WO2023103425A1

WO2023103425A1 - Communicative connection method, system, and apparatus, storage medium, and processor

Info

Publication number: WO2023103425A1
Application number: PCT/CN2022/110338
Authority: WO
Inventors: 袁伟
Original assignee: 青岛海尔科技有限公司; 海尔智家股份有限公司
Priority date: 2021-12-10
Filing date: 2022-08-04
Publication date: 2023-06-15
Also published as: CN114254342A

Abstract

The present disclosure provides a communicative connection method, system, and apparatus, a storage medium, and a processor. The method comprises: receiving a connection request initiated by an application program; generating an encrypted password on the basis of the connection request; transmitting the encrypted password and a preset random value to the application program, wherein the application program generates verification information according to the encrypted password and the preset random value; verifying the verification information returned by the application program to obtain a verification result; according to the verification result, establishing a communicative connection with the application program.

Description

Communication connection method, system, device, storage medium and processor

This disclosure claims the priority of the Chinese patent application with the application number 202111511059.3 and the title of the invention "communication connection method, system, device, storage medium and processor" filed with the China Patent Office on December 10, 2021, the entire contents of which are incorporated by reference incorporated in this disclosure.

technical field

The present disclosure relates to the communication field, and in particular, to a communication connection method, system, device, storage medium, and processor.

Background technique

There are two types of connection between common application apps and BLE devices. One is direct connection without any connection verification measures, and the other is common secret key verification, which is easy to be stolen by attackers. Thus maliciously connecting the device.

Aiming at the above-mentioned problem of insecure communication connection between the application program and the device, no effective solution has been proposed so far.

Contents of the invention

Embodiments of the present disclosure provide a communication connection method, system, device, storage medium, and processor, so as to at least solve the technical problem of an insecure communication connection between an application program and a device.

According to an aspect of an embodiment of the present disclosure, a communication connection method is provided, including: receiving a connection request initiated by an application; generating an encrypted password based on the connection request; sending the encrypted password and a preset random value to the An application program, wherein the application program generates verification information according to the encrypted password and the preset random value; verifies the verification information to obtain a verification result; establishes communication with the application program according to the verification result connect.

According to another aspect of the embodiments of the present disclosure, there is also provided a communication connection method, including: sending a connection request to the device to be connected; receiving an encrypted password and a preset random value provided by the device to be connected, wherein the The device to be connected generates the encrypted password according to the connection request, and the device to be connected pre-stores the preset random value; generates verification information according to the encrypted password and the preset random value; The device sends verification information, wherein the device to be connected verifies the verification information to obtain a verification result; and according to the

According to another aspect of the embodiments of the present disclosure, there is also provided a communication connection system, including: an application program configured to send a connection request to a device to be connected; receive an encrypted password and a preset random value provided by the device to be connected; Generate verification information according to the encrypted password and the preset random value; send the verification information to the device to be connected; the device to be connected is set to generate an encrypted password based on the connection request, and the returned by the application program Verifying the verification information to obtain a verification result; establishing a communication connection with the application program according to the verification result.

According to another aspect of the embodiments of the present disclosure, there is also provided a communication connection device, including: a first receiving unit configured to receive a connection request initiated by an application program; a first generation unit configured to generate an encrypted message based on the connection request password; a first sending unit configured to send the encrypted password and a preset random value to the application program, wherein the application program generates verification information according to the encrypted password and the preset random value; a verification unit , configured to verify the verification information to obtain a verification result; an establishing unit configured to establish a communication connection with the application program according to the verification result.

According to another aspect of the embodiments of the present disclosure, there is also provided a communication connection device, including: a second sending unit configured to send a connection request to the device to be connected; a second receiving unit configured to receive the device to be connected An encrypted password and a preset random value are provided, wherein the device to be connected generates the encrypted password according to the connection request, and the device to be connected pre-stores the preset random value; the second generation unit is configured to Generate verification information according to the encrypted password and the preset random value; the third sending unit is configured to send verification information to the device to be connected, wherein the device to be connected verifies the verification information to obtain verification result; and establish a communication connection according to the verification result.

According to another aspect of the embodiments of the present disclosure, there is also provided a computer-readable storage medium, the computer-readable storage medium includes a stored program, wherein when the program is running, the computer-readable storage medium is controlled The device executes the communication connection method described above.

According to another aspect of the embodiments of the present disclosure, there is also provided a processor, the processor is configured to run a program, wherein the above-mentioned communication connection method is executed when the program is running.

In the embodiment of the present disclosure, the connection request initiated by the application program is received; an encrypted password is generated based on the connection request; the encrypted password and the preset random value are sent to the application program, wherein the application program generates verification information according to the encrypted password and the preset random value ;Verify the verification information returned by the application program to obtain the verification result; establish a communication connection with the application program according to the verification result; since the verification information for establishing a communication connection is generated according to a preset random value and an encrypted password, and the encrypted password is based on The connection request is dynamically generated, so the verification information for each communication connection establishment will be different, and even if the verification information is stolen by others, there will be no malicious connection, thus solving the problem of insecure communication between the application and the device technical problem.

Description of drawings

The drawings described here are used to provide a further understanding of the present disclosure, and constitute a part of the present application. The exemplary embodiments of the present disclosure and their descriptions are set to explain the present disclosure, and do not constitute undue limitations on the present disclosure. In the attached picture:

FIG. 1 is a flowchart 1 of a communication connection method according to an embodiment of the present disclosure;

FIG. 2 is a second flowchart of a communication connection method according to an embodiment of the present disclosure;

3 is a schematic diagram of a security mechanism for connecting an App to a BLE device according to an embodiment of the present disclosure;

Fig. 4 is a schematic diagram of a communication connection system according to an embodiment of the present disclosure;

FIG. 5 is a first schematic diagram of a communication connection device according to an embodiment of the present disclosure;

FIG. 6 is a second schematic diagram of a communication connection device according to an embodiment of the present disclosure;

Fig. 7 is a structural block diagram of an optional electronic device according to an embodiment of the present disclosure.

Detailed ways

In order to enable those skilled in the art to better understand the present disclosure, the technical solutions in the embodiments of the present disclosure will be clearly and completely described below in conjunction with the drawings in the embodiments of the present disclosure. Obviously, the described embodiments are only It is an embodiment of a part of the present disclosure, but not all of the embodiments. Based on the embodiments in the present disclosure, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts shall fall within the protection scope of the present disclosure.

It should be noted that the terms "first" and "second" in the specification and claims of the present disclosure and the above drawings are used to distinguish similar objects, but not necessarily used to describe a specific sequence or sequence. It is to be understood that the data so used are interchangeable under appropriate circumstances such that the embodiments of the disclosure described herein can be practiced in sequences other than those illustrated or described herein. Furthermore, the terms "comprising" and "having", as well as any variations thereof, are intended to cover a non-exclusive inclusion, for example, a process, method, system, product or device comprising a sequence of steps or elements is not necessarily limited to the expressly listed instead, may include other steps or elements not explicitly listed or inherent to the process, method, product or apparatus.

According to an embodiment of the present disclosure, an embodiment of a communication connection method is provided. It should be noted that the steps shown in the flowcharts of the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions, and, although in The flowcharts show a logical order, but in some cases the steps shown or described may be performed in an order different from that shown or described herein.

Fig. 1 is a flow chart 1 of a communication connection method according to an embodiment of the present disclosure. As shown in Fig. 1, the method includes the following steps:

Step S102, receiving a connection request initiated by an application;

Step S104, generating an encrypted password based on the connection request;

Step S106, sending the encrypted password and the preset random value to the application program, wherein the application program generates verification information according to the encrypted password and the preset random value;

Step S108, verifying the verification information to obtain a verification result;

Step S110, establishing a communication connection with the application program according to the verification result.

In the embodiment of the present disclosure, the connection request initiated by the application program is received; an encrypted password is generated based on the connection request; the encrypted password and the preset random value are sent to the application program, wherein the application program generates verification information according to the encrypted password and the preset random value ;Verify the verification information returned by the application program to obtain the verification result; establish a communication connection with the application program according to the verification result; since the verification information for establishing a communication connection is generated according to a preset random value and an encrypted password, and the encrypted password is based on The connection request is dynamically generated, so the verification information of each communication connection will be different, and even if the verification information is stolen by others, there will be no malicious connection, which achieves the purpose of ensuring the security of the communication connection and the application program The technical effect of the secure communication connection with the device, thereby solving the technical problem of the insecure communication connection between the application program and the device.

Optionally, the encrypted password may be a challenge code, and the preset random value may be a preset salt value.

The communication connection method shown in Figure 1 can be applied on the side of the device to be connected, respond to the connection request initiated by the application program, feed back the encrypted password and preset random value to the application program, and receive the application program according to the encrypted password and preset random value. The verification information generated by the value, and then realize the communication connection between the device to be connected and the application program based on the verification information.

It should be noted that the above-mentioned communication connections include: Bluetooth communication connections, WiFi communication connections, and other wireless communication connections; and may also include various priority communication connections based on verification-based connections.

In the above step S104, the encrypted password may be randomly generated according to the connection request, and a different encrypted password may be generated for each connection.

In the above step S106, the preset random value may be a unique identifier pre-stored in the device to be connected, and the device to be connected may feed back the preset random value to the application program APP that initiates the connection request.

Optionally, the preset random value may be provided by the application program when the connected device is connected to the application program for the first time.

In the above step S106, verifying the verification information returned by the application program, and obtaining the verification result includes: restoring the verification information using an encrypted password, and then performing verification based on the restored verification information to obtain the verification result.

As an optional embodiment, verifying the verification information returned by the application program, and obtaining the verification result includes: restoring the verification information according to the encrypted password to obtain the verification signature; judging whether the verification signature is consistent with the preset signature, wherein the preset signature Determine according to a preset random value; if the verification signature is consistent with the preset signature, determine that the verification result is verified; if the verification signature is inconsistent with the preset signature, determine that the verification result is not verified.

Optionally, the preset signature may be generated according to a preset random value.

As an optional example, the preset signature can be generated in the following way: generate the confusion array mix[] according to the preset random value and the preset array "0123456789abcdefABCD\0"0123456789abcdefABCD\0"; then use the sha256 encryption algorithm to encrypt the confusion array mix[] performs encryption operations; finally take out 10 hash algorithm bytes, convert the bytes into strings, and then concatenate the converted strings and convert them into data to obtain the preset signature.

In the above embodiments of the present disclosure, since the preset signature is generated based on the preset random value, and the verification information is generated based on the encrypted password and the preset random value, when the preset random value and the encrypted password are known, and the known In the case of the preset signature generation method, the verification information can be restored to obtain the verification signature. If the verification signature is consistent with the preset signature stored in the device to be connected, it proves that the communication connection between the application program and the device to be connected is legal, thus Establish a communication connection between the application program and the device to be connected.

Optionally, the verification information can be generated by the application program, and the specific process includes: according to the preset random value fed back by the device to be connected, the verification signature is generated using the preset signature generation method, and then the verification information is generated based on the preset signature and encrypted password , and then in the process of restoring the verification information by the device to be connected, the verification signature can be restored based on the encrypted password.

Optionally, a preset signature generation method may be pre-stored in the device to be connected.

As an optional embodiment, after receiving the connection request initiated by the application, the method further includes: detecting whether the device to be connected is connected to the application for the first time; In the case of , the preset random value and preset signature provided by the application are stored, and a communication connection with the application is established, wherein the application generates a preset signature according to the preset random value.

In the above embodiments of the present disclosure, since the preset random value and the preset signature stored in the device to be connected are provided by the application program, if the device to be connected establishes a communication connection with the application program for the first time, the There will be no preset random value and preset signature provided by the application. In this case, the device to be connected and the application can directly establish a communication connection without verification, and then the device to be connected can receive the application. The preset random value and preset signature provided by the program are stored, and the preset random value and preset signature are stored to provide verification for the next communication connection between the device to be connected and the application program.

As an optional embodiment, detecting whether the device to be connected is connected to the application for the first time includes: detecting whether the device to be connected has a preset random value and a preset signature provided by the application; If there is a preset random value and preset signature provided by the application, it is considered that the device to be connected is connected to the application for the first time; if the preset random value and preset signature provided by the application are stored in the device to be connected, Then it is considered that the device to be connected is not connected with the application program for the first time.

Optionally, detecting whether the device to be connected is connected to the application program for the first time can be performed on the device to be connected side, the application program side, or both the device to be connected side and the application program side.

Optionally, on the side of the device to be connected, it is detected whether the device to be connected is connected to the application program for the first time, which can be determined by detecting whether there is a preset random value and a preset signature provided by the application program in the device to be connected. If the preset random value and preset signature provided by the application are stored in the device, it is determined that it is not the first connection; if the preset random value and preset signature provided by the application are not stored in the device to be connected, it is determined that it is the first one connection.

Optionally, on the application side, it is detected whether the device to be connected is connected to the application program for the first time, which can be determined by detecting whether there is a connection record of the device to be connected in the historical connection record of the application program. If the connection record of the connected device is determined to be the first connection, a preset random value and a preset signature will be provided to the device to be connected after the connection; if the connection record of the device to be connected is included in the historical connection record, it is determined not to be the first connections.

Optionally, synchronously detect whether the device to be connected is connected to the application for the first time on the side of the device to be connected and the application program, and when the detection results of the device to be connected and the application program are the same, determine that the detection result is correct, and follow the determined The detection result establishes a communication connection between the device to be connected and the application program.

Fig. 2 is a flowchart 2 of a communication connection method according to an embodiment of the present disclosure. As shown in Fig. 2, the method includes the following steps:

Step S202, sending a connection request to the device to be connected;

Step S204, receiving an encrypted password and a preset random value provided by the device to be connected, wherein the device to be connected generates an encrypted password according to the connection request, and the device to be connected has a preset random value in advance;

Step S206, generating verification information according to the encrypted password and the preset random value;

Step S208, sending verification information to the device to be connected, wherein the device to be connected verifies the verification information to obtain a verification result; and establishes a communication connection according to the verification result.

In the embodiment of the present disclosure, a connection request is sent to the device to be connected; an encrypted password and a preset random value provided by the device to be connected are received, wherein the device to be connected generates an encrypted password according to the connection request, and the device to be connected has a preset Random value; generate verification information according to the encrypted password and preset random value; send verification information to the device to be connected, wherein, the device to be connected verifies the verification information and obtains the verification result; and establishes a communication connection according to the verification result; due to the establishment of the communication connection The verification information is generated according to the preset random value and encrypted password, and the encrypted password is dynamically generated based on the connection request, so the verification information of each communication connection will be different, and even if the verification information is stolen by others, it will not In the case of a malicious connection, the purpose of ensuring the security of the communication connection is achieved, the technical effect of ensuring a secure communication connection between the application program and the device is achieved, and the technical problem of the insecure communication connection between the application program and the device is solved.

The communication connection method shown in Figure 2 can be applied on the application side, send a connection request to the device to be connected, obtain the encrypted password and preset random value fed back by the device to be connected, and then verify the information according to the encrypted password and preset random value, And send the verification information to the device to be connected for verification, and then realize the communication connection between the device to be connected and the application program based on the verification result of the device to be connected.

Optionally, generating the verification information according to the encrypted password and the preset random value includes: according to the preset random value fed back by the device to be connected, using a preset signature generation method to generate the verification signature, and then generating the verification information based on the preset signature and the encrypted password , and then in the process of restoring the verification information by the device to be connected, the verification signature can be restored based on the encrypted password.

As an optional embodiment, after sending the connection request to the device to be connected, the method further includes: detecting whether the application program is connected to the device to be connected for the first time; In the case of , the application generates a preset random value and a preset signature, and sends the preset random value and the preset signature to the device to be connected, wherein the preset signature is determined according to the preset random value.

As an optional embodiment, detecting whether the application program is connected to the device to be connected for the first time includes: querying whether the historical connection record of the application program includes the connection record of the device to be connected; If there is no connection record of the device, it is considered that the device to be connected is connected to the application for the first time; if the historical connection record includes the connection record of the device to be connected, it is considered that the device to be connected is not connected to the application for the first time.

For the convenience of description, the communication connection between the application program APP and the BLE Bluetooth low energy device is taken as an example below for description.

The present disclosure also provides an optional embodiment, which provides a security mechanism for connecting an App to a BLE device.

FIG. 3 is a schematic diagram of a connection security mechanism between an App and a BLE device according to an embodiment of the present disclosure. As shown in FIG. 3 , the connection security mechanism is as follows:

1) The BLE device (Bluetooth Low Energy device) does not have any data when it leaves the factory. The first connection of the application app will write the preset salt value Salt Value and preset signature Signature to the BLE device, and the BLE device will write the preset salt value Salt Value Value and preset signature Signature are stored directly

2) When the application App connects to the BLE device for the second time, it first reads the previously stored preset salt value Salt Value and the randomly generated challenge code Challenge Code, then generates the verification information Verification through an algorithm, and writes it into the BLE equipment.

Among them, the verification information Verification is generated by the XOR operation of each byte of the preset signature Signature (generated from the preset salt value Salt Value) and the challenge code Challenge Code (read from the firmware).

3) After the BLE device obtains the verification information Verification, it uses it and the Challenge Code randomly generated by this connection to perform an XOR operation to restore the verification signature Signature.

4) Compare the restored verification signature Signature with the preset Signature written for the first time, if they are equal, the decryption is successful, and the BLE device is connected to the application App, otherwise the decryption fails and the BLE device actively disconnects.

The technical solution provided by this disclosure, in order to ensure the secure connection between the BLE device and the App, uses dynamic signatures and dynamic challenge codes to verify the signature of the device connection, and the secret key sent by the BLE device every time it is connected is dynamically generated. There is no security risk if someone else steals it. It ensures the safe connection between the application app and the BLE device, and prevents attackers from connecting to the BLE device to maliciously tamper with the data.

Optionally, since the preset salt value and challenge code are obtained and the verification information Verification is calculated before each connection to the BLE device, the connection time will be relatively increased; therefore, using this solution for critical and sensitive services can ensure the connection safety.

Due to the connection of the BLE device on the APP side of the application, the security of the connection verification is also very important. If the connection is not encrypted and verified, it is easy for an attacker to connect to the device and then maliciously tamper with the data of the BLE device. Ordinary devices generally do not encrypt Connection, or the use of static key verification is too simple and easy to be cracked; therefore, the connection method of this scheme can effectively prevent attackers from maliciously connecting devices.

FIG. 4 is a schematic diagram of a communication connection system according to an embodiment of the present disclosure. As shown in FIG. 4 , the system includes: an application program 42 configured to send a connection request to the device to be connected; receive the encrypted password and password provided by the device to be connected Preset random value; generate verification information according to the encrypted password and preset random value; send verification information to the device to be connected; the device 44 to be connected is set to generate an encrypted password based on the connection request, and verify the verification information returned by the application program to obtain Validation results; establish a communication connection with the application based on the validation results.

In the embodiment of the present disclosure, the application program is set to send a connection request to the device to be connected; receive the encrypted password and the preset random value provided by the device to be connected; generate verification information according to the encrypted password and the preset random value; Send verification information; the device to be connected is set to generate an encrypted password based on the connection request, verify the verification information returned by the application program, and obtain the verification result; establish a communication connection with the application program according to the verification result; since the verification information for establishing a communication connection is Generated according to the preset random value and encrypted password, and the encrypted password is dynamically generated based on the connection request, so the verification information of each communication connection will be different, and even if the verification information is stolen by others, there will be no malicious connection In this situation, the purpose of ensuring the security of the communication connection is achieved, the technical effect of ensuring a secure communication connection between the application program and the device is achieved, and the technical problem of the insecure communication connection between the application program and the device is solved.

As an optional embodiment, the device to be connected is also set to: restore the verification information according to the encrypted password to obtain the verification signature; judge whether the verification signature is consistent with the preset signature, wherein the preset signature is determined according to a preset random value; If the verification signature is consistent with the preset signature, it is determined that the verification result is passed the verification; when the verification signature is inconsistent with the preset signature, it is determined that the verification result is not passed the verification.

As an optional embodiment, the application program is also configured to query whether the historical connection record includes the connection record of the device to be connected; if the connection record of the device to be connected is not included in the historical connection record, it is considered that the device to be connected is the first Connect with the application once; when the application connects with the device to be connected for the first time, generate a preset random value and a preset signature, and send the preset random value and preset signature to the device to be connected, Among them, the preset signature is determined according to the preset random value; the device to be connected is also set to detect whether there is a preset random value and preset signature provided by the application; if the device to be connected does not have the preset random value and preset signature, it is considered that the device to be connected is connecting with the application for the first time; when the device to be connected is connecting with the application for the first time, store the preset random value and preset Set a signature and establish a communication connection with the application.

According to an embodiment of the present disclosure, an embodiment of a communication connection device is also provided. It should be noted that the communication connection device can be configured to execute the communication connection method in the embodiment of the present disclosure, and the communication connection method in the embodiment of the present disclosure can be Executed in the communication connection device.

FIG. 5 is a first schematic diagram of a communication connection device according to an embodiment of the present disclosure. As shown in FIG. 5 , the device may include: a first receiving unit 51 configured to receive a connection request initiated by an application program; a first generating unit 53 , configured to generate an encrypted password based on the connection request; the first sending unit 55 is configured to send the encrypted password and a preset random value to the application program, wherein the application program generates verification information according to the encrypted password and the preset random value; the verification unit 57 , is configured to verify the verification information to obtain a verification result; the establishment unit 59 is configured to establish a communication connection with the application program according to the verification result.

It should be noted that the first receiving unit 51 in this embodiment can be configured to execute step S102 in the embodiment of the present application, and the first generating unit 53 in this embodiment can be configured to execute step S104 in the embodiment of the present application , the first sending unit 55 in this embodiment may be configured to execute step S106 in this embodiment of the application, and the verification unit 57 in this embodiment may be configured to execute step S108 in this embodiment of this application, in this embodiment The establishing unit 59 may be configured to execute step S110 in this embodiment of the present application. The examples and application scenarios implemented by the above modules and corresponding steps are the same, but are not limited to the content disclosed in the above embodiments.

As an optional embodiment, the verification unit includes: a restoration module configured to restore verification information according to an encrypted password to obtain a verification signature; a first judging module configured to judge whether the verification signature is consistent with a preset signature, wherein the preset The signature is determined according to a preset random value; the first determination module is set to determine that the verification result is passed the verification when the verification signature is consistent with the preset signature; the second determination module is configured to determine that the verification signature is inconsistent with the preset signature In this case, it is determined that the verification result is not passed the verification.

As an optional embodiment, the device further includes: a first detection unit configured to detect whether the device to be connected is connected to the application program for the first time after receiving the connection request initiated by the application program; a storage unit configured to When the device to be connected is connected to the application program for the first time, store the preset random value and preset signature provided by the application program, and establish a communication connection with the application program, wherein the application program generates a preset random value based on the preset random value. Set signature.

As an optional embodiment, the first detection unit includes: a detection module, configured to detect whether the device to be connected has a preset random value and a preset signature provided by the application; a third determination module, configured to If there is no preset random value and preset signature provided by the application in the device, it is considered that the device to be connected is connected to the application for the first time; The preset random value and preset signature, it is considered that the device to be connected is not the first time to connect with the application.

Fig. 6 is a second schematic diagram of a communication connection device according to an embodiment of the present disclosure. As shown in Fig. 6, the device may include: a second sending unit 61 configured to send a connection request to the device to be connected; a second receiving unit 63. Set to receive an encrypted password and a preset random value provided by the device to be connected, wherein the device to be connected generates an encrypted password according to the connection request, and the device to be connected has a preset random value in advance; the second generating unit 65 is configured to An encrypted password and a preset random value generate verification information; the third sending unit 67 is configured to send verification information to the device to be connected, wherein the device to be connected verifies the verification information to obtain a verification result; and establishes a communication connection with the device according to the verification result .

It should be noted that the second sending unit 61 in this embodiment can be configured to perform step S202 in the embodiment of the present application, and the second receiving unit 63 in this embodiment can be configured to perform step S204 in the embodiment of the present application , the second generating unit 65 in this embodiment may be configured to execute step S206 in the embodiment of the present application, and the third sending unit 67 in this embodiment may be configured to execute step S208 in the embodiment of the present application. The examples and application scenarios implemented by the above modules and corresponding steps are the same, but are not limited to the content disclosed in the above embodiments.

As an optional embodiment, the device further includes: a second detection unit, configured to detect whether the application program is connected to the device to be connected for the first time after sending a connection request to the device to be connected; a fourth sending unit, It is set that when the application connects with the device to be connected for the first time, the application generates a preset random value and a preset signature, and sends the preset random value and the preset signature to the device to be connected, wherein, the preset The signature is determined based on a preset random value.

As an optional embodiment, the second detection unit includes: a query module, configured to query whether the connection record of the device to be connected is included in the historical connection record of the application program; If the connection record of the device to be connected is included, it is considered that the device to be connected is connected to the application program for the first time; the sixth determination module is set to if the connection record of the device to be connected is included in the historical connection record, it is considered that the device to be connected is not the first One connection with the application.

Embodiments of the present disclosure may provide a computer terminal, and the computer terminal may be any computer terminal device in a group of computer terminals. Optionally, in this embodiment, the foregoing computer terminal may also be replaced with a terminal device such as a mobile terminal.

Optionally, in this embodiment, the foregoing computer terminal may be located in at least one network device among multiple network devices of the computer network.

In this embodiment, the above-mentioned computer terminal can call the information stored in the memory and the application program through the transmission device through the processor, so as to perform the following steps: receive the connection request initiated by the application program; generate an encrypted password based on the connection request; convert the encrypted password and The preset random value is sent to the application program, wherein the application program generates verification information according to the encrypted password and the preset random value; verifies the verification information returned by the application program to obtain a verification result; establishes a communication connection with the application program according to the verification result.

Optionally, the above-mentioned processor may also execute the program code in the following steps: restore the verification information according to the encrypted password to obtain the verification signature; judge whether the verification signature is consistent with the preset signature, wherein the preset signature is determined according to a preset random value; If the verification signature is consistent with the preset signature, it is determined that the verification result is passed the verification; when the verification signature is inconsistent with the preset signature, it is determined that the verification result is not passed the verification.

Optionally, the above-mentioned processor can also execute the program code of the following steps: after receiving the connection request initiated by the application program, detect whether the device to be connected is connected to the application program for the first time; When the program is connected, the preset random value and the preset signature provided by the application program are stored, and a communication connection with the application program is established, wherein the application program generates the preset signature according to the preset random value.

Optionally, the above-mentioned processor can also execute the program code of the following steps: detecting whether the device to be connected has a preset random value and a preset signature provided by the application; if the device to be connected does not store the preset random value and preset signature, it is considered that the device to be connected is the first time to connect with the application; if there is a preset random value and preset signature provided by the application in the device to be connected, it is considered that the device to be connected is not the first to connect to the application.

In this embodiment, the above-mentioned computer terminal can call the information and application programs stored in the memory through the transmission device through the processor to perform the following steps: send a connection request to the device to be connected; receive the encrypted password and preset password provided by the device to be connected; Set a random value, wherein the device to be connected generates an encrypted password according to the connection request, and the device to be connected has a preset random value in advance; generates verification information according to the encrypted password and the preset random value; sends verification information to the device to be connected, wherein, the device to be connected The connecting device verifies the verification information to obtain a verification result; and establishes a communication connection according to the verification result.

Optionally, the above-mentioned processor can also execute the program code of the following steps: after the connection request sent to the device to be connected, detect whether the application program is connected to the device to be connected for the first time; When the device is connected, the application program generates a preset random value and a preset signature, and sends the preset random value and the preset signature to the device to be connected, wherein the preset signature is determined according to the preset random value.

Optionally, the above-mentioned processor can also execute the program code of the following steps: query whether the historical connection record of the application program includes the connection record of the device to be connected; if the historical connection record does not include the connection record of the device to be connected, it is considered It is the first time that the connected device is connected with the application; if the historical connection record includes the connection record of the device to be connected, it is considered that the device to be connected is not connected with the application for the first time.

Embodiments of the present disclosure also provide a computer-readable storage medium. Optionally, in this embodiment, the above-mentioned computer-readable storage medium may be configured to store the program code executed by the above-mentioned data transmission method.

Optionally, in this embodiment, the above-mentioned computer-readable storage medium may be located in any computer terminal in the group of computer terminals in the computer network, or in any mobile terminal in the group of mobile terminals.

Optionally, in this embodiment, the storage medium is configured to store program code configured to perform the following steps: receiving a connection request initiated by an application; generating an encrypted password based on the connection request; sending the encrypted password and a preset random value to An application program, wherein the application program generates verification information according to the encrypted password and a preset random value; verifies the verification information returned by the application program to obtain a verification result; establishes a communication connection with the application program according to the verification result.

Optionally, in this embodiment, the storage medium is set to store the program code configured to perform the following steps: restore the verification information according to the encrypted password to obtain the verification signature; determine whether the verification signature is consistent with the preset signature, wherein the preset The signature is determined according to a preset random value; if the verification signature is consistent with the preset signature, the verification result is determined to be verified; if the verification signature is inconsistent with the preset signature, the verification result is determined to be failed verification.

Optionally, in this embodiment, the storage medium is configured to store program code configured to execute the following steps: after receiving the connection request initiated by the application program, detecting whether the device to be connected is connected to the application program for the first time; When the device to be connected is connected to the application program for the first time, store the preset random value and preset signature provided by the application program, and establish a communication connection with the application program, wherein the application program generates a preset random value based on the preset random value. Set signature.

Optionally, in this embodiment, the storage medium is configured to store program code configured to perform the following steps: detect whether the device to be connected has a preset random value and a preset signature provided by the application program; If there is no preset random value and preset signature provided by the application, it is considered that the device to be connected is connected to the application for the first time; if the preset random value and preset signature provided by the application are stored in the device to be connected , it is considered that the device to be connected is not the first time to connect with the application.

Optionally, in this embodiment, the storage medium is configured to store program code configured to perform the following steps: send a connection request to the device to be connected; receive an encrypted password and a preset random value provided by the device to be connected, wherein, The device to be connected generates an encrypted password according to the connection request, and the device to be connected has a preset random value in advance; generates verification information according to the encrypted password and the preset random value; sends verification information to the device to be connected, wherein the device to be connected performs verification on the verification information Verifying to obtain a verification result; and establishing a communication connection according to the verification result.

Optionally, in this embodiment, the storage medium is configured to store a program code configured to execute the following steps: after a connection request is sent to the device to be connected, detect whether the application is connected to the device to be connected for the first time; When the application connects with the device to be connected for the first time, the application generates a preset random value and a preset signature, and sends the preset random value and the preset signature to the device to be connected, wherein the preset signature is based on The preset random value is determined.

Optionally, in this embodiment, the storage medium is set to store the program code configured to perform the following steps: query whether the historical connection record of the application program includes the connection record of the device to be connected; if the historical connection record does not include the connection record of the device to be connected; If there is no connection record of the connected device, it is considered that the device to be connected is connected to the application for the first time; if the historical connection record includes the connection record of the device to be connected, it is considered that the device to be connected is not connected to the application for the first time.

According to yet another aspect of the embodiments of the present disclosure, there is also provided an electronic device for implementing the communication connection method described above. As shown in FIG. 7 , the electronic device includes a memory 702 and a processor 704, and the memory 702 stores computer program, the processor 704 is configured to execute the steps in any one of the above method embodiments through a computer program.

Optionally, in this embodiment, the foregoing electronic device may be located in at least one network device among multiple network devices of the computer network.

Optionally, in this embodiment, the above-mentioned processor may be configured to execute the following steps through a computer program:

S1, receiving the connection request initiated by the application program;

S2, generating an encrypted password based on the connection request;

S3. Send the encrypted password and the preset random value to the application program, wherein the application program generates verification information according to the encrypted password and the preset random value;

S4. Verifying the verification information to obtain a verification result;

S5. Establish a communication connection with the application program according to the verification result.

Optionally, those of ordinary skill in the art can understand that the structure shown in FIG. Internet Devices, MID), PAD and other terminal equipment. FIG. 7 does not limit the structure of the above-mentioned electronic device. For example, the electronic device may also include more or less components than those shown in FIG. 7 (such as a network interface, etc.), or have a different configuration from that shown in FIG. 7 .

Wherein, the memory 702 can be used to store software programs and modules, such as program instructions/modules corresponding to the communication connection method and device in the embodiments of the present disclosure, and the processor 704 runs the software programs and modules stored in the memory 702 to execute various A functional application and data processing, that is, to realize the above-mentioned communication connection method. The memory 702 may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory 702 may further include a memory that is remotely located relative to the processor 704, and these remote memories may be connected to the terminal through a network. Examples of the aforementioned networks include, but are not limited to, the Internet, intranets, local area networks, mobile communication networks, and combinations thereof. As an example, as shown in FIG. 7, the memory 702 may include, but is not limited to, the first receiving unit 51, the first generation unit 53, the first sending unit 55, the verification unit 57, and the establishment unit in the communication connection device. 59. In addition, it may also include but not limited to other module units in the above-mentioned communication connection device, which will not be repeated in this example.

Optionally, the above-mentioned transmission device 706 is configured to receive or send data via a network. The specific examples of the above-mentioned network may include a wired network and a wireless network. In one example, the transmission device 706 includes a network adapter (Network Interface Controller, NIC), which can be connected with other network devices and a router through a network cable so as to communicate with the Internet or a local area network. In one example, the transmission device 706 is a radio frequency (Radio Frequency, RF) module, which is used to communicate with the Internet in a wireless manner.

In addition, the above-mentioned electronic device further includes: a display 708 for displaying the above-mentioned communication connection; and a connection bus 710 for connecting various module components in the above-mentioned electronic device.

The serial numbers of the above-mentioned embodiments of the present disclosure are for description only, and do not represent the advantages and disadvantages of the embodiments.

In the above-mentioned embodiments of the present disclosure, the descriptions of each embodiment have their own emphases, and for parts not described in detail in a certain embodiment, reference may be made to relevant descriptions of other embodiments.

In the several embodiments provided in this application, it should be understood that the disclosed technical content can be realized in other ways. Wherein, the device embodiments described above are only illustrative. For example, the division of the units may be a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components may be combined or may be Integrate into another system, or some features may be ignored, or not implemented. In another point, the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces, and the indirect coupling or communication connection of units or modules may be in electrical or other forms.

The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or may be distributed to multiple units. Part or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in each embodiment of the present disclosure may be integrated into one processing unit, each unit may exist separately physically, or two or more units may be integrated into one unit. The above-mentioned integrated units can be implemented in the form of hardware or in the form of software functional units.

If the integrated unit is realized in the form of a software function unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present disclosure is essentially or part of the contribution to the prior art, or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium , including several instructions to make a computer device (which may be a personal computer, a server, or a network device, etc.) execute all or part of the steps of the methods described in various embodiments of the present disclosure. The aforementioned storage media include: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, magnetic disk or optical disc, etc., which can store program codes. .

The above descriptions are only optional implementations of the present disclosure. It should be pointed out that those skilled in the art can make some improvements and modifications without departing from the principles of the present disclosure. These improvements and modifications It should also be regarded as the protection scope of the present disclosure.

Claims

A communication connection method, comprising:

Receive connection requests initiated by applications;

generating an encrypted password based on the connection request;

sending the encrypted password and the preset random value to the application program, wherein the application program generates verification information according to the encrypted password and the preset random value;

Verifying the verification information to obtain a verification result;

A communication connection with the application program is established according to the verification result.
The communication connection method according to claim 1, wherein, verifying the verification information returned by the application program, and obtaining a verification result includes:

Restoring the verification information according to the encrypted password to obtain a verification signature;

judging whether the verification signature is consistent with a preset signature, wherein the preset signature is determined according to the preset random value;

In the case where the verification signature is consistent with the preset signature, determining that the verification result is verified;

If the verification signature is inconsistent with the preset signature, it is determined that the verification result fails the verification.
The communication connection method according to claim 1, wherein, after receiving the connection request initiated by the application program, the method further comprises:

Detect whether the device to be connected is connected to the application program for the first time;

When the device to be connected is connected to the application program for the first time, store the preset random value and preset signature provided by the application program, and establish a communication connection with the application program, wherein, The application program generates the preset signature according to the preset random value.
The communication connection method according to claim 3, wherein detecting whether the device to be connected is connected with the application program for the first time comprises:

Detecting whether the device to be connected has the preset random value and the preset signature provided by the application;

If the preset random value and the preset signature provided by the application do not exist in the device to be connected, it is considered that the device to be connected is connected to the application for the first time;

If the preset random value and the preset signature provided by the application program are stored in the device to be connected, it is considered that the connection between the device to be connected and the application program is not the first time.
A communication connection method, comprising:

A connection request to the device to be connected;

receiving an encrypted password and a preset random value provided by the device to be connected, wherein the device to be connected generates the encrypted password according to the connection request, and the device to be connected pre-stores the preset random value;

generating verification information according to the encrypted password and the preset random value;

Sending verification information to the device to be connected, wherein the device to be connected verifies the verification information to obtain a verification result; and establishes a communication connection according to the verification result.
The communication connection method according to claim 5, wherein, after sending the connection request to the device to be connected, the method further comprises:

Detect whether the application is connected to the device to be connected for the first time;

When the application program is connected to the device to be connected for the first time, the application program generates a preset random value and a preset signature, and sends the preset random value and preset signature to the The device to be connected, wherein the preset signature is determined according to the preset random value.
The communication connection method according to claim 5, wherein detecting whether the application program is connected with the device to be connected for the first time comprises:

Query whether the historical connection record of the application includes the connection record of the device to be connected;

If the historical connection record does not include the connection record of the device to be connected, it is considered that the device to be connected is connected to the application for the first time;

If the historical connection record includes the connection record of the device to be connected, it is considered that the device to be connected is not connected with the application program for the first time.
A communication link system comprising:

The application program is set to send a connection request to the device to be connected; receive the encrypted password and preset random value provided by the device to be connected; generate verification information according to the encrypted password and the preset random value; The device sends verification information;

The device to be connected is configured to generate an encrypted password based on the connection request, verify the verification information returned by the application program, and obtain a verification result; establish a communication connection with the application program according to the verification result.
The system of claim 8, wherein,

The device to be connected is further configured to: restore the verification information according to the encrypted password to obtain a verification signature; determine whether the verification signature is consistent with a preset signature, wherein the preset signature is based on the preset random value Determine; if the verification signature is consistent with the preset signature, determine that the verification result is verified; if the verification signature is inconsistent with the preset signature, determine that the verification result is not approved.
The system of claim 8, wherein,

The application program is also configured to query whether the historical connection record includes the connection record of the device to be connected; if the connection record of the device to be connected is not included in the historical connection record, it is considered that the device to be connected is Connecting with the application program for the first time; when the application program is connected with the device to be connected for the first time, generating a preset random value and a preset signature, and combining the preset random value and sending a preset signature to the device to be connected, wherein the preset signature is determined according to the preset random value;

The device to be connected is also configured to detect whether the preset random value and the preset signature provided by the application program exist; if the device to be connected does not store the preset random value and the preset signature, it is considered that the device to be connected is connected with the application for the first time; in the case that the device to be connected is connected with the application for the first time , storing the preset random value and the preset signature provided by the application program, and establishing a communication connection with the application program.
A communication connection device, comprising:

The first receiving unit is configured to receive a connection request initiated by an application program;

a first generating unit configured to generate an encrypted password based on the connection request;

The first sending unit is configured to send the encrypted password and the preset random value to the application program, wherein the application program generates verification information according to the encrypted password and the preset random value;

A verification unit configured to verify the verification information to obtain a verification result;

An establishing unit configured to establish a communication connection with the application program according to the verification result.
The communication connection device according to claim 11, wherein the verification unit comprises:

A restore module, configured to restore the verification information according to the encrypted password to obtain a verification signature;

The first judging module is configured to judge whether the verification signature is consistent with a preset signature, wherein the preset signature is determined according to the preset random value;

The first determination module is configured to determine that the verification result is passed the verification when the verification signature is consistent with the preset signature;

The second determination module is configured to determine that the verification result fails the verification when the verification signature is inconsistent with the preset signature.
The communication connection device according to claim 11, wherein the device further comprises:

The first detection unit is configured to detect whether the device to be connected is connected to the application program for the first time after receiving the connection request initiated by the application program;

The storage unit is configured to store a preset random value and a preset signature provided by the application program when the device to be connected is connected to the application program for the first time, and establish a communication connection with the application program, wherein the application program is based on A preset random value generates a preset signature.
The communication connection device according to claim 13, wherein the first detection unit comprises:

The detection module is configured to detect whether the device to be connected has a preset random value and a preset signature provided by the application;

The third determination module is configured to consider that the device to be connected is connected to the application program for the first time if there is no preset random value and preset signature provided by the application program in the device to be connected;

The fourth determining module is configured to consider that the device to be connected is not the first time to connect with the application if the device to be connected has a preset random value and a preset signature provided by the application.
A communication connection device, comprising:

The second sending unit is configured as a connection request sent to the device to be connected;

The second receiving unit is configured to receive an encrypted password and a preset random value provided by the device to be connected, wherein the device to be connected generates the encrypted password according to the connection request, and the device to be connected has previously stored the preset random value;

A second generating unit configured to generate verification information according to the encrypted password and the preset random value;

The third sending unit is configured to send verification information to the device to be connected, wherein the device to be connected verifies the verification information to obtain a verification result; and establishes a communication connection according to the verification result.
The communication connection device according to claim 15, wherein said device further comprises:

The second detection unit is configured to detect whether the application program is connected to the device to be connected for the first time after the connection request sent to the device to be connected;

The fourth sending unit is configured to generate a preset random value and a preset signature by the application program when the application program is connected to the device to be connected for the first time, and combine the preset random value and the The preset signature is sent to the device to be connected, wherein the preset signature is determined according to the preset random value.
The communication connection device according to claim 16, wherein the second detection unit comprises:

A query module, configured to query whether the connection record of the device to be connected is included in the historical connection record of the application;

The fifth determination module is configured to consider that the device to be connected is connected to the application program for the first time if the historical connection record does not include the connection record of the device to be connected;

The sixth determination module is configured to consider that the connection between the device to be connected and the application program is not the first time if the historical connection record includes the connection record of the device to be connected.
A computer-readable storage medium, wherein the computer-readable storage medium includes a stored program, wherein when the program is running, the device where the computer-readable storage medium is located is controlled to perform any one of claims 1 to 7 The communication connection method.
An electronic device, comprising a memory and a processor, wherein a computer program is stored in the memory, and the processor is configured to execute the method described in any one of claims 1 to 7 through the computer program .