WO2014173222A1

WO2014173222A1 - Security device and display system

Info

Publication number: WO2014173222A1
Application number: PCT/CN2014/074165
Authority: WO
Inventors: 李东声
Original assignee: 天地融科技股份有限公司
Priority date: 2013-04-27
Filing date: 2014-03-27
Publication date: 2014-10-30
Also published as: CN103297233A; CN103297233B

Abstract

The present invention provides a security device and a display system. The security device is a pair of glasses with a security display function. The glasses comprise a glasses body, and a display module, a security module, and a communications module that are disposed on the glasses body. The communications module is used for receiving first encrypted data, the security module is used for decrypting the first encrypted data to obtain first decrypted information, and sending a display instruction to the display module after obtaining the first decrypted information, and the display module is used for performing display according to the display instruction and the first decrypted information.

Description

Safety equipment and display system

Technical field

The present invention relates to the field of electronic technologies, and in particular, to a security device and a display system. Background technique

With the emergence and development of smart products, such as MP3, tablets, and smartphones, people have more flexible requirements for browsing data such as video, audio, and text. Therefore, some people in the industry have designed glasses that can receive data transmitted by the terminal and display the data sent by the terminal, which greatly facilitates the demand for data browsing.

However, the existing glasses that can receive and display data are generally what kind of data is transmitted to the glasses by the terminal, and the glasses directly display the data. Due to the transparency of the data transmission, it is easy to cause the data related to privacy to be transmitted. The security of the data transmission cannot be guaranteed, which may easily lead to security risks such as privacy leakage. Summary of the invention

The object of the present invention is to at least solve one of the above technical drawbacks.

An aspect of the present invention provides a security device, the security device is a glasses having a security display function, the glasses include a glasses body, a display module disposed on the glasses body, a security module, and a communication module; Establishing a communication connection, and after establishing the communication connection, receiving the first encrypted data; the security module is configured to decrypt the first encrypted data after the communication module receives the first encrypted data, to obtain the first Decrypting information; the security module is further configured to send a display instruction to the display module after obtaining the first decryption information; the display module is configured to receive the display instruction, according to the display instruction and the first A decryption message is displayed.

In addition, the security module is further configured to receive an input instruction, generate information to be output according to the input instruction, and encrypt the to-be-output information to obtain second encrypted data; the communication module is further configured to be in the security module. After obtaining the second encrypted data, the second encrypted data is sent out.

In addition, the communication module further receives first signature data when receiving the first encrypted data; the security module is configured to: after the communication module receives the first encrypted data and the first signature data, And verifying the first signature data, and after verifying that the first signature data is passed, decrypting the first encrypted data to obtain the first decrypted information.

In addition, the communication module further receives first signature data when receiving the first encrypted data; the security module is configured to: after the communication module receives the first encrypted data and the first signature data, Decrypting the first encrypted data to obtain the first decrypted information, and after obtaining the first decrypted information, verifying the first signature data; the security module is further used in the verification After the first signature data is passed, the display command is sent to the location The display module.

In addition, the security module is further configured to: after the information to be output is generated, at least the information to be output is signed to obtain the second signature data; the communication module is further configured to obtain the first After the second signature data, the second signature data is sent out.

In addition, the security module is further configured to: after obtaining the second encrypted data, at least the second encrypted data is signed to obtain second signature data; the communication module is further configured to obtain the security module After the second signature data is described, the second signature data is sent out.

In addition, a button is further disposed on the lens body, and the security module receives the input instruction through the button. In addition, a speaker is further disposed on the lens body, and the speaker performs sounding according to the first decrypted information obtained by the security module.

In addition, the security module is further configured to: after obtaining the first decryption information, determine whether the first decryption information is information in a preset format, and if the information is in a preset format, the security module sends the An instruction is displayed to the display module.

Another aspect of the present invention provides a display system including a terminal and the glasses described above; the terminal generates information to be input, encrypts the information to be input, obtains the first encrypted data, and establishes with the glasses After the communication is connected, the first encrypted data is sent to the glasses.

In addition, the terminal is further configured to receive the second encrypted data sent by the glasses, and decrypt the second encrypted data to obtain second decrypted information; the terminal is further configured to perform, according to the second decryption Information is performed.

In addition, the terminal further signs at least the information to be input, obtains the first signature data, and sends the first signature data to the glasses.

In addition, the terminal further signs the first encrypted data, obtains the first signature data, and sends the first signature data to the glasses.

In addition, when receiving the second encrypted data sent by the glasses, the terminal further receives the second signature data sent by the glasses; the terminal receives the second encrypted data and the first After the second signature data is verified, the second signature data is verified, and after the second signature data is verified, the second encrypted data is decrypted to obtain the second decrypted information.

In addition, when receiving the second encrypted data sent by the glasses, the terminal further receives the second signature data sent by the glasses; the terminal receives the second encrypted data and the first After the second data is decrypted, the second encrypted data is decrypted to obtain the second decrypted information, and after the second decrypted information is obtained, the second signed data is verified; After the second signature data is passed, an operation is performed according to the second decryption information. In addition, the terminal establishes a communication connection with the glasses by one of the following modes: an audio transmission mode, a USB transmission mode, a serial port transmission mode, an NFC transmission mode, a Bluetooth transmission mode, an infrared transmission mode, an optical transmission mode, a WIFI transmission mode, GPRS transmission mode, 3G transmission mode and GSM transmission mode.

It can be seen from the technical solution provided by the present invention that the present invention provides a security device and a display system. Since data displayed by the security device is required to be encrypted during transmission to the security device, the data is transmitted to the security device. Security, and the security device of the present invention decrypts the encrypted data sent by the security module locally, further ensures the security of the data transmission, and prevents the remote attack of the hacker to the greatest extent, and eliminates the decryption by other decryption devices. The unsafe hidden dangers that are sent to the security device;

In addition, since the information output by the security device is encrypted by the security module of the security device and transmitted through the communication module, the security of the data output by the security device can be ensured;

In addition, since the data sent by both parties can be signed and the signature is verified, the authenticity of both parties is ensured, and the security of data transmission is further improved. DRAWINGS

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the description of the embodiments will be briefly described below. It is obvious that the drawings in the following description are only some embodiments of the present invention, Those skilled in the art can also obtain other drawings based on these drawings without any creative work.

1 is a schematic structural view of glasses provided in Embodiment 1 of the present invention;

2 is a schematic structural diagram of a display system according to Embodiment 2 of the present invention. detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

In the description of the present invention, it is to be understood that the terms "center", "vertical", "transverse", "upper", "lower", "previous", "rear", "left", "right", " The orientation or positional relationship of the indications of "", "horizon", "top", "bottom", "inside", "outside", etc. is based on the orientation or positional relationship shown in the drawings, only for the convenience of describing the present invention and The simplification of the description is not intended to limit or imply that the device or elements referred to have a particular orientation, construction and operation in a particular orientation. In addition, the terms "first" and "second" are used for descriptive purposes only and are not to be construed as indicating or implying For importance or quantity or location.

In the description of the present invention, it should be noted that the terms "installation", "connected", and "connected" are to be understood broadly, and may be fixed or detachable, for example, unless otherwise explicitly defined and defined. Connected, or connected integrally; can be mechanical or electrical; can be directly connected, or indirectly connected through an intermediate medium, can be the internal communication of the two components. The specific meaning of the above terms in the present invention can be understood in a specific case by those skilled in the art.

The embodiments of the present invention will be further described in detail below with reference to the accompanying drawings. Example 1

1 is a schematic structural view of glasses according to Embodiment 1 of the present invention. Referring to FIG. 1, the glasses 10 of the present invention include: a lens body, and the lens body may include a frame and a lens. In order to facilitate carrying, the present invention can particularly provide a display module 101, a security module 102, and a communication module 103 on the lens body.

Of course, the display module 101 can be separately disposed at the frame or on the surface of the lens, and the user can directly view the displayed content while wearing the glasses 10, which is convenient for the user to use. Of course, the display module 101 can also be directly formed into a lens, which makes the process simple and practical.

The security module 102 and the communication module 103 can be separately disposed at the frame or inside the frame, which can reduce the size of the glasses 10 for convenient carrying and use.

The communication module 103 is configured to establish a communication connection, and after establishing the communication connection, receive the first encrypted data. The security module 102 is configured to decrypt the first encrypted data after the first encrypted data is received by the communication module 103 to obtain the first decrypted information. The security module 102 is further configured to send the display instruction to the display module after obtaining the first decrypted information. 101.

The display module 101 receives the display instruction and displays it according to the display instruction and the first decryption information.

Specifically, the communication module 103 can establish a connection by:

Wired transmission mode: audio transmission mode, USB transmission mode and serial port transmission mode;

Wireless transmission mode: NFC transmission mode, Bluetooth transmission mode, infrared transmission mode, optical transmission mode, WIFI transmission mode, GPRS transmission mode, 3G transmission mode, and GSM transmission mode.

The wireless transmission method can reduce the setting of the interface, reduce the volume of the glasses 10, and is more convenient to use and carry. It can be seen that since the data displayed by the glasses 10 is required to be encrypted during transmission to the glasses 10, the security of the data transmission to the glasses 10 is ensured, and the glasses 10 of the present invention are locally encrypted by the security module 102. The data is decrypted to further ensure the security of the data transmission, and the remote attack of the hacker is prevented to the greatest extent, and the unsafe hidden danger caused by the decryption of the other decryption device and then sent to the glasses is eliminated. Of course, in the present invention, after obtaining the first decryption information, the security module 102 may determine whether the first decryption information is information in a preset format. If the information is in a preset format, the security module 102 sends a display instruction to the display module 101. The display module 101 is caused to display; if it is not the information of the preset format, the security module 102 instructs the display module 101 to display the format is not supported. The preset format is the codec format with the highest encoding and decoding efficiency. For example, the preset format of the document supported by the glasses 10 is: TXT format; the preset format of the image supported by the glasses 10 is: ESC format, etc., of course, can also support The codec format with the highest codec efficiency for different types (for example, audio format, video format) is not listed here. The preset format adopts the codec format with the highest codec efficiency, which can improve the speed of data processing of the glasses 10. In addition, in order to ensure the security of the data output by the glasses 10, the security module 102 of the glasses 10 is further configured to receive an input instruction, generate information to be output according to the input instruction, encrypt the information to be output, and obtain second encrypted data; the communication module 103 further For transmitting the second encrypted data after the security module 102 obtains the second encrypted data. It can be seen that the information output by the glasses 10 is encrypted by the security module 102 of the glasses 10 and transmitted through the communication module 103, so that the security of the data output by the glasses 10 can be ensured. In order to further improve the security of the data transmission and ensure the authenticity of the data sent to the glasses 10, the glasses 10 also need to verify the identity of the sender of the data. Specifically, the identity of the sender of the data can be verified as follows:

(1) The communication module 103 of the glasses 10 further receives the first signature data when receiving the first encrypted data; the security module 102 is configured to: after the communication module 103 receives the first encrypted data and the first signature data, the first signature The data is verified, and after verifying that the first signature data is passed, the first encrypted data is decrypted to obtain the first decrypted information.

The first signature data is obtained by signing at least the first encrypted data.

By directly verifying the signature of the first encrypted data according to the first encrypted data, the verification link is reduced, the data processing speed is increased, and the first encrypted data is decrypted only after the verification signature is passed. Otherwise, the verification signature fails. , the first encrypted data is not decrypted to ensure security.

(2) The communication module 103 of the glasses 10 further receives the first signature data when receiving the first encrypted data; the security module 102 is configured to: after the communication module 103 receives the first encrypted data and the first signature data, the first encryption The data is decrypted, the first decryption information is obtained, and the first signature data is verified after the first decryption information is obtained. The security module 102 is further configured to send the display instruction to the display module 101 after verifying that the first signature data is passed.

Wherein: the first signature data is obtained by signing at least the original text corresponding to the first encrypted data.

Obtaining the first decrypted information by decrypting the first encrypted data, and performing the first signature data according to the first decrypted information The certificate improves the correctness of the verification. Even if the ciphertext and the signature are falsified at the same time, it can be verified to ensure the security of the data transmission and the authenticity of the identity of the sender. Of course, in order to further improve the security of data transmission and ensure the authenticity of the identity of the glasses 10, the glasses 10 also need to sign the information that needs to be output. Specifically, the information to be output may be signed as follows:

(1) The security module 102 of the glasses 10 is further configured to: after generating the information to be output, sign the output information to obtain the second signature data; the communication module 103 is further configured to: after the security module 102 obtains the second signature data, Two signature data is sent out. By directly signing the output information directly, the security of the signature data itself is improved. Even if the second encrypted data and the second signature data are simultaneously tampered with, the data can be verified at the receiving data, thereby ensuring the security of the data transmission and the glasses. The authenticity of the identity of 10.

(2) The security module 102 of the glasses 10 is further configured to: after obtaining the second encrypted data, sign the second encrypted data to obtain the second signature data; the communication module 103 is further configured to: after the security module 102 obtains the second signature data, , the second signature data is sent out. By directly signing at least the second encrypted data, the processing link is reduced, and the data processing speed is improved. Of course, the button 10 can also be provided with a button. At this time, the security module 102 receives an input command through the button. For example, the display module 101 displays the content as "whether to confirm the display information", and the user can press the button to send a confirmation command to inform the glasses 10 and/or the data sender to display. The display problem caused by the hijacking of the software is prevented by the confirmation of the hardware.

The speaker 10 can also be provided with a speaker. When transmitting audio data, the speaker can sound according to the first decrypted information obtained by the security module 102 to ensure normal use of the user.

Of course, the functions performed by the various modules in the present invention can be integrated on one chip. For example, the communication module 103 and the security module 102 are integrated on one chip, and each module is integrated on one chip, which saves space and reduces the glasses 10 . The security module 102 can be a security chip. The function performed by the security module 102 can also be split into several sub-modules to perform related functions, such as: encryption and decryption sub-module, signature sub-module, in this way, the processing speed can be improved; The object of the present invention is achieved as long as the effects described in the present invention are achieved, and any module assignment method employed in the glasses should fall within the scope of protection of the present invention. Example 2

FIG. 2 is a schematic structural diagram of a display system according to Embodiment 2 of the present invention. Referring to FIG. 2, the display system of the present invention includes: the terminal 20 and the glasses 10 shown in Embodiment 1. In this embodiment, the glasses 10 and the embodiment 1 the same, because Therefore, it will not be described here. In order to match the glasses 10 of the first embodiment, the terminal 20 matching the glasses 10 will be described below:

The terminal 20 generates information to be input, encrypts the input information, obtains the first encrypted data, and after establishing a communication connection with the glasses 10, transmits the first encrypted data to the glasses 10. Thereby, it is ensured that the terminal 20 transmits the encrypted data to the glasses 10, and the security of the data transmitted by the terminal 20 is ensured.

In addition, when the glasses 10 send the second encrypted data to the terminal, the terminal 20 further receives the second encrypted data sent by the glasses 10, and decrypts the second encrypted data to obtain the second decrypted information; the terminal 20 further determines the second decrypted information according to the second decrypted information. Perform the operation. At this time, the security of the data transmitted from the glasses 10 to the terminal 20 is secured. In order to further improve the security of the data transmission and ensure the authenticity of the identity of the terminal 20, the terminal also needs to sign the information that needs to be output. Specifically, the information to be output may be signed as follows:

(1) The terminal 20 can sign the input information, obtain the first signature data, and transmit the first signature data to the glasses 10. By directly signing the information input to the glasses 10, the security of the signature data itself is improved, and even if the first encrypted data and the first signature data are simultaneously tampered with, the glasses 10 can be verified to ensure data transmission. Security and authenticity of the identity of the terminal 20.

(2) The terminal 20 can also sign the first encrypted data, obtain the first signature data, and transmit the first signature data to the glasses 10. By directly signing at least the first encrypted data, the processing link is reduced, and the data processing speed is improved.

Of course, in order to further improve the security of data transmission and ensure the authenticity of the identity of the glasses 10, the terminal 20 also needs to verify the identity of the glasses 10, and specifically, the identity of the glasses 10 can be verified as follows:

(1) The terminal 20 may receive the second signature data sent by the glasses 10 when receiving the second encrypted data sent by the glasses 10; after receiving the second encrypted data and the second signature data, the terminal 20 may perform the second signature data. The verification is performed, and after verifying that the second signature data is passed, the second encrypted data is decrypted to obtain the second decrypted information. By verifying the signature of the second encrypted data directly according to the second encrypted data, the verification link is reduced, the data processing speed is improved, and the second encrypted data is decrypted only after the verification signature is passed. Otherwise, the verification signature fails. , the second encrypted data is not decrypted to ensure security.

(2) When receiving the second encrypted data sent by the glasses 10, the terminal 20 may further receive the second signature data sent by the glasses 10; after receiving the second encrypted data and the second signature data, the terminal 20 may perform the second encrypted data. Decrypting, obtaining the second decryption information, and after obtaining the second decryption information, verifying the second signature data; after verifying that the second signature data is passed, the terminal 20 performs an operation according to the second decryption information. The second decrypted information is obtained by decrypting the second encrypted data to verify the second signature data, thereby improving the correctness of the verification, even if the ciphertext and the signature are simultaneously tampered with. To verify, to ensure the security of data transmission and the authenticity of the identity of the glasses 10. Of course, it is worth noting that: Terminal 20 can be any of the following devices: MP3, smart phone, tablet, laptop, PC, USB flash drive or remote server.

The terminal 20 and the glasses 10 can establish a connection by one of the following methods:

The wireless transmission method can reduce the setting of the glasses 10 interface, reduce the volume of the glasses 10, and is more convenient to use and carry. Any process or method description in the flowcharts or otherwise described herein may be understood to represent a module, segment or portion of code that includes one or more executable instructions for implementing the steps of a particular logical function or process. And the scope of the preferred embodiments of the invention includes additional implementations, in which the functions may be performed in a substantially simultaneous manner or in an opposite order depending on the functions involved, in the order shown or discussed. It will be understood by those skilled in the art to which the embodiments of the present invention pertain.

It should be understood that portions of the invention may be implemented in hardware, software, firmware or a combination thereof. In the above-described embodiments, multiple steps or methods may be implemented in software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented in hardware, as in another embodiment, it can be implemented with any one or combination of the following techniques well known in the art: having logic gates for implementing logic functions on data signals Discrete logic circuits, application specific integrated circuits with suitable combinational logic gates, programmable gate arrays (PGAs), field programmable gate arrays (FPGAs), etc.

One of ordinary skill in the art can understand that all or part of the steps carried by the method of implementing the above embodiments can be completed by a program to instruct related hardware, and the program can be stored in a computer readable storage medium. When executed, one or a combination of the steps of the method embodiments is included.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing module, or each unit may exist physically separately, or two or more units may be integrated into one module. The above integrated modules can be implemented in the form of hardware or in the form of software functional modules. The integrated modules, if implemented in the form of software functional modules and sold or used as separate products, may also be stored in a computer readable storage medium.

The above-mentioned storage medium may be a read only memory, a magnetic disk or an optical disk or the like. In the description of the present specification, the description of the terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" and the like means a specific feature described in connection with the embodiment or example. A structure, material or feature is included in at least one embodiment or example of the invention. In the present specification, the schematic representation of the above terms does not necessarily mean the same embodiment or example. Furthermore, the particular features, structures, materials, or characteristics described may be combined in a suitable manner in any one or more embodiments or examples.

Although the embodiments of the present invention have been shown and described, it is understood that the foregoing embodiments are illustrative and not restrictive Variations, modifications, alterations and variations of the above-described embodiments are possible within the scope of the invention. The scope of the invention is defined by the appended claims and their equivalents.

Claims

claims

1. A safety device, characterized in that the safety device is glasses with a safety display function, and the glasses include a glasses body, a display module, a security module and a communication module arranged on the glasses body;

The communication module is used to establish a communication connection, and after the communication connection is established, receive the first encrypted data; the security module is used to perform the first encrypted data after the communication module receives the first encrypted data. Decrypt the data to obtain the first decrypted information, and send a display instruction to the display module after obtaining the first decrypted information;

The display module is configured to receive the display instruction and display according to the display instruction and the first decrypted information.

2. The safety device according to claim 1, characterized in that,

The security module is also used to receive input instructions, generate information to be output according to the input instructions, encrypt the information to be output, and obtain second encrypted data;

The communication module is also configured to send the second encrypted data out after the security module obtains the second encrypted data.

3. The safety device according to claim 1 or 2, characterized in that,

When receiving the first encrypted data, the communication module also receives first signature data;

The security module is configured to verify the first signature data after the communication module receives the first encrypted data and the first signature data, and after the verification of the first signature data passes, Decrypt the first encrypted data to obtain the first decrypted information.

4. The safety device according to claim 1 or 2, characterized in that,

The security module is configured to decrypt the first encrypted data, obtain the first decrypted information, and obtain the first encrypted data after the communication module receives the first encrypted data and the first signature data. After describing the first decrypted information, verify the first signature data;

The security module is also configured to send a display instruction to the display module after verifying that the first signature data passes.

5. The safety device according to claim 2, characterized in that,

The security module is also configured to, after generating the information to be output, at least sign the information to be output and obtain the second signature data;

The communication module is also configured to send the second signature data out after the security module obtains the second signature data.

6. The safety device according to claim 2, characterized in that,

The security module is further configured to, after obtaining the second encrypted data, sign at least the second encrypted data to obtain the second signature data;

7. The safety device according to claim 2, wherein the glasses body is further provided with buttons, and the security module receives the input command through the buttons.

8. The security device according to any one of claims 1 to 7, characterized in that a speaker is further provided on the glasses body, and the speaker emits sound according to the first decrypted information obtained by the security module.

9. The security device according to any one of claims 1 to 8, wherein the security module is further configured to determine whether the first decryption information is in a preset format after obtaining the first decryption information. If the information is in a preset format, the security module sends the display instruction to the display module.

10. A display system, characterized in that it includes a terminal and the glasses according to any one of claims 1 to 9; the terminal generates information to be input, encrypts the information to be input, and obtains the first Encrypt data, and after establishing a communication connection with the glasses, send the first encrypted data to the glasses.

11. The display system according to claim 10, characterized in that,

The terminal is also configured to receive the second encrypted data sent by the glasses, and decrypt the second encrypted data to obtain second decrypted information;

The terminal is further configured to perform operations according to the second decrypted information.

12. The display system according to claim 10 or 11, characterized in that,

The terminal also at least signs the information to be input, obtains the first signature data, and sends the first signature data to the glasses.

13. The display system according to claim 10 or 11, characterized in that,

The terminal also signs at least the first encrypted data, obtains the first signature data, and sends the first signature data to the glasses.

14. The display system according to claim 11, characterized in that,

When the terminal receives the second encrypted data sent by the glasses, it also receives the second signature data sent by the glasses;

After receiving the second encrypted data and the second signature data, the terminal verifies the second signature data, and after verifying that the second signature data passes, verifies the second encrypted data. Decrypt is performed to obtain the second decrypted information.

15. The display system according to claim 11, characterized in that,

After receiving the second encrypted data and the second signature data, the terminal decrypts the second encrypted data to obtain the second decrypted information, and after obtaining the second decrypted information, Verify the second signature data;

After verifying that the second signature data passes, the terminal performs an operation based on the second decryption information.

16. The display system according to any one of claims 10 to 15, characterized in that the terminal and the glasses establish a communication connection in one of the following ways:

Audio transmission method, USB transmission method, serial port transmission method, NFC transmission method, Bluetooth transmission method, infrared transmission method, optical transmission method, WIFI transmission method, GPRS transmission method, 3G transmission method and GSM transmission method.