIs of FIG. 21 may be displayed on the display 2160 of the external electronic device 2102 when a connection request is received from the electronic device. The connection request UI may include information for prompting the user of the external electronic device 2102 whether to receive content.

With reference to reference number 2191, the connection request UI 2110 may be a pop-up message inquiring whether to receive a file. For example, the connection request UI 2110 displays the file sender's information 2113 (e.g. Alice), the number of files (2112) (e.g. 3), and/or PIN code information 2111 (e.g. 007893). Can include. In an example, when the external electronic device 2102 fails to obtain information on the number of files from the connection request, the number of files 2112 may be omitted.

With reference to reference number 2102, the connection request UI 2120 may be a pop-up message inquiring whether or not to receive a file. For example, the connection request UI 2120 may include the file sender's information 2113 (eg, Alice), the number of files 2112 (eg, 3), and/or a thumbnail 2121 of a file. For example, after transmitting the connection request signal, the electronic device 1601 may transmit data of the thumbnail 2121 to the external electronic device 2102 using one or more signals. For another example, the electronic device 1601 may transmit the address of the thumbnail 2121 (eg, a uniform resource locator (URL) or a compressed URL) to the external electronic device 2102. As another example, the electronic device 1601 may transmit summary information of a file instead of the thumbnail 2121. In this case, the summary information may include information (eg, text information) extracted based on machine learning on the content to be transmitted.

According to an embodiment, the external electronic device 2102 may display a connection request UI based on a relationship with the electronic device 1601. For example, when the external electronic device 2102 is an electronic device of an account stored in the contact information of the electronic device 1601, the external electronic device 2102 may display the connection request UI 2120 of reference number 2192. For another example, when the external electronic device 2102 is another device (for example, the other device 1731 or 1732 in FIG. 17), the external electronic device 2102 communicates with the electronic device 1601 based on the PIN code. can do. In this case, the external electronic device 2102 may display the connection request UI 2110 of reference number 2191.

When the external electronic device 2102 receives a connection permission input (eg, an input for “Accept”), the external electronic device 2102 may transmit a response signal instructing the connection permission to the electronic device 1601. . For example, when the connection acceptance response is received, the electronic device 1601 may establish a secure connection with the external electronic device 2102. When the external electronic device 2102 receives a connection rejection input (eg, an input for “Decline”), the external electronic device 2102 may transmit a response signal indicating connection rejection to the electronic device 1601. . In this case, the electronic device 1601 may display information indicating failure of data transmission (eg, the fifth icon 1805 of FIG. 18 ).

As described above, the electronic device disclosed in this document includes a memory for storing a certificate list including first certificate data of the electronic device and second certificate data of an external electronic device, a short-range wireless communication circuit, and the memory and A processor operatively connected to the short-range wireless communication circuit, and the memory, when executed, detects a trigger event that causes the processor to execute an operation of establishing a communication connection with a device surrounding the electronic device, In response to detection of the trigger event, controlling the short-range wireless communication circuit to broadcast an advertisement packet generated based on the first certificate data, and receiving a response packet from the external electronic device in response to the advertisement packet In one case, third certificate data is obtained from the response packet, the external electronic device is authenticated based on the second certificate data and the third certificate data, and when the external electronic device is authenticated, the external electronic device and Instructions for establishing a secure communication channel can be stored.

According to an embodiment, in the instructions, the processor obtains a first hash value from the first certificate data using a hash function, generates the advertisement packet to include the first hash value, and the response packet It may be configured to obtain the third certificate data including a second hash value from and authenticate the external electronic device based on a result of comparing the second hash value with the hash value generated from the second certificate data. have.

According to an embodiment, the electronic device further includes a remote wireless communication circuit configured to communicate with an external server, and the instructions include the first certificate data and the electronic device by the processor through the remote wireless communication circuit. The electronic device may be configured to register the first user identification information for to the external server to which the electronic device is logged in, based on a user account.

According to an embodiment, the memory stores second user identification information on the external electronic device, and the instructions are based on the second user identification information by the processor through the remote wireless communication circuit. The second certificate corresponding to the second user identification information from the external server in response to the second user identification information, transmitted to the external server to which the electronic device is logged in, and through the remote wireless communication circuit It can be configured to receive data.

According to an embodiment, the second user identification information may include contact information corresponding to the external electronic device.

According to an embodiment, the electronic device further includes a display, and in the instructions, the processor displays a visual item representing the second user identification information through the display, and receives a user input for the visual item. And, in response to the user input, content data corresponding to the trigger event may be transmitted to the external electronic device through the secure communication channel through the short-range wireless communication circuit.

According to an embodiment, the instructions include the processor obtaining a shared key shared with the external electronic device, encrypting the first certificate data based on the shared key, and including the encrypted first certificate data Thus, it may be configured to generate the advertisement packet.

As described above, the electronic device disclosed in this document stores first certificate data of the electronic device, first user identification information for an external electronic device, and second certificate data corresponding to the first user identification information. A memory, a short-range wireless communication circuit, and a processor operatively connected to the memory and the short-range wireless communication circuit, wherein the memory, when executed, the processor transmits third certificate data through the short-range wireless communication circuit. When receiving an advertisement packet containing, and in response to receiving the advertisement packet, comparing the third certificate data with the second certificate data, and when the third certificate data and the second certificate data match, the second certificate data 1 A response packet generated based on certificate data is transmitted to the external electronic device through the short-range wireless communication circuit, and based on the response of the external electronic device to the transmitted response packet through the short-range wireless communication circuit Instructions for establishing a secure communication channel with the external electronic device may be stored.

As described above, the electronic device disclosed in this document includes a memory for storing first certificate data of the electronic device and second certificate data of an external electronic device, a short-range wireless communication circuit, a long-range wireless communication circuit, and the memory, And a processor operatively connected to the short-range wireless communication circuit and the long-range wireless communication circuit, and the memory includes, when executed, the processor, through the long-range wireless communication circuit, on an external server based on a user account. A trigger event for performing a login, receiving an account key value corresponding to the user account from the external server through the remote wireless communication circuit, and establishing a communication connection with a device around the electronic device is performed. Sensing, and in response to detection of the trigger event, controlling the short-range wireless communication circuit to broadcast a message including the account key value, and the external device having the same key value as the account key value based on the message Identify the electronic device, transmit the first certificate data to the external electronic device through the short-range wireless communication circuit, receive third certificate data from the external electronic device through the short-range wireless communication circuit, and the Instructions for authenticating the external electronic device based on the second certificate data and the third certificate data may be stored.

According to an embodiment, the instructions may be configured such that the processor modulates the message using a bloom filter and controls the short-range wireless communication circuit to broadcast the modulated message.

According to an embodiment, the instructions are transmitted by the processor to the external server through the remote wireless communication circuit, user-specific information, and through the remote wireless communication circuit, from the external server. It may be configured to receive the account key value generated based on the user-specific information.

According to an embodiment, the instructions may be configured such that the processor registers the first certificate data to the external server based on the user account through the remote wireless communication circuit.

According to an embodiment, the instructions may be configured such that the processor receives the second certificate data registered in the external server from the external server based on the user account through the remote wireless communication circuit.

As described above, the electronic device disclosed in this document includes a memory for storing first certificate data of the electronic device and second certificate data of an external electronic device, a short-range wireless communication circuit, a long-range wireless communication circuit, and the memory, And a processor operatively connected to the short-range wireless communication circuit and the long-range wireless communication circuit, and the memory includes, when executed, the processor, through the long-range wireless communication circuit, on an external server based on a user account. Log in, receive an account key value corresponding to the user account from the external server through the remote wireless communication circuit, receive a message including the account key value through the short-range wireless communication circuit, the Based on a message, the external electronic device having the same key value as the account key value is identified, and through the short-range wireless communication circuit, third certificate data is received from the external electronic device, and the second certificate data and the Authenticate the external electronic device based on the third certificate data, and store instructions for transmitting the first certificate data to the external electronic device through the short-range wireless communication circuit when the authentication of the external electronic device is completed. I can.

As described above, a method of performing communication by an electronic device disclosed in this document with an external electronic device includes: storing first certificate data of the electronic device and second certificate data of the external electronic device, and the electronic device Detecting a trigger event for establishing a communication connection with a nearby device, in response to detection of the trigger event, broadcasting an advertisement packet generated based on the first certificate data, and a response to the advertisement packet When a response packet is received from the external electronic device, obtaining third certificate data from the response packet, authenticating the external electronic device based on the second certificate data and the third certificate data, and When the external electronic device is authenticated, an operation of establishing a secure communication channel with the external electronic device may be included.

According to an embodiment, the method includes an operation of logging in by the electronic device to an external server based on a user account, transmitting second user identification information of the external electronic device to the external server, and the second In response to the user identification information, the operation of receiving the second certificate data corresponding to the second user identification information from the external server may be included.

As described above, a method of performing communication by an electronic device disclosed in this document with an external electronic device includes an operation of storing first certificate data of the electronic device and second certificate data of the external electronic device, and a third certificate. Receiving an advertisement packet including data, in response to receiving the advertisement packet, comparing the third certificate data with the second certificate data, and matching the third certificate data with the second certificate data In case, the operation of transmitting a response packet generated based on the first certificate data to the external electronic device, and establishing a secure communication channel with the external electronic device based on a response of the external electronic device to the transmitted response packet. It may include an operation to establish.

As described above, a method of performing communication by an electronic device disclosed in this document with an external electronic device includes an operation of storing first certificate data of the electronic device and second certificate data of the external electronic device, in an external server. An operation of performing a login based on a user account, an operation of receiving an account key value corresponding to the user account from the external server, an operation of detecting a trigger event for establishing a communication connection with a device surrounding the electronic device, the In response to detection of a trigger event, broadcasting a message including the account key value, identifying the external electronic device having the same key value as the account key value based on the message, the external electronic device Transmitting the first certificate data to, receiving third certificate data from the external electronic device, and authenticating the external electronic device based on the second certificate data and the third certificate data. can do.

According to an embodiment, the method may further include receiving the second certificate data registered in the external server from the external server based on the user account.

As described above, a method of performing communication by an electronic device disclosed in this document with an external electronic device includes an operation of storing first certificate data of the electronic device and second certificate data of the external electronic device, in an external server. Logging in based on a user account, receiving an account key value corresponding to the user account from the external server, receiving a message including the account key value through the short-range wireless communication circuit, the Checking the external electronic device having the same key value as the account key value based on a message, receiving third certificate data from the external electronic device, based on the second certificate data and the third certificate data Thus, an operation of authenticating the external electronic device, and when authentication of the external electronic device is completed, transmitting the first certificate data to the external electronic device.

An electronic device according to various embodiments disclosed in this document may be a device of various types. The electronic device may include, for example, a portable communication device (eg, a smart phone), a computer device, a portable multimedia device, a portable medical device, a camera, a wearable device, or a home appliance. The electronic device according to the embodiment of the present document is not limited to the above-described devices.

Various embodiments of the present document and terms used therein are not intended to limit the technical features described in this document to specific embodiments, and should be understood to include various modifications, equivalents, or substitutes of the corresponding embodiments. In connection with the description of the drawings, similar reference numerals may be used for similar or related components. The singular form of a noun corresponding to an item may include one or a plurality of the items unless clearly indicated otherwise in a related context. In this document, “A or B”, “at least one of A and B”, “at least one of A or B”, “A, B or C”, “at least one of A, B and C” and “A, Each of phrases such as "at least one of B or C" may include any one of the items listed together in the corresponding one of the phrases, or all possible combinations thereof. Terms such as "first", "second", or "first" or "second" may be used simply to distinguish the component from other Order) is not limited. Some (eg, first) component is referred to as “coupled” or “connected” to another (eg, second) component, with or without the terms “functionally” or “communicatively”. When mentioned, it means that any of the above components can be connected to the other components directly (eg by wire), wirelessly, or via a third component.

The term "module" used in this document may include a unit implemented in hardware, software, or firmware, and may be used interchangeably with terms such as logic, logic blocks, parts, or circuits. The module may be an integrally configured component or a minimum unit of the component or a part thereof that performs one or more functions. For example, according to an embodiment, the module may be implemented in the form of an application-specific integrated circuit (ASIC).

Various embodiments of the present document include one or more instructions stored in a storage medium (eg, internal memory 136 or external memory 138) that can be read by a machine (eg, electronic device 101). It may be implemented as software (for example, the program 140) including them. For example, the processor (eg, the processor 120) of the device (eg, the electronic device 101) may call and execute at least one command among one or more commands stored from a storage medium. This enables the device to be operated to perform at least one function according to the at least one command invoked. The one or more instructions may include code generated by a compiler or code executable by an interpreter. The device-readable storage medium may be provided in the form of a non-transitory storage medium. Here,'non-transient' only means that the storage medium is a tangible device and does not contain a signal (e.g., electromagnetic waves), and this term refers to the case where data is semi-permanently stored in the storage medium. It does not distinguish between temporary storage cases.

According to an embodiment, a method according to various embodiments disclosed in the present document may be provided by being included in a computer program product. Computer program products can be traded between sellers and buyers as commodities. The computer program product is distributed in the form of a device-readable storage medium (e.g. compact disc read only memory (CD-ROM)), or through an application store (e.g. Play Store™) or two user devices ( It can be distributed (e.g., downloaded or uploaded) directly between, e.g. smartphones). In the case of online distribution, at least a part of the computer program product may be temporarily stored or temporarily generated in a storage medium that can be read by a device such as a server of a manufacturer, a server of an application store, or a memory of a relay server.

According to various embodiments, each component (eg, module or program) of the above-described components may include a singular number or a plurality of entities. According to various embodiments, one or more components or operations among the above-described corresponding components may be omitted, or one or more other components or operations may be added. Alternatively or additionally, a plurality of components (eg, a module or program) may be integrated into one component. In this case, the integrated component may perform one or more functions of each component of the plurality of components in the same or similar to that performed by the corresponding component among the plurality of components prior to the integration. . According to various embodiments, operations performed by a module, program, or other component may be sequentially, parallel, repeatedly, or heuristically executed, or one or more of the operations may be executed in a different order or omitted. Or one or more other actions may be added.

Claims (20)

In the electronic device,
A memory for storing a certificate list including first certificate data of the electronic device and second certificate data of an external electronic device;
Short-range wireless communication circuit; And
And a processor operatively connected to the memory and the short-range wireless communication circuit,
The memory, when executed, the processor,
Detecting a trigger event for executing an operation of establishing a communication connection with a device around the electronic device,
In response to detection of the trigger event, controlling the short-range wireless communication circuit to broadcast an advertisement packet generated based on the first certificate data,
When a response packet is received from the external electronic device in response to the advertisement packet, third certificate data is obtained from the response packet,
Authenticate the external electronic device based on the second certificate data and the third certificate data,
An electronic device that stores instructions for establishing a secure communication channel with the external electronic device when the external electronic device is authenticated. The method according to claim 1,
The instructions are the processor,
Obtaining a first hash value from the first certificate data using a hash function,
Generating the advertisement packet to include the first hash value,
Obtaining the third certificate data including a second hash value from the response packet,
The electronic device, configured to authenticate the external electronic device based on a result of comparing the second hash value with the hash value generated from the second certificate data. The method according to claim 1,
Further comprising a long-range wireless communication circuit configured to communicate with an external server,
The instructions are the processor,
The electronic device, configured to register the first certificate data and first user identification information for the electronic device in the external server to which the electronic device logs in based on a user account through the long-distance wireless communication circuit. The method of claim 3,
The memory stores second user identification information on the external electronic device,
The instructions are the processor,
Transmitting the second user identification information to the external server to which the electronic device is logged in, based on a user account, through the long-distance wireless communication circuit,
The electronic device, configured to receive the second certificate data corresponding to the second user identification information from the external server in response to the second user identification information through the long-distance wireless communication circuit. The method of claim 4,
The second user identification information includes contact information corresponding to the external electronic device. The method of claim 4,
Further comprising a display,
The instructions are the processor,
Display a visual item representing the second user identification information through the display,
Receive user input for the visual item,
In response to the user input, the electronic device configured to transmit content data corresponding to the trigger event to the external electronic device through the secure communication channel through the short-range wireless communication circuit. The method according to claim 1,
The instructions are the processor,
Obtaining a shared key shared with the external electronic device,
Encrypting the first certificate data based on the shared key,
The electronic device, configured to generate the advertisement packet including the encrypted first certificate data. In the electronic device,
A memory for storing first certificate data of the electronic device, first user identification information of the external electronic device, and second certificate data corresponding to the first user identification information;
Short-range wireless communication circuit; And
And a processor operatively connected to the memory and the short-range wireless communication circuit,
The memory, when executed, the processor,
Receiving an advertisement packet including third certificate data through the short-range wireless communication circuit,
In response to receiving the advertisement packet, comparing the third certificate data with the second certificate data,
When the third certificate data and the second certificate data are matched, a response packet generated based on the first certificate data is transmitted to the external electronic device through the short-range wireless communication circuit,
The electronic device storing instructions for establishing a secure communication channel with the external electronic device based on a response of the external electronic device to the transmitted response packet through the short-range wireless communication circuit. In the electronic device,
A memory for storing first certificate data of the electronic device and second certificate data of an external electronic device;
Short-range wireless communication circuit;
Long-range wireless communication circuit; And
A processor operatively connected to the memory, the short-range wireless communication circuit, and the long-range wireless communication circuit,
The memory, when executed, the processor,
Through the long-distance wireless communication circuit, log in to an external server based on a user account,
Through the long-distance wireless communication circuit, receiving an account key value corresponding to the user account from the external server,
Detecting a trigger event for executing an operation of establishing a communication connection with a device around the electronic device,
In response to detection of the trigger event, controlling the short-range wireless communication circuit to broadcast a message including the account key value,
Identifying the external electronic device having the same key value as the account key value based on the message,
Transmitting the first certificate data to the external electronic device through the short-range wireless communication circuit,
Through the short-range wireless communication circuit, receiving third certificate data from the external electronic device,
An electronic device that stores instructions for authenticating the external electronic device based on the second certificate data and the third certificate data. The method of claim 9,
The instructions are the processor,
Modulate the message using a bloom filter,
The electronic device configured to control the near field communication circuit to broadcast the modulated message. The method of claim 10,
The instructions are the processor,
Transmitting user-specific information for identifying a user to the external server through the long-distance wireless communication circuit,
The electronic device, configured to receive the account key value generated based on the user-specific information from the external server through the long-range wireless communication circuit. The method of claim 10,
The instructions are the processor,
The electronic device, configured to register the first certificate data to the external server based on the user account through the long-range wireless communication circuit. The method of claim 10,
The instructions are the processor,
The electronic device, configured to receive, from the external server, the second certificate data registered in the external server based on the user account through the long-distance wireless communication circuit. In the electronic device,
A memory for storing first certificate data of the electronic device and second certificate data of an external electronic device;
Short-range wireless communication circuit;
Long-range wireless communication circuit; And
A processor operatively connected to the memory, the short-range wireless communication circuit, and the long-range wireless communication circuit,
The memory, when executed, the processor,
Through the long-distance wireless communication circuit, log in to an external server based on a user account,
Through the long-distance wireless communication circuit, receiving an account key value corresponding to the user account from the external server,
Receiving a message including the account key value through the short-range wireless communication circuit,
Identifying the external electronic device having the same key value as the account key value based on the message,
Through the short-range wireless communication circuit, receiving third certificate data from the external electronic device,
Authenticating the external electronic device based on the second certificate data and the third certificate data,
When authentication of the external electronic device is completed, the electronic device stores instructions for transmitting the first certificate data to the external electronic device through the short-range wireless communication circuit. In a method for an electronic device to communicate with an external electronic device,
Storing first certificate data of the electronic device and second certificate data of the external electronic device;
Detecting a trigger event for establishing a communication connection with a device surrounding the electronic device;
In response to detecting the trigger event, broadcasting an advertisement packet generated based on the first certificate data;
Acquiring third certificate data from the response packet when a response packet is received from the external electronic device in response to the advertisement packet;
Authenticating the external electronic device based on the second certificate data and the third certificate data; And
And establishing a secure communication channel with the external electronic device when the external electronic device is authenticated. The method of claim 15,
Logging in to an external server by the electronic device based on a user account;
Transmitting second user identification information on the external electronic device to the external server; And
And receiving the second certificate data corresponding to the second user identification information from the external server in response to the second user identification information. In a method for an electronic device to communicate with an external electronic device,
Storing first certificate data of the electronic device and second certificate data of the external electronic device;
Receiving an advertisement packet including third certificate data;
In response to receiving the advertisement packet, comparing the third certificate data with the second certificate data;
When the third certificate data and the second certificate data match, transmitting a response packet generated based on the first certificate data to the external electronic device; And
And establishing a secure communication channel with the external electronic device based on a response of the external electronic device to the transmitted response packet. In a method for an electronic device to communicate with an external electronic device,
Storing first certificate data of the electronic device and second certificate data of the external electronic device;
Logging in to an external server based on a user account;
Receiving an account key value corresponding to the user account from the external server;
Detecting a trigger event for establishing a communication connection with a device surrounding the electronic device;
Broadcasting a message including the account key value in response to detection of the trigger event;
Identifying the external electronic device having the same key value as the account key value based on the message;
Transmitting the first certificate data to the external electronic device;
Receiving third certificate data from the external electronic device; And
And authenticating the external electronic device based on the second certificate data and the third certificate data. The method of claim 18,
The method further comprising receiving the second certificate data registered in the external server from the external server based on the user account. In a method for an electronic device to communicate with an external electronic device,
Storing first certificate data of the electronic device and second certificate data of the external electronic device;
Logging in to an external server based on a user account;
Receiving an account key value corresponding to the user account from the external server;
Receiving a message including the account key value through the short-range wireless communication circuit;
Identifying the external electronic device having the same key value as the account key value based on the message;
Receiving third certificate data from the external electronic device;
Authenticating the external electronic device based on the second certificate data and the third certificate data; And
And transmitting the first certificate data to the external electronic device when authentication of the external electronic device is completed.

Images