WO2022237409A1 - 蓝牙设备以及密钥确定系统 - Google Patents

蓝牙设备以及密钥确定系统 Download PDF

Info

Publication number
WO2022237409A1
WO2022237409A1 PCT/CN2022/085729 CN2022085729W WO2022237409A1 WO 2022237409 A1 WO2022237409 A1 WO 2022237409A1 CN 2022085729 W CN2022085729 W CN 2022085729W WO 2022237409 A1 WO2022237409 A1 WO 2022237409A1
Authority
WO
WIPO (PCT)
Prior art keywords
bluetooth
sub
audio output
bluetooth sub
terminal
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2022/085729
Other languages
English (en)
French (fr)
Inventor
许超杰
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Guangdong Oppo Mobile Telecommunications Corp Ltd
Original Assignee
Guangdong Oppo Mobile Telecommunications Corp Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Guangdong Oppo Mobile Telecommunications Corp Ltd filed Critical Guangdong Oppo Mobile Telecommunications Corp Ltd
Publication of WO2022237409A1 publication Critical patent/WO2022237409A1/zh
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04M—TELEPHONIC COMMUNICATION
    • H04M1/00—Substation equipment, e.g. for use by subscribers
    • H04M1/60—Substation equipment, e.g. for use by subscribers including speech amplifiers
    • H04M1/6033—Substation equipment, e.g. for use by subscribers including speech amplifiers for providing handsfree use or a loudspeaker mode in telephone sets
    • H04M1/6041—Portable telephones adapted for handsfree use
    • H04M1/6058—Portable telephones adapted for handsfree use involving the use of a headset accessory device connected to the portable telephone
    • H04M1/6066—Portable telephones adapted for handsfree use involving the use of a headset accessory device connected to the portable telephone including a wireless connection
    • G—PHYSICS
    • G02—OPTICS
    • G02F—OPTICAL DEVICES OR ARRANGEMENTS FOR THE CONTROL OF LIGHT BY MODIFICATION OF THE OPTICAL PROPERTIES OF THE MEDIA OF THE ELEMENTS INVOLVED THEREIN; NON-LINEAR OPTICS; FREQUENCY-CHANGING OF LIGHT; OPTICAL LOGIC ELEMENTS; OPTICAL ANALOGUE/DIGITAL CONVERTERS
    • G02F1/00—Devices or arrangements for the control of the intensity, colour, phase, polarisation or direction of light arriving from an independent light source, e.g. switching, gating or modulating; Non-linear optics
    • G02F1/01—Devices or arrangements for the control of the intensity, colour, phase, polarisation or direction of light arriving from an independent light source, e.g. switching, gating or modulating; Non-linear optics for the control of the intensity, phase, polarisation or colour 
    • G02F1/13—Devices or arrangements for the control of the intensity, colour, phase, polarisation or direction of light arriving from an independent light source, e.g. switching, gating or modulating; Non-linear optics for the control of the intensity, phase, polarisation or colour  based on liquid crystals, e.g. single liquid crystal display cells
    • G02F1/133—Constructional arrangements; Operation of liquid crystal cells; Circuit arrangements
    • G02F1/1333—Constructional arrangements; Manufacturing methods
    • G02F1/1337—Surface-induced orientation of the liquid crystal molecules, e.g. by alignment layers
    • G02F1/133711—Surface-induced orientation of the liquid crystal molecules, e.g. by alignment layers by organic films, e.g. polymeric films
    • G—PHYSICS
    • G02—OPTICS
    • G02F—OPTICAL DEVICES OR ARRANGEMENTS FOR THE CONTROL OF LIGHT BY MODIFICATION OF THE OPTICAL PROPERTIES OF THE MEDIA OF THE ELEMENTS INVOLVED THEREIN; NON-LINEAR OPTICS; FREQUENCY-CHANGING OF LIGHT; OPTICAL LOGIC ELEMENTS; OPTICAL ANALOGUE/DIGITAL CONVERTERS
    • G02F1/00—Devices or arrangements for the control of the intensity, colour, phase, polarisation or direction of light arriving from an independent light source, e.g. switching, gating or modulating; Non-linear optics
    • G02F1/01—Devices or arrangements for the control of the intensity, colour, phase, polarisation or direction of light arriving from an independent light source, e.g. switching, gating or modulating; Non-linear optics for the control of the intensity, phase, polarisation or colour 
    • G02F1/13—Devices or arrangements for the control of the intensity, colour, phase, polarisation or direction of light arriving from an independent light source, e.g. switching, gating or modulating; Non-linear optics for the control of the intensity, phase, polarisation or colour  based on liquid crystals, e.g. single liquid crystal display cells
    • G02F1/133—Constructional arrangements; Operation of liquid crystal cells; Circuit arrangements
    • G02F1/1333—Constructional arrangements; Manufacturing methods
    • G02F1/1335—Structural association of cells with optical devices, e.g. polarisers or reflectors
    • G02F1/133509—Filters, e.g. light shielding masks
    • G02F1/133512—Light shielding layers, e.g. black matrix
    • G—PHYSICS
    • G02—OPTICS
    • G02F—OPTICAL DEVICES OR ARRANGEMENTS FOR THE CONTROL OF LIGHT BY MODIFICATION OF THE OPTICAL PROPERTIES OF THE MEDIA OF THE ELEMENTS INVOLVED THEREIN; NON-LINEAR OPTICS; FREQUENCY-CHANGING OF LIGHT; OPTICAL LOGIC ELEMENTS; OPTICAL ANALOGUE/DIGITAL CONVERTERS
    • G02F1/00—Devices or arrangements for the control of the intensity, colour, phase, polarisation or direction of light arriving from an independent light source, e.g. switching, gating or modulating; Non-linear optics
    • G02F1/01—Devices or arrangements for the control of the intensity, colour, phase, polarisation or direction of light arriving from an independent light source, e.g. switching, gating or modulating; Non-linear optics for the control of the intensity, phase, polarisation or colour 
    • G02F1/13—Devices or arrangements for the control of the intensity, colour, phase, polarisation or direction of light arriving from an independent light source, e.g. switching, gating or modulating; Non-linear optics for the control of the intensity, phase, polarisation or colour  based on liquid crystals, e.g. single liquid crystal display cells
    • G02F1/133—Constructional arrangements; Operation of liquid crystal cells; Circuit arrangements
    • G02F1/1333—Constructional arrangements; Manufacturing methods
    • G02F1/1337—Surface-induced orientation of the liquid crystal molecules, e.g. by alignment layers
    • G02F1/133753—Surface-induced orientation of the liquid crystal molecules, e.g. by alignment layers with different alignment orientations or pretilt angles on a same surface, e.g. for grey scale or improved viewing angle
    • G—PHYSICS
    • G02—OPTICS
    • G02F—OPTICAL DEVICES OR ARRANGEMENTS FOR THE CONTROL OF LIGHT BY MODIFICATION OF THE OPTICAL PROPERTIES OF THE MEDIA OF THE ELEMENTS INVOLVED THEREIN; NON-LINEAR OPTICS; FREQUENCY-CHANGING OF LIGHT; OPTICAL LOGIC ELEMENTS; OPTICAL ANALOGUE/DIGITAL CONVERTERS
    • G02F1/00—Devices or arrangements for the control of the intensity, colour, phase, polarisation or direction of light arriving from an independent light source, e.g. switching, gating or modulating; Non-linear optics
    • G02F1/01—Devices or arrangements for the control of the intensity, colour, phase, polarisation or direction of light arriving from an independent light source, e.g. switching, gating or modulating; Non-linear optics for the control of the intensity, phase, polarisation or colour 
    • G02F1/13—Devices or arrangements for the control of the intensity, colour, phase, polarisation or direction of light arriving from an independent light source, e.g. switching, gating or modulating; Non-linear optics for the control of the intensity, phase, polarisation or colour  based on liquid crystals, e.g. single liquid crystal display cells
    • G02F1/133—Constructional arrangements; Operation of liquid crystal cells; Circuit arrangements
    • G02F1/1333—Constructional arrangements; Manufacturing methods
    • G02F1/1343—Electrodes
    • G02F1/134309—Electrodes characterised by their geometrical arrangement
    • G—PHYSICS
    • G02—OPTICS
    • G02F—OPTICAL DEVICES OR ARRANGEMENTS FOR THE CONTROL OF LIGHT BY MODIFICATION OF THE OPTICAL PROPERTIES OF THE MEDIA OF THE ELEMENTS INVOLVED THEREIN; NON-LINEAR OPTICS; FREQUENCY-CHANGING OF LIGHT; OPTICAL LOGIC ELEMENTS; OPTICAL ANALOGUE/DIGITAL CONVERTERS
    • G02F1/00—Devices or arrangements for the control of the intensity, colour, phase, polarisation or direction of light arriving from an independent light source, e.g. switching, gating or modulating; Non-linear optics
    • G02F1/01—Devices or arrangements for the control of the intensity, colour, phase, polarisation or direction of light arriving from an independent light source, e.g. switching, gating or modulating; Non-linear optics for the control of the intensity, phase, polarisation or colour 
    • G02F1/13—Devices or arrangements for the control of the intensity, colour, phase, polarisation or direction of light arriving from an independent light source, e.g. switching, gating or modulating; Non-linear optics for the control of the intensity, phase, polarisation or colour  based on liquid crystals, e.g. single liquid crystal display cells
    • G02F1/133—Constructional arrangements; Operation of liquid crystal cells; Circuit arrangements
    • G02F1/1333—Constructional arrangements; Manufacturing methods
    • G02F1/1343—Electrodes
    • G02F1/13439—Electrodes characterised by their electrical, optical, physical properties; materials therefor; method of making
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/30—Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
    • H04W12/043—Key management, e.g. using generic bootstrapping architecture [GBA] using a trusted network node as an anchor
    • H04W12/0431—Key distribution or pre-distribution; Key agreement
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/40—Security arrangements using identity modules
    • H04W12/47—Security arrangements using identity modules using near field communication [NFC] or radio frequency identification [RFID] modules
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/80—Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
    • G—PHYSICS
    • G02—OPTICS
    • G02F—OPTICAL DEVICES OR ARRANGEMENTS FOR THE CONTROL OF LIGHT BY MODIFICATION OF THE OPTICAL PROPERTIES OF THE MEDIA OF THE ELEMENTS INVOLVED THEREIN; NON-LINEAR OPTICS; FREQUENCY-CHANGING OF LIGHT; OPTICAL LOGIC ELEMENTS; OPTICAL ANALOGUE/DIGITAL CONVERTERS
    • G02F1/00—Devices or arrangements for the control of the intensity, colour, phase, polarisation or direction of light arriving from an independent light source, e.g. switching, gating or modulating; Non-linear optics
    • G02F1/01—Devices or arrangements for the control of the intensity, colour, phase, polarisation or direction of light arriving from an independent light source, e.g. switching, gating or modulating; Non-linear optics for the control of the intensity, phase, polarisation or colour 
    • G02F1/13—Devices or arrangements for the control of the intensity, colour, phase, polarisation or direction of light arriving from an independent light source, e.g. switching, gating or modulating; Non-linear optics for the control of the intensity, phase, polarisation or colour  based on liquid crystals, e.g. single liquid crystal display cells
    • G02F1/133—Constructional arrangements; Operation of liquid crystal cells; Circuit arrangements
    • G02F1/1333—Constructional arrangements; Manufacturing methods
    • G02F1/1337—Surface-induced orientation of the liquid crystal molecules, e.g. by alignment layers
    • G02F1/133711—Surface-induced orientation of the liquid crystal molecules, e.g. by alignment layers by organic films, e.g. polymeric films
    • G02F1/133715—Surface-induced orientation of the liquid crystal molecules, e.g. by alignment layers by organic films, e.g. polymeric films by first depositing a monomer
    • G—PHYSICS
    • G02—OPTICS
    • G02F—OPTICAL DEVICES OR ARRANGEMENTS FOR THE CONTROL OF LIGHT BY MODIFICATION OF THE OPTICAL PROPERTIES OF THE MEDIA OF THE ELEMENTS INVOLVED THEREIN; NON-LINEAR OPTICS; FREQUENCY-CHANGING OF LIGHT; OPTICAL LOGIC ELEMENTS; OPTICAL ANALOGUE/DIGITAL CONVERTERS
    • G02F1/00—Devices or arrangements for the control of the intensity, colour, phase, polarisation or direction of light arriving from an independent light source, e.g. switching, gating or modulating; Non-linear optics
    • G02F1/01—Devices or arrangements for the control of the intensity, colour, phase, polarisation or direction of light arriving from an independent light source, e.g. switching, gating or modulating; Non-linear optics for the control of the intensity, phase, polarisation or colour 
    • G02F1/13—Devices or arrangements for the control of the intensity, colour, phase, polarisation or direction of light arriving from an independent light source, e.g. switching, gating or modulating; Non-linear optics for the control of the intensity, phase, polarisation or colour  based on liquid crystals, e.g. single liquid crystal display cells
    • G02F1/133—Constructional arrangements; Operation of liquid crystal cells; Circuit arrangements
    • G02F1/1333—Constructional arrangements; Manufacturing methods
    • G02F1/1337—Surface-induced orientation of the liquid crystal molecules, e.g. by alignment layers
    • G02F1/133753—Surface-induced orientation of the liquid crystal molecules, e.g. by alignment layers with different alignment orientations or pretilt angles on a same surface, e.g. for grey scale or improved viewing angle
    • G02F1/133761—Surface-induced orientation of the liquid crystal molecules, e.g. by alignment layers with different alignment orientations or pretilt angles on a same surface, e.g. for grey scale or improved viewing angle with different pretilt angles
    • G—PHYSICS
    • G02—OPTICS
    • G02F—OPTICAL DEVICES OR ARRANGEMENTS FOR THE CONTROL OF LIGHT BY MODIFICATION OF THE OPTICAL PROPERTIES OF THE MEDIA OF THE ELEMENTS INVOLVED THEREIN; NON-LINEAR OPTICS; FREQUENCY-CHANGING OF LIGHT; OPTICAL LOGIC ELEMENTS; OPTICAL ANALOGUE/DIGITAL CONVERTERS
    • G02F2202/00—Materials and properties
    • G02F2202/02—Materials and properties organic material
    • G02F2202/022—Materials and properties organic material polymeric
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04M—TELEPHONIC COMMUNICATION
    • H04M2250/00—Details of telephonic subscriber devices
    • H04M2250/02—Details of telephonic subscriber devices including a Bluetooth® interface
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04R—LOUDSPEAKERS, MICROPHONES, GRAMOPHONE PICK-UPS OR LIKE ACOUSTIC ELECTROMECHANICAL TRANSDUCERS; ELECTRIC HEARING AIDS; PUBLIC ADDRESS SYSTEMS
    • H04R1/00—Details of transducers, loudspeakers or microphones
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04R—LOUDSPEAKERS, MICROPHONES, GRAMOPHONE PICK-UPS OR LIKE ACOUSTIC ELECTROMECHANICAL TRANSDUCERS; ELECTRIC HEARING AIDS; PUBLIC ADDRESS SYSTEMS
    • H04R2420/00—Details of connection covered by H04R, not provided for in its groups
    • H04R2420/07—Applications of wireless loudspeakers or wireless microphones

Definitions

  • the Bluetooth headset includes a first sub-earphone and a second sub-earphone.
  • the first sub-earphone needs to send a link key (Link Key) to the second sub-earphone or Send the session key (Session Key) to the second sub-earphone, so that the second sub-earphone can correctly decrypt the data packets on the monitoring link.
  • Link Key link key
  • Session Key session key
  • Embodiments of the present application provide a bluetooth device and a system for determining a key. Described technical scheme is as follows:
  • a first wireless audio output device is provided, and the first wireless audio output device is used for:
  • the output device monitors and obtains the public key of the audio source, and determines the audio frequency on the second wireless link based on the private key in the public-private key pair and the public key of the audio source. link information.
  • a second wireless audio output device is provided, and the second wireless audio output device is used for:
  • the second wireless link is a link through which the first wireless audio output device communicates with the audio source
  • Link information on the second wireless link is determined based on the private key in the public-private key pair and the public key of the audio source.
  • a Bluetooth device includes n Bluetooth sub-devices, the n is an integer greater than 1, and the n Bluetooth sub-devices have the same public-private key pair;
  • the first Bluetooth sub-device is configured to send monitoring indication information to the second Bluetooth sub-device, where the monitoring indication information is used to instruct the second Bluetooth sub-device to monitor the interaction information between the first Bluetooth sub-device and the terminal;
  • the first Bluetooth sub-device is further configured to send the public key in the public-private key pair to the terminal, and receive the terminal public key from the terminal;
  • the second Bluetooth sub-device is configured to monitor and obtain the terminal public key after receiving the monitoring instruction information from the first Bluetooth sub-device; based on the terminal public key and the public-private key pair a private key for determining link information between the terminal and the first Bluetooth sub-device;
  • the first Bluetooth sub-device refers to at least one Bluetooth sub-device in the n Bluetooth sub-device
  • the second Bluetooth sub-device refers to the n Bluetooth sub-device except the first Bluetooth sub-device Any Bluetooth sub-device among other Bluetooth sub-devices other than the device.
  • a key determination system includes a Bluetooth device and a terminal, the Bluetooth device includes n Bluetooth sub-devices, the n is an integer greater than 1, and the n Two Bluetooth sub-devices have the same public-private key pair;
  • the first Bluetooth sub-device is configured to send monitoring indication information to a second Bluetooth sub-device, where the monitoring indication information is used to instruct the second Bluetooth sub-device to monitor the interaction between the first Bluetooth sub-device and the terminal information;
  • the first Bluetooth sub-device is further configured to send the public key in the public-private key pair to the terminal;
  • the terminal is configured to send a terminal public key to the first Bluetooth sub-device
  • the second Bluetooth sub-device is configured to monitor and obtain the terminal public key after receiving the monitoring instruction information from the first Bluetooth sub-device; based on the terminal public key and the public-private key pair a private key for determining link information between the terminal and the first Bluetooth sub-device;
  • the first Bluetooth sub-device refers to at least one Bluetooth sub-device in the n Bluetooth sub-device
  • the second Bluetooth sub-device refers to the n Bluetooth sub-device except the first Bluetooth sub-device Any Bluetooth sub-device among other Bluetooth sub-devices other than the device.
  • FIG. 1 is a schematic diagram of an application scenario of a Bluetooth device and a terminal provided by an embodiment of the present application
  • FIG. 2 is a schematic diagram of a Bluetooth device provided by an embodiment of the present application.
  • FIG. 3 is a schematic diagram of interaction between a security manager and a Bluetooth sub-device provided by an embodiment of the present application
  • FIG. 4 is a schematic diagram of interaction between a Bluetooth sub-device and a terminal provided by an embodiment of the present application
  • Fig. 5 is a schematic diagram of a key determination system provided by an embodiment of the present application.
  • FIG. 1 shows a schematic diagram of an application scenario of a Bluetooth device and a terminal provided by an embodiment of the present application.
  • the Bluetooth device 110 refers to a device with a Bluetooth function, and the Bluetooth device 110 includes n Bluetooth sub-devices 111 , where n is an integer greater than 1.
  • a Bluetooth sub-device refers to a device that has a Bluetooth chip and can independently communicate with a terminal (or called a "terminal device").
  • the structures of the Bluetooth sub-devices 111 included in the Bluetooth device 110 are the same; in another example, the structures of the Bluetooth sub-devices 111 included in the Bluetooth device 110 are different.
  • the manufacturers of the Bluetooth sub-devices 111 included in the Bluetooth device 110 are the same.
  • the Bluetooth device 110 includes a Bluetooth earphone.
  • the Bluetooth earphone includes the following Bluetooth sub-devices: a first Bluetooth sub-earphone, a second Bluetooth sub-earphone, and a charging box.
  • the Bluetooth device 110 includes a Bluetooth stereo speaker.
  • the Bluetooth stereo speaker includes the following Bluetooth sub-devices: a first Bluetooth sub-speaker, a second Bluetooth sub-speaker, etc. (the number of Bluetooth sub-speakers included in the Bluetooth stereo speaker in this application not limited).
  • the terminal 120 refers to an electronic device that performs Bluetooth communication with the Bluetooth device 110 .
  • the terminal 120 refers to electronic equipment such as a mobile phone, a television, a tablet computer, and a PC (Personal Computer, personal computer).
  • the terminal 120 may be used to provide data to the Bluetooth device 110 , for example, the terminal 120 may be used to provide audio data to the Bluetooth device 110 .
  • the terminal 120 communicates with the Bluetooth device 110 through Bluetooth, and the terminal 120 communicates with each Bluetooth sub-device 111 through Bluetooth.
  • the Bluetooth sub-device 111 can communicate with the Bluetooth sub-device 111 in a wired or wireless manner. Devices 111 may communicate via Bluetooth.
  • a Bluetooth (BT) device 200 includes n Bluetooth sub-devices 201, where n is an integer greater than 1, and the n Bluetooth sub-devices have the same public-private key pair.
  • the n Bluetooth sub-devices may be Bluetooth sub-device 1, Bluetooth sub-device 2, Bluetooth sub-device 3...Bluetooth sub-device n.
  • a wireless link is a communication term that refers to a wireless physical link that connects one or more devices or communication controllers.
  • the wireless link can be realized by technologies such as Bluetooth, WiFi (Wireless Fidelity, wireless fidelity), cellular communication, etc.
  • the wireless link is mainly realized in the form of Bluetooth.
  • the first wireless audio output device may be a first Bluetooth sub-device
  • the second wireless audio output device may be a second Bluetooth sub-device
  • the audio source may be a terminal.
  • a public-private key pair includes a public key and a private key.
  • the public key (Public Key) and the private key (Private Key) are a key pair obtained by an algorithm.
  • the public key is the public part of the key pair, and the private key is the private part.
  • Public keys are often used to encrypt session keys, verify digital signatures, or encrypt data that can be decrypted with the corresponding private key.
  • this key pair if a piece of data is encrypted with one key, it must be decrypted with the other key. For example, if the data is encrypted with the public key, it must be decrypted with the private key. If it is encrypted with the private key, it must be decrypted with the public key, otherwise the decryption will not succeed.
  • the public-private key pair can also be called a key pair (key dispatch).
  • n Bluetooth sub-devices have the same ECDH (Elliptic Curve Diffie-Hellman, Elliptic Curve Diffie-Hellman) public-private key pair.
  • ECDH is a DH (Diffie-Hellman, Diffie-Hellman) key exchange algorithm based on ECC (Elliptic Curve Cryptosystems, elliptic curve cryptosystem).
  • ECC Elliptic Curve Cryptosystems, elliptic curve cryptosystem.
  • ECC is a cryptographic system based on the discrete logarithm problem based on elliptic curves.
  • the first wireless audio output device receives the public-private key pair from the security manager.
  • the Bluetooth sub-device 310 is configured to receive a public-private key pair from a security manager 320 (Secure Manager). After the security manager generates the public-private key pair, it sends the public-private key pair to each Bluetooth sub-device 310 one by one.
  • the security manager 320 may be a module belonging to the entire Bluetooth device, and the security manager includes any of the following items: a Bluetooth headset charging box, and a production line burning device.
  • the first wireless audio output device includes any one of the following: bluetooth earphones, bluetooth speakers.
  • the security manager 320 may be the charging box of the Bluetooth headset or a module integrated in the charging box; in a possible implementation, the security manager 320 may also be a Bluetooth device
  • the security manager 320 may be a production line programming device, and the production line programming device refers to a tool used to write data on a programmable integrated circuit on the production line.
  • the public-private key pair shared by the Bluetooth sub-devices is preset on the production line and will not be updated.
  • the public-private key pair shared by the Bluetooth sub-devices is internally generated by the Bluetooth device and distributed to each Bluetooth sub-device without updating, or after a pairing is completed, an update is performed.
  • the first Bluetooth sub-device is configured to send monitoring indication information to the second Bluetooth sub-device, where the monitoring indication information is used to instruct the second Bluetooth sub-device to monitor the interaction information between the first Bluetooth sub-device and the terminal.
  • the first Bluetooth sub-device refers to at least one Bluetooth sub-device among the n Bluetooth sub-devices.
  • the first Bluetooth sub-device refers to a Bluetooth sub-device that interacts with the terminal.
  • the first Bluetooth sub-device may be any one or any number of Bluetooth sub-device 1 , Bluetooth sub-device 2 . . . Bluetooth sub-device n.
  • the Bluetooth sub-device interacting with the terminal is random, that is, the first Bluetooth sub-device is random.
  • the interaction information refers to the information sent between the terminal and the first Bluetooth sub-device.
  • the interaction information may refer to the plaintext information sent by the first Bluetooth sub-device and the terminal during the pairing process.
  • the link between the first Bluetooth sub-device and the terminal Without encryption the data sent between the first Bluetooth sub-device and the terminal is plaintext data, which can be obtained by the second Bluetooth sub-device.
  • the first Bluetooth sub-device establishes a connection (physical connection) with the terminal.
  • a physical connection represents a connection between two devices.
  • a physical connection may be associated with a real physical channel.
  • the physical connection Indicates the connection through the Bluetooth channel, not the wired connection of touching each other), after the first Bluetooth sub-device sends monitoring instruction information to the second Bluetooth sub-device, after that, the first Bluetooth sub-device and the terminal enter a pairing process.
  • the monitoring instruction information may also be used to indicate that the first Bluetooth sub-device and the terminal are about to start pairing.
  • the second Bluetooth sub-device may start to monitor the plaintext information sent by the first Bluetooth sub-device and the terminal during the pairing process.
  • the first Bluetooth sub-device may send monitoring instruction information to the second Bluetooth sub-device in a wired or wireless manner.
  • the first Bluetooth sub-device may broadcast monitoring instruction information to the second Bluetooth sub-device, or, the first Bluetooth sub-device may send a data packet to the second Bluetooth sub-device, the data packet includes the monitoring instruction information, Alternatively, the first Bluetooth sub-device may send monitoring indication information to the second Bluetooth sub-device through a data line.
  • the first Bluetooth sub-device is further configured to send the public key in the public-private key pair to the terminal, and receive the terminal public key from the terminal.
  • the first Bluetooth sub-device and the terminal After the first Bluetooth sub-device and the terminal enter a pairing process, the first Bluetooth sub-device and the terminal will exchange their respective public keys.
  • the terminal will generate its own public-private key pair, and the public-private key pair of the terminal includes the terminal public key and the terminal private key.
  • the terminal sends the terminal public key to the first Bluetooth sub-device; after receiving the terminal public key from the terminal, the first Bluetooth sub-device sends the public key in the public-private key pair to the terminal.
  • the first Bluetooth sub-device sends the public key in the public-private key pair to the terminal; after receiving the public key from the first Bluetooth sub-device, the terminal sends the terminal public key to the first Bluetooth sub-device.
  • the terminal and the first Bluetooth sub-device send their own public keys to each other at the same time.
  • the time point of the key is the same.
  • the second Bluetooth sub-device is used to monitor and obtain the terminal public key after receiving the monitoring indication information from the first Bluetooth sub-device; based on the terminal public key and the private key in the public-private key pair, determine the terminal and the first Bluetooth sub-device Link information between devices.
  • the link information is used to indicate the information of the link between the devices, and the devices at both ends of the link (such as the terminal and the first Bluetooth sub-device) use the link information to perform a Bluetooth link connection.
  • Link information includes device information at both ends of the link and information about the link. Devices at both ends of the link need to have link information to generate or create a corresponding link.
  • the second Bluetooth sub-device refers to any Bluetooth sub-device among the n Bluetooth sub-devices except the first Bluetooth sub-device.
  • the Bluetooth device 400 includes n Bluetooth sub-devices.
  • An active link (Active Link) is formed between the first Bluetooth sub-device 401 (assumed to be the Bluetooth sub-device 1) and the terminal 500, and the active link refers to a physical link that sends and receives.
  • the second Bluetooth sub-device 402 (assumed to be Bluetooth sub-device 2 . . . Bluetooth sub-device n) will monitor and obtain (Snoop) the interaction information between the first Bluetooth sub-device 401 and the terminal 500 at all times after receiving the monitoring instruction information.
  • the second Bluetooth sub-device 402 does not form an effective link with the terminal 500 .
  • the first Bluetooth sub-device may be a first Bluetooth sub-earphone
  • the second Bluetooth sub-device may be a second Bluetooth sub-earphone.
  • the first Bluetooth sub-earphone sends monitoring instruction information to the second Bluetooth sub-earphone; the first Bluetooth sub-earphone sends the public key in the public-private key pair to the terminal, and receives the terminal public key from the terminal.
  • the second Bluetooth sub-earphone monitors and obtains the terminal public key; based on the terminal public key and private key, determines the link information between the terminal and the first Bluetooth sub-earphone.
  • the second Bluetooth sub-device determines the link information
  • the second Bluetooth sub-device is successfully paired with the terminal.
  • the second Bluetooth sub-earphone can obtain link information between the terminal and the first Bluetooth sub-earphone through the link information, and obtain interaction information between the first Bluetooth sub-device and the terminal.
  • the second Bluetooth sub-device can independently calculate the link information by monitoring the interaction between the first Bluetooth sub-device and the terminal in the air .
  • the same public-private key pair is set, so that the binding encryption process between one Bluetooth sub-device and the terminal can be determined by other Bluetooth sub-device through monitoring.
  • each Bluetooth sub-device included in the Bluetooth device shares the same public-private key pair
  • the first Bluetooth sub-device sends monitoring instruction information to the second Bluetooth sub-device, so that the second Bluetooth sub-device
  • the second Bluetooth sub-device monitors and obtains the terminal public key sent by the terminal to the first Bluetooth sub-device
  • the second Bluetooth device determines the link information between the terminal and the first Bluetooth sub-device based on the terminal public key and the private key in the public-private key pair
  • the present application improves the security of the Bluetooth device and reduces the security risk of the Bluetooth device.
  • the second Bluetooth sub-device determines link information in the following manner:
  • the second Bluetooth sub-device determines the shared key DHkey through the following formula:
  • DHkey P256 (local private key, peer public key);
  • P256() refers to the P-256 elliptic curve
  • the local private key refers to the private key in the public-private key pair
  • the peer public key refers to the terminal public key.
  • the second Bluetooth sub-device determines the shared key DHkey through the following formula:
  • DHkey P192 (local private key, peer public key);
  • P192() refers to the P-192 elliptic curve
  • the local private key refers to the private key in the public-private key pair
  • the peer public key refers to the terminal public key
  • link information is determined based on the shared key.
  • the second Bluetooth sub-device After the second Bluetooth sub-device determines the shared key, it can determine the link information based on the shared key.
  • the link information includes a link key (Link Key, LK).
  • the link key may also be referred to as a link key, and is an authentication key used to establish a connection between two devices.
  • the first Bluetooth sub-device is further configured to receive the first random number from the terminal, and send the second random number to the terminal.
  • the first random number is a random value selected by the terminal
  • the second random number is a random value selected by the first Bluetooth sub-device.
  • the first random number and the second random number are 128-bit values, and the first random number and the second random number are nonces (number once), which refer to any or non-repeated nonces that are used only once. random value.
  • the second bluetooth sub-device is also used to monitor and obtain the first random number and the second random number.
  • the first Bluetooth sub-device and the terminal exchange respective random numbers
  • the second Bluetooth sub-device listens to obtain the first random number and the second random number during the process of exchanging random numbers between the first Bluetooth sub-device and the terminal.
  • the second Bluetooth sub-device is further configured to determine the link key based on the shared key, the first random number, the second random number, the plaintext string, the Bluetooth address of the terminal, and the Bluetooth address of the first Bluetooth sub-device.
  • the Bluetooth address may also be referred to as a Bluetooth device address (Bluetooth Address), which is a unique 48-bit identifier assigned to each device by a manufacturer, and is used to uniquely identify a physical device.
  • Bluetooth addresses are usually displayed as 6 bytes, expressed in hexadecimal, separated by colons. Bluetooth addresses include: NAP (Non-significant Address Part, unimportant address part), UAP (Upper Address Part, high address part), LAP (Lower Address Part, low address part).
  • NAP includes 2 bytes, which are the first 16 bits of OUI (Organizationally Unique Identifier), which can be used for frequency hopping synchronization frames; UAP includes 1 byte, which is the remaining 8 bits of OUI, used as each A seed in a Bluetooth specification algorithm; LAP includes 3 bytes, allocated by the device supplier itself, and used to uniquely identify the Bluetooth device. LAP and UAP constitute the important address part (Significant Address Part, SAP) of the Bluetooth address.
  • OUI Organizationally Unique Identifier
  • the first Bluetooth sub-device establishes a connection with the terminal, and the first Bluetooth sub-device and the terminal exchange respective Bluetooth addresses, that is, the first Bluetooth sub-device sends its own Bluetooth address to the terminal, and the terminal sends the first Bluetooth sub-device Send your own bluetooth address.
  • the first Bluetooth sub-device sends monitoring instruction information to the second Bluetooth sub-device, where the monitoring instruction information includes the Bluetooth address of the terminal.
  • Each bluetooth sub-device should know each other's bluetooth address, which can be configured when factory preset or bound into a complete device (bluetooth device).
  • the second Bluetooth sub-device determines the link key LK through the following formula:
  • LK f2(DHkey, the first random number, the second random number, "btlk", the Bluetooth address of the terminal, the Bluetooth address of the first Bluetooth sub-device);
  • f2() refers to the function used to calculate LK
  • btlk refers to the specified text string.
  • the link information includes LTK (Long Term Key, long-term key).
  • the first Bluetooth sub-device is further configured to receive a third random number from the terminal, and send a fourth random number to the terminal.
  • the third random number is a random value selected by the terminal
  • the fourth random number is a random value selected by the first Bluetooth sub-device.
  • the third random number and the fourth random number are 128-bit values, and the third random number and the fourth random number are nonces (number once), which refer to any or non-repeated nonces that are used only once. random value.
  • the second bluetooth sub-device is also used to monitor and obtain the third random number and the fourth random number.
  • the first Bluetooth sub-device and the terminal exchange respective random numbers
  • the second Bluetooth sub-device monitors and obtains the third random number and the fourth random number during the process of exchanging random numbers between the first Bluetooth sub-device and the terminal.
  • the second Bluetooth sub-device is further configured to determine the LTK based on the shared key, the third random number, the fourth random number, the Bluetooth address of the terminal, and the Bluetooth address of the first Bluetooth sub-device.
  • the second Bluetooth sub-device determines the LTK through the following formula:
  • LTK f5(DHkey, the third random number, the fourth random number, the bluetooth address of the terminal, the bluetooth address of the first bluetooth sub-device);
  • f5() refers to the function used to calculate LTK.
  • the second Bluetooth sub-device can also be used to: determine the session key based on the link information; The communication data between the device and the terminal is decrypted to obtain the decrypted communication data.
  • the link information can be used to calculate the session key (session key).
  • the second Bluetooth sub-device may decrypt the audio data transmitted between the terminal and the first Bluetooth sub-device based on the session key to obtain decrypted audio data.
  • the first Bluetooth sub-device is further configured to receive the fifth random number from the terminal, and send the sixth random number to the terminal.
  • the fifth random number refers to a random value selected by the terminal
  • the sixth random number refers to a random value selected by the first Bluetooth sub-device.
  • the fifth random number and the sixth random number are nonce (number once), which refer to any or non-repetitive random values that are only used once.
  • the second Bluetooth sub-device is further configured to determine the session key based on the link information, the fifth random number and the sixth random number.
  • the second Bluetooth sub-device can independently calculate the session key by monitoring the interaction between the first Bluetooth sub-device and the terminal in the air. Furthermore, finally, the data exchanged between the first Bluetooth sub-device and the terminal on the encrypted link can be decrypted by the second Bluetooth sub-device after being monitored in the air.
  • each Bluetooth sub-device in the Bluetooth device shares the same public-private key pair, realizing the pairing between a Bluetooth sub-device and the terminal, and other Bluetooth sub-device in the Bluetooth device can independently calculate which Bluetooth sub-device is related to the terminal by monitoring.
  • Link information between terminals and then realize that as long as there is a Bluetooth sub-device connected to the terminal, other Bluetooth sub-device in the Bluetooth device can derive the session key according to the link information calculated by itself before, and then can decrypt the Bluetooth sub-device. Encrypt data between sub-device and terminal.
  • An exemplary embodiment of the present application also provides a first wireless audio output device, where the first wireless audio output device is configured to:
  • the output device monitors and obtains the public key of the audio source, and determines the audio frequency on the second wireless link based on the private key in the public-private key pair and the public key of the audio source. link information.
  • the first wireless audio output device receives the public-private key pair from a security manager.
  • the safety manager includes any one of the following: Bluetooth earphone charging box, production line burning equipment.
  • the first wireless audio output device includes any one of the following: bluetooth earphones, bluetooth speakers.
  • An exemplary embodiment of the present application also provides a second wireless audio output device, the second wireless audio output device is used for:
  • the second wireless link is a link through which the first wireless audio output device communicates with the audio source
  • Link information on the second wireless link is determined based on the private key in the public-private key pair and the public key of the audio source.
  • the second wireless audio output device is used for:
  • the link information is determined.
  • the link information includes a link key
  • the second wireless audio output device is used for:
  • the link key is determined based on the shared key, the random number, the Bluetooth address of the audio source, and the Bluetooth address of the first wireless audio output device.
  • the link information includes a long-term key LTK
  • the second wireless audio output device is used for:
  • the LTK is determined based on the shared key, the random number, the Bluetooth address of the audio source, and the Bluetooth address of the first wireless audio output device.
  • the second wireless audio output device is also used for:
  • the second wireless audio output device is used for:
  • the session key is determined based on the link information and the random number.
  • the above-mentioned first wireless audio output device is equivalent to the first Bluetooth sub-device introduced in the above embodiment
  • the second wireless audio output device is equivalent to the second Bluetooth sub-device introduced in the above embodiment
  • the audio source is equivalent to the above implementation The terminal described in the example.
  • FIG. 5 shows a schematic diagram of a key determination system provided by an embodiment of the present application.
  • the system includes a Bluetooth device 510 and a terminal 520.
  • the Bluetooth device 510 includes n Bluetooth sub-devices, where n is an integer greater than 1, and the n Bluetooth sub-devices have the same public-private key pair.
  • the first Bluetooth sub-device 511 is configured to send monitoring indication information to the second Bluetooth sub-device, where the monitoring indication information is used to instruct the second Bluetooth sub-device to monitor the communication between the first Bluetooth sub-device and the terminal. interactive information;
  • the first Bluetooth sub-device 511 is further configured to send the public key in the public-private key pair to the terminal;
  • the terminal 520 is configured to send a terminal public key to the first Bluetooth sub-device
  • the second Bluetooth sub-device 512 is configured to monitor and obtain the terminal public key after receiving the monitoring indication information from the first Bluetooth sub-device; based on the terminal public key and the public-private key pair a private key to determine link information between the terminal and the first Bluetooth sub-device;
  • the first Bluetooth sub-device refers to at least one Bluetooth sub-device in the n Bluetooth sub-device
  • the second Bluetooth sub-device refers to the n Bluetooth sub-device except the first Bluetooth sub-device Any Bluetooth sub-device among other Bluetooth sub-devices other than the device.
  • each Bluetooth sub-device included in the Bluetooth device shares the same public-private key pair
  • the first Bluetooth sub-device sends monitoring instruction information to the second Bluetooth sub-device, so that the second Bluetooth sub-device
  • the second Bluetooth sub-device monitors and obtains the terminal public key sent by the terminal to the first Bluetooth sub-device
  • the second Bluetooth device determines the link information between the terminal and the first Bluetooth sub-device based on the terminal public key and the private key in the public-private key pair
  • the present application improves the security of the Bluetooth device and reduces the security risk of the Bluetooth device.
  • the second Bluetooth sub-device 512 is configured to:
  • the link information is determined.
  • the link information includes a link key
  • the terminal 520 is further configured to send a first random number to the first Bluetooth sub-device
  • the first Bluetooth sub-device 511 is further configured to send a second random number to the terminal;
  • the second bluetooth sub-device 512 is also used to monitor and obtain the first random number and the second random number;
  • the second Bluetooth sub-device 512 is further configured to: based on the shared key, the first random number, the second random number, a plaintext string, the Bluetooth address of the terminal, the the Bluetooth address of the device, determining the link key;
  • the first random number is a random value selected by the terminal
  • the second random number is a random value selected by the first Bluetooth sub-device.
  • the link information includes a long-term key LTK
  • the terminal 520 is further configured to send a third random number to the first Bluetooth sub-device
  • the first Bluetooth sub-device 511 is further configured to send a fourth random number to the terminal;
  • the second bluetooth sub-device 512 is also used to monitor and obtain the third random number and the fourth random number;
  • the second Bluetooth sub-device 512 is further configured to: based on the shared key, the third random number, the fourth random number, the Bluetooth address of the terminal, and the Bluetooth address of the first Bluetooth sub-device , to determine the LTK;
  • the third random number is a random value selected by the terminal
  • the fourth random number is a random value selected by the first Bluetooth sub-device.
  • the second Bluetooth sub-device 512 is also used for:
  • the terminal 520 is further configured to send a fifth random number to the first Bluetooth sub-device
  • the first Bluetooth sub-device 511 is further configured to send a sixth random number to the terminal;
  • the second bluetooth sub-device 512 is also used to monitor and obtain the fifth random number and the sixth random number;
  • the second Bluetooth sub-device 512 is further configured to determine the session key based on the link information, the fifth random number, and the sixth random number;
  • the fifth random number refers to a random value selected by the terminal
  • the sixth random number is a random value selected by the first Bluetooth sub-device.
  • the Bluetooth sub-device is configured to receive the public-private key pair from a security manager.
  • An exemplary embodiment of the present application also provides a wireless audio system, the wireless audio system includes a first wireless audio output device and at least one second wireless audio output device, the first wireless audio output device and the second wireless audio output device The two wireless audio output devices have the same public-private key pair;
  • the first wireless audio output device is configured to send monitoring instruction information to the second wireless audio output device through a first wireless link, and the monitoring instruction information is used to instruct the second wireless audio output device to monitor the interaction information between the first wireless audio output device and the audio source;
  • the first wireless audio output device is further configured to send the public key in the public-private key pair to the audio source through a second wireless link, and receive the public key from the audio source through the second wireless link.
  • the second wireless audio output device is configured to monitor and acquire the public key of the audio source on the second wireless link when receiving the monitoring indication information
  • the second wireless audio output device is further configured to determine link information on the second wireless link based on the private key in the public-private key pair and the public key of the audio source.

Landscapes

  • Physics & Mathematics (AREA)
  • Nonlinear Science (AREA)
  • Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Optics & Photonics (AREA)
  • Crystallography & Structural Chemistry (AREA)
  • Chemical & Material Sciences (AREA)
  • Mathematical Physics (AREA)
  • Signal Processing (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Computer Security & Cryptography (AREA)
  • Spectroscopy & Molecular Physics (AREA)
  • Geometry (AREA)
  • Theoretical Computer Science (AREA)
  • Computing Systems (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Lock And Its Accessories (AREA)
  • Selective Calling Equipment (AREA)

Abstract

本申请实施例提供了一种蓝牙设备以及密钥确定系统，涉及蓝牙技术领域。所述蓝牙设备包括n个蓝牙子设备，n为大于1的整数，n个蓝牙子设备具有相同的公私钥对；第一蓝牙子设备，用于向第二蓝牙子设备发送监听指示信息；第一蓝牙子设备，还用于向终端发送公私钥对中的公钥，以及接收来自于终端的终端公钥；第二蓝牙子设备，用于在接收到来自于第一蓝牙子设备的监听指示信息后，监听获取终端公钥，基于终端公钥和公私钥对中的私钥，确定终端与第一蓝牙子设备之间的链路信息。本申请实施例中相较于相关技术中第一蓝牙子设备将链路信息发送给第二蓝牙子设备，提高了蓝牙设备的安全性，降低了蓝牙设备的安全风险。

Description

蓝牙设备以及密钥确定系统
本申请要求于2021年05月11日提交的申请号为202110511417.4、发明名称为“蓝牙设备以及密钥确定系统”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。
技术领域
随着社会进步和人民生活水平的提高，蓝牙耳机已成为人们必不可少的生活用品。
在相关技术中，蓝牙耳机包括第一子耳机和第二子耳机，当第一子耳机和终端配对成功后，第一子耳机需要将链路密钥(Link Key)发送给第二子耳机或者将会话密钥(Session Key)发送给第二子耳机，以使得第二子耳机能够正确解密监听链路上的数据包。
发明内容
本申请实施例提供一种蓝牙设备以及密钥确定系统。所述技术方案如下：
根据本申请实施例的一个方面，提供了一种第一无线音频输出设备，所述第一无线音频输出设备，用于：
通过第一无线链路向第二无线音频输出设备发送监听指示信息，所述监听指示信息用于指示所述第二无线音频输出设备监听所述第一无线音频输出设备与音频源之间的交互信息，所述第一无线音频输出设备与所述第二无线音频输出设备具有相同的公私钥对；
通过第二无线链路向所述音频源发送所述公私钥对中的公钥，以及通过所述第二无线链路接收来自于所述音频源的公钥，以使得所述第二无线音频输出设备在接收到所述监听指示信息后，监听获取所述音频源的公钥，基于所述公私钥对中的私钥和所述音频源的公钥，确定所述第二无线链路上的链路信息。
根据本申请实施例的一个方面，提供了一种第二无线音频输出设备，所述第二无线音频输出设备，用于：
通过第一无线链路接收来自于第一无线音频输出设备的监听指示信息，所述监听指示信息用于指示所述第二无线音频输出设备监听所述第一无线音频输出设备与音频源之间的交互信息，所述第一无线音频输出设备与所述第二无线音频输出设备具有相同的公私钥对；
监听获取第二无线链路上的所述音频源的公钥，所述第二无线链路是所述第一无线音频输出设备与所述音频源进行通信的链路；
基于所述公私钥对中的私钥和所述音频源的公钥，确定所述第二无线链路上的链路信息。
根据本申请实施例的一个方面，提供了一种蓝牙设备，所述蓝牙设备包括n个蓝牙子设备，所述n为大于1的整数，所述n个蓝牙子设备具有相同的公私钥对；
第一蓝牙子设备，用于向第二蓝牙子设备发送监听指示信息，所述监听指示信息用于指示所述第二蓝牙子设备监听所述第一蓝牙子设备与终端之间的交互信息；
所述第一蓝牙子设备，还用于向所述终端发送所述公私钥对中的公钥，以及接收来自于所述终端的终端公钥；
所述第二蓝牙子设备，用于在接收到来自于所述第一蓝牙子设备的监听指示信息后，监听获取所述终端公钥；基于所述终端公钥和所述公私钥对中的私钥，确定所述终端与所述第一蓝牙子设备之间的链路信息；
其中，所述第一蓝牙子设备是指所述n个蓝牙子设备中的至少一个蓝牙子设备，所述第二蓝牙子设备是指所述n个蓝牙子设备中除所述第一蓝牙子设备之外的其它蓝牙子设备中的任意一个蓝牙子设备。
根据本申请实施例的一个方面，提供了一种密钥确定系统，所述系统包括蓝牙设备和终端，所述蓝牙设备包括n个蓝牙子设备，所述n为大于1的整数，所述n个蓝牙子设备具有相同的公私钥对；
第一蓝牙子设备，用于向第二蓝牙子设备发送监听指示信息，所述监听指示信息用于指示所述第二蓝牙子设备监听所述第一蓝牙子设备与所述终端之间的交互信息；
所述第一蓝牙子设备，还用于向所述终端发送所述公私钥对中的公钥；
所述终端，用于向所述第一蓝牙子设备发送终端公钥；
所述第二蓝牙子设备，用于在接收到来自于所述第一蓝牙子设备的监听指示信息后，监听获取所述终端公钥；基于所述终端公钥和所述公私钥对中的私钥，确定所述终端与所述第一蓝牙子设备之间的链路信息；
其中，所述第一蓝牙子设备是指所述n个蓝牙子设备中的至少一个蓝牙子设备，所述第二蓝牙子设备是指所述n个蓝牙子设备中除所述第一蓝牙子设备之外的其它蓝牙子设备中的任意一个蓝牙子设备。
附图说明
图1是本申请一个实施例提供的蓝牙设备和终端的应用场景的示意图；
图2是本申请一个实施例提供的蓝牙设备的示意图；
图3是本申请一个实施例提供的安全管理器与蓝牙子设备交互的示意图；
图4是本申请一个实施例提供的蓝牙子设备与终端交互的示意图；
图5是本申请一个实施例提供的密钥确定系统的示意图。
具体实施方式
为使本申请的目的、技术方案和优点更加清楚，下面将结合附图对本申请实施方式作进一步地详细描述。
请参考图1，其示出了本申请一个实施例提供的蓝牙设备和终端的应用场景的示意图。
在本申请实施例中，蓝牙设备110是指具有蓝牙功能的设备，蓝牙设备110包括n个蓝牙子设备111，n为大于1的整数。蓝牙子设备是指具备蓝牙芯片、 且能够独立与终端(或称为“终端设备”)进行通信的设备。在一个示例中，蓝牙设备110中包括的蓝牙子设备111的结构相同；在另一个示例中，蓝牙设备110中包括的蓝牙子设备111的结构存在不同。在可能的实现方式中，蓝牙设备110中包括的蓝牙子设备111的厂商相同。示例性地，蓝牙设备110包括蓝牙耳机，此时，蓝牙耳机包括如下蓝牙子设备：第一蓝牙子耳机、第二蓝牙子耳机、充电盒。示例性地，蓝牙设备110包括蓝牙立体音箱，此时，蓝牙立体音箱包括如下蓝牙子设备：第一蓝牙子音箱、第二蓝牙子音箱等(本申请对蓝牙立体音箱包括的蓝牙子音箱的数量不作限定)。
在本申请实施例中，终端120是指与蓝牙设备110进行蓝牙通信的电子设备。示例性地，终端120是指手机、电视机、平板电脑、PC(Personal Computer，个人计算机)等电子设备。示例性地，终端120可以用于向蓝牙设备110提供数据，例如，终端120可以用于向蓝牙设备110提供音频数据。
终端120和蓝牙设备110之间通过蓝牙进行通信，终端120和每个蓝牙子设备111通过蓝牙进行通信。蓝牙子设备111与蓝牙子设备111之间可以通过有线或者无线的方式进行通信，例如，蓝牙子设备111与蓝牙子设备111之间可以通过数据线进行通信，或者，蓝牙子设备111与蓝牙子设备111之间可以通过蓝牙进行通信。
下面，通过几个实施例对本申请进行介绍说明。
请参考图2，其示出了本申请一个实施例提供的蓝牙设备的示意图。蓝牙(Bluetooth，BT)设备200包括n个蓝牙子设备201，n为大于1的整数，n个蓝牙子设备具有相同的公私钥对。n个蓝牙子设备可以分别为蓝牙子设备1、蓝牙子设备2、蓝牙子设备3……蓝牙子设备n。
无线链路(wireless link)是通信用语，指连接一个或多个设备或通信控制器的无线物理链路。无线链路可以通过蓝牙、WiFi(Wireless Fidelity，无线保真)、蜂窝通信等技术来实现，在本申请中，主要以蓝牙的形式来实现无线链路。其中，第一无线音频输出设备可以是第一蓝牙子设备，第二无线音频输出设备可以是第二蓝牙子设备，音频源可以是终端。
公私钥对中包括公钥和私钥。公钥(Public Key)与私钥(Private Key)是通过一种算法得到的一个密钥对。公钥是密钥对中公开的部分，私钥则是非公开的部分。公钥通常用于加密会话密钥、验证数字签名、或加密可以用相应的私钥解密的数据。使用这个密钥对的时候，如果用其中一个密钥加密一段数据，必须用另一个密钥解密。比如用公钥加密数据就必须用私钥解密，如果用私钥加密就必须用公钥解密，否则解密将不会成功。示例性地，公私钥对还可以称之为密钥对(key dispatch)。
在可能的实现方式中，n个蓝牙子设备具有相同的ECDH(Elliptic Curve Diffie-Hellman，椭圆曲线迪菲-赫尔曼)公私钥对。ECDH是基于ECC(Elliptic Curve Cryptosystems，椭圆曲线密码体制)的DH(Diffie-Hellman，迪菲-赫尔曼)密钥交换算法。ECC是建立在基于椭圆曲线的离散对数问题上的密码体制，给 定椭圆曲线上的一个点P，一个整数k，求解Q＝kP很容易；给定一个点P、Q，知道Q＝kP，求整数k却是一个难题，ECDH即建立在此数学难题之上。
在可能的实现方式中，第一无线音频输出设备接收来自于安全管理器的公私钥对。如图3所示，蓝牙子设备310用于接收来自于安全管理器320(Secure Manager)的公私钥对。安全管理器在生成公私钥对之后，将该公私钥对逐一发送给各个蓝牙子设备310。在可能的实现方式中，安全管理器320可以是属于整个蓝牙设备的一个模块，安全管理器包括以下任意一项：蓝牙耳机充电盒、产线烧录设备。第一无线音频输出设备包括以下任意一项：蓝牙耳机、蓝牙音箱。例如，以该蓝牙设备为蓝牙耳机为例，安全管理器320可以是该蓝牙耳机的充电盒或者是集成于该充电盒的模块；在可能的实现方式中，安全管理器320也可以是蓝牙设备以外的部分，例如，安全管理器320可以是产线烧录设备，产线烧录设备是指产线上用于把可编程的集成电路写上数据的工具。
在可能的实现方式中，蓝牙子设备共享的公私钥对，在产线预置好，且不再更新。
在可能的实现方式中，蓝牙子设备共享的公私钥对，由蓝牙设备内部产生，分发给各蓝牙子设备，不再更新，或者完成一次配对之后做一次更新。
第一蓝牙子设备，用于向第二蓝牙子设备发送监听指示信息，监听指示信息用于指示第二蓝牙子设备监听第一蓝牙子设备与终端之间的交互信息。
在本申请实施例中，第一蓝牙子设备是指n个蓝牙子设备中的至少一个蓝牙子设备。第一蓝牙子设备是指与终端进行交互的蓝牙子设备。示例性地，第一蓝牙子设备可以是蓝牙子设备1、蓝牙子设备2……蓝牙子设备n中的任意一个或任意多个蓝牙子设备。与终端进行交互的蓝牙子设备是随机的，也即，第一蓝牙子设备是随机的。
交互信息是指终端与第一蓝牙子设备相互发送的信息。示例性地，交互信息可以是指第一蓝牙子设备与终端在配对过程中发送的明文信息，在第一蓝牙子设备与终端配对的过程中，第一蓝牙子设备和终端之间的链路未加密，第一蓝牙子设备和终端之间发送的是明文数据，第二蓝牙子设备可以获取到。
示例性地，第一蓝牙子设备与终端建立连接(物理连接，一个物理连接代表两个设备之间的连接。一个物理连接可以与真实的物理通道相关联，在本申请实施例中，物理连接表示的是通过蓝牙通道进行连接，而不是指相互触碰的有线连接)后，第一蓝牙子设备向第二蓝牙子设备发送监听指示信息，之后，第一蓝牙子设备与终端进入配对流程。监听指示信息还可以用于指示第一蓝牙子设备与终端即将开始配对。第二蓝牙子设备可以开始监听第一蓝牙子设备与终端在配对过程中发送的明文信息。
在可能的实现方式中，第一蓝牙子设备可以通过有线或者无线的方式向第二蓝牙子设备发送监听指示信息。示例性地，第一蓝牙子设备可以通过向第二蓝牙子设备广播监听指示信息，或者，第一蓝牙子设备可以通过向第二蓝牙子设备发送数据包，该数据包中包括监听指示信息，或者，第一蓝牙子设备可以通过数据线向第二蓝牙子设备发送监听指示信息。
第一蓝牙子设备，还用于向终端发送公私钥对中的公钥，以及接收来自于终端的终端公钥。
当第一蓝牙子设备与终端进入配对流程后，第一蓝牙子设备和终端会交换各自的公钥。终端会生成自己的公私钥对，终端的公私钥对中包括终端公钥和终端私钥。
在可能的实现方式中，终端向第一蓝牙子设备发送终端公钥；第一蓝牙子设备在接收到来自于终端的终端公钥之后，向终端发送公私钥对中的公钥。
在可能的实现方式中，第一蓝牙子设备向终端发送公私钥对中的公钥；终端在接收到来自于第一蓝牙子设备的公钥之后，向第一蓝牙子设备发送终端公钥。
在可能的实现方式中，终端和第一蓝牙子设备同时向对方发送自己的公钥，也即，终端向第一蓝牙子设备发送终端公钥的时间点和第一蓝牙子设备向终端发送公钥的时间点相同。
第二蓝牙子设备，用于在接收到来自于第一蓝牙子设备的监听指示信息后，监听获取终端公钥；基于终端公钥和公私钥对中的私钥，确定终端与第一蓝牙子设备之间的链路信息。
链路信息用于表示设备之间的链路的信息，链路两端设备(如上述终端和第一蓝牙子设备)通过链路信息来进行蓝牙链路的连接。链路信息包括链路两端的设备信息和该链路的信息。链路两端设备都需要拥有链路信息才能生成或创建对应的链路。
在本申请实施例中，第二蓝牙子设备是指n个蓝牙子设备中除第一蓝牙子设备之外的其它蓝牙子设备中的任意一个蓝牙子设备。
如图4所示，蓝牙设备400包括n个蓝牙子设备。第一蓝牙子设备401(假设为蓝牙子设备1)与终端500之间形成有有效链路(Active Link)，有效链路是指有发有收的实体链路。第二蓝牙子设备402(假设为蓝牙子设备2……蓝牙子设备n)在接收到监听指示信息后，会时刻监听获取(Snoop)第一蓝牙子设备401与终端500之间的交互信息。第二蓝牙子设备402并没有与终端500之间形成有效链路。
以蓝牙设备为蓝牙耳机为例进行介绍说明，第一蓝牙子设备可以为第一蓝牙子耳机、第二蓝牙子设备可以为第二蓝牙子耳机。第一蓝牙子耳机向第二蓝牙子耳机发送监听指示信息；第一蓝牙子耳机向终端发送公私钥对中的公钥，以及接收来自于终端的终端公钥。第二蓝牙子耳机在接收到来自于第一蓝牙子耳机的监听指示信息后，监听获取终端公钥；基于终端公钥和私钥，确定终端和第一蓝牙子耳机之间的链路信息。
示例性地，第二蓝牙子设备确定了链路信息后，第二蓝牙子设备即与终端配对成功。第二蓝牙子耳机可以通过链路信息获取到终端和第一蓝牙子耳机之间的链路信息，获取第一蓝牙子设备和终端之间的交互信息。
由于各蓝牙子设备共享相同的公私钥对，所以在第一蓝牙子设备与终端配对过程中，第二蓝牙子设备可以通过监听第一蓝牙子设备与终端在空中的交互， 自主算出链路信息。
在本申请实施例中，对于一个蓝牙设备中的各蓝牙子设备，设置相同的公私钥对，使得其中一个蓝牙子设备与终端的绑定加密流程，其它蓝牙子设备都能通过监听，确定出相同的链路信息，进而在后续加密链路的监听中，无需通过传递链路信息的方式来解密数据包。
综上所述，本申请实施例提供的技术方案中，蓝牙设备中包括的各蓝牙子设备共享相同的公私钥对，第一蓝牙子设备向第二蓝牙子设备发送监听指示信息，以使得第二蓝牙子设备监听获取到终端向第一蓝牙子设备发送的终端公钥，第二蓝牙设备基于终端公钥和公私钥对中的私钥确定终端与第一蓝牙子设备之间的链路信息，相较于相关技术中第一蓝牙子设备将链路信息发送给第二蓝牙子设备，本申请提高了蓝牙设备的安全性，降低了蓝牙设备的安全风险。
在示意性实施例中，第二蓝牙子设备通过如下方式确定链路信息：
第一、基于终端公钥和公私钥对中的私钥，确定终端与第一蓝牙子设备之间的共享密钥。
示例性地，当蓝牙子设备与终端支持安全连接时，第二蓝牙子设备通过如下公式确定共享密钥DHkey：
DHkey＝P256(本端私钥，对端公钥)；
其中，P256()是指P-256椭圆曲线，本端私钥是指公私钥对中的私钥，对端公钥是指终端公钥。
示例性地，当蓝牙子设备与终端中的任意一个设备不支持安全连接时，第二蓝牙子设备通过如下公式确定共享密钥DHkey：
DHkey＝P192(本端私钥，对端公钥)；
其中，P192()是指P-192椭圆曲线，本端私钥是指公私钥对中的私钥，对端公钥是指终端公钥。
相应地，当蓝牙子设备与终端支持安全连接时，终端可以通过如下公式确定共享密钥：DHkey＝P256(终端私钥，公钥)；当蓝牙子设备与终端中的任意一个设备不支持安全连接时，终端可以通过如下公式确定共享密钥：DHkey＝P192(终端私钥，公钥)。
第二、基于共享密钥，确定链路信息。
当第二蓝牙子设备确定出共享密钥后，可以基于共享密钥确定链路信息。
在一个示例中，当蓝牙设备与终端使用经典蓝牙(Classic Bluetooth，Classic BT)协议时，链路信息包括链路密钥(Link Key，LK)。
链路密钥还可以称之为链接关键字，是用来建立两个设备之间的连接的鉴定关键字。
第一蓝牙子设备，还用于接收来自于终端的第一随机数，以及向终端发送第二随机数。
其中，第一随机数是终端选择的随机数值，第二随机数是第一蓝牙子设备选择的随机数值。
在可能的实现方式中，第一随机数和第二随机数是128位的数值，第一随机数和第二随机数是nonce(number once)，是指只被使用一次的任意或非重复的随机数值。
第二蓝牙子设备，还用于监听获取第一随机数、第二随机数。
第一蓝牙子设备和终端交换各自的随机数值，第二蓝牙子设备在第一蓝牙子设备和终端交换随机数值的过程中，监听获取到第一随机数和第二随机数。
第二蓝牙子设备，还用于基于共享密钥、第一随机数、第二随机数、明文字符串、终端的蓝牙地址、第一蓝牙子设备的蓝牙地址，确定链路密钥。
示例性地，蓝牙地址还可以称之为蓝牙设备地址(Bluetooth Address)，是制造商分配给每个设备的唯一48位标识符，是用来唯一识别一个物理设备的标识。蓝牙地址通常显示为6个字节，以十六进制表示，用冒号分隔。蓝牙地址包括：NAP(Non-significant Address Part，不重要的地址部分)、UAP(Upper Address Part，高位地址部分)、LAP(Lower Address Part，低位地址部分)。NAP包括2个字节，为OUI(Organizationally Unique Identifier，组织唯一标识符)的前16位，可以用于跳频同步帧；UAP包括1个字节，为OUI的剩余8位，用于作为各种蓝牙规范算法中的种子；LAP包括3个字节，由设备供应商自己分配，用于唯一标识蓝牙设备。LAP和UAP构成蓝牙地址的重要地址部分(Significant Address Part，SAP)。
示例性地，第一蓝牙子设备与终端建立连接，第一蓝牙子设备与终端交换各自的蓝牙地址，也即，第一蓝牙子设备向终端发送自己的蓝牙地址，终端向第一蓝牙子设备发送自己的蓝牙地址。第一蓝牙子设备向第二蓝牙子设备发送监听指示信息，该监听指示信息中包括终端的蓝牙地址。
各个蓝牙子设备应该相互知道各自的蓝牙地址，这个可以在出厂预置或者绑定成一个完整设备(蓝牙设备)的时候配置。
示例性地，第二蓝牙子设备通过如下公式确定链路密钥LK：
LK＝f2(DHkey，第一随机数，第二随机数，“btlk”，终端的蓝牙地址，第一蓝牙子设备的蓝牙地址)；
其中，f2()是指用于计算LK的函数，btlk是指明文字符串。
在另一个示例中，当蓝牙设备与终端使用低功耗蓝牙(Bluetooth Low Energy，BLE)协议时，链路信息包括LTK(Long Term Key，长期密钥)。
第一蓝牙子设备，还用于接收来自于终端的第三随机数，以及向终端发送第四随机数。
其中，第三随机数是终端选择的随机数值，第四随机数是第一蓝牙子设备选择的随机数值。
在可能的实现方式中，第三随机数和第四随机数是128位的数值，第三随机数和第四随机数是nonce(number once)，是指只被使用一次的任意或非重复的随机数值。
第二蓝牙子设备，还用于监听获取第三随机数、第四随机数。
第一蓝牙子设备和终端交换各自的随机数值，第二蓝牙子设备在第一蓝牙 子设备和终端交换随机数值的过程中，监听获取到第三随机数和第四随机数。
第二蓝牙子设备，还用于基于共享密钥、第三随机数、第四随机数、终端的蓝牙地址、第一蓝牙子设备的蓝牙地址，确定LTK。
示例性地，第二蓝牙子设备通过如下公式确定LTK：
LTK＝f5(DHkey，第三随机数，第四随机数，终端的蓝牙地址，第一蓝牙子设备的蓝牙地址)；
其中，f5()是指用于计算LTK的函数。
在示意性实施例中，当第二蓝牙子设备确定出链路信息后，第二蓝牙子设备，还可以用于：基于链路信息，确定会话密钥；基于会话密钥对第一蓝牙子设备与终端之间的通信数据进行解密，得到解密后的通信数据。
链路信息可以用来计算会话密钥(session key)。第二蓝牙子设备可以基于会话密钥对终端和第一蓝牙子设备之间传输的音频数据进行解密，得到解密后的音频数据。
在可能的实现方式中，第一蓝牙子设备，还用于接收来自于终端的第五随机数，以及向终端发送第六随机数。
其中，第五随机数是指终端选择的随机数值，第六随机数是第一蓝牙子设备选择的随机数值。
在可能的实现方式中，第五随机数和第六随机数是nonce(number once)，是指只被使用一次的任意或非重复的随机数值。
第二蓝牙子设备，还用于基于链路信息、第五随机数和第六随机数，确定会话密钥。
在第一蓝牙子设备与终端通过交互生成会话密钥的过程中，第二蓝牙子设备可以通过监听第一蓝牙子设备与终端在空中的交互，自主算出会话密钥。进而，最终第一蓝牙子设备与终端在加密链路上交互的数据，第二蓝牙子设备可以在空中监听到之后，能解密出来。
在本申请实施例中，蓝牙设备内各个蓝牙子设备共享同样的公私钥对，实现了一个蓝牙子设备与终端配对，蓝牙设备内其它蓝牙子能够通过监听的方式，自主算出那个蓝牙子设备与终端之间的链路信息，进而实现，只要有一个蓝牙子设备与终端连接，蓝牙设备内其它蓝牙子设备就能根据自己之前计算得到的链路信息推导出会话密钥，进而可以解密那个蓝牙子设备与终端之间加密数据。
本申请一示例性实施例还提供了一种第一无线音频输出设备，所述第一无线音频输出设备，用于：
通过第一无线链路向第二无线音频输出设备发送监听指示信息，所述监听指示信息用于指示所述第二无线音频输出设备监听所述第一无线音频输出设备与音频源之间的交互信息，所述第一无线音频输出设备与所述第二无线音频输出设备具有相同的公私钥对；
通过第二无线链路向所述音频源发送所述公私钥对中的公钥，以及通过所 述第二无线链路接收来自于所述音频源的公钥，以使得所述第二无线音频输出设备在接收到所述监听指示信息后，监听获取所述音频源的公钥，基于所述公私钥对中的私钥和所述音频源的公钥，确定所述第二无线链路上的链路信息。
在一些实施例中，所述第一无线音频输出设备接收来自于安全管理器的所述公私钥对。
在一些实施例中，所述安全管理器包括以下任意一项：蓝牙耳机充电盒、产线烧录设备。
在一些实施例中，所述第一无线音频输出设备包括以下任意一项：蓝牙耳机、蓝牙音箱。
本申请一示例性实施例还提供了一种第二无线音频输出设备，所述第二无线音频输出设备，用于：
通过第一无线链路接收来自于第一无线音频输出设备的监听指示信息，所述监听指示信息用于指示所述第二无线音频输出设备监听所述第一无线音频输出设备与音频源之间的交互信息，所述第一无线音频输出设备与所述第二无线音频输出设备具有相同的公私钥对；
监听获取第二无线链路上的所述音频源的公钥，所述第二无线链路是所述第一无线音频输出设备与所述音频源进行通信的链路；
基于所述公私钥对中的私钥和所述音频源的公钥，确定所述第二无线链路上的链路信息。
在一些实施例中，所述第二无线音频输出设备，用于：
基于所述音频源的公钥和所述公私钥对中的私钥，确定所述第一无线音频输出设备与所述音频源之间的共享密钥；
基于所述共享密钥，确定所述链路信息。
在一些实施例中，所述链路信息包括链路密钥；
所述第二无线音频输出设备，用于：
监听获取所述第二无线链路上的随机数；
基于所述共享密钥、所述随机数、所述音频源的蓝牙地址、所述第一无线音频输出设备的蓝牙地址，确定所述链路密钥。
在一些实施例中，所述链路信息包括长期密钥LTK；
所述第二无线音频输出设备，用于：
监听获取所述第二无线链路上的随机数；
基于所述共享密钥、所述随机数、所述音频源的蓝牙地址、所述第一无线音频输出设备的蓝牙地址，确定所述LTK。
在一些实施例中，所述第二无线音频输出设备，还用于：
基于所述链路信息，确定会话密钥；
基于所述会话密钥对所述第二无线链路上的通信数据进行解密，得到解密后的通信数据。
在一些实施例中，所述第二无线音频输出设备，用于：
监听获取所述第二无线链路上的随机数；
基于所述链路信息、所述随机数，确定所述会话密钥。
上述第一无线音频输出设备相当于上文实施例中介绍的第一蓝牙子设备，第二无线音频输出设备相当于上文实施例中介绍的第二蓝牙子设备，音频源相当于上文实施例中介绍的终端。对于各个设备的执行步骤的细节说明，可参见上文实施例中的描述，此处不做赘述。
下述为本申请系统实施例。对于本申请系统实施例中未披露的细节，请参照本申请设备实施例。
请参考图5，其示出了本申请一个实施例提供的密钥确定系统的示意图。所述系统包括蓝牙设备510和终端520，所述蓝牙设备510包括n个蓝牙子设备，所述n为大于1的整数，所述n个蓝牙子设备具有相同的公私钥对。
第一蓝牙子设备511，用于向第二蓝牙子设备发送监听指示信息，所述监听指示信息用于指示所述第二蓝牙子设备监听所述第一蓝牙子设备与所述终端之间的交互信息；
所述第一蓝牙子设备511，还用于向所述终端发送所述公私钥对中的公钥；
所述终端520，用于向所述第一蓝牙子设备发送终端公钥；
所述第二蓝牙子设备512，用于在接收到来自于所述第一蓝牙子设备的监听指示信息后，监听获取所述终端公钥；基于所述终端公钥和所述公私钥对中的私钥，确定所述终端与所述第一蓝牙子设备之间的链路信息；
其中，所述第一蓝牙子设备是指所述n个蓝牙子设备中的至少一个蓝牙子设备，所述第二蓝牙子设备是指所述n个蓝牙子设备中除所述第一蓝牙子设备之外的其它蓝牙子设备中的任意一个蓝牙子设备。
综上所述，本申请实施例提供的技术方案中，蓝牙设备中包括的各蓝牙子设备共享相同的公私钥对，第一蓝牙子设备向第二蓝牙子设备发送监听指示信息，以使得第二蓝牙子设备监听获取到终端向第一蓝牙子设备发送的终端公钥，第二蓝牙设备基于终端公钥和公私钥对中的私钥确定终端与第一蓝牙子设备之间的链路信息，相较于相关技术中第一蓝牙子设备将链路信息发送给第二蓝牙子设备，本申请提高了蓝牙设备的安全性，降低了蓝牙设备的安全风险。
在示意性实施例中，所述第二蓝牙子设备512，用于：
基于所述终端公钥和所述公私钥对中的私钥，确定所述终端与所述第一蓝牙子设备之间的共享密钥；
基于所述共享密钥，确定所述链路信息。
在示意性实施例中，所述链路信息包括链路密钥；
所述终端520，还用于向所述第一蓝牙子设备发送第一随机数；
所述第一蓝牙子设备511，还用于向所述终端发送第二随机数；
所述第二蓝牙子设备512，还用于监听获取所述第一随机数、所述第二随机数；
所述第二蓝牙子设备512，还用于基于所述共享密钥、所述第一随机数、所述第二随机数、明文字符串、所述终端的蓝牙地址、所述第一蓝牙子设备的蓝 牙地址，确定所述链路密钥；
其中，所述第一随机数是所述终端选择的随机数值，所述第二随机数是所述第一蓝牙子设备选择的随机数值。
在示意性实施例中，所述链路信息包括长期密钥LTK；
所述终端520，还用于向所述第一蓝牙子设备发送第三随机数；
所述第一蓝牙子设备511，还用于向所述终端发送第四随机数；
所述第二蓝牙子设备512，还用于监听获取所述第三随机数、所述第四随机数；
所述第二蓝牙子设备512，还用于基于所述共享密钥、所述第三随机数、所述第四随机数、所述终端的蓝牙地址、所述第一蓝牙子设备的蓝牙地址，确定所述LTK；
其中，所述第三随机数是所述终端选择的随机数值，所述第四随机数是所述第一蓝牙子设备选择的随机数值。
在示意性实施例中，所述第二蓝牙子设备512，还用于：
基于所述链路信息，确定会话密钥；
基于所述会话密钥对所述第一蓝牙子设备与所述终端之间的通信数据进行解密，得到解密后的通信数据。
在示意性实施例中，所述终端520，还用于向所述第一蓝牙子设备发送第五随机数；
所述第一蓝牙子设备511，还用于向所述终端发送第六随机数；
所述第二蓝牙子设备512，还用于监听获取所述第五随机数、所述第六随机数；
所述第二蓝牙子设备512，还用于基于所述链路信息、所述第五随机数、所述第六随机数，确定所述会话密钥；
其中，所述第五随机数是指所述终端选择的随机数值，所述第六随机数是所述第一蓝牙子设备选择的随机数值。
在示意性实施例中，所述蓝牙子设备用于接收来自于安全管理器的所述公私钥对。
本申请一示例性实施例还提供了一种无线音频系统，所述无线音频系统包括第一无线音频输出设备以及至少一个第二无线音频输出设备，所述第一无线音频输出设备与所述第二无线音频输出设备具有相同的公私钥对；
所述第一无线音频输出设备，用于通过第一无线链路向所述第二无线音频输出设备发送监听指示信息，所述监听指示信息用于指示所述第二无线音频输出设备监听所述第一无线音频输出设备与音频源之间的交互信息；
所述第一无线音频输出设备，还用于通过第二无线链路向所述音频源发送所述公私钥对中的公钥，以及通过所述第二无线链路接收来自于所述音频源的公钥；
所述第二无线音频输出设备，用于在接收到所述监听指示信息的情况下，监听获取所述第二无线链路上的所述音频源的公钥；
所述第二无线音频输出设备，还用于基于所述公私钥对中的私钥和所述音频源的公钥，确定所述第二无线链路上的链路信息。
需要说明的是，上述实施例提供的系统与设备实施例属于同一构思，其具体实现过程详见设备实施例，这里不再赘述。
以上所述仅为本申请的示例性实施例，并不用以限制本申请，凡在本申请的精神和原则之内，所作的任何修改、等同替换、改进等，均应包含在本申请的保护范围之内。

Claims (18)

  1. 一种第一无线音频输出设备，所述第一无线音频输出设备，用于：
    通过第一无线链路向第二无线音频输出设备发送监听指示信息，所述监听指示信息用于指示所述第二无线音频输出设备监听所述第一无线音频输出设备与音频源之间的交互信息，所述第一无线音频输出设备与所述第二无线音频输出设备具有相同的公私钥对；
    通过第二无线链路向所述音频源发送所述公私钥对中的公钥，以及通过所述第二无线链路接收来自于所述音频源的公钥，以使得所述第二无线音频输出设备在接收到所述监听指示信息后，监听获取所述音频源的公钥，基于所述公私钥对中的私钥和所述音频源的公钥，确定所述第二无线链路上的链路信息。
  2. 根据权利要求1所述的第一无线音频输出设备，其中，所述第一无线音频输出设备接收来自于安全管理器的所述公私钥对。
  3. 根据权利要求2所述的第一无线音频输出设备，其中，所述安全管理器包括以下任意一项：蓝牙耳机充电盒、产线烧录设备。
  4. 根据权利要求1至3任一项所述的第一无线音频输出设备，其中，所述第一无线音频输出设备包括以下任意一项：蓝牙耳机、蓝牙音箱。
  5. 一种第二无线音频输出设备，所述第二无线音频输出设备，用于：
    通过第一无线链路接收来自于第一无线音频输出设备的监听指示信息，所述监听指示信息用于指示所述第二无线音频输出设备监听所述第一无线音频输出设备与音频源之间的交互信息，所述第一无线音频输出设备与所述第二无线音频输出设备具有相同的公私钥对；
    监听获取第二无线链路上的所述音频源的公钥，所述第二无线链路是所述第一无线音频输出设备与所述音频源进行通信的链路；
    基于所述公私钥对中的私钥和所述音频源的公钥，确定所述第二无线链路上的链路信息。
  6. 根据权利要求5所述的第二无线音频输出设备，其中，所述第二无线音频输出设备，用于：
    基于所述音频源的公钥和所述公私钥对中的私钥，确定所述第一无线音频输出设备与所述音频源之间的共享密钥；
    基于所述共享密钥，确定所述链路信息。
  7. 根据权利要求6所述的第二无线音频输出设备，其中，所述链路信息包括链路密钥；
    所述第二无线音频输出设备，用于：
    监听获取所述第二无线链路上的随机数；
    基于所述共享密钥、所述随机数、所述音频源的蓝牙地址、所述第一无线音频输出设备的蓝牙地址，确定所述链路密钥。
  8. 根据权利要求6所述的第二无线音频输出设备，其中，所述链路信息包括长期密钥LTK；
    所述第二无线音频输出设备，用于：
    监听获取所述第二无线链路上的随机数；
    基于所述共享密钥、所述随机数、所述音频源的蓝牙地址、所述第一无线音频输出设备的蓝牙地址，确定所述LTK。
  9. 根据权利要求5所述的第二无线音频输出设备，其中，所述第二无线音频输出设备，还用于：
    基于所述链路信息，确定会话密钥；
    基于所述会话密钥对所述第二无线链路上的通信数据进行解密，得到解密后的通信数据。
  10. 根据权利要求9所述的第二无线音频输出设备，其中，所述第二无线音频输出设备，用于：
    监听获取所述第二无线链路上的随机数；
    基于所述链路信息、所述随机数，确定所述会话密钥。
  11. 一种无线音频系统，所述无线音频系统包括第一无线音频输出设备以及至少一个第二无线音频输出设备，所述第一无线音频输出设备与所述第二无线音频输出设备具有相同的公私钥对；
    所述第一无线音频输出设备，用于通过第一无线链路向所述第二无线音频输出设备发送监听指示信息，所述监听指示信息用于指示所述第二无线音频输出设备监听所述第一无线音频输出设备与音频源之间的交互信息；
    所述第一无线音频输出设备，还用于通过第二无线链路向所述音频源发送所述公私钥对中的公钥，以及通过所述第二无线链路接收来自于所述音频源的公钥；
    所述第二无线音频输出设备，用于在接收到所述监听指示信息的情况下，监听获取所述第二无线链路上的所述音频源的公钥；
    所述第二无线音频输出设备，还用于基于所述公私钥对中的私钥和所述音频源的公钥，确定所述第二无线链路上的链路信息。
  12. 一种蓝牙设备，所述蓝牙设备包括n个蓝牙子设备，所述n为大于1的整数，所述n个蓝牙子设备具有相同的公私钥对；
    第一蓝牙子设备，用于向第二蓝牙子设备发送监听指示信息，所述监听指示信息用于指示所述第二蓝牙子设备监听所述第一蓝牙子设备与终端之间的交互信息；
    所述第一蓝牙子设备，还用于向所述终端发送所述公私钥对中的公钥，以及接收来自于所述终端的终端公钥；
    所述第二蓝牙子设备，用于在接收到来自于所述第一蓝牙子设备的监听指示信息后，监听获取所述终端公钥；基于所述终端公钥和所述公私钥对中的私钥，确定所述终端与所述第一蓝牙子设备之间的链路信息；
    其中，所述第一蓝牙子设备是指所述n个蓝牙子设备中的至少一个蓝牙子设备，所述第二蓝牙子设备是指所述n个蓝牙子设备中除所述第一蓝牙子设备之外的其它蓝牙子设备中的任意一个蓝牙子设备。
  13. 根据权利要求12所述的蓝牙设备，其中，所述第二蓝牙子设备，用于：
    基于所述终端公钥和所述公私钥对中的私钥，确定所述终端与所述第一蓝牙子设备之间的共享密钥；
    基于所述共享密钥，确定所述链路信息。
  14. 根据权利要求13所述的蓝牙设备，其中，所述链路信息包括链路密钥；
    所述第二蓝牙子设备，用于：
    监听获取第一随机数、第二随机数；
    基于所述共享密钥、所述第一随机数、所述第二随机数、明文字符串、所述终端的蓝牙地址、所述第一蓝牙子设备的蓝牙地址，确定所述链路密钥；
    其中，所述第一随机数是所述终端选择的随机数值，所述第二随机数是所述第一蓝牙子设备选择的随机数值。
  15. 根据权利要求13所述的蓝牙设备，其中，所述链路信息包括长期密钥LTK；
    所述第二蓝牙子设备，用于：
    监听获取第三随机数、第四随机数；
    基于所述共享密钥、所述第三随机数、所述第四随机数、所述终端的蓝牙地址、所述第一蓝牙子设备的蓝牙地址，确定所述LTK；
    其中，所述第三随机数是所述终端选择的随机数值，所述第四随机数是所述第一蓝牙子设备选择的随机数值。
  16. 根据权利要求12所述的蓝牙设备，其中，所述第二蓝牙子设备，还用于：
    基于所述链路信息，确定会话密钥；
    基于所述会话密钥对所述第一蓝牙子设备与所述终端之间的通信数据进行解密，得到解密后的通信数据。
  17. 根据权利要求16所述的蓝牙设备，其中，所述第二蓝牙子设备，用于：
    监听获取第五随机数、第六随机数；
    基于所述链路信息、所述第五随机数、所述第六随机数，确定所述会话密钥；
    其中，所述第五随机数是指所述终端选择的随机数值，所述第六随机数是所述第一蓝牙子设备选择的随机数值。
  18. 一种密钥确认系统，所述系统包括蓝牙设备和终端，所述蓝牙设备包括n个蓝牙子设备，所述n为大于1的整数，所述n个蓝牙子设备具有相同的公私钥对；
    第一蓝牙子设备，用于向第二蓝牙子设备发送监听指示信息，所述监听指示信息用于指示所述第二蓝牙子设备监听所述第一蓝牙子设备与所述终端之间的交互信息；
    所述第一蓝牙子设备，还用于向所述终端发送所述公私钥对中的公钥；
    所述终端，用于向所述第一蓝牙子设备发送终端公钥；
    所述第二蓝牙子设备，用于在接收到来自于所述第一蓝牙子设备的监听指示信息后，监听获取所述终端公钥；基于所述终端公钥和所述公私钥对中的私钥，确定所述终端与所述第一蓝牙子设备之间的链路信息；
    其中，所述第一蓝牙子设备是指所述n个蓝牙子设备中的至少一个蓝牙子设备，所述第二蓝牙子设备是指所述n个蓝牙子设备中除所述第一蓝牙子设备之外的其它蓝牙子设备中的任意一个蓝牙子设备。
PCT/CN2022/085729 2021-05-11 2022-04-08 蓝牙设备以及密钥确定系统 Ceased WO2022237409A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN202110511417.4A CN115334502A (zh) 2021-05-11 2021-05-11 蓝牙设备以及密钥确定系统
CN202110511417.4 2021-05-11

Publications (1)

Publication Number Publication Date
WO2022237409A1 true WO2022237409A1 (zh) 2022-11-17

Family

ID=83912945

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2022/085729 Ceased WO2022237409A1 (zh) 2021-05-11 2022-04-08 蓝牙设备以及密钥确定系统

Country Status (3)

Country Link
US (1) US12282228B2 (zh)
CN (1) CN115334502A (zh)
WO (1) WO2022237409A1 (zh)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN116866909A (zh) * 2023-05-11 2023-10-10 长江量子(武汉)科技有限公司 双耳耳机密钥同步方法及双耳加密耳机

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20120128154A1 (en) * 2010-11-23 2012-05-24 Intuit Inc. Establishing a secure proximity pairing between electronic devices
CN104247369A (zh) * 2012-02-22 2014-12-24 高通股份有限公司 用于使设备标识符变模糊的方法和设备
CN111698794A (zh) * 2020-06-24 2020-09-22 杭州国芯科技股份有限公司 一种无线音频共享方法

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2008523649A (ja) * 2004-11-12 2008-07-03 コーニンクレッカ フィリップス エレクトロニクス エヌ ヴィ ヘッドホンセットを介してコンテンツを共有する装置及び方法
CN105072564B (zh) * 2015-07-30 2019-04-02 Oppo广东移动通信有限公司 一种基于蓝牙连接的音频播放方法及装置
US11102655B1 (en) * 2020-03-31 2021-08-24 Bose Corporation Secure device action initiation using a remote device
CN111629370B (zh) 2020-05-27 2022-11-04 歌尔科技有限公司 一种蓝牙耳机及其配对连接方法、装置和tws耳机

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20120128154A1 (en) * 2010-11-23 2012-05-24 Intuit Inc. Establishing a secure proximity pairing between electronic devices
CN104247369A (zh) * 2012-02-22 2014-12-24 高通股份有限公司 用于使设备标识符变模糊的方法和设备
CN111698794A (zh) * 2020-06-24 2020-09-22 杭州国芯科技股份有限公司 一种无线音频共享方法

Also Published As

Publication number Publication date
US12282228B2 (en) 2025-04-22
CN115334502A (zh) 2022-11-11
US20240069389A1 (en) 2024-02-29

Similar Documents

Publication Publication Date Title
US10694360B2 (en) Hearing device and method of hearing device communication
US12581311B2 (en) Method and device to establish a wireless secure link while maintaining privacy against tracking
JP5053424B2 (ja) 中継装置、無線通信装置、ネットワークシステム、プログラム、および、方法
US10785585B2 (en) Method of manufacturing a hearing device and hearing device with certificate
US11062012B2 (en) Hearing device with communication logging and related method
CN109905348B (zh) 端到端认证及密钥协商方法、装置及系统
US12556928B2 (en) Pairing method applied to short-range communication system and wireless device
US10944555B2 (en) Secure methods and systems for identifying bluetooth connected devices with installed application
US20230327857A1 (en) Communication Method and Apparatus
JP2021007233A (ja) セキュアな聴覚装置の通信のための装置および関係する方法
JP2018129793A (ja) 聴覚システムの通信方法及び関連する装置
US12282228B2 (en) First wireless audio output device, second wireless audio output device, and Bluetooth device
JP2022174712A (ja) ブルートゥース周辺装置及びブルートゥース中央装置並びに検証方法
US20230099065A1 (en) Key obtaining method and related apparatus
EP3113515B1 (en) Hearing device and method of hearing device communication
CN110875902A (zh) 通信方法、装置及系统
CN119603674A (zh) 信息帧传输方法、网络设备及存储介质
CN117939450A (zh) 蓝牙mesh网络的连接方法、装置和蓝牙通信系统
EP3113517A1 (en) Hearing device with communication logging and related method
DK201570438A1 (en) Method of manufacturing a hearing device and hearing device with certificate.

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 22806379

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 22806379

Country of ref document: EP

Kind code of ref document: A1