WO2017063517A1

WO2017063517A1 - Near field communication establishing method and device

Info

Publication number: WO2017063517A1
Application number: PCT/CN2016/101445
Authority: WO
Inventors: 徐俊
Original assignee: 阿里巴巴集团控股有限公司
Priority date: 2015-10-12
Filing date: 2016-10-08
Publication date: 2017-04-20
Also published as: CN106572427B; CN106572427A

Abstract

Provided in the present invention are a near field communication establishing method and device. The method comprises: after a near field communication connection is established between a first communication device and a second communication device, if the first communication device does not receive authentication information of the second communication device in a predetermined time period or the authentication information is received but the authentication fails, the near field communication connection is disconnected. The present invention can improve the security of the near field communication.

Description

Method and device for establishing short-distance communication

The present application claims priority to Chinese Patent Application No. 20151065743, the entire disclosure of which is incorporated herein by reference.

Technical field

The present invention relates to the field of network communication technologies, and in particular, to a method and an apparatus for establishing short-range communication.

Background technique

With the rise and popularity of wearable devices, devices such as sports bracelets, smart glasses, and smart blood pressure monitors have gradually entered people's lives. Most of these wearable devices use Bluetooth, infrared, Zigbee and other close-range communication to establish a connection with the mobile phone, and interact with the mobile phone for data or control commands.

In the prior art, when the wearable device establishes a short-distance communication connection with the mobile phone, the mobile phone usually starts scanning and manually pairs, and establishes a connection with the wearable device. Taking Bluetooth as an example, the mobile phone turns on Bluetooth scanning. If scanning to multiple nearby Bluetooth devices, manually select one of the Bluetooth devices to pair to establish a Bluetooth connection. However, this method can cause the wearable device to be scanned by any nearby mobile phone and establish a connection for short-distance communication, thereby obtaining data and having poor security.

Summary of the invention

In view of this, the present invention provides a method and apparatus for establishing short-range communication, so as to improve the security of communication.

The specific technical solutions are as follows:

The invention provides a method for establishing short-range communication, the method comprising:

After establishing a short-range communication connection between the first communication device and the second communication device, if the first communication device does not receive the authentication information of the second communication device within a preset time period, or receives the second If the authentication information of the communication device fails but the authentication fails, the short-range communication connection is disconnected.

According to a preferred embodiment of the present invention, the method further includes:

And if the first communication device receives the authentication information of the second communication device within the set duration and the authentication is successful, saving a binding relationship with the second communication device, and transmitting the second communication The device returns information indicating that the authentication is successful.

According to a preferred embodiment of the present invention, after establishing a short-range communication connection between the first communication device and the second communication device, the method further includes:

The first communication device receives the identification information of the second communication device, determines whether the first communication device stores a binding relationship, and if not, sends unbound information to the second communication device, and Waiting to receive the authentication information of the second communication device within the preset duration.

According to a preferred embodiment of the present invention, if it is determined that the first communication device holds a binding relationship, it is further determined whether the binding relationship is a binding relationship with the second communication device, and if yes, Data communication over the short-range communication connection; if not, disconnecting the near-field communication connection.

According to a preferred embodiment of the present invention, the authentication information includes: plaintext information and ciphertext information obtained by encrypting the plaintext information;

When the first communication device authenticates the authentication information, the ciphertext information is decrypted, and the plaintext information obtained by the decryption is compared with the plaintext information carried in the authentication information. If the information is consistent, the authentication is passed. Otherwise the authentication fails.

According to a preferred embodiment of the present invention, the plaintext information includes a random number, or includes a random number and identification information of the second communication device.

According to a preferred embodiment of the present invention, the method used for the encryption and the decryption comprises: a symmetric encryption algorithm or an asymmetric encryption algorithm;

When the asymmetric encryption algorithm is employed, the authentication information further includes public key information.

According to a preferred embodiment of the present invention, the authentication information includes: identification information of the second communication device;

When the first communication device authenticates the authentication information, it is determined whether the first communication device stores a binding relationship, and if not, the authentication passes; if yes, further determines whether the binding relationship is The binding relationship with the second communication device, if not, the authentication fails.

Deleting the saved binding between the first communication device and the second communication device if the first communication device receives the reset instruction or receives the unbinding request sent by the second communication device Relationship.

The first communication device displays an information code including connection information of the first communication device, so that the second communication device scans and utilizes the obtained connection information of the first communication device to establish the short-range communication connection.

After receiving the scan information of the second communication device, the first communication device sends the scan information to the second communication device And sending scan response information including connection information of the first communication device, so that the second communication device establishes the short-range communication connection by using connection information of the first communication device.

According to a preferred embodiment of the present invention, the short-range communication connection comprises: a Bluetooth connection, an infrared connection, or a Zigbee.

The present invention also provides a method for establishing short-range communication, the method further comprising:

After the second communication device establishes a short-range communication connection with the first communication device, the second communication device sends the authentication information of the second communication device to the first communication device within a preset time period.

After receiving the information that the first communication device returns the authentication success, the second communication device saves the binding relationship with the first communication device.

The second communication device sends the binding relationship with the first communication device to the server for saving.

According to a preferred embodiment of the present invention, after the second communication device establishes a short-range communication connection with the first communication device, the method further includes: the second communication device identifying the second communication device Sending information to the first communication device;

And if the unbound information sent by the first communications device is received, performing the sending the authentication information of the second communications device to the first communications device.

According to a preferred embodiment of the present invention, the authentication information includes: plaintext information and ciphertext information obtained by encrypting the plaintext information.

According to a preferred embodiment of the present invention, the method used for the encryption includes: a symmetric encryption algorithm or an asymmetric encryption algorithm;

According to a preferred embodiment of the present invention, the authentication information includes: identification information of the second communication device.

According to a preferred embodiment of the present invention, if the second communication device receives the reset instruction, deleting the binding relationship with the first communication device saved by the second communication device, and transmitting the first communication The device sends an unbind request.

The second communication device scans an information code provided by the first communication device;

The short-range communication connection is established using connection information of the first communication device parsed from the information code.

The second communication device performs a short-range communication scan;

Obtaining connection information of the first communication device from the received scan response information;

The proximity communication connection is established using connection information of the first communication device.

According to a preferred embodiment of the present invention, the second communication device establishes the short-range communication connection by using a locally saved binding relationship with the first communication device.

The present invention also provides a device for establishing a short-range communication, the device being disposed on the first communication device, the device comprising:

a receiving unit, configured to receive authentication information of the second communications device;

An authentication unit, configured to authenticate the authentication information received by the receiving unit;

a first determining unit, configured to determine, after the first communication device establishes a short-range communication connection between the first communication device and the second communication device, whether the receiving unit does not receive the second communication device within a preset duration Authentication information, or receiving the authentication information of the second communication device but the authentication fails;

And a control unit, configured to disconnect the short-range communication connection when the determination result of the first determining unit is YES.

According to a preferred embodiment of the present invention, the device further comprises:

a binding unit, configured to: when the first determining unit determines that the first communications device receives the authentication information of the second communications device within a set duration, and the authentication succeeds, saving the second communications device Binding relationship between;

a sending unit, configured to: when the first determining unit determines that the first communications device receives the authentication information of the second communications device within a set duration, and the authentication succeeds, sending the authentication to the second communications device Successful information.

According to a preferred embodiment of the present invention, the apparatus further includes a second determining unit;

The receiving unit is further configured to receive the identifier information of the second communications device, and if the determining result of the second determining unit is no, wait for receiving the authentication of the second communications device within the preset duration information;

The second determining unit is configured to determine, when the receiving unit receives the identifier information of the second communications device, whether the binding unit saves a binding relationship;

The sending unit is further configured to send unbound information to the second communications device if the determining result of the second determining unit is no.

a third determining unit, configured to determine, when the determination result of the second determining unit is YES, whether the binding relationship saved by the binding unit is a binding relationship with the second communication device;

The control unit is further configured to allow data communication on the short-range communication connection when the determination result of the third determining unit is YES; otherwise, disconnect the short-range communication connection.

The authentication unit, when authenticating the authentication information, is specifically configured to: decrypt the ciphertext information, and compare whether the plaintext information obtained by the decryption is consistent with the plaintext information carried in the authentication information, and if they are consistent, the authentication is performed. Passed, otherwise the authentication failed.

According to a preferred embodiment of the present invention, the decryption method adopted by the authentication unit includes a symmetric encryption algorithm or an asymmetric encryption algorithm;

When the authentication unit authenticates the authentication information, it is determined whether the first communication device stores a binding relationship, and if not, the authentication passes; if yes, further determines whether the binding relationship is The binding relationship of the second communication device is described. If not, the authentication fails.

According to a preferred embodiment of the present invention, the apparatus further includes: a debinding unit configured to receive the reset instruction, or the receiving unit, when receiving the unbinding request sent by the second communication device, deleting the a binding relationship between the first communication device and the second communication device.

And a connection establishing unit, configured to display an information code including connection information of the first communication device, so that the second communication device scans and uses the obtained connection information of the first communication device to establish the short-range communication connection.

a connection establishing unit, configured to send scan response information including connection information of the first communication device to the second communication device, after receiving the scan information of the second communication device, so that the second communication device utilizes the The connection information of the first communication device establishes the short-range communication connection.

According to a preferred embodiment of the present invention, the short-range communication connection comprises: a Bluetooth connection, an infrared connection, or Zigbee.

The present invention also provides a device for establishing a short-range communication, the device being disposed in the second communication device, the device comprising:

And a sending unit, configured to send the authentication information of the second communications device to the first communications device after establishing a short-range communication connection between the second communications device and the first communications device.

a receiving unit, configured to receive information about successful authentication returned by the first communications device;

And a binding unit, configured to save a binding relationship with the first communications device after the receiving unit receives the information that the first communication device returns the authentication success.

According to a preferred embodiment of the present invention, the sending unit is further configured to send a binding relationship between the second communications device and the first communications device to a server for saving.

According to a preferred embodiment of the present invention, the apparatus further includes a receiving unit;

The sending unit is further configured to send the identifier information of the second communications device to the first communications device after establishing a short-range communication connection between the second communications device and the first communications device; And if the receiving unit receives the unbound information sent by the first communications device, performing the sending the authentication information of the second communications device to the first communications device.

The receiving unit is further configured to receive unbound information sent by the first communications device.

An unbinding unit, configured to delete a binding relationship between the first communications device and the second communications device, and trigger the sending unit to send an unbinding to the first communications device request.

a connection establishing unit, configured to scan an information code provided by the first communication device; and utilize a solution from the information code The obtained connection information of the first communication device is analyzed, and the short-range communication connection is established.

a connection establishing unit, configured to perform a short-range communication scan; acquire connection information of the first communication device from the received scan response information; and establish the short-range communication connection by using connection information of the first communication device.

And a connection establishing unit, configured to establish the short-range communication connection by using a binding relationship with the first communications device that is saved by the binding unit.

It can be seen from the above technical solution that the present invention can disconnect the two communication devices after establishing a short-range communication connection, if one party does not receive the authentication information sent by the other party within the set time or receives the authentication information but the authentication fails, Open the above short-range communication connection. That is to say, only devices that adopt the above authentication mechanism and pass authentication can communicate on the established short-range communication connection, which improves the security of short-range communication.

DRAWINGS

1 is a structural diagram of a system on which an embodiment of the present invention is based;

2 is a flowchart of a main method according to an embodiment of the present invention;

FIG. 3 is a detailed flowchart of a method according to an embodiment of the present invention;

4 is a detailed flowchart of another method according to an embodiment of the present invention;

FIG. 5 is a detailed flowchart of still another method according to an embodiment of the present invention;

FIG. 6 is a structural diagram of a device according to an embodiment of the present invention;

FIG. 7 is a structural diagram of another apparatus according to an embodiment of the present invention.

detailed description

The present invention will be described in detail below with reference to the drawings and specific embodiments.

The system structure diagram on which the present invention is based may be as shown in FIG. 1, and mainly includes a first communication device and a second communication device, and a short-range communication connection may be established between the two, and data is performed on the established short-range communication connection. communication. The short-range communication may be, but not limited to, Bluetooth, infrared, Zigbee, and the like. The first communication device and the second communication device may be terminal devices having a short-range communication function, such as a smart phone, a notebook computer, a tablet Computers, wearables, and more. The wearable device may include, but is not limited to, a smart bracelet, a smart watch, smart glasses, and the like.

FIG. 2 is a flowchart of a main method according to an embodiment of the present invention. As shown in FIG. 2, the method may include the following steps:

In 201, a short-range communication connection is established between the first communication device and the second communication device.

A Bluetooth connection, an infrared connection, a Zigbee connection, or the like can be established between the first communication device and the second communication device.

In 202, the first communications device determines whether the authentication information of the second communications device is not received or the authentication information of the second communications device is received within the preset duration but the authentication fails, and if yes, performs 203; otherwise, performs 204. .

After establishing the short-range communication connection, the second communication device transmits the authentication information to the first communication device within a preset time period. The certification can be adopted but not limited to the following two methods:

The first way: the authentication information may include identification information of the second communication device. When the first communication device performs authentication by using the authentication information, it may be determined whether the first communication device has a binding relationship, and if not, the first communication device is not yet bound to any device, and the authentication may be considered; if yes, Then, it is further determined whether the saved binding relationship is a binding relationship with the second communication device, and if not, determining that the authentication fails; if yes, determining that the authentication is passed.

The second method: the authentication information may include plaintext information and ciphertext information obtained by encrypting the plaintext information. When the authentication is performed by using the authentication information, the first communication device first decrypts the received ciphertext information, and compares whether the plaintext information obtained by the decryption is consistent with the plaintext information carried in the authentication information. If the information is consistent, the authentication passes, otherwise the authentication fails.

In order to ensure the security of the authentication, the above plaintext information may include a random number, such as a timestamp, a randomly generated character string, and the like. Other information, such as identification information of the second communication device, etc., may also be included.

The encryption and decryption methods used by the second communication device and the first communication device may be symmetric encryption algorithms, such as DES (Data Encryption Standard), AES (Advanced Encryption Standard), or the like. Symmetric algorithms, such as RSA. Taking the asymmetric algorithm as an example, the second communication device generates a key pair: the public key and the private key of the second communication device; and then encrypts the above plaintext information by using the public key and the private key of the second communication device, and The ciphertext information is sent to the first communication device together with the plaintext information and the public key. The first communication device decrypts the ciphertext information by using the received public key and the private key of the first communication device, and compares the obtained plaintext information with the received plaintext information. If the information is consistent, the authentication passes, otherwise the authentication fails. .

The set duration of the embodiment may be set according to specific requirements, for example, may be set to 1 minute.

In 203, the first communication device disconnects the proximity communication established with the second communication device, ending the flow.

The embodiment of the present invention does not change the process of establishing the short-range communication, but performs the above-mentioned authentication process at the application layer, and if the authentication fails, disconnects the established short-range communication connection.

In 204, the first communication device saves the binding relationship with the second communication device, and returns information indicating successful authentication to the second communication device, where the first communication device and the second communication device may be connected to the established short-range communication connection. Data communication.

If the authentication is successful, the connection between the first communication device and the second communication device is a secure connection, and data communication is possible.

The method is described in detail below by taking the first communication device as a wearable device and the second communication device as a smart phone, and establishing a Bluetooth connection between the two.

FIG. 3 is a detailed flowchart of a method according to an embodiment of the present invention. The process is an embodiment in which a smart phone and a wearable device are not bound (for example, a smart phone is connected to a wearable device for the first time), as shown in FIG. 3 . As shown, the method can include the following steps:

In 301, after the wearable device turns on the Bluetooth function, it waits for the smart phone to initiate a Bluetooth scan.

In addition, after the Bluetooth device is enabled, the wearable device can continuously broadcast its own Bluetooth connection information, which can include a Bluetooth MAC address, a sign waiting to be connected, and an unbound flag of the device.

In 302, the smartphone turns on Bluetooth scanning and sends Bluetooth scan information to the wearable device.

In 303, after acquiring the Bluetooth scan information, the wearable device returns a Bluetooth scan response message to the smart phone, where the Bluetooth scan response information includes connection information of the wearable device, where the connection information of the wearable device may include the wearable device. Bluetooth MAC address. In addition to this, it may also include waiting for a connection flag, a device unbound flag, and the like. The information contained in the Bluetooth scan response message may be in a specific format and may be encrypted information or non-encrypted information.

The connection information of the wearable device carried in the Bluetooth scan response message may be the same as or different from the connection information broadcasted by the wearable device after the Bluetooth function is turned on. For the smartphone, the connection information of the two received wearable devices can be integrated.

At 304, the smartphone transmits the Bluetooth connection request to the wearable device using the acquired connection information of the wearable device.

In this step, if the smart phone obtains the connection information of the plurality of wearable devices, the smart phone may provide the user with the user to select which one is the target device to be connected. Or the smartphone can broadcast information based on the wearable device Or the device is not bound in the Bluetooth scan response message, and the unbound wearable device is selected to send a Bluetooth connection request, that is, the bound wearable device is filtered out.

The connection information of the smart phone can be carried in the sent Bluetooth connection request, and the connection information can adopt the Bluetooth MAC address of the smart phone.

After the wearable device receives the Bluetooth connection request, the Bluetooth connection is successfully established, and a response to successful connection establishment (not shown) can be returned. The above process is a Bluetooth connection establishment process for smartphones and wearable devices.

In 305, after establishing a Bluetooth connection with the wearable device, the smart phone sends the identification information of the smart phone to the wearable device.

The identification information of the smart phone may be, but not limited to, the MAC address of the smart phone, the serial number of the smart phone, the IMEI of the smart phone (International Mobile Equipment Identity), the UDID of the smart phone (the unique device identification) The user account information (the account information used by the user to log in to the APP, the APP can be run in a smartphone to execute the method flow provided by the present invention) and the like.

In 306, the wearable device determines whether the binding relationship has been stored locally. If not, the smart phone is not authenticated, so unbound information can be returned to the smartphone. The case where the binding relationship has been saved will be described in the embodiment shown in FIG.

In 307, after receiving the unbound information, the smartphone sends the authentication information to the wearable device.

For the first binding of the smart phone and the wearable device, the smart phone can carry its own identification information in the authentication information and send it to the wearable device. That is, it corresponds to the first authentication method described above.

The second authentication method may also be adopted, that is, the smart phone and the wearable device may pre-agreed the encryption and decryption method, and the smart phone may encrypt the identification information and the time stamp of the smart phone by using the public key and the private key thereof, and encrypt the obtained information. The ciphertext information, the identification information of the smart phone, and the plaintext information composed of the time stamp and the public key are sent to the wearable device. This method is only an example of using asymmetric encryption, or it can use symmetric encryption or other information.

In 308, the wearable device determines whether the authentication information is received within the set time, and if the authentication information is received within the set time, executes 309. If the authentication information is not received within the set time, execute 310.

In 309, the wearable device disconnects the Bluetooth connection established with the smartphone.

In 310, the wearable device authenticates the received authentication information, and if the authentication passes, the binding relationship with the smart phone is saved locally, and the information that the authentication succeeds is returned to the smart phone.

When saving the binding relationship with the smartphone, the identification information of the smartphone can be saved locally.

In 311, after receiving the information that the authentication succeeds, the smart phone saves the binding relationship with the wearable device.

The binding relationship saved on the smartphone may include connection information of the wearable device, and may also include identification information of the wearable device.

Further, the smart phone can also send the saved binding relationship with the wearable device to the server for saving, thereby performing subsequent backup or other services.

4 is a detailed flowchart of another method according to an embodiment of the present invention. The process is an embodiment in which a smart phone and a wearable device are not bound (for example, a first connection between a smart phone and a wearable device), and the implementation is implemented. The difference between the example and the embodiment shown in FIG. 3 is that the manner in which the smart phone establishes a Bluetooth connection with the wearable device is different. As shown in Figure 4, the method can include the following steps:

In 401, after the wearable device turns on the Bluetooth function, the two-dimensional code including the connection information of the wearable device is provided.

This step is applicable to a wearable device with a display device. The wearable device can display a QR code containing its own connection information on the screen for scanning by the mobile device. The connection information of the wearable device may include a Bluetooth MAC address of the wearable device.

In addition, in addition to the two-dimensional code, other information code forms such as a barcode may be employed.

In 402, the smartphone scans the two-dimensional code and parses the connection information of the wearable device.

In 403, the smartphone transmits a Bluetooth connection request to the wearable device using the connection information of the wearable device.

The subsequent steps 404-410 are consistent with the processes 305 to 311 in the process shown in FIG. 3, and are not described again.

FIG. 5 is a detailed flowchart of still another method according to an embodiment of the present invention. The process is an embodiment in which a smart phone is bound to a wearable device. As shown in FIG. 5, the method may include the following steps:

In 501, after the wearable device turns on the Bluetooth function, it waits for the smart phone to initiate a Bluetooth scan.

In 502, the smartphone transmits a Bluetooth connection request to the wearable device using a locally stored binding relationship with the wearable device.

If the smart phone is already bound to the wearable device, the connection information saved by the smart phone locally includes the connection information of the wearable device, and the connection information of the wearable device can be directly used to send the Bluetooth connection request to the wearable device. .

In 503, the wearable device and the smart phone wait for receiving the authentication information of the smart phone within a set time period after establishing a Bluetooth connection with the wearable device.

At 504, the smartphone transmits the identification information of the smartphone to the wearable device.

In 505, the wearable device determines whether there is a binding relationship in the local area. In this embodiment, the binding relationship exists. Therefore, the wearable device further determines, according to the identifier information of the received smart phone, whether the smart phone is connected to the smart phone. Binding, if yes, communication between the wearable device and the smartphone; if not, execution 506.

If the wearable device already has a binding relationship locally, the wearable device is already bound to a certain smart phone. To ensure security, it is necessary to prohibit Bluetooth communication other than the bound smart phone. In this step, the identification information of the received smart phone is actually compared with the locally saved binding relationship. If they are consistent, communication between the wearable device and the smart phone can be performed, otherwise, 506 is performed.

At 506, the wearable device disconnects from the Bluetooth connection with the smartphone.

It should be noted that, in the foregoing embodiments, the identifier information of the smart phone sent by the smart phone to the wearable device may be encrypted information or non-encrypted information.

In the foregoing embodiments, the binding relationship between the smart phone and the wearable device may be released, and may be triggered by the wearable device. For example, when the user manually resets the binding relationship on the wearable device, the wearable device is After receiving the reset command, the binding relationship saved by the wearable device is deleted. It can also be triggered by the smart phone. For example, when the user manually resets the binding relationship on the smart phone, the smart phone receives the reset command, and deletes the binding relationship between the smart phone and the wearable device, and The wearable device sends an unbinding request. After the wearable device receives the unbinding request from the smartphone, the saved binding relationship is released.

The above is a detailed description of the method provided by the present invention, and the apparatus provided by the present invention will be described in detail below.

FIG. 6 is a structural diagram of a device according to an embodiment of the present invention. The device may be configured on the first communications device. As shown in FIG. 6, the device may include: a receiving unit 01, an authentication unit 02, and a first determining unit. 03 and the control unit 04 may further include a binding unit 05, a transmitting unit 06, a second determining unit 07, a third determining unit 08, and a connection establishing unit 09. The main functions of each component are as follows:

The receiving unit 01 is responsible for receiving the authentication information of the second communication device. The authentication unit 02 is responsible for authenticating the authentication information received by the receiving unit.

The authentication information may include the identification information of the second communication device, and the authentication unit 02 determines whether the first communication device stores the binding relationship when authenticating the authentication information, and if not, the authentication passes; if yes, further determines the saving. Whether the binding relationship is a binding relationship with the second communication device, and if not, the authentication fails; if yes, the authentication passes.

Alternatively, the authentication information may include: plaintext information and ciphertext information obtained by encrypting the plaintext information. Correspondingly, when authenticating the authentication information, the authentication unit 02 can decrypt the ciphertext information, and compare whether the plaintext information obtained by the decryption is consistent with the plaintext information carried in the authentication information. If the authentication is consistent, the authentication is passed, otherwise the authentication fails.

In order to ensure the security of the authentication process, the above plaintext information may include a random number, or include a random number and a Identification information of the second communication device. The decryption method adopted by the authentication unit 02 may be a symmetric encryption algorithm, such as DES, AES, or the like, or an asymmetric encryption algorithm, such as RSA. Taking the asymmetric algorithm as an example, the second communication device generates a key pair: the public key and the private key of the second communication device; and then encrypts the above plaintext information by using the public key and the private key of the second communication device, and The ciphertext information is sent to the first communication device together with the plaintext information and the public key. The first communication device decrypts the ciphertext information by using the received public key and the private key of the first communication device, and compares the obtained plaintext information with the received plaintext information. If the information is consistent, the authentication passes, otherwise the authentication fails. .

The first determining unit 03 is responsible for determining whether the receiving unit 01 does not receive the authentication information of the second communication device within the preset time period after establishing the short-range communication connection between the first communication device and the second communication device, or receives the first The authentication information of the second communication device but the authentication fails.

When the determination result of the first judging unit 03 is YES, the control unit 04 can disconnect the short-range communication connection. When the first determining unit 03 determines that the first communication device receives the authentication information of the second communication device within the set duration and the authentication is successful, the binding unit 05 may save the binding relationship with the second communication device, and The transmitting unit 06 transmits information indicating that the authentication is successful to the second communication device. The binding relationship may include the identifier information of the second communication device.

Further, the receiving unit 01 may receive the identification information of the second communication device; when the receiving unit 01 receives the identification information of the second communication device, the second determining unit 07 determines whether the binding unit 05 holds the binding relationship. If the determination result of the second judging unit 07 is NO, the receiving unit 01 waits to receive the authentication information of the second communication device within the preset time period; and the transmitting unit 06 transmits the unbound information to the second communication device.

When the determination result of the second judging unit 07 is YES, the third judging unit 08 judges whether the binding relationship held by the binding unit 05 is a binding relationship with the second communication device, and if so, the control unit 04 allows the above. Data communication on the short-range communication connection; otherwise, disconnect the above-mentioned short-range communication connection.

In addition, the apparatus may further include an unbinding unit (not shown), the unbinding unit is responsible for receiving the reset instruction (eg, the user manually resets the binding relationship on the first communication device), or the receiving unit 01 When the unbinding request sent by the second communication device is received, the binding relationship between the saved first communication device and the second communication device is deleted.

The connection establishing unit 09 is primarily responsible for establishing the above-described close-range communication connection between the first communication device and the second communication device. It can be used but not limited to the following two ways:

The first mode: the connection establishing unit 09 displays an information code containing the connection information of the first communication device, so that the second communication device scans and uses the obtained connection information of the first communication device to establish a short-range communication connection.

The second mode: after receiving the scan information of the second communication device, the connection establishing unit 09 sends scan response information including the connection information of the first communication device to the second communication device, so that the second communication device utilizes the first communication device. The connection information establishes a short-range communication connection.

The above-mentioned short-range communication connection in this embodiment may include, but is not limited to, a Bluetooth connection, an infrared connection, or a Zigbee.

FIG. 7 is a structural diagram of another apparatus according to an embodiment of the present invention. The apparatus may be disposed on a second communication device. As shown in FIG. 7, the apparatus may include: a sending unit 11, and may further include a receiving unit 12 and The unit 13 and the connection establishing unit 14 are provided. The main functions of each component are as follows:

The sending unit 11 is responsible for transmitting the authentication information of the second communication device to the first communication device after establishing the short-range communication connection between the second communication device and the first communication device.

The authentication information may include identification information of the second communication device.

Alternatively, the authentication information may include: plaintext information and ciphertext information obtained by encrypting the plaintext information. The plaintext information may include a random number or include the random number and identification information of the second communication device. The methods used for encryption include: a symmetric encryption algorithm or an asymmetric encryption algorithm; when an asymmetric encryption algorithm is used, the authentication information also includes public key information.

The receiving unit 12 is responsible for receiving the information of the successful authentication returned by the first communication device. After the receiving unit 12 receives the information of the authentication success returned by the first communication device, the binding unit 13 saves the binding relationship with the first communication device. The binding relationship may include connection information of the first communication device, such as a near field communication MAC address of the first communication device, and may further include identification information of the first communication device.

The sending unit 11 can also send the binding relationship between the second communication device and the first communication device to the server for saving.

After the second communication device establishes a short-range communication connection with the first communication device, the sending unit 11 may send the identification information of the second communication device to the first communication device; if the receiving unit 12 receives the first communication device, The unbound information transmits the authentication information of the second communication device to the first communication device.

In addition, the device may further include an unbinding unit (not shown), and when the unbinding unit receives the reset instruction (for example, the user manually resets the binding relationship on the second communication device side), the second is deleted. The binding relationship held by the communication device, and the triggering sending unit 11 sends an unbinding request to the first communication device.

The connection establishing unit 14 is mainly responsible for establishing a near field communication connection between the first communication device and the second communication device. If it is not already associated with the first communication device, the following two methods may be adopted:

The first way: scanning the information code provided by the first communication device; using the first pass obtained from the information code The connection information of the letter device establishes a short-range communication connection.

The second mode: performing short-range communication scanning; acquiring connection information of the first communication device from the received scan response information; and establishing a short-distance communication connection by using connection information of the first communication device.

If the first communication device has been associated with the second communication device, the connection establishing unit 14 may establish a close-range communication connection using the binding relationship with the first communication device saved by the binding unit.

In this embodiment, the short-range communication connection may include, but is not limited to, a Bluetooth connection, an infrared connection, or a Zigbee.

As can be seen from the above description, the method and apparatus provided by the present invention can have the following advantages:

1) The present invention can disconnect the short-range communication connection after the two communication devices establish a short-range communication connection, if one party does not receive the authentication information sent by the other party within the set time or receives the authentication information but the authentication fails. . That is to say, only devices that adopt the above authentication mechanism and pass authentication can communicate on the established short-range communication connection, which improves the security of short-range communication.

2) In addition, the first communication device, such as a wearable device, if it is bound to a certain communication device, the other communication device cannot communicate with the first communication device in close proximity, and only binds to the first communication device. The device can communicate with the first communication device in close proximity, further ensuring security.

3) The present invention also provides a way to establish a short-range communication connection by scanning a two-dimensional code, so that the establishment of a short-range communication connection is more targeted.

In the several embodiments provided by the present invention, it should be understood that the disclosed system, apparatus, and method may be implemented in other manners. For example, the device embodiments described above are merely illustrative. For example, the division of the unit is only a logical function division, and the actual implementation may have another division manner.

The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of the embodiment.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above integrated unit can be implemented in the form of hardware or in the form of hardware plus software functional units.

The above-described integrated unit implemented in the form of a software functional unit can be stored in a computer readable storage medium. The above software functional unit is stored in a storage medium and includes a plurality of instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) or a processor to execute the present invention. Part of the steps of the method described in the various examples. The foregoing storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk, and the like, which can store program codes. .

The above are only the preferred embodiments of the present invention, and are not intended to limit the present invention. Any modifications, equivalents, improvements, etc., which are made within the spirit and principles of the present invention, should be included in the present invention. Within the scope of protection.

Claims

A method for establishing short-range communication, characterized in that the method comprises:

After establishing a short-range communication connection between the first communication device and the second communication device, if the first communication device does not receive the authentication information of the second communication device within a preset time period, or receives the second If the authentication information of the communication device fails but the authentication fails, the short-range communication connection is disconnected.
The method of claim 1 further comprising:

And if the first communication device receives the authentication information of the second communication device within the set duration and the authentication is successful, saving a binding relationship with the second communication device, and transmitting the second communication The device returns information indicating that the authentication is successful.
The method of claim 2, wherein after the first communication device establishes a short-range communication connection with the second communication device, the method further includes:

The first communication device receives the identification information of the second communication device, determines whether the first communication device stores a binding relationship, and if not, sends unbound information to the second communication device, and Waiting to receive the authentication information of the second communication device within the preset duration.
The method according to claim 3, wherein if it is determined that the first communication device holds a binding relationship, it is further determined whether the binding relationship is a binding relationship with the second communication device, If so, data communication over the short-range communication connection is allowed; if not, the short-range communication connection is broken.
The method according to claim 1, wherein the authentication information comprises: plaintext information and ciphertext information obtained by encrypting the plaintext information;

When the first communication device authenticates the authentication information, the ciphertext information is decrypted, and the plaintext information obtained by the decryption is compared with the plaintext information carried in the authentication information. If the information is consistent, the authentication is passed. Otherwise the authentication fails.
The method according to claim 5, wherein the plaintext information comprises a random number or comprises a random number and identification information of the second communication device.
The method according to claim 5, wherein the method for encrypting and decrypting comprises: a symmetric encryption algorithm or an asymmetric encryption algorithm;

When the asymmetric encryption algorithm is employed, the authentication information further includes public key information.
The method according to claim 1, wherein the authentication information comprises: identification information of the second communication device;

When the first communication device authenticates the authentication information, it is determined whether the first communication device is saved. There is a binding relationship, if not, the authentication is passed; if yes, it is further determined whether the binding relationship is a binding relationship with the second communication device, and if not, the authentication fails.
The method of claim 2, 3, 4 or 8, wherein the method further comprises:

Deleting the saved binding between the first communication device and the second communication device if the first communication device receives the reset instruction or receives the unbinding request sent by the second communication device Relationship.
The method according to any one of claims 1 to 8, wherein the method further comprises:

The first communication device displays an information code including connection information of the first communication device, so that the second communication device scans and utilizes the obtained connection information of the first communication device to establish the short-range communication connection.
The method according to any one of claims 1 to 8, wherein the method further comprises:

After receiving the scan information of the second communication device, the first communication device sends scan response information including connection information of the first communication device to the second communication device, so that the second communication device utilizes the The connection information of the first communication device establishes the short-range communication connection.
The method of any of claims 1 to 8, wherein the short-range communication connection comprises: a Bluetooth connection, an infrared connection, or a Zigbee.
A method for establishing short-range communication, characterized in that the method further comprises:

After the second communication device establishes a short-range communication connection with the first communication device, the second communication device sends the authentication information of the second communication device to the first communication device within a preset time period.
The method of claim 13 further comprising:

After receiving the information that the first communication device returns the authentication success, the second communication device saves the binding relationship with the first communication device.
The method of claim 13 further comprising:

The second communication device sends the binding relationship with the first communication device to the server for saving.
The method according to claim 13, wherein after the second communication device establishes a short-range communication connection with the first communication device, the method further comprises: the second communication device Sending identification information of the second communication device to the first communication device;

And if the unbound information sent by the first communications device is received, performing the sending the authentication information of the second communications device to the first communications device.
The method according to claim 13, wherein the authentication information comprises: plaintext information and ciphertext information obtained by encrypting the plaintext information.
The method according to claim 17, wherein said plaintext information comprises a random number, or A random number and identification information of the second communication device are included.
The method according to claim 17, wherein the method used for the encryption comprises: a symmetric encryption algorithm or an asymmetric encryption algorithm;

When the asymmetric encryption algorithm is employed, the authentication information further includes public key information.
The method according to claim 13, wherein the authentication information comprises: identification information of the second communication device.
The method according to claim 14 or 15, wherein if the second communication device receives the reset command, deleting the binding relationship with the first communication device saved by the second communication device, And sending an unbinding request to the first communication device.
The method of any of claims 13 to 20, further comprising:

The second communication device scans an information code provided by the first communication device;

The short-range communication connection is established using connection information of the first communication device parsed from the information code.
The method of any of claims 13 to 20, further comprising:

The second communication device performs a short-range communication scan;

Obtaining connection information of the first communication device from the received scan response information;

The proximity communication connection is established using connection information of the first communication device.
The method of claim 13 wherein said second communication device establishes said short-range communication connection using a locally stored binding relationship with said first communication device.
The method of any of claims 13 to 20, wherein the short-range communication connection comprises: a Bluetooth connection, an infrared connection, or a Zigbee.
A device for establishing a short-range communication, the device being disposed in the first communication device, wherein the device comprises:

a receiving unit, configured to receive authentication information of the second communications device;

An authentication unit, configured to authenticate the authentication information received by the receiving unit;

a first determining unit, configured to determine, after the first communication device establishes a short-range communication connection between the first communication device and the second communication device, whether the receiving unit does not receive the second communication device within a preset duration Authentication information, or receiving the authentication information of the second communication device but the authentication fails;

And a control unit, configured to disconnect the short-range communication connection when the determination result of the first determining unit is YES.
The device of claim 26, further comprising:

a binding unit, configured to: when the first determining unit determines that the first communications device receives the authentication information of the second communications device within a set duration, and the authentication succeeds, saving the second communications device Binding relationship between;

a sending unit, configured to: when the first determining unit determines that the first communications device receives the authentication information of the second communications device within a set duration, and the authentication succeeds, sending the authentication to the second communications device Successful information.
The device according to claim 27, wherein the device further comprises a second determining unit;

The receiving unit is further configured to receive the identifier information of the second communications device, and if the determining result of the second determining unit is no, wait for receiving the authentication of the second communications device within the preset duration information;

The second determining unit is configured to determine, when the receiving unit receives the identifier information of the second communications device, whether the binding unit saves a binding relationship;

The sending unit is further configured to send unbound information to the second communications device if the determining result of the second determining unit is no.
The device of claim 28, further comprising:

a third determining unit, configured to determine, when the determination result of the second determining unit is YES, whether the binding relationship saved by the binding unit is a binding relationship with the second communication device;

The control unit is further configured to allow data communication on the short-range communication connection when the determination result of the third determining unit is YES; otherwise, disconnect the short-range communication connection.
The device according to claim 26, wherein the authentication information comprises: plaintext information and ciphertext information obtained by encrypting the plaintext information;

The authentication unit, when authenticating the authentication information, is specifically configured to: decrypt the ciphertext information, and compare whether the plaintext information obtained by the decryption is consistent with the plaintext information carried in the authentication information, and if they are consistent, the authentication is performed. Passed, otherwise the authentication failed.
The apparatus according to claim 30, wherein the plaintext information comprises a random number or comprises a random number and identification information of the second communication device.
The apparatus according to claim 30, wherein the decryption method adopted by the authentication unit comprises a symmetric encryption algorithm or an asymmetric encryption algorithm;

When the asymmetric encryption algorithm is employed, the authentication information further includes public key information.
The device according to claim 26, wherein the authentication information comprises: identification information of the second communication device;

When the authentication unit authenticates the authentication information, it is determined whether the first communication device stores a binding relationship, and if not, the authentication passes; if yes, further determines whether the binding relationship is The binding relationship of the second communication device is described. If not, the authentication fails.
The apparatus according to claim 27, 28, 29 or 33, characterized in that the apparatus further comprises: an unbinding unit for receiving a reset instruction, or the receiving unit receives the second communication device When the unbinding request is sent, the binding relationship between the first communication device and the second communication device is deleted.
The device according to any one of claims 26 to 33, further comprising:

And a connection establishing unit, configured to display an information code including connection information of the first communication device, so that the second communication device scans and uses the obtained connection information of the first communication device to establish the short-range communication connection.
The device according to any one of claims 26 to 33, further comprising:

a connection establishing unit, configured to send scan response information including connection information of the first communication device to the second communication device, after receiving the scan information of the second communication device, so that the second communication device utilizes the The connection information of the first communication device establishes the short-range communication connection.
The apparatus according to any one of claims 26 to 33, wherein the short-range communication connection comprises: a Bluetooth connection, an infrared connection, or a Zigbee.
A device for establishing a short-range communication, the device being disposed in a second communication device, wherein the device comprises:

And a sending unit, configured to send the authentication information of the second communications device to the first communications device after establishing a short-range communication connection between the second communications device and the first communications device.
The device of claim 38, further comprising:

a receiving unit, configured to receive information about successful authentication returned by the first communications device;

And a binding unit, configured to save a binding relationship with the first communications device after the receiving unit receives the information that the first communication device returns the authentication success.
The device according to claim 38, wherein the sending unit is further configured to send a binding relationship between the second communication device and the first communication device to a server for saving.
The device according to claim 38, characterized in that the device further comprises a receiving unit;

The sending unit is further configured to send the identifier information of the second communications device to the first communications device after establishing a short-range communication connection between the second communications device and the first communications device; And if the receiving unit receives the unbound information sent by the first communications device, performing the sending the authentication information of the second communications device to the first communications device.

The receiving unit is further configured to receive unbound information sent by the first communications device.
The device according to claim 38, wherein the authentication information comprises: plaintext information and ciphertext information obtained by encrypting the plaintext information.
The apparatus according to claim 42, wherein the plaintext information comprises a random number or comprises a random number and identification information of the second communication device.
The apparatus according to claim 42, wherein the method used for the encryption comprises: a symmetric encryption algorithm or an asymmetric encryption algorithm;

When the asymmetric encryption algorithm is employed, the authentication information further includes public key information.
The apparatus according to claim 38, wherein said authentication information comprises: identification information of said second communication device.
The device according to claim 39 or 40, wherein the device further comprises:

An unbinding unit, configured to delete a binding relationship between the first communications device and the second communications device, and trigger the sending unit to send an unbinding to the first communications device request.
The device according to any one of claims 38 to 45, further comprising:

a connection establishing unit, configured to scan an information code provided by the first communication device; and establish the short-range communication connection by using connection information of the first communication device that is parsed from the information code.
The device according to any one of claims 38 to 45, further comprising:

a connection establishing unit, configured to perform a short-range communication scan; acquire connection information of the first communication device from the received scan response information; and establish the short-range communication connection by using connection information of the first communication device.
The device of claim 38, further comprising:

And a connection establishing unit, configured to establish the short-range communication connection by using a binding relationship with the first communications device that is saved by the binding unit.
The apparatus according to any one of claims 38 to 45, wherein the short-range communication connection comprises: a Bluetooth connection, an infrared connection, or a Zigbee.