WO2016065892A1 - 设备之间发现的方法及装置 - Google Patents

设备之间发现的方法及装置 Download PDF

Info

Publication number
WO2016065892A1
WO2016065892A1 PCT/CN2015/079506 CN2015079506W WO2016065892A1 WO 2016065892 A1 WO2016065892 A1 WO 2016065892A1 CN 2015079506 W CN2015079506 W CN 2015079506W WO 2016065892 A1 WO2016065892 A1 WO 2016065892A1
Authority
WO
WIPO (PCT)
Prior art keywords
public key
service
information
service query
value
Prior art date
Application number
PCT/CN2015/079506
Other languages
English (en)
French (fr)
Inventor
庞高昆
方平
陈济
Original Assignee
华为技术有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 华为技术有限公司 filed Critical 华为技术有限公司
Priority to EP15854223.3A priority Critical patent/EP3203766A4/en
Priority to CN201580059601.2A priority patent/CN107079288A/zh
Priority to JP2017523359A priority patent/JP2017533660A/ja
Publication of WO2016065892A1 publication Critical patent/WO2016065892A1/zh
Priority to US15/582,401 priority patent/US20170238164A1/en

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W8/00Network data management
    • H04W8/005Discovery of network devices, e.g. terminals
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3236Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using cryptographic hash functions
    • H04L9/3239Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using cryptographic hash functions involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3271Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using challenge-response
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04Key management, e.g. using generic bootstrapping architecture [GBA]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06Authentication
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/50Secure pairing of devices
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/60Context-dependent security
    • H04W12/69Identity-dependent
    • H04W12/77Graphical identity
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W84/00Network topologies
    • H04W84/02Hierarchically pre-organised networks, e.g. paging networks, cellular networks, WLAN [Wireless Local Area Network] or WLL [Wireless Local Loop]
    • H04W84/10Small scale networks; Flat hierarchical networks
    • H04W84/12WLAN [Wireless Local Area Networks]

Definitions

  • the present invention relates to the field of communications technologies, and in particular, to a method and apparatus for discovering between devices.
  • Wi-Fi Wireless Fidelity
  • the mobile phone When Wi-Fi (Wireless Fidelity) devices communicate with each other, they need to establish a communication connection with each other. For example, when a user prints a file through a mobile phone, the mobile phone first establishes a communication connection with the printing device.
  • the specific process is as follows: first, the mobile phone finds the printing device, forms a list of printing device names, and obtains the MAC (Medium Access Control) address of each printing device in the list for subsequent information interaction. In this process, the mobile phone can scan. The method actively discovers the target device, or the mobile phone can passively discover the manner by receiving the target device discovery message; then, the user selects a printing device from the printing device list as the target device for printing, and the mobile phone completes the authentication configuration by performing information interaction with the target device.
  • MAC Medium Access Control
  • the process of authentication configuration is to obtain a security key between the mobile phone and the target device to ensure a secure connection.
  • the mobile phone obtains the public secret contained in the two-dimensional code by scanning the two-dimensional code of the target device.
  • the key that is, the public key, then performs a key exchange algorithm with the target device to obtain a security key to complete the configuration of the device.
  • the public key of the target device is obtained by scanning the two-dimensional code of the mobile phone, but, in most cases, the user Unfamiliar with the name of each device, when using the mobile phone to scan the QR code after selecting the target device, it is easy to scan the QR code of other devices, so that the QR code acquired by the mobile phone does not match the selected target device, which leads to subsequent configuration. The process failed.
  • the embodiments of the present invention provide a method and device for discovering between devices, which can solve the problem that the mobile phone obtains the wrong public key of the printing device, which causes the subsequent configuration process to fail.
  • an embodiment of the present invention provides a method for discovering between devices, including:
  • the first device sends a service query request message to the second device, where the service query request message includes service information to be queried by the first device, so that the second device determines whether to respond to the service query according to the service information. Request message.
  • the first device acquires matching public key information
  • the first device After the first device verifies that the matching public key information matches the public key derived value, the first device sends communication information to the second device to communicate with the second device.
  • the sending, by the first device, the service query request message to the second device includes:
  • the target device includes the second device and at least one third device, where the service query request message includes a service to be queried by the first device Information, such that the target device determines whether to respond to the service query request message according to the service information;
  • the method further includes:
  • the first device receives the service query response message sent by the at least one third device, and the service query response message sent by the at least one third device determines that the at least one third device responds to the service query request message And sending, the service query response message sent by the at least one third device includes a public key derived value of the at least one third device.
  • the method further includes:
  • the first device acquires the service information.
  • the service information includes a service name or a service name derived value.
  • the service query response message includes an authentication mode supported by the second device and/or a device type role of the second device.
  • an embodiment of the present invention provides a method for discovering between devices, including:
  • the first device determines to respond to the service query request message
  • the first device sends a service query response message to the second device, where the service query response message includes a public key derived value of the first device
  • the service query response message includes a public key derived value of the first device
  • the first device When the first device receives the communication information sent by the second device, the first device communicates with the second device.
  • the first device sends the second device to the second device when the first device determines to respond to the service query request message Before the service query response message, the method further includes:
  • the first device compares whether the service that the first device can provide is consistent with the service information
  • the first device determines to respond to the service query request message.
  • the first device sends the second device to the second device when the first device determines to respond to the service query request message Before the service query response message, the method further includes:
  • the first device generates the public key derived value according to the public key of the first device.
  • the public key derived value is a hash value of the public key.
  • the service information includes a service name or a service name derived value.
  • the service query response message includes an authentication mode supported by the first device, and/or The device type role of the first device.
  • an embodiment of the present invention provides a method for discovering between devices, including:
  • the first device sends a service query request message to the second device, where the service query request message includes the service information to be queried by the first device and the public key derived value of the second device, so that the second device is configured according to Determining whether to respond to the service query request message by the service information and the public key derived value;
  • the first device sends communication information to the second device to communicate with the second device.
  • the sending, by the first device, the service query request message to the second device includes:
  • the target device includes the second device and at least one third device, where the service query request message includes a service to be queried by the first device
  • the information and the public key of the second device are derived to cause the target device to determine whether to respond to the service query request message according to the service information and the public key derived value.
  • the method before the sending, by the first device, the service query request message to the second device, the method further includes:
  • the first device acquires the service information and a public key derived value of the second device.
  • the obtaining, by the first device, the public key derived value of the second device includes:
  • the first device acquires a public key of the second device
  • the first device generates a public key derived value of the second device according to the public key.
  • the public key derivative value is a public key hash value.
  • the service information includes a service name Or service name derived value.
  • the service query response message includes an authentication mode supported by the second device and/or a device type role of the second device.
  • an embodiment of the present invention provides a method for discovering between devices, including:
  • the first device determines to respond to the service query request message according to the service information and the public key derived value, the first device sends a service query response message to the second device;
  • the first device When the first device receives the communication information sent by the second device, the first device communicates with the second device.
  • the method when the first device determines to respond to the service query request message according to the service information and the public key derived value, the method further includes:
  • the first device compares whether the service that the first device can provide is consistent with the service information
  • the first device compares whether the public key derived value matches a public key of the first device
  • the first device determines to respond to the service query. Ask for news.
  • the public key derived value is a public key hash value.
  • the service information includes a service name or a service name derived value.
  • the service query response message includes an authentication mode supported by the first device, and/or the first The device type role of the device.
  • an embodiment of the present invention provides a method for discovering between devices, including:
  • the first device sends communication information to the second device to communicate with the second device.
  • the method before the first device sends the communication information to the second device to communicate with the second device, the method further includes:
  • the first device sends a service query request message to the second device, where the service query request message includes service information to be queried by the first device, so that the second device determines whether to respond according to the service information.
  • the service query request message ;
  • the first device receives a service query response message sent by the second device, where the service query response message is sent after the second device determines to respond to the service query request message.
  • the sending, by the first device, the public key derived value of the second device to the second device includes:
  • the device includes the second device and at least one third device.
  • the method before the first device sends the service query request message to the second device, the method further include:
  • the first device acquires the service information.
  • the service information includes a service name or a service name derivative value.
  • the method before the first device sends the public key derived value of the second device to the second device, the method further includes:
  • the first device acquires a public key derived value of the second device.
  • the acquiring, by the first device, the public key derivative value of the second device includes:
  • the first device acquires a public key of the second device
  • the first device generates a public key derived value of the second device according to the public key.
  • the public key derivative value is a public key hash value.
  • the response message includes an authentication mode supported by the second device and/or a device type role of the second device.
  • an embodiment of the present invention provides a method for discovering between devices, including:
  • the first device determines to reply to the second device response information according to the public key derived value, the first device sends a response message to the second device;
  • the first device When the first device receives the communication information sent by the second device, the first device communicates with the second device.
  • the method Before the first device determines to reply to the second device response information according to the public key derived value, before the first device sends a response message to the second device, the method further includes:
  • the first device compares whether the public key derived value matches a public key of the first device
  • the first device determines to reply to the second device response information.
  • the method when the first device receives the communication information sent by the second device, Before the first device communicates with the second device, the method further includes:
  • the first device When the first device determines to respond to the service query request message according to the service information, the first device sends a service query response message to the second device.
  • the method when the first device determines to respond to the service query request message according to the service information, before the first device sends a service query response message to the second device, the method further includes:
  • the first device compares whether the service that the first device can provide is consistent with the service information
  • the first device determines to respond to the service query request message.
  • the public key derivative value is a public key hash value.
  • the service information includes a service name or a service name derivative value.
  • the service query response message The authentication mode supported by the first device and/or the device type role of the first device is included.
  • an embodiment of the present invention provides a method for discovering between devices, including:
  • the first device acquires matching public key information
  • the first device After the first device verifies that the public key derived value of the matching public key information is matched, the first device sends communication information to the second device to communicate with the second device.
  • the method further includes:
  • sending the communication information to the second device to communicate with the second device includes:
  • the first device verifies that the public key derived value of the matching public key information matches, and if the service to be queried by the first device is consistent with the service information, the communication information and the second device are sent to the second device.
  • the second device communicates.
  • the public key derivative value is a public key hash value.
  • the method before the receiving, by the first device, the second device public key derivative value sent by the second device, the method further includes:
  • the first device synchronizes with the second device.
  • an embodiment of the present invention provides a method for discovering between devices, including:
  • the first device sends the public key derived value of the first device to the second device, so that the second device verifies whether the public key derived value matches the matching public key information acquired by the second device;
  • the first device When the first device receives the communication information sent by the second device, the first device communicates with the second device.
  • the method before the first device communicates with the second device, the method further includes:
  • the first device Sending, by the first device, a service query request message to the second device, where the service query request message is service information that can be provided by the first device, so that the second device determines the service information and the Whether the service to be queried by the first device is consistent with.
  • the service query request message is service information that can be provided by the first device, so that the second device determines the service information and the Whether the service to be queried by the first device is consistent with.
  • the method before the first device sends the public key derivative value of the first device to the second device, the method further includes:
  • the first device generates the public key derived value according to the public key of the first device.
  • the public key derivative value is a public key hash value.
  • the method before the first device sends the public key derivative value of the first device to the second device, the method further includes:
  • the first device synchronizes with the second device.
  • an embodiment of the present invention provides an apparatus for discovering between devices, including:
  • a sending unit configured to send a service query request message to the second device, where the service query request message includes service information to be queried by the first device, so that the second device determines, according to the service information, whether to respond to the Service query request message;
  • a receiving unit configured to receive a service query response message, where the service query response message is sent after the second device determines to respond to the service query request message, where the service query response message includes a public key of the second device Derived value
  • An obtaining unit configured to obtain matching public key information
  • the sending unit is further configured to: after the first device verifies that the matching public key information matches the public key derived value, send the communication information to the second device to communicate with the second device.
  • the sending unit is specifically configured to broadcast the service query request message to a target device, where the target device includes the second device and at least a third device, the service query request message includes service information to be queried by the first device, so that the target device determines, according to the service information, No response to the service query request message;
  • the receiving unit is further configured to receive a service query response message sent by the at least one third device, where the service query response message sent by the at least one third device determines that the at least one third device responds to the service query request After the message is sent, the service query response message sent by the at least one third device includes a public key derived value of the at least one third device.
  • the acquiring unit is further configured to acquire the service information.
  • the service information includes a service name or a service name derived value.
  • the service query response message includes an authentication mode supported by the second device and/or a device type role of the second device.
  • an embodiment of the present invention provides an apparatus for discovering between devices, including:
  • a receiving unit configured to receive a service query request message sent by the second device, where the service query request message includes service information to be queried by the second device;
  • a sending unit configured to send a service query response message to the second device when the first device determines to respond to the service query request message, where the service query response message includes a public key derived value of the first device In order for the second device to verify that the obtained matching public key information is consistent with the public key derived value;
  • a communication unit configured to: when the first device receives the communication information sent by the second device, communicate with the second device.
  • the device further includes:
  • a comparing unit configured to compare whether the service that the first device can provide is consistent with the service information
  • a determining unit configured to determine to respond to the service query request message when the service that the first device can provide is consistent with the service information.
  • the device further includes:
  • a generating unit configured to generate the public key derivative value according to the public key of the first device.
  • the public key derivative value is a hash value of the public key.
  • the service information includes a service name or a service name derived value.
  • the service query response message includes an authentication mode supported by the first device, and/or The device type role of the first device.
  • an embodiment of the present invention provides an apparatus for discovering between devices, including:
  • a sending unit configured to send a service query request message to the second device, where the service query request message includes service information to be queried by the first device and a public key derived value of the second device, so that the second Determining, by the device, the response to the service query request message according to the service information and the public key derived value;
  • a receiving unit configured to receive a service query response message, where the service query response message is sent after the second device determines to respond to the service query request message;
  • the sending unit is further configured to send communication information to the second device to communicate with the second device.
  • the sending unit is specifically configured to broadcast the service query request message to a target device, where the target device includes the second device And at least one third device, the service query request message includes service information to be queried by the first device and a public key derived value of the second device, so that the target device according to the service information and the The public key derived value determines whether to respond to the service query request message.
  • the device further includes:
  • an obtaining unit configured to acquire the service information and a public key derived value of the second device.
  • the acquiring unit includes:
  • Generating a subunit configured to generate a public key derived value of the second device according to the public key.
  • the public key derivative value is a public key hash value.
  • the service The information contains the service name or service name derived value.
  • the service query response message includes an authentication mode supported by the second device and/or a device type role of the second device.
  • an embodiment of the present invention provides an apparatus for discovering between devices, including:
  • a receiving unit configured to receive a service query request message sent by the second device, where the service query request message includes service information to be queried by the second device and a public key derived value of the first device;
  • a sending unit configured to send a service query response message to the second device when the first device determines to respond to the service query request message according to the service information and the public key derived value;
  • a communication unit configured to: when the first device receives the communication information sent by the second device, communicate with the second device.
  • the device further includes:
  • a comparing unit configured to compare whether the service that the first device can provide is consistent with the service information
  • the comparing unit is further configured to compare whether the public key derived value and the public key of the first device are match;
  • a determining unit configured to determine, in response to the service query request message, when the service that the first device can provide is consistent with the service information, and the public key derivative value matches the public key of the first device.
  • the public key derived value is a public key hash value.
  • the service information includes a service name or a service name derived value.
  • the service query response message includes an authentication mode supported by the first device, and/or the The device type role of the first device.
  • an embodiment of the present invention provides an apparatus for discovering between devices, including:
  • a sending unit configured to send a public key derived value of the second device to the second device, to enable the second device to determine whether to reply to the first device response message according to the public key derived value;
  • a receiving unit configured to receive a response message sent by the second device, where the response message is sent after the second device determines to reply to the first device response message
  • the sending unit is further configured to send communication information to the second device to communicate with the second device.
  • the sending unit is further configured to send a service query request message to the second device, where the service query request message includes the a service information to be queried by a device, so that the second device determines whether to respond to the service query request message according to the service information;
  • the receiving unit is further configured to receive a service query response message sent by the second device, where the service query response message is sent after the second device determines to respond to the service query request message.
  • the sending unit is specifically configured to broadcast, send the public key derivative value to a target device, so that the target device is configured Determining whether to reply to the first device response message according to the public key derived value, the target device includes the second device and at least one third device.
  • the device further includes:
  • An obtaining unit configured to obtain the service information.
  • the service information includes a service name or Service name derived value.
  • the acquiring unit is further configured to acquire a public key derived value of the second device.
  • the acquiring unit includes:
  • Generating a subunit configured to generate a public key derived value of the second device according to the public key.
  • the public key derivative value is a public key hash value.
  • the response message includes an authentication mode supported by the second device and/or a device type role of the second device.
  • an embodiment of the present invention provides an apparatus for discovering between devices, including:
  • a receiving unit configured to receive a public key derived value of the second device that is sent by the second device
  • a sending unit configured to send a response message to the second device when the first device determines to reply to the second device response information according to the public key derived value
  • a communication unit configured to: when the first device receives the communication information sent by the second device, communicate with the second device.
  • the return includes:
  • a comparing unit configured to compare whether the public key derived value matches a public key of the first device
  • a determining unit configured to determine to reply to the second device response information when the public key derived value matches the public key of the first device.
  • the receiving unit is further configured to receive a service query request message sent by the second device, where The service query request message includes service information to be queried by the second device;
  • the sending unit is further configured to: when the first device determines to respond to the service query request message according to the service information, send a service query response message to the second device.
  • the comparing unit is further configured to compare the service that the first device can provide with the service Whether the information is consistent;
  • the determining unit is further configured to: when the service that the first device can provide is consistent with the service information, determine to respond to the service query request message.
  • the public key derivative value is a public key hash value.
  • the service information includes a service name or Service name derived value.
  • the service query response message includes The authentication mode supported by the first device and/or the device type role of the first device.
  • an embodiment of the present invention provides an apparatus for discovering between devices, including:
  • a receiving unit configured to receive the second device public key derivative value sent by the second device
  • An obtaining unit configured to obtain matching public key information
  • a sending unit configured to verify, by the first device, the public key derived value of the matching public key information After the matching, the communication information is sent to the second device to communicate with the second device.
  • the receiving unit is further configured to receive a service query request message sent by the second device, where the service query request message includes the Service information that the second device can provide;
  • the sending unit is further configured to verify that the public key derived value of the matching public key information matches, and if the service to be queried by the first device is consistent with the service information, send the communication information to the second device. Communicating with the second device.
  • the public key derivative value is a public key hash value.
  • the device further includes:
  • a synchronization unit configured to synchronize with the second device.
  • an embodiment of the present invention provides an apparatus for discovering between devices, including:
  • a sending unit configured to send, to the second device, a public key derived value of the first device, so that the second device verifies whether the public key derived value matches the matching public key information acquired by the second device;
  • a communication unit configured to: when the first device receives the communication information sent by the second device, communicate with the second device.
  • the sending unit is further configured to send a service query request message to the second device, where the service query request message is the The service information that can be provided by the device, so that the second device determines whether the service information is consistent with the service to be queried by the first device.
  • the device further includes:
  • a generating unit configured to generate the public key derivative value according to the public key of the first device.
  • the public key derived value is a public key hash value.
  • the device further includes:
  • a synchronization unit configured to synchronize with the second device.
  • a method for discovering between devices which includes:
  • the first device acquires a public key of the second device
  • the first device generates a public key derived value of the second device according to the public key.
  • the first device Receiving, by the first device, a public key derived value of the second device that is sent by the second device, and verifying whether the received public key derivative value of the second device is correct, and if yes, the first device Sending a response message to the second device; after receiving the communication information sent by the second device, the first device communicates with the second device, where the communication information is received by the second device Sending to the first device after the response message;
  • the public key derived value is: a static or dynamically changing value; the public key derived value of the second device is a hash value generated based on the public key of the second device, or the second The public key of the device is combined with the hash value generated by the agreed plaintext information, or the cutoff value of the public key of the second device, or the cutoff value of the hash value generated based on the public key of the second device.
  • a method for discovering between devices which includes:
  • the second device verifies whether the received public key derived value of the second device is correct; the second device verifies that the received public key derived value of the second device is correct, and sends a response message to the first device.
  • the second device receives the ringing of the first device after receiving the second device Communicating information sent to the second device after the message, and communicating with the first device; or
  • the second device sends the public key derived value of the second device to the first device, so that the first device acquires the public key of the second device, and generates the public device of the second device according to the public key. After the key-derived value, verifying that the received public key derived value of the second device is correct; the second device receiving the first device is verifying the received public key derived value of the second device After being correct, the response message sent to the second device; after receiving the response message, the second device sends communication information to the first device to communicate with the first device;
  • the public key derived value is: a static or dynamically changing value; the public key derived value of the second device is a hash value generated based on the public key of the second device, or the second The public key of the device is combined with the hash value generated by the agreed plaintext information, or the cutoff value of the public key of the second device, or the cutoff value of the hash value generated based on the public key of the second device.
  • a device for discovering between devices is provided, the device being a first device, comprising:
  • An acquiring unit configured to acquire a public key of the second device, and generate a public key derived value of the second device according to the public key;
  • a first sending unit configured to send a public key derived value of the second device to the second device, to enable the second device to verify whether the received public key derived value of the second device is correct
  • a receiving unit configured to receive a response message sent by the second device, where the first sending unit is further configured to send the communication information to the second device after the first receiving unit receives the response message
  • the second device performs communication, and the response message is sent by the second device to the first device after the second device verifies that the received public key derived value of the second device is correct;
  • a second receiving unit configured to receive a public key derived value of the second device that is sent by the second device, and a verification unit, configured to verify whether the received public key derived value of the second device is correct
  • a sending unit configured to send a response message to the second device when the verification unit verifies that the received public key derived value of the second device is correct
  • the second receiving unit is further configured to receive the After the communication information sent by the second device, the communication is performed by the second device, where the communication information is sent by the second device to the first device after receiving the response message;
  • the public key derived value is: a static or dynamically changing value; the public key derived value of the second device is a hash value generated based on the public key of the second device, or the second The public key of the device is combined with the hash value generated by the agreed plaintext information, or the cutoff value of the public key of the second device, or the cutoff value of the hash value generated based on the public key of the second device.
  • the twentieth aspect provides a device for discovering between devices, where the device is a second device, and the method includes:
  • a first receiving unit configured to receive a public key of the second device that is sent by the first device after acquiring the public key of the second device, and generating the public key derived value of the second device according to the public key
  • a verification unit configured to verify whether the received public key derived value of the second device is correct
  • a first sending unit configured to verify, at the verification unit, the received public key derived value of the second device Sending a response message to the first device after the correct one
  • the first receiving unit is further configured to receive the communication information that is sent by the first device to the second device after receiving the response message sent by the second device Communicating with the first device; or,
  • a second sending unit configured to send a public key derived value of the second device to the first device, so that the first device acquires a public key of the second device, and generates the first After the public key of the second device is derived, verifying whether the received public key derived value of the second device is correct;
  • the second receiving unit is configured to receive the second device that is verifying the received second a response message sent to the second device after the public key derived value of the device is correct;
  • the second sending unit is further configured to send the communication information to the first after the second receiving unit receives the response message a device that communicates with the first device;
  • the public key derived value is: a static or dynamically changing value; the public key derived value of the second device is a hash value generated based on the public key of the second device, or the second The public key of the device is combined with the hash value generated by the agreed plaintext information, or the cutoff value of the public key of the second device, or the cutoff value of the hash value generated based on the public key of the second device.
  • a twenty-first aspect provides a method for discovering between devices, which is characterized by comprising:
  • the first device sends a service query request message to the second device, where the service query request message Include the service information to be queried by the first device, so that the second device determines whether to respond to the service query request message according to the service information;
  • the first device acquires matching public key information
  • the first device After receiving the service query response message and verifying that the matching public key information matches the public key derived value of the second device, the first device sends the communication information to the second device to the second device. Device communication.
  • the public key derived value of the second device that is sent by the second device is specifically carried in the service query response message.
  • the first device specifically receives the public key derived value of the second device that is sent by the second device, and verifies the matching public key After the information matches the public key derived value of the second device, the service query request message is sent to the second device.
  • a twenty-second aspect provides a method for discovering between devices, including:
  • the first device sends a service query request message to the second device, where the service query request message includes service information to be queried by the first device, so that the second device determines whether to respond to the service query according to the service information.
  • Request message includes service information to be queried by the first device, so that the second device determines whether to respond to the service query according to the service information.
  • the first device After receiving the service query response message and the public key derivative value of the second device is verified, the first device sends communication information to the second device to communicate with the second device.
  • the public key derived value of the second device that is sent by the first device is specifically carried in the service query request message.
  • the first device is specific After sending the public key derived value of the second device to the second device and the public key derived value of the second device is verified to pass, sending a service query request message to the second device.
  • a method for discovering between devices which includes:
  • the first device acquires matching public key information
  • the first device matches the public key derived value of the second device, and the service to be queried by the first device matches the service information that can be provided by the second device, Transmitting communication information to the second device to communicate with the second device.
  • the public key derived value of the second device sent by the second device is specifically carried in a service query request message sent by the second device.
  • a device for discovering between devices is provided, and the device is a first device, and the method includes:
  • a sending unit configured to send a service query request message to the second device, where the service query request message includes service information to be queried by the first device, so that the second device determines, according to the service information, whether to respond to the Service query request message;
  • a receiving unit configured to receive a service query response message, where the service query response message is sent after the second device determines to respond to the service query request message;
  • the receiving unit is further configured to receive a public key derived value of the second device that is sent by the second device;
  • An obtaining unit configured to obtain matching public key information
  • the sending unit is further configured to: after the receiving unit receives the service query response message, and the first device verifies that the matching public key information matches a public key derived value of the second device, The second device transmits communication information to communicate with the second device.
  • the public key derived value of the second device that is sent by the second device is specifically carried in the service query response message.
  • the sending, by the sending unit, the sending the service query request message to the second device is specifically:
  • the sending unit is configured to receive, by the receiving unit, a public key derived value of the second device that is sent by the second device, and the first device verifies the matching public key information and the second device After the public key derived value is matched, the service query request message is sent to the second device.
  • a device for discovering between devices comprising:
  • a sending unit configured to send a service query request message to the second device, where the service query request message includes service information to be queried by the first device, so that the second device determines, according to the service information, whether to respond to the Service query request message;
  • a receiving unit configured to receive a service query response message, where the service query response message is sent after the second device determines to respond to the service query request message;
  • the sending unit is further configured to send the public key derived value of the second device to the second device, so that the second device verifies the received public key derived value of the second device;
  • the sending unit is further configured to: after the receiving unit receives the service query response message, and the public key derivative value of the second device is verified to be passed, send the communication information to the second device The device communicates.
  • the public key derived value of the second device that is sent by the first device is specifically carried in the service query request message.
  • the sending, by the sending unit, the sending the service query request message to the second device is specifically:
  • the sending unit is configured to send a service query request message to the second device after sending the public key derived value of the second device to the second device and the public key derived value of the second device is verified to pass.
  • the twenty-sixth aspect provides a device for discovering between devices, where the device is a first device, and the method includes:
  • a receiving unit configured to receive the second device public key derivative value sent by the second device
  • An obtaining unit configured to obtain matching public key information
  • the receiving unit is further configured to receive a service query request message sent by the second device, where
  • the service query request message includes service information that the second device can provide;
  • a sending unit configured to: after the first device verifies the matching public key information, the public key derivative value matches, and the service to be queried by the first device matches the service information that the second device can provide, Transmitting communication information to the second device to communicate with the second device.
  • the public key derived value of the second device that is sent by the second device is specifically carried in a service query request message sent by the second device.
  • the twenty-seventh aspect provides a method for discovering between devices, which is characterized by comprising:
  • the second device sends a service query response message to the first device after determining to respond to the service query request message;
  • the second device After receiving the communication information sent by the first device, the second device communicates with the second device, where the communication information is that the first device receives the service query response message and verifies the matching public And transmitting, to the second device, the key information is matched with the public key derived value of the second device.
  • the public key derived value of the second device that is sent by the second device is specifically carried in the service query response message.
  • the service query request message is specifically a public key derived value of the second device that is sent by the first device by the second device After the matching public key information is matched with the public key derived value of the second device, the information is sent to the second device.
  • a twenty-eighth aspect a method for discovering between devices, comprising:
  • the second device After the second device determines to respond to the service query request message according to the service information, sending, by the second device, a service query response message to the first device;
  • the second device verifies the received public key derived value of the second device
  • the public key derived value of the second device that is sent by the first device is specifically carried in the service query request message.
  • the first device is specifically configured to send a public key derived value of the second device to a second device, and a public key derived value of the second device After being verified, the service query request message is sent to the second device.
  • a twenty-ninth aspect provides a method for discovering between devices, comprising:
  • the second device sends a service query request message to the first device, where the service query request message includes service information that the second device can provide;
  • the second device receives the first device to verify that the matching public key information matches the public key derived value of the second device, and the service to be queried by the first device and the second device may provide After the service information is matched, the communication information sent to the second device is communicated with the first device.
  • the public key derived value of the second device that is sent by the second device is specifically carried in a service query request message sent by the second device.
  • a device for discovering between devices is provided, the device being a second device, It is characterized by including:
  • a receiving unit configured to receive a service query request message sent by the first device, where the service query request message includes service information to be queried by the first device, so that the second device determines whether to respond according to the service information.
  • Service query request message ;
  • a sending unit configured to send, by the second device, a service query response message to the first device after determining to respond to the service query request message
  • the sending unit is further configured to send the public key derived value of the second device to the first device, so that the first device, after obtaining the matching public key information, verify the matching public key information and the Whether the public key derived value of the second device matches;
  • the receiving unit is further configured to communicate with the second device after receiving the communication information sent by the first device, where the communication information is that the first device receives the service query response message and verifies the And after the matching public key information is matched with the public key derived value of the second device, sent to the second device.
  • the public key derived value of the second device is specifically carried in the service query response message.
  • a device for discovering between devices where the device is a second device, and the method includes:
  • a receiving unit configured to receive a service query request message sent by the first device, where the service query request message includes service information to be queried by the first device;
  • a sending unit configured to send, by the second device, a service query response message to the first device after determining to respond to the service query request message according to the service information
  • the receiving unit is further configured to receive a public key derived value of the second device that is sent by the first device;
  • a verification unit configured to verify the received public key derivative value of the second device
  • the receiving unit is further configured to receive, after the first device receives the service query response message, and the public key derivative value of the second device is verified, the communication information sent to the second device, and The first device communicates.
  • a device for discovering between devices comprising:
  • a sending unit configured to send a public key derived value of the second device to the first device, so that the first device acquires matching public key information and verifies the matching public key information and the public key of the second device Whether the derived values match;
  • the sending unit is further configured to send a service query request message to the first device, where the service query request message includes service information that the second device can provide;
  • a receiving unit configured to receive, by the first device, that the matching public key information matches a public key derived value of the second device, and the service that the first device is to query and the second device may provide After the service information is matched, the communication information sent to the second device is communicated with the first device.
  • the public key derivative value is: static or dynamically changing value
  • the public key derivative value of the second device is a hash value generated based on the public key of the second device, or a hash value generated by the public key of the second device in combination with the agreed plaintext information, or a cutoff value of the public key of the second device, Or a cutoff value of a hash value generated based on the public key of the second device.
  • the first device may record channel information of the second device, and after verifying that the matching public key information matches the public key derived value of the second device, switch the channel to the first The channel of the two devices.
  • the method and device for discovering between devices provided by the first embodiment of the present invention, in which the first device sends a service query request message including the service information to be queried by the first device to the second device, and the second device determines according to the service information. After the service query request message is sent, the service query response message containing the public key derived value of the second device is sent; after receiving the service query response message, the first device obtains the matching public key information, and matches the matching public key information with the public key derivative value. In the first device After verifying that the matching public key information matches the public key derived value, the first device communicates with the second device.
  • the second device after determining the service query request message in response to the first device, the second device sends the public key derived value of the second device to the first device, and the first device verifies whether it matches the obtained matching public key information, when the two devices After the matching, the first device communicates with the second device, so that the subsequent configuration of the first device and the second device is successful, and the first device fails to obtain the wrong public key of the second device, which causes the subsequent configuration process to fail.
  • the method and device for discovering between devices in which the first device sends a service query request message including the obtained public key derived value of the second device and the service information to the second device, After determining the response service query request message according to the service information and the public key derivative value, the second device sends a service query response message to the first device, and after receiving the service query response message, the first device communicates with the second device.
  • the first device sends the public key derived value of the second device to the second device, and the second device responds to the first device according to the determination, and then the first device communicates with the second device, thereby preventing the first device from acquiring the error.
  • the public key of the second device causes the subsequent configuration process to fail.
  • a method and device for discovering between devices in which the first device sends a public key derived value of the second device to the second device; and the second device determines to reply first according to the public key derived value. After the device responds to the message, the response message is sent to the first device, and after the first device receives the response message sent by the second device, the first device communicates with the second device. In this way, the first device sends the public key derived value of the second device to the second device, and after the second device determines the derivative value according to the public key, the first device communicates with the second device, thereby preventing the first device from acquiring the error.
  • the public key of the second device causes the subsequent configuration process to fail.
  • the method and device for discovering between the devices provided by the device in another aspect of the present invention in which the second device sends its own public key derivative value to the first device; after the first device obtains the matching public key information, the first device obtains the matching public key. Whether the information public key derived values match, after the two match, the first device communicates with the second device. In this manner, the first device verifies that the matching public key information is matched with the public key derived value, and then communicates with the second device, so that the first device obtains the wrong public key of the second device, and the subsequent configuration process fails.
  • FIG. 1 is a flowchart of a method according to an embodiment of the present invention
  • FIG. 3 is a flowchart of a method according to another embodiment of the present invention.
  • FIG. 5 is a flowchart of a method according to another embodiment of the present invention.
  • FIG. 6 is a flowchart of a method according to another embodiment of the present invention.
  • FIG. 7 is a flowchart of a method according to another embodiment of the present invention.
  • FIG. 8 is a flowchart of a method according to another embodiment of the present invention.
  • FIG. 9 is a flowchart of a method according to another embodiment of the present invention.
  • FIG. 10 is a flowchart of a method according to another embodiment of the present invention.
  • FIG. 11 is a flowchart of a method according to another embodiment of the present invention.
  • FIG. 12 is a flowchart of a method according to another embodiment of the present invention.
  • FIG. 13 is a flowchart of a method according to another embodiment of the present invention.
  • FIG. 14 is a flowchart of a method according to another embodiment of the present invention.
  • FIG. 15 is a flowchart of a method according to another embodiment of the present invention.
  • 16 is a schematic structural diagram of a device according to another embodiment of the present invention.
  • FIG. 17 and FIG. 18 are schematic structural diagrams of a device according to another embodiment of the present invention.
  • FIG. 19 and FIG. 20 are schematic structural diagrams of a device according to another embodiment of the present invention.
  • FIG. 21 and FIG. 22 are schematic structural diagrams of a device according to another embodiment of the present invention.
  • FIG. 23 and FIG. 24 are schematic structural diagrams of a device according to another embodiment of the present invention.
  • FIG. 25 and FIG. 26 are schematic structural diagrams of a device according to another embodiment of the present invention.
  • 27 and 28 are schematic structural diagrams of a device according to another embodiment of the present invention.
  • FIG. 29 and FIG. 30 are schematic diagrams showing the structure of a device according to another embodiment of the present invention.
  • An embodiment of the present invention provides a method for discovering between devices, where the first device belongs to a Wi-Fi device. As shown in FIG. 1 , the method includes:
  • the first device sends a service query request message to the second device.
  • the service query request message includes service information to be queried by the first device, so that the second device determines whether to respond to the service query request message according to the service information.
  • the first device sends a service query request message to the second device, where the second device may further send a service query request message to the target device, where the target device includes the second device and the at least one third device, where the service query request message includes The service information to be queried by the first device, so that the target device determines whether to respond to the service query request message according to the service information.
  • the first device may further obtain the service information before the first device sends the service query request message to the second device.
  • the service information includes a service name or a service name derived value
  • the service name derived value may be a service name hash value
  • the first device receives a service query response message.
  • the service query response message is sent after the second device determines to respond to the service query request message, where the service query response message includes the public key derived value of the second device.
  • the service query response message sent by the at least one third device may be received, and the service query response message sent by the at least one third device is at least one third.
  • the service query response message sent by the at least one third device includes at least one public key derived value of the third device.
  • the service query response message includes an authentication mode supported by the second device and/or a device type role of the second device.
  • the first device acquires matching public key information.
  • the first device After the first device verifies that the matching public key information matches the public key derived value, the first device sends the communication information to the second device to communicate with the second device.
  • the manner in which the first device verifies that the matching public key information matches the public key derived value may be that the first device generates a public key derived value based on the matching public key information, and compares with the received public key derived value to determine Whether the two are the same, if the same determines that the matching public key information matches the public key derived value.
  • the matching public key information may be a public key of the second device or a public key derived value.
  • the public key derived value is a mapping value generated based on the public key, and may be a hash value of the public key, or a hash value of the public key combined with the agreed plaintext information, or a cutoff value of the public key (the part of the intercepted public key is used as a derivative value) Or, based on the cutoff value of the hash value generated by the public key (the cutoff value of the hash value of the public key, or the cutoff value of the hash value generated by the public key together with the agreed plaintext information).
  • the agreed plaintext information may be static plaintext information or dynamic plaintext information.
  • the plaintext information may be a time synchronization value (TSF), or a time stamp (Time stamp value), or an anchor master value (Anchor Mater), a master rank value (Master Rank), or a random value. Or, a nonce value, or, a MAC address.
  • the agreed plaintext information may be one or more of these plaintext information, in whole or in part. For example, the part of the time stamp is taken as plaintext information.
  • the public key derived value may be static or dynamic. If the public key derived value is dynamically changed, the public key derived value is generated by combining the public key with the dynamically changing information map. If the public key derived value is static, the public key derived value is a public key combined with a static information mapping generate.
  • the manner in which the first device verifies that the matching public key information matches the public key derived value may be that the first device generates the public information based on the matching public key information and the agreed static plaintext information.
  • the key derived value is compared to the received public key derived value.
  • the manner in which the first device verifies that the matching public key information matches the public key derived value may be that the first device generates the public key derived value based on the matching public key information and the agreed dynamic plaintext information, and The received public key derived values are compared.
  • the specific matching may be: when the public key derivative value of the second device is generated based on the public key of the second device and the timestamp information of the second device, the first device receives the message sent by the second device, where The message includes the timestamp information of the second device, and the first device generates the public key derived value by using the matching public key information and the timestamp information of the second device, and is derived from the received public key of the second device. Value comparison, if the values are the same, it is determined that the matching public key information matches the public key derived value of the second device, that is, the received public key derived value of the second device is verified to be correct.
  • the first device uses the matching public key information.
  • the communication information may be: an association request message association request, or a reassociation request message reassociation request, or an authentication request message authentication request, or a data message Data frame, or an EAP (Extensible Authentication Protocol) message, or an action message action Frame, or management message frame, or beacon frame beacon, etc.
  • EAP Extensible Authentication Protocol
  • the first device in the present invention sends a service query request message including the service information to be queried by the first device to the second device, and after the second device determines the response service query request message according to the service information, the second device sends the The service query response message of the public key derived value of the second device; after receiving the service query response message, the first device obtains the matching public key information, matches the matching public key information with the public key derivative value, and verifies the matching public key information on the first device. After matching with the public key derived value, the first device communicates with the second device.
  • the second device after determining the service query request message in response to the first device, the second device sends the public key derived value of the second device to the first device, and the first device verifies whether it matches the obtained matching public key information, when the two devices After the matching, the first device communicates with the second device, so that the subsequent configuration of the first device and the second device is successful, and the first device fails to obtain the wrong public key of the second device, which causes the subsequent configuration process to fail.
  • a further embodiment of the present invention provides a method for discovering between devices, where the first device belongs to a Wi-Fi device. As shown in FIG. 2, the method includes:
  • the first device receives a service query request message sent by the second device.
  • the service query request message includes service information to be queried by the second device.
  • the service information includes a service name or a service name derived value
  • the service name derived value may be a service name hash value
  • the service query response message includes an authentication mode supported by the first device and/or a device type role of the first device.
  • the first device determines to respond to the service query request message, the first device sends a service query response message to the second device.
  • the service query response message includes a public key derived value of the first device, so that the second device verifies whether the obtained matching public key information is consistent with the public key derived value.
  • the manner in which the first device verifies that the matching public key information matches the public key derived value may be that the first device generates a public key derived value based on the matching public key information, and compares with the received public key derived value to determine Whether the two are the same, if the same determines that the matching public key information matches the public key derived value.
  • the first device may further compare whether the service that the first device can provide is consistent with the service information, before the first device sends the service query response message to the second device. When the service that the first device can provide is consistent with the service information, the first device determines to respond to the service query request message.
  • the first device can compare the service and service information that can be provided by the first device, the first device can obtain, from the service information, a service name that the second device can provide, and the service name and the service name. The service name of the service to be queried by a device is compared to determine whether the two are consistent.
  • the first device may further generate a public key derived value according to the public key of the first device.
  • the public key can be a hash value of the public key, or a hash value of the public key combined with the agreed plaintext information, or a cutoff value of the public key (the part intercepting the public key is used as a derivative value).
  • the first device When the first device receives the communication information sent by the second device, the first device communicates with the second device.
  • the communication information may be one or more of an association request message, a re-association request message, or an authentication request message, or a data message, or an EAP message, or an action message, or a management message.
  • the second device in the present invention sends a service query request message including the service information to be queried by the second device to the first device, and after the first device determines the response service query request message according to the service information, the first device sends the a service query response message of a public key derived value of a device; after receiving the service query response message, the second device obtains the matching public key information, matches the matching public key information with the public key derivative value, and verifies the matching public key information on the second device After matching with the public key derived value, the second device communicates with the first device.
  • the first device determines the service in response to the second device
  • the public key of the first device is sent to the second device
  • the second device verifies whether it matches the obtained matching public key information.
  • the second device communicates with the first device. Therefore, the subsequent configuration of the second device and the first device is successful, and the second device is prevented from acquiring the wrong public key of the first device, which causes the subsequent configuration process to fail.
  • a further embodiment of the present invention provides a method for discovering between devices, where the first device belongs to a Wi-Fi device. As shown in FIG. 3, the method includes:
  • the first device sends a service query request message to the second device.
  • the service query request message includes the service information to be queried by the first device and the public key derived value of the second device, so that the second device determines whether to respond to the service query request message according to the service information and the public key derived value.
  • the manner in which the first device sends the service query request message to the second device may further send, by the first device, a service query request message to the target device, where the target device includes the second device and the at least one third device, and the service query request The message includes the service information to be queried by the first device and the public key derived value of the second device, so that the target device determines whether to respond to the service query request message according to the service information and the public key derived value.
  • the first device may further obtain the service information and the public key derived value of the second device.
  • the manner in which the first device acquires the public key derived value of the second device may be that the first device acquires the public key of the second device, and then generates a public key derived value of the second device according to the public key.
  • the public key derived value is a public key hash value.
  • the service information contains the service name or service name derived value.
  • the public key can be a hash value of the public key, or a hash value of the public key combined with the agreed plaintext information, or a cutoff value of the public key (the part intercepting the public key is used as a derivative value).
  • the first device receives a service query response message.
  • the service query response message is sent after the second device determines to respond to the service query request message.
  • the service query response message includes an authentication mode and/or a second device supported by the second device.
  • the device type role is not limited to:
  • the first device sends communication information to the second device to communicate with the second device.
  • the communication information may be one or more of an association request message, or a re-association request message, or an authentication request message, or a data message, or an EAP message, or an action message, or a management message.
  • the first device in the present invention sends a service query request message including the obtained public key derived value of the second device and the service information to the second device, where the second device determines the service information and the public key derived value. After the service query request message is sent, the service query response message is sent to the first device, and after receiving the service query response message, the first device communicates with the second device.
  • the first device sends the public key derived value of the second device to the second device, and the second device responds to the first device according to the determination, and then the first device communicates with the second device, thereby preventing the first device from acquiring the error.
  • the public key of the second device causes the subsequent configuration process to fail.
  • a further embodiment of the present invention provides a method for discovering between devices, where the first device belongs to a Wi-Fi device. As shown in FIG. 4, the method includes:
  • the first device receives a service query request message sent by the second device.
  • the service query request message includes the service information to be queried by the second device and the public key derived value of the first device.
  • the service information includes a service name or a service name derived value.
  • the first device determines the response service query request message according to the service information and the public key derived value, the first device sends a service query response message to the second device.
  • the first device may further compare the first device before the first device sends the service query response message to the second device, when the first device determines the response service query request message according to the service information and the public key derived value. Whether the service and service information are consistent, and compare whether the public key derivative value matches the public key of the first device, and then, when the first device can provide the service and service letter When the information is consistent and the public key derived value matches the public key of the first device, the first device determines to respond to the service query request message.
  • the first device in a manner that the first device compares the service and the service information that can be provided by the first device, the first device obtains, from the service information, a service name that the second device can provide, and the service name and the first device.
  • the service name of the service to be queried is compared to determine whether the two are consistent.
  • the manner in which the first device compares the public key derived value with the public key of the first device may be: calculating the public key from the public key derived value, and then comparing the calculated public key with the public key of the first device. Whether the two are consistent, if they are consistent, the two are matched.
  • the first device If they are inconsistent, it is determined that the two do not match, or the first device generates a public key derived value based on the public key, and compares with the received public key derivative value to determine whether the two are The same, if the same determines that the matching public key information matches the public key derived value.
  • the public key derived value is a public key hash value.
  • the service query response message includes an authentication mode supported by the first device and/or a device type role of the first device.
  • the public key can be a hash value of the public key, or a hash value of the public key combined with the agreed plaintext information, or a cutoff value of the public key (the part intercepting the public key is used as a derivative value).
  • the first device When the first device receives the communication information sent by the second device, the first device communicates with the second device.
  • the communication information may be one or more of an association request message, or a re-association request message, or an authentication request message, or a data message, or an EAP message, or an action message, or a management message.
  • the second device in the present invention sends a service query request message including the obtained public key derived value of the first device and the service information to the first device, where the first device determines according to the service information and the public key derived value. Sending a service query response to the second device after responding to the service query request message The message, after receiving the service query response message, the second device communicates with the first device.
  • the second device sends the public key derived value of the first device to the first device, and the first device responds to the second device according to the determination, and then the second device communicates with the first device, thereby preventing the second device from acquiring the error.
  • the public key of the first device causes the subsequent configuration process to fail.
  • a further embodiment of the present invention provides a method for discovering between devices, where the first device belongs to a Wi-Fi device. As shown in FIG. 5, the method includes:
  • the first device sends a public key derived value of the second device to the second device.
  • the first device sends the public key derived value of the second device to the second device, so that the second device determines whether to reply to the first device response message according to the public key derived value.
  • the first device sends the public key derived value of the second device to the second device, where the first device broadcasts the public key derivative value to the target device, so that the target device determines whether to reply according to the public key derivative value.
  • a device response message the target device includes a second device and at least one third device.
  • the first device may obtain the public key derived value of the second device.
  • the manner in which the first device acquires the public key derived value of the second device is that the first device acquires the public key of the second device; and then, the first device generates the public key derived value of the second device according to the public key.
  • the public key derived value is a public key hash value.
  • the public key can be a hash value of the public key, or a hash value of the public key combined with the agreed plaintext information, or a cutoff value of the public key (the part intercepting the public key is used as a derivative value).
  • the first device receives a response message sent by the second device.
  • the response message is sent after the second device determines to reply to the first device response message.
  • the first device sends communication information to the second device to communicate with the second device.
  • the first device may further send a service query request message to the second device, where the service query request message includes the service to be queried by the first device.
  • the service query request message includes the service to be queried by the first device.
  • Information so that the second device determines whether to respond to the service query request message according to the service information; then, the first device receives the service query sent by the second device In response to the message, the service query response message is sent after the second device determines to respond to the service query request message.
  • the first device may further obtain the service information before the first device sends the service query request message to the second device.
  • the service information contains the service name or service name derived value.
  • the response message includes an authentication mode supported by the second device and/or a device type role of the second device.
  • the communication information may be one or more of an association request message, or a re-association request message, or an authentication request message, or a data message, or an EAP message, or an action message, or a management message.
  • the first device sends the public key derived value of the second device to the second device, and the second device sends a response to the first device after determining to reply to the first device response message according to the public key derived value. After the first device receives the response message sent by the second device, the first device communicates with the second device.
  • the first device sends the public key derived value of the second device to the second device, and after the second device determines the derivative value according to the public key, the first device communicates with the second device, thereby preventing the first device from acquiring the error.
  • the public key of the second device causes the subsequent configuration process to fail.
  • a further embodiment of the present invention provides a method for discovering between devices, where the first device belongs to a Wi-Fi device. As shown in FIG. 6, the method includes:
  • the first device receives a public key derived value of the second device that is sent by the second device.
  • the public key can be a hash value of the public key, or a hash value of the public key combined with the agreed plaintext information, or a cutoff value of the public key (the part intercepting the public key is used as a derivative value).
  • the first device determines to reply to the second device response information according to the public key derived value, the first device sends a response message to the second device.
  • the first device When the first device receives the communication information sent by the second device, the first device communicates with the second device.
  • the first device may further compare the public key derivative value with the first device, when the first device determines to reply to the second device response information according to the public key derived value. Whether the public key matches; when the public key derived value matches the public key of the first device, the first device determines to reply to the second device response information.
  • the first device may receive the service query request message sent by the second device, and the service query request message, before the first device communicates with the second device.
  • the service information to be queried by the second device is included; when the first device determines the response service query request message according to the service information, the first device sends a service query response message to the second device.
  • the first device may compare the service and service information that the first device can provide, when the first device sends the service query response message according to the service information. Consistent; when the service that the first device can provide is consistent with the service information, the first device determines to respond to the service query request message.
  • the first device in a manner that the first device compares the service and the service information that can be provided by the first device, the first device obtains, from the service information, a service name that the second device can provide, and the service name and the first device. Compare the service names of the available services to determine if the two are consistent.
  • the manner in which the first device compares the public key derived value with the public key of the first device may be: calculating the public key from the public key derived value, and then comparing the calculated public key with the public key of the first device. Whether the two are consistent, if they are consistent, the two are matched.
  • the first device If they are inconsistent, it is determined that the two do not match, or the first device generates a public key derived value based on the public key, and compares with the received public key derivative value to determine whether the two are The same, if the same determines that the matching public key information matches the public key derived value.
  • the public key derived value is a public key hash value.
  • the service information contains the service name or service name derived value.
  • the service query response message includes an authentication mode supported by the first device and/or a device type role of the first device.
  • the communication information may be: an association request message, or a re-association request message, or an authentication request message, or a data message, or an EAP message, or an action message, or a management message, or the like. A variety.
  • the second device sends the public key derived value of the first device to the first device, and the first device sends a response to the second device after determining to reply to the second device response message according to the public key derived value. After the second device receives the response message sent by the first device, the second device communicates with the first device.
  • the second device sends the public key derived value of the first device to the first device, and after the second device determines the derivative value according to the public key, the second device communicates with the first device, thereby preventing the second device from acquiring the error.
  • the public key of the first device causes the subsequent configuration process to fail.
  • a further embodiment of the present invention provides a method for discovering between devices, where the first device belongs to a Wi-Fi device, as shown in FIG.
  • the first device receives a second device public key derived value sent by the second device.
  • the first device acquires matching public key information.
  • the first device After the first device verifies that the matching public key information matches the public key derived value, the first device sends the communication information to the second device to communicate with the second device.
  • the first device may receive the service query request message sent by the second device, where the service is The query request message contains service information that the second device can provide.
  • the sending the communication information to the second device to communicate with the second device is specifically, the first device verification matching public key information public key derivative value matches, and the first After the service and the service information to be queried by the device are consistent, the communication information is sent to the second device to communicate with the second device.
  • the manner in which the first device compares the service and the service information to be queried by the first device may be: the first device obtains, from the service information, a service name that the second device can provide, and the service name and the first device.
  • the service name of the service to be queried is compared to determine whether the two are consistent.
  • the first device compares the public key derived value with the matching public key information acquired by the first device.
  • the method of matching may be: calculating the public key from the public key derived value and the matching public key information respectively, and then comparing whether the public keys calculated by the two are consistent. If they are consistent, the two are matched, and if they are inconsistent, the two are determined. Does not match.
  • the public key derived value is a public key hash value.
  • the first device may synchronize with the second device before the first device receives the second device public key derived value sent by the second device.
  • the matching public key information may be a public key of the second device or a public key derived value.
  • the public key can be a hash value of the public key, or a hash value of the public key combined with the agreed plaintext information, or a cutoff value of the public key (the part intercepting the public key is used as a derivative value).
  • the communication information may be one or more of an association request message, or a re-association request message, or an authentication request message, or a data message, or an EAP message, or an action message, or a management message.
  • the second device sends its own public key derivative value to the first device; after the first device obtains the matching public key information, it verifies whether the matching public key information public key derivative value matches, After the matching, the first device communicates with the second device. In this manner, the first device verifies that the matching public key information is matched with the public key derived value, and then communicates with the second device, so that the first device obtains the wrong public key of the second device, and the subsequent configuration process fails.
  • a further embodiment of the present invention provides a method for discovering between devices, where the first device belongs to a Wi-Fi device, as shown in FIG.
  • the first device sends a public key derived value of the first device to the second device.
  • the first device sends the public key derived value of the first device to the second device, so that the second device verifies whether the public key derived value matches the matching public key information acquired by the second device.
  • the first device When the first device receives the communication information sent by the second device, the first device communicates with the second device.
  • the first device may send a service query request message to the second device, where the service query request message is service information that can be provided by the first device, so that the second device determines The service information is consistent with the service to be queried by the first device.
  • the service query request message is service information that can be provided by the first device, so that the second device determines The service information is consistent with the service to be queried by the first device.
  • the first device may generate the public key derived value according to the public key of the first device.
  • the public key derived value is a public key hash value.
  • the first device may synchronize with the second device before the first device sends the public key derived value of the first device to the second device.
  • the communication information may be one or more of an association request message, or a re-association request message, or an authentication request message, or a data message, or an EAP message, or an action message, or a management message.
  • the first device sends its own public key derived value to the second device; after the second device obtains the matching public key information, it verifies whether the matching public key information public key derived value matches, in both After the matching, the second device communicates with the first device. In this manner, after the second device verifies that the obtained matching public key information matches the public key derived value, the second device communicates with the first device, so that the second device obtains the wrong public key of the first device, and the subsequent configuration process fails.
  • Another embodiment of the present invention provides a method for discovering between devices, which is used in a Wi-Fi device, combined with a WFDS (Wi-Fi Direct Services) specification, to discover between a mobile phone and a printing device.
  • the method includes:
  • the mobile phone broadcasts a service inquiry message.
  • the service query message is a WFDS message, and the service query message sent by the mobile phone includes a hash value of the service name or the service name, and a MAC address of the mobile phone.
  • the mobile phone needs to obtain the service to be executed before the broadcast service query message is broadcasted, and the user may be in the device UI (User Interface) by the user's specific operation. Select, or enter the service to be performed, for example, print, send, share, play, display, associate, configure AP (Access Point), replace AP, add AP, add device to join network, configure current One of the device, the current device, the current device, the device, the device, the device, the device, the device, the device, the device, the device, the device, the device, the device, the device, the device, the device, the device, the device, the device, the device, the device, the device, the device, the device, the device, the device, the device, the device, the device, the device, the device, the device, the device, the device, the device, the device, the device, the device, the device, the device Or a plurality of types, the mobile phone may obtain the service information by obtaining the service to be executed, for example, extracting the service information from
  • the device that receives the service query message if it supports the corresponding service information, such as: print, send, share, play, display, associate, configure an AP (Access Point, access point), replace the AP, add an AP, add
  • the device joins the network, configures the current device, connects the current device, connects the current device to another device, supports configuration, supports being owned, is not configured at this time, can be configured, discovers the AP, and scans the discovery to support WPS (DPP) configuration. If one or more of the devices, etc., the device that receives the service query message will respond.
  • the mobile phone query service adding a device to join the network, the device receiving the service query message will respond if the support is added; the mobile phone query service: configuring the current device, and the device receiving the service query message if configured In response, the mobile phone configures the current device as the service information in the service query message; the mobile phone query service: connects the current device, and the device that receives the service query message responds if it supports being connected, and the mobile phone connects the current device as the service information.
  • the mobile phone query service the connection connects the current device to another device, and the device that receives the service query message responds if it supports connecting the current device to another device;
  • the mobile phone claims service: support is supported The device that receives the service query message responds if the configuration function is supported; the mobile phone claims service: the device that is not configured to be configured at this time, and the device that receives the service query message responds if the configuration function is supported; the mobile phone claims service :stand by Possession, receiving the service query message if the device has a support function will respond.
  • the device performs service discovery, such as a mobile phone for service query, and the service for querying is: discovering an AP.
  • the mobile device sends a probe request message, indicating that the AP device is to be queried, and the device that receives the message, if it is an AP, indicates that the AP is supported.
  • the service is responded to; the service is: the P2P device is found, and the mobile phone carries the P2P IE in the service query message, indicating that the device supporting the P2P is queried, and the P2P IE is used as the service information to be queried, and if the device receives the message, Support for P2P will respond.
  • the P2P IE is carried in the response message; for example, the service that is queried is: discovering a device that supports WPS configuration (WiFi protection setup, WiFi protection setup) (or, support for DPP configuration (Device Provisioning Protocol))
  • the mobile device carries the WPS IE (or DPP IE) in the sent service query message, indicating that the device supporting the WPS (DPP) configuration is to be queried, and the WPS IE (or DPP IE) is used as the service information to be queried. Devices that receive this message will respond if they support a WPS (or DPP) configuration.
  • the WPS IE (or DPP IE) is optionally carried in the response message.
  • the public key derived value may be included in the service query message, and may be specifically included in the WPS IE (or DPP IE).
  • the service query message/response message format may also be a probe request message, an action message, an EAP message, or other message format.
  • the embodiment of the invention takes a mobile phone to print a file as an example.
  • the printing device receives a service query message of the mobile phone broadcast.
  • the printing device knows the service required by the mobile phone and the MAC address of the mobile phone from the service inquiry message broadcasted by the mobile phone.
  • the device within the range reachable by the mobile phone broadcast message can receive the message broadcast by the mobile phone.
  • the printing device determines whether the service in the service message is satisfied. If the service in the service message is satisfied, step 904 is performed; if the service in the service message is not met, no processing is performed.
  • the printing device responds to the mobile phone service query response message.
  • the service query response message is a WFDS message, and includes a service name, a public key hash of the printing device, and an authentication method supported by the printing device, for example, a QR-code (Quick Response-code). Authentication, PIN (Personal Identifier Number) authentication, etc., the sending address of the service inquiry response message is the MAC address of the printing device.
  • QR-code Quick Response-code
  • PIN Personal Identifier Number
  • the public key hash value of the printing device is that the printing device unidirectionally carries its public key.
  • the calculated value is generated by a hash operation, for example, the hash operation is used as an example, and the public key is hashed to generate a public key hash value, and other algorithms may be used.
  • the service query response message also carries an SSID (service set identifier, the network name of the AP), indicating that it is an AP device; if it is a P2P (Peer-to-Peer, peer-to-peer), Or a normal STA (station) device, the service query response message does not carry the SSID.
  • SSID service set identifier, the network name of the AP
  • the printing device may include its own device role information in the reply service query response message, for example, AP, STA, GO (group owner), client client, Point-to-point device P2P device, enrollee or connector, configuration device (configurator or Introducers) that are not in the group group.
  • AP access point
  • STA station
  • GO group owner
  • client client client client
  • Point-to-point device P2P device Point-to-point device
  • enrollee or connector enrollee or connector
  • configuration device configurator or Introducers
  • the mobile phone receives a service query response message replied by the printing device.
  • the mobile phone receives the service query response message replied by the printing device, thereby obtaining information such as a MAC address of the printing device, a public key hash value, and the like.
  • the mobile phone scans the two-dimensional code of the printing device to obtain a public key of the printing device.
  • the mobile phone obtains the public key of the printing device in the two-dimensional code by scanning the two-dimensional code of the printing device.
  • the public key of the printing device in the two-dimensional code is the matching public key information.
  • step 908 is performed; if the public key hash value is incorrect, the public key fails to be obtained.
  • the method for verifying the public key hash value according to the public key may be: first, hashing the public key obtained in the two-dimensional code, and then comparing the operation result with the received public key hash value, if the operation The result is consistent with the received public key hash value, indicating that the public key obtained by the mobile phone is the public key of the printing device, and step 907 is performed; if the operation result is inconsistent with the received public key hash value, the mobile phone obtains the public value.
  • the key is not the public key of the printing device, indicating that the failure to obtain the public key failed.
  • the mobile phone and the printing device perform a subsequent information interaction process.
  • the subsequent information interaction process is completed for the mobile phone and the printing device. Since the mobile phone obtains the MAC address of the printing device in step 904, the mobile phone can directly send a message to the printing device.
  • the printing device can send a message directly to the phone. For example, the mobile phone initiates a query message (Provision Discovery Request) to the printing device: it includes its own connection capability: it can be used as GO, client, new (a new group can be established); the print device responds with a request response message (Provision Discovery Response): Your own connection ability can be used as one of GO, client, and new.
  • Provision Discovery Request a query message
  • Provision Discovery Response Your own connection ability can be used as one of GO, client, and new.
  • the embodiment of the present invention may also be implemented in conjunction with the GAS message without combining the WFDS specification, that is, the message sent in step 910 and step 914 is a GAS (Generic Advertisement Service) message.
  • GAS Generic Advertisement Service
  • the first device in the present invention sends a service query message including the service information to be queried by the first device to the second device, and then receives the public key hash value of the second device that is sent by the second device.
  • the response message is sent by the second device after determining that the service provided by the second device is consistent with the service information; the first device acquires the public key of the second device, and verifies whether the public key hash value is correct according to the public key; When a device verifies that the public key hash value is correct, it communicates with the second device. In this way, after the first device and the second device match the service information, it is determined whether the first device correctly selects the second device by verifying the consistency between the second device public key hash value and the acquired second device public key, thereby avoiding The public key of the second device that the first device obtains the error causes the subsequent configuration process to fail.
  • a further embodiment of the present invention provides a method for discovering between devices, for a Wi-Fi device, in combination with a GAS message, taking a discovery process between a mobile phone and a printing device as an example, as shown in FIG. 10, the method includes :
  • the mobile phone obtains a print service to be executed.
  • the mobile phone needs to obtain the service to be executed before the broadcast service query message is sent.
  • the user can select the device UI (User Interface) through the specific operation of the user, or input the service to be performed, for example, printing, Send, share, play, display, associate, configure APs, replace APs, add APs, add devices to the network, configure current devices, connect current
  • the mobile phone can obtain the service information by obtaining the service to be executed, for example, from The service information is extracted from the executed service. For example, if the mobile phone obtains the service to be executed as “send”, the service information acquired by the mobile phone is “send”.
  • the embodiment of the invention takes a mobile phone to print a file as an example.
  • the mobile phone scans the two-dimensional code of the printing device to obtain the public key of the printing device.
  • the two-dimensional code of the printing device includes the public key of the printing device, and the mobile phone scans the two-dimensional code of the printing device to obtain the public key included in the device.
  • the mobile phone performs a hash operation according to the public key to generate a public key hash value.
  • the public key hash value of the printing device is generated by performing a hash operation on the public key of the printing device by using a hash operation.
  • the public key is hashed to generate a public key hash value.
  • Other algorithms can also be used.
  • step 1001 may also be performed after step 1002 or after step 1003.
  • the mobile phone broadcasts a service inquiry message.
  • the service query message uses a GAS request message, which includes the service query information and the public key hash value of the printing device.
  • the printing device receives a service query message of the mobile phone broadcast.
  • the service query message includes the service query information and the public key hash value generated in step 1003.
  • the service query message sent by the mobile phone includes a service hash value (a hash value of the service name) and a MAC address of the mobile phone.
  • the device within the range reachable by the mobile phone broadcast message can receive the message broadcast by the mobile phone.
  • the printing device determines whether the service in the service message is satisfied. If the service in the service message is satisfied, step 1007 is performed; if the service in the service message is not met, no processing is performed.
  • the print device compares the service name in the service query information with the service name provided in step 1005 to determine whether it meets the service in the service message. If the service in the service message is satisfied, step 1007 is performed; if the service is not satisfied The service in the message is not processed.
  • the printing device verifies whether the received public key hash value is correct according to the public key. If the received public key hash value is correct, step 1008 is performed; if the received public key hash value is incorrect, step 1011 is performed. .
  • the manner in which the printing device verifies that the received public key hash value is correct according to the public key may be that the printing device performs a hash operation according to its own public key, and after obtaining the operation result, the public key hash value machine received in step 1005 is obtained. If the two are the same, the public key of the printing device obtained by the mobile phone is correct, and step 1008 is performed; if the two are inconsistent, the public key of the printing device obtained by the mobile phone is correct, and step 1011 is performed.
  • the printing device responds to the mobile phone service query response message.
  • the service query response message is a WFDS message, and includes a service name, a public key hash value of the printing device, and an authentication method supported by the printing device, for example, QR-code (Quick Response-code), PIN ( Personal Identifier Number, authentication, etc.
  • the sending address of the service inquiry response message is the MAC address of the printing device.
  • the service query response message also carries an SSID (service set identifier, the network name of the AP), indicating that it is an AP device; if it is a P2P, or a normal STA device, the service query response message Then do not carry the SSID.
  • the printing device directly includes the device role information in the reply service query response message, for example, AP, STA, GO (group owner), client, P2P not in the group. Device.
  • the mobile phone receives a service query response message replied by the printing device.
  • the mobile phone receives the service query response message replied by the printing device, thereby obtaining information such as a MAC address of the printing device, a public key hash value, and the like.
  • the mobile phone and the printing device perform a subsequent information exchange process.
  • the printing device replies to the failure message of the mobile phone to obtain the public key.
  • the user sends a prompt message to the mobile phone to notify the mobile phone that the public key of the printing device is incorrect, and the public key fails to be obtained.
  • the mobile phone prompts to obtain the public key failed.
  • the first device in the present invention sends the service information including the first device to be queried and the second device to the second device.
  • the service query message of the public key hash value and then receiving the response message sent by the second device, the response message is sent by the second device to determine that the service provided by the second device is consistent with the service information, and the public key hash value is verified to be correct;
  • the first device communicates with the second device according to the response message. In this way, the first device sends the public key hash value of the second device while sending the service query information, so that the second device verifies that the public key hash value is correct according to the second device public key value while determining the service information consistency.
  • the first device response message is restored, and the first device communicates with the second device after receiving the response message, thereby preventing the first device from acquiring the wrong public key of the second device, causing the subsequent configuration process to fail.
  • a further embodiment of the present invention provides a method for discovering between devices, which is used in a Wi-Fi device.
  • the discovery process between the mobile phone and the printing device is taken as an example. As shown in FIG. 11 , the method includes:
  • the mobile phone broadcasts a service inquiry message.
  • the service query message sent by the mobile phone includes a hash value of a service hash value (service name) and a MAC address of the mobile phone.
  • the mobile phone needs to obtain the service to be executed, and the user can select the device UI (User Interface) through the specific operation of the user, or input the service to be performed, for example, , print, send, share, play, display, associate, configure AP, replace AP, add AP, add device to join network, configure current device, connect current device, connect current device to another device, support configured, support is
  • the mobile phone can obtain service information by obtaining a service to be executed, such as extracting service information from the executed service, for example, the mobile phone obtains to perform, by having one or more of the configurations that are not configured at this time. If the service is "send", the service information obtained by the mobile phone is "send".
  • the embodiment of the invention takes a mobile phone to print a file as an example.
  • the printing device receives a service query message of the mobile phone broadcast.
  • the device within the range reachable by the mobile phone broadcast message can receive the message broadcast by the mobile phone.
  • the printing device determines whether it satisfies the service in the service message. If the service in the service message is satisfied, step 1104 is performed; if the service in the service message is not satisfied, no processing is performed.
  • the printing device compares the service name in the service query information with the service name in step 1102, and determines whether it satisfies the service in the service message. If the service in the service message is satisfied, step 1104 is performed; if the service is not satisfied, The service in the message is not processed.
  • the printing device replies to the mobile phone service query response message.
  • the service query response message includes a service name and an authentication method supported by the printing device, for example, a QR-code (Quick Response-code), a PIN (Personal Identifier Number), and the like, and a service query response.
  • the sending address of the message is the MAC address of the printing device.
  • the service query response message also carries an SSID (service set identifier, the network name of the AP), indicating that it is an AP device; if it is a P2P, or a normal STA device, the service query response message Then do not carry the SSID.
  • the printing device directly includes the device role information in the reply service query response message, for example, AP, STA, GO (group owner), client, P2P not in the group. Device.
  • the mobile phone receives a service query response message replied by the printing device.
  • the mobile phone receives the service query response message replied by the printing device, thereby obtaining information such as a MAC address of the printing device, a public key hash value, and the like.
  • the mobile phone scans the two-dimensional code of the printing device to obtain a public key of the printing device.
  • the mobile phone obtains the public key of the printing device in the two-dimensional code by scanning the two-dimensional code of the printing device.
  • the mobile phone performs a hash operation according to the public key to generate a public key hash value.
  • the public key hash value of the printing device is generated by the mobile phone hashing the public key of the printing device.
  • the hash operation is performed as an example, and the public key is hashed to generate a public key.
  • other algorithms can be used.
  • the mobile phone sends a discovery message carrying a public key hash value.
  • the discovery message includes service information, which may be sent for broadcast, or may be sent only to the printing device, and the MAC address is set to the MAC address of the previous service query device.
  • the printing device receives a discovery message that is sent by the mobile phone and carries a public key hash value.
  • the printing device verifies whether the received public key hash value is correct according to the public key. If the received public key hash value is correct, step 1111 is performed. If the received public key hash value is incorrect, step 1114 is performed. .
  • the manner in which the printing device verifies that the received public key hash value is correct according to the public key may be that the printing device performs a hash operation according to its own public key, and after obtaining the operation result, the public key hash value machine received in step 305 is obtained. If the two are the same, the public key of the printing device obtained by the mobile phone is correct, and step 1111 is performed; if the two are inconsistent, the public key of the printing device obtained by the mobile phone is correct, and step 1114 is performed.
  • the printing device responds to the mobile phone service query response message.
  • the service query response message is a WFDS message, and includes a service name, a public key hash value of the printing device, and an authentication method supported by the printing device, for example, QR-code (Quick Response-code), PIN ( Personal Identifier Number, authentication, etc.
  • the sending address of the service inquiry response message is the MAC address of the printing device.
  • the service query response message also carries an SSID (service set identifier, the network name of the AP), indicating that it is an AP device; if it is a P2P, or a normal STA device, the service query response message Then do not carry the SSID.
  • the printing device directly includes the device role information in the reply service query response message, for example, AP, STA, GO (group owner), client, P2P not in the group. Device.
  • the mobile phone receives a service query response message replied by the printing device.
  • the mobile phone receives the service query response message replied by the printing device, thereby obtaining information such as a MAC address of the printing device, a public key hash value, and the like.
  • the mobile phone and the printing device perform a subsequent information exchange process.
  • the printing device replies to the failure message of the mobile phone to obtain the public key.
  • the mobile phone prompts to obtain the public key failed.
  • the first device in the present invention sends the service information including the first device to be queried and the second device to the second device.
  • the service query message of the public key hash value and then receiving the response message sent by the second device, the response message is sent by the second device to determine that the service provided by the second device is consistent with the service information, and the public key hash value is verified to be correct;
  • the first device communicates with the second device according to the response message. In this way, the first device sends the public key hash value of the second device while sending the service query information, so that the second device verifies that the public key hash value is correct according to the second device public key value while determining the service information consistency.
  • the first device response message is restored, and the first device communicates with the second device after receiving the response message, thereby preventing the first device from acquiring the wrong public key of the second device, causing the subsequent configuration process to fail.
  • a further embodiment of the present invention provides a method for discovering between devices, which is used in a Wi-Fi device.
  • the discovery process between the mobile phone and the printing device is taken as an example. As shown in FIG. 12, the method includes:
  • the mobile phone scans the two-dimensional code of the printing device to obtain a public key of the printing device.
  • the mobile phone obtains the public key of the printing device in the two-dimensional code by scanning the two-dimensional code of the printing device.
  • the mobile phone performs a hash operation according to the public key to generate a public key hash value.
  • the public key hash value of the printing device is generated by the printing device by performing a hash operation on the public key.
  • the hash operation is used as an example to perform a hash operation on the public key.
  • the key hash value can also be used in other algorithms.
  • the mobile phone broadcasts a discovery message carrying a public key hash value.
  • the printing device receives a discovery message that is sent by the mobile phone and carries a public key hash value.
  • the printing device verifies whether the received public key hash value is correct according to the public key. If the received public key hash value is correct, step 1206 is performed; if the received public key hash value is incorrect, the processing is not performed.
  • the manner in which the printing device verifies that the received public key hash value is correct according to the public key may be that the printing device performs a hash operation according to its own public key, and after obtaining the operation result, the public key hash value machine received in step 305 is obtained. If the two are the same, the public key of the printing device obtained by the mobile phone is correct, and step 1206 is performed; if the two are inconsistent, the public key of the printing device obtained by the mobile phone is correct and is not processed.
  • the printing device responds to the mobile phone response message.
  • the response message includes a MAC address of the printing device.
  • the mobile phone obtains a print service to be executed.
  • the mobile phone needs to obtain the service to be executed, and the user can select the device UI (User Interface) through the specific operation of the user, or input the service to be performed, for example, , print, send, share, play, display, associate, configure AP, replace AP, add AP, add device to join network, configure current device, connect current device, connect current device to another device, support configured, support is
  • the mobile phone can obtain service information by obtaining a service to be executed, such as extracting service information from the executed service, for example, the mobile phone obtains to perform, by having one or more of the configurations that are not configured at this time. If the service is "send", the service information obtained by the mobile phone is "send".
  • the embodiment of the invention takes a mobile phone to print a file as an example.
  • the mobile phone sends a service query message to the printing device.
  • step 1210 determines whether the service in the service message is satisfied. If the service in the service message is satisfied, step 1210 is performed. If the service in the service message is not satisfied, step 1213 is performed.
  • the printing device responds to the mobile phone service query response message.
  • the mobile phone receives a service query response message replied by the printing device.
  • the mobile phone receives the service query response message replied by the printing device, thereby obtaining information such as a MAC address of the printing device, a public key hash value, and the like.
  • the mobile phone and the printing device perform a subsequent information exchange process.
  • the printing device replies to the failure message of the mobile phone to obtain the public key.
  • the mobile phone prompts to obtain the public key failed.
  • step 1207 - step 1208 need not be performed.
  • the first device in the present invention sends the service information including the first device to be queried and the second device to the second device.
  • the service query message of the public key hash value and then receiving the response message sent by the second device, the response message is sent by the second device to determine that the service provided by the second device is consistent with the service information, and the public key hash value is verified to be correct;
  • the first device communicates with the second device according to the response message. In this way, the first device sends the public key hash value of the second device while sending the service query information, so that the second device verifies that the public key hash value is correct according to the second device public key value while determining the service information consistency.
  • the first device response message is restored, and the first device communicates with the second device after receiving the response message, thereby preventing the first device from acquiring the wrong public key of the second device, causing the subsequent configuration process to fail.
  • a further embodiment of the present invention provides a method for discovering between devices, which is used in a Wi-Fi device.
  • the discovery process between the mobile phone and the printing device is taken as an example.
  • the mobile phone and the printing device do not need to perform a service discovery process, as shown in FIG. 13 .
  • the method includes:
  • the mobile phone and the printing device use a NAN (Neighbor Awareness Networking) mechanism for synchronization.
  • NAN Neighbor Awareness Networking
  • the printing device sends a broadcast message carrying a public key hash value.
  • the broadcast message carries the MAC address of the printing device.
  • the mobile phone scans the two-dimensional code of the printing device to obtain a public key of the printing device.
  • the mobile phone obtains the public key of the printing device in the two-dimensional code by scanning the two-dimensional code of the printing device.
  • step 1305 The mobile phone verifies that the public key hash value is correct according to the public key. If the public key hash value is correct, step 1305 is performed; if the public key hash value is incorrect, the public key fails to be obtained.
  • the method for verifying the public key hash value according to the public key may be: first, hashing the public key obtained in the two-dimensional code, and then comparing the operation result with the received public key hash value, if the operation The result is consistent with the received public key hash value, indicating that the public key obtained by the mobile phone is the public key of the printing device, and step 1305 is performed; if the operation result is inconsistent with the received public key hash value, the mobile phone obtains the public value.
  • the key is not the public key of the printing device, indicating that the failure to obtain the public key failed.
  • the mobile phone and the printing device perform a subsequent information exchange process.
  • the first device in the first device obtains the public key of the second device, and generates a public key hash value.
  • the second device sends a public key hash value.
  • the second device After the second device verifies that the public key hash value is correct according to the second device public key, the second device returns a response message to the first device, and the first device receives the first response message, and the second device The device communicates.
  • the first device sends the public key hash value generated according to the obtained public key of the second device to the second device, and receives the response information that the second device verifies the public key hash value according to the public key and then returns the response information. Communicating with the second device prevents the first device from acquiring the wrong public key of the second device, causing the subsequent configuration process to fail.
  • a further embodiment of the present invention provides a method for discovering between devices, which is used in a Wi-Fi device.
  • the discovery process between the mobile phone and the printing device is taken as an example. As shown in FIG. 14, the method includes:
  • the mobile phone and the printing device synchronize using the NAN mechanism.
  • the printing device sends a broadcast message carrying a public key hash value.
  • the broadcast message carries the MAC address of the printing device and the services it supports.
  • the mobile phone scans the two-dimensional code of the printing device to obtain a public key of the printing device.
  • the mobile phone obtains the public key of the printing device in the two-dimensional code by scanning the two-dimensional code of the printing device.
  • step 1405 The mobile phone verifies that the public key hash value is correct according to the public key. If the public key hash value is correct, step 1405 is performed; if the public key hash value is incorrect, the public key fails to be obtained.
  • the mobile phone determines whether the service in the service message is satisfied. If the service in the service message is satisfied, step 1406 is performed; if the service in the service message is not met, no process is performed.
  • the mobile phone and the printing device perform a subsequent information interaction process.
  • the first device in the first device obtains the public key of the second device, and generates a public key hash value.
  • the second device sends a public key hash value.
  • the second device After the second device verifies that the public key hash value is correct according to the second device public key, the second device returns a response message to the first device, and the first device receives the first response message, and the second device The device communicates.
  • the first device sends the public key hash value generated according to the obtained public key of the second device to the second device, and receives the response information that the second device verifies the public key hash value according to the public key and then returns the response information. Communicating with the second device prevents the first device from acquiring the wrong public key of the second device, causing the subsequent configuration process to fail.
  • Another embodiment of the present invention provides a method for discovering between devices, which is used in a Wi-Fi device, and takes a discovery process between a mobile phone and a printing device as an example.
  • the mobile phone and the printing device do not need to perform a service discovery process, as shown in FIG. 15 .
  • the method includes:
  • the mobile phone and the printing device synchronize using the NAN mechanism.
  • the printing device sends a broadcast message carrying the support service information.
  • the broadcast message carries the MAC address of the printing device.
  • the mobile phone scans the two-dimensional code of the printing device to obtain the public key of the printing device.
  • the mobile phone obtains the public key of the printing device in the two-dimensional code by scanning the two-dimensional code of the printing device.
  • the mobile phone sends a query message that includes a hash value of the public key.
  • the mobile phone can be broadcasted or sent directly to the device (printing device) that broadcasts the service information.
  • step 1506 is performed; if the public key hash value is incorrect, the public key fails to be obtained.
  • the printing device sends a response message.
  • the mobile phone and the printing device perform a subsequent information exchange process.
  • the first device in the first device first receives the public key hash value of the second device sent by the second device, and then obtains The public key of the second device, and verifying whether the public key hash value is correct according to the public key, and communicating with the second device when the first device verifies that the public key hash value is correct.
  • the first device After the first device verifies that the received public key hash value is correct according to the obtained public key of the second device, the first device communicates with the second device, thereby preventing the first device from acquiring the wrong public key of the second device, resulting in subsequent The configuration process failed.
  • a further embodiment of the present invention provides a device 160 for discovering between devices.
  • the device 160 includes:
  • the sending unit 161 is configured to send a service query request message to the second device, where the service query request message includes service information to be queried by the first device, so that the second device determines whether to respond according to the service information.
  • Service query request message ;
  • the receiving unit 162 is configured to receive a service query response message, where the service query response message is After the second device determines to send the response to the service query request message, the service query response message includes a public key derived value of the second device;
  • the obtaining unit 163 is configured to obtain matching public key information.
  • the sending unit 161 is further configured to: after the first device verifies that the matching public key information matches the public key derived value, send the communication information to the second device to communicate with the second device.
  • the sending unit 161 is specifically configured to broadcast the service query request message to the target device, where the target device includes the second device and at least one third device, where the service query request message includes the a service information to be queried by a device, so that the target device determines whether to respond to the service query request message according to the service information;
  • the receiving unit 162 is further configured to receive a service query response message sent by the at least one third device, where the at least one third device sends a service query response message to the at least one third device to determine to respond to the service query After the request message is sent, the service query response message sent by the at least one third device includes a public key derived value of the at least one third device.
  • the obtaining unit 164 is further configured to acquire the service information.
  • the service information includes a service name or a service name derived value.
  • the service query response message includes an authentication mode supported by the second device and/or a device type role of the second device.
  • the first device in the present invention sends a service query request message including the service information to be queried by the first device to the second device, and after the second device determines the response service query request message according to the service information, the second device sends the The service query response message of the public key derived value of the second device; after receiving the service query response message, the first device obtains the matching public key information, matches the matching public key information with the public key derivative value, and verifies the matching public key information on the first device. After matching with the public key derived value, the first device communicates with the second device.
  • the second device after determining the service query request message in response to the first device, the second device sends the public key derived value of the second device to the first device, where the first device verifies Whether it matches the obtained matching public key information.
  • the first device communicates with the second device, so that the subsequent configuration of the first device and the second device is successful, and the first device is prevented from obtaining the wrong number.
  • the public key of the second device causes the subsequent configuration process to fail.
  • a further embodiment of the present invention provides a device 170 for discovering between devices. As shown in FIG. 17, the device 170 includes:
  • the receiving unit 171 is configured to receive a service query request message sent by the second device, where the service query request message includes service information to be queried by the second device;
  • the sending unit 172 is configured to: when the first device determines to respond to the service query request message, send a service query response message to the second device, where the service query response message includes a public key derivative of the first device a value, such that the second device verifies that the obtained matching public key information is consistent with the public key derived value;
  • the communication unit 173 is configured to: when the first device receives the communication information sent by the second device, communicate with the second device.
  • the apparatus 170 further includes:
  • the comparing unit 174 is configured to compare whether the service that the first device can provide is consistent with the service information.
  • the determining unit 175 is configured to determine to respond to the service query request message when the service that the first device can provide is consistent with the service information.
  • the apparatus 170 further includes:
  • the generating unit 176 is configured to generate the public key derivative value according to the public key of the first device.
  • the public key derived value is a hash value of the public key.
  • the service information includes a service name or a service name derived value.
  • the service query response message includes an authentication mode supported by the first device and/or a device type role of the first device.
  • the second device in the present invention sends the service information that the second device needs to query.
  • the service query request message is sent to the first device, and after the first device determines the response service query request message according to the service information, the service query response message including the public key derived value of the first device is sent; after the second device receives the service query response message, The matching public key information is obtained, and the matching public key information is matched with the public key derivative value; after the second device verifies that the matching public key information matches the public key derived value, the second device communicates with the first device.
  • the first device after determining the service query request message in response to the second device, the first device sends the public key derived value of the first device to the second device, and the second device verifies whether it matches the obtained matching public key information, when the two devices After the matching, the second device communicates with the first device, so that the subsequent configuration of the second device and the first device is successful, and the second device does not obtain the wrong public key of the first device, which causes the subsequent configuration process to fail.
  • a further embodiment of the present invention provides a device 180 for discovering between devices. As shown in FIG. 19, the device 180 includes:
  • the sending unit 181 is configured to send a service query request message to the second device, where the service query request message includes the service information to be queried by the first device and the public key derived value of the second device, so that the first Determining, by the second device, whether to respond to the service query request message according to the service information and the public key derived value;
  • the receiving unit 182 is configured to receive a service query response message, where the service query response message is sent after the second device determines to respond to the service query request message;
  • the sending unit 181 is further configured to send communication information to the second device to communicate with the second device.
  • the sending unit 181 is specifically configured to broadcast the service query request message to the target device, where the target device includes the second device and at least one third device, where the service query request message includes the The service information to be queried by the device and the public key derived value of the second device, so that the target device determines whether to respond to the service query request message according to the service information and the public key derived value.
  • the apparatus 180 further includes:
  • the obtaining unit 183 is configured to obtain the service information and a public key derived value of the second device.
  • the obtaining unit 183 includes:
  • the obtaining subunit 1831 is configured to acquire a public key of the second device
  • the generating subunit 1832 is configured to generate a public key derived value of the second device according to the public key.
  • the public key derived value is a hash value of the public key.
  • the service information includes a service name or a service name derived value.
  • the service query response message includes an authentication mode supported by the first device and/or a device type role of the first device.
  • the first device in the present invention sends a service query request message including the obtained public key derived value of the second device and the service information to the second device, where the second device determines the service information and the public key derived value. After the service query request message is sent, the service query response message is sent to the first device, and after receiving the service query response message, the first device communicates with the second device.
  • the first device sends the public key derived value of the second device to the second device, and the second device responds to the first device according to the determination, and then the first device communicates with the second device, thereby preventing the first device from acquiring the error.
  • the public key of the second device causes the subsequent configuration process to fail.
  • a further embodiment of the present invention provides a device 190 for discovering between devices.
  • the device 190 includes:
  • the receiving unit 191 is configured to receive a service query request message sent by the second device, where the service query request message includes service information to be queried by the second device and a public key derived value of the first device;
  • the sending unit 192 is configured to: when the first device determines to respond to the service query request message according to the service information and the public key derived value, send a service query response message to the second device;
  • the communication unit 193 is configured to: when the first device receives the communication information sent by the second device, communicate with the second device.
  • the apparatus 190 further includes:
  • the comparing unit 194 is configured to compare the service that the first device can provide with the service information. No agreement;
  • the comparing unit 194 is further configured to compare whether the public key derived value matches a public key of the first device;
  • a determining unit 195 configured to: when the service that the first device can provide is consistent with the service information, and the public key derivative value matches the public key of the first device, determine to respond to the service query request message .
  • the public key derived value is a hash value of the public key.
  • the service information includes a service name or a service name derived value.
  • the service query response message includes an authentication mode supported by the first device and/or a device type role of the first device.
  • the second device in the present invention sends a service query request message including the obtained public key derived value of the first device and the service information to the first device, where the first device determines according to the service information and the public key derived value.
  • the service query response message is sent to the second device, and after receiving the service query response message, the second device communicates with the first device.
  • the second device sends the public key derived value of the first device to the first device, and the first device responds to the second device according to the determination, and then the second device communicates with the first device, thereby preventing the second device from acquiring the error.
  • the public key of the first device causes the subsequent configuration process to fail.
  • a further embodiment of the present invention provides a device 210 for discovering between devices.
  • the device 210 includes:
  • the sending unit 211 is configured to send a public key derived value of the second device to the second device, so that the second device determines, according to the public key derived value, whether to reply the first device response message;
  • the receiving unit 212 is configured to receive a response message sent by the second device, where the response message is sent after the second device determines to reply to the first device response message;
  • the sending unit 211 is further configured to send the communication information and the second device to the second device. Prepare for communication.
  • the sending unit 211 is further configured to send a service query request message to the second device, where the service query request message includes service information to be queried by the first device, so that the second device is configured according to the Determining whether to respond to the service query request message;
  • the receiving unit 212 is further configured to receive a service query response message sent by the second device, where the service query response message is sent after the second device determines to respond to the service query request message.
  • the sending unit 211 is specifically configured to broadcast the public key derivative value to the target device, so that the target device determines, according to the public key derived value, whether to reply the first device response message, the target
  • the device includes the second device and at least one third device.
  • the device 210 further includes:
  • the obtaining unit 213 is configured to acquire the service information.
  • the obtaining unit 213 is further configured to acquire a public key derived value of the second device.
  • the obtaining unit 213 includes:
  • the obtaining subunit 2131 is configured to acquire a public key of the second device
  • the generating subunit 2132 is configured to generate a public key derived value of the second device according to the public key.
  • the public key derived value is a hash value of the public key.
  • the service information includes a service name or a service name derived value.
  • the service query response message includes an authentication mode supported by the first device and/or a device type role of the first device.
  • the first device sends the public key derived value of the second device to the second device, and the second device sends a response to the first device after determining to reply to the first device response message according to the public key derived value. After the first device receives the response message sent by the second device, the first device communicates with the second device.
  • the first device sends the public key derived value of the second device to the second device, and after the second device determines the derivative value according to the public key, the first device communicates with the second device.
  • the public key of the second device that the first device obtains the error is avoided, causing the subsequent configuration process to fail.
  • a further embodiment of the present invention provides a device 220 for discovering between devices. As shown in FIG. 25, the device 220 includes:
  • the receiving unit 221 is configured to receive a public key derived value of the second device that is sent by the second device.
  • the sending unit 222 is configured to: when the first device determines to reply to the second device response information according to the public key derived value, send a response message to the second device;
  • the communication unit 223 is configured to: when the first device receives the communication information sent by the second device, communicate with the second device.
  • the device 220 further includes:
  • the comparing unit 224 is configured to compare whether the public key derived value matches the public key of the first device
  • the determining unit 225 is configured to determine to reply to the second device response information when the public key derived value matches the public key of the first device.
  • the receiving unit 221 is further configured to receive a service query request message sent by the second device, where the service query request message includes service information to be queried by the second device;
  • the sending unit 222 is further configured to: when the first device determines to respond to the service query request message according to the service information, send a service query response message to the second device.
  • the comparing unit 224 is further configured to compare whether the service that the first device can provide is consistent with the service information
  • the determining unit 225 is further configured to: when the service that the first device can provide is consistent with the service information, determine to respond to the service query request message.
  • the public key derived value is a hash value of the public key.
  • the service information includes a service name or a service name derived value.
  • the service query response message includes an authentication mode supported by the first device and/or a device type role of the first device.
  • the second device sends the public key derived value of the first device to the first device, and the first device sends a response to the second device after determining to reply to the second device response message according to the public key derived value. After the second device receives the response message sent by the first device, the second device communicates with the first device.
  • the second device sends the public key derived value of the first device to the first device, and after the second device determines the derivative value according to the public key, the second device communicates with the first device, thereby preventing the second device from acquiring the error.
  • the public key of the first device causes the subsequent configuration process to fail.
  • a further embodiment of the present invention provides a device 230 for discovering between devices.
  • the device 230 includes:
  • the receiving unit 231 is configured to receive the second device public key derivative value sent by the second device.
  • the obtaining unit 232 is configured to obtain matching public key information.
  • the sending unit 233 is configured to: after the first device verifies the matching public key information, the public key derivative value is matched, and send communication information to the second device to communicate with the second device.
  • the public key derivative value is a public key hash value.
  • the receiving unit 231 is further configured to receive a service query request message sent by the second device, where the service query request message includes service information that the second device can provide;
  • the sending unit 233 is further configured to verify that the public key derived value of the matching public key information matches, and if the service to be queried by the first device is consistent with the service information, send the communication to the second device. Information is communicated with the second device.
  • the device 230 further includes:
  • the synchronization unit 234 is configured to synchronize with the second device.
  • the second device sends its own public key derivative value to the first device; after the first device obtains the matching public key information, it verifies whether the matching public key information public key derivative value matches, After the matching, the first device communicates with the second device. In this manner, the first device verifies that the obtained matching public key information matches the public key derived value, and then communicates with the second device to avoid The public key of the second device that the first device acquires the error causes the subsequent configuration process to fail.
  • a further embodiment of the present invention provides a device 240 for discovering between devices. As shown in FIG. 29, the device 240 includes:
  • the sending unit 241 is configured to send, to the second device, the public key derived value of the first device, so that the second device verifies whether the public key derived value matches the matching public key information acquired by the second device ;
  • the communication unit 242 is configured to perform communication with the second device when the first device receives the communication information sent by the second device.
  • the public key derived value is a public key hash value.
  • the sending unit 241 is further configured to send a service query request message to the second device, where the service query request message is service information that can be provided by the first device, so that the second device determines Whether the service information is consistent with the service to be queried by the first device.
  • the device 240 further includes:
  • the generating unit 243 is configured to generate the public key derivative value according to the public key of the first device.
  • the device 240 further includes:
  • the synchronization unit 244 is configured to synchronize with the second device.
  • the first device sends its own public key derived value to the second device; after the second device obtains the matching public key information, it verifies whether the matching public key information public key derived value matches, in both After the matching, the second device communicates with the first device. In this manner, after the second device verifies that the obtained matching public key information matches the public key derived value, the second device communicates with the first device, so that the second device obtains the wrong public key of the first device, and the subsequent configuration process fails.
  • the device that is found between the devices provided by the embodiments of the present invention may implement the foregoing method embodiments.
  • the methods and devices found between the devices provided by the embodiments may be applicable to wireless communication devices, such as Wi-Fi, Bluetooth devices, but are not limited thereto.
  • the storage medium may be a magnetic disk, an optical disk, a read-only memory (ROM), or a random access memory (RAM).

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Databases & Information Systems (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

本发明实施例公开了一种设备之间发现的方法及装置,涉及通信技术领域,能够解决手机获取错误的打印设备的公钥,导致后续配置过程失败的问题。本发明的方法包括:第一设备发送服务查询请求消息至第二设备,所述服务查询请求消息包含所述第一设备要查询的服务信息,以使得所述第二设备根据所述服务信息确定是否响应所述服务查询请求消息;所述第一设备接收服务查询响应消息,所述服务查询响应消息包含所述第二设备的公钥衍生值;所述第一设备获取匹配公钥信息;所述第一设备验证所述匹配公钥信息与所述公钥衍生值匹配后,向所述第二设备发送通信信息与所述第二设备通信。本发明适用于无线通信设备,如Wi-Fi,蓝牙设备。

Description

设备之间发现的方法及装置
本申请要求于2014年10月31日提交中国专利局、申请号为201410616545.5中国专利申请的优先权,其全部内容通过引用结合在本申请中。
技术领域
本发明涉及通信技术领域,尤其涉及一种设备之间发现的方法及装置。
背景技术
Wi-Fi(Wireless Fidelity,无线保真技术)设备之间进行通讯时,需要彼此先建立通讯连接,例如,用户通过手机打印文件时,手机首先要建立与打印设备的通讯连接。具体过程为:首先手机发现打印设备,形成打印设备名称列表,并获得列表中各打印设备的MAC(Medium Access Control,媒体接入控制层)地址以便后续信息交互,此过程中,手机可以通过扫描方式主动发现目标设备,或者手机可以通过接收目标设备发现消息的方式被动发现;然后,用户从打印设备列表中选择一个打印设备作为目标设备用于打印,手机通过与目标设备进行信息交互完成认证配置的过程,认证配置的目的是获得手机和目标设备之间的安全密钥,保证建立安全连接,在认证配置过程为,手机通过扫描目标设备的二维码来获取二维码中包含的公开密钥,即公钥,然后与目标设备执行密钥交换算法得到安全密钥,完成设备的配置。
现有技术中至少存在如下问题:上述过程中,用户在多个打印设备中选择目标设备后,通过手机扫描其二维码的方式获得目标设备的公开密钥,但是,由于用户多数情况下并不熟悉各设备的名称,在选择目标设备后使用手机扫描二维码时,很容易扫描到其他设备的二维码,使得手机获取的二维码与选择的目标设备不匹配,进而导致后续配置过程失败。
发明内容
本发明的实施例提供一种设备之间发现的方法及装置,能够解决手机获取错误的打印设备的公钥,导致后续配置过程失败的问题。
为达到上述目的,本发明的实施例采用如下技术方案:
第一方面,本发明的实施例提供一种设备之间发现的方法,包括:
第一设备发送服务查询请求消息至第二设备,所述服务查询请求消息包含所述第一设备要查询的服务信息,以使得所述第二设备根据所述服务信息确定是否响应所述服务查询请求消息。
所述第一设备接收服务查询响应消息,所述服务查询响应消息为所述第二设备确定响应所述服务查询请求消息后发送的,所述服务查询响应消息包含所述第二设备的公钥衍生值;
所述第一设备获取匹配公钥信息;
所述第一设备验证所述匹配公钥信息与所述公钥衍生值匹配后,向所述第二设备发送通信信息与所述第二设备通信。
结合第一方面,在第一方面的第一种可能的实现方式中,所述第一设备发送服务查询请求消息至第二设备包括:
所述第一设备广播发送所述服务查询请求消息至目标设备,所述目标设备包含所述第二设备和至少一个第三设备,所述服务查询请求消息包含所述第一设备要查询的服务信息,以使得所述目标设备根据所述服务信息确定是否响应所述服务查询请求消息;
则在所述第一设备获取匹配公钥信息之前,所述方法还包括:
所述第一设备接收所述至少一个第三设备发送的服务查询响应消息,所述至少一个第三设备发送的服务查询响应消息为所述至少一个第三设备确定响应所述服务查询请求消息后发送的,所述至少一个第三设备发送的服务查询响应消息包含所述至少一个第三设备的公钥衍生值。
结合第一方面,在第一方面的第二种可能的实现方式中,在所述第一 设备发送服务查询请求消息至第二设备之前,所述方法还包括:
所述第一设备获取所述服务信息。
结合第一方面或第一方面的任一种可能的实现方式,在第一方面的第三种可能的实现方式中,所述服务信息包含服务名称或服务名称衍生值。
结合第一方面,在第一方面的第四种可能的实现方式中,所述服务查询响应消息包含所述第二设备支持的认证方式和/或所述第二设备的设备类型角色。
第二方面,本发明的实施例提供一种设备之间发现的方法,包括:
第一设备接收第二设备发送的服务查询请求消息,所述服务查询请求消息包含所述第二设备要查询的服务信息;
当所述第一设备确定响应所述服务查询请求消息时,所述第一设备向所述第二设备发送服务查询响应消息,所述服务查询响应消息包含所述第一设备的公钥衍生值,以使得所述第二设备验证获取的匹配公钥信息与所述公钥衍生值是否一致;
当所述第一设备接收到所述第二设备发送的通信信息时,所述第一设备与所述第二设备进行通信。
结合第二方面,在第二方面的第一种可能的实现方式中,在所述当所述第一设备确定响应所述服务查询请求消息时,所述第一设备向所述第二设备发送服务查询响应消息之前,所述方法还包括:
所述第一设备比较所述第一设备可提供的服务与所述服务信息是否一致;
当所述第一设备可提供的服务与所述服务信息一致时,所述第一设备确定响应所述服务查询请求消息。
结合第二方面,在第二方面的第二种可能的实现方式中,在所述当所述第一设备确定响应所述服务查询请求消息时,所述第一设备向所述第二设备发送服务查询响应消息之前,所述方法还包括:
所述第一设备根据所述第一设备的公钥生成所述公钥衍生值。
结合第二方面的第二种可能的实现方式,在第二方面的第三种可能的实现方式中,所述公钥衍生值为所述公钥的哈希值。
结合第二方面或第二方面的第一种可能的实现方式,在第二方面的第四种可能的实现方式中,所述服务信息包含服务名称或服务名称衍生值。
结合第二方面或第二方面的第一种可能的实现方式,在第二方面的第五种可能的实现方式中,所述服务查询响应消息包含所述第一设备支持的认证方式和/或所述第一设备的设备类型角色。
第三方面,本发明的实施例提供一种设备之间发现的方法,包括:
第一设备发送服务查询请求消息至第二设备,所述服务查询请求消息包含所述第一设备要查询的服务信息和所述第二设备的公钥衍生值,以使得所述第二设备根据所述服务信息和所述公钥衍生值确定是否响应所述服务查询请求消息;
所述第一设备接收服务查询响应消息,所述服务查询响应消息为所述第二设备确定响应所述服务查询请求消息后发送的;
所述第一设备向所述第二设备发送通信信息与所述第二设备进行通信。
结合第三方面,在第三方面的第一种可能的实现方式中,所述第一设备发送服务查询请求消息至第二设备包括:
所述第一设备广播发送所述服务查询请求消息至目标设备,所述目标设备包含所述第二设备和至少一个第三设备,所述服务查询请求消息包含所述第一设备要查询的服务信息和所述第二设备的公钥衍生值,以使得所述目标设备根据所述服务信息和所述公钥衍生值确定是否响应所述服务查询请求消息。
结合第三方面,在第三方面的第二种可能的实现方式中,在所述第一设备发送服务查询请求消息至第二设备之前,所述方法还包括:
所述第一设备获取所述服务信息和所述第二设备的公钥衍生值。
结合第三方面的第二种可能的实现方式,在第三方面的第三种可能的 实现方式中,所述第一设备获取所述第二设备的公钥衍生值包括:
所述第一设备获取所述第二设备的公钥;
所述第一设备根据所述公钥生成所述第二设备的公钥衍生值。
结合第三方面或第三方面的任一种可能的实现方式,在第三方面的第四种可能的实现方式中,所述公钥衍生值为公钥哈希值。
结合第三方面、第三方面的第一种可能的实现方式或第三方面的第一种可能的实现方式,在第三方面的第五种可能的实现方式中,所述服务信息包含服务名称或服务名称衍生值。
结合第三方面,在第三方面的第六种可能的实现方式中,所述服务查询响应消息包含所述第二设备支持的认证方式和/或所述第二设备的设备类型角色。
第四方面,本发明的实施例提供一种设备之间发现的方法,包括:
第一设备接收第二设备发送的服务查询请求消息,所述服务查询请求消息包含所述第二设备要查询的服务信息和所述第一设备的公钥衍生值;
当所述第一设备根据所述服务信息和所述公钥衍生值确定响应所述服务查询请求消息时,所述第一设备向所述第二设备发送服务查询响应消息;
当所述第一设备接收到所述第二设备发送的通信信息时,所述第一设备与所述第二设备进行通信。
结合第四方面,在第四方面的第一种可能的实现方式中,在所述当所述第一设备根据所述服务信息和所述公钥衍生值确定响应所述服务查询请求消息时,所述第一设备向所述第二设备发送服务查询响应消息之前,所述方法还包括:
所述第一设备比较所述第一设备可提供的服务与所述服务信息是否一致;
所述第一设备比较所述公钥衍生值与所述第一设备的公钥是否匹配;
当所述第一设备可提供的服务与所述服务信息一致,且所述公钥衍生值与所述第一设备的公钥匹配时,所述第一设备确定响应所述服务查询请 求消息。
结合第四方面的第一种可能的实现方式,在第四方面的第二种可能的实现方式中,所述公钥衍生值为公钥哈希值。
结合第四方面的第一种可能的实现方式,在第四方面的第三种可能的实现方式中,所述服务信息包含服务名称或服务名称衍生值。
结合第四方面的第一种可能的实现方式,在第四方面的第五种可能的实现方式中,所述服务查询响应消息包含所述第一设备支持的认证方式和/或所述第一设备的设备类型角色。
第五方面,本发明的实施例提供一种设备之间发现的方法,包括:
第一设备发送第二设备的公钥衍生值至所述第二设备,以使得所述第二设备根据所述公钥衍生值确定是否回复所述第一设备响应消息;
所述第一设备接收所述第二设备发送的响应消息,所述响应消息为所述第二设备确定回复所述第一设备响应消息后发送的;
所述第一设备向所述第二设备发送通信信息与所述第二设备进行通信。
结合第五方面,在第五方面的第一种可能的实现方式中,在所述第一设备向所述第二设备发送通信信息与所述第二设备进行通信之前,所述方法还包括:
所述第一设备发送服务查询请求消息至所述第二设备,所述服务查询请求消息包含所述第一设备要查询的服务信息,以使得所述第二设备根据所述服务信息确定是否响应所述服务查询请求消息;
所述第一设备接收所述第二设备发送的服务查询响应消息,所述服务查询响应消息为所述第二设备确定响应所述服务查询请求消息后发送的。
结合第五方面,在第五方面的第二种可能的实现方式中,所述第一设备发送第二设备的公钥衍生值至第二设备包括:
所述第一设备广播发送所述公钥衍生值至目标设备,以使得所述目标设备根据所述公钥衍生值确定是否回复所述第一设备响应消息,所述目标 设备包含所述第二设备和至少一个第三设备。
结合第五方面的第一种可能的实现方式,在第五方面的第三种可能的实现方式中,在所述第一设备发送服务查询请求消息至所述第二设备之前,所述方法还包括:
所述第一设备获取所述服务信息。
结合第五方面的第一种可能的实现方式或第五方面的第三种可能的实现方式,在第五方面的第四种可能的实现方式中,所述服务信息包含服务名称或服务名称衍生值。
结合第五方面,在第五方面的第五种可能的实现方式中,在所述第一设备发送第二设备的公钥衍生值至第二设备之前,所述方法还包括:
所述第一设备获取所述第二设备的公钥衍生值。
结合第五方面的第五种可能的实现方式,在第五方面的第六种可能的实现方式中,所述第一设备获取所述第二设备的公钥衍生值包括:
所述第一设备获取所述第二设备的公钥;
所述第一设备根据所述公钥生成所述第二设备的公钥衍生值。
结合第五方面、第五方面的第二种可能的实现方式、第五方面的第五种可能的实现方式或第五方面的第六种可能的实现方式,在第五方面的第七种可能的实现方式中,所述公钥衍生值为公钥哈希值。
结合第五方面,在第五方面的第八种可能的实现方式中,所述响应消息包含所述第二设备支持的认证方式和/或所述第二设备的设备类型角色。
第六方面,本发明的实施例提供一种设备之间发现的方法,包括:
第一设备接收第二设备发送的所述第二设备的公钥衍生值;
当所述第一设备根据所述公钥衍生值确定回复所述第二设备响应信息时,所述第一设备向所述第二设备发送响应消息;
当所述第一设备接收到所述第二设备发送的通信信息时,所述第一设备与所述第二设备进行通信。
结合第六方面,在第六方面的第一种可能的实现方式中,在所述当所 述第一设备根据所述公钥衍生值确定回复所述第二设备响应信息时,所述第一设备向所述第二设备发送响应消息之前,所述方法还包括:
所述第一设备比较所述公钥衍生值与所述第一设备的公钥是否匹配;
当所述公钥衍生值与所述第一设备的公钥匹配时,所述第一设备确定回复所述第二设备响应信息。
结合第六方面的第一种可能的实现方式,在第六方面的第二种可能的实现方式中,在所述当所述第一设备接收到所述第二设备发送的通信信息时,所述第一设备与所述第二设备进行通信之前,所述方法还包括:
所述第一设备接收所述第二设备发送的服务查询请求消息,所述服务查询请求消息包含所述第二设备要查询的服务信息;
当所述第一设备根据所述服务信息确定响应所述服务查询请求消息时,所述第一设备向所述第二设备发送服务查询响应消息。
结合第六方面的第二种可能的实现方式,在第六方面的第三种可能的实现方式中,在所述当所述第一设备根据所述服务信息确定响应所述服务查询请求消息时,所述第一设备向所述第二设备发送服务查询响应消息之前,所述方法还包括:
所述第一设备比较所述第一设备可提供的服务与所述服务信息是否一致;
当所述第一设备可提供的服务与所述服务信息一致时,所述第一设备确定响应所述服务查询请求消息。
结合第六方面或第六方面的第一种可能的实现方式,在第六方面的第四种可能的实现方式中,所述公钥衍生值为公钥哈希值。
结合第六方面的第二种可能的实现方式或第六方面的第三种可能的实现方式,在第六方面的第五种可能的实现方式中,所述服务信息包含服务名称或服务名称衍生值。
结合第六方面的第二种可能的实现方式或第六方面的第三种可能的实现方式,在第六方面的第六种可能的实现方式中,所述服务查询响应消息 包含所述第一设备支持的认证方式和/或所述第一设备的设备类型角色。
第七方面,本发明的实施例提供一种设备之间发现的方法,包括:
第一设备接收第二设备发送的所述第二设备公钥衍生值;
所述第一设备获取匹配公钥信息;
所述第一设备验证所述匹配公钥信息所述公钥衍生值匹配后,向所述第二设备发送通信信息与所述第二设备通信。
结合第七方面,在第七方面的第一种可能的实现方式中,在所述第一设备验证所述匹配公钥信息所述公钥衍生值匹配后,向所述第二设备发送通信信息与所述第二设备通信之前,所述方法还包括:
所述第一设备接收所述第二设备发送的服务查询请求消息,所述服务查询请求消息包含所述第二设备可提供的服务信息;
则所述第一设备验证所述匹配公钥信息所述公钥衍生值匹配后,向所述第二设备发送通信信息与所述第二设备通信包括:
所述第一设备验证所述匹配公钥信息所述公钥衍生值匹配,且所述第一设备要查询的服务与所述服务信息是否一致后,向所述第二设备发送通信信息与所述第二设备通信。
结合第七方面或第七方面的第一种可能的实现方式,在第七方面的第二种可能的实现方式中,所述公钥衍生值为公钥哈希值。
结合第七方面,在第七方面的第三种可能的实现方式中,在所述第一设备接收第二设备发送的所述第二设备公钥衍生值之前,所述方法还包括:
所述第一设备与所述第二设备进行同步。
第八方面,本发明的实施例提供一种设备之间发现的方法,包括:
第一设备向第二设备发送所述第一设备的公钥衍生值,以使得所述第二设备验证所述公钥衍生值与所述第二设备获取的匹配公钥信息是否匹配;
当所述第一设备接收所述第二设备发送的通信信息时,所述第一设备与所述第二设备进行通信。
结合第八方面,在第八方面的第一种可能的实现方式中,在所述第一设备与所述第二设备进行通信之前,所述方法还包括:
所述第一设备向所述第二设备发送服务查询请求消息,所述服务查询请求消息为所述第一设备可提供的服务信息,以使得所述第二设备确定所述服务信息与所述第一设备要查询的服务与是否一致。
结合第八方面,在第八方面的第二种可能的实现方式中,在所述第一设备向第二设备发送所述第一设备的公钥衍生值之前,所述方法还包括:
所述第一设备根据所述第一设备的公钥生成所述公钥衍生值。
结合第八方面或第八方面的第二种可能的实现方式,在第八方面的第三种可能的实现方式中,所述公钥衍生值为公钥哈希值。
结合第八方面,在第八方面的第三种可能的实现方式中,在所述第一设备向第二设备发送所述第一设备的公钥衍生值之前,所述方法还包括:
所述第一设备与所述第二设备进行同步。
第九方面,本发明的实施例提供一种设备之间发现的装置,包括:
发送单元,用于发送服务查询请求消息至第二设备,所述服务查询请求消息包含所述第一设备要查询的服务信息,以使得所述第二设备根据所述服务信息确定是否响应所述服务查询请求消息;
接收单元,用于接收服务查询响应消息,所述服务查询响应消息为所述第二设备确定响应所述服务查询请求消息后发送的,所述服务查询响应消息包含所述第二设备的公钥衍生值;
获取单元,用于获取匹配公钥信息;
所述发送单元还用于所述第一设备验证所述匹配公钥信息与所述公钥衍生值匹配后,向所述第二设备发送通信信息与所述第二设备通信。
结合第九方面,在第九方面的第一种可能的实现方式中,所述发送单元具体用于广播发送所述服务查询请求消息至目标设备,所述目标设备包含所述第二设备和至少一个第三设备,所述服务查询请求消息包含所述第一设备要查询的服务信息,以使得所述目标设备根据所述服务信息确定是 否响应所述服务查询请求消息;
所述接收单元还用于接收所述至少一个第三设备发送的服务查询响应消息,所述至少一个第三设备发送的服务查询响应消息为所述至少一个第三设备确定响应所述服务查询请求消息后发送的,所述至少一个第三设备发送的服务查询响应消息包含所述至少一个第三设备的公钥衍生值。
结合第九方面,在第九方面的第二种可能的实现方式中,所述获取单元还用于获取所述服务信息。
结合第九方面或第九方面的任一种可能的实现方式,在第九方面的第三种可能的实现方式中,所述服务信息包含服务名称或服务名称衍生值。
结合第九方面,在第九方面的第四种可能的实现方式中,所述服务查询响应消息包含所述第二设备支持的认证方式和/或所述第二设备的设备类型角色。
第十方面,本发明的实施例提供一种设备之间发现的装置,包括:
接收单元,用于接收第二设备发送的服务查询请求消息,所述服务查询请求消息包含所述第二设备要查询的服务信息;
发送单元,用于当所述第一设备确定响应所述服务查询请求消息时,向所述第二设备发送服务查询响应消息,所述服务查询响应消息包含所述第一设备的公钥衍生值,以使得所述第二设备验证获取的匹配公钥信息与所述公钥衍生值是否一致;
通信单元,用于当所述第一设备接收到所述第二设备发送的通信信息时,与所述第二设备进行通信。
结合第十方面,在第十方面的第一种可能的实现方式中,所述装置还包括:
比较单元,用于比较所述第一设备可提供的服务与所述服务信息是否一致;
确定单元,用于当所述第一设备可提供的服务与所述服务信息一致时,确定响应所述服务查询请求消息。
结合第十方面,在第十方面的第二种可能的实现方式中,所述装置还包括:
生成单元,用于根据所述第一设备的公钥生成所述公钥衍生值。
结合第十方面的第二种可能的实现方式,在第十方面的第三种可能的实现方式中,所述公钥衍生值为所述公钥的哈希值。
结合第十方面或第十方面的第一种可能的实现方式,在第十方面的第四种可能的实现方式中,所述服务信息包含服务名称或服务名称衍生值。
结合第十方面或第十方面的第一种可能的实现方式,在第十方面的第五种可能的实现方式中,所述服务查询响应消息包含所述第一设备支持的认证方式和/或所述第一设备的设备类型角色。
第十一方面,本发明的实施例提供一种设备之间发现的装置,包括:
发送单元,用于发送服务查询请求消息至第二设备,所述服务查询请求消息包含所述第一设备要查询的服务信息和所述第二设备的公钥衍生值,以使得所述第二设备根据所述服务信息和所述公钥衍生值确定是否响应所述服务查询请求消息;
接收单元,用于接收服务查询响应消息,所述服务查询响应消息为所述第二设备确定响应所述服务查询请求消息后发送的;
所述发送单元还用于向所述第二设备发送通信信息与所述第二设备进行通信。
结合第十一方面,在第十一方面的第一种可能的实现方式中,所述发送单元具体用于广播发送所述服务查询请求消息至目标设备,所述目标设备包含所述第二设备和至少一个第三设备,所述服务查询请求消息包含所述第一设备要查询的服务信息和所述第二设备的公钥衍生值,以使得所述目标设备根据所述服务信息和所述公钥衍生值确定是否响应所述服务查询请求消息。
结合第十一方面,在第十一方面的第二种可能的实现方式中,所述装置还包括:
获取单元,用于获取所述服务信息和所述第二设备的公钥衍生值。
结合第十一方面的第二种可能的实现方式,在第十一方面的第三种可能的实现方式中,所述获取单元包括:
获取子单元,用于获取所述第二设备的公钥;
生成子单元,用于根据所述公钥生成所述第二设备的公钥衍生值。
结合第十一方面或第十一方面的任一种可能的实现方式,在第十一方面的第四种可能的实现方式中,所述公钥衍生值为公钥哈希值。
结合第十一方面、第十一方面的第一种可能的实现方式或第十一方面的第一种可能的实现方式,在第十一方面的第五种可能的实现方式中,所述服务信息包含服务名称或服务名称衍生值。
结合第十一方面,在第十一方面的第六种可能的实现方式中,所述服务查询响应消息包含所述第二设备支持的认证方式和/或所述第二设备的设备类型角色。
第十二方面,本发明的实施例提供一种设备之间发现的装置,包括:
接收单元,用于接收第二设备发送的服务查询请求消息,所述服务查询请求消息包含所述第二设备要查询的服务信息和所述第一设备的公钥衍生值;
发送单元,用于当所述第一设备根据所述服务信息和所述公钥衍生值确定响应所述服务查询请求消息时,向所述第二设备发送服务查询响应消息;
通信单元,用于当所述第一设备接收到所述第二设备发送的通信信息时,与所述第二设备进行通信。
结合第十二方面,在第十二方面的第一种可能的实现方式中,所述装置还包括:
比较单元,用于比较所述第一设备可提供的服务与所述服务信息是否一致;
所述比较单元还用于比较所述公钥衍生值与所述第一设备的公钥是否 匹配;
确定单元,用于当所述第一设备可提供的服务与所述服务信息一致,且所述公钥衍生值与所述第一设备的公钥匹配时,确定响应所述服务查询请求消息。
结合第十二方面的第一种可能的实现方式,在第十二方面的第二种可能的实现方式中,所述公钥衍生值为公钥哈希值。
结合第十二方面的第一种可能的实现方式,在第十二方面的第三种可能的实现方式中,所述服务信息包含服务名称或服务名称衍生值。
结合第十二方面的第一种可能的实现方式,在第十二方面的第五种可能的实现方式中,所述服务查询响应消息包含所述第一设备支持的认证方式和/或所述第一设备的设备类型角色。
第十三方面,本发明的实施例提供一种设备之间发现的装置,包括:
发送单元,用于发送第二设备的公钥衍生值至所述第二设备,以使得所述第二设备根据所述公钥衍生值确定是否回复所述第一设备响应消息;
接收单元,用于接收所述第二设备发送的响应消息,所述响应消息为所述第二设备确定回复所述第一设备响应消息后发送的;
所述发送单元还用于向所述第二设备发送通信信息与所述第二设备进行通信。
结合第十三方面,在第十三方面的第一种可能的实现方式中,所述发送单元还用于发送服务查询请求消息至所述第二设备,所述服务查询请求消息包含所述第一设备要查询的服务信息,以使得所述第二设备根据所述服务信息确定是否响应所述服务查询请求消息;
所述接收单元还用于接收所述第二设备发送的服务查询响应消息,所述服务查询响应消息为所述第二设备确定响应所述服务查询请求消息后发送的。
结合第十三方面,在第十三方面的第二种可能的实现方式中,所述发送单元具体用于广播发送所述公钥衍生值至目标设备,以使得所述目标设 备根据所述公钥衍生值确定是否回复所述第一设备响应消息,所述目标设备包含所述第二设备和至少一个第三设备。
结合第十三方面的第一种可能的实现方式,在第十三方面的第三种可能的实现方式中,所述装置还包括:
获取单元,用于获取所述服务信息。
结合第十三方面的第一种可能的实现方式或第十三方面的第三种可能的实现方式,在第十三方面的第四种可能的实现方式中,所述服务信息包含服务名称或服务名称衍生值。
结合第十三方面,在第十三方面的第五种可能的实现方式中,所述获取单元还用于获取所述第二设备的公钥衍生值。
结合第十三方面的第五种可能的实现方式,在第十三方面的第六种可能的实现方式中,所述获取单元包括:
获取子单元,用于获取所述第二设备的公钥;
生成子单元,用于根据所述公钥生成所述第二设备的公钥衍生值。
结合第十三方面、第十三方面的第二种可能的实现方式、第十三方面的第五种可能的实现方式或第十三方面的第六种可能的实现方式,在第十三方面的第七种可能的实现方式中,所述公钥衍生值为公钥哈希值。
结合第十三方面,在第十三方面的第八种可能的实现方式中,所述响应消息包含所述第二设备支持的认证方式和/或所述第二设备的设备类型角色。
第十四方面,本发明的实施例提供一种设备之间发现的装置,包括:
接收单元,用于接收第二设备发送的所述第二设备的公钥衍生值;
发送单元,用于当所述第一设备根据所述公钥衍生值确定回复所述第二设备响应信息时,向所述第二设备发送响应消息;
通信单元,用于当所述第一设备接收到所述第二设备发送的通信信息时,与所述第二设备进行通信。
结合第十四方面,在第十四方面的第一种可能的实现方式中,所述装 置还包括:
比较单元,用于比较所述公钥衍生值与所述第一设备的公钥是否匹配;
确定单元,用于当所述公钥衍生值与所述第一设备的公钥匹配时,确定回复所述第二设备响应信息。
结合第十四方面的第一种可能的实现方式,在第十四方面的第二种可能的实现方式中,所述接收单元还用于接收所述第二设备发送的服务查询请求消息,所述服务查询请求消息包含所述第二设备要查询的服务信息;
所述发送单元还用于当所述第一设备根据所述服务信息确定响应所述服务查询请求消息时,向所述第二设备发送服务查询响应消息。
结合第十四方面的第二种可能的实现方式,在第十四方面的第三种可能的实现方式中,所述比较单元还用于比较所述第一设备可提供的服务与所述服务信息是否一致;
所述确定单元还用于当所述第一设备可提供的服务与所述服务信息一致时,确定响应所述服务查询请求消息。
结合第十四方面或第十四方面的第一种可能的实现方式,在第十四方面的第四种可能的实现方式中,所述公钥衍生值为公钥哈希值。
结合第十四方面的第二种可能的实现方式或第十四方面的第三种可能的实现方式,在第十四方面的第五种可能的实现方式中,所述服务信息包含服务名称或服务名称衍生值。
结合第十四方面的第二种可能的实现方式或第十四方面的第三种可能的实现方式,在第十四方面的第六种可能的实现方式中,所述服务查询响应消息包含所述第一设备支持的认证方式和/或所述第一设备的设备类型角色。
第十五方面,本发明的实施例提供一种设备之间发现的装置,包括:
接收单元,用于接收第二设备发送的所述第二设备公钥衍生值;
获取单元,用于获取匹配公钥信息;
发送单元,用于所述第一设备验证所述匹配公钥信息所述公钥衍生值 匹配后,向所述第二设备发送通信信息与所述第二设备通信。
结合第十五方面,在第十五方面的第一种可能的实现方式中,所述接收单元还用于接收所述第二设备发送的服务查询请求消息,所述服务查询请求消息包含所述第二设备可提供的服务信息;
所述发送单元还用于验证所述匹配公钥信息所述公钥衍生值匹配,且所述第一设备要查询的服务与所述服务信息是否一致后,向所述第二设备发送通信信息与所述第二设备通信。
结合第十五方面或第十五方面的第一种可能的实现方式,在第十五方面的第二种可能的实现方式中,所述公钥衍生值为公钥哈希值。
结合第十五方面,在第十五方面的第三种可能的实现方式中,所述装置还包括:
同步单元,用于与所述第二设备进行同步。
第十六方面,本发明的实施例提供一种设备之间发现的装置,包括:
发送单元,用于向第二设备发送所述第一设备的公钥衍生值,以使得所述第二设备验证所述公钥衍生值与所述第二设备获取的匹配公钥信息是否匹配;
通信单元,用于当所述第一设备接收所述第二设备发送的通信信息时,与所述第二设备进行通信。
结合第十六方面,在第十六方面的第一种可能的实现方式中,所述发送单元还用于向所述第二设备发送服务查询请求消息,所述服务查询请求消息为所述第一设备可提供的服务信息,以使得所述第二设备确定所述服务信息与所述第一设备要查询的服务与是否一致。
结合第十六方面,在第十六方面的第二种可能的实现方式中,所述装置还包括:
生成单元,用于根据所述第一设备的公钥生成所述公钥衍生值。
结合第十六方面或第十六方面的第二种可能的实现方式,在第十六方面的第三种可能的实现方式中,所述公钥衍生值为公钥哈希值。
结合第十六方面,在第十六方面的第三种可能的实现方式中,所述装置还包括:
同步单元,用于与所述第二设备进行同步。
第十七方面,提供了一种设备之间发现的方法,其特征在于,包括:
第一设备获取所述第二设备的公钥;
所述第一设备根据所述公钥生成所述第二设备的公钥衍生值。
所述第一设备发送所述第二设备的公钥衍生值至所述第二设备,以使得所述第二设备验证接收到的所述第二设备的公钥衍生值是否正确;所述第一设备在接收所述第二设备发送的响应消息后,向所述第二设备发送通信信息与所述第二设备进行通信,所述响应消息为所述第二设备验证接收到的所述第二设备的公钥衍生值正确后向所述第一设备发送的;或,
所述第一设备接收所述第二设备发送的所述第二设备的公钥衍生值,验证接收到的所述第二设备的公钥衍生值是否正确,若正确,则所述第一设备向所述第二设备发送响应消息;所述第一设备在接收到所述第二设备发送的通信信息后,与所述第二设备进行通信,所述通信信息为所述第二设备在接收到所述响应消息后发送给所述第一设备的;
其中,所述公钥衍生值为:静态的或动态变化的值;所述第二设备的公钥衍生值为基于所述第二设备的公钥生成的哈希值,或,所述第二设备的公钥结合约定的明文信息生成的哈希值,或,所述第二设备的公钥的截断值,或,基于所述第二设备的公钥生成的哈希值的截断值。
第十八方面,提供了一种设备之间发现的方法,其特征在于,包括:
第二设备接收第一设备在获取所述第二设备的公钥,根据所述公钥生成所述第二设备的公钥衍生值后发送的所述第二设备的公钥衍生值;所述第二设备验证接收到的所述第二设备的公钥衍生值是否正确;所述第二设备验证接收到的所述第二设备的公钥衍生值正确后向所述第一设备发送响应消息;所述第二设备接收所述第一设备在接收到所述第二设备发送的响 应消息后发送给所述第二设备的通信信息,与所述第一设备进行通信;或,
第二设备发送所述第二设备的公钥衍生值至第一设备,以使所述第一设备在获取所述第二设备的公钥,根据所述公钥生成所述第二设备的公钥衍生值后,验证接收到的所述第二设备的公钥衍生值是否正确;所述第二设备接收所述第一设备在验证所述接收到的所述第二设备的公钥衍生值正确后,向所述第二设备发送的响应消息;所述第二设备在接收到所述响应消息后发送通信信息给所述第一设备,与所述第一设备进行通信;
其中,所述公钥衍生值为:静态的或动态变化的值;所述第二设备的公钥衍生值为基于所述第二设备的公钥生成的哈希值,或,所述第二设备的公钥结合约定的明文信息生成的哈希值,或,所述第二设备的公钥的截断值,或,基于所述第二设备的公钥生成的哈希值的截断值。
第十九方面,提供了一种设备之间发现的装置,所述装置为第一设备,其特征在于,包括:
获取单元,用于获取所述第二设备的公钥,根据所述公钥生成所述第二设备的公钥衍生值;
第一发送单元,用于发送所述第二设备的公钥衍生值至所述第二设备,以使得所述第二设备验证接收到的所述第二设备的公钥衍生值是否正确;第一接收单元,用于接收所述第二设备发送的响应消息;所述第一发送单元还用于在所述第一接收单元接收到所述响应消息后向所述第二设备发送通信信息与所述第二设备进行通信,所述响应消息为所述第二设备验证接收到的所述第二设备的公钥衍生值正确后向所述第一设备发送的;或,
第二接收单元,用于接收所述第二设备发送的所述第二设备的公钥衍生值;验证单元,用于验证接收到的所述第二设备的公钥衍生值是否正确;第二发送单元,用于在所述验证单元验证接收到的所述第二设备的公钥衍生值正确时,向所述第二设备发送响应消息;所述第二接收单元还用于在接收所述第二设备发送的通信信息后,与所述第二设备进行通信,所述通信信息为所述第二设备在接收到所述响应消息后发送给所述第一设备的;
其中,所述公钥衍生值为:静态的或动态变化的值;所述第二设备的公钥衍生值为基于所述第二设备的公钥生成的哈希值,或,所述第二设备的公钥结合约定的明文信息生成的哈希值,或,所述第二设备的公钥的截断值,或,基于所述第二设备的公钥生成的哈希值的截断值。
第二十方面,提供了一种设备之间发现的装置,所述装置为第二设备,其特征在于,包括:
第一接收单元,用于接收第一设备在获取所述第二设备的公钥,根据所述公钥生成所述第二设备的公钥衍生值后发送的所述第二设备的公钥衍生值;验证单元,用于验证接收到的所述第二设备的公钥衍生值是否正确;第一发送单元,用于在所述验证单元验证接收到的所述第二设备的公钥衍生值正确后向所述第一设备发送响应消息;所述第一接收单元还用于接收所述第一设备在接收到所述第二设备发送的响应消息后发送给所述第二设备的通信信息,与所述第一设备进行通信;或,
第二发送单元,用于发送所述第二设备的公钥衍生值至第一设备,以使所述第一设备在获取所述第二设备的公钥,根据所述公钥生成所述第二设备的公钥衍生值后,验证接收到的所述第二设备的公钥衍生值是否正确;第二接收单元,用于接收所述第一设备在验证所述接收到的所述第二设备的公钥衍生值正确后,向所述第二设备发送的响应消息;所述第二发送单元还用于在所述第二接收单元接收到所述响应消息后发送通信信息给所述第一设备,与所述第一设备进行通信;
其中,所述公钥衍生值为:静态的或动态变化的值;所述第二设备的公钥衍生值为基于所述第二设备的公钥生成的哈希值,或,所述第二设备的公钥结合约定的明文信息生成的哈希值,或,所述第二设备的公钥的截断值,或,基于所述第二设备的公钥生成的哈希值的截断值。
第二十一方面,提供了一种设备之间发现的方法,其特征在于,包括:
第一设备发送服务查询请求消息至第二设备,所述服务查询请求消息 包含所述第一设备要查询的服务信息,以使得所述第二设备根据所述服务信息确定是否响应所述服务查询请求消息;
所述第一设备接收服务查询响应消息,所述服务查询响应消息为所述第二设备确定响应所述服务查询请求消息后发送的;
所述第一设备接收所述第二设备发送的所述第二设备的公钥衍生值;
所述第一设备获取匹配公钥信息;
所述第一设备在接收到所述服务查询响应消息且验证所述匹配公钥信息与所述第二设备的公钥衍生值匹配后,向所述第二设备发送通信信息与所述第二设备通信。
结合第二十一方面,在第一种可能的实现方式中,所述第二设备发送的所述第二设备的公钥衍生值具体携带在所述服务查询响应消息中。
结合第二十一方面,在第二种可能的实现方式中,所述第一设备具体在接收到所述第二设备发送的所述第二设备的公钥衍生值且验证所述匹配公钥信息与所述第二设备的公钥衍生值匹配后,发送所述服务查询请求消息至第二设备。
第二十二方面,提供了一种设备之间发现的方法,其特征在于,包括:
第一设备发送服务查询请求消息至第二设备,所述服务查询请求消息包含所述第一设备要查询的服务信息,以使得所述第二设备根据所述服务信息确定是否响应所述服务查询请求消息;
所述第一设备接收服务查询响应消息,所述服务查询响应消息为所述第二设备确定响应所述服务查询请求消息后发送的;
所述第一设备发送所述第二设备的公钥衍生值至第二设备,以使所述第二设备对接收到的所述第二设备的公钥衍生值进行验证;
所述第一设备在接收到所述服务查询响应消息且所述第二设备的公钥衍生值被验证通过后,向所述第二设备发送通信信息与所述第二设备进行通信。
结合第二十二方面,在第一种可能的实现方式中,所述第一设备发送的所述第二设备的公钥衍生值具体携带在所述服务查询请求消息中。
结合第二十二方面,在第二种可能的实现方式中,所述第一设备具体 在发送所述第二设备的公钥衍生值至第二设备且所述第二设备的公钥衍生值被验证通过后,发送服务查询请求消息至第二设备。
第二十三方面,提供了一种设备之间发现的方法,其特征在于,包括:
第一设备接收第二设备发送的所述第二设备的公钥衍生值;
所述第一设备获取匹配公钥信息;
所述第一设备接收所述第二设备发送的服务查询请求消息,所述服务查询请求消息包含所述第二设备可提供的服务信息;
所述第一设备在验证所述匹配公钥信息与所述第二设备的公钥衍生值匹配,且所述第一设备要查询的服务与所述第二设备可提供的服务信息匹配后,向所述第二设备发送通信信息与所述第二设备通信。
结合第二十三方面,在第一种可能的实现方式中,所述第二设备发送的所述第二设备的公钥衍生值具体携带在所述第二设备发送的服务查询请求消息中。
第二十四方面,提供了一种设备之间发现的装置,所述装置为第一设备,其特征在于,包括:
发送单元,用于发送服务查询请求消息至第二设备,所述服务查询请求消息包含所述第一设备要查询的服务信息,以使得所述第二设备根据所述服务信息确定是否响应所述服务查询请求消息;
接收单元,用于接收服务查询响应消息,所述服务查询响应消息为所述第二设备确定响应所述服务查询请求消息后发送的;
所述接收单元还用于接收所述第二设备发送的所述第二设备的公钥衍生值;
获取单元,用于获取匹配公钥信息;
所述发送单元还用于在所述接收单元接收到所述服务查询响应消息,且所述第一设备验证所述匹配公钥信息与所述第二设备的公钥衍生值匹配后,向所述第二设备发送通信信息与所述第二设备通信。
结合第二十四方面,在第一种可能的实现方式中,所述第二设备发送的所述第二设备的公钥衍生值具体携带在所述服务查询响应消息中。
结合第二十四方面,在第二种可能的实现方式中,所述发送单元用于发送服务查询请求消息至第二设备具体为:
所述发送单元用于在所述接收单元接收到所述第二设备发送的所述第二设备的公钥衍生值且所述第一设备验证所述匹配公钥信息与所述第二设备的公钥衍生值匹配后,发送所述服务查询请求消息至第二设备。
第二十五方面,提供了一种设备之间发现的装置,所述装置为第一设备,其特征在于,包括:
发送单元,用于发送服务查询请求消息至第二设备,所述服务查询请求消息包含所述第一设备要查询的服务信息,以使得所述第二设备根据所述服务信息确定是否响应所述服务查询请求消息;
接收单元,用于接收服务查询响应消息,所述服务查询响应消息为所述第二设备确定响应所述服务查询请求消息后发送的;
所述发送单元还用于发送所述第二设备的公钥衍生值至第二设备,以使所述第二设备对接收到的所述第二设备的公钥衍生值进行验证;
所述发送单元还用于在所述接收单元接收到所述服务查询响应消息且所述第二设备的公钥衍生值被验证通过后,向所述第二设备发送通信信息与所述第二设备进行通信。
结合第二十五方面,在第一种可能的实现方式中,所述第一设备发送的所述第二设备的公钥衍生值具体携带在所述服务查询请求消息中。
结合第二十五方面,在第二种可能的实现方式中,所述发送单元用于发送服务查询请求消息至第二设备具体为:
所述发送单元用于在发送所述第二设备的公钥衍生值至第二设备且所述第二设备的公钥衍生值被验证通过后,发送服务查询请求消息至第二设备。
第二十六方面,提供了一种设备之间发现的装置,所述装置为第一设备,其特征在于,包括:
接收单元,用于接收第二设备发送的所述第二设备公钥衍生值;
获取单元,用于获取匹配公钥信息;
所述接收单元还用于接收所述第二设备发送的服务查询请求消息,所 述服务查询请求消息包含所述第二设备可提供的服务信息;
发送单元,用于在所述第一设备验证所述匹配公钥信息所述公钥衍生值匹配,且所述第一设备要查询的服务与所述第二设备可提供的服务信息匹配后,向所述第二设备发送通信信息与所述第二设备通信。
结合第二十六方面,在第一种可能的实现方式中,所述第二设备发送的所述第二设备的公钥衍生值具体携带在所述第二设备发送的服务查询请求消息中。
第二十七方面,提供了一种设备之间发现的方法,其特征在于,包括:
第二设备接收第一设备发送的服务查询请求消息,所述服务查询请求消息包含所述第一设备要查询的服务信息,以使得所述第二设备根据所述服务信息确定是否响应所述服务查询请求消息;
所述第二设备在确定响应所述服务查询请求消息后向所述第一设备发送服务查询响应消息;
所述第二设备向所述第一设备发送所述第二设备的公钥衍生值,以使所述第一设备在获取匹配公钥信息后,验证所述匹配公钥信息与所述第二设备的公钥衍生值是否匹配;
所述第二设备接收到所述第一设备发送的通信信息后与所述第二设备通信,所述通信信息为所述第一设备在接收到所述服务查询响应消息且验证所述匹配公钥信息与所述第二设备的公钥衍生值匹配后,向所述第二设备发送的。
结合第二十七方面,在第一种可能的实现方式中,所述第二设备发送的所述第二设备的公钥衍生值具体携带在所述服务查询响应消息中。
结合第二十七方面,在第二种可能的实现方式中,所述服务查询请求消息具体为所述第一设备在接收到所述第二设备发送的所述第二设备的公钥衍生值且验证所述匹配公钥信息与所述第二设备的公钥衍生值匹配后,发送给所述第二设备的。
第二十八方面,提供了一种设备之间发现的方法,其特征在于,包括:
第二设备接收第一设备发送的服务查询请求消息,所述服务查询请求消息包含所述第一设备要查询的服务信息;
所述第二设备根据所述服务信息确定响应所述服务查询请求消息后,向所述第一设备发送服务查询响应消息;
所述第二设备接收所述第一设备发送的所述第二设备的公钥衍生值;
所述第二设备对接收到的所述第二设备的公钥衍生值进行验证;
所述第二设备接收所述第一设备在接收到所述服务查询响应消息且所述第二设备的公钥衍生值被验证通过后,向所述第二设备发送的通信信息,与所述第一设备进行通信。
结合第二十八方面,在第一种可能的实现方式中,所述第一设备发送的所述第二设备的公钥衍生值具体携带在所述服务查询请求消息中。
结合第二十八方面,在第二种可能的实现方式中,所述第一设备具体在发送所述第二设备的公钥衍生值至第二设备且所述第二设备的公钥衍生值被验证通过后,发送服务查询请求消息至第二设备。
第二十九方面,提供了一种设备之间发现的方法,其特征在于,包括:
第二设备发送所述第二设备的公钥衍生值至第一设备,以使所述第一设备获取匹配公钥信息并验证所述匹配公钥信息与所述第二设备的公钥衍生值是否匹配;
所述第二设备发送服务查询请求消息至所述第一设备,所述服务查询请求消息包含所述第二设备可提供的服务信息;
所述第二设备接收所述第一设备在验证所述匹配公钥信息与所述第二设备的公钥衍生值匹配,且所述第一设备要查询的服务与所述第二设备可提供的服务信息匹配后,向所述第二设备发送的通信信息,与所述第一设备通信。
结合第二十九方面,在第一种可能的实现方式中,所述第二设备发送的所述第二设备的公钥衍生值具体携带在所述第二设备发送的服务查询请求消息中。
第三十方面,提供了一种设备之间发现的装置,所述装置为第二设备, 其特征在于,包括:
接收单元,用于接收第一设备发送的服务查询请求消息,所述服务查询请求消息包含所述第一设备要查询的服务信息,以使得所述第二设备根据所述服务信息确定是否响应所述服务查询请求消息;
发送单元,用于所述第二设备在确定响应所述服务查询请求消息后向所述第一设备发送服务查询响应消息;
所述发送单元还用于向所述第一设备发送所述第二设备的公钥衍生值,以使所述第一设备在获取匹配公钥信息后,验证所述匹配公钥信息与所述第二设备的公钥衍生值是否匹配;
所述接收单元还用于在接收到所述第一设备发送的通信信息后与所述第二设备通信,所述通信信息为所述第一设备在接收到所述服务查询响应消息且验证所述匹配公钥信息与所述第二设备的公钥衍生值匹配后,向所述第二设备发送的。
结合第三十方面,在第一种可能的实现方式中,所述第二设备的公钥衍生值具体携带在所述服务查询响应消息中。
第三十一方面,提供了一种设备之间发现的装置,所述装置为第二设备,其特征在于,包括:
接收单元,用于接收第一设备发送的服务查询请求消息,所述服务查询请求消息包含所述第一设备要查询的服务信息;
发送单元,用于所述第二设备根据所述服务信息确定响应所述服务查询请求消息后,向所述第一设备发送服务查询响应消息;
所述接收单元还用于接收所述第一设备发送的所述第二设备的公钥衍生值;
验证单元,用于对接收到的所述第二设备的公钥衍生值进行验证;
所述接收单元还用于接收所述第一设备在接收到所述服务查询响应消息且所述第二设备的公钥衍生值被验证通过后,向所述第二设备发送的通信信息,与所述第一设备进行通信。
第三十二方面,提供了一种设备之间发现的装置,所述装置为第二设备,其特征在于,包括:
发送单元,用于发送所述第二设备的公钥衍生值至第一设备,以使所述第一设备获取匹配公钥信息并验证所述匹配公钥信息与所述第二设备的公钥衍生值是否匹配;
所述发送单元还用于发送服务查询请求消息至所述第一设备,所述服务查询请求消息包含所述第二设备可提供的服务信息;
接收单元,用于接收所述第一设备在验证所述匹配公钥信息与所述第二设备的公钥衍生值匹配,且所述第一设备要查询的服务与所述第二设备可提供的服务信息匹配后,向所述第二设备发送的通信信息,与所述第一设备通信。
以上各方面所涉及的方法或装置中相关的内容可以相互参考而不再赘述,其中,所述公钥衍生值为:静态的或动态变化的值;所述第二设备的公钥衍生值为基于所述第二设备的公钥生成的哈希值,或,所述第二设备的公钥结合约定的明文信息生成的哈希值,或,所述第二设备的公钥的截断值,或,基于所述第二设备的公钥生成的哈希值的截断值。
进一步地,所述第一设备可以记录所述第二设备所在的信道信息,当验证所述匹配公钥信息与所述第二设备的公钥衍生值匹配后,切换自己的信道到所述第二设备的信道。
本发明实施例一方面提供的设备之间发现的方法及装置,本发明中第一设备发送包含第一设备要查询的服务信息的服务查询请求消息至第二设备,第二设备根据服务信息确定响应服务查询请求消息后,发送包含第二设备的公钥衍生值的服务查询响应消息;第一设备接收服务查询响应消息后,获取匹配公钥信息,将匹配公钥信息与公钥衍生值匹配;在第一设备 验证匹配公钥信息与公钥衍生值匹配后,第一设备与第二设备进行通信。如此,第二设备在确定响应第一设备的服务查询请求消息后,将第二设备的公钥衍生值发送第一设备,第一设备验证其与获取的匹配公钥信息是否匹配,当两者匹配后,第一设备才与第二设备通信,从而保证第一设备与第二设备后续配置成功,避免了第一设备获取到错误的第二设备的公钥导致后续配置过程失败。
本发明实施例另一方面提供的设备之间发现的方法及装置,本发明中第一设备发送包含获取的第二设备的公钥衍生值和服务信息的服务查询请求消息至第二设备,第二设备根据服务信息和公钥衍生值确定响应服务查询请求消息后,向第一设备发送服务查询响应消息,第一设备接收服务查询响应消息后,与第二设备进行通信。如此,第一设备将第二设备的公钥衍生值发送第二设备,第二设备根据其确定响应第一设备,然后第一设备与第二设备进行通信,避免了第一设备获取到错误的第二设备的公钥导致后续配置过程失败。
本发明实施例又一方面提供的设备之间发现的方法及装置,本发明中第一设备发送第二设备的公钥衍生值至第二设备;第二设备根据公钥衍生值确定回复第一设备响应消息后,向第一设备发送响应消息,第一设备接收第二设备发送的响应消息后,第一设备与第二设备进行通信。如此,第一设备将第二设备的公钥衍生值发送给第二设备,第二设备根据公钥衍生值确定后,第一设备才与第二设备进行通信,避免了第一设备获取到错误的第二设备的公钥导致后续配置过程失败。
本发明实施例再一方面提供的设备之间发现的方法及装置,本发明中第二设备发送自身的公钥衍生值至第一设备;第一设备获取匹配公钥信息后,验证匹配公钥信息公钥衍生值是否匹配,在两者匹配后,第一设备与第二设备进行通信。如此,第一设备验证获取的匹配公钥信息与公钥衍生值是否匹配后,才与第二设备进行通信,避免了第一设备获取到错误的第二设备的公钥导致后续配置过程失败。
附图说明
为了更清楚地说明本发明实施例中的技术方案,下面将对实施例中所需要使用的附图作简单地介绍,显而易见地,下面描述中的附图仅仅是本发明的一些实施例,对于本领域普通技术人员来讲,在不付出创造性劳动的前提下,还可以根据这些附图获得其它的附图。
图1为本发明一实施例提供的方法流程图;
图2为本发明又一实施例提供的方法流程图;
图3为本发明又一实施例提供的方法流程图;
图4为本发明又一实施例提供的方法流程图;
图5为本发明又一实施例提供的方法流程图;
图6为本发明又一实施例提供的方法流程图;
图7为本发明又一实施例提供的方法流程图;
图8为本发明又一实施例提供的方法流程图;
图9为本发明又一实施例提供的方法流程图;
图10为本发明又一实施例提供的方法流程图;
图11为本发明又一实施例提供的方法流程图;
图12为本发明又一实施例提供的方法流程图;
图13为本发明又一实施例提供的方法流程图;
图14为本发明又一实施例提供的方法流程图;
图15为本发明又一实施例提供的方法流程图;
图16为本发明又一实施例提供的装置结构示意图;
图17、图18为本发明又一实施例提供的装置结构示意图;
图19、图20为本发明又一实施例提供的装置结构示意图;
图21、图22为本发明又一实施例提供的装置结构示意图;
图23、图24为本发明又一实施例提供的装置结构示意图;
图25、图26为本发明又一实施例提供的装置结构示意图;
图27、图28为本发明又一实施例提供的装置结构示意图;
图29、图30为本发明又一实施例提供的装置结构示意图。
具体实施方式
下面将结合本发明实施例中的附图,对本发明实施例中的技术方案进行清楚、完整地描述,显然,所描述的实施例仅仅是本发明一部分实施例,而不是全部的实施例。基于本发明中的实施例,本领域普通技术人员在没有做出创造性劳动前提下所获得的所有其它实施例,都属于本发明保护的范围。
本发明一实施例提供一种设备之间发现的方法,用于第一设备,第一设备属于Wi-Fi设备,如图1所示,方法包括:
101、第一设备发送服务查询请求消息至第二设备。
其中,服务查询请求消息包含第一设备要查询的服务信息,以使得第二设备根据服务信息确定是否响应服务查询请求消息。
可选的,第一设备发送服务查询请求消息至第二设备还可以为第一设备广播发送服务查询请求消息至目标设备,目标设备包含第二设备和至少一个第三设备,服务查询请求消息包含第一设备要查询的服务信息,以使得目标设备根据服务信息确定是否响应服务查询请求消息。
可选的,在第一设备发送服务查询请求消息至第二设备之前,第一设备还可以获取服务信息。
可选的,服务信息包含服务名称或服务名称衍生值,服务名称衍生值可以为服务名称哈希值。
102、第一设备接收服务查询响应消息。
其中,服务查询响应消息为第二设备确定响应服务查询请求消息后发送的,服务查询响应消息包含第二设备的公钥衍生值。
可选的,当第一设备广播发送服务查询请求消息至目标设备时,还可以接收至少一个第三设备发送的服务查询响应消息,至少一个第三设备发送的服务查询响应消息为至少一个第三设备确定响应服务查询请求消息后发送的,至少一个第三设备发送的服务查询响应消息包含至少一个第三设备的公钥衍生值。
可选的,服务查询响应消息包含第二设备支持的认证方式和/或第二设备的设备类型角色。
103、第一设备获取匹配公钥信息。
104、第一设备验证匹配公钥信息与公钥衍生值匹配后,向第二设备发送通信信息与第二设备通信。
需要说明的是,第一设备验证匹配公钥信息与公钥衍生值匹配的方式可以为,第一设备基于匹配公钥信息生成的公钥衍生值,与接收的公钥衍生值进行对比,判断两者是否相同,如果相同确定匹配公钥信息与公钥衍生值匹配。
需要说明的是,匹配公钥信息可以是第二设备的公钥,或公钥衍生值。公钥衍生值为基于公钥生成的映射值,可以是公钥的哈希值,或公钥结合约定的明文信息的哈希值,或公钥的截断值(截取公钥的部分作为衍生值),或,基于公钥生成的哈希值的截断值(公钥的哈希值的截断值,或,公钥结合约定的明文信息一起生成的哈希值的截断值)。所述约定的明文信息,可以是静态的明文信息,还可以是动态的明文信息。明文信息可以是同步时间值(TSF(time synchronization function)值),或,时间戳(Time stamp值),或,锚主值(Anchor Mater),主等级值(Master Rank),或,随机值,或,nonce值,或,MAC地址。约定的明文信息可以是这些明文信息中的一种或多种,整体或部分。比如取time stamp的部分作为明文信息。所述公钥衍生值可以是静态的,也可以是动态变化。如果所述公钥衍生值为动态改变的,所述公钥衍生值为公钥结合动态变化的信息映射生成。如果所述公钥衍生值为静态的,所述公钥衍生值为公钥结合静态的信息映射 生成。
需要说明的是,如果公钥衍生值是静态的,第一设备验证匹配公钥信息与公钥衍生值匹配的方式可以为,第一设备基于匹配公钥信息和约定的静态明文信息生成的公钥衍生值,与接收的公钥衍生值进行对比。如果公钥衍生值是动态的,第一设备验证匹配公钥信息与公钥衍生值匹配的方式可以为,第一设备基于匹配公钥信息和约定的动态明文信息生成的公钥衍生值,与接收的公钥衍生值进行对比。
具体匹配可以为:当所述第二设备的公钥衍生值为基于第二设备的公钥和第二设备的时间戳信息生成时,第一设备接收到所述第二设备发送的消息,所述消息包含所述第二设备的时间戳信息,第一设备利用匹配公钥信息和所述第二设备的时间戳信息生成公钥衍生值,与接收到的所述第二设备的公钥衍生值对比,如果值相同则确定匹配公钥信息与所述第二设备的公钥衍生值匹配,也即接收到的所述第二设备的公钥衍生值被验证为正确。
再举个例子:当所述第二设备的公钥衍生值为基于第二设备的公钥和Anchor master的时间戳信息(如anchor master的TSF值)生成时,第一设备利用匹配公钥信息和所述Anchor master的时间戳信息(anchor master的TSF值)生成公钥衍生值,与接收到的所述第二设备的公钥衍生值对比,如果值相同则确定匹配公钥信息与所述第二设备的公钥衍生值匹配,也即接收到的所述第二设备的公钥衍生值被验证为正确。
通信信息可以是:关联请求消息association request,或重关联请求消息reassociation request,或认证请求消息authentication request,或数据消息Data frame,或,EAP(Extensible Authentication Protocol,扩展验证协议)消息,或动作消息action frame,或管理消息management frame,或信标帧beacon等其中的一种或多种。
现有技术中,由于用户多数情况下并不熟悉各设备的名称,在选择目标设备后使用手机扫描二维码时,很容易扫描到其他设备的二维码,使得 手机获取的二维码与选择的目标设备不匹配,进而导致后续配置过程失败。与现有技术相比,本发明中第一设备发送包含第一设备要查询的服务信息的服务查询请求消息至第二设备,第二设备根据服务信息确定响应服务查询请求消息后,发送包含第二设备的公钥衍生值的服务查询响应消息;第一设备接收服务查询响应消息后,获取匹配公钥信息,将匹配公钥信息与公钥衍生值匹配;在第一设备验证匹配公钥信息与公钥衍生值匹配后,第一设备与第二设备进行通信。如此,第二设备在确定响应第一设备的服务查询请求消息后,将第二设备的公钥衍生值发送第一设备,第一设备验证其与获取的匹配公钥信息是否匹配,当两者匹配后,第一设备才与第二设备通信,从而保证第一设备与第二设备后续配置成功,避免了第一设备获取到错误的第二设备的公钥导致后续配置过程失败。
本发明又一实施例提供一种设备之间发现的方法,用于第一设备,第一设备属于Wi-Fi设备,如图2所示,方法包括:
201、第一设备接收第二设备发送的服务查询请求消息。
其中,服务查询请求消息包含第二设备要查询的服务信息。
可选的,服务信息包含服务名称或服务名称衍生值,服务名称衍生值可以为服务名称哈希值。
可选的,服务查询响应消息包含第一设备支持的认证方式和/或第一设备的设备类型角色。
202、当第一设备确定响应服务查询请求消息时,第一设备向第二设备发送服务查询响应消息。
其中,服务查询响应消息包含第一设备的公钥衍生值,以使得第二设备验证获取的匹配公钥信息与公钥衍生值是否一致。
需要说明的是,第一设备验证匹配公钥信息与公钥衍生值匹配的方式可以为,第一设备基于匹配公钥信息生成的公钥衍生值,与接收的公钥衍生值进行对比,判断两者是否相同,如果相同确定匹配公钥信息与公钥衍生值匹配。
可选的,在当第一设备确定响应服务查询请求消息时,第一设备向第二设备发送服务查询响应消息之前,第一设备还可以比较第一设备可提供的服务与服务信息是否一致;当第一设备可提供的服务与服务信息一致时,第一设备确定响应服务查询请求消息。
需要说明的是,第一设备还可以比较第一设备可提供的服务与服务信息是否一致的方式可以为第一设备从服务信息中获得第二设备可以供服务的服务名称,将服务名称与第一设备要查询的服务的服务名称比较,确定两者是否一致。
可选的,在当第一设备确定响应服务查询请求消息时,第一设备向第二设备发送服务查询响应消息之前,第一设备还可以根据第一设备的公钥生成公钥衍生值。
需要说明的是,公钥衍可以是公钥的哈希值,或公钥结合约定的明文信息的哈希值,或公钥的截断值(截取公钥的部分作为衍生值)。
203、当第一设备接收到第二设备发送的通信信息时,第一设备与第二设备进行通信。
需要说明的是,通信信息可以是:关联请求消息,或重关联请求消息,或认证请求消息,或数据消息,或,EAP消息,或动作消息,或管理消息等其中的一种或多种。
现有技术中,由于用户多数情况下并不熟悉各设备的名称,在选择目标设备后使用手机扫描二维码时,很容易扫描到其他设备的二维码,使得手机获取的二维码与选择的目标设备不匹配,进而导致后续配置过程失败。与现有技术相比,本发明中第二设备发送包含第二设备要查询的服务信息的服务查询请求消息至第一设备,第一设备根据服务信息确定响应服务查询请求消息后,发送包含第一设备的公钥衍生值的服务查询响应消息;第二设备接收服务查询响应消息后,获取匹配公钥信息,将匹配公钥信息与公钥衍生值匹配;在第二设备验证匹配公钥信息与公钥衍生值匹配后,第二设备与第一设备进行通信。如此,第一设备在确定响应第二设备的服务 查询请求消息后,将第一设备的公钥衍生值发送第二设备,第二设备验证其与获取的匹配公钥信息是否匹配,当两者匹配后,第二设备才与第一设备通信,从而保证第二设备与第一设备后续配置成功,避免了第二设备获取到错误的第一设备的公钥导致后续配置过程失败。
本发明又一实施例提供一种设备之间发现的方法,用于第一设备,第一设备属于Wi-Fi设备,如图3所示,方法包括:
301、第一设备发送服务查询请求消息至第二设备。
其中,服务查询请求消息包含第一设备要查询的服务信息和第二设备的公钥衍生值,以使得第二设备根据服务信息和公钥衍生值确定是否响应服务查询请求消息。
可选的,第一设备发送服务查询请求消息至第二设备的方式还可以为第一设备广播发送服务查询请求消息至目标设备,目标设备包含第二设备和至少一个第三设备,服务查询请求消息包含第一设备要查询的服务信息和第二设备的公钥衍生值,以使得目标设备根据服务信息和公钥衍生值确定是否响应服务查询请求消息。
可选的,在第一设备发送服务查询请求消息至第二设备之前,第一设备还可以获取服务信息和第二设备的公钥衍生值。
进一步的,第一设备获取第二设备的公钥衍生值的方式可以为第一设备获取第二设备的公钥,然后,根据公钥生成第二设备的公钥衍生值。
可选的,公钥衍生值为公钥哈希值。服务信息包含服务名称或服务名称衍生值。
需要说明的是,公钥衍可以是公钥的哈希值,或公钥结合约定的明文信息的哈希值,或公钥的截断值(截取公钥的部分作为衍生值)。
302、第一设备接收服务查询响应消息。
其中,服务查询响应消息为第二设备确定响应服务查询请求消息后发送的。
可选的,服务查询响应消息包含第二设备支持的认证方式和/或第二设 备的设备类型角色。
303、第一设备向第二设备发送通信信息与第二设备进行通信。
通信信息可以是:关联请求消息,或重关联请求消息,或认证请求消息,或数据消息,或,EAP消息,或动作消息,或管理消息等其中的一种或多种。
现有技术中,由于用户多数情况下并不熟悉各设备的名称,在选择目标设备后使用手机扫描二维码时,很容易扫描到其他设备的二维码,使得手机获取的二维码与选择的目标设备不匹配,进而导致后续配置过程失败。与现有技术相比,本发明中第一设备发送包含获取的第二设备的公钥衍生值和服务信息的服务查询请求消息至第二设备,第二设备根据服务信息和公钥衍生值确定响应服务查询请求消息后,向第一设备发送服务查询响应消息,第一设备接收服务查询响应消息后,与第二设备进行通信。如此,第一设备将第二设备的公钥衍生值发送第二设备,第二设备根据其确定响应第一设备,然后第一设备与第二设备进行通信,避免了第一设备获取到错误的第二设备的公钥导致后续配置过程失败。
本发明又一实施例提供一种设备之间发现的方法,用于第一设备,第一设备属于Wi-Fi设备,如图4所示,方法包括:
401、第一设备接收第二设备发送的服务查询请求消息。
其中,服务查询请求消息包含第二设备要查询的服务信息和第一设备的公钥衍生值。
可选的,服务信息包含服务名称或服务名称衍生值。
402、当第一设备根据服务信息和公钥衍生值确定响应服务查询请求消息时,第一设备向第二设备发送服务查询响应消息。
可选的,在当第一设备根据服务信息和公钥衍生值确定响应服务查询请求消息时,第一设备向第二设备发送服务查询响应消息之前,第一设备还可以比较第一设备可提供的服务与服务信息是否一致,并比较公钥衍生值与第一设备的公钥是否匹配,然后,当第一设备可提供的服务与服务信 息一致,且公钥衍生值与第一设备的公钥匹配时,第一设备确定响应服务查询请求消息。
需要说明的是,第一设备比较第一设备可提供的服务与服务信息是否一致的方式可以为第一设备从服务信息中获得第二设备可以供服务的服务名称,将服务名称与第一设备要查询的服务的服务名称比较,确定两者是否一致。第一设备比较比较公钥衍生值与第一设备的公钥是否匹配的方式可以为,从公钥衍生值中计算出公钥,然后将计算出的公钥与第一设备的公钥比较两者是否一致,若一致则确定两者匹配,若不一致则确定两者不匹配,或者,第一设备基于公钥生成的公钥衍生值,与接收的公钥衍生值进行对比,判断两者是否相同,如果相同确定匹配公钥信息与公钥衍生值匹配。
可选的,公钥衍生值为公钥哈希值。
可选的,服务查询响应消息包含第一设备支持的认证方式和/或第一设备的设备类型角色。
需要说明的是,公钥衍可以是公钥的哈希值,或公钥结合约定的明文信息的哈希值,或公钥的截断值(截取公钥的部分作为衍生值)。
403、当第一设备接收到第二设备发送的通信信息时,第一设备与第二设备进行通信。
通信信息可以是:关联请求消息,或重关联请求消息,或认证请求消息,或数据消息,或,EAP消息,或动作消息,或管理消息等其中的一种或多种。
现有技术中,由于用户多数情况下并不熟悉各设备的名称,在选择目标设备后使用手机扫描二维码时,很容易扫描到其他设备的二维码,使得手机获取的二维码与选择的目标设备不匹配,进而导致后续配置过程失败。与现有技术相比,本发明中第二设备发送包含获取的第一设备的公钥衍生值和服务信息的服务查询请求消息至第一设备,第一设备根据服务信息和公钥衍生值确定响应服务查询请求消息后,向第二设备发送服务查询响应 消息,第二设备接收服务查询响应消息后,与第一设备进行通信。如此,第二设备将第一设备的公钥衍生值发送第一设备,第一设备根据其确定响应第二设备,然后第二设备与第一设备进行通信,避免了第二设备获取到错误的第一设备的公钥导致后续配置过程失败。
本发明又一实施例提供一种设备之间发现的方法,用于第一设备,第一设备属于Wi-Fi设备,如图5所示,方法包括:
501、第一设备发送第二设备的公钥衍生值至第二设备。
其中,第一设备发送第二设备的公钥衍生值至第二设备,以使得第二设备根据公钥衍生值确定是否回复第一设备响应消息。
可选的,第一设备发送第二设备的公钥衍生值至第二设备具体方式可以为第一设备广播发送公钥衍生值至目标设备,以使得目标设备根据公钥衍生值确定是否回复第一设备响应消息,目标设备包含第二设备和至少一个第三设备。
可选的,在第一设备发送第二设备的公钥衍生值至第二设备之前,第一设备可以获取第二设备的公钥衍生值。
具体的,第一设备获取第二设备的公钥衍生值的方式为第一设备获取第二设备的公钥;然后,第一设备根据公钥生成第二设备的公钥衍生值。
可选的,公钥衍生值为公钥哈希值。
需要说明的是,公钥衍可以是公钥的哈希值,或公钥结合约定的明文信息的哈希值,或公钥的截断值(截取公钥的部分作为衍生值)。
502、第一设备接收第二设备发送的响应消息。
其中,响应消息为第二设备确定回复第一设备响应消息后发送的。
503、第一设备向第二设备发送通信信息与第二设备进行通信。
可选的,在第一设备向第二设备发送通信信息与第二设备进行通信之前,第一设备还可以发送服务查询请求消息至第二设备,服务查询请求消息包含第一设备要查询的服务信息,以使得第二设备根据服务信息确定是否响应服务查询请求消息;然后,第一设备接收第二设备发送的服务查询 响应消息,服务查询响应消息为第二设备确定响应服务查询请求消息后发送的。
可选的,在第一设备发送服务查询请求消息至第二设备之前,第一设备还可以获取服务信息。服务信息包含服务名称或服务名称衍生值。
可选的,响应消息包含第二设备支持的认证方式和/或第二设备的设备类型角色。
通信信息可以是:关联请求消息,或重关联请求消息,或认证请求消息,或数据消息,或,EAP消息,或动作消息,或管理消息等其中的一种或多种。
现有技术中,由于用户多数情况下并不熟悉各设备的名称,在选择目标设备后使用手机扫描二维码时,很容易扫描到其他设备的二维码,使得手机获取的二维码与选择的目标设备不匹配,进而导致后续配置过程失败。与现有技术相比,本发明中第一设备发送第二设备的公钥衍生值至第二设备;第二设备根据公钥衍生值确定回复第一设备响应消息后,向第一设备发送响应消息,第一设备接收第二设备发送的响应消息后,第一设备与第二设备进行通信。如此,第一设备将第二设备的公钥衍生值发送给第二设备,第二设备根据公钥衍生值确定后,第一设备才与第二设备进行通信,避免了第一设备获取到错误的第二设备的公钥导致后续配置过程失败。
本发明又一实施例提供一种设备之间发现的方法,用于第一设备,第一设备属于Wi-Fi设备,如图6所示,方法包括:
601、第一设备接收第二设备发送的第二设备的公钥衍生值。
需要说明的是,公钥衍可以是公钥的哈希值,或公钥结合约定的明文信息的哈希值,或公钥的截断值(截取公钥的部分作为衍生值)。
602、当第一设备根据公钥衍生值确定回复第二设备响应信息时,第一设备向第二设备发送响应消息。
603、当第一设备接收到第二设备发送的通信信息时,第一设备与第二设备进行通信。
可选的,在当第一设备根据公钥衍生值确定回复第二设备响应信息时,第一设备向第二设备发送响应消息之前,第一设备还可以比较公钥衍生值与第一设备的公钥是否匹配;当公钥衍生值与第一设备的公钥匹配时,第一设备确定回复第二设备响应信息。
可选的,在当第一设备接收到第二设备发送的通信信息时,第一设备与第二设备进行通信之前,第一设备可以接收第二设备发送的服务查询请求消息,服务查询请求消息包含第二设备要查询的服务信息;当第一设备根据服务信息确定响应服务查询请求消息时,第一设备向第二设备发送服务查询响应消息。
可选的,在当第一设备根据服务信息确定响应服务查询请求消息时,第一设备项第二设备发送服务查询响应消息之前,第一设备可以比较第一设备可提供的服务与服务信息是否一致;当第一设备可提供的服务与服务信息一致时,第一设备确定响应服务查询请求消息。
需要说明的是,第一设备比较第一设备可提供的服务与服务信息是否一致的方式可以为第一设备从服务信息中获得第二设备可以供服务的服务名称,将服务名称与第一设备可提供的服务的服务名称比较,确定两者是否一致。第一设备比较比较公钥衍生值与第一设备的公钥是否匹配的方式可以为,从公钥衍生值中计算出公钥,然后将计算出的公钥与第一设备的公钥比较两者是否一致,若一致则确定两者匹配,若不一致则确定两者不匹配,或者,第一设备基于公钥生成的公钥衍生值,与接收的公钥衍生值进行对比,判断两者是否相同,如果相同确定匹配公钥信息与公钥衍生值匹配。
可选的,公钥衍生值为公钥哈希值。服务信息包含服务名称或服务名称衍生值。服务查询响应消息包含第一设备支持的认证方式和/或第一设备的设备类型角色。
通信信息可以是:关联请求消息,或重关联请求消息,或认证请求消息,或数据消息,或,EAP消息,或动作消息,或管理消息等其中的一种或 多种。
现有技术中,由于用户多数情况下并不熟悉各设备的名称,在选择目标设备后使用手机扫描二维码时,很容易扫描到其他设备的二维码,使得手机获取的二维码与选择的目标设备不匹配,进而导致后续配置过程失败。与现有技术相比,本发明中第二设备发送第一设备的公钥衍生值至第一设备;第一设备根据公钥衍生值确定回复第二设备响应消息后,向第二设备发送响应消息,第二设备接收第一设备发送的响应消息后,第二设备与第一设备进行通信。如此,第二设备将第一设备的公钥衍生值发送给第一设备,第二设备根据公钥衍生值确定后,第二设备才与第一设备进行通信,避免了第二设备获取到错误的第一设备的公钥导致后续配置过程失败。
本发明又一实施例提供一种设备之间发现的方法,用于第一设备,第一设备属于Wi-Fi设备,如图7所示,方法包括:
701、第一设备接收第二设备发送的第二设备公钥衍生值。
702、第一设备获取匹配公钥信息。
703、第一设备验证匹配公钥信息与公钥衍生值匹配后,向第二设备发送通信信息与第二设备通信。
可选的,在第一设备验证匹配公钥信息公钥衍生值匹配后,向第二设备发送通信信息与第二设备通信之前,第一设备可以接收第二设备发送的服务查询请求消息,服务查询请求消息包含第二设备可提供的服务信息。
进一步的,第一设备验证匹配公钥信息公钥衍生值匹配后,向第二设备发送通信信息与第二设备通信具体为,第一设备验证匹配公钥信息公钥衍生值匹配,且第一设备要查询的服务与服务信息是否一致后,向第二设备发送通信信息与第二设备通信。
需要说明的是,第一设备比较第一设备要查询的服务与服务信息是否一致的方式可以为第一设备从服务信息中获得第二设备可以供服务的服务名称,将服务名称与第一设备要查询的服务的服务名称比较,确定两者是否一致。第一设备比较比较公钥衍生值与第一设备获取的匹配公钥信息是 否匹配的方式可以为,分别从公钥衍生值和匹配公钥信息中计算出公钥,然后将两者计算出的公钥比较是否一致,若一致则确定两者匹配,若不一致则确定两者不匹配。
可选的,公钥衍生值为公钥哈希值。
可选的,在第一设备接收第二设备发送的第二设备公钥衍生值之前,第一设备可以与第二设备进行同步。
需要说明的是,匹配公钥信息可以是第二设备的公钥,或公钥衍生值。公钥衍可以是公钥的哈希值,或公钥结合约定的明文信息的哈希值,或公钥的截断值(截取公钥的部分作为衍生值)。
通信信息可以是:关联请求消息,或重关联请求消息,或认证请求消息,或数据消息,或,EAP消息,或动作消息,或管理消息等其中的一种或多种。
现有技术中,由于用户多数情况下并不熟悉各设备的名称,在选择目标设备后使用手机扫描二维码时,很容易扫描到其他设备的二维码,使得手机获取的二维码与选择的目标设备不匹配,进而导致后续配置过程失败。与现有技术相比,本发明中第二设备发送自身的公钥衍生值至第一设备;第一设备获取匹配公钥信息后,验证匹配公钥信息公钥衍生值是否匹配,在两者匹配后,第一设备与第二设备进行通信。如此,第一设备验证获取的匹配公钥信息与公钥衍生值是否匹配后,才与第二设备进行通信,避免了第一设备获取到错误的第二设备的公钥导致后续配置过程失败。
本发明又一实施例提供一种设备之间发现的方法,用于第一设备,第一设备属于Wi-Fi设备,如图8所示,方法包括:
801、第一设备向第二设备发送第一设备的公钥衍生值。
其中,第一设备向第二设备发送第一设备的公钥衍生值,以使得第二设备验证公钥衍生值与第二设备获取的匹配公钥信息是否匹配。
802、当第一设备接收第二设备发送的通信信息时,第一设备与第二设备进行通信。
可选的,在第一设备与第二设备进行通信之前,第一设备可以向第二设备发送服务查询请求消息,服务查询请求消息为第一设备可提供的服务信息,以使得第二设备确定服务信息与第一设备要查询的服务与是否一致。
可选的,在第一设备向第二设备发送第一设备的公钥衍生值之前,第一设备可以根据第一设备的公钥生成公钥衍生值。
可选的,公钥衍生值为公钥哈希值。
可选的,在第一设备向第二设备发送第一设备的公钥衍生值之前,第一设备可以与第二设备进行同步。
通信信息可以是:关联请求消息,或重关联请求消息,或认证请求消息,或数据消息,或,EAP消息,或动作消息,或管理消息等其中的一种或多种。
现有技术中,由于用户多数情况下并不熟悉各设备的名称,在选择目标设备后使用手机扫描二维码时,很容易扫描到其他设备的二维码,使得手机获取的二维码与选择的目标设备不匹配,进而导致后续配置过程失败。与现有技术相比,本发明中第一设备发送自身的公钥衍生值至第二设备;第二设备获取匹配公钥信息后,验证匹配公钥信息公钥衍生值是否匹配,在两者匹配后,第二设备与第一设备进行通信。如此,第二设备验证获取的匹配公钥信息与公钥衍生值是否匹配后,才与第一设备进行通信,避免了第二设备获取到错误的第一设备的公钥导致后续配置过程失败。
本发明又一实施例提供一种设备之间发现的方法,用于Wi-Fi设备,结合WFDS(Wi-Fi Direct Services,Wi-Fi直连服务)规范,以手机和打印设备之间的发现过程为例,如图9所示,所述方法包括:
901、手机广播发送服务查询消息。
其中,服务查询消息是WFDS消息,手机发送的服务查询消息中包含服务名称或服务名称的哈希值,以及手机的MAC地址。
需要说明的是,手机在广播发送服务查询消息之前,需要获得要执行的服务,可以通过用户的具体操作,用户在设备UI(User Interface,用户界 面)上选择,或输入要进行得服务,例如,打印、发送、分享、播放、显示、关联、配置AP(Access Point,接入点)、替换AP、增加AP、添加设备加入网络、配置当前设备、连接当前设备、将当前设备连接到另外的设备、支持被配置、支持被拥有、此时没有被配置可以被配置、发现AP、扫描发现支持WPS(DPP)配置的设备等其中的一种或多种,手机可以通过获得要执行的服务获得服务信息,比如从所述执行的服务中提取服务信息,例如,手机获得要执行的服务为“发送”,则手机获取的服务信息为“发送”。接收到所述服务查询消息的设备,如果支持相对应的服务信息,如:打印、发送、分享、播放、显示、关联、配置AP(Access Point,接入点)、替换AP、增加AP、添加设备加入网络、配置当前设备、连接当前设备、将当前设备连接到另外的设备、支持被配置、支持被拥有、此时没有被配置可以被配置、发现AP、扫描发现支持WPS(DPP)配置的设备等其中的一种或多种,则接收到所述服务查询消息的设备会进行响应。
举个例子:手机查询服务:添加设备加入网络,接收所述服务查询消息的设备如果支持被添加会进行响应;手机查询服务:配置当前设备,接收所述服务查询消息的设备如果支持被配置会进行响应,手机将配置当前设备作为服务信息带在服务查询消息中;手机查询服务:连接当前设备,接收所述服务查询消息的设备如果支持被连接会进行响应,手机将连接当前设备作为服务信息带在服务查询消息中;手机查询服务:连接将当前设备连接到另外的设备,接收所述服务查询消息的设备如果支持被将当前设备连接到另外的设备会进行响应;手机宣称服务:支持被配置,接收所述服务查询消息的设备如果支持配置功能会进行响应;手机宣称服务:此时没有被配置可以被配置,接收所述服务查询消息的设备如果支持配置功能会进行响应;手机宣称服务:支持被拥有,接收所述服务查询消息的设备如果支持拥有功能会进行响应。再举个例子,设备进行服务发现,比如手机进行服务查询,查询的服务是:发现AP。手机设备会发送probe request消息,表示要查询AP设备,接收到该消息的设备,如果是AP,表明支持AP 服务就进行响应;查询的服务是:发现P2P设备,手机会携带P2P IE在服务查询消息中,表示查询支持P2P的设备,所述P2P IE作为要查询的服务信息,接收到该消息的设备如果支持P2P会进行响应。在响应的消息中可选的携带P2P IE;比如,查询的服务是:发现支持WPS配置(WiFi保护设置,WiFi protect setup)(或,支持DPP配置(设备提供协议,Device Provisioning Protocol))的设备,手机设备会携带WPS IE(或,DPP IE)在发送的服务查询消息中,表示要查询支持WPS(DPP)配置的设备,所述WPS IE(或,DPP IE)作为要查询的服务信息,接收到该消息的设备如果支持WPS(或,DPP)配置的设备会进行响应。在响应的消息中可选的携带WPS IE(或,DPP IE)。另外说明,公钥衍生值可以包在服务查询消息中,具体可包含在WPS IE(或,DPP IE)中。所述服务查询消息/响应消息格式也可以是probe request消息,action消息,EAP消息,或其他消息格式。
本发明实施例以手机打印文件为例。
902、打印设备接收手机广播的服务查询消息。
其中,打印设备从手机广播的服务查询消息中得知手机需要的服务和手机的MAC地址。
需要说明的时,在手机广播消息可达的范围内的设备,均可以接收手机广播的消息。
903、打印设备判断其是否满足服务消息中的服务,若满足服务消息中的服务,则执行步骤904;若不满足服务消息中的服务,则不作处理。
904、打印设备回复手机服务查询响应消息。
其中,服务查询响应消息为WFDS消息,包含服务名称、打印设备的公钥哈希值(public key hash),以及打印设备支持的认证方式,例如,QR-code(Quick Response-code,二维码)认证,PIN(Personal Identifier Number,个人身份号码)认证等,服务查询响应消息的发送地址为打印设备的MAC地址。
需要说明的是,打印设备的公钥哈希值为打印设备将其公钥进行单向 运算得到的值,比如哈希运算生成的,本发明实施例以哈希运算为例,将公钥进行哈希运算生成公钥哈希值,还可以开用其他算法。
需要说明的是,如果打印设备是AP设备,服务查询响应消息还携带SSID(service set identifier,AP的网络名称),表明自己的是AP设备;如果是P2P(Peer-to-Peer,点对点),或普通STA(station,站点)设备,服务查询响应消息则不携带SSID。SSID为了使手机可以获得打印设备的角色信息,或,打印设备直接在回复服务查询响应消息中包含自己的设备角色信息,例如,AP、STA、GO(group owner,组长)、客户端client、不在组group中的点对点设备P2P device、待配置的设备(enrollee or connector)、配置设备(configurator or Introducers)。
905、手机接收打印设备回复的服务查询响应消息。
其中,手机接收打印设备回复的服务查询响应消息,从而获得打印设备的MAC地址、公钥哈希值等信息。
906、手机扫描打印设备的二维码,获取打印设备的公钥。
其中,手机通过扫描打印设备的二维码,获得二维码中打印设备的公钥。
需要说明的是,二维码中打印设备的公钥即为匹配公钥信息。
907、手机根据公钥验证公钥哈希值是否正确,若验证公钥哈希值正确,则执行步骤908;若验证公钥哈希值不正确,则提示获取公钥失败。
其中,手机根据公钥验证公钥哈希值的方式可以为,先对二维码中获取的公钥进行哈希运算,然后将运算结果与接收到的公钥哈希值进行对比,如果运算结果与接收到的公钥哈希值一致,则说明手机获取的公钥为打印设备的公钥,执行步骤907;如果运算结果与接收到的公钥哈希值不一致,则说明手机获取的公钥不是打印设备的公钥,提示获取公钥失败。
908、手机与打印设备执行后续的信息交互过程。
其中,后续的信息交互过程为手机和打印设备完成配置由于手机在步骤904中获取了打印设备的MAC地址,手机可以直接向打印设备发送消息, 打印设备可以直接向手机发送消息。例如,手机向打印设备发起问询消息(Provision Discovery Request):包含自己连接能力:可以作为GO,client,new(可以成立新的group);打印设备回复问询响应消息(Provision Discovery Response):包含自己的连接能力,可以作为GO,client,new中的一种。
需要说明的是,本发明实施例还可以不结合WFDS规范,而结合GAS消息实施,即步骤910和步骤914中发送的消息为GAS(Generic advertisement service,通用广播服务)消息。
现有技术中,由于用户多数情况下并不熟悉各设备的名称,在选择目标设备后使用手机扫描二维码时,很容易扫描到其他设备的二维码,使得手机获取的二维码与选择的目标设备不匹配,进而导致后续配置过程失败。与现有技术相比,本发明中第一设备向第二设备发送包含第一设备要查询的服务信息的服务查询消息,然后接收第二设备发送的包含第二设备的公钥哈希值的响应消息,响应消息为第二设备确定第二设备提供的服务与服务信息一致后发送的;第一设备获取第二设备的公钥,并根据公钥验证公钥哈希值是否正确;当第一设备验证公钥哈希值正确时,与第二设备进行通信。如此,第一设备与第二设备在服务信息一致后,通过验证第二设备公钥哈希值与获取的第二设备公钥的一致性确定第一设备是否正确选择了第二设备,避免了第一设备获取到错误的第二设备的公钥导致后续配置过程失败。
本发明又一实施例提供一种设备之间发现的方法,用于Wi-Fi设备,结合GAS消息,以手机和打印设备之间的发现过程为例,如图10所示,所述方法包括:
1001、手机获得要执行的打印服务。
其中,手机在广播发送服务查询消息之前,需要获得要执行的服务,可以通过用户的具体操作,用户在设备UI(User Interface,用户界面)上选择,或输入要进行得服务,例如,打印、发送、分享、播放、显示、关联、配置AP、替换AP、增加AP、添加设备加入网络、配置当前设备、连接当前 设备、将当前设备连接到另外的设备、支持被配置、支持被拥有、此时没有被配置可以被配置等其中的一种或多种,手机可以通过获得要执行的服务获得服务信息,比如从所述执行的服务中提取服务信息,例如,手机获得要执行的服务为“发送”,则手机获取的服务信息为“发送”。本发明实施例以手机打印文件为例。
1002、手机扫描打印设备的二维码,获得打印设备的公钥。
其中,打印设备的二维码中包含了打印设备的公钥,手机通过扫描打印设备的二维码,获得器包含的公钥。
1003、手机根据公钥进行哈希运算生成公钥哈希值。
其中,打印设备的公钥哈希值为手机将打印设备的公钥进行哈希运算生成的,本发明实施例以哈希运算为例,将公钥进行哈希运算生成公钥哈希值,还可以采用其他算法。
需要说明的是,步骤1001还可以在步骤1002之后或步骤1003之后执行。
1004、手机广播发送服务查询消息。
其中,服务查询消息采用GAS request消息,其中包含服务查询信息和打印设备的公钥哈希值。
1005、打印设备接收手机广播的服务查询消息。
其中,服务查询消息中包含服务查询信息和步骤1003中生成的公钥哈希值,手机发送的服务查询消息中包含service hash值(服务名称的哈希值)和手机的MAC地址。
需要说明的时,在手机广播消息可达的范围内的设备,均可以接收手机广播的消息。
1006、打印设备判断其是否满足服务消息中的服务,若满足服务消息中的服务,则执行步骤1007;若不满足服务消息中的服务,则不作处理。
其中,打印设备根据自身可提供的服务与步骤1005接收服务查询信息中的服务名称比较,判断其是否满足服务消息中的服务,若满足服务消息中的服务,则执行步骤1007;若不满足服务消息中的服务,则不作处理。
1007、打印设备根据公钥验证接收的公钥哈希值是否正确,若验证接收的公钥哈希值正确,则执行步骤1008;若验证接收的公钥哈希值不正确,则执行步骤1011。
其中,打印设备根据公钥验证接收的公钥哈希值是否正确的方式可以为,打印设备根据自己的公钥进行哈希运算,得到运算结果后,与步骤1005接收的公钥哈希值机型比较,若两者一致,则说明手机获得的打印设备的公钥正确,执行步骤1008;若两者不一致,则说明手机获得的打印设备的公钥正确,执行步骤1011。
1008、打印设备回复手机服务查询响应消息。
其中,服务查询响应消息为WFDS消息,包含服务名称、打印设备的公钥哈希值,以及打印设备支持的认证方式,例如,QR-code(Quick Response-code,二维码)认证,PIN(Personal Identifier Number,个人身份号码)认证等,服务查询响应消息的发送地址为打印设备的MAC地址。
需要说明的是,如果打印设备是AP设备,服务查询响应消息还携带SSID(service set identifier,AP的网络名称),表明自己的是AP设备;如果是P2P,或普通STA设备,服务查询响应消息则不携带SSID。SSID为了使手机可以获得打印设备的角色信息,或,打印设备直接在回复服务查询响应消息中包含自己的设备角色信息,例如,AP、STA、GO(group owner)、client、不在group中的P2P device。
1009、手机接收打印设备回复的服务查询响应消息。
其中,手机接收打印设备回复的服务查询响应消息,从而获得打印设备的MAC地址、公钥哈希值等信息。
1010、手机与打印设备执行后续的信息交互过程。
需要说明的是,执行完此步骤,不需要执行后续步骤。
1011、打印设备回复手机获取公钥失败提示信息。
其中,由于答应设备验证接收的公钥哈希值不正确时,向手机发送提示信息,通知手机获取的打印设备的公钥错误,获取公钥失败。
1012、手机提示获取公钥失败。
现有技术中,由于用户多数情况下并不熟悉各设备的名称,在选择目标设备后使用手机扫描二维码时,很容易扫描到其他设备的二维码,使得手机获取的二维码与选择的目标设备不匹配,进而导致后续配置过程失败。与现有技术相比,本发明实施例第二方面提供的设备之间发现的方法及装置,本发明中第一设备向第二设备发送包含第一设备要查询的服务信息和第二设备的公钥哈希值的服务查询消息,然后接收第二设备发送的响应消息,响应消息为第二设备确定第二设备提供的服务与服务信息一致,且验证公钥哈希值正确后发送的;第一设备根据响应消息与第二设备进行通信。如此,第一设备在发送服务查询信息的同时发送第二设备的公钥哈希值,以使第二设备在确定服务信息一致的同时,根据第二设备公钥值验证公钥哈希值正确,当正确时,才恢复第一设备响应消息,第一设备在接收到响应消息后与第二设备进行通信,避免了第一设备获取到错误的第二设备的公钥导致后续配置过程失败。
本发明又一实施例提供一种设备之间发现的方法,用于Wi-Fi设备,以手机和打印设备之间的发现过程为例,如图11所示,所述方法包括:
1101、手机广播发送服务查询消息。
其中,手机发送的服务查询消息中包含service hash值(服务名称(service name))的哈希值和手机的MAC地址。
需要说明的是,手机在广播发送服务查询消息之前,需要获得要执行的服务,可以通过用户的具体操作,用户在设备UI(User Interface,用户界面)上选择,或输入要进行得服务,例如,打印、发送、分享、播放、显示、关联、配置AP、替换AP、增加AP、添加设备加入网络、配置当前设备、连接当前设备、将当前设备连接到另外的设备、支持被配置、支持被拥有、此时没有被配置可以被配置等其中的一种或多种,手机可以通过获得要执行的服务获得服务信息,比如从所述执行的服务中提取服务信息,例如,手机获得要执行的服务为“发送”,则手机获取的服务信息为“发送”。 本发明实施例以手机打印文件为例。
1102、打印设备接收手机广播的服务查询消息。
需要说明的时,在手机广播消息可达的范围内的设备,均可以接收手机广播的消息。
1103、打印设备判断其是否满足服务消息中的服务,若满足服务消息中的服务,则执行步骤1104;若不满足服务消息中的服务,则不作处理。
其中,打印设备根据自身可提供的服务与步骤1102接收服务查询信息中的服务名称比较,判断其是否满足服务消息中的服务,若满足服务消息中的服务,则执行步骤1104;若不满足服务消息中的服务,则不作处理。
1104、打印设备回复手机服务查询响应消息。
其中,服务查询响应消息包含服务名称和打印设备支持的认证方式,例如,QR-code(Quick Response-code,二维码)认证,PIN(Personal Identifier Number,个人身份号码)认证等,服务查询响应消息的发送地址为打印设备的MAC地址。
需要说明的是,如果打印设备是AP设备,服务查询响应消息还携带SSID(service set identifier,AP的网络名称),表明自己的是AP设备;如果是P2P,或普通STA设备,服务查询响应消息则不携带SSID。SSID为了使手机可以获得打印设备的角色信息,或,打印设备直接在回复服务查询响应消息中包含自己的设备角色信息,例如,AP、STA、GO(group owner)、client、不在group中的P2P device。
1105、手机接收打印设备回复的服务查询响应消息。
其中,手机接收打印设备回复的服务查询响应消息,从而获得打印设备的MAC地址、公钥哈希值等信息。
1106、手机扫描打印设备的二维码,获取打印设备的公钥。
其中,手机通过扫描打印设备的二维码,获得二维码中打印设备的公钥。
1107、手机根据公钥进行哈希运算生成公钥哈希值。
需要说明的是,打印设备的公钥哈希值为手机将打印设备的公钥进行哈希运算生成的,本发明实施例以哈希运算为例,将公钥进行哈希运算生成公钥哈希值,还可以采用其他算法。
1108、手机发送携带公钥哈希值的发现消息。
其中,发现消息中包含服务信息,可以为广播发送,也可以只发给打印设备,将MAC地址设置为前面响应服务查询设备的MAC地址)。
1109、打印设备接收手机发送的携带公钥哈希值的发现消息。
1110、打印设备根据公钥验证接收的公钥哈希值是否正确,若验证接收的公钥哈希值正确,则执行步骤1111;若验证接收的公钥哈希值不正确,则执行步骤1114。
其中,打印设备根据公钥验证接收的公钥哈希值是否正确的方式可以为,打印设备根据自己的公钥进行哈希运算,得到运算结果后,与步骤305接收的公钥哈希值机型比较,若两者一致,则说明手机获得的打印设备的公钥正确,执行步骤1111;若两者不一致,则说明手机获得的打印设备的公钥正确,执行步骤1114。
1111、打印设备回复手机服务查询响应消息。
其中,服务查询响应消息为WFDS消息,包含服务名称、打印设备的公钥哈希值,以及打印设备支持的认证方式,例如,QR-code(Quick Response-code,二维码)认证,PIN(Personal Identifier Number,个人身份号码)认证等,服务查询响应消息的发送地址为打印设备的MAC地址。
需要说明的是,如果打印设备是AP设备,服务查询响应消息还携带SSID(service set identifier,AP的网络名称),表明自己的是AP设备;如果是P2P,或普通STA设备,服务查询响应消息则不携带SSID。SSID为了使手机可以获得打印设备的角色信息,或,打印设备直接在回复服务查询响应消息中包含自己的设备角色信息,例如,AP、STA、GO(group owner)、client、不在group中的P2P device。
1112、手机接收打印设备回复的服务查询响应消息。
其中,手机接收打印设备回复的服务查询响应消息,从而获得打印设备的MAC地址、公钥哈希值等信息。
1113、手机与打印设备执行后续的信息交互过程。
需要说明的是,执行完此步骤,不需要执行后续步骤。
1114、打印设备回复手机获取公钥失败提示信息。
1115、手机提示获取公钥失败。
现有技术中,由于用户多数情况下并不熟悉各设备的名称,在选择目标设备后使用手机扫描二维码时,很容易扫描到其他设备的二维码,使得手机获取的二维码与选择的目标设备不匹配,进而导致后续配置过程失败。与现有技术相比,本发明实施例第二方面提供的设备之间发现的方法及装置,本发明中第一设备向第二设备发送包含第一设备要查询的服务信息和第二设备的公钥哈希值的服务查询消息,然后接收第二设备发送的响应消息,响应消息为第二设备确定第二设备提供的服务与服务信息一致,且验证公钥哈希值正确后发送的;第一设备根据响应消息与第二设备进行通信。如此,第一设备在发送服务查询信息的同时发送第二设备的公钥哈希值,以使第二设备在确定服务信息一致的同时,根据第二设备公钥值验证公钥哈希值正确,当正确时,才恢复第一设备响应消息,第一设备在接收到响应消息后与第二设备进行通信,避免了第一设备获取到错误的第二设备的公钥导致后续配置过程失败。
本发明又一实施例提供一种设备之间发现的方法,用于Wi-Fi设备,以手机和打印设备之间的发现过程为例,如图12所示,所述方法包括:
1201、手机扫描打印设备的二维码,获取打印设备的公钥。
其中,手机通过扫描打印设备的二维码,获得二维码中打印设备的公钥。
1202、手机根据公钥进行哈希运算生成公钥哈希值。
需要说明的是,打印设备的公钥哈希值为打印设备将其公钥进行哈希运算生成的,本发明实施例以哈希运算为例,将公钥进行哈希运算生成公 钥哈希值,还可以采用其他算法。
1203、手机广播发送携带公钥哈希值的发现消息。
1204、打印设备接收手机发送的携带公钥哈希值的发现消息。
1205、打印设备根据公钥验证接收的公钥哈希值是否正确,若验证接收的公钥哈希值正确,则执行步骤1206;若验证接收的公钥哈希值不正确,则不作处理。
其中,打印设备根据公钥验证接收的公钥哈希值是否正确的方式可以为,打印设备根据自己的公钥进行哈希运算,得到运算结果后,与步骤305接收的公钥哈希值机型比较,若两者一致,则说明手机获得的打印设备的公钥正确,执行步骤1206;若两者不一致,则说明手机获得的打印设备的公钥正确,不作处理。
1206、打印设备回复手机响应消息。
其中,响应消息中包括打印设备的MAC地址。
1207、手机获得要执行的打印服务。
需要说明的是,手机在广播发送服务查询消息之前,需要获得要执行的服务,可以通过用户的具体操作,用户在设备UI(User Interface,用户界面)上选择,或输入要进行得服务,例如,打印、发送、分享、播放、显示、关联、配置AP、替换AP、增加AP、添加设备加入网络、配置当前设备、连接当前设备、将当前设备连接到另外的设备、支持被配置、支持被拥有、此时没有被配置可以被配置等其中的一种或多种,手机可以通过获得要执行的服务获得服务信息,比如从所述执行的服务中提取服务信息,例如,手机获得要执行的服务为“发送”,则手机获取的服务信息为“发送”。本发明实施例以手机打印文件为例。
1208、手机向打印设备发送服务查询消息。
1209、打印设备判断是否满足服务消息中的服务,若满足服务消息中的服务,则执行步骤1210;若不满足服务消息中的服务,则执行步骤1213。
1210、打印设备回复手机服务查询响应消息。
1211、手机接收打印设备回复的服务查询响应消息。
其中,手机接收打印设备回复的服务查询响应消息,从而获得打印设备的MAC地址、公钥哈希值等信息。
1212、手机与打印设备执行后续的信息交互过程。
需要说明的是,执行完此步骤,不需要执行后续步骤。
1213、打印设备回复手机获取公钥失败提示信息。
1214、手机提示获取公钥失败。
需要说明的是,当手机不需要发现服务过程,只需要发现满足公钥哈希值的设备时,步骤1207-步骤1208不需要执行。
现有技术中,由于用户多数情况下并不熟悉各设备的名称,在选择目标设备后使用手机扫描二维码时,很容易扫描到其他设备的二维码,使得手机获取的二维码与选择的目标设备不匹配,进而导致后续配置过程失败。与现有技术相比,本发明实施例第二方面提供的设备之间发现的方法及装置,本发明中第一设备向第二设备发送包含第一设备要查询的服务信息和第二设备的公钥哈希值的服务查询消息,然后接收第二设备发送的响应消息,响应消息为第二设备确定第二设备提供的服务与服务信息一致,且验证公钥哈希值正确后发送的;第一设备根据响应消息与第二设备进行通信。如此,第一设备在发送服务查询信息的同时发送第二设备的公钥哈希值,以使第二设备在确定服务信息一致的同时,根据第二设备公钥值验证公钥哈希值正确,当正确时,才恢复第一设备响应消息,第一设备在接收到响应消息后与第二设备进行通信,避免了第一设备获取到错误的第二设备的公钥导致后续配置过程失败。
本发明又一实施例提供一种设备之间发现的方法,用于Wi-Fi设备,以手机和打印设备之间的发现过程为例,手机和打印设备不需要执行服务发现过程,如图13所示,所述方法包括:
1301、手机与打印设备利用NAN(Neighbor Awareness Networking,邻居感知网络)机制进行同步。
1302、打印设备发送携带公钥哈希值的广播消息。
其中,广播消息中携带打印设备的MAC地址。
1303、手机扫描打印设备的二维码,获取打印设备的公钥。
其中,手机通过扫描打印设备的二维码,获得二维码中打印设备的公钥。
1304、手机根据公钥验证公钥哈希值是否正确,若验证公钥哈希值正确,则执行步骤1305;若验证公钥哈希值不正确,则提示获取公钥失败。
其中,手机根据公钥验证公钥哈希值的方式可以为,先对二维码中获取的公钥进行哈希运算,然后将运算结果与接收到的公钥哈希值进行对比,如果运算结果与接收到的公钥哈希值一致,则说明手机获取的公钥为打印设备的公钥,执行步骤1305;如果运算结果与接收到的公钥哈希值不一致,则说明手机获取的公钥不是打印设备的公钥,提示获取公钥失败。
1305、手机与打印设备执行后续的信息交互过程。
现有技术中,由于用户多数情况下并不熟悉各设备的名称,在选择目标设备后使用手机扫描二维码时,很容易扫描到其他设备的二维码,使得手机获取的二维码与选择的目标设备不匹配,进而导致后续配置过程失败。与现有技术相比,本发明实施例第三方面提供的设备之间发现的方法及装置,本发明中第一设备首先获取第二设备的公钥,并生成公钥哈希值后,向第二设备发送公钥哈希值,当第二设备根据第二设备公钥验证公钥哈希值正确后,向第一设备回复响应信息,第一设备接收第一响应消息后,与第二设备进行通信。如此,第一设备将根据获取的第二设备的公钥生成的公钥哈希值发送给第二设备,接收第二设备根据公钥验证公钥哈希值正确后回复的响应信息后,才与第二设备进行通信,避免了第一设备获取到错误的第二设备的公钥导致后续配置过程失败。
本发明又一实施例提供一种设备之间发现的方法,用于Wi-Fi设备,以手机和打印设备之间的发现过程为例,如图14所示,所述方法包括:
1401、手机与打印设备利用NAN机制进行同步。
1402、打印设备发送携带公钥哈希值的广播消息。
其中,广播消息中携带打印设备的MAC地址和其支持的服务。
1403、手机扫描打印设备的二维码,获取打印设备的公钥。
其中,手机通过扫描打印设备的二维码,获得二维码中打印设备的公钥。
1404、手机根据公钥验证公钥哈希值是否正确,若验证公钥哈希值正确,则执行步骤1405;若验证公钥哈希值不正确,则提示获取公钥失败。
1405、手机判断是否满足服务消息中的服务,若满足服务消息中的服务,则执行步骤1406;若不满足服务消息中的服务,则不作处理。
1406、手机与打印设备执行后续的信息交互过程。
现有技术中,由于用户多数情况下并不熟悉各设备的名称,在选择目标设备后使用手机扫描二维码时,很容易扫描到其他设备的二维码,使得手机获取的二维码与选择的目标设备不匹配,进而导致后续配置过程失败。与现有技术相比,本发明实施例第三方面提供的设备之间发现的方法及装置,本发明中第一设备首先获取第二设备的公钥,并生成公钥哈希值后,向第二设备发送公钥哈希值,当第二设备根据第二设备公钥验证公钥哈希值正确后,向第一设备回复响应信息,第一设备接收第一响应消息后,与第二设备进行通信。如此,第一设备将根据获取的第二设备的公钥生成的公钥哈希值发送给第二设备,接收第二设备根据公钥验证公钥哈希值正确后回复的响应信息后,才与第二设备进行通信,避免了第一设备获取到错误的第二设备的公钥导致后续配置过程失败。
本发明又一实施例提供一种设备之间发现的方法,用于Wi-Fi设备,以手机和打印设备之间的发现过程为例,手机和打印设备不需要执行服务发现过程,如图15所示,所述方法包括:
1501、手机与打印设备利用NAN机制进行同步。
1502、打印设备发送携带支持服务信息的广播消息。
其中,广播消息中携带打印设备的MAC地址
1503、手机扫描打印设备的二维码,获取打印设备的公钥。
其中,手机通过扫描打印设备的二维码,获得二维码中打印设备的公钥。
1504、手机发送包含公钥的哈希值的查询消息。
其中,手机可以广播发送,或直接发给广播所述服务信息的设备(打印设备)。
1505、打印设备根据公钥验证公钥哈希值是否正确,若验证公钥哈希值正确,则执行步骤1506;若验证公钥哈希值不正确,则提示获取公钥失败。
1506、打印设备发送响应消息。
1507、手机与打印设备执行后续的信息交互过程。
现有技术中,由于用户多数情况下并不熟悉各设备的名称,在选择目标设备后使用手机扫描二维码时,很容易扫描到其他设备的二维码,使得手机获取的二维码与选择的目标设备不匹配,进而导致后续配置过程失败。与现有技术相比,本发明实施例第四方面提供的设备之间发现的方法及装置,本发明中第一设备首先接收第二设备发送的第二设备的公钥哈希值,然后获取第二设备的公钥,并根据公钥验证公钥哈希值是否正确,当第一设备验证公钥哈希值正确时,与第二设备进行通信。如此,第一设备根据获取的第二设备的公钥验证接收的公钥哈希值正确后,才与第二设备进行通信,避免了第一设备获取到错误的第二设备的公钥导致后续配置过程失败。
本发明又一实施例提供一种设备之间发现的装置160,如图16所示,所述装置160包括:
发送单元161,用于发送服务查询请求消息至第二设备,所述服务查询请求消息包含所述第一设备要查询的服务信息,以使得所述第二设备根据所述服务信息确定是否响应所述服务查询请求消息;
接收单元162,用于接收服务查询响应消息,所述服务查询响应消息为 所述第二设备确定响应所述服务查询请求消息后发送的,所述服务查询响应消息包含所述第二设备的公钥衍生值;
获取单元163,用于获取匹配公钥信息;
所述发送单元161还用于所述第一设备验证所述匹配公钥信息与所述公钥衍生值匹配后,向所述第二设备发送通信信息与所述第二设备通信。
进一步的,所述发送单元161具体用于广播发送所述服务查询请求消息至目标设备,所述目标设备包含所述第二设备和至少一个第三设备,所述服务查询请求消息包含所述第一设备要查询的服务信息,以使得所述目标设备根据所述服务信息确定是否响应所述服务查询请求消息;
所述接收单元162还用于接收所述至少一个第三设备发送的服务查询响应消息,所述至少一个第三设备发送的服务查询响应消息为所述至少一个第三设备确定响应所述服务查询请求消息后发送的,所述至少一个第三设备发送的服务查询响应消息包含所述至少一个第三设备的公钥衍生值。
进一步的,所述获取单元164还用于获取所述服务信息。
其中,所述服务信息包含服务名称或服务名称衍生值。所述服务查询响应消息包含所述第二设备支持的认证方式和/或所述第二设备的设备类型角色。
现有技术中,由于用户多数情况下并不熟悉各设备的名称,在选择目标设备后使用手机扫描二维码时,很容易扫描到其他设备的二维码,使得手机获取的二维码与选择的目标设备不匹配,进而导致后续配置过程失败。与现有技术相比,本发明中第一设备发送包含第一设备要查询的服务信息的服务查询请求消息至第二设备,第二设备根据服务信息确定响应服务查询请求消息后,发送包含第二设备的公钥衍生值的服务查询响应消息;第一设备接收服务查询响应消息后,获取匹配公钥信息,将匹配公钥信息与公钥衍生值匹配;在第一设备验证匹配公钥信息与公钥衍生值匹配后,第一设备与第二设备进行通信。如此,第二设备在确定响应第一设备的服务查询请求消息后,将第二设备的公钥衍生值发送第一设备,第一设备验证 其与获取的匹配公钥信息是否匹配,当两者匹配后,第一设备才与第二设备通信,从而保证第一设备与第二设备后续配置成功,避免了第一设备获取到错误的第二设备的公钥导致后续配置过程失败。
本发明又一实施例提供一种设备之间发现的装置170,如图17所示,所述装置170包括:
接收单元171,用于接收第二设备发送的服务查询请求消息,所述服务查询请求消息包含所述第二设备要查询的服务信息;
发送单元172,用于当所述第一设备确定响应所述服务查询请求消息时,向所述第二设备发送服务查询响应消息,所述服务查询响应消息包含所述第一设备的公钥衍生值,以使得所述第二设备验证获取的匹配公钥信息与所述公钥衍生值是否一致;
通信单元173,用于当所述第一设备接收到所述第二设备发送的通信信息时,与所述第二设备进行通信。
进一步的,如图18所示,所述装置170还包括:
比较单元174,用于比较所述第一设备可提供的服务与所述服务信息是否一致;
确定单元175,用于当所述第一设备可提供的服务与所述服务信息一致时,确定响应所述服务查询请求消息。
进一步的,如图18所示,所述装置170还包括:
生成单元176,用于根据所述第一设备的公钥生成所述公钥衍生值。
其中,所述公钥衍生值为所述公钥的哈希值。所述服务信息包含服务名称或服务名称衍生值。所述服务查询响应消息包含所述第一设备支持的认证方式和/或所述第一设备的设备类型角色。
现有技术中,由于用户多数情况下并不熟悉各设备的名称,在选择目标设备后使用手机扫描二维码时,很容易扫描到其他设备的二维码,使得手机获取的二维码与选择的目标设备不匹配,进而导致后续配置过程失败。与现有技术相比,本发明中第二设备发送包含第二设备要查询的服务信息 的服务查询请求消息至第一设备,第一设备根据服务信息确定响应服务查询请求消息后,发送包含第一设备的公钥衍生值的服务查询响应消息;第二设备接收服务查询响应消息后,获取匹配公钥信息,将匹配公钥信息与公钥衍生值匹配;在第二设备验证匹配公钥信息与公钥衍生值匹配后,第二设备与第一设备进行通信。如此,第一设备在确定响应第二设备的服务查询请求消息后,将第一设备的公钥衍生值发送第二设备,第二设备验证其与获取的匹配公钥信息是否匹配,当两者匹配后,第二设备才与第一设备通信,从而保证第二设备与第一设备后续配置成功,避免了第二设备获取到错误的第一设备的公钥导致后续配置过程失败。
本发明又一实施例提供一种设备之间发现的装置180,如图19所示,所述装置180包括:
发送单元181,用于发送服务查询请求消息至第二设备,所述服务查询请求消息包含所述第一设备要查询的服务信息和所述第二设备的公钥衍生值,以使得所述第二设备根据所述服务信息和所述公钥衍生值确定是否响应所述服务查询请求消息;
接收单元182,用于接收服务查询响应消息,所述服务查询响应消息为所述第二设备确定响应所述服务查询请求消息后发送的;
所述发送单元181还用于向所述第二设备发送通信信息与所述第二设备进行通信。
进一步的,所述发送单元181具体用于广播发送所述服务查询请求消息至目标设备,所述目标设备包含所述第二设备和至少一个第三设备,所述服务查询请求消息包含所述第一设备要查询的服务信息和所述第二设备的公钥衍生值,以使得所述目标设备根据所述服务信息和所述公钥衍生值确定是否响应所述服务查询请求消息。
进一步的,如图20所述,所述装置180还包括:
获取单元183,用于获取所述服务信息和所述第二设备的公钥衍生值。
进一步的,如图20所述,所述获取单元183包括:
获取子单元1831,用于获取所述第二设备的公钥;
生成子单元1832,用于根据所述公钥生成所述第二设备的公钥衍生值。
其中,所述公钥衍生值为所述公钥的哈希值。所述服务信息包含服务名称或服务名称衍生值。所述服务查询响应消息包含所述第一设备支持的认证方式和/或所述第一设备的设备类型角色。
现有技术中,由于用户多数情况下并不熟悉各设备的名称,在选择目标设备后使用手机扫描二维码时,很容易扫描到其他设备的二维码,使得手机获取的二维码与选择的目标设备不匹配,进而导致后续配置过程失败。与现有技术相比,本发明中第一设备发送包含获取的第二设备的公钥衍生值和服务信息的服务查询请求消息至第二设备,第二设备根据服务信息和公钥衍生值确定响应服务查询请求消息后,向第一设备发送服务查询响应消息,第一设备接收服务查询响应消息后,与第二设备进行通信。如此,第一设备将第二设备的公钥衍生值发送第二设备,第二设备根据其确定响应第一设备,然后第一设备与第二设备进行通信,避免了第一设备获取到错误的第二设备的公钥导致后续配置过程失败。
本发明又一实施例提供一种设备之间发现的装置190,如图21所示,所述装置190包括:
接收单元191,用于接收第二设备发送的服务查询请求消息,所述服务查询请求消息包含所述第二设备要查询的服务信息和所述第一设备的公钥衍生值;
发送单元192,用于当所述第一设备根据所述服务信息和所述公钥衍生值确定响应所述服务查询请求消息时,向所述第二设备发送服务查询响应消息;
通信单元193,用于当所述第一设备接收到所述第二设备发送的通信信息时,与所述第二设备进行通信。
进一步的,如图22所示,所述装置190还包括:
比较单元194,用于比较所述第一设备可提供的服务与所述服务信息是 否一致;
所述比较单元194还用于比较所述公钥衍生值与所述第一设备的公钥是否匹配;
确定单元195,用于当所述第一设备可提供的服务与所述服务信息一致,且所述公钥衍生值与所述第一设备的公钥匹配时,确定响应所述服务查询请求消息。
其中,所述公钥衍生值为所述公钥的哈希值。所述服务信息包含服务名称或服务名称衍生值。所述服务查询响应消息包含所述第一设备支持的认证方式和/或所述第一设备的设备类型角色。
现有技术中,由于用户多数情况下并不熟悉各设备的名称,在选择目标设备后使用手机扫描二维码时,很容易扫描到其他设备的二维码,使得手机获取的二维码与选择的目标设备不匹配,进而导致后续配置过程失败。与现有技术相比,本发明中第二设备发送包含获取的第一设备的公钥衍生值和服务信息的服务查询请求消息至第一设备,第一设备根据服务信息和公钥衍生值确定响应服务查询请求消息后,向第二设备发送服务查询响应消息,第二设备接收服务查询响应消息后,与第一设备进行通信。如此,第二设备将第一设备的公钥衍生值发送第一设备,第一设备根据其确定响应第二设备,然后第二设备与第一设备进行通信,避免了第二设备获取到错误的第一设备的公钥导致后续配置过程失败。
本发明又一实施例提供一种设备之间发现的装置210,如图23所示,所述装置210包括:
发送单元211,用于发送第二设备的公钥衍生值至所述第二设备,以使得所述第二设备根据所述公钥衍生值确定是否回复所述第一设备响应消息;
接收单元212,用于接收所述第二设备发送的响应消息,所述响应消息为所述第二设备确定回复所述第一设备响应消息后发送的;
所述发送单元211还用于向所述第二设备发送通信信息与所述第二设 备进行通信。
进一步的,所述发送单元211还用于发送服务查询请求消息至所述第二设备,所述服务查询请求消息包含所述第一设备要查询的服务信息,以使得所述第二设备根据所述服务信息确定是否响应所述服务查询请求消息;
所述接收单元212还用于接收所述第二设备发送的服务查询响应消息,所述服务查询响应消息为所述第二设备确定响应所述服务查询请求消息后发送的。
进一步的,所述发送单元211具体用于广播发送所述公钥衍生值至目标设备,以使得所述目标设备根据所述公钥衍生值确定是否回复所述第一设备响应消息,所述目标设备包含所述第二设备和至少一个第三设备。
进一步的,如图24所示,所述装置210还包括:
获取单元213,用于获取所述服务信息。
进一步的,所述获取单元213还用于获取所述第二设备的公钥衍生值。
进一步的,如图24所示,所述获取单元213包括:
获取子单元2131,用于获取所述第二设备的公钥;
生成子单元2132,用于根据所述公钥生成所述第二设备的公钥衍生值。
其中,所述公钥衍生值为所述公钥的哈希值。所述服务信息包含服务名称或服务名称衍生值。所述服务查询响应消息包含所述第一设备支持的认证方式和/或所述第一设备的设备类型角色。
现有技术中,由于用户多数情况下并不熟悉各设备的名称,在选择目标设备后使用手机扫描二维码时,很容易扫描到其他设备的二维码,使得手机获取的二维码与选择的目标设备不匹配,进而导致后续配置过程失败。与现有技术相比,本发明中第一设备发送第二设备的公钥衍生值至第二设备;第二设备根据公钥衍生值确定回复第一设备响应消息后,向第一设备发送响应消息,第一设备接收第二设备发送的响应消息后,第一设备与第二设备进行通信。如此,第一设备将第二设备的公钥衍生值发送给第二设备,第二设备根据公钥衍生值确定后,第一设备才与第二设备进行通信, 避免了第一设备获取到错误的第二设备的公钥导致后续配置过程失败。
本发明又一实施例提供一种设备之间发现的装置220,如图25所示,所述装置220包括:
接收单元221,用于接收第二设备发送的所述第二设备的公钥衍生值;
发送单元222,用于当所述第一设备根据所述公钥衍生值确定回复所述第二设备响应信息时,向所述第二设备发送响应消息;
通信单元223,用于当所述第一设备接收到所述第二设备发送的通信信息时,与所述第二设备进行通信。
进一步的,如图26所述,所述装置220还包括:
比较单元224,用于比较所述公钥衍生值与所述第一设备的公钥是否匹配;
确定单元225,用于当所述公钥衍生值与所述第一设备的公钥匹配时,确定回复所述第二设备响应信息。
进一步的,所述接收单元221还用于接收所述第二设备发送的服务查询请求消息,所述服务查询请求消息包含所述第二设备要查询的服务信息;
所述发送单元222还用于当所述第一设备根据所述服务信息确定响应所述服务查询请求消息时,向所述第二设备发送服务查询响应消息。
进一步的,所述比较单元224还用于比较所述第一设备可提供的服务与所述服务信息是否一致;
所述确定单元225还用于当所述第一设备可提供的服务与所述服务信息一致时,确定响应所述服务查询请求消息。
其中,所述公钥衍生值为所述公钥的哈希值。所述服务信息包含服务名称或服务名称衍生值。所述服务查询响应消息包含所述第一设备支持的认证方式和/或所述第一设备的设备类型角色。
现有技术中,由于用户多数情况下并不熟悉各设备的名称,在选择目标设备后使用手机扫描二维码时,很容易扫描到其他设备的二维码,使得手机获取的二维码与选择的目标设备不匹配,进而导致后续配置过程失败。 与现有技术相比,本发明中第二设备发送第一设备的公钥衍生值至第一设备;第一设备根据公钥衍生值确定回复第二设备响应消息后,向第二设备发送响应消息,第二设备接收第一设备发送的响应消息后,第二设备与第一设备进行通信。如此,第二设备将第一设备的公钥衍生值发送给第一设备,第二设备根据公钥衍生值确定后,第二设备才与第一设备进行通信,避免了第二设备获取到错误的第一设备的公钥导致后续配置过程失败。
本发明又一实施例提供一种设备之间发现的装置230,如图27所示,所述装置230包括:
接收单元231,用于接收第二设备发送的所述第二设备公钥衍生值;
获取单元232,用于获取匹配公钥信息;
发送单元233,用于所述第一设备验证所述匹配公钥信息所述公钥衍生值匹配后,向所述第二设备发送通信信息与所述第二设备通信。
其中,所所述公钥衍生值为公钥哈希值。
进一步的,所述接收单元231还用于接收所述第二设备发送的服务查询请求消息,所述服务查询请求消息包含所述第二设备可提供的服务信息;
所述发送单元233还用于验证所述匹配公钥信息所述公钥衍生值匹配,且所述第一设备要查询的服务与所述服务信息是否一致后,向所述第二设备发送通信信息与所述第二设备通信。
进一步的,如图28所述,所述装置230还包括:
同步单元234,用于与所述第二设备进行同步。
现有技术中,由于用户多数情况下并不熟悉各设备的名称,在选择目标设备后使用手机扫描二维码时,很容易扫描到其他设备的二维码,使得手机获取的二维码与选择的目标设备不匹配,进而导致后续配置过程失败。与现有技术相比,本发明中第二设备发送自身的公钥衍生值至第一设备;第一设备获取匹配公钥信息后,验证匹配公钥信息公钥衍生值是否匹配,在两者匹配后,第一设备与第二设备进行通信。如此,第一设备验证获取的匹配公钥信息与公钥衍生值是否匹配后,才与第二设备进行通信,避免 了第一设备获取到错误的第二设备的公钥导致后续配置过程失败。
本发明又一实施例提供一种设备之间发现的装置240,如图29所示,所述装置240包括:
发送单元241,用于向第二设备发送所述第一设备的公钥衍生值,以使得所述第二设备验证所述公钥衍生值与所述第二设备获取的匹配公钥信息是否匹配;
通信单元242,用于当所述第一设备接收所述第二设备发送的通信信息时,与所述第二设备进行通信。
其中,所述公钥衍生值为公钥哈希值。
进一步的,所述发送单元241还用于向所述第二设备发送服务查询请求消息,所述服务查询请求消息为所述第一设备可提供的服务信息,以使得所述第二设备确定所述服务信息与所述第一设备要查询的服务与是否一致。
进一步的,如图30所述,所述装置240还包括:
生成单元243,用于根据所述第一设备的公钥生成所述公钥衍生值。
进一步的,如图30所述,所述装置240还包括:
同步单元244,用于与所述第二设备进行同步。
现有技术中,由于用户多数情况下并不熟悉各设备的名称,在选择目标设备后使用手机扫描二维码时,很容易扫描到其他设备的二维码,使得手机获取的二维码与选择的目标设备不匹配,进而导致后续配置过程失败。与现有技术相比,本发明中第一设备发送自身的公钥衍生值至第二设备;第二设备获取匹配公钥信息后,验证匹配公钥信息公钥衍生值是否匹配,在两者匹配后,第二设备与第一设备进行通信。如此,第二设备验证获取的匹配公钥信息与公钥衍生值是否匹配后,才与第一设备进行通信,避免了第二设备获取到错误的第一设备的公钥导致后续配置过程失败。
本发明实施例提供的设备之间发现的装置可以实现上述提供的方法实施例,具体功能实现请参见方法实施例中的说明,在此不再赘述。本发明 实施例提供的设备之间发现的方法及装置可以适用于无线通信设备,如Wi-Fi,蓝牙设备,但不仅限于此。
本说明书中的各个实施例均采用递进的方式描述,各个实施例之间相同相似的部分互相参见即可,每个实施例重点说明的都是与其他实施例的不同之处。尤其,对于设备实施例而言,由于其基本相似于方法实施例,所以描述得比较简单,相关之处参见方法实施例的部分说明即可。
本领域普通技术人员可以理解实现上述实施例方法中的全部或部分流程,是可以通过计算机程序来指令相关的硬件来完成,所述的程序可存储于一计算机可读取存储介质中,该程序在执行时,可包括如上述各方法的实施例的流程。其中,所述的存储介质可为磁碟、光盘、只读存储记忆体(Read-Only Memory,ROM)或随机存储记忆体(Random Access Memory,RAM)等。
以上所述,仅为本发明的具体实施方式,但本发明的保护范围并不局限于此,任何熟悉本技术领域的技术人员在本发明揭露的技术范围内,可轻易想到的变化或替换,都应涵盖在本发明的保护范围之内。因此,本发明的保护范围应该以权利要求的保护范围为准。

Claims (22)

  1. 一种设备之间发现的方法,其特征在于,包括:
    第一设备获取所述第二设备的公钥;
    所述第一设备根据所述公钥生成所述第二设备的公钥衍生值。
    所述第一设备发送所述第二设备的公钥衍生值至所述第二设备,以使得所述第二设备验证接收到的所述第二设备的公钥衍生值是否正确;所述第一设备在接收所述第二设备发送的响应消息后,向所述第二设备发送通信信息与所述第二设备进行通信,所述响应消息为所述第二设备验证接收到的所述第二设备的公钥衍生值正确后向所述第一设备发送的;或,
    所述第一设备接收所述第二设备发送的所述第二设备的公钥衍生值,验证接收到的所述第二设备的公钥衍生值是否正确,若正确,则所述第一设备向所述第二设备发送响应消息;所述第一设备在接收到所述第二设备发送的通信信息后,与所述第二设备进行通信,所述通信信息为所述第二设备在接收到所述响应消息后发送给所述第一设备的;
    其中,所述公钥衍生值为:静态的或动态变化的值;所述第二设备的公钥衍生值为基于所述第二设备的公钥生成的哈希值,或,所述第二设备的公钥结合约定的明文信息生成的哈希值,或,所述第二设备的公钥的截断值,或,基于所述第二设备的公钥生成的哈希值的截断值。
  2. 一种设备之间发现的方法,其特征在于,包括:
    第二设备接收第一设备在获取所述第二设备的公钥,根据所述公钥生成所述第二设备的公钥衍生值后发送的所述第二设备的公钥衍生值;所述第二设备验证接收到的所述第二设备的公钥衍生值是否正确;所述第二设备验证接收到的所述第二设备的公钥衍生值正确后向所述第一设备发送响应消息;所述第二设备接收所述第一设备在接收到所述第二设备发送的响应消息后发送给所述第二设备的通信信息,与所述第一设备进行通信;或,
    第二设备发送所述第二设备的公钥衍生值至第一设备,以使所述第一设备在获取所述第二设备的公钥,根据所述公钥生成所述第二设备的公钥 衍生值后,验证接收到的所述第二设备的公钥衍生值是否正确;所述第二设备接收所述第一设备在验证所述接收到的所述第二设备的公钥衍生值正确后,向所述第二设备发送的响应消息;所述第二设备在接收到所述响应消息后发送通信信息给所述第一设备,与所述第一设备进行通信;
    其中,所述公钥衍生值为:静态的或动态变化的值;所述第二设备的公钥衍生值为基于所述第二设备的公钥生成的哈希值,或,所述第二设备的公钥结合约定的明文信息生成的哈希值,或,所述第二设备的公钥的截断值,或,基于所述第二设备的公钥生成的哈希值的截断值。
  3. 一种设备之间发现的装置,所述装置为第一设备,其特征在于,包括:
    获取单元,用于获取所述第二设备的公钥,根据所述公钥生成所述第二设备的公钥衍生值;
    第一发送单元,用于发送所述第二设备的公钥衍生值至所述第二设备,以使得所述第二设备验证接收到的所述第二设备的公钥衍生值是否正确;第一接收单元,用于接收所述第二设备发送的响应消息;所述第一发送单元还用于在所述第一接收单元接收到所述响应消息后向所述第二设备发送通信信息与所述第二设备进行通信,所述响应消息为所述第二设备验证接收到的所述第二设备的公钥衍生值正确后向所述第一设备发送的;或,
    第二接收单元,用于接收所述第二设备发送的所述第二设备的公钥衍生值;验证单元,用于验证接收到的所述第二设备的公钥衍生值是否正确;第二发送单元,用于在所述验证单元验证接收到的所述第二设备的公钥衍生值正确时,向所述第二设备发送响应消息;所述第二接收单元还用于在接收所述第二设备发送的通信信息后,与所述第二设备进行通信,所述通信信息为所述第二设备在接收到所述响应消息后发送给所述第一设备的;
    其中,所述公钥衍生值为:静态的或动态变化的值;所述第二设备的公钥衍生值为基于所述第二设备的公钥生成的哈希值,或,所述第二设备的公钥结合约定的明文信息生成的哈希值,或,所述第二设备的公钥的截 断值,或,基于所述第二设备的公钥生成的哈希值的截断值。
  4. 一种设备之间发现的装置,所述装置为第二设备,其特征在于,包括:
    第一接收单元,用于接收第一设备在获取所述第二设备的公钥,根据所述公钥生成所述第二设备的公钥衍生值后发送的所述第二设备的公钥衍生值;验证单元,用于验证接收到的所述第二设备的公钥衍生值是否正确;第一发送单元,用于在所述验证单元验证接收到的所述第二设备的公钥衍生值正确后向所述第一设备发送响应消息;所述第一接收单元还用于接收所述第一设备在接收到所述第二设备发送的响应消息后发送给所述第二设备的通信信息,与所述第一设备进行通信;或,
    第二发送单元,用于发送所述第二设备的公钥衍生值至第一设备,以使所述第一设备在获取所述第二设备的公钥,根据所述公钥生成所述第二设备的公钥衍生值后,验证接收到的所述第二设备的公钥衍生值是否正确;第二接收单元,用于接收所述第一设备在验证所述接收到的所述第二设备的公钥衍生值正确后,向所述第二设备发送的响应消息;所述第二发送单元还用于在所述第二接收单元接收到所述响应消息后发送通信信息给所述第一设备,与所述第一设备进行通信;
    其中,所述公钥衍生值为:静态的或动态变化的值;所述第二设备的公钥衍生值为基于所述第二设备的公钥生成的哈希值,或,所述第二设备的公钥结合约定的明文信息生成的哈希值,或,所述第二设备的公钥的截断值,或,基于所述第二设备的公钥生成的哈希值的截断值。
  5. 一种设备之间发现的方法,其特征在于,包括:
    第一设备发送服务查询请求消息至第二设备,所述服务查询请求消息包含所述第一设备要查询的服务信息,以使得所述第二设备根据所述服务信息确定是否响应所述服务查询请求消息;
    所述第一设备接收服务查询响应消息,所述服务查询响应消息为所述 第二设备确定响应所述服务查询请求消息后发送的;
    所述第一设备接收所述第二设备发送的所述第二设备的公钥衍生值;
    所述第一设备获取匹配公钥信息;
    所述第一设备在接收到所述服务查询响应消息且验证所述匹配公钥信息与所述第二设备的公钥衍生值匹配后,向所述第二设备发送通信信息与所述第二设备通信。
  6. 如权5所述的方法,其特征在于,所述第二设备发送的所述第二设备的公钥衍生值具体携带在所述服务查询响应消息中。
  7. 如权5所述的方法,其特征在于,所述第一设备具体在接收到所述第二设备发送的所述第二设备的公钥衍生值且验证所述匹配公钥信息与所述第二设备的公钥衍生值匹配后,发送所述服务查询请求消息至第二设备。
  8. 如权5-7任一所述的方法,其特征在于,所述公钥衍生值为:静态的或动态变化的值;
    所述第二设备的公钥衍生值为基于所述第二设备的公钥生成的哈希值,或,所述第二设备的公钥结合约定的明文信息生成的哈希值,或,所述第二设备的公钥的截断值,或,基于所述第二设备的公钥生成的哈希值的截断值。
  9. 一种设备之间发现的方法,其特征在于,包括:
    第一设备发送服务查询请求消息至第二设备,所述服务查询请求消息包含所述第一设备要查询的服务信息,以使得所述第二设备根据所述服务信息确定是否响应所述服务查询请求消息;
    所述第一设备接收服务查询响应消息,所述服务查询响应消息为所述第二设备确定响应所述服务查询请求消息后发送的;
    所述第一设备发送所述第二设备的公钥衍生值至第二设备,以使所述第二设备对接收到的所述第二设备的公钥衍生值进行验证;
    所述第一设备在接收到所述服务查询响应消息且所述第二设备的公钥衍生值被验证通过后,向所述第二设备发送通信信息与所述第二设备进行通信。
  10. 如权9所述的方法,其特征在于,所述第一设备发送的所述第二设备的公钥衍生值具体携带在所述服务查询请求消息中。
  11. 如权9所述的方法,其特征在于,所述第一设备具体在发送所述第二设备的公钥衍生值至第二设备且所述第二设备的公钥衍生值被验证通过后,发送服务查询请求消息至第二设备。
  12. 一种设备之间发现的方法,其特征在于,包括:
    第一设备接收第二设备发送的所述第二设备的公钥衍生值;
    所述第一设备获取匹配公钥信息;
    所述第一设备接收所述第二设备发送的服务查询请求消息,所述服务查询请求消息包含所述第二设备可提供的服务信息;
    所述第一设备在验证所述匹配公钥信息与所述第二设备的公钥衍生值匹配,且所述第一设备要查询的服务与所述第二设备可提供的服务信息匹配后,向所述第二设备发送通信信息与所述第二设备通信。
  13. 如权12所述的方法,其特征在于,所述第二设备发送的所述第二设备的公钥衍生值具体携带在所述第二设备发送的服务查询请求消息中。
  14. 一种设备之间发现的装置,所述装置为第一设备,其特征在于,包括:
    发送单元,用于发送服务查询请求消息至第二设备,所述服务查询请求消息包含所述第一设备要查询的服务信息,以使得所述第二设备根据所述服务信息确定是否响应所述服务查询请求消息;
    接收单元,用于接收服务查询响应消息,所述服务查询响应消息为所述第二设备确定响应所述服务查询请求消息后发送的;
    所述接收单元还用于接收所述第二设备发送的所述第二设备的公钥衍生值;
    获取单元,用于获取匹配公钥信息;
    所述发送单元还用于在所述接收单元接收到所述服务查询响应消息,且所述第一设备验证所述匹配公钥信息与所述第二设备的公钥衍生值匹配后,向所述第二设备发送通信信息与所述第二设备通信。
  15. 一种设备之间发现的装置,所述装置为第一设备,其特征在于,包括:
    发送单元,用于发送服务查询请求消息至第二设备,所述服务查询请求消息包含所述第一设备要查询的服务信息,以使得所述第二设备根据所述服务信息确定是否响应所述服务查询请求消息;
    接收单元,用于接收服务查询响应消息,所述服务查询响应消息为所述第二设备确定响应所述服务查询请求消息后发送的;
    所述发送单元还用于发送所述第二设备的公钥衍生值至第二设备,以使所述第二设备对接收到的所述第二设备的公钥衍生值进行验证;
    所述发送单元还用于在所述接收单元接收到所述服务查询响应消息且所述第二设备的公钥衍生值被验证通过后,向所述第二设备发送通信信息与所述第二设备进行通信。
  16. 一种设备之间发现的装置,所述装置为第一设备,其特征在于,包括:
    接收单元,用于接收第二设备发送的所述第二设备公钥衍生值;
    获取单元,用于获取匹配公钥信息;
    所述接收单元还用于接收所述第二设备发送的服务查询请求消息,所述服务查询请求消息包含所述第二设备可提供的服务信息;
    发送单元,用于在所述第一设备验证所述匹配公钥信息所述公钥衍生 值匹配,且所述第一设备要查询的服务与所述第二设备可提供的服务信息匹配后,向所述第二设备发送通信信息与所述第二设备通信。
  17. 一种设备之间发现的方法,其特征在于,包括:
    第二设备接收第一设备发送的服务查询请求消息,所述服务查询请求消息包含所述第一设备要查询的服务信息,以使得所述第二设备根据所述服务信息确定是否响应所述服务查询请求消息;
    所述第二设备在确定响应所述服务查询请求消息后向所述第一设备发送服务查询响应消息;
    所述第二设备向所述第一设备发送所述第二设备的公钥衍生值,以使所述第一设备在获取匹配公钥信息后,验证所述匹配公钥信息与所述第二设备的公钥衍生值是否匹配;
    所述第二设备接收到所述第一设备发送的通信信息后与所述第二设备通信,所述通信信息为所述第一设备在接收到所述服务查询响应消息且验证所述匹配公钥信息与所述第二设备的公钥衍生值匹配后,向所述第二设备发送的。
  18. 一种设备之间发现的方法,其特征在于,包括:
    第二设备接收第一设备发送的服务查询请求消息,所述服务查询请求消息包含所述第一设备要查询的服务信息;
    所述第二设备根据所述服务信息确定响应所述服务查询请求消息后,向所述第一设备发送服务查询响应消息;
    所述第二设备接收所述第一设备发送的所述第二设备的公钥衍生值;
    所述第二设备对接收到的所述第二设备的公钥衍生值进行验证;
    所述第二设备接收所述第一设备在接收到所述服务查询响应消息且所述第二设备的公钥衍生值被验证通过后,向所述第二设备发送的通信信息,与所述第一设备进行通信。
  19. 一种设备之间发现的方法,其特征在于,包括:
    第二设备发送所述第二设备的公钥衍生值至第一设备,以使所述第一设备获取匹配公钥信息并验证所述匹配公钥信息与所述第二设备的公钥衍生值是否匹配;
    所述第二设备发送服务查询请求消息至所述第一设备,所述服务查询请求消息包含所述第二设备可提供的服务信息;
    所述第二设备接收所述第一设备在验证所述匹配公钥信息与所述第二设备的公钥衍生值匹配,且所述第一设备要查询的服务与所述第二设备可提供的服务信息匹配后,向所述第二设备发送的通信信息,与所述第一设备通信。
  20. 一种设备之间发现的装置,所述装置为第二设备,其特征在于,包括:
    接收单元,用于接收第一设备发送的服务查询请求消息,所述服务查询请求消息包含所述第一设备要查询的服务信息,以使得所述第二设备根据所述服务信息确定是否响应所述服务查询请求消息;
    发送单元,用于所述第二设备在确定响应所述服务查询请求消息后向所述第一设备发送服务查询响应消息;
    所述发送单元还用于向所述第一设备发送所述第二设备的公钥衍生值,以使所述第一设备在获取匹配公钥信息后,验证所述匹配公钥信息与所述第二设备的公钥衍生值是否匹配;
    所述接收单元还用于在接收到所述第一设备发送的通信信息后与所述第二设备通信,所述通信信息为所述第一设备在接收到所述服务查询响应消息且验证所述匹配公钥信息与所述第二设备的公钥衍生值匹配后,向所述第二设备发送的。
  21. 一种设备之间发现的装置,所述装置为第二设备,其特征在于,包括:
    接收单元,用于接收第一设备发送的服务查询请求消息,所述服务查询请求消息包含所述第一设备要查询的服务信息;
    发送单元,用于所述第二设备根据所述服务信息确定响应所述服务查询请求消息后,向所述第一设备发送服务查询响应消息;
    所述接收单元还用于接收所述第一设备发送的所述第二设备的公钥衍生值;
    验证单元,用于对接收到的所述第二设备的公钥衍生值进行验证;
    所述接收单元还用于接收所述第一设备在接收到所述服务查询响应消息且所述第二设备的公钥衍生值被验证通过后,向所述第二设备发送的通信信息,与所述第一设备进行通信。
  22. 一种设备之间发现的装置,所述装置为第二设备,其特征在于,包括:
    发送单元,用于发送所述第二设备的公钥衍生值至第一设备,以使所述第一设备获取匹配公钥信息并验证所述匹配公钥信息与所述第二设备的公钥衍生值是否匹配;
    所述发送单元还用于发送服务查询请求消息至所述第一设备,所述服务查询请求消息包含所述第二设备可提供的服务信息;
    接收单元,用于接收所述第一设备在验证所述匹配公钥信息与所述第二设备的公钥衍生值匹配,且所述第一设备要查询的服务与所述第二设备可提供的服务信息匹配后,向所述第二设备发送的通信信息,与所述第一设备通信。
PCT/CN2015/079506 2014-10-31 2015-05-21 设备之间发现的方法及装置 WO2016065892A1 (zh)

Priority Applications (4)

Application Number Priority Date Filing Date Title
EP15854223.3A EP3203766A4 (en) 2014-10-31 2015-05-21 Discovery method and apparatus between devices
CN201580059601.2A CN107079288A (zh) 2014-10-31 2015-05-21 设备之间发现的方法及装置
JP2017523359A JP2017533660A (ja) 2014-10-31 2015-05-21 デバイス間発見方法および装置
US15/582,401 US20170238164A1 (en) 2014-10-31 2017-04-28 Inter-device discovery method and apparatus

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201410616545.5A CN105636166A (zh) 2014-10-31 2014-10-31 设备之间发现的方法及装置
CN201410616545.5 2014-10-31

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US15/582,401 Continuation US20170238164A1 (en) 2014-10-31 2017-04-28 Inter-device discovery method and apparatus

Publications (1)

Publication Number Publication Date
WO2016065892A1 true WO2016065892A1 (zh) 2016-05-06

Family

ID=55856522

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2015/079506 WO2016065892A1 (zh) 2014-10-31 2015-05-21 设备之间发现的方法及装置

Country Status (5)

Country Link
US (1) US20170238164A1 (zh)
EP (1) EP3203766A4 (zh)
JP (1) JP2017533660A (zh)
CN (2) CN105636166A (zh)
WO (1) WO2016065892A1 (zh)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20220279323A1 (en) * 2020-09-29 2022-09-01 Lg Electronics Inc. Method and apparatus for acquiring information of chip device using gas in wireless lan system in smart home environment
US20230393762A1 (en) * 2022-06-02 2023-12-07 Micron Technology, Inc. Verified key replacement in secure memory devices

Families Citing this family (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2017006135A1 (en) 2015-07-08 2017-01-12 Barclays Bank Plc Data validation and storage
JP6827773B2 (ja) * 2016-01-18 2021-02-10 キヤノン株式会社 通信装置、通信方法及びプログラム
JP6746427B2 (ja) * 2016-08-10 2020-08-26 キヤノン株式会社 通信装置、通信方法、及びプログラム
JP6702833B2 (ja) * 2016-09-15 2020-06-03 キヤノン株式会社 通信装置、通信装置の制御及びプログラム
US10547448B2 (en) 2016-10-19 2020-01-28 Qualcomm Incorporated Configurator key package for device provisioning protocol (DPP)
CN109906639A (zh) * 2016-11-03 2019-06-18 交互数字专利控股公司 用于唤醒无线电的有效功率节省的方法
JP7054341B2 (ja) * 2017-12-22 2022-04-13 キヤノン株式会社 通信装置およびその制御方法
KR102530441B1 (ko) * 2018-01-29 2023-05-09 삼성전자주식회사 전자 장치와 외부 전자 장치 및 이를 포함하는 시스템
JP7262949B2 (ja) * 2018-09-11 2023-04-24 キヤノン株式会社 通信装置、通信方法及びプログラム
CN109462875B (zh) * 2019-01-16 2020-10-27 展讯通信(上海)有限公司 无线漫游方法、接入点装置以及移动台

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101053210A (zh) * 2004-09-15 2007-10-10 诺基亚有限公司 有助于网络系统中的快速转换的设备和相关方法
US20090147698A1 (en) * 2007-12-06 2009-06-11 Telefonaktiebolaget Lm Ericsson (Publ) Network automatic discovery method and system
CN101741917A (zh) * 2008-11-14 2010-06-16 复旦大学 一种在无线自组织网络中自适应的服务发现方法
CN101739525A (zh) * 2009-11-30 2010-06-16 北京飞天诚信科技有限公司 安全校验的方法、编译装置、.net卡和系统

Family Cites Families (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2004302934A (ja) * 2003-03-31 2004-10-28 Akira Ikuta サービス提供支援システム
JP4329388B2 (ja) * 2003-04-22 2009-09-09 ソニー株式会社 データ通信システム、データ通信装置及びデータ通信方法、並びにコンピュータ・プログラム
JP4823704B2 (ja) * 2006-02-01 2011-11-24 Kddi株式会社 認証システムおよび同システムにおける認証情報委譲方法ならびにセキュリティデバイス
WO2013138636A2 (en) * 2012-03-14 2013-09-19 Marvell World Trade Ltd. Key centric identity
CN103891355B (zh) * 2012-07-06 2018-07-13 华为技术有限公司 一种服务注册与发现的方法,设备和系统
CN103874047B (zh) * 2012-12-17 2017-08-04 华为终端有限公司 服务信息发现方法及设备
US8837328B2 (en) * 2013-01-23 2014-09-16 Qualcomm Incorporated Systems and methods for pre-association discovery of services on a network

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101053210A (zh) * 2004-09-15 2007-10-10 诺基亚有限公司 有助于网络系统中的快速转换的设备和相关方法
US20090147698A1 (en) * 2007-12-06 2009-06-11 Telefonaktiebolaget Lm Ericsson (Publ) Network automatic discovery method and system
CN101741917A (zh) * 2008-11-14 2010-06-16 复旦大学 一种在无线自组织网络中自适应的服务发现方法
CN101739525A (zh) * 2009-11-30 2010-06-16 北京飞天诚信科技有限公司 安全校验的方法、编译装置、.net卡和系统

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP3203766A4 *

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20220279323A1 (en) * 2020-09-29 2022-09-01 Lg Electronics Inc. Method and apparatus for acquiring information of chip device using gas in wireless lan system in smart home environment
US20230393762A1 (en) * 2022-06-02 2023-12-07 Micron Technology, Inc. Verified key replacement in secure memory devices

Also Published As

Publication number Publication date
CN107079288A (zh) 2017-08-18
EP3203766A4 (en) 2017-11-15
CN105636166A (zh) 2016-06-01
US20170238164A1 (en) 2017-08-17
JP2017533660A (ja) 2017-11-09
EP3203766A1 (en) 2017-08-09

Similar Documents

Publication Publication Date Title
WO2016065892A1 (zh) 设备之间发现的方法及装置
US10278055B2 (en) System and method for pre-association discovery
EP2979401B1 (en) System and method for indicating a service set identifier
US11824892B2 (en) Terminal matching method and apparatus
EP2919527B1 (en) Device association methods and systems
US9973925B2 (en) Method and apparatus for direct communication key establishment
EP3082354B1 (en) Location privacy protection methods and devices
US9161215B2 (en) Wireless device, registration server and method for provisioning of wireless devices
KR102062162B1 (ko) 보안 인증 방법, 구성 방법 및 관련 기기
US9986431B2 (en) Method and apparatus for direct communication key establishment
EP2950499B1 (en) 802.1x access session keepalive method, device, and system
CN108702626B (zh) 无线广域网(wwan)无线局域网(wlan)聚合保全
US20160242033A1 (en) Communication service using method and electronic device supporting the same
US20180069726A1 (en) Communication device, communication method, communication system, and computer program product
US9807088B2 (en) Method and network node for obtaining a permanent identity of an authenticating wireless device
US20110055409A1 (en) Method For Network Connection
KR20150051568A (ko) 이동 통신 시스템 환경에서 프락시미티 기반 서비스 단말 간 발견 및 통신을 지원하기 위한 보안 방안 및 시스템
US20170099289A1 (en) Temporary Mac Address-Based Access Method, Apparatus, and System
US10601824B2 (en) Provision of access to a network
JP5721183B2 (ja) 無線lan通信システム、無線lan親機、通信接続確立方法、及びプログラム
CN105848146B (zh) 一种wifi自动连接的方法、装置及系统

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 15854223

Country of ref document: EP

Kind code of ref document: A1

ENP Entry into the national phase

Ref document number: 2017523359

Country of ref document: JP

Kind code of ref document: A

NENP Non-entry into the national phase

Ref country code: DE

REEP Request for entry into the european phase

Ref document number: 2015854223

Country of ref document: EP