TW202029686A - Device identifying method, identifying device, and device pairing method - Google Patents

Abstract

A device identifying method for identifying whether a candidate member device belongs to a device set or not by an identifying device. The device set comprising at least one member device. The method comprises: (a) establishing a connection between the identifying device and a first member device among the member device, to acquire a set ID and at least one identifying key from the first member device; (b) discovering the candidate member device according to the set ID; (c) generating identifying data according to the identifying key and transmitting the identifying data to the candidate member device; and (d) determining whether the candidate member device belongs to the device set or not according to a comparing result for the identifying data.

Description

Device identification method, identification device and device pairing method

Cross-references to related applications:

This application claims the priority of the U.S. Provisional Application No. 62/616,040 filed on January 11, 2018, and the entire content of the application is incorporated herein by reference.

This application relates to a device identification method, an identification device, and a device pairing method.

In recent years, short-range wireless communication algorithms such as bluetooth have become very popular. Such an algorithm can easily establish a connection between two different devices. However, the pairing methods of these algorithms have some disadvantages.

Fig. 1 is a schematic diagram showing the operation of the related Bluetooth device pairing method. As shown in Figure 1, if the mobile phone 100 wants to pair with multiple other devices (such as a speaker S_Y and a display D_Y), the mobile phone 100 must pair with the speaker S_Y and the display D_Y one-to-one ( on by one). The entire process of pairing must be repeated for each paired device. Therefore, if the user wants to pair the mobile phone 100 with multiple devices, a lot of time will be wasted.

In addition, as shown in Figure 1, the user may pair the mobile phone 100 with a wrong device such as the speaker S_N or the display D_N while pairing the speaker S_Y and the display D_Y. Therefore, it is stored in the mobile phone. The data in 110 may be played on other people's devices. To make matters worse, if the mobile phone 100 is paired with a wrong device, the data stored in the mobile phone 110 may be stolen.

One of the objectives of the present application is to provide a device identifying method (device identifying method) and an identifying device, which can identify whether a candidate member device (candidate member device) belongs to a device set through the identifying device.

The purpose of this application is to provide a device identification method for identifying whether a candidate member device belongs to a device set by identifying a device. The device set includes at least one member device. The method includes: (a) establishing a connection between the identification device and a first member device of the at least one member device to obtain a set ID and at least one identification key from the first member device; ( b) Discover the candidate member device based on the set ID; (c) Generate identification data based on the identification key and send the identification data to the candidate member device; and (d) According to the comparison of the identification data As a result, it is determined whether the candidate member device belongs to the device set.

Another object of the present application is to provide an identification device that can identify whether a candidate member device belongs to a device set, the device set includes at least one member device, and the identification device includes a processing circuit configured to execute at least one Program code to perform the following operations: (a) establish a connection between the identification device and a first member device of the at least one member device to obtain a set ID and at least one identification key from the first member device; (b) ) Discover the candidate member device based on the set ID; (c) Generate identification data based on the identification key and send the identification data to the candidate member device; and (d) Determine the candidate based on the comparison result of the identification data Whether the member device belongs to the device set.

Another object of the present application is to provide a device pairing method for determining whether an identification device should be paired with a candidate member device, and the device pairing method includes: (a) at least one of the identification device and the device set A connection is established between the first member devices among the member devices to obtain the set ID and at least one identification key from the first member device; (b) find candidate member devices according to the set ID; (c) according to the identification key Generate identification data, and send the identification data to the candidate member device; (d) determine whether the candidate member device belongs to the device set according to the comparison result of the identification data; and (e) when the candidate member device belongs to the device set; When the device is set, the identification device and the candidate member device are paired; and when the candidate member device does not belong to the device set, the identification device and the candidate member device are not paired.

In view of the above-mentioned embodiments, the member devices can be easily discovered and can be strictly authenticated before pairing. Therefore, it can be ensured that the user's device is paired with a reliable device.

Those skilled in the art can understand these and other objects of the present invention without any doubt after reading the following detailed description of the preferred embodiments shown in the drawings.

In the following description, some embodiments are provided to explain the concept of the present application. Please note that each element in the embodiment can be implemented as hardware (for example, a circuit or device) or firmware (for example, a processor equipped with at least one program). Moreover, the elements in each embodiment may be separated into more elements or integrated into fewer elements. In addition, the terms "first" and "second" in the specification are only used to indicate that elements or steps are different, rather than indicating their order.

Figure 2 is a schematic diagram showing the operation of a device pairing method according to an embodiment of the present application. As shown in Figure 2, the device set DS includes at least one member device. In this embodiment, the device set DS includes more than one member device MD_1, MD_2...MD_n. The member devices MD_1, MD_2...MD_n can be any type of device, such as speakers, monitors, TVs, mobile phones, portable computers or tablets. The member devices MD_1, MD_2...MD_n of the device set DS have (comprise) the same set ID (illustrated as ID_1 in this example). In addition, the member devices MD_1, MD_2...MD_n of the device set DS each have different set public keys (different set public keys) for themselves. For example, the member device MD_1 has the collective public key PUK_1, the member device MD_2 has the collective public key PUK_2, and the member device MD_n has the collective public key PUK_n. In addition, each of the member devices MD_1, MD_2...MD_n also has the collective public keys of other member devices. In other words, each of the member devices MD_1, MD_2...MD_n includes all (all) set public keys PUK_1...PUK_n.

The identifying device (identifying device) 200 is used to implement the device identifying method disclosed in this application. The identification device 200 may be any device capable of performing a device identification method, such as a smart watch, a mobile phone, a laptop computer, or a tablet computer. Before finding the device to be identified (hereinafter referred to as candidate member device), the identification device 200 identifies the member devices in the identification device 200 and the member devices MD_1, MD_2...MD_n (for example, in this embodiment as a member device) Device MD_1 as an example) establish a connection between them. After the connection is established, the identification device 200 acquires the collective ID ID_1 and the collective public key PUK_1...PUK_n of each of the member devices MD_1, MD_2...MD_n from the member device MD_1. In other words, the identification device 200 obtains the set ID ID_1 and the set public keys PUK_1, PUK_2...PUK_n from the member device MD_1. In addition to the set ID ID_1 and the set public keys PUK_1, PUK_2...PUK_n, the identification device 200 can also obtain other set information (set information) from the member device MD_1, such as member device addresses.

After receiving the set public keys PUK_1, PUK_2...PUK_n, the identification device 200 discovers the candidate member device MD_c according to the set ID ID_1. The candidate member device MD_c belongs to the device set DS, but has not been paired with the identification device 200 yet. Therefore, the candidate member device MD_c also includes the set ID ID_1, so that the identification device 200 can find it. After the candidate member device MD_c is discovered, the identification device 200 generates identification data D_i according to the collective public key PUK_c of the candidate member device MD_c, and sends the identification data D_i to the candidate member device MD_c. If the candidate member device MD_c is a member device of the device set DS, the member device MD_1 also includes the set public key PUK_c, and the identification device 200 can obtain the set public key PUK_c from the member device MD_1. Next, the identification device 200 determines whether the candidate member device MD_c belongs to the device set DS according to the comparison result Re of the candidate member device MD_c to the identification data D_i. The detailed steps will be described in the following description.

Figure 3 is a schematic diagram showing the steps of a device pairing method according to an embodiment of the present application. As shown in FIG. 3, in step 301, the member device MD_1 generates advertisements of the device set DS, so that in step 303, the identification device 200 can establish a connection with the member device MD_1. In one embodiment, the connection is a Low Energy Secure Connection (LESC). In step 305, the identification device 200 performs a pairing procedure (pairing procedure, such as a Bluetooth pairing process), and thus, in step 307, the identification device 200 and the member device MD_1 can be paired. Next, in step 309, the identification device 200 obtains the set ID ID_1 and the set public keys PUK_1, PUK_2...PUKn, and the set public key PUK_c from the member device MD_1.

In step 311, the candidate member device MD_c generates an advertisement of the device set DS, so in step 313, the identification device 200 can discover the candidate member device MD_c and establish a connection with the candidate member device MD_c. In one embodiment, the connection is a Low Energy Secure Connection (LESC). After the connection is established, the identification device 200 performs authentication (authentication) in step 315 to identify whether the candidate member device MD_c belongs to the device set DS. If authentication is not performed, the device that has stolen or copied the above-mentioned set ID ID_1 will be regarded as a member device of the device set DS and can be paired with the identification device 200. If the authentication is passed in step 315, the candidate member device MD_c is determined to be a member device of the device set DS, and thus, in step 317, the identification device 200 can be paired with the candidate member device MD_c.

In an embodiment, the out of band (OOB) authentication for Bluetooth pairing may be referred to to perform the authentication in step 315. More specifically, the identification device 200 applies the collective public key PUB_c to encode the material generated with reference to out-of-band (OOB) authentication to generate the aforementioned identification material D_i. The term "reference" means to follow some of the steps of out-of-band (OOB) authentication, not all the steps of out-of-band (OOB) authentication. In other words, the authentication in step 315 is performed based on the modified out-of-band (OOB) authentication provided by this application instead of the original out-of-band (OOB) authentication.

Figure 4 shows a schematic flow diagram of the original out-of-band (OOB) authentication steps used for Bluetooth pairing. The steps in Figure 4 include:

Step 401:

The identification device 200 sets ra to a random number and sets rb=0.

Step 402:

The candidate member device MD_c sets rb as a random number, and sets ra=0.

Step 403:

The identification device 200 calculates the confirmation data (confirm) Ca through the function Ca = f4 (Pka, Pkb, ra, 0). Among them, Pka is the public key of the identification device 200, and Pkb is the public key of the candidate member device MD_c. PKa and PKb are exchanged before OOB certification starts. Please note that PKa and PKb are independent of the above-mentioned set of public keys and are not related to the device set DS.

Step 404:

The candidate member device MD_c calculates the confirmation data Cb through the function Cb = f4 (Pka, Pkb, rb, 0).

Step 405:

The identification device 200 sends A, the random number ra, and the confirmation data Ca to the candidate member device MD_c. Among them, A is the address of the identification device 200.

Step 406:

The candidate member device MD_c sends B, the random number rb, and the confirmation data Cb to the identification device 200. B is the address of the candidate member device MD_c.

Step 407:

The identification device 200 also calculates the confirmation data Cb through the function Cb=f4 (Pka, Pkb, rb, 0). Check whether this Cb is the same as the received Cb. If they are the same, continue with the following steps; otherwise, abort (authentication failure).

Step 408:

The candidate member device MD_c also calculates the confirmation data Ca through the function Ca = f4 (Pka, Pkb, ra, 0). Check whether this Ca is the same as the received Ca. If they are the same, continue with the following steps; otherwise, abort (authentication failure).

Step 409:

The identification device 200 selects a random number Na and sends the random number Na to the candidate member device MD_c.

Step 410:

The candidate member device MD_c selects a random number Nb, and sends the random number Nb to the identification device 200.

Step 411:

Perform Authentication Stage 2 (Authentication Stage 2). In short, a long term key (long terms key) is generated from random numbers ra, rb, Na, and Nb, and authentication is performed based on the long term key. Other details have been defined in the specification for OOB authentication for Bluetooth pairing, so for the sake of brevity, other details are omitted here.

If the authentication is passed, the candidate member device MD_c can pair with the identification device 200. On the contrary, the candidate member device MD_c will not be able to pair with the identification device 200.

FIG. 5 is a schematic flowchart of the modified out-of-band (OOB) authentication steps for Bluetooth pairing according to an embodiment of the present application. The above identification data D_i is generated based on the modified out-of-band (OOB) authentication. The steps in Figure 5 include:

Step 501:

The identification device 200 sets ra as a random number and sets rb=0.

Step 502:

The candidate member device MD_c sets rb as a random number, and sets ra=0.

Step 503:

The identification device 200 calculates the confirmation data Ca through the function Ca = f4 (Pka, Pkb, ra, 0). Pka is the public key of the identification device 200, and Pkb is the public key of the candidate member device MD_c. PKa and PKb are exchanged before OOB certification starts. Please note that PKa and PKb are independent of the above-mentioned set of public keys and are not related to the device set DS.

Step 505:

The identification device 200 uses the collective public key Pub_c of the candidate member device MD_c to encode the confirmation material Ca to generate the encoded confirmation material ECa. In addition, the identification device 200 encodes the random number ra to generate an encoded random number Era. The encoded confirmation data ECa and the encoded random number Era are the aforementioned identification data D_i.

Step 507:

The identification device 200 sends the identification data Era and ECa to the candidate member device MD_c.

In addition to encoding the confirmation data Ca and the random number ra, the set public key Pub_c of the candidate member device MD_c can also be used to encode the aforementioned A (that is, the address of the identification device 200) to generate the identification data EA.

Step 509:

The candidate member device MD_c also calculates the confirmation data Ca through the function Ca = f4 (Pka, Pkb, ra, 0). In addition, the candidate member device MD_c uses the collective public key Pub_c to decode the identification material ECa to generate the decoded identification material ECa.

If the confirmation data Ca generated by the candidate member device MD_c is the same as the decoded identification data ECa, the following steps are executed. If they are not the same, the authentication fails.

If the candidate member device MD_c is indeed a desired member device, it also has the collective public key Pub_c, so the confirmation material Ca generated by the candidate member device MD_c is the same as the decoded identification material ECa. Conversely, if the candidate member device MD_c is not the desired member device, it does not have the collective public key Pub_c, so the confirmation material Ca generated by the candidate member device MD_c is different from the decoded identification material ECa.

Similarly, the candidate member device MD_c uses the collective public key Pub_c to decode the identification data Era to generate the decoded identification data Era. The decoded identification data Era will be used to generate long terms keys in the subsequent steps. Therefore, if the candidate member device MD_c does not have the collective public key Pub_c, the authentication fails.

Step 511:

The identification device 200 selects a random number Na and sends the random number Na to the candidate member device MD_c.

Step 513:

The candidate member device MD_c selects a random number Nb, and sends the random number Nb to the identification device 200.

Step 515:

Perform certification phase 2. In short, a long-term key is generated based on the random numbers ra, rb, Na, and Nb, and authentication is performed based on the long-term key. Other details are defined in the specifications for OOC authentication for Bluetooth pairing, so for the sake of brevity, other details are omitted here.

If the authentication is passed, the candidate member device MD_c may be paired with the identification device 200. In contrast, the candidate member device MD_c cannot be paired with the identification device 200.

The embodiment shown in Figure 5 can be summarized as follows: the step of generating identification data D_i according to the set public key Pub_c of the candidate member device MD_c includes: selecting a random number (for example, the random number ra in step 501); The public key, the public key of the candidate member device, and the random number, apply a specific function (for example, the function f4 in step 503) to generate confirmation data (for example, the confirmation material Ca in step 503); and use the candidate The collective public key of the member device encodes the confirmation material and the random number to generate the aforementioned identification material.

Comparing the steps in Figure 4 with the steps in Figure 5, the modified out-of-band (OOB) authentication in Figure 5 does not include the step of calculating the confirmation data Cb (step 404), so there is no need to perform related steps such as step 407 step. However, these steps can also be included in the modified OOB certification.

Fig. 6 is a schematic diagram showing the operation of a device pairing method according to another embodiment of the present application. As shown in Figure 6, the device set DS includes at least one member device. In this embodiment, the device set DS includes more than one member device MD_1, MD_2...MD_n. The member devices MD_1, MD_2...MD_n can be any type of device, such as speakers, monitors, TVs, mobile phones, portable computers or tablets. The member devices MD_1, MD_2...MD_n of the device set DS have the same set ID (in this example, ID_1 is taken as an example). In addition, each of the member devices MD_1, MD_2...MD_n includes a set privacy key (set privacy key) PVK.

The identification device 200 is used to implement the device identification method disclosed in this application. The identification device 200 may be any device capable of performing a device identification method, such as a smart watch, a mobile phone, a laptop computer, or a tablet computer. Before finding the device to be identified (hereinafter referred to as a candidate member device), the identification device 200 establishes a connection between the identification device 200 and the member devices in the member devices MD_1, MD_2...MD_n (in this embodiment, MD_1 is taken as an example) . After the connection is established, the identification device 200 obtains the set ID ID_1 and the set private key PVK from the member device MD_1. In addition to the collective ID ID_1 and the collective private key PVK, the identification device 200 can also obtain other collective information from the member device MD_1, such as the address of the member device.

After receiving the set private key PVK, the identification device 200 finds the candidate member device MD_c according to the set ID ID_1. The candidate member device MD_c belongs to the device set DS, but has not been paired with the identification device 200 yet. Therefore, the candidate member device MD_c also has the set ID ID_1, so that the identification device 200 can find it. After the candidate member device MD_c is discovered, the identification device 200 receives the encoded set public key EPUK_c from the candidate member device MD_c. The encoded collective public key EPUK_c is generated by encoding the collective public key PUK_c of the candidate member device MD_c using the collective secret key PVK. After receiving the encoded collective public key EPUK_c, the identification device 200 uses the collective private key PVK to decode the encoded collective public key EPUK_c to obtain the collective public key PUK_c. If the candidate member device MD_c is a member device of the device set DS, it has the set private key PVK, so the identification device 200 can obtain the correct set by using the set private key PVK to decode the encoded set public key EPUK_c Public key PUK_c.

Next, the identification device 200 generates identification data D_i according to the collective public key PUK_c of the candidate member device MD_c, and sends the identification data D_i to the candidate member device MD_c. If the candidate member device MD_c is a member device of the device set DS, the member device MD_1 also has the set public key PUK_c. Next, the identification device 200 determines whether the candidate member device MD_c belongs to the device set DS according to the comparison result Re of the candidate member device MD_c to the identification data D_i. The detailed steps will be described in the following description.

Fig. 7 is a schematic diagram showing the steps of a device pairing method according to an embodiment of the present application. As shown in FIG. 7, the member device MD_1 generates an advertisement of the device set DS (step 701), and thus, in step 703, the identification device 200 can establish a connection with the member device MD_1. In one embodiment, the connection is a low energy secure connection (LESC). In step 705, the identification device 200 performs a pairing process, such as a Bluetooth pairing process, so that, in step 707, the identification device 200 and the member device MD_1 can be paired. Next, in step 709, the identification device 200 obtains the set ID ID_1 and the set private key PVK from the member device MD_1.

In step 711, the candidate member device MD_c generates an advertisement of the device set DS, so that the identification device 200 can discover the candidate member device MD_c, and establish a connection with the candidate member device MD_c in step 713. In one embodiment, the connection is LESC. After the connection is established, the identification device 200 receives the encoded collective public key EPUK_c from the candidate member device MD_c, and uses the collective private key PVK to decode the encoded collective public key EPUK_c to obtain the collective public key PUK_c( Step 715).

After that, authentication is performed in step 717 to identify whether the candidate member device MD_c belongs to the device set DS. If authentication is not performed, the device that steals or copies the set ID ID_1 will be regarded as a member device of the device set DS and can be paired with the identification device 200. In step 717, if the authentication is passed, the candidate member device MD_c is determined to be a member device of the device set DS, and thus, the identification device 200 can be paired with the candidate member device MD_c in step 719.

In an embodiment, the authentication in step 717 is performed with reference to OOB (Out of Band) authentication for Bluetooth pairing. More specifically, the identification device 200 refers to out-of-band (OOB) authentication and applies the collective public key PUB_c to encode the generated data to generate the aforementioned identification data D_i. The term "reference" means to follow some of the steps of out-of-band (OOB) authentication, rather than all the steps of out-of-band (OOB) authentication. In other words, the authentication in step 717 is performed based on the modified out-of-band (OOB) authentication provided by this application instead of the original out-of-band (OOB) authentication.

In one embodiment, the identification data D_i is generated following the steps shown in the embodiment in FIG. 5. That is, the identification data D_i may be the confirmation data ECa encoded in step 507. The above description shows detailed operations, so for the sake of brevity, detailed descriptions are omitted here.

In view of the above embodiments, a device identification method can be obtained. The device identification method can identify whether the candidate member device MD_c belongs to the device set DS through the identification device 200. The device identification method can be applied to the device pairing method and includes the following steps in Figure 8:

Step 801:

A connection is established between the identification device and the first member device among the aforementioned member devices (for example, the member device MD_1 in Figure 2) to obtain the set ID from the first member device (for example, the set ID ID_1 in Figure 2) ) And at least one identification key.

The identification key may be the collective public key PUK_c of the candidate member device MD_c, as in the embodiment in FIG. 2, and the identification key may be the collective secret key PVK, as in the embodiment in FIG. 6.

Step 803:

Discover candidate member devices based on the set ID.

Step 805:

The identification data D_i is generated according to the identification key, and the identification data D_i is sent to the candidate member device.

For example, the identification material D_i may be generated by encoding the confirmation material Ca using the collective public key PUK_c in step 505.

Step 807:

According to the comparison result Re for the identification data D_i, it is determined whether the candidate member device MD_c belongs to the device set DS.

For example, the comparison result Re may be a comparison result between the confirmation material Ca generated by the identification device 200 and the confirmation material Ca generated by the candidate member device MD_c, such as the result generated in step 509.

The above description shows other details of the device identification method, and therefore, for the sake of brevity, other details are omitted here.

FIG. 9 is a block diagram showing the structure of a device according to an embodiment of the present application. The device 900 can be used as the aforementioned identification device 200 and the member device MD_1 or the candidate member device MD_c. As shown in FIG. 9, the device 900 includes a storage device 901, a processing circuit 903 and a communication interface 905. The storage device 901 stores at least a piece of program code, and the processing circuit 903 executes the program code to perform the above steps. The communication device 903 is configured to send data and receive data. Please note that the storage device 901 may be a storage device located outside the identification device 200, such as a network hard disk, and is not limited to being located in the device 900.

In view of the above-mentioned embodiments, the member device can be easily found and can be strictly authenticated before pairing, thereby ensuring that the user's device is paired with a reliable device.

Those skilled in the art will readily observe that while maintaining the teachings of the present invention, various modifications and changes can be made to the device and method. Therefore, the above disclosure should be construed as being limited only by the limits of the scope of the appended application. The foregoing descriptions are only preferred embodiments of the present invention, and all equivalent changes and modifications made in accordance with the scope of the patent application of the present invention shall fall within the scope of the present invention.

100: mobile phone D_N, D_Y: display S_N, S_Y: speaker 200: identification device MD_c: Candidate member device MD_1,MD_2,…,MD_n: member device 301,303,305,307,309,311,313,315,317: steps 401,402,403,404,405,406,407,408,409,410,411: steps 501,502,503,505,507,509,511,513,515: steps DS: device collection 701,703,705,707,709,711,713,715,717,719: steps 801,803,805,807: steps 900: device 901: storage device 903: Processing Circuit 905: Communication device

Fig. 1 is a schematic diagram showing the operation of the related Bluetooth device pairing method. Figure 2 is a schematic diagram showing the operation of a device pairing method according to an embodiment of the present application. Figure 3 is a schematic diagram showing the steps of a device pairing method according to an embodiment of the present application. Figure 4 is a schematic flow chart showing the steps of original out-of-band (OOB) authentication for Bluetooth pairing. FIG. 5 is a schematic flowchart of the modified out-of-band (OOB) authentication steps for Bluetooth pairing according to an embodiment of the present application. Fig. 6 is a schematic diagram showing the operation of a device pairing method according to another embodiment of the present application. Fig. 7 is a schematic diagram showing the steps of a device pairing method according to another embodiment of the present application. Figure 8 is a schematic flowchart of a device identification method according to an embodiment of the present application. Fig. 9 is a block diagram showing the structure of an apparatus according to an embodiment of the present application.

801, 803, 805, 807: steps

Claims (21)

A device identification method is used to identify whether a candidate member device belongs to a device set by identifying a device, the device set includes at least one member device, and the method includes: (A) Establish a connection between the identification device and the first member device in the member device to obtain a set ID and at least one identification key from the first member device; (B) Discover the candidate member device according to the set ID; (C) Generate identification data based on the identification key, and send the identification data to the candidate member device; and (D) Determine whether the candidate member device belongs to the device set according to the comparison result of the identification data. The device identification method according to item 1 of the scope of patent application, wherein the identification key includes a collective public key for each member device in the member device, wherein step (c) includes: (E) Obtain the set public key of the candidate member device from the set public key; and (F) Generate the identification data based on the set public key of the candidate member device. The device identification method according to item 2 of the scope of patent application, wherein step (f) includes: Choose a random number; According to the public key of the identification device, the public key of the candidate member device and the random number, apply a specific function to generate confirmation data; and Use the set public key of the candidate member device to encode the confirmation data and the random number to generate the identification data. The device identification method according to item 3 of the scope of patent application, wherein the confirmation data is used to confirm the out-of-band authentication of Bluetooth pairing. The device identification method according to item 1 of the scope of patent application, wherein each of the member devices has a collective secret key of the device set, and the identification key includes the collective secret key, wherein the step ( c) Including: (E) Obtain the encoded set public key of the candidate member device from the candidate member device; (F) Use the set private key to decode the encoded set public key to obtain the set public key of the candidate member device; and (G) Generate the identification data based on the set public key of the candidate member device. The device identification method according to item 5 of the scope of patent application, wherein step (g) includes: Choose a random number; According to the public key of the identification device, the public key of the candidate member device and the random number, apply a specific function to generate confirmation data; and The confirmation data and the random number are encoded using the set public key of the candidate member device to generate the identification data. The device identification method according to item 6 of the scope of patent application, wherein the confirmation data is used to confirm the out-of-band authentication of Bluetooth pairing. An identification device capable of identifying whether a candidate member device belongs to a device set, the device set includes at least one member device, and the identification device includes: The processing circuit is configured to execute at least one piece of code to perform the following operations: (A) Establish a connection between the identification device and the first member device in the member device to obtain a set ID and at least one identification key from the first member device; (B) Discover the candidate member device according to the set ID; (C) Generate identification data based on the identification key, and send the identification data to the candidate member device; and (D) Determine whether the candidate member device belongs to the device set according to the comparison result of the identification data. The identification device according to item 8 of the scope of patent application, wherein the identification key includes a collective public key respectively used for each member device in the member device, wherein step (c) includes: (E) Obtain the set public key of the candidate member device from the set public key; and (F) Generate the identification data based on the set public key of the candidate member device. The identification device according to item 9 of the scope of patent application, wherein step (f) includes: Choose a random number; According to the public key of the identification device, the public key of the candidate member device and the random number, apply a specific function to generate confirmation data; and The confirmation data and the random number are encoded using the set public key of the candidate member device to generate the identification data. The identification device according to item 10 of the scope of patent application, wherein the confirmation data is used for confirmation of out-of-band authentication of Bluetooth pairing. The identification device according to item 8 of the scope of patent application, wherein each member device has a collective secret key of the device set, and the identification key includes the collective secret key, wherein step (c) includes: (E) Obtain the encoded set public key of the candidate member device from the candidate member device; (F) Use the set private key to decode the encoded set public key to obtain the set public key of the candidate member device; and (G) Generate the identification data based on the set public key of the candidate member device. The identification device according to item 12 of the scope of patent application, wherein step (g) includes: Choose a random number; According to the public key of the identification device, the public key of the candidate member device and the random number, apply a specific function to generate confirmation data; and The confirmation data and the random number are encoded using the set public key of the candidate member device to generate the identification data. The identification device according to item 13 of the scope of patent application, wherein the confirmation data is used to confirm the out-of-band authentication of Bluetooth pairing. A device pairing method is used to determine whether an identification device should be paired with a candidate member device, and the method includes: (A) Establish a connection between the identification device and the first member device in at least one member device of the device set to obtain the set ID and at least one identification key from the first member device; (B) Discover the candidate member device according to the set ID; (C) Generate identification data according to the identification key, and send the identification data to the candidate member device; (D) Determine whether the candidate member device belongs to the device set according to the comparison result of the identification data; and (E) When the candidate member device belongs to the device set, the identification device is paired with the candidate member device; and when the candidate member device does not belong to the device set, the identification device is not paired with the candidate member device. The device pairing method according to item 15 of the scope of patent application, wherein the identification key includes a collective public key for each member device of the at least one member device, wherein step (c) includes: (F) Obtain the set public key of the candidate member device from the set public key respectively used for each of the member devices; and (G) Generate the identification data based on the set public key of the candidate member device. The device pairing method according to item 16 of the scope of patent application, wherein step (g) includes: Choose a random number; According to the public key of the identification device, the public key of the candidate member device and the random number, apply a specific function to generate confirmation data; and The confirmation data and the random number are encoded using the set public key of the candidate member device to generate the identification data. The device pairing method according to item 17 of the scope of patent application, wherein the confirmation data is used to confirm the out-of-band authentication of Bluetooth pairing. The device pairing method according to item 15 of the scope of patent application, wherein each of the member devices has a collective secret key for the device set, and the identification key includes the collective secret key, wherein the step (C) Including: (F) Obtain the encoded set public key of the candidate member device from the candidate member device; (G) Use the set private key to decode the encoded set public key to obtain the set public key of the candidate member device; and (H) Generate the identification data based on the set public key of the candidate member device. The device pairing method according to item 19 of the scope of patent application, wherein step (h) includes: Choose a random number; According to the public key of the identification device, the public key of the candidate member device and the random number, apply a specific function to generate confirmation data; and The confirmation data and the random number are encoded using the set public key of the candidate member device to generate the identification data. The device pairing method according to item 20 of the scope of patent application, wherein the confirmation data is used to confirm the out-of-band authentication of Bluetooth pairing.

Images