WO2014117383A1

WO2014117383A1 - Method and apparatus for identifying device in network

Info

Publication number: WO2014117383A1
Application number: PCT/CN2013/071247
Authority: WO
Inventors: 张冬梅; 陈璟; 崔洋
Original assignee: 华为技术有限公司
Priority date: 2013-02-01
Filing date: 2013-02-01
Publication date: 2014-08-07
Also published as: CN104186005A

Abstract

Embodiments of the present invention provide a method and an apparatus for identifying a device in a network. The method comprises: performing preset function operation on an original network code of a first device to obtain a first network code code1 and broadcast the code1, recording a device capable of communicating with the first device or a device capable of communicating with a second device in a whitelist, and storing the whitelist and the original network code of the first device in a server, so that the second device can obtain the original network code of the first device from the server; and performing the same preset function operation on the original network code to obtain a second network code code2, comparing the second network code code2 and the first network code code1, and when the two are the same, determining that the first device is a target device of the second device, which prevents other devices that do not belong to the whitelist of the first device from obtaining the original network code of the first device, thereby ensuring the security of the first device.

Description

Method and device for identifying devices in a network

The present invention relates to the field of communications technologies, and in particular, to a method and apparatus for identifying devices in a network.

Background technique

In the prior art, the basic mechanism for the UE (User Equipment) to discover the UE with the D2D (Device to Device) capability is: The network allocates the D2D code to the D2D-capable UE, and the UE broadcasts itself. The D2D code indicates its existence, and the other UEs that want to discover the UE are located, and the target UE is discovered by listening to the D2D code of the UE.

Among them, the D2D code may be a set of fixed length binary codes, which are dynamically allocated by the operator. If the D2D code of the UE is allocated by the MME (Mobility Management Entity), the D2D code may not change until the UE is within the MME range. Alternatively, if the D2D code of the UE is allocated by the Proximity server, the D2D code may not change over a long period of time, and the attacker can track the trajectory of the UE by tracking the D2D code of the monitored UE. Or, to know the location information of the UE, these are the privacy information of the UE and need to be protected.

Summary of the invention

The embodiments of the present invention provide a method and a device for identifying devices in a network, so as to prevent an attacker from obtaining network information of a device in the network, such as a track, a location, and the like.

The first aspect, the embodiment of the present invention provides a method for identifying a device in a network, including: acquiring, by a second device, an original network code code of the first device from a server;

The second device monitors the first network code code1 broadcasted by the first device, where the code1 is a result obtained by the first device after the code of the first device is calculated by a preset function;

The second device substitutes the code into the preset function to obtain a second network code code2;

Comparing the code2 with the codel, if the same, the first device is a target device of the second device.

In a first possible implementation, in combination with the first aspect, the second device substitutes the code into a preset function to obtain a second network code code2, including: The second device substitutes at least one parameter of the code and the first set into the preset function to obtain code2, where the first set is equal to {the broadcast time of the first device, the random value nonce, the first The first network code codel } broadcasted by the device on the round, wherein the nonce is broadcast by the first device.

In a second possible implementation manner, in combination with the first possible implementation manner of the first aspect, the code1 broadcast by the first device is that the code and at least one parameter in the first set pass the preset The result of the function operation.

In a third possible implementation, in combination with the first aspect, the second device substitutes the code into a preset function to obtain a second network code code2, including:

Determining, by the second device, whether the monitored code1 is a message broadcast by the first device in the first round, and if yes, substituting at least one parameter of the code and the second set into a preset function to obtain a code2, if No, the codel of the first round of broadcasting on the first device and at least one parameter of the second set are substituted into a preset function to obtain a code2;

The second set is equal to {the broadcast time of the first device, the random value nonce }, and the nonce is broadcast by the first device.

In a fourth possible implementation, in combination with the third possible implementation manner of the first aspect, the code1 of the first round broadcast of the first device is that the at least one parameter in the code and the second set passes the pre- Set the result obtained after the function operation;

The codel of the first device that is not broadcast by the first round is a result obtained by the codel of the round broadcast on the first device and the at least one parameter of the second set being operated by the preset function.

In a second aspect, the embodiment of the present invention provides another method for identifying a device in a network, including: the first device storing its original network code code in a server;

The first device substitutes the code into a preset function to obtain a first network code code1 and simultaneously broadcasts the codel, so that the second device substitutes the code acquired by the server into the preset function to perform operation. The second network code code2 compares the code2 with the coded obtained by the monitoring. When the two are the same, the first device is the target device of the second device.

In a first possible implementation, in combination with the second aspect, the first device substitutes the code into a preset function to obtain a first network code codel, including:

The first device substitutes at least one parameter of the code and the first set into a preset function The row operation is coded, and the first set is equal to {the broadcast time of the first device, the random value nonce, the first network code codel } broadcasted by the first device;

When the nonce is selected to be substituted into the preset function, the first device simultaneously broadcasts the code1 and the nonce; when the first network code code1 broadcasted by the first device is selected into the preset function, The first device simultaneously broadcasts codel and the number of rounds of the current broadcast.

In a second possible implementation manner, in combination with the first possible implementation manner of the second aspect, when the time is selected to be substituted into the preset function, the first device simultaneously broadcasts the code1 and the time.

In a third possible implementation manner, in combination with the first possible implementation manner of the second aspect, the code code2 includes:

The second device substitutes at least one parameter of the code and the first set into the preset function to perform operation to obtain code2.

In a fourth possible implementation, in combination with the second aspect, the first device, by substituting the code into a preset function, to obtain the first network code code1 includes:

When the first device broadcasts in the first round, at least one parameter of the code and the second set is substituted into a preset function to obtain a codel of the current round broadcast;

When the first device is not in the first round of broadcasting, at least one of the codel and the second set of the broadcast of the first device is substituted into a preset function to obtain the current broadcast codel;

The second set of the second set is equal to {the broadcast time of the first device, the random value nonce }.

In a fifth possible implementation manner, in combination with the fourth possible implementation manner of the second aspect, the network code code2 includes:

When the code1 monitored by the second device is a message broadcast by the first device in the first round, the second device substitutes at least one parameter of the code and the second set into a preset function. The operation gets code2;

When the code1 that is monitored by the second device is not the broadcast message of the first round of the first device, the second device sends at least one of the codel and the second set of the round broadcast on the first device. The parameter is substituted into the preset function to perform the operation to obtain code2.

In a fifth possible implementation, the server further includes a whitelist, where the whitelist is a set of devices having communication rights with the first device, and the whitelist records And the whitelist is a set of devices having communication authority with the second device, and the first device is recorded in the whitelist.

It should be noted that the method for identifying a device in a network provided by the embodiment of the present invention may be applied to a D2D network; the server may be an MME server or a Proximity server; and the preset function may be a hash function.

The third aspect, the embodiment of the present invention further provides an apparatus for identifying a device in a network, including: an acquiring module, configured to acquire an original network code code of the first device from a server;

a monitoring module, configured to monitor a first network code code1 broadcast by the first device, where the codel is a result obtained by the first device after the code of the first device is operated by a preset function;

a calculation module, configured to substitute the code acquired by the obtaining module into the preset function to obtain a second network code _C0 de2;

The determining module is configured to compare the code2 calculated by the calculating module with the code1 monitored by the monitoring module, and when the two are the same, determine that the first device is a target device.

In a first possible implementation, in combination with the third aspect, the server stores a whitelist, where the whitelist is a set of devices having communication rights with the first device, and the device in the identifying network The device to which the device belongs is recorded in the white list; or the white list is a set of devices having communication authority with the device to which the device of the device in the network is identified, and the first device is recorded in the In the white list.

It can be seen that the method for identifying the device in the network provided by the embodiment of the present invention uses the original network code code of the first device to obtain the first network code code1 after being subjected to a preset function operation, and then broadcasts, so if the second device and the first device If the second device is a non-malicious attacker, the second device may obtain the original network code code of the first device from the server, and obtain the second network through the same preset function operation. The code code2 finally compares the second network code code2 with the first network code codel. When the two are the same, the first device is determined to be the target device of the second device, thereby preventing the malicious attack device from obtaining the broadcast message. The original network code code of the first device ensures the security of the first device. DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the embodiments or the description of the prior art will be briefly described below. Obviously, the drawings in the following description It is only some embodiments of the present invention, and those skilled in the art can obtain other drawings according to these drawings without any creative work.

1 is a schematic flowchart of a method for identifying a device in a network according to an embodiment of the present invention;

2 is a schematic flowchart of another method for identifying a device in a network according to an embodiment of the present invention; FIG. 3 is a schematic diagram of a method for calculating a first network code according to an embodiment of the present invention; FIG. 5 is a schematic diagram of another method for calculating a first network code according to an embodiment of the present invention; FIG. 6 is another schematic diagram of a device for identifying a network in an embodiment of the present invention; FIG. 7 is a schematic structural diagram of an apparatus for identifying a device in a network according to an embodiment of the present invention.

detailed description

Embodiments of the present invention provide a method and apparatus for identifying devices in a network, so as to prevent an attacker from obtaining network information of a device, such as a track, a location, and the like, through network code information broadcast by devices in the network.

BRIEF DESCRIPTION OF THE DRAWINGS The technical solutions in the embodiments of the present invention will be described in detail below with reference to the accompanying drawings. All other embodiments obtained by a person skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention. An embodiment of the present invention provides a method for identifying a device in a network, including:

The second device obtains the original network code of the first device from the server;

It should be noted that the method for identifying devices in a network provided by the embodiments of the present invention may be applied to a device to device (D2D) network, and each device in the D2D network has one. a pre-allocated original network code code for distinguishing other devices; if the second device is a device that can communicate with the first device, that is, has the code permission to acquire the first device, the second device can obtain the first device from the server Code, if the second device is a malicious attacker, it cannot obtain the code of the first device from the server, nor can obtain the code of the first device from the broadcast message of the first device;

In the embodiment of the present invention, the devices in the network have the capability of listening to the broadcast, so that the first network code code1 broadcasted by the first device can be obtained by other devices.

The above server may be an MME server or a Proximity server;

Referring to FIG. 1 , the specific process of the method for identifying a device in a network provided by this embodiment is as follows: S 101. The second device acquires an original network code code of the first device from the server.

S102: The second device monitors the first network code code1 broadcasted by the first device, where codel is a result obtained by the first device after the code is subjected to a preset function.

S 103, the second device substitutes the obtained code into the same preset function to obtain a second network code code2;

S104. The second device compares code2 and odel. If they are the same, the first device is the target device of the second device.

In the embodiment of the present invention, the first device may perform at least one parameter in the code and the first set to obtain a code by using a preset function, where the first set is equal to {the broadcast time of the first device, the random value nonce, and the first device. The first network code codel } of the round broadcast, and when the nonce is selected as the input value of the preset function, the first device simultaneously broadcasts the calculated codel and nonce, and selects the first network code codel of the previous round as the preset. When the input value of the function is used, the first device simultaneously broadcasts the calculated codel and the number of rounds of the current broadcast. When the broadcast time is selected as the input value of the preset function, the first device may broadcast only the calculated codel, or Broadcast codel and time, for example: The first device calculates the code and time through a preset function to obtain codel, and then broadcasts codel, or broadcasts codel and time; or

The first device obtains codel by using the code and the currently generated random value nonce through a preset function, and then broadcasts code 1 and nonce; or

The first device calculates codel, time, and nonce through a preset function, and then broadcasts codel and nonce, or broadcasts codel, time, and nonce; or,

The first device calculates the code and the codel broadcasted on the first device by a preset function. Codel , then broadcast codel and the number of rounds of this round broadcast; or,

The first device calculates code, time, and codel of the first round of broadcast on the first device to obtain codel through a preset function, and then broadcasts codel and the number of broadcasts of the current round, or broadcasts codel, count, and time, and the like;

Correspondingly, when the second device is a device having communication authority with the first device, the second device may obtain the code of the first device from the server, and substitute at least one parameter in the code and the first set into the same preset function. Performing the operation to obtain code2, it should be noted that when the codel broadcasted by the first device is the result of the code and time being calculated by the preset function, the second device uses the obtained code and time into the preset function operation to obtain the code2; When the code1 broadcasted by the first device is the result of the code and the random value nonce subjected to the preset function operation, the second device uses the obtained code and the monitored nonce to obtain the code2 through the preset function operation and the like.

In the embodiment of the present invention, the first device may further determine whether the monitored code1 is a message broadcast by the first device in the first round, and if yes, the second device substitutes at least one parameter in the code and the second set into a preset function. Performing an operation to obtain code2, and if not, substituting at least one parameter of the first round of broadcasting on the first device and at least one parameter of the second set into a preset function to obtain code2; wherein, the second set is equal to { A broadcast time of a device, a random value of nonce }, the nonce being broadcast by the first device.

Correspondingly, the codel broadcasted by the first round of the first device is a result obtained by the at least one parameter of the code and the second set being operated by the preset function;

The codel of the first device that is not the first round of broadcast is the result obtained by the at least one parameter of the first round of the broadcast of the codel and the second set of the first device after the operation of the preset function, and simultaneously broadcasts the codel obtained by the current calculation. And the number of rounds of this broadcast.

Further, the devices in the D2D network in the embodiment of the present invention may all include a whitelist of their own and are stored in the server, and the whitelist records all devices that can obtain the original network code code of the device, that is, the device can The device establishes a connection and communication device, or records a collection of devices that the device can obtain the original network code code, that is, which device the device can communicate with; in the embodiment of the present invention, the white list in the server has a set of devices of the first device communication authority, and the second device is recorded in the white list; or the white list is a set of devices having communication rights with the second device, and the a device recorded in the white name The first device is a device that actively broadcasts the original network code, and the second device is a device that needs to obtain the original network code of the other device.

If the second device is included in the whitelist of the first device, or the first device is included in the whitelist of the second device, the second device may obtain the original network code code of the first device from the server; The original network code code of the first device obtained from the server is subjected to a preset function operation to obtain a second network code _C0 de2;

Then the second device compares the obtained second network code code2 with the intercepted first network code codel, because the function used by the second device to calculate code2 is consistent with the function used by the first device to calculate codel, if the second device The obtained original network code of the first device is real, then code2 and codel are consistent, so by determining whether the second network code code2 and the first network code codel are the same, it can be determined whether the first device is the second device to be found. Target device.

Since the first device does not broadcast the original network code code representing its actual network code, but broadcasts the converted first network code codel of the original network code code, that is, the actual network code is hidden, so although other attackers can Listening to the broadcast message of the first device, but not obtaining the actual network code through the interception, and since the attacker does not have the right to communicate with the first device, the attacker cannot obtain the actual network code of the first device from the server. . The device having the communication authority with the first device can obtain the original network code code of the first device from the server, and check the first network code code 1 broadcasted by the first device, thereby determining whether the first device is For the target device.

It can be seen that the method for identifying the device in the network provided by the embodiment of the present invention uses the original network code code of the first device to obtain the first network code code1 after being subjected to a preset function operation, and then broadcasts, so if the second device has the same The right of communication of a device, that is, the second device is a non-malicious attacker, the second device may obtain the original network code code of the first device from the server, and obtain the second operation code of the original network code through the same preset function. The network code code2 finally compares the second network code code2 with the first network code codel. When the two are the same, the first device is determined to be the target device of the second device, thereby avoiding malicious attacking the device from the broadcast message. Obtaining the original network code code of the first device ensures the security of the first device. The embodiment of the present invention further provides a method for identifying a device in a network. As shown in FIG. 2, the method includes: S201: A second device acquires an original network code code of a first device from a server; A whitelist is stored in the server, the whitelist is a set of devices having communication rights with the first device, and the second device is recorded in the whitelist; or the whitelist is a set of devices having communication rights with the second device And the first device is recorded in the white list;

The subsequent whitelist is used as an example of a set of devices having communication authority with the first device. Each device has the ability to obtain broadcast messages from other devices, and each device has a set of devices that allow communication with itself, stored in a whitelist, when the second device belongs to the whitelist of the first device, The second device can obtain the original network code code of the first device from the server.

S202. The second device monitors the first network code code1 broadcasted by the first device, or listens to the first network code code1 broadcasted by the first device, and the broadcast time time of the first device, or listens to the first network code code1 broadcast by the first device. And the random value nonce, or the first network code code1, the broadcast time time and the nonce broadcasted by the first device, or the codel broadcasted by the first device and the current broadcast number count of the first device, or the monitoring station The code1, the count, and the time of the first device broadcast, wherein the nonce broadcasted by the first device may be the same or different, and it should be noted that, in the embodiment of the present invention, each device in the network Instead of broadcasting its actual network code, that is, the original network code code, the original network code is converted by a certain function, and the obtained result is broadcasted. Therefore, the device in the network cannot obtain the original by listening to the broadcast message of the target device. Network code

In the embodiment of the present invention, the first network code code1 broadcast by the first device can be obtained by the following methods:

Method one, see Figure 3:

The original network code code of the first device, the broadcast time time is used as the input value of the hash function, and the result of the operation is broadcasted as the first network code codel. Of course, the hash function may be replaced by other functions; The time time may or may not be broadcast with the first network code codel. When the current broadcast time time is not broadcast, the second device uses the time when it receives the broadcast message as the broadcast time time.

Method 2, see Figure 3:

The original network code code of the first device, the random value Nonce (ie, parameter) generated by the first device is used as an input value of the hash function, and the result of the operation is broadcast as the first network code code1; The hash function can also be replaced by other functions. When using this method, the first device needs to broadcast the first network code codel and the random value Nonce;

Method three, see Figure 4:

The original network code code of the first device, the first network code code 1 broadcasted on the first device as the input value of the hash function, and the result of the operation is used as the broadcast message of the first round of the first device, that is, the current round The first network code codel, of course, the hash function can also be replaced by other functions. When using this method, the first device needs to broadcast the first network code codel and the number of rounds of the current broadcast;

Further, in addition to the input value of the original network code code as the hash function in the first round of broadcasting, in the subsequent broadcast, the first network code code1 broadcasted by the previous round may be used as the input value of the hash function. The result is the broadcast message of the first round of the first device, that is, the first network codel of the current round;

Method four, see Figure 5:

The original network code code of the first device, the first network code code 1 broadcasted on the first device, and the broadcast time time are used as input values of the hash function, and the obtained result is used as the broadcast message of the first round of the first device. That is, the first network code codel of this round, of course, the hash function can also be replaced by other functions. When using this method, the first device needs to broadcast the first network code codel and the first round of broadcast on the first device. The first network code codel. Broadcast time can be broadcast or not broadcast;

Further, in addition to the first round of broadcasting, the original network code code and the broadcast time time are used as the input values of the hash function, and in the subsequent, subsequent broadcasts, the first network code codel and the broadcast time time that can be broadcasted in the previous round. As the input value of the hash function, the result of the operation is used as the broadcast message of the current round of the first device, that is, the first network code1 of the current round.

It should be noted that other various deformation calculation methods can also be used, and only the original network code code of the first device can be hidden. As in method 3 or method 4 above, code only participates in the operation of the first round of codel, and does not participate in the operation of the subsequent round of codel. Refer to the description of the dotted line in Fig. 3 and Fig. 4.

S203. The original network code code and the broadcast time time that the second device will obtain, or the code and the parameter, or the codel that is broadcast on the code and the first device, or The code, the time and the parameter, or the codel broadcasted on the first device, or the codel and the broadcast time of the first round of the first device are substituted into the preset function to obtain the second network code. Code2;

The preset function used in step S203 is the same as the function used by the first device to calculate the first network code codel.

S204. Compare the obtained second network code code2 with the first network code codel. When code2 is equal to codel, determine that the first device is the target device of the second device.

It can be seen that the method for identifying devices in the network provided by the embodiment of the present invention uses a whitelist for each device in the network, and only the device recorded in the whitelist can obtain the original network code of the device from the server, thereby The device is connected and communicated, and each device does not broadcast its real network code, ie the original network code, but broadcasts a variant of the original network code, ie the first network code codel, thereby hiding the original network code, The device in the whitelist can obtain the original network code of the target device from the server, and perform the same deformation of the original network code, and then compare the obtained result with the first network code codel that is monitored. When the two are the same, The first network code is not the actual network code, so the attacker can not obtain the private information of other devices, effectively protecting the devices in the network. The embodiment of the present invention further provides a method for identifying a device in a network. As shown in FIG. 6, the method includes: S301: The first device stores its original network code code in a server;

S302. The first device substitutes the code into a preset function to obtain a first network code code1 and simultaneously broadcasts the code1, so that the second device substitutes the code acquired by the server into the preset function. The operation obtains the second network code code2, and compares the code2 with the codel obtained by the interception. When the two are the same, the first device is the target device of the second device.

The first device substitutes the code into the preset function to obtain the first network code. The codel may specifically include:

The first device substitutes at least one parameter of the code and the first set into a preset function to obtain a codel, where the first set is equal to {the broadcast time of the first device, the random value nonce, and the first device Broadcast the first network code codel }; When the nonce is selected to be substituted into the preset function, the first device simultaneously broadcasts the code1 and the nonce; when the first network code code1 broadcasted by the first device is selected into the preset function, The first device simultaneously broadcasts codel and the number of rounds of the current broadcast.

Correspondingly, the second device substitutes the code acquired by the server into the preset function to obtain a second network code code2, including:

Alternatively, the first device may perform the operation by substituting the code into the preset function to obtain the first network code codel.

Correspondingly, the second device substitutes the code acquired by the server into the preset function to obtain a second network code _C0 de2, including:

It should be noted that, when the first device selects the random value nonce as the input value of the preset function, the first device simultaneously broadcasts the calculated code1 and the selected random value nonce; when the first device selects the first device to be used When the first network code code1 of the round broadcast is used as the input value of the preset function, the first device simultaneously broadcasts the calculated codel and the number of rounds of the current broadcast, so that the second device can know the codel of the previous round according to the count. When the first device selects the broadcast time time of the first device as the input value of the preset function, the first device may only broadcast codel or simultaneously broadcast codel and Time.

It can be seen that the method for identifying the device in the network provided by the embodiment of the present invention uses the original network code code of the first device to obtain the first network code code1 after being subjected to a preset function operation, and then broadcasts, so if the second device has the same The right of communication of a device, that is, the second device is a non-malicious attacker, the second device may obtain the original network code code of the first device from the server, and obtain the second operation code of the original network code through the same preset function. The network code code2 finally compares the second network code code2 with the first network code codel. When the two are the same, the first device is determined to be the target device of the second device, thereby avoiding malicious attacking the device from the broadcast message. Obtaining the original network code code of the first device ensures the security of the first device. Another embodiment of the present invention provides a method for identifying a device in a network, including:

The first device stores its original network code code in the server, and the server stores a white list, wherein the white list is a set of devices having communication authority with the first device, and the white list records Having a second device; or the whitelist is a set of devices having communication rights with the second device, and the first device is recorded in the whitelist;

The first device substitutes the code and the broadcast time time into a preset function to obtain a first network code code1, and broadcasts the code1, or broadcasts the code1 and the broadcast time time, so that the second device Computing the code obtained from the server and the time into the preset function to obtain a second network code code2, and comparing the code2 with the codel obtained by monitoring, when the two are the same, The first device is the target device of the second device; or the first device substitutes the code and the random value nonce into a preset function to obtain a first network code code1, and broadcasts the codel and the a parameter, such that the second device substitutes the code obtained by the server and the parameter obtained by the monitoring into the preset function to obtain a second network code code2, and obtains the code2 and the intercepted The codel compares, when the two are the same, the first device is a target device of the second device;

Alternatively, the first device substitutes the code and the codel broadcasted on the first device into a preset function to obtain a codel of the current device, and broadcasts the obtained codel and the number of broadcasts of the current round. And causing the second device to obtain a codel of the round broadcast on the first device according to the count, and substituting the code acquired from the server and the codel broadcasted on the first device into the pre- Let the operation in the function get the second network code code2, and pass the code2 and pass Comparing the obtained codel for comparison, when the two are the same, the first device is the target device of the second device;

Alternatively, the first device substitutes the code, the time, and the parameter into a preset function to obtain a first network code code1, and broadcasts the code1 and the parameter, so that the second device The code obtained in the server, the time and the parameter obtained by the monitoring are substituted into the preset function to obtain a second network code code2, and the code2 is compared with the codel obtained by the monitoring, when the two are At the same time, the first device is the target device of the second device; or the first device substitutes the code, the time, and the codel broadcasted by the first device into the preset function. Performing an operation to obtain the code1 of the current round of the first device, and broadcasting the obtained codel and the current broadcast count count, or the coded, the count, and the time obtained by the broadcast, so that the second device obtains the location according to the count Decoding a coded broadcast on the first device, and substituting the code obtained from the server, the codel of the first round of broadcasting on the first device, and the time into the pre- Function calculates a second network to obtain the code code2, and the comparing and code2 codel obtained by listening, when both are the same, the first device to the second device is the target device;

Alternatively, the first device substitutes the codel of the previous round broadcast or the codel and the time broadcasted by the previous round into the preset function to obtain the codel of the first round of the first device, and broadcasts the obtained codel. And counting the number of broadcasts of the current round, so that the second device obtains the codel of the round broadcast on the first device according to the count, and substitutes the codel of the round broadcast on the first device into the preset function. The operation is performed to obtain the second network code code2, and the code2 is compared with the coded obtained by the monitoring. When the two are the same, the first device is the target device of the second device.

The above preset function may be a hash function or other encryption algorithm;

The first device may use its original network code code and broadcast time time as input values of the hash function, and the obtained result is broadcast as the first network code codel;

The first device may also use its original network code code and the generated random value nonce as the input value of the hash function, and the obtained result is broadcasted as the first network code codel, and broadcasts the current random value nonce;

The first device can also put its own original network code code and the first network generation of the previous round of broadcasting. The code codel is used as the input value of the preset function, and the obtained result is broadcasted as the first network code code1 of the current round, and the number of broadcasts of the current round is counted, so that the first network code code1 of the previous round broadcast can be known;

The first device may also broadcast its own original network code code and the generated random value nonce, and the broadcast time time as an input value of the hash function, and the obtained result is broadcasted as the first network code code1, and the random value nonce is broadcasted;

The first device may also broadcast its own original network code code and the first network code codel broadcasted in the previous round, and the broadcast time time as an input value of the hash function, and the obtained result is broadcasted as the first network code code 1 and broadcasted. The number of broadcasts in this round is count.

It can be seen that the method for identifying a device in a network provided by the embodiment of the present invention uses the original network code code of the first device to obtain a first network code code1 after being subjected to a preset function, and then broadcasts, and can communicate with the first device. The device is recorded in the white list, and the whitelist and the original network code code of the first device are stored in the server, so the second device belonging to the whitelist can obtain the original network code code of the first device from the server, and The original network code code is operated by the same preset function to play the second network code code2, and finally the second network code code2 is compared with the first network code codel. When the two are the same, the first device is determined to be the first The target device of the second device, thereby avoiding that other devices in the whitelist that are not in the first device obtain the original network code code of the first device, and ensure network security of the first device. An embodiment of the present invention further provides an apparatus for identifying a device in a network, including:

An obtaining module, configured to obtain, from a server, an original network code of the first device;

Specifically, the calculation module may be configured to perform the code2 by substituting the code acquired by the obtaining module and at least one parameter in the first set into the preset function, where the first set is equal to {the broadcast of the first device. Time time, random value nonce, first network code broadcast on the first device Codel } , wherein the nonce is broadcast by the first device.

Correspondingly, the code1 broadcast by the first device is a result obtained by the code and at least one parameter in the first set being operated by the preset function.

Alternatively, the calculating module may be further configured to perform at least one parameter of the code and the second set into a preset function when the code1 monitored by the listening module is a message broadcast by the first device of the first device. The operation obtains code2; when the codel monitored by the interception module is a message that the first device is not broadcast by the first round, at least one parameter of the first broadcast of the first device and the second set of the second set Substituting into the preset function to perform operation to obtain code2;

As shown in FIG. 7, the device for identifying a device in a network according to an embodiment of the present invention is configured as follows: an obtaining module 401, configured to acquire an original network code code of a first device from a server;

The monitoring module 402 is configured to monitor the first network code code1 broadcast by the first device, where the codel is a result obtained by the first device after the code of the first device is operated by a preset function;

The calculation module 403 is configured to substitute the code acquired by the obtaining module 401 into the preset function to obtain a second network code code2;

The determining module 404 is configured to compare the code2 calculated by the calculating module 403 with the code1 monitored by the monitoring module 402. When the two are the same, the first device is determined to be the target device.

The whitelist is stored in the server, where the whitelist is a set of devices having the communication authority with the first device, and the second device is recorded in the whitelist; or the whitelist is A set of devices having communication rights with the second device, and the first device is recorded in the whitelist.

It should be noted that the device for identifying a device in a network that is provided by the embodiment of the present invention may be applied to a D2D network, and the device for identifying a device in the network is used in a terminal device in the network, and is a device in the network to other devices in the network. Equipment identification; The server may be an MME server or a Proximity server;

It should be noted that the preset function used by the calculation module 403 is the same as the function used by the first device to calculate the first network code codel.

That is, the first network code code1 broadcast by the first device is a result obtained by the code and the time being operated by the preset function;

Or the codel is a result obtained by the code and the nonce being operated by the preset function;

Or the codel is a result obtained by the code, the time, and the nonce being processed by the preset function, and the like;

As can be seen from the above, the device for identifying a device in a network provided by the embodiment of the present invention may be configured when the device to which the device is applied has the right to communicate with the first device or is recorded in the whitelist of the first device. Obtaining the original network code code of the first device from the server, the listening module in the device may listen to a variant of the original network code code broadcast by the first device, that is, the first network code codel, and the computing module in the device may Performing the same form of modification on the original network code obtained from the server to obtain the second network code code2, the judging module in the device may compare the second network code code2 with the first network code codel, if the two are the same, Determining that the first device is the target device that the device is looking for, thereby avoiding that the device that does not have the communication authority or the other device that is not in the whitelist of the first device obtains the original network code code of the first device, and ensures the first device. Network security. A person skilled in the art may understand that all or part of the various steps of the foregoing embodiments may be completed by a program instructing related hardware. The program may be stored in a computer readable storage medium, and the storage medium may include: Read only memory (ROM, Read Only Memory), random access memory (RAM), disk or optical disk.

In the above, in the above embodiments, the descriptions of the various embodiments are different, and the parts that are not detailed in an embodiment can be referred to the related descriptions of other embodiments.

The foregoing description of the method and apparatus for identifying devices in a network provided by the embodiments of the present invention is only for facilitating understanding of the method and core idea of the present invention. Meanwhile, for those skilled in the art, The idea of the invention will be changed in the specific implementation and application scope. In the above, the contents of the specification are not to be construed as limiting the invention.

Claims

Rights request

1. A method for identifying devices in a network, characterized by including:

The second device obtains the original network code code of the first device from the server;

The second device monitors the first network code codel broadcast by the first device, where the codel is the result obtained by the first device after the code is subjected to a preset function operation;

The second device substitutes the code into the preset function and performs calculation to obtain the second network code code2;

Compare the code2 and the codel. If they are the same, the first device is the target device of the second device.

2. The method according to claim 1, characterized in that the second device substitutes the code into a preset function and performs an operation to obtain the second network code code2, which includes:

The second device substitutes the code and at least one parameter in the first set into the preset function to perform an operation to obtain code2. The first set is equal to {the broadcast time of the first device time, the random value nonce, the first The first network code codel} broadcast by the device in the previous round, wherein the nonce is broadcast by the first device.

3. The method according to claim 2, wherein the codel broadcast by the first device is the result of the code and at least one parameter in the first set subjected to the preset function operation.

4. The method according to claim 1, characterized in that the second device substitutes the code into a preset function and performs an operation to obtain the second network code code2, which includes:

The second device determines whether the monitored codel is the message broadcast in the first round by the first device. If so, the code and at least one parameter in the second set are substituted into the preset function to perform an operation to obtain code2. If If not, then substitute the codel broadcast by the first device in the previous round and at least one parameter in the second set into the preset function for calculation to obtain code2;

Wherein, the second set is equal to {broadcast time time of the first device, random value nonce}, and the nonce is broadcast by the first device.

5. The method according to claim 4, characterized in that, the codel broadcast by the first device in the first round is the result obtained by the preset function operation of the code and at least one parameter in the second set; The codel broadcast by the first device other than the first round is the result of the codel broadcast by the first device in the previous round and at least one parameter in the second set through the preset function operation.

6. The method according to claim 3 or 5, characterized in that, while the second device monitors the codel broadcast by the first device, it also monitors the broadcast time time broadcast by the first device.

7. The method according to any one of claims 1 to 6, characterized in that, a white list is stored in the server, wherein the white list is a set of devices that have permission to communicate with the first device, And the second device is recorded in the white list; or, the white list is a set of devices that have permission to communicate with the second device, and the first device is recorded in the white list.

8. The method according to any one of claims 1 to 6, characterized in that the method is applied in a D2D network.

9. The method according to any one of claims 1 to 6, characterized in that the server is an MME server or a Proximity server.

10. The method according to any one of claims 1 to 6, characterized in that the preset function is a hash function.

11. A method for identifying devices in a network, characterized by including:

The first device stores its own original network code code in the server;

The first device substitutes the code into the preset function for operation to obtain the first network code codel and broadcasts the codel at the same time, so that the second device substitutes the code obtained from the server into the preset function for operation and obtains The second network code is code2, and the code2 is compared with the codel obtained through monitoring. When the two are the same, the first device is the target device of the second device.

12. The method according to claim 11, characterized in that the first device substitutes the code into a preset function and performs an operation to obtain the first network code codel, which includes:

The first device substitutes the code and at least one parameter in the first set into a preset function to perform an operation to obtain the codel. The first set is equal to {the broadcast time of the first device, the random value nonce, the The first network code of a round of broadcast code };

When choosing to substitute the nonce into the preset function, the first device simultaneously broadcasts the codel and the nonce; when choosing to substitute the first network code codel broadcast by the first device in the previous round into the preset function, the The first device simultaneously broadcasts the codel and the count of this broadcast round.

13. The method according to claim 12, wherein when the time is selected to be substituted into the preset function, the first device broadcasts the code 1 and the time simultaneously.

14. The method according to claim 12, characterized in that the second device substitutes the code obtained from the server into the preset function to perform operations to obtain the second network code code2, which includes:

The second device substitutes the code and at least one parameter in the first set into the preset function to perform an operation to obtain code2.

15. The method according to claim 11, characterized in that the first device substitutes the code into a preset function and performs an operation to obtain the first network code codel, which includes:

When the first device broadcasts in the first round, the code and at least one parameter in the second set are substituted into the preset function to perform calculations to obtain the code 1 of this round of broadcast;

When the first device is not in the first round of broadcast, the codel of the previous round of broadcast by the first device and at least one parameter in the second set are substituted into the preset function for calculation to obtain the current broadcast codel;

Wherein, the second set is equal to {broadcast time of the first device time, random value nonce}.

16. The method according to claim 15, characterized in that the second device substitutes the code obtained from the server into the preset function to perform an operation to obtain the second network code code2, which includes:

When the codel monitored by the second device is the message broadcast by the first device in the first round, the second device substitutes the code and at least one parameter in the second set into the preset function. The operation results in code2;

When the codel monitored by the second device is not the broadcast message of the first round of the first device, the second device sends at least one of the codel broadcasted by the first device in the previous round and the second set. The parameters are substituted into the preset function for operation to obtain code2.

17. The method according to any one of claims 11 to 16, characterized in that the server also stores a white list, wherein the white list is a set of devices that have permission to communicate with the first device. , and the second device is recorded in the whitelist; or the whitelist is a set of devices that have permission to communicate with the second device, and the first device is recorded in the whitelist.

18. A device for identifying equipment in a network, characterized by including:

Obtain module, used to obtain the original network code code of the first device from the server;

A listening module, configured to listen to the first network code codel broadcast by the first device, where: The codel is the result obtained by the first device after the code is processed by a preset function; a calculation module is used to substitute the code obtained by the acquisition module into the preset function for calculation to obtain the second network code _C0 de2 ;

The judgment module is used to compare the code2 calculated by the calculation module and the code1 monitored by the listening module. When the two are the same, it is determined that the first device is the target device.

19. The device according to claim 18, characterized in that, the calculation module is used to substitute the code obtained by the acquisition module and at least one parameter in the first set into the preset function to perform an operation to obtain the code2 , the first set is equal to {the broadcast time of the first device, the random value nonce, the first network code codel broadcast by the first device in the last round}, wherein the nonce is broadcast by the first device.

20. The device according to claim 19, wherein the codel broadcast by the first device is the result of the code and at least one parameter in the first set subjected to the preset function operation.

21. The device according to claim 18, characterized in that, the calculation module is configured to, when the codel monitored by the listening module is a message broadcast in the first round by the first device, combine the code and At least one parameter in the second set is substituted into the preset function for operation to obtain code2; when the codel monitored by the listening module is a message broadcast by the first device other than the first round, the first device will be The broadcast codel and at least one parameter in the second set are substituted into the preset function for operation to obtain code2;

22. The device according to claim 21, wherein the codel broadcast by the first device in the first round is the result of the preset function operation of the code and at least one parameter in the second set;

The codel broadcast by the first device other than the first round is the codel broadcast by the first device in the previous round and the result obtained by at least one parameter in the second set through the preset function operation.

23. The device according to claim 20 or 22, wherein the monitoring module is configured to monitor not only the codel broadcast by the first device, but also the broadcast time time broadcast by the first device.

24. The device according to any one of claims 18 to 23, characterized in that: in the server A whitelist is stored, wherein the whitelist is a set of devices that have permission to communicate with the first device, and the second device is recorded in the whitelist; or, the whitelist is a set of devices that have permission to communicate with the first device. The second device communicates with the set of devices authorized, and the first device is recorded in the whitelist.