WO2018120836A1

WO2018120836A1 - Terminal pairing method, device, and system, terminal, and computer readable storage medium

Info

Publication number: WO2018120836A1
Application number: PCT/CN2017/095706
Authority: WO
Inventors: 刘勇; 梁洁
Original assignee: 国民技术股份有限公司
Priority date: 2016-12-30
Filing date: 2017-08-02
Publication date: 2018-07-05
Also published as: CN108270554B; CN108270554A

Abstract

The invention provides a terminal pairing method, device, and system, a terminal, and a computer readable storage medium. According to the method, secure communication parameters are negotiated before pairing of data communications channels, such as Bluetooth, using a wireless security channel, thereby solving the problem in which, when pairing of data communications channels is performed between existing terminals, using cleartext to perform multiple interactions and negotiations of secure communication parameters is not secure. In addition, secure communication parameters are negotiated before pairing of data communications channels using a wireless security channel, such that the security of data communications channels, such as Bluetooth, is guaranteed without affecting user experience, improving user convenience and user satisfaction.

Description

Terminal pairing method, device and system, terminal and computer readable storage medium

Technical field

[0001] The present invention relates to the field of communications, and in particular, to a terminal pairing method, apparatus, and system, terminal, and computer readable storage medium.

Background technique

[0002] With the popularization of smart terminals, users often perform data transmission between multiple terminal devices. Before data transmission, devices need to be paired, for example, applications that users use smart terminals to obtain from application service providers. After the data such as the installation package is written to the smart data card, the smart terminal and the smart data card need to be paired and securely authenticated.

[0003] In the prior art, when the smart terminal and the smart data card are paired with the data communication channel, the interaction and negotiation of multiple secure communication parameters are generally performed in a clear text manner, so that the communication data on the data communication channel is secure. There is a great threat, that is, there is an insecure problem in the terminal configuration method in which the interaction and negotiation of multiple secure communication parameters are performed in a clear text manner.

technical problem

The present invention provides a terminal pairing method, device and system, terminal, and computer readable storage medium, which solves the problem that the existing terminal pairing uses the plaintext mode to perform multiple security communication parameters interaction and negotiation is unsafe.

Problem solution

Technical solution

[0005] In order to solve the above technical problem, the present invention adopts the following technical solutions:

[0006] A terminal pairing method, including:

[0007] the first terminal generates a first random factor, and uses a preset first check algorithm to check the first random factor to generate a first check value; according to the preset first key pair, the first random factor Encrypting with the first check value, generating a first ciphertext, and transmitting the first ciphertext to the second terminal through the secure wireless channel; [0008] the second terminal decrypts the first ciphertext by using the preset second key, and obtains a first random factor and a first check value; and performs verification on the first random factor by using a preset second check algorithm. And comparing and verifying with the first check value; if matching, generating a second random factor, using a preset second check algorithm to verify the second random factor, generating a second check value; The second key encrypts the second random factor and the second check value to generate a second ciphertext, and sends the second ciphertext to the first terminal through the secure wireless channel;

[0009] the first terminal decrypts the second ciphertext by using the first key to obtain a second random factor and a second check value; and uses the first check algorithm to check the second random factor, and the second school The verification value is compared and verified; if it matches, the combination of the first random factor and the second random factor is used to irreversibly process and replace the original communication key of the data communication channel to generate a new communication key;

[0010] the second terminal uses the combination of the second random factor and the first random factor to irreversibly process and replace the original communication key of the data communication channel to generate a new communication key;

[0011] The first terminal and the second terminal select a pairing mode of the data communication channel, and use the new communication key to perform channel encryption of the data communication channel.

[0012] A terminal pairing system, including: a first terminal and a second terminal, where

[0013] the first terminal is configured to generate a first random factor, and use a preset first check algorithm to check the first random factor to generate a first check value; according to the preset first key pair, the first The random factor and the first check value are encrypted, and the first ciphertext is generated and sent to the second terminal through the secure wireless channel;

[0014] the second terminal is configured to decrypt the first ciphertext by using the preset second key, obtain the first random factor and the first check value, and perform the first random factor by using a preset second check algorithm. Checking, and comparing and verifying with the first check value; if matching, generating a second random factor, using a preset second check algorithm to check the second random factor to generate a second check value; Encrypting the second random factor and the second check value according to the second key, generating a second ciphertext, and transmitting the second ciphertext to the first terminal by using a secure wireless channel;

[0015] the first terminal is further configured to decrypt the second ciphertext by using the first key to obtain a second random factor and a second check value; and verify the second random factor by using the first check algorithm, and The second check value is compared and verified; if matched, the combination of the first random factor and the second random factor is used to irreversibly process and replace the original communication key of the data communication channel to generate a new communication key;

[0016] the second terminal is further configured to perform irreversible processing and replacement on the original communication key of the data communication channel by using a combination of the second random factor and the first random factor to generate a new communication key; [0017] The first terminal and the second terminal are further configured to select a pairing mode of the data communication channel, and perform channel encryption of the data communication channel by using the new communication key.

[0018] A terminal pairing method, comprising:

[0019] generating a first random factor, verifying the first random factor by using a preset first check algorithm, generating a first check value; and using the first key pair according to the preset first key factor and the first The check value is encrypted, the first ciphertext is generated, and sent to the external terminal through the secure wireless channel;

[0020] receiving, by the secure wireless channel, the second ciphertext sent by the external terminal;

[0021] decrypting the second ciphertext using the first key to obtain a second random factor and a second check value; verifying the second random factor by using the first check algorithm, and performing the second check value Comparing the check; if matching, using the combination of the first random factor and the second random factor, irreversibly processing and replacing the original communication key of the data communication channel to generate a new communication key;

[0022] The pairing mode of the data communication channel is selected with the external terminal, and the channel encryption of the data communication channel is performed using the new communication key.

[0023] A terminal pairing method, including:

[0024] receiving, by the secure wireless channel, the first ciphertext sent by the external terminal;

[0025] decrypting the first ciphertext using the preset second key to obtain a first random factor and a first check value; [0026] verifying the first random factor by using a preset second check algorithm And comparing and verifying with the first check value;

[0027] if matched, generating a second random factor, using a preset second check algorithm to check the second random factor to generate a second check value;

[0028] encrypting the second random factor and the second check value according to the second key, generating a second ciphertext, and transmitting the second ciphertext to the external terminal through the secure wireless channel;

[0029] using a combination of the second random factor and the first random factor, irreversibly processing and replacing the original communication key of the data communication channel to generate a new communication key;

[0030] selecting a pairing mode of the data communication channel, using a new communication key for channel encryption of the data communication channel

[0031] A terminal, comprising: a memory, a processor, an input and output bus connecting the memory and the processor, and a terminal pairing program stored on the memory and operable on the processor, the terminal pairing program is processed by the processor Execute 吋 to achieve the following steps:

[0032] generating a first random factor, using a preset first check algorithm to check the first random factor, generating a first check value; according to the preset first key pair, the first random factor and the first The check value is encrypted, the first ciphertext is generated, and sent to the external terminal through the secure wireless channel;

[0033] receiving, by the secure wireless channel, the second ciphertext sent by the external terminal;

[0034] decrypting the second ciphertext using the first key to obtain a second random factor and a second check value; verifying the second random factor by using the first check algorithm, and performing the second check value Comparing the check; if matching, using the combination of the first random factor and the second random factor, irreversibly processing and replacing the original communication key of the data communication channel to generate a new communication key;

[0035] The pairing mode of the data communication channel is selected with the external terminal, and the channel encryption of the data communication channel is performed using the new communication key.

[0036] A terminal, comprising: a memory, a processor, an input/output bus connecting the memory and the processor, and a terminal pairing program stored on the memory and operable on the processor, wherein the terminal pairing program is executed by the processor The following steps:

Receiving, by the secure wireless channel, the first ciphertext sent by the external terminal;

[0038] decrypting the first ciphertext using the preset second key to obtain a first random factor and a first check value; [0039] verifying the first random factor by using a preset second check algorithm And comparing and verifying with the first check value;

[0040] if matched, generating a second random factor, and using a preset second check algorithm to check the second random factor to generate a second check value;

[0041] encrypting the second random factor and the second check value according to the second key, generating a second ciphertext, and transmitting the second ciphertext to the external terminal through the secure wireless channel;

[0042] using a combination of the second random factor and the first random factor, irreversibly processing and replacing the original communication key of the data communication channel to generate a new communication key;

[0043] selecting a pairing mode of the data communication channel, using a new communication key for channel encryption of the data communication channel

[0044] A computer readable storage medium having one or more programs stored on a computer readable storage medium, the one or more programs being executed to implement the following steps: [0045] generating a first random factor, using a preset first check algorithm to check the first random factor, generating a first check value; according to the preset first key pair, the first random factor and the first The check value is encrypted, the first ciphertext is generated, and sent to the external terminal through the secure wireless channel;

Receiving, by the secure wireless channel, the second ciphertext sent by the external terminal;

[0047] decrypting the second ciphertext using the first key to obtain a second random factor and a second check value; verifying the second random factor by using the first check algorithm, and performing the second check value Comparing the check; if matching, using the combination of the first random factor and the second random factor, irreversibly processing and replacing the original communication key of the data communication channel to generate a new communication key;

[0048] The pairing mode of the data communication channel is selected with the external terminal, and the channel encryption of the data communication channel is performed using the new communication key.

[0049] A computer readable storage medium having one or more programs stored on a computer readable storage medium, the one or more programs being executed to implement the following steps:

[0051] decrypting the first ciphertext using the preset second key to obtain a first random factor and a first check value; [0052] verifying the first random factor by using a preset second check algorithm And comparing and verifying with the first check value;

[0053] if matched, generating a second random factor, and using a preset second check algorithm to check the second random factor to generate a second check value;

[0054] encrypting the second random factor and the second check value according to the second key, generating a second ciphertext, and transmitting the second ciphertext to the external terminal through the secure wireless channel;

[0055] using a combination of the second random factor and the first random factor, irreversibly processing and replacing the original communication key of the data communication channel to generate a new communication key;

[0056] selecting a pairing mode of the data communication channel, using a new communication key for channel encryption of the data communication channel

[0057] A terminal pairing device, comprising: a first processing module, a first communication module, and a first pairing module, wherein

[0058] The first processing module is configured to generate a first random factor, and use a preset first verification algorithm to check the first random factor to generate a first check value; according to the preset first key pair a random factor and the first school Encryption is performed to generate a first ciphertext;

[0059] the first communication module is configured to send the first ciphertext to the external terminal through the secure wireless channel, and receive the second ciphertext sent by the external terminal through the secure wireless channel;

[0060] The first processing module is further configured to decrypt the second ciphertext by using the first key to obtain a second random factor and a second check value; and verify the second random factor by using the first check algorithm, and Compare and verify with the second check value;

[0061] the first pairing module is configured to: if matched, use a combination of the first random factor and the second random factor to irreversibly process and replace the original communication key of the data communication channel to generate a new communication key; The terminal selects the pairing mode of the data communication channel, and uses the new communication key to perform channel encryption of the data communication channel.

[0062] A terminal pairing device, comprising: a second processing module, a second communication module, and a second pairing module, wherein

[0063] the second communication module is configured to receive the first ciphertext sent by the external terminal by using the secure wireless channel;

[0064] The second processing module is configured to decrypt the first ciphertext using the preset second key, obtain the first random factor and the first check value, and use the preset second check algorithm to use the first random factor Performing a check and comparing and verifying with the first check value; if matching, generating a second random factor, and using a preset second check algorithm to check the second random factor to generate a second check value And encrypting the second random factor and the second check value according to the second key to generate a second ciphertext;

[0065] the second communication module is further configured to send the second ciphertext to the external terminal by using the secure wireless channel;

[0066] The second pairing module is configured to use an combination of the second random factor and the first random factor to irreversibly process and replace the original communication key of the data communication channel to generate a new communication key; and select a pair of the data communication channel. Mode, using the new communication key for channel encryption of the data communication channel.

Advantageous effects of the invention

Beneficial effect

The present invention provides a terminal pairing method, device and system, terminal and computer readable storage medium. The method solves the existing terminal by negotiating a secure communication parameter before pairing with a data communication channel such as Bluetooth through a wireless secure channel. After the data communication channel is paired, the interaction of multiple secure communication parameters and the insecure problem of negotiation are performed in plain text, without affecting the user experience. The secure communication parameters of the pre-pair data communication channel are negotiated through the wireless secure channel to ensure the security of the data communication channel such as Bluetooth, and the user's convenience and user experience satisfaction are improved.

Brief description of the drawing

DRAWINGS

1 is a schematic diagram of a terminal pairing system according to Embodiment 1 of the present invention;

2 is a flowchart of a terminal pairing method according to Embodiment 2 of the present invention;

3 is a flowchart of a terminal pairing method according to Embodiment 3 of the present invention;

4 is a schematic structural diagram of a terminal pairing apparatus according to Embodiment 3 of the present invention;

FIG. 5 is a flowchart of a terminal pairing method according to Embodiment 4 of the present invention; FIG.

FIG. 6 is a schematic structural diagram of a terminal pairing apparatus according to Embodiment 4 of the present invention; FIG.

7 is a schematic structural diagram of a terminal according to an embodiment of the present invention;

8 is a schematic diagram of a terminal pairing system according to Embodiment 5 of the present invention;

9 is a flowchart of a terminal pairing method according to Embodiment 5 of the present invention;

10 is a flow chart of communication protocol interaction according to Embodiment 5 of the present invention;

11 is a flow chart of interaction of pairing features according to Embodiment 5 of the present invention;

12 is a flowchart of pairing mode selection according to Embodiment 5 of the present invention.

BEST MODE FOR CARRYING OUT THE INVENTION

[] Embodiments of the invention

[0080] The first terminal and the second terminal of the present invention are applicable to all communication devices, including PCs, mobile phones, PADs, etc.

. The present invention will be further described in detail below with reference to the accompanying drawings.

Embodiment 1

1 is a schematic diagram of a terminal pairing system according to Embodiment 1 of the present invention. Referring to FIG. 1, the terminal pairing system provided in this embodiment includes: a first terminal 11 and a second terminal 12, where

[0083] The first terminal 11 is configured to generate a first random factor, and use a preset first check algorithm to compare the first random factor Performing a check to generate a first check value; encrypting the first random factor and the first check value according to the preset first key, generating a first ciphertext, and transmitting the first ciphertext to the second terminal 12 through the secure wireless channel In practical applications, the secure wireless channel can be secure in terms of attributes, such as a safe channel with directivity such as infrared, a secure channel with a short communication distance, or a data encryption technology to ensure communication security;

[0084] The second terminal 12 is configured to decrypt the first ciphertext using the preset second key, obtain the first random factor and the first check value, and use the preset second check algorithm to the first random factor. Performing a check and comparing and verifying with the first check value; if matching, generating a second random factor, and using a preset second check algorithm to check the second random factor to generate a second check value Encrypting the second random factor and the second check value according to the second key, generating a second ciphertext, and transmitting the second ciphertext to the first terminal 11 through the secure wireless channel;

[0085] The first terminal 11 is further configured to decrypt the second ciphertext by using the first key to obtain a second random factor and a second check value; and verify the second random factor by using the first check algorithm, and Comparing with the second check value; if matching, using the combination of the first random factor and the second random factor, irreversibly processing and replacing the original communication key of the data communication channel to generate a new communication key; In practical applications, the data communication channel may be a conventional Bluetooth channel, or may be a telecommunication interface or the like;

[0086] The second terminal 12 is further configured to perform irreversible processing and replacement on the original communication key of the data communication channel by using a combination of the second random factor and the first random factor to generate a new communication key;

[0087] The first terminal 11 and the second terminal 12 are further configured to select a pairing mode of the data communication channel, and use the new communication key to perform channel encryption of the data communication channel.

[0088] In an embodiment, the first terminal 11 and the second terminal 12 in the foregoing embodiment are both low power Bluetooth devices. Preferably, the first terminal is a user handheld device such as a mobile phone, and the second terminal is a smart card, such as a SIM card, an S D card, or the like.

[0089] In an embodiment, the first terminal in the foregoing embodiment is configured to perform irreversible processing and replacement on the TKCTemporary Key, the temporary key value of the first terminal by using the first random factor and the second random factor combination. The second terminal is configured to perform irreversible processing and replacement on the TK value of the second terminal by using the second random factor and the first random factor combination;

[0090] the first terminal and the second terminal select a pairing mode according to a low power Bluetooth protocol;

[0091] The first terminal and the second terminal combine the first random factor and the second random factor with the STK (Short Term) Key, short-term key) for encryption processing and replacement;

[0092] The first terminal and the second terminal perform STK (Short Term Key) key channel encryption and LTK (Long Term Key) key interaction according to the Bluetooth protocol, and complete the pairing process.

[0093] In an embodiment, the data communication channel in the foregoing embodiment is a Bluetooth channel, which can support version 2.0, version 3.0, etc.; the data communication channel is a limited domain communication RCC interface, a 2.4G wireless interface, and a low power local area network Z. At least one of an igbee interface and a WiFi interface.

[0094] In an embodiment, the first terminal 11 and the second terminal 12 in the foregoing embodiment are further configured to: obtain device information of the peer end, and determine, according to the device information, whether the peer end supports secure pairing; if not, the first terminal a pairing mode in which the terminal and the second terminal select a data communication channel, and uses the original communication key to perform channel encryption of the data communication channel; if supported, the first terminal and the second terminal respectively generate a new communication key and select a data communication channel Pairing mode, using the new communication key for channel encryption of the data communication channel. In an actual application, the device information may include software version information of the device and hardware version information of the device, and determining whether the peer supports secure pairing includes determining whether the hardware version information is the same, for example, according to the device identifier (IMEI) in the hardware version information. Or the Bluetooth device vendor ID, etc. to determine whether the peer device belongs to the same vendor device as the local device, and if so, it is considered to support secure pairing. In other application scenarios, if the pairing fails to prevent the user from lowering the software version of the device, the software version information can be judged. If the software version of the peer device meets certain requirements, such as greater than Bluetooth 5.0, it can be considered to support security. pair.

[0095] Embodiment 2:

2 is a flowchart of a terminal pairing method according to Embodiment 2 of the present invention. Referring to FIG. 2, the terminal pairing method provided in this embodiment includes:

[0097] S201: The first terminal generates a first random factor, and uses a preset first check algorithm to check the first random factor to generate a first check value; according to the preset first key pair, the first The random factor and the first check value are encrypted, and the first ciphertext is generated and sent to the second terminal through the secure wireless channel;

[0098] S202: The second terminal decrypts the first ciphertext by using the preset second key, and obtains a first random factor and a first check value; and performs a first random factor by using a preset second check algorithm. Checking, and comparing and verifying with the first check value; if matching, generating a second random factor, using a preset second check algorithm to check the second random factor to generate a second check value; According to the second key pair, the second random factor and the The second check value is encrypted, and the second ciphertext is generated and sent to the first terminal through the secure wireless channel;

[0099] S203: The first terminal decrypts the second ciphertext by using the first key, and obtains a second random factor and a second check value; and uses the first check algorithm to check the second random factor, and The second check value is compared and verified; if matched, the combination of the first random factor and the second random factor is used to irreversibly process and replace the original communication key of the data communication channel to generate a new communication key;

[0100] S204: The second terminal uses the combination of the second random factor and the first random factor to irreversibly process and replace the original communication key of the data communication channel to generate a new communication key.

[0101] S205: The first terminal and the second terminal select a pairing mode of the data communication channel, and perform channel encryption of the data communication channel by using the new communication key.

[0102] In an embodiment, the first key and the second key in the foregoing embodiment are one or more pairs of the same key or a public-private key pair stored in the first terminal and the second terminal.

[0103] In an embodiment, the first verification algorithm and the second verification algorithm in the foregoing embodiment are MACs using the same parameter (Message Authentication).

Code, message authentication code) Value verification algorithm or CRC (Cyclic Redundancy Check) verification algorithm.

[0104] In an embodiment, the combination of the first random factor and the second random factor in the foregoing embodiment is: the first random factor and the second random factor generate data of a preset length according to an agreed manner. For example, the first random factor and the second random factor are 16-bit fields, for example, the first random factor is 10110010, and the second random factor is 11000010, and then 16-byte length data is generated according to the agreed manner of the interval value.

0 this one combination.

[0105] In an embodiment, the irreversible processing of the original communication key of the data communication channel in the foregoing embodiment includes: encrypting the original communication key by using a combination, or performing hashing using the combination and the original communication key. A value operation that generates unique irreversible data as a new communication key.

[0106] In an embodiment, the method in the foregoing embodiment, before the first terminal generates the first random factor, further includes: acquiring device information of the peer end, and determining, according to the device information, whether the peer end supports secure pairing; if not, Then, the first terminal and the second terminal select a pairing mode of the data communication channel, and use the original communication key to perform channel encryption of the data communication channel; if supported, the first terminal and the second terminal respectively generate a new communication key, and select data Pairing mode of the communication channel, using the new communication key for the data communication channel Channel encryption.

[0107] As shown in FIG. 10, in an embodiment, the first terminal and the second terminal in the foregoing embodiment select a pairing mode of the data communication channel, and use the new communication key to perform channel encryption of the data communication channel, including: The terminal uses the first random factor and the second random factor combination to perform irreversible processing and replacement on the TK value of the first terminal, and the second terminal uses the second random factor and the first random factor combination to perform data on the TK value of the second terminal. Irreversible processing and replacement; the first terminal and the second terminal select a pairing mode according to a low power Bluetooth protocol; the first terminal and the second terminal encrypt and process the STK by combining the first random factor and the second random factor; The first terminal and the second terminal perform S TK key channel encryption and LTK key interaction according to the low power Bluetooth protocol, and complete the pairing process.

[0108]

[0109] Embodiment 3:

3 is a flowchart of a terminal pairing method according to Embodiment 3 of the present invention. Referring to FIG. 3, the terminal pairing method provided in this embodiment includes:

[0111] S301: Generate a first random factor, perform a check on the first random factor by using a preset first check algorithm, generate a first check value, and generate a first random factor according to the preset first key pair. The first check value is encrypted, and the first ciphertext is generated and sent to the external terminal through the secure wireless channel;

[0112] S302: Receive a second ciphertext sent by the external terminal by using the secure wireless channel.

[0113] S303: Decrypt the second ciphertext by using the first key to obtain a second random factor and a second check value; verifying the second random factor by using the first check algorithm, and verifying with the second checksum The value is compared and verified; if matched, the combination of the first random factor and the second random factor is used to irreversibly process and replace the original communication key of the data communication channel to generate a new communication key;

[0114] S304: Select a pairing mode of the data communication channel with the external terminal, and perform channel encryption of the data communication channel by using the new communication key.

[0115] In an embodiment, the combination of the first random factor and the second random factor in the foregoing embodiment is: the first random factor and the second random factor generate data of a preset length according to an agreed manner.

[0116] In an embodiment, the irreversible processing of the original communication key of the data communication channel in the foregoing embodiment includes: encrypting the original communication key by using a combination; or performing hashing by using the combination with the original communication key. A value operation that generates unique irreversible data as a new communication key. [0117] In an embodiment, before the generating the first random factor, the method in the foregoing embodiment further includes: acquiring device information of the external terminal, determining, according to the device information, whether the external terminal supports secure pairing; if not, if The external terminal selects a pairing mode of the data communication channel, and uses the original communication key to perform channel encryption of the data communication channel; if supported, generates a new communication key with the external terminal, and selects a pairing mode of the data communication channel, and uses the new communication key The key performs channel encryption of the data communication channel.

[0118] In an embodiment, the pairing mode of the data communication channel with the external terminal in the foregoing embodiment, the channel encryption of the data communication channel by using the new communication key includes: using the first random factor and the second random factor combination Performing irreversible processing and replacement on the Linyi key value; selecting the pairing mode according to the low-power Bluetooth protocol with the external terminal; encrypting and replacing the short-term key by using the combination of the first random factor and the second random factor; The external terminal performs the interaction of the short-term key and the long-term key in accordance with the Bluetooth protocol of the low-power consumption.

[0119]

4 is a schematic structural diagram of a terminal pairing apparatus according to Embodiment 3 of the present invention. Referring to FIG. 4, the terminal pairing apparatus 4 provided in this embodiment includes: a first processing module 41, a first communication module 42, and a first Pairing module 43, wherein

[0121] The first processing module 41 is configured to generate a first random factor, and use a preset first check algorithm to check the first random factor to generate a first check value; according to the preset first key pair The first random factor and the first check value are encrypted to generate a first ciphertext;

[0122] The first communication module 42 is configured to send the first ciphertext to the external terminal through the secure wireless channel, and receive the second ciphertext sent by the external terminal through the secure wireless channel;

[0123] The first processing module 41 is further configured to decrypt the second ciphertext by using the first key to obtain a second random factor and a second check value; and verify the second random factor by using the first check algorithm, And comparing and verifying with the second check value;

[0124] The first pairing module 43 is configured to: if matched, use a combination of the first random factor and the second random factor to irreversibly process and replace the original communication key of the data communication channel to generate a new communication key; The external terminal selects the pairing mode of the data communication channel, and uses the new communication key to perform channel encryption of the data communication channel.

[0125] In an embodiment, the combination of the first random factor and the second random factor in the foregoing embodiment is: The random factor and the second random factor generate data of a preset length in an agreed manner.

[0126] In an embodiment, the first processing module 41 in the foregoing embodiment is specifically configured to: encrypt the original communication key by using a combination, or perform a hash value operation using the combination with the original communication key to generate a unique irreversible The data, as a new communication key.

[0127] In an embodiment, the first processing module 41 in the foregoing embodiment is specifically configured to: before acquiring the first random factor, acquire device information of the external terminal, and determine, according to the device information, whether the external terminal supports secure pairing; If it is not supported, the pairing mode of the data communication channel is selected with the external terminal, and the original communication key is used for channel encryption of the data communication channel; if supported, a new communication key is generated with the external terminal, and the pairing mode of the data communication channel is selected. , using the new communication key for channel encryption of the data communication channel.

[0128] In an embodiment, the first pairing module 43 in the foregoing embodiment is specifically configured to: perform irreversible processing and replacement on the temporary key value by using the first random factor and the second random factor combination; and the external terminal Selecting the pairing mode according to the low-power Bluetooth protocol; using the combination of the first random factor and the second random factor to encrypt and replace the short-term key; and the external terminal according to the low-power Bluetooth protocol for short-term key and long-term secret Key interaction.

[0129]

7 is a schematic structural diagram of a terminal according to an embodiment of the present invention. Referring to FIG. 7, the terminal provided in this embodiment includes at least: an input/output (10) bus 71, a processor 72, a memory 73, a memory 74, and an input. Module 75, communication module 76, and terminal pairing program stored on memory 73 and operable on processor 72

, among them,

[0131] O (10) are connected to a bus 71 to other components (processor 72, a memory _73, a memory 74, an input module 75 and display module 76) of the terminal itself belongs, and other components to provide a transmission line

[0132] The processor 72 typically controls the overall operation of the terminal to which it belongs. For example, processor 72 performs operations such as calculations and acknowledgments. The processor 72 can be a central processing unit (CPU).

[0133] memory

73 storage processor readable, processor executable software code comprising instructions (i.e., software execution functions) for controlling processor 72 to perform the functions described herein. In this embodiment, the memory 73 needs at least A program required to implement the function of the processor 72 is stored.

[0134] The memory 74 generally adopts a semiconductor storage unit, including a random access memory (RAM), a read only memory.

(ROM), as well as the cache (CACHE), RAM is the most important of these. Memory 44 is one of the important components in the computer. It is a bridge to communicate with the CPU. All the programs in the computer are run in memory. The function is to temporarily store the operational data in the CPU, and The data exchanged by the external memory such as the hard disk, as long as the computer is running, the CPU will transfer the data that needs to be calculated into the memory for calculation. When the operation is completed, the CPU will transmit the result, and the operation of the memory also determines the stable operation of the computer. .

[0135] An input module 75, such as a microphone, a sensor, a touch panel, etc., is used for user input and transmitted to the processor 72.

[0136] A communication module 76, such as a radio unit, is used to communicate with the outside world.

[0137] Based on the terminal component shown in FIG. 7, the terminal pairing program provided in this embodiment is executed by the processor, and all the steps of the terminal pairing method provided by the third embodiment are implemented.

[0138]

[0139] In the embodiment, the embodiment provides a computer readable storage medium, where one or more programs are stored on the computer readable storage medium, and one or more programs are executed by the processor to implement the third embodiment. All steps of the terminal pairing method.

[0140]

Embodiment 4:

FIG. 5 is a flowchart of a terminal pairing method according to Embodiment 4 of the present invention. Referring to FIG. 5, the terminal pairing method provided in this embodiment includes:

[0143] S501: receiving, by using a secure wireless channel, the first ciphertext sent by the external terminal;

[0144] S502: Decrypt the first ciphertext using the preset second key, and obtain the first random factor and the first check value.

[0145] S503: Check the first random factor by using a preset second check algorithm, and perform comparison check with the first check value; if matched, generate a second random factor, using the preset The second check algorithm checks the second random factor to generate a second check value; encrypts the second random factor and the second check value according to the second key, generates a second ciphertext, and passes the secure wireless channel Send to an external terminal; [0146] S504: using a combination of the second random factor and the first random factor, irreversibly processing and replacing the original communication key of the data communication channel to generate a new communication key;

[0147] S505: Select a pairing mode of the data communication channel, and use the new communication key to perform channel encryption of the data communication channel.

[0148] In an embodiment, the combination of the first random factor and the second random factor in the foregoing embodiment is: the first random factor and the second random factor generate data of a preset length according to an agreed manner.

[0149] In an embodiment, the irreversible processing of the original communication key of the data communication channel in the foregoing embodiment includes: encrypting the original communication key by using a combination; or performing hashing using the combination with the original communication key. A value operation that generates unique irreversible data as a new communication key.

[0150] In an embodiment, the pairing mode of the selected data communication channel in the foregoing embodiment, the channel encryption of the data communication channel by using the new communication key includes: using the second random factor and the first random factor combination to the second The temporary key value of the terminal is irreversibly processed and replaced; the pairing mode is selected according to the low power Bluetooth protocol; the short-term key is encrypted and replaced by the combination of the second random factor and the first random factor; The terminal interacts with the short-term key and the long-term key according to the Bluetooth protocol.

[0151]

FIG. 6 is a schematic structural diagram of a terminal pairing apparatus according to Embodiment 4 of the present invention. Referring to FIG. 6, the terminal pairing apparatus 6 provided in this embodiment includes: a second processing module 61, a second communication module 62, and a second Pairing module 63, wherein

[0153] The second communication module 62 is configured to receive, by using a secure wireless channel, the first ciphertext sent by the external terminal;

[0154] The second processing module 61 is configured to decrypt the first ciphertext using the preset second key, obtain the first random factor and the first check value, and use the preset second check algorithm to the first random The factor is checked and compared with the first check value; if matched, a second random factor is generated, and the second random factor is verified by using a preset second check algorithm to generate a second check And encrypting the second random factor and the second check value according to the second key to generate a second ciphertext;

[0155] The second communication module 62 is further configured to send the second ciphertext to the external terminal through the secure wireless channel;

[0156] The second pairing module 63 is configured to perform irreversible processing and replacement on the original communication key of the data communication channel by using a combination of the second random factor and the first random factor to generate a new communication key; The pairing mode of the channel uses the new communication key for channel encryption of the data communication channel.

[0157] In an embodiment, the combination of the first random factor and the second random factor in the foregoing embodiment is: the first random factor and the second random factor generate data of a preset length according to an agreed manner.

[0158] In an embodiment, the second pairing module 63 in the foregoing embodiment is specifically configured to: encrypt the original communication key by using a combination, or perform a hash value operation using the combination with the original communication key to generate a unique irreversible The data, as a new communication key.

[0159] In an embodiment, the second pairing module 63 in the foregoing embodiment is specifically configured to: perform data irreversible processing on the temporary key value of the second terminal by using the second random factor and the first random factor combination. And replacing; selecting the pairing mode according to the low-power Bluetooth protocol; using the combination of the second random factor and the first random factor to encrypt and replace the short-term key; and the external terminal performing the short-term key according to the low-power Bluetooth protocol And the interaction of long-term keys.

[0160]

7 is a schematic structural diagram of a terminal according to an embodiment of the present invention. Referring to FIG. 7, the terminal provided in this embodiment includes at least: an input/output (10) bus 71, a processor 72, a memory 73, a memory 74, and an input. The module 75, the communication module 76, and the terminal pairing program stored on the memory 73 and operable on the processor 72. On the basis of the terminal component shown in FIG. 7, the terminal pairing program provided in this embodiment is executed by the processor. The fourth embodiment provides all the steps of the terminal pairing method.

[0162]

[0163] In the embodiment, the embodiment provides a computer readable storage medium, where one or more programs are stored on the computer readable storage medium, and one or more programs are executed by the processor, and the fourth embodiment is implemented. All steps of the terminal pairing method.

[0164]

Embodiment 5:

[0166] The present invention is further illustrated by taking a Bluetooth device as a terminal and a data communication channel as a Bluetooth channel as an example, and combining the specific application scenarios.

[0167] Bluetooth Low Energy (BLE) technology is a low-cost, short-range, interoperable, and robust wireless communication technology that operates in the unlicensed 2.4 GHz ISM RF band. The communication protocol has been designed from the outset to be an ultra-low power (ULP), secure wireless communication technology. When between two low-power Bluetooth devices According to the interaction, first of all, we need to establish a connection with each other, and the first time we establish a connection, we need to pair to establish a trust relationship. However, as the application scenarios of the low-power Bluetooth technology become more and more extensive, in the pairing process, the Bluetooth devices of the low-power consumption need to perform the interaction and negotiation of multiple secure communication parameters in clear text, which will be a low-power Bluetooth device. The communication data security poses a great threat. The current solution is to encrypt the communication data on the application layer of the low-power Bluetooth protocol to solve the security problem of low-power Bluetooth communication data.

[0168] This embodiment provides a method and system for secure pairing between low-power Bluetooth devices, and negotiates secure communication parameters before pairing through a third-party wireless security channel to solve low-power Bluetooth communication from a low-power Bluetooth protocol layer. safe question.

[0169] Specifically, as shown in FIG. 8, the low-power Bluetooth device-to-device security pairing system provided by the embodiment includes: a first low-power Bluetooth device and a second low-power Bluetooth device, which pass low power consumption The Bluetooth communication protocol establishes a Bluetooth link communication connection. The first low-power Bluetooth device includes a first main control module, a first low-power Bluetooth communication module, a first wireless communication module, a first main control module, a first low-power Bluetooth communication module, and a first wireless communication module. Connecting; the first main control module includes an algorithm processing module and a random number generating module;

[0170] The second low power Bluetooth device includes a second main control module, a second low power Bluetooth communication module, a second wireless communication module, a second main control module and a second low power Bluetooth communication module, and a second wireless The communication module is electrically connected; the second main control module includes an algorithm processing module and a random number generation module;

[0171] The first low power Bluetooth device and the second low power Bluetooth device communicate through the low power Bluetooth interface and the wireless communication interface.

[0172] For the system shown in FIG. 8, the implementation process of the method on the above system will be described in detail below with reference to FIG. 9, FIG. 10, FIG. 11, and FIG.

[0173] the first low-power Bluetooth device and the second low-power Bluetooth device establish a Bluetooth link communication connection through a low-power Bluetooth protocol;

[0174] After the link communication connection is successfully established, the low-power Bluetooth link control command is used to perform low-power Bluetooth device information interaction between the devices, and the device information includes software version information such as a Bluetooth protocol version number and a Bluetooth protocol sub-version number. And hardware version information such as a Bluetooth device vendor ID number and a device identifier IMEI;

[0175] determining, according to the device information, whether the currently-powered Bluetooth low energy device supports the secure pairing method, if not Supporting, the communication interaction between the subsequent low-power Bluetooth devices is paired according to the pairing mode defined by the low-power Bluetooth protocol. If supported, the first low-power Bluetooth device and the second low-power Bluetooth device establish wireless through the wireless interface. Connect, start the third channel to negotiate the security communication parameters before pairing;

[0176] The first low-power Bluetooth device generates a first random factor, and uses a first preset verification algorithm of the first low-power Bluetooth device to check the first random factor to obtain a first check value;

[0177] The first low-power Bluetooth device encrypts the first random factor and the first check value according to the first preset key to obtain the first ciphertext;

[0178] the first low-power Bluetooth device sends the first ciphertext to the second low-power Bluetooth device through the wireless interface; the second low-power Bluetooth device receives the first secret according to the second preset key pair The text is decrypted to obtain a first random factor and a first check value, and the second preset check algorithm is used to verify the random factor of the first low-power Bluetooth device, and the result of the comparison check is received and received. Whether the first check value matches;

[0179] the second low-power Bluetooth device generates a second random factor after the check value is matched; the second low-power Bluetooth device uses the second check algorithm preset by the second low-power Bluetooth device to the second random The factor is verified to obtain a second check value;

[0180] The second low-power Bluetooth device encrypts the second random factor and the second check value according to the second preset key to obtain the second ciphertext;

[0181] the second low-power Bluetooth device sends the second ciphertext to the first low-power Bluetooth device through the wireless interface; the first Bluetooth device decrypts the received second ciphertext by using the first preset key Obtaining a second random factor and a second check value, and verifying, by using the first preset check algorithm, whether the second random factor is compared with the received second check value;

[0182] The check value is used to ensure that the integrity of the random factor is not tampered with;

[0183] Further, the verification algorithm may be a MAC value verification algorithm or a CRC check algorithm.

[0184] The first preset key and the second preset key may be one or a group of the same key built in the low power Bluetooth device, or may be a set of public and private key pairs;

[0185] the first low-power Bluetooth device performs data irreversible processing on the TK value of the first low-power Bluetooth device end by using the first random factor and the second random factor combination, and assigns the processed data to the first low-power Bluetooth device. Τκ, the second Bluetooth device uses the second random factor and the first random factor combination to perform data irreversible processing on the threshold value of the second Bluetooth device end and assign the processed data to the second low power Bluetooth device. κ.

[0186] The combination of the first random factor and the second random factor is specifically: a set of data of a length of sixteen bytes may be generated by any two sets of data in an agreed manner;

[0187] The data irreversible processing is specifically: generating a unique set of non-invertible data by using the first and second random factors and the threshold; further, the data irreversible processing may be an encryption process, or may be first and second random The factor and the ΤΚ value are hashed.

[0188] The first low-power Bluetooth device and the second low-power Bluetooth device complete the subsequent pairing feature interaction, pairing mode selection, STK key channel encryption, LTK key interaction, etc. according to the low-power Bluetooth protocol, and complete The pairing process.

[0189] In a practical application, the first low-power Bluetooth device and the second low-power Bluetooth device complete the subsequent pairing mode selection according to the low-power Bluetooth protocol;

[0190] The key KEY is performed according to the combination of the first random factor and the second random factor, and the STK is encrypted and the value is assigned to the STK, namely: STK = e ((first random factor II second random factor, STK) );

[0191] The first low-power Bluetooth device and the second low-power Bluetooth device complete the subsequent STK key channel encryption, LTK key interaction and the like according to the low-power Bluetooth protocol, and complete the pairing process.

[0192] In practical applications, the wireless interface may be an RCC interface, may be a 2.4G interface, may be a Zigbee interface, may be a WIFI, or any communication interface that performs wireless transmission communication.

[0193] It can be seen from the implementation of the above embodiments that the method provided by the present invention has the following beneficial effects:

[0194] The present invention provides a terminal pairing method, apparatus and system, terminal, and computer readable storage medium, and negotiates secure communication parameters before pairing with a data communication channel such as Bluetooth through a wireless secure channel, thereby solving the problem between existing terminals. After the data communication channel is paired, the interaction of multiple secure communication parameters and the insecure problem of negotiation are performed in clear text mode, and the pre-pair data communication channel is negotiated through the wireless secure channel without affecting the user experience. The safety communication parameters ensure the security of the data communication channel such as Bluetooth, and improve the user's convenience and user experience satisfaction.

The above is a further detailed description of the present invention in connection with the specific embodiments, and the specific embodiments of the present invention are not limited to the description. It will be apparent to those skilled in the art that the present invention may be practiced without departing from the spirit and scope of the invention.

Claims

Claim

[Claim 1] A terminal pairing method, comprising:

The first terminal generates a first random factor, and uses the preset first check algorithm to check the first random factor to generate a first check value; according to the preset first key pair, the first random value The factor and the first check value are encrypted, and the first ciphertext is generated and sent to the second terminal through the secure wireless channel;

Decrypting the first ciphertext by using the preset second key to obtain the first random factor and the first check value; using the preset second check algorithm for the first The random factor is checked and compared with the first check value; if matched, the second random factor is generated, and the second random factor is verified by using a preset second check algorithm. Generating a second check value; encrypting the second random factor and the second check value according to the second key, generating a second ciphertext, and transmitting the second ciphertext to the first terminal by using the secure wireless channel ;

Decrypting the second ciphertext by using the first key to obtain the second random factor and the second check value; using the first check algorithm to use the second random factor Performing a check and performing a comparison check with the second check value; if matching, using a combination of the first random factor and the second random factor to perform an original communication key of the data communication channel thereof Irreversible processing and replacement, generating a new communication key; the second terminal uses the combination of the second random factor and the first random factor to irreversibly process and replace the original communication key of the data communication channel to generate New communication key;

The first terminal and the second terminal select a pairing mode of the data communication channel, and use the new communication key to perform channel encryption of the data communication channel.

[Claim 2] The terminal pairing method according to claim 1, wherein the first key and the second key are the same key or public and private stored in the first terminal and the second terminal. Key pair

[Claim 3] The terminal pairing method according to claim 1, wherein the first verification algorithm and the second verification algorithm are message authentication code verification algorithms or loops using the same parameters. Check code verification algorithm.

[Claim 4] The terminal pairing method according to claim 1, wherein the combination of the first random factor and the second random factor is: the first random factor and the second random factor are generated according to an agreed manner Preset length data.

[Claim 5] The terminal pairing method according to claim 1, wherein the irreversible processing of the original communication key of the data communication channel comprises: encrypting the original communication key using the combination Or performing a hash value operation with the original communication key using the combination to generate unique irreversible data as the new communication key.

[Claim 6] The terminal pairing method according to any one of claims 1 to 5, wherein before the first terminal generates the first random factor, the method further includes: acquiring device information of the second terminal, according to Determining, by the device information, whether the peer end supports secure pairing; if not, the first terminal and the second terminal select a pairing mode of the data communication channel, and use the original communication key to perform channel encryption of the data communication channel. And if supported, the first terminal and the second terminal respectively generate a new communication key, select a pairing mode of the data communication channel, and perform channel encryption of the data communication channel by using the new communication key.

[Claim 7] The terminal pairing method according to any one of claims 1 to 5, wherein the first terminal and the second terminal select a pairing mode of a data communication channel, and use a new communication key for data communication. Channel encryption for the channel includes:

The first terminal performs data irreversible processing and replacement on the temporary key value of the first terminal by using the first random factor and the second random factor combination, and the second terminal uses the second random factor and the first random factor combination to the second terminal. The Linyi key value is used for irreversible processing and replacement of data;

The first terminal and the second terminal select a pairing mode according to a low power Bluetooth protocol; the first terminal and the second terminal encrypt and replace the short-term key by using a combination of the first random factor and the second random factor;

The first terminal and the second terminal perform short-term key and long-term key interaction according to the Bluetooth low energy protocol.

[Claim 8] A terminal pairing system, comprising: a first terminal and a second terminal, wherein The first terminal is configured to generate a first random factor, and use the preset first check algorithm to check the first random factor to generate a first check value; according to the preset first key pair Encoding the first random factor and the first check value to generate a first ciphertext, and sending the first ciphertext to the second terminal by using a secure wireless channel;

The second terminal is configured to decrypt the first ciphertext by using a preset second key, obtain the first random factor and a first check value, and use the preset second check algorithm to The first random factor is checked and compared with the first check value; if matched, a second random factor is generated, and the second random factor is determined by using a preset second check algorithm. And generating a second check value; encrypting the second random factor and the second check value according to the second key, generating a second ciphertext, and sending the second ciphertext through the secure wireless channel a terminal

The first terminal is further configured to decrypt the second ciphertext by using the first key, to obtain the second random factor and a second check value, and use the first check algorithm to Two random factors are checked and compared with the second check value; if matched, the original communication of the data communication channel is used by using the combination of the first random factor and the second random factor The key is irreversibly processed and replaced to generate a new communication key;

The second terminal is further configured to perform irreversible processing and replacement on the original communication key of the data communication channel by using the combination of the second random factor and the first random factor to generate a new communication key;

The first terminal and the second terminal are further configured to select a pairing mode of the data communication channel, and use the new communication key to perform channel encryption of the data communication channel.

[Claim 9] The terminal pairing system according to claim 8, wherein the first terminal and the second terminal are both Bluetooth low energy devices.

[Claim 10] The terminal pairing system according to claim 9, wherein the first terminal is configured to perform data on a temporary key value of the first terminal by using the first random factor and the second random factor combination. Irreversible processing and replacement, the second terminal is configured to perform irreversible processing and replacement on the temporary key value of the second terminal by using the second random factor and the first random factor combination; The first terminal and the second terminal are configured to select a pairing mode according to a low power Bluetooth protocol; the first terminal and the second terminal are configured to encrypt and replace the short-term key by using a combination of the first random factor and the second random factor The first terminal and the second terminal are configured to perform short-term key key channel encryption and long-term key interaction according to the low-power Bluetooth protocol.

[Claim 11] The terminal pairing system according to claim 8, wherein the data communication channel is a Bluetooth channel; the data communication channel is a limited domain communication interface, a 2.4G interface, and a low power local area network Zigbee interface. At least one of the WiFi interfaces.

[Claim 12] The terminal pairing system according to any one of claims 8 to 11, wherein the first terminal and the second terminal are further configured to: acquire device information of the peer end, according to the device Determining whether the peer supports secure pairing; if not, the first terminal and the second terminal select a pairing mode of the data communication channel, and use the original communication key to perform channel encryption of the data communication channel; And the first terminal and the second terminal respectively generate a new communication key, select a pairing mode of the data communication channel, and perform channel encryption of the data communication channel by using the new communication key.

[Claim 13] A terminal pairing method, comprising:

Generating a first random factor, verifying the first random factor by using a preset first check algorithm, and generating a first check value; according to the preset first key pair, the first random factor and the first A check value is encrypted to generate a first ciphertext and sent to an external terminal through a secure wireless channel;

Decrypting the second ciphertext by using the first key to obtain a second random factor and a second check value; using the first check algorithm to verify the second random factor, and The second check value is compared and verified; if matched, the combination of the first random factor and the second random factor is used to irreversibly process and replace the original communication key of the data communication channel to generate a new one. Communication key

The pairing mode of the data communication channel is selected with the external terminal, and the channel encryption of the data communication channel is performed using the new communication key.

[Claim 14] The terminal pairing method according to claim 13, wherein the first random factor The combination with the second random factor is: the first random factor and the second random factor generate data of a preset length in an agreed manner.

The terminal pairing method according to claim 13, wherein the irreversible processing of the original communication key of the data communication channel comprises: encrypting the original communication key using the combination, or using the Combining the original communication key with a hash value operation to generate unique irreversible data as the new communication key.

The terminal pairing method according to claim 13, wherein before the generating the first random factor, the method further includes: acquiring device information of the external terminal, and determining, according to the device information, whether the external terminal supports secure pairing; If not, the external terminal selects a pairing mode of the data communication channel, and uses the original communication key to perform channel encryption of the data communication channel; if supported, generates a new communication key separately from the external terminal And selecting a pairing mode of the data communication channel, and using the new communication key to perform channel encryption of the data communication channel.

The terminal pairing method according to any one of claims 13 to 16, wherein the external terminal selects a pairing mode of the data communication channel, and uses the new communication key to perform a channel of a data communication channel. Encryption includes:

And using the first random factor and the second random factor combination to perform data irreversible processing and replacement on the temporary key value; and selecting, by the external terminal, the pairing mode according to the low power Bluetooth protocol;

The short-term key is encrypted and replaced using a combination of the first random factor and the second random factor;

The short-term key and the long-term key are exchanged with the external terminal in accordance with the Bluetooth Low Energy Protocol.

A terminal pairing method, comprising:

Receiving the first ciphertext sent by the external terminal through the secure wireless channel;

Decrypting the first ciphertext using a preset second key to obtain a first random factor and a first check value;

The first random factor is verified using a preset second verification algorithm, and the first A check value is compared and verified;

If yes, generate a second random factor, and use the preset second check algorithm to check the second random factor to generate a second check value;

Encrypting the second random factor and the second check value according to the second key, generating a second ciphertext, and transmitting to the external terminal by using the secure wireless channel; using the second random factor Combining with the first random factor, irreversibly processing and replacing the original communication key of the data communication channel to generate a new communication key; selecting a pairing mode of the data communication channel, using the new communication key Channel encryption of the data communication channel.

The terminal pairing method according to claim 18, wherein the combination of the first random factor and the second random factor is: the first random factor and the second random factor generate data of a preset length according to an agreed manner .

The terminal pairing method according to claim 18, wherein the irreversible processing of the original communication key of the data communication channel comprises: encrypting the original communication key using the combination, or using the Combining the original communication key with a hash value operation to generate unique irreversible data as the new communication key.

The terminal pairing method according to any one of claims 18 to 20, wherein the selecting a pairing mode of the data communication channel and performing channel encryption of the data communication channel using the new communication key comprises:

Data non-reversible processing and replacement of the temporary key value of the second terminal by using the second random factor and the first random factor combination;

Select the pairing mode according to the Bluetooth protocol of low power consumption;

Encrypting and replacing the short-term key using a combination of the second random factor and the first random factor;

A terminal, comprising: a memory, a processor, an input/output bus connecting the memory and the processor, and being stored on the memory and on the processor The running terminal pairing program, which is executed by the processor, implements the following steps:

[Claim 23] The terminal according to claim 22, wherein the terminal pairing program is executed by the processor, the implementation step of: encrypting the original communication key by using the combination, or using the The combination performs a hash value operation with the original communication key to generate unique irreversible data as the new communication key.

[Claim 24] The terminal according to claim 22, wherein the terminal pairing procedure is executed by the processor, and the following steps are implemented: acquiring device information of the external terminal before generating the first random factor Determining, according to the device information, whether the external terminal supports secure pairing; if not, selecting a pairing mode of the data communication channel with the external terminal, and performing channel encryption of the data communication channel by using the original communication key And if supported, generating a new communication key with the external terminal, selecting a pairing mode of the data communication channel, and performing channel encryption of the data communication channel using the new communication key.

[Claim 25] The terminal according to any one of claims 22 to 24, wherein the terminal pairing program is executed by the processor, and the following steps are implemented:

Data for the Linyi key value is not available using the first random factor and the second random factor combination Reverse processing and replacement;

Selecting a pairing mode with the external terminal according to a low power Bluetooth protocol specification;

[Claim 26] A terminal, comprising: a memory, a processor, an input/output bus connecting the memory and the processor, and a terminal stored on the memory and operable on the processor a pairing procedure, the terminal pairing procedure being executed by the processor, implementing the following steps:

Receiving, by the secure wireless channel, the first ciphertext sent by the external terminal; decrypting the first ciphertext by using the preset second key, to obtain the first random factor and the first check value;

The first random factor is verified by using a preset second check algorithm, and compared with the first check value;

[Claim 27] The terminal according to claim 26, wherein the terminal pairing program is executed by the processor, the implementation step of: encrypting the original communication key by using the combination, or using the The combination performs a hash value operation with the original communication key to generate unique irreversible data as the new communication key.

[Claim 28] The terminal according to claim 26 or 27, wherein the terminal pairing program is The processor executes 吋 to implement the following steps:

A computer readable storage medium, wherein the computer readable storage medium stores one or more programs, and the one or more programs are executed to implement the following steps to generate a first random factor, using a preset The first check algorithm performs verification on the first random factor to generate a first check value; and encrypts the first random factor and the first check value according to the preset first key to generate a first a ciphertext and sent to the external terminal through a secure wireless channel;

The pairing mode of the data communication channel is selected with the external terminal, and the channel encryption of the data communication channel is performed using the new communication key. 10. Type claim 10 here. The computer readable storage medium of claim 29, wherein the one or more programs are executed, the implementing step of: encrypting the original communication key using the combination, or using the combination and The original communication key performs a hash value operation to generate unique irreversible data as the new communication key.

A computer readable storage medium according to claim 29, wherein said one or The plurality of programs are executed to implement the following steps: before generating the first random factor, acquiring device information of the external terminal, determining, according to the device information, whether the external terminal supports secure pairing; if not, The external terminal selects a pairing mode of the data communication channel, and uses the original communication key to perform channel encryption of the data communication channel; if supported, generates a new communication key with the external terminal, and selects the data communication channel Pairing mode, using the new communication key for channel encryption of the data communication channel.

[Claim 32] The computer readable storage medium according to any one of claims 29 to 31, wherein the one or more programs are executed to implement the following steps:

Data non-reversible processing and replacement of the Linyi key value using the first random factor and the second random factor combination;

[Claim 33] A computer readable storage medium, wherein the computer readable storage medium stores one or more programs, and the one or more programs are executed to implement the following steps

Encrypting the second random factor and the second check value according to the second key, generating a second ciphertext, and transmitting to the external terminal by using the secure wireless channel; using the second random factor a data communication letter with the first random factor The original communication key of the channel is irreversibly processed and replaced to generate a new communication key;

A pairing mode of the data communication channel is selected, and channel encryption of the data communication channel is performed using the new communication key.

[Claim 34] The computer readable storage medium of claim 33, wherein the one or more programs are executed to: perform the following steps: encrypting the original communication key using the combination, Or performing a hash value operation with the original communication key using the combination to generate unique irreversible data as the new communication key.

[Claim 35] The computer readable storage medium of claim 33 or 34, wherein the one or more programs are executed to implement the following steps:

[Claim 36] A terminal pairing device, comprising: a first processing module, a first communication module, and a first pairing module, wherein

The first processing module is configured to generate a first random factor, and use the preset first check algorithm to check the first random factor to generate a first check value; according to the preset first key pair The first random factor and the first check value are encrypted to generate a first ciphertext; the first communication module is configured to send the first ciphertext to an external terminal through a secure wireless channel, and receive the device through a secure wireless channel. a second ciphertext sent by the external terminal; the first processing module is further configured to decrypt the second ciphertext by using the first key, to obtain a second random factor and a second check value; The first verification algorithm checks the second random factor and compares and verifies with the second check value;

The first pairing module is configured to: if matched, use the combination of the first random factor and the second random factor to perform irreversible processing on an original communication key of the data communication channel and Alternatively, generating a new communication key; selecting a pairing mode of the data communication channel with the external terminal, and performing channel encryption of the data communication channel using the new communication key.

The terminal pairing device according to claim 36, wherein the combination of the first random factor and the second random factor is: the first random factor and the second random factor generate data of a preset length according to an agreed manner .

The terminal pairing device according to claim 36, wherein the first processing module is specifically configured to: encrypt the original communication key by using the combination, or use the combination to communicate with the original communication key The key performs a hash value operation to generate unique irreversible data as the new communication key.

The terminal pairing device according to claim 36, wherein the first processing module is configured to: obtain device information of the external terminal, and determine, according to the device information, before generating the first random factor Whether the external terminal supports secure pairing; if not, selecting the pairing mode of the data communication channel with the external terminal, and using the original communication key to perform channel encryption of the data communication channel; if supported, the external The terminal respectively generates a new communication key, selects a pairing mode of the data communication channel, and performs channel encryption of the data communication channel using the new communication key.

The terminal pairing device according to any one of claims 36 to 39, wherein the first pairing module is specifically configured to: use the first random factor and the second random factor combination to perform data irreversible on the temporary key value. Processing and replacing; selecting a pairing mode according to the low-power Bluetooth protocol specified by the external terminal; encrypting and replacing the short-term key by using a combination of the first random factor and the second random factor; and performing low-power with the external terminal The Bluetooth-consuming protocol specifies the interaction of short-term and long-term keys.

A terminal pairing device, comprising: a second processing module, a second communication module, and a second pairing module, where

The second communication module is configured to receive, by using a secure wireless channel, the first ciphertext sent by the external terminal;

The second processing module is configured to decrypt the first ciphertext by using a preset second key, obtain a first random factor and a first check value, and use the preset second check algorithm to One The random factor is checked and compared with the first check value; if matched, the second random factor is generated, and the second random factor is verified by using a preset second check algorithm. Generating a second check value; encrypting the second random factor and the second check value according to the second key to generate a second ciphertext;

The second communication module is further configured to send the second ciphertext to the external terminal by using the secure wireless channel;

The second pairing module is configured to perform irreversible processing and replacement on the original communication key of the data communication channel by using the combination of the second random factor and the first random factor to generate a new communication key; A pairing mode of the data communication channel, using the new communication key for channel encryption of the data communication channel.

[Claim 42] The terminal pairing device according to claim 41, wherein the combination of the first random factor and the second random factor is: the first random factor and the second random factor are generated according to an agreed manner Preset length data.

[Claim 43] The terminal pairing device according to claim 41, wherein the second pairing module is specifically configured to: encrypt the original communication key by using the combination, or use the combination and The original communication key performs a hash value operation to generate unique irreversible data as the new communication key.

[Claim 44] The terminal pairing device according to any one of claims 41 to 43, wherein the second pairing module is specifically configured to: use a second random factor and a first random factor combination to pair The temporary key value of the terminal is irreversibly processed and replaced; the pairing mode is selected according to the Bluetooth protocol of the low power consumption; and the short-term key is encrypted and replaced by using the combination of the second random factor and the first random factor; The external terminal performs the interaction of the short-term key and the long-term key according to the low-power Bluetooth protocol.