CN114465835A - Household appliance equipment, application terminal, Bluetooth network distribution method and system - Google Patents

Abstract

The embodiment of the invention relates to the technical field of smart home, in particular to a household appliance, an application terminal, a Bluetooth network distribution method and a Bluetooth network distribution system, which are used for solving the problem of low safety caused by the Bluetooth network distribution in the household appliance. The household electrical appliance comprises: the Bluetooth module is used for sending Bluetooth broadcast data, wherein the Bluetooth broadcast data comprises a first encryption instruction, and the first encryption instruction is used for indicating that the Bluetooth broadcast data is encrypted according to a first encryption rule and receiving first encrypted broadcast data sent by an application terminal; and the MCU is used for encrypting the Bluetooth broadcast data by using the first encryption rule to obtain second encrypted broadcast data, and disconnecting the Bluetooth connection with the application terminal after determining that the first encrypted broadcast data is inconsistent with the second encrypted broadcast data.

Description

A kind of home appliance equipment, application terminal, bluetooth distribution network method and system

technical field

Embodiments of the present invention relate to the field of smart home technology, and in particular, to a home appliance device, an application terminal, and a method and system for Bluetooth network distribution.

Background technique

With the development of Internet technology and the popularization of smart home devices, more and more families have smart home devices that can be connected to routers. When smart home devices need to be connected to the router, they need to obtain the SSID (ServiceSet Identifier, Service Set Identifier) of the router. ID) and password (PASSWORD) to realize the distribution network. In the network distribution method of smart home equipment, a commonly used method for network distribution of household appliances is Bluetooth network distribution.

However, in the current bluetooth distribution network mode of home appliances, due to the visibility of bluetooth broadcast, some lawbreakers carry out security damage. In the process of Bluetooth distribution network, on the one hand, there is the risk of criminals using malicious terminals to connect to the user's home appliances for network distribution, which leads to the possibility that criminals can control the user's home appliances and cause security problems. Based on the consideration of the security caused by malicious terminals existing in the bluetooth distribution network of household appliances, it is particularly important to improve the security of the Bluetooth distribution network of household appliances.

Therefore, there is a need to provide a solution for solving the problem of low security caused by Bluetooth distribution network in home appliances.

SUMMARY OF THE INVENTION

Embodiments of the present invention provide a household appliance, an application terminal, a system, and an apparatus, which are used to solve the problem of low security caused by a Bluetooth distribution network in the household appliance.

In a first aspect, an embodiment of the present invention provides a household appliance, including:

A Bluetooth module for sending Bluetooth broadcast data, where the Bluetooth broadcast data includes a first encryption instruction; the first encryption instruction is used to instruct to encrypt the Bluetooth broadcast data according to a first encryption rule; encrypted broadcast data;

The MCU is configured to encrypt the Bluetooth broadcast data by using the first encryption rule to obtain second encrypted broadcast data; after determining that the first encrypted broadcast data and the second encrypted broadcast data are inconsistent, disconnect the the Bluetooth connection of the application terminal.

Through the above method, the use of Bluetooth broadcast data with encrypted instructions can be used to prevent illegal personnel from using malicious terminals to connect to the user's home appliance equipment during the network distribution process, interfering with the user's distribution network for the home appliance equipment, ensuring the home appliance equipment. Bluetooth distribution network security.

In some embodiments of the present application, the Bluetooth broadcast data further includes a second encryption instruction;

The MCU is further configured to determine that the first encrypted broadcast data is consistent with the second encrypted broadcast data, and then encrypt the second encrypted broadcast data according to the second encryption rule indicated by the second encryption instruction to obtain the third encrypted broadcast data;

The Bluetooth module is further configured to send the third encrypted broadcast data to the application terminal; the third encrypted broadcast data is used by the application terminal to determine whether the home appliance is legal.

Through the above method, the application terminal can be confirmed as a legitimate application terminal through the authentication on the home appliance side; further, the home appliance device encrypts the second encrypted broadcast data twice according to the encryption rule of the second encryption instruction to obtain the third encrypted broadcast data, It is used for the application terminal to judge whether the household electrical appliance is legal, and solves the situation that the criminals forge the Bluetooth broadcast of the household electrical appliance of the user by using the equipment fraudulently to destroy the user's connection to the household electrical appliance of the user.

In some embodiments of the present application, a WIFI module is also included,

The Bluetooth module is further configured to receive the router configuration information sent by the application terminal through a Bluetooth connection after the third encrypted broadcast data is sent to the application terminal; the router configuration information is the application terminal Sent after confirming that the household appliance is legal;

The WIFI module is used to access the router according to the router configuration information to complete the Bluetooth network distribution.

In a second aspect, an embodiment of the present invention provides an application terminal, including:

a Bluetooth module for receiving Bluetooth broadcast data sent by home appliances, where the Bluetooth broadcast data includes a first encryption instruction;

an MCU, configured to acquire the first encryption rule indicated by the first encryption instruction; encrypt the Bluetooth broadcast data by using the first encryption rule to obtain the first encrypted broadcast data;

The Bluetooth module is further configured to send the first encrypted broadcast data to the home appliance; the first encrypted broadcast data is used by the home appliance to determine whether the application terminal is legal;

The bluetooth module is further configured to disconnect the bluetooth connection with the household appliance based on the operation of disconnecting the bluetooth connection of the household appliance; the operation of disconnecting the bluetooth connection is the operation of the household appliance based on the first It is performed when it is determined that the application terminal is illegal when the first encrypted broadcast data is inconsistent with the second encrypted broadcast data generated by itself.

In some embodiments of the present application, the Bluetooth broadcast data further includes a second encryption instruction;

The Bluetooth module is further configured to receive the third encrypted broadcast data sent by the household appliance after sending the first encrypted broadcast data to the household appliance;

The MCU is configured to acquire the second encryption rule indicated by the second encryption instruction, and encrypt the first encrypted broadcast data by using the second encryption rule to obtain fourth encrypted broadcast data; determine the third encryption After the broadcast data is consistent with the fourth encrypted broadcast data, instruct the Bluetooth module to send router configuration information to the home appliance;

The Bluetooth module is further configured to send the router configuration information to the home appliance device to complete the Bluetooth network distribution.

In some embodiments of the present application, the MCU is further configured to instruct the Bluetooth module to disconnect from the Bluetooth module after determining that the third encrypted broadcast data is inconsistent with the fourth encrypted broadcast data Bluetooth connection for home appliances.

In some embodiments of the present application, the Bluetooth broadcast data further includes attribute information of the home appliance;

The MCU is further configured to, before acquiring the first encryption rule indicated by the first encryption instruction, determine through the cloud server whether the attribute information of the household appliance is valid; after determining that the attribute information of the household appliance is valid, instructing the bluetooth module to establish a bluetooth connection with the household appliance;

The MCU is specifically configured to acquire the first encryption rule corresponding to the first encryption instruction from the cloud server.

In a third aspect, a Bluetooth network distribution method provided by an embodiment of the present invention includes:

generating and sending Bluetooth broadcast data, where the Bluetooth broadcast data includes a first encryption instruction; the first encryption instruction is used to instruct to encrypt the Bluetooth broadcast data according to a first encryption rule;

Use the first encryption rule to encrypt the Bluetooth broadcast data to obtain second encrypted broadcast data; after determining that the first encrypted broadcast data is inconsistent with the second encrypted broadcast data received from the application terminal, disconnect the Bluetooth connection of the application terminal.

In some embodiments of the present application, the Bluetooth broadcast data further includes a second encryption instruction; further includes:

It is determined that the first encrypted broadcast data is consistent with the second encrypted broadcast data received from the application terminal, then the second encrypted broadcast data is encrypted according to the second encryption rule indicated by the second encryption instruction to obtain a third encrypted broadcast data. Encrypted broadcast data; the third encrypted broadcast data is used by the application terminal to determine whether the home appliance is legal.

In some embodiments of the present application, after the household appliance obtains the third encrypted broadcast data, the method further includes:

Receive router configuration information sent by the application terminal through a Bluetooth connection; the router configuration information is sent after the application terminal determines that the home appliance is legal;

According to the router configuration information, the router is connected to complete the Bluetooth network configuration.

In a fourth aspect, a Bluetooth network distribution method provided by an embodiment of the present invention includes:

Obtain the first encryption rule indicated by the first encryption instruction; encrypt the Bluetooth broadcast data by using the first encryption rule to obtain the first encryption broadcast data; the first encryption instruction is carried in the Bluetooth broadcast data sent by the home appliance device ; The first encrypted broadcast data is used by the household appliance to determine whether the application terminal is legal;

Based on the operation of disconnecting the Bluetooth connection of the home appliance, the Bluetooth connection with the home appliance is disconnected; the operation of disconnecting the Bluetooth connection is the first encrypted broadcast data generated by the home appliance itself based on the first encrypted broadcast data. 2. When the encrypted broadcast data is inconsistent, it is determined that the application terminal is illegal.

In some embodiments of the present application, the Bluetooth broadcast data further includes a second encryption instruction;

After generating the first encrypted broadcast data, the method further includes:

obtaining the second encryption rule indicated by the second encryption instruction, and encrypting the first encrypted broadcast data using the second encryption rule to obtain fourth encrypted broadcast data;

After it is determined that the third encrypted broadcast data sent by the household appliance is consistent with the fourth encrypted broadcast data, router configuration information is sent to the household appliance, thereby completing the Bluetooth network configuration.

In some embodiments of the present application, after it is determined that the third encrypted broadcast data is inconsistent with the fourth encrypted broadcast data, the Bluetooth connection with the home appliance is disconnected.

In some embodiments of the present application, the Bluetooth broadcast data further includes attribute information of the home appliance;

Before acquiring the first encryption rule indicated by the first encryption instruction, the method further includes:

Determine whether the attribute information of the household appliance is valid through the cloud server;

After determining that the attribute information of the household appliance is valid, establish a Bluetooth connection with the household appliance;

Obtaining the first encryption rule indicated by the first encryption instruction includes:

Acquire the first encryption rule corresponding to the first encryption instruction from the cloud server.

In a fifth aspect, an embodiment of the present invention further provides a Bluetooth network distribution system, including the home appliance device as described in the first aspect and the application terminal as described in the second aspect.

In a sixth aspect, an embodiment of the present invention further provides a computing device, comprising: a memory for storing a computer program; a processor for calling the computer program stored in the memory, and executing the third aspect and the method according to the obtained program. The method described in various possible designs of the fourth aspect.

In a ninth aspect, an embodiment of the present invention further provides a computer-readable non-volatile storage medium, including a computer-readable program, when the computer reads and executes the computer-readable program, the computer is made to execute the third aspect and The method described in various possible designs of the fourth aspect.

Description of drawings

In order to illustrate the technical solutions in the embodiments of the present application more clearly, the following briefly introduces the drawings used in the description of the embodiments. Obviously, the drawings in the following description are only some embodiments of the present application. For those of ordinary skill in the art, other drawings can also be obtained from these drawings without any creative effort.

FIG. 1 is a schematic diagram of a system architecture provided in an embodiment of the present invention;

FIG. 2 is an interaction flow diagram of a non-encrypted home appliance device and an application terminal during Bluetooth network configuration provided in an embodiment of the present invention;

FIG. 3 is an interaction flow diagram when a home appliance device and an application terminal perform Bluetooth network distribution according to an embodiment of the present invention.

Detailed ways

In order to make the objectives, technical solutions and advantages of the present application clearer, the present application will be further described in detail below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative work fall within the protection scope of the present application.

The Bluetooth network distribution method provided by the embodiment of the present invention is applied to the network distribution of devices having a Bluetooth module in the technical field of smart home. FIG. 1 is a schematic diagram of a system architecture provided in an embodiment of the present invention. As shown in FIG. 1 , the system includes application terminals, home appliances, routers, and cloud servers.

Wherein, the application terminal may be various types of mobile terminals such as mobile phones, tablet computers, and notebook computers installed with application programs, which are not specifically limited in the present invention. Preferably, the application terminal can scan bluetooth and receive bluetooth broadcasts of home appliances; and can perform data communication with a remote server and connect with a router.

The home appliances can be various types of smart home appliances such as smart rice cookers, audio, air conditioners, cameras, printers, and the like. The home appliance has a built-in Bluetooth module and a WIFI module. Optionally, the Bluetooth module can be embedded in the appliance in the form of hardware or software when the appliance leaves the factory, and cannot be removed. One-to-one correspondence of the Bluetooth modules to improve the security of the Bluetooth distribution network of home appliances.

Due to the different manufacturers of the Bluetooth communication equipment, the related application terminal APPs (application programs) are also different. Optionally, different types of home appliances produced by the same manufacturer correspond to the unified application terminal APP, or the application terminal APP corresponds to the same manufacturer. This application does not limit the same type of home appliances.

In some embodiments of this application, the home appliance is a smart printer, click button 1 for three seconds to enter the Bluetooth distribution network mode, and send a Bluetooth broadcast to the outside 300m for the application terminal to connect; within the Bluetooth visible range, the application terminal When the bluetooth is turned on, scan the bluetooth to receive the bluetooth broadcast of the smart printer. The application terminal is used to open the corresponding smart printer APP for authentication. If the authentication is passed, the smart printer will be allocated to the network, and the router configuration information will be sent to the smart printer. , for the smart printer to connect to the router to realize network distribution.

Figure 2 provides a flow chart of the interaction between an unencrypted home appliance device and an application terminal during Bluetooth network distribution; specifically, it includes:

Step 201: the home appliance device sends Bluetooth broadcast data;

Step 202: the application terminal is connected to the Bluetooth of the home appliance;

In the process of network distribution, after the user turns on the home appliance and enters the Bluetooth distribution mode, step 201 will be executed, and the home appliance will send Bluetooth broadcast data to the surroundings. At this time, the application terminal within the range where the Bluetooth broadcast data can be received The bluetooth can be scanned through the corresponding APP of the household appliance, the bluetooth broadcast data can be received, and step 202 can be executed to realize that the application terminal is connected to the bluetooth of the household appliance.

Step 203: the user inputs the router password;

Step 204: the application terminal sends the router configuration information through Bluetooth;

For the application terminal connected to the home appliance, the user executes step 203, manually enters the router password, the application terminal executes step 204, and sends the router configuration information to the home appliance through Bluetooth, including the router's SSID and password.

Step 205: the home appliance obtains the router configuration information and connects to the router;

The home appliance obtains the SSID and password of the router in the above step 204, and connects to the router to complete the network distribution of the home appliance.

Step 206: the home appliance device sends the indication information of the connected router;

Step 207: The application terminal determines that the home appliance is successfully distributed to the network according to the indication information.

Through the above steps, due to the visibility of the bluetooth broadcast data, hackers and other criminals can forge the bluetooth broadcast data of the home appliance, so that the user can connect to the forged bluetooth broadcast data through the application terminal, and mistakenly connect to other fraudulent use On the other hand, there are criminals such as hackers who write a malicious terminal that can be connected to the user's home appliance, and then connect the home appliance's Bluetooth to the user's home appliance. The device sends routing information, realizes the distribution network, and illegally controls the user's home appliances.

Aiming at the security problems caused by the above-mentioned home appliance equipment network distribution process, an embodiment of the present invention provides a home appliance equipment, including: a Bluetooth module for sending Bluetooth broadcast data, where the Bluetooth broadcast data includes a first encryption instruction; the The first encryption instruction is used to instruct to encrypt the Bluetooth broadcast data according to the first encryption rule; receive the first encrypted broadcast data sent by the application terminal;

The MCU is configured to encrypt the Bluetooth broadcast data by using the above-mentioned first encryption rule to obtain second encrypted broadcast data; after determining that the above-mentioned first encrypted broadcast data and the second encrypted broadcast data are inconsistent, disconnect the communication with the application terminal. Bluetooth connection.

In the specific implementation process, the household appliance includes an encryption instruction according to the Bluetooth broadcast data sent by the Bluetooth module, and the encryption rule indicated by the encryption instruction may be an encryption algorithm or an encryption key. In the actual production process, the household appliance The number of encrypted instructions included in the Bluetooth broadcast data of the device is not limited, as long as the selected number of instructions can encrypt the Bluetooth broadcast data according to the corresponding encryption rule. Moreover, when the home appliance device performs the Bluetooth distribution network, the transmitted Bluetooth broadcast data is broadcast according to certain rules. For example, the home appliance sends Bluetooth broadcast data according to the rules in Table 1.

Table 1

And after the home appliance is connected, the home appliance will create a service (server). For example, the service data is shown in Table 2. Among them, the authorization service (authorization serve) is used for two-way authentication, that is, from the home appliance device side to authenticate whether the connected application terminal is legal, and from the application terminal side to verify whether the connected home appliance device is a legal device; WIFI configuration service (wifi config serve) is used for the distribution network of home appliances after the two-way authentication is passed.

Table 2

UUID length Attributes describe 0X0001 32 Read write authorization serve 0X0002 132 Read write wifi config serve

According to the different encryption rules indicated by the encryption instruction, two ways of encrypting the Bluetooth broadcast data are provided as follows to perform the authentication of the first encrypted broadcast data and the second encrypted broadcast data.

Manner 1, the first encryption rule indicated by the first encryption instruction is an encryption algorithm, and in some embodiments of the present application, the encryption algorithm is an AES algorithm. After the home appliance device sends the Bluetooth broadcast data to the application terminal, the application terminal obtains the first encryption rule from its own cloud server according to the first encryption instruction instruction. However, if the application terminal is a malicious terminal, the malicious terminal will occur. If the first encryption rule obtained by the terminal is not the AES algorithm, the encrypted first encrypted broadcast data must be wrong encrypted broadcast data. Therefore, after receiving the first encrypted broadcast data, the home appliance will use the MCU to encrypt the Bluetooth broadcast data using the local first encryption rule, that is, use the AES algorithm to encrypt the second encrypted broadcast data, and pass the second encrypted broadcast data. Compare whether the encrypted broadcast data is consistent with the above-mentioned first encrypted broadcast data, and if it is determined that they are inconsistent, disconnect the Bluetooth connection with the application terminal, so that the home appliance device is not networked. At the same time, it also indicates that the malicious terminal is not a legitimate application terminal corresponding to the household appliance, and the malicious terminal is eliminated.

It should be noted that during the production of home appliances, encrypted instructions can be randomly obtained from the encrypted instruction pool. For example, there are 100 encrypted instructions in the encrypted instruction pool, with serial numbers ranging from 1 to 100, and 5 encrypted instructions can be randomly extracted from them, such as In order to encrypt instructions 5, 10, 15, 20, and 22, in the production of home appliances, one encrypted instruction can be taken out of the 5 encrypted instructions randomly taken out. The specific encryption instruction encryption algorithm can be AES algorithm, DES algorithm, etc. The encryption instructions are not the same, and the specific encryption algorithm used by those skilled in the art is not limited.

Method 2: The first encryption rule indicated by the first encryption instruction may be an encryption key. After the application terminal obtains that the first encryption rule indicated by the first instruction is a specific encryption key, the encryption key may be used. As the first encrypted broadcast data sent to the home appliance, if the application terminal is a malicious terminal, it cannot learn the specific encryption key. Therefore, the second encrypted broadcast data after the home appliance is locally encrypted by the MCU and the By comparing the first encrypted broadcast data, it can be judged that they are inconsistent, the Bluetooth connection is disconnected, and the malicious terminal is eliminated, so that the network configuration is not performed.

The use of Bluetooth broadcast data with encrypted instructions can prevent illegal personnel from using malicious terminals to connect to the user's home appliance equipment during the network distribution process, interfering with the user's home appliance equipment distribution network, and ensuring the home appliance equipment distribution network security. .

Further, the Bluetooth broadcast data of the household appliance also includes a second encryption instruction; the MCU of the household appliance, after determining that the first encryption broadcast data and the second encryption broadcast data are consistent, according to the second encryption instruction. The second encryption rule is to encrypt the second encrypted broadcast data, and further obtain the third encrypted broadcast data; and send the third encrypted broadcast data to the above-mentioned application terminal through the Bluetooth module, so that the application terminal can receive the third encrypted broadcast data according to the received third encryption broadcast data. The broadcast data is used for legal verification of the home appliance.

In some embodiments of the present application, the encryption rule indicated by the second encryption instruction is the DES algorithm. After the first encrypted broadcast data and the second encrypted broadcast data are consistent, it indicates that the application terminal is a legitimate application The terminal, further, the household appliance encrypts the second encrypted broadcast data according to the DES algorithm, obtains the third encrypted broadcast data, and sends the third encrypted broadcast data to the application terminal, so that the application terminal according to the received The third encrypted broadcast data is used to authenticate the home appliance, and if the authentication result performed on the application terminal side is passed, it indicates that the user's home appliance is a legitimate device. After the authentication is passed and before network distribution, the application terminal APP keeps periodically sending heartbeats to the home appliance device to maintain the connection between the home appliance device and the application terminal, and if the heartbeat is not received within a preset period, the connection is disconnected.

After the Bluetooth module of the household appliance sends the third encrypted broadcast data to the application terminal, it further receives the router configuration information sent by the application terminal through Bluetooth, and uses the WIFI module to access the router configuration information according to the router configuration information. The router thus completes the Bluetooth distribution network.

Through the above method, after the authentication on the home appliance side is passed, it can be confirmed that the application terminal is a legitimate APP; further, the home appliance device encrypts the second encrypted broadcast data twice according to the encryption rule of the second encryption instruction to obtain the third encrypted broadcast data, It is used by the application terminal to judge whether the home appliance is legal, which prevents the user from connecting to the fraudulent device during the Bluetooth distribution network of the home appliance; through the two-way authentication of the home appliance and the application terminal, it ensures that the home appliance is in the process of distribution network. security, and further connect to the router according to the router configuration information sent by the application terminal to realize network distribution.

For the application terminal, it includes: the Bluetooth module is used to receive the Bluetooth broadcast data sent by the household appliance, and the Bluetooth broadcast data includes a first encryption instruction; the MCU is used to obtain the first encryption rule indicated by the first encryption instruction; And encrypt the Bluetooth broadcast data according to the first encryption rule to obtain the first encrypted broadcast data.

The Bluetooth module of the application terminal is further configured to send the first encrypted broadcast data to the household appliance; to determine whether the application terminal is legal according to the first encrypted broadcast data to the household appliance; to disconnect the Bluetooth connection based on the household appliance The operation of disconnecting the Bluetooth connection with the household appliance is performed when the household appliance determines that the application terminal is illegal based on the inconsistency between the first encrypted broadcast data and the second encrypted broadcast data generated by itself. of.

In the specific implementation process, when the application terminal is disconnected from the home appliance, it can be determined that the application terminal encrypts the Bluetooth broadcast data through the first encryption rule and sends it to the home appliance, where the home appliance uses the local first encryption rule The second encrypted broadcast data obtained by encrypting the Bluetooth broadcast data is different from the first broadcast data, and the authentication fails. Therefore, it can be seen that no matter from which perspective, for malicious terminals, the embodiments of the present invention can prevent malicious terminals from being connected, thereby improving the distribution network security of home appliances. As for the authentication on the home appliance side, but the authentication on the application terminal side fails, the following description is provided from the application terminal side.

After sending the first encrypted broadcast data to the household appliance, the Bluetooth module of the application terminal receives the third encrypted broadcast data sent by the household appliance; and the MCU of the application terminal obtains the second encrypted broadcast data indicated by the second encryption instruction rule, and use the second encryption rule to encrypt the above-mentioned first encrypted broadcast data to obtain the fourth encrypted broadcast data; and judge whether the above-mentioned third encrypted broadcast data is consistent with the fourth encrypted broadcast data, if they are consistent, the two-way authentication is passed, Then the application terminal instructs the Bluetooth module to send router configuration information to the home appliance device, thereby completing the Bluetooth network configuration.

If it is determined that the third encrypted broadcast data is inconsistent with the fourth encrypted broadcast data, the application terminal instructs the Bluetooth module to disconnect the Bluetooth connection with the household appliance.

Since the application terminal receives the Bluetooth broadcast data of the home appliance, such as the attribute information of the home appliance shown in Table 1, before the application terminal obtains the encryption rules from the cloud server, it can The attribute information of the device determines whether the attribute information is valid from the cloud server, and then establishes a Bluetooth connection with the home appliance after determining that the attribute information is valid.

In some embodiments of the present application, the application terminal preliminarily determines whether the household appliance is legal from the corresponding cloud server of the application terminal according to the MAC address and the Product ID in the attribute information of the household appliance, and then connects to the Bluetooth of the household appliance if it is legal. superior.

Based on the above situation, FIG. 3 is a flowchart of interaction between a home appliance device and an application terminal during Bluetooth network configuration provided in an embodiment of the present invention; specifically, it includes:

Step 301: the home appliance device sends Bluetooth broadcast data;

Step 302: the application terminal is connected to the Bluetooth of the home appliance;

When the user configures the home appliance network, the Bluetooth broadcast data will first be sent to the surrounding range. The broadcast rule has the Bluetooth broadcast attribute information as shown in Table 1. Step 301 is executed. The encrypted instructions correspond to the home appliances one-to-one, which ensures the security of the home appliances; for the application terminal within the acceptable range, after the application terminal APP scans the Bluetooth broadcast data, it can firstly be based on the properties in the Bluetooth broadcast data of the home appliance. Information, for example, according to the MAC address and Product ID, it is judged from the cloud that the device is sufficient for storage. If the preliminary judgment is passed, the application terminal is connected to the Bluetooth of the home appliance.

After the home appliance is confirmed to be connected, a service will be created. The authorization service is used for two-way authentication, that is, from the home appliance side to verify whether the connected application terminal is legal, and from the application terminal side to verify whether the connected home appliance It is a legal device; the WIFI configuration service is used for the distribution network of home appliances after the two-way authentication is passed.

Step 303: Acquire a specific encryption rule from the cloud server according to the first encryption instruction, and encrypt the Bluetooth broadcast data to obtain the first encrypted broadcast data;

After the application terminal is connected to the bluetooth of the home appliance through step 302, step 303 is executed. The application terminal obtains the specific first encryption rule from the cloud from the cloud server according to the obtained first encryption instruction of the home appliance, and applies The encrypted broadcast data is encrypted to obtain the first encrypted broadcast data, which is sent to the home appliance through the authorization service.

Step 304: Check whether the received first encrypted broadcast data is consistent with the locally calculated second encrypted broadcast data, and if they are consistent, the authentication is passed;

After receiving the first encrypted broadcast data, the home appliance will encrypt the Bluetooth broadcast data according to the first encryption rule indicated by the local first encryption instruction, obtain second encrypted broadcast data, and determine the first encrypted broadcast data. Whether the data and the second encrypted broadcast data are consistent, if they are consistent, it means that the application terminal is authenticated from the home appliance side as a legitimate application terminal, and step 305 is executed; if they are inconsistent, it means that the application terminal is a malicious terminal, and the connection to it is disconnected , and the same home appliance fails to authenticate the connected application terminal multiple times. In some embodiments of the present application, if the application terminal fails to be authenticated 5 times, the secondary application terminal is pulled into the blacklist and access is prohibited.

Step 305: Encrypt the second encrypted broadcast data according to the encryption rule to obtain the third encrypted broadcast data;

If the first encrypted broadcast data is consistent with the second encrypted broadcast data after step 304 is executed, the household appliance encrypts the second encrypted broadcast data according to the local second encryption instruction to obtain third encrypted broadcast data and sends it to the application terminal.

Step 306: Check whether the third encrypted broadcast data is consistent with the locally calculated fourth encrypted broadcast data, and if they are consistent, the authentication is passed;

After receiving the above-mentioned third encrypted broadcast instruction, the application terminal encrypts the first encrypted broadcast instruction according to the second encryption rule indicated by the second encryption instruction obtained from the corresponding cloud server to obtain the fourth encrypted broadcast instruction, and Determine whether the third encrypted broadcast data and the fourth encrypted broadcast data are consistent. If they are consistent, the two-way authentication is passed, that is, both the home appliance and the application terminal are legal, and the home appliance can be distributed to the network; if they are inconsistent, it means that the application terminal side It is certified that the home appliance is a fraudulent device, and the connection with the home appliance is disconnected, so that the distribution network is not performed.

Steps 307 to 311 (same as steps 203 to 207 ); that is, after it is determined that the home appliance and the application terminal have passed the authentication, steps 307 to 311 are executed to configure the service through WIFI to complete the network distribution to the home appliance.

In order to further specifically introduce the technical solutions provided by the embodiments of the present invention, the embodiments of the present invention provide the following two specific embodiments. It should be understood that the following specific embodiments are merely examples, and do not mean that the technical solutions disclosed in the embodiments of the present invention only include or are only applicable to the following two situations.

Embodiment one:

The household appliance of user A is the smart rice cooker of a certain brand I, and it can be known that this smart rice cooker has two encrypted commands in the bluetooth broadcast data A sent in the process of carrying out the bluetooth distribution network, such as these two encrypted commands are respectively encrypted commands 5 and encryption instruction 10, and the encryption rule of encryption instruction 5 is AES encryption algorithm, and the encryption rule of encryption instruction 10 is DES encryption algorithm; This intelligent rice cooker sends bluetooth broadcast data A according to table 1 rule.

The hacker has a fraudulent use device K, and it can be known that the Bluetooth broadcast data sent by the fraudulent use device K itself is not equal to the Bluetooth broadcast data A of the smart rice cooker, because the hacker can use the Bluetooth broadcast data A according to the Bluetooth broadcast data of the fraudulent use device K. Tampering, the tampered Bluetooth broadcast data is X, and the Bluetooth broadcast data X and the Bluetooth broadcast data A have the same attribute information. Therefore, the MAC address, Product ID, encryption command 5, and encryption command 10 in X and A are the same.

The specific steps are as follows:

(1) The user receives the Bluetooth broadcast data X sent by the fraudulent use device K through the application terminal APP;

(2) according to MAC address in X, Product ID is preliminarily judged to be this intelligent rice cooker of this brand I from cloud server, then is connected to the fraudulent use equipment K of this broadcast data X, and further executes;

(3) the application terminal of this user obtains concrete encryption rule from the cloud server of this brand 1 according to encryption instruction 5 and encryption instruction 10, the encryption rule of encryption instruction 5 is AES encryption algorithm, and the encryption rule of encryption instruction 10 is DES encryption algorithm; And according to the AES encryption algorithm of the encryption instruction 5, X is encrypted as the first encrypted broadcast data B, and sent to the fraudulent use device K through authorizationserve;

(4) fraudulent use of equipment K can encrypt X according to the encryption method corresponding to encryption instruction 5, and the encrypted broadcast data after encryption is the second encrypted broadcast data C; Because this intelligent equipment K does not know the encryption sequence 5 of this intelligent electric cooker The encryption method is the AES encryption algorithm, so the second encrypted broadcast data C is actually not the same as the first encrypted broadcast data B. Since the smart device K authenticates itself, the smart device K can think that C and B are the same, and Continue to utilize the encryption method corresponding to the encryption sequence 10 to encrypt C, because the intelligent device K does not know that the encryption method of the encryption instruction 10 of the intelligent electric cooker is the DES encryption algorithm, so according to its own encryption method encryption obtains the third encrypted broadcast data D, and sent to the user's application terminal;

(5) The user's application terminal APP encrypts X to the fourth encrypted broadcast data E through the DES encryption algorithm of the encryption command 10 obtained from the cloud, and then it can be determined that the received third encrypted broadcast data D and the fourth encrypted broadcast data E is not the same, therefore, the authentication fails, steps 307 to 311 are not executed, and the network configuration fails.

Through the above process, the user can ensure the distinction of fraudulently used devices in the Bluetooth distribution network of home appliances, which improves the security of the home appliances in the Bluetooth distribution network.

Embodiment 2:

The household appliance of user A is the smart rice cooker of a certain brand I, and there are two encrypted instructions in the bluetooth broadcast data A sent, such as these two encrypted instructions are respectively encrypted instructions 5 and encrypted instructions 10, and the encryption of encrypted instructions 5 The rule is the AES encryption algorithm, and the encryption rule of the encryption sequence 10 is the DES encryption algorithm; the smart rice cooker sends the Bluetooth broadcast data A according to the rules in Table 1; a hacker has a malicious terminal that can be connected to the household appliance, then the hacker uses the malicious terminal Proceed as follows:

(1) the intelligent electric cooker of the user sends the bluetooth broadcast data A, and the malicious terminal receives the bluetooth broadcast data A, and is connected to the bluetooth of the intelligent electric cooker, but the malicious terminal does not know the specific encryption rule of the encryption sequence 5, therefore, this The malicious terminal obtains the encryption rules from the cloud server corresponding to itself according to the encryption sequence 5. The encryption method of the obtained encryption sequence 5 is not the AES algorithm, and encrypts the encrypted broadcast data A into the first encrypted broadcast data b. send authorization serve to the smart rice cooker;

(2) this smart rice cooker is encrypted according to the encryption rule AES algorithm of local encryption instruction 5, encrypted broadcast data A is encrypted as the second encrypted broadcast data e, then it can be judged that the first encrypted broadcast data b received and the second encrypted broadcast data e are not The same, therefore, if the authentication fails, the malicious terminal is directly disconnected, and steps 307 to 311 are not executed, and the network configuration fails.

Through the above process, in the process of configuring the bluetooth network of the home appliance, the user avoids the malicious terminal from connecting to the user's home appliance Bluetooth to realize the network distribution, which leads to the illegal control of the user's home appliance, thus further improving the The security of home appliances in the process of Bluetooth distribution network.

It can be seen from the above content that the Bluetooth module of the household appliance is used to send Bluetooth broadcast data, and the Bluetooth broadcast data includes a first encryption command; the first encryption command is used to instruct to encrypt the Bluetooth broadcast data according to the first encryption rule ; Receive the first encrypted broadcast data sent by the application terminal; the home appliance MCU is used to encrypt the Bluetooth broadcast data using the above-mentioned first encryption rule to obtain second encrypted broadcast data; Determine the above-mentioned first encrypted broadcast data and the first encrypted broadcast data 2. After the encrypted broadcast data is inconsistent, the Bluetooth connection with the application terminal is disconnected. The use of Bluetooth broadcast data with encrypted instructions can prevent illegal personnel from using malicious terminals to connect to the user's home appliance equipment and interfere with the user's home appliance equipment distribution network during the network distribution process. On the other hand, after the Bluetooth module of the application terminal sends the first encrypted broadcast data to the home appliance, and the home appliance confirms that the first encrypted broadcast data and the second encrypted broadcast data are consistent, the Bluetooth module of the application terminal also sends the first encrypted broadcast data to the home appliance. for receiving the third encrypted broadcast data sent by the household appliance; the MCU of the application terminal is used to disconnect the Bluetooth connection with the household appliance after determining that the third encrypted broadcast data is inconsistent with the fourth encrypted broadcast data obtained by local calculation . This prevents users from connecting to fraudulently used equipment in the process of distributing home appliances.

Based on the same inventive concept, the embodiments of the present invention further provide another computer device, which may specifically be a desktop computer, a portable computer, a smart phone, a tablet computer, a Personal Digital Assistant (PDA), and the like. The computer device may include a central processing unit (Central Processing Unit, CPU), a memory, an input/output device, etc. The input device may include a keyboard, a mouse, a touch screen, etc., and the output device may include a display device, such as a liquid crystal display (Liquid Crystal Display, LCD) ), CathodeRay Tube (CRT), etc.

The memory may include read only memory (ROM) and random access memory (RAM) and provide the processor with program instructions and data stored in the memory. In the embodiment of the present invention, the memory may be used to store the program of the above-mentioned Bluetooth network distribution method of the household appliance.

The processor invokes the program instructions stored in the memory, and the processor is configured to execute the above-mentioned Bluetooth network distribution method for the household appliance according to the obtained program instructions.

Based on the same inventive concept, an embodiment of the present invention provides a computer storage medium for storing computer program instructions for the above-mentioned computer equipment, which includes a program for executing the above-mentioned Bluetooth network distribution method for the household appliance equipment.

The computer storage medium can be any available medium or data storage device that can be accessed by a computer, including but not limited to magnetic storage (eg, floppy disk, hard disk, magnetic tape, magneto-optical disk (MO), etc.), optical storage (eg CD, DVD, BD, HVD, etc.), and semiconductor memory (eg, ROM, EPROM, EEPROM, non-volatile memory (NAND FLASH), solid-state disk (SSD)), and the like.

Obviously, those skilled in the art can make various changes and modifications to the embodiments of the present invention without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the embodiments of the present invention fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.

Claims (10)

1. a kind of household appliance is characterized in that, comprises: A Bluetooth module for sending Bluetooth broadcast data, where the Bluetooth broadcast data includes a first encryption instruction; the first encryption instruction is used to instruct to encrypt the Bluetooth broadcast data according to a first encryption rule; encrypted broadcast data; The MCU is configured to encrypt the Bluetooth broadcast data by using the first encryption rule to obtain second encrypted broadcast data; after determining that the first encrypted broadcast data and the second encrypted broadcast data are inconsistent, disconnect the the Bluetooth connection of the application terminal. 2. The household appliance according to claim 1, wherein the Bluetooth broadcast data further comprises a second encryption instruction; The MCU is further configured to determine that the first encrypted broadcast data is consistent with the second encrypted broadcast data, and then encrypt the second encrypted broadcast data according to the second encryption rule indicated by the second encryption instruction to obtain the third encrypted broadcast data; The Bluetooth module is further configured to send the third encrypted broadcast data to the application terminal; the third encrypted broadcast data is used by the application terminal to determine whether the home appliance is legal. 3. The household appliance according to claim 2, further comprising a WIFI module, The Bluetooth module is further configured to receive the router configuration information sent by the application terminal through a Bluetooth connection after the third encrypted broadcast data is sent to the application terminal; the router configuration information is the application terminal Sent after confirming that the household appliance is legal; The WIFI module is used to access the router according to the router configuration information to complete the Bluetooth network distribution. 4. an application terminal, is characterized in that, comprises: a Bluetooth module for receiving Bluetooth broadcast data sent by home appliances, where the Bluetooth broadcast data includes a first encryption instruction; an MCU, configured to obtain the first encryption rule indicated by the first encryption instruction; encrypt the Bluetooth broadcast data by using the first encryption rule to obtain the first encrypted broadcast data; The Bluetooth module is further configured to send the first encrypted broadcast data to the home appliance; the first encrypted broadcast data is used by the home appliance to determine whether the application terminal is legal; The bluetooth module is further configured to disconnect the bluetooth connection with the household appliance based on the operation of disconnecting the bluetooth connection of the household appliance; the operation of disconnecting the bluetooth connection is the operation of the household appliance based on the first It is performed when it is determined that the application terminal is illegal when the first encrypted broadcast data is inconsistent with the second encrypted broadcast data generated by itself. 5. The application terminal according to claim 4, wherein the Bluetooth broadcast data further comprises a second encryption instruction; The Bluetooth module is further configured to receive the third encrypted broadcast data sent by the household appliance after sending the first encrypted broadcast data to the household appliance; The MCU is configured to acquire the second encryption rule indicated by the second encryption instruction, and encrypt the first encrypted broadcast data by using the second encryption rule to obtain fourth encrypted broadcast data; determine the third encryption After the broadcast data is consistent with the fourth encrypted broadcast data, instruct the Bluetooth module to send router configuration information to the home appliance; The Bluetooth module is further configured to send the router configuration information to the home appliance device to complete the Bluetooth network distribution. 6. The application terminal according to claim 5, wherein, The MCU is further configured to instruct the Bluetooth module to disconnect the Bluetooth connection with the home appliance after determining that the third encrypted broadcast data is inconsistent with the fourth encrypted broadcast data. 7. The application terminal according to any one of claims 4 to 6, wherein the Bluetooth broadcast data further comprises attribute information of household electrical appliances; The MCU is further configured to, before acquiring the first encryption rule indicated by the first encryption instruction, determine through the cloud server whether the attribute information of the household appliance is valid; after determining that the attribute information of the household appliance is valid, instructing the bluetooth module to establish a bluetooth connection with the household appliance; The MCU is specifically configured to acquire the first encryption rule corresponding to the first encryption instruction from the cloud server. 8. A Bluetooth network distribution method, comprising: generating and sending Bluetooth broadcast data, where the Bluetooth broadcast data includes a first encryption instruction; the first encryption instruction is used to instruct to encrypt the Bluetooth broadcast data according to a first encryption rule; Encrypt the Bluetooth broadcast data using the first encryption rule to obtain second encrypted broadcast data; after determining that the first encrypted broadcast data is inconsistent with the second encrypted broadcast data received from the application terminal, disconnect the Bluetooth connection of the application terminal. 9. A Bluetooth network distribution method, comprising: Obtain the first encryption rule indicated by the first encryption instruction; encrypt the Bluetooth broadcast data by using the first encryption rule to obtain the first encryption broadcast data; the first encryption instruction is carried in the Bluetooth broadcast data sent by the home appliance device ; The first encrypted broadcast data is used by the household appliance to determine whether the application terminal is legal; Based on the operation of disconnecting the Bluetooth connection of the home appliance, the Bluetooth connection with the home appliance is disconnected; the operation of disconnecting the Bluetooth connection is the first encrypted broadcast data generated by the home appliance itself based on the first encrypted broadcast data. 2. When the encrypted broadcast data is inconsistent, it is determined that the application terminal is illegal. 10 . A Bluetooth network distribution system, characterized in that it comprises the household electrical appliance according to any one of claims 1 to 3 and the application terminal according to any one of claims 4 to 6 . 11 .

Images