TWI682656B - Communication system using two kinds of keys - Google Patents

Abstract

A communication system is provided in the present disclosure. The communication system includes a server, and a first electronic device including a first predetermined device key. When the first electronic device transmits the first type of data, the server verifies whether the first device preset key matches the first device key to determine whether the first electronic device transmits the first type of data to the server. When the first electronic device transmits a second type of data to the server, the first electronic device encrypts and encodes a first time stamp and a second transmission key to generate a first hash value. The first electronic device transmits the first hash value to the server.

Description

Communication system using two keys

The invention relates to a communication system, especially a communication system that uses two keys for transmission.

Due to the emergence of smart meters, smart grids can gradually become popular, but today smart meters use either wired or wireless networks to transmit data. In the smart grid system with wireless network as the main transmission method, in addition to power data, there are other power protection signals that need to be transmitted. If they all use the same key for transmission, it is not easy to distinguish at the confidential level.

In view of this, it is an important issue in the industry to provide a communication system capable of communicating according to data of different confidential levels.

In view of this, embodiments of the present invention provide a communication system that uses two keys for communication transmission, including: a server; and a first electronic device with a first device preset key; Before the first electronic device sends a first type of data to the server, the first electronic device provides a first transmission request signal corresponding to the first type of data to the server, the server according to The first transmission request signal generates a first device key, and the server provides a first verification request signal to the first electronic device according to the first transmission request signal, and the first electronic device The first verification request signal transmits the first device preset key to the server, and the server verifies whether the first device preset key matches the first device key to determine whether Agree with the first electricity The sub-device transmits the first type of data to the server; wherein, when the first electronic device sends a second type of data to the server, the first electronic device sends a first timestamp and A second transmission key is encrypted and encoded to generate a first encrypted hash value, and the first electronic device transmits the first encrypted hash value to the server.

Before the first electronic device sends the second type of data to the server, the first electronic device provides a second transmission request signal corresponding to the second type of data to the server, The server generates the second transmission key according to the second transmission request signal, and the server transmits the second transmission key generated by the server to the first electronic device.

Wherein, the server generates a second encrypted hash value based on a second time stamp and the second transmission key, and the server compares the first encrypted hash value and the second encrypted hash value To decide whether to allow the first electronic device to transmit the second type of data to the server.

Wherein, the confidentiality level of the first type data is higher than that of the second type data.

Wherein, a time difference between the first time stamp and the second time stamp is less than a predetermined time.

The first time stamp is the same as the second time stamp.

Wherein, before the first electronic device sends another first type data to the server, the first electronic device provides another first transmission request signal corresponding to the first type data to the server A server, the server generates another first device key according to the first transmission request signal, and the server provides a first verification request signal to the first according to the other first transmission request signal An electronic device, the first electronic device transmits the first device preset key to the server according to the first verification request signal, the server verifies whether the first device preset key is The key of the other first device matches to determine whether to approve the first electronic device to transmit the first type of data to the server.

Wherein, the first electronic device uses Bluetooth communication protocol 4.0 or Bluetooth communication protocol 5.0 to communicate with the server.

Wherein, the communication system further includes: a second electronic device; the first electronic device and the second electronic device are based on Bluetooth communication protocol 4.0 or Bluetooth communication protocol 5.0 with the server and the second The electronic device communicates, and the second electronic device uses Bluetooth communication protocol 4.0 or Bluetooth communication protocol 5.0 to communicate with the first electronic device and the server.

In view of this, an embodiment of the present invention provides a communication method using two keys, including: transmitting a first transmission request signal corresponding to a first type of data; providing a first verification signal; based on the first verification The signal provides a first device preset key; and verifies whether the first device preset key matches a first device key to decide whether to agree to send the first type of data.

Wherein, the communication method further includes: transmitting a second transmission request signal corresponding to a second type of data; generating a second transmission key according to the second transmission request signal; returning the second transmission key Generating a first encrypted hash value based on the second transmission key and a first time stamp; generating a second encrypted hash value based on the second transmission key and a second time stamp; comparing the first An encrypted hash value and the second encrypted hash value generate a comparison result; and based on the comparison result, decide whether to agree to send the second type of data.

In summary, the communication system according to the embodiment of the present invention uses two different keys for different types of data transmission. In addition to different encryption levels of data transmission for different confidential levels of data, it is also due to the two The key is only used for the current data transmission, which further improves the security level of the communication method of the present invention.

1‧‧‧Communication system

10‧‧‧Server

11‧‧‧ First electronic device

12‧‧‧Second electronic device

S100-S105, S200-S207

FIG. 1 is a schematic diagram of a communication system according to an embodiment of the invention.

FIG. 2 is the first electronic device and the server using the first device key according to an embodiment of the invention Schematic diagram of communication.

3 is a schematic diagram of a first electronic device and a server communicating with a second transmission key according to an embodiment of the invention.

The following are specific specific examples to illustrate the implementation of the "physiological detection device" disclosed in the present invention. Those skilled in the art can easily understand the advantages and effects of the present invention from the content disclosed in this specification. The present invention can be implemented or applied through other different specific embodiments. Various details in this specification can also be based on different viewpoints and applications, and various modifications and changes can be made without departing from the spirit of the present invention. In addition, the drawings of the present invention are merely schematic illustrations, and are not depicted according to actual dimensions. It should be understood that although the terms first, second, third, etc. may be used herein to describe various elements and the like, these elements should not be limited by these terms. These terms are used to distinguish one element from another. In addition, there are mentioned quantities or the like, and unless otherwise stated, the application scope of the present invention should not be limited by the quantity or the like. The following embodiments will further describe the related technical content of the present invention in detail, but the disclosed content is not intended to limit the technical scope of the present invention.

[The embodiment of the communication system of the present invention]

Please refer to FIG. 1, FIG. 2 and FIG. 3. FIG. 1 is a schematic diagram of a communication system according to an embodiment of the present invention. 2 is a schematic diagram of the first electronic device and the server communicating with the first device key according to an embodiment of the present invention. 3 is a schematic diagram of a first electronic device and a server communicating with a second transmission key according to an embodiment of the invention.

Please refer to FIG. 1. In this embodiment, the communication system 1 includes a server 10, a first electronic device 11, and a second electronic device 12.

The first electronic device 11 and the second electronic device 12 communicate with the server 10 according to a first communication protocol. The first electronic device 11 and the second electronic device 12 are Communicate with the second communication protocol. In this embodiment, the communication system 1 can be applied to a smart grid system.

In this embodiment, the first electronic device 11 and the second electronic device 12 are respectively a Bluetooth communication device. The first electronic device 11 and the second electronic device 12 may be respectively installed in different smart circuit meters or different power circuit control switches of the smart grid, which is not limited in the present invention.

In addition, the numbers of the first electronic device 11 and the second electronic device 12 can be adjusted according to actual needs, that is, the number of electronic devices that the communication system 1 can communicate with can be adjusted and designed according to actual needs. Do restrictions.

In this embodiment, the first communication protocol includes: a Bluetooth communication protocol 4.0, a Bluetooth communication protocol 5.0, a wireless fidelity communication protocol (Wifi), a LoRa communication protocol, a Sigfox communication protocol, and a fourth generation mobile communication The technology communication protocol (4G) or a fifth-generation mobile communication technology communication protocol (5G) can be adjusted and designed according to actual needs. In the present invention, there is no limitation. The second communication protocol includes a Bluetooth communication protocol 4.0, a Bluetooth communication protocol 5.0, a wireless fidelity communication protocol (Wifi), a LoRa communication protocol, a Sigfox communication protocol, a fourth generation mobile communication technology communication protocol (4G) or It is a fifth-generation mobile communication technology communication protocol (5G), which can be adjusted and designed according to actual needs. In the present invention, there is no limitation.

In this embodiment, the first electronic device 11 and the second electronic device 12 communicate with the server 10 using the Bluetooth communication protocol, respectively.

The first electronic device has a first device preset key, and the communication method between the first electronic device 11 and the server 10 to transmit the first type of data includes the following steps:

Provide a first transmission request signal (step S100); provide a verification request signal (step S101); generate a first device key based on the first transmission request signal (step S102); provide a first device based on the verification request signal Preset key to the server (step S103); verify that the first device preset key is consistent with the first device key (step S104); provide a verification result to determine whether the first electronic device transmits the first key One type of material (step S105).

In this embodiment, the first electronic device 11 will first detect the data type before transmitting the data, that is, the first electronic device 11 will first detect the first type of data before transmitting the first type data or the second type data Or which key and transmission method is suitable for the second type of data to be transmitted, that is, in this embodiment, the key is selected according to the classification of the confidentiality of the data.

In step S100, before transmitting the first type of data, the first electronic device 11 first provides a first transmission request signal corresponding to the first type of data to the server 10. Then, the server 10 executes as described in step S101, and the server 10 provides a verification request signal to the first electronic device 11 according to the first transmission request signal.

In step S102, the server 10 generates a corresponding first device key according to the first transmission request signal.

In step S103, the first electronic device 11 provides the first device default key to the server 10 according to the verification request signal. In this embodiment, the first device preset key is stored in the first electronic device 11, and the first device preset password is stored in isolation and cannot be easily changed.

In step S104, the server 10 verifies the first device preset key sent by the first electronic device 11 and the first device key generated by the server 10 according to the first transmission request signal to confirm the first device Whether the preset key is consistent with the first device key, and generates a verification result.

In step S105, the server 10 provides a verification result to the first electronic device 11 to determine whether the first electronic device 11 transmits the first type of data. If the verification result is consistent, the first electronic device 11 starts to transmit the first type of data. If the verification result is not consistent, the first electronic device 11 does not transmit the first type of data. In this embodiment, the first type of data is data with a higher level of confidentiality.

In this embodiment, before the first electronic device 11 sends another first type data to the server 10, the first electronic device 11 provides another first transmission request signal corresponding to the other first type data to the servo Server 10, the server 10 generates another first device key based on another first transmission request signal, and the server 10 generates another key according to another first The transmission request signal provides a first verification request signal to the first electronic device 11, and the first electronic device 11 sends the first device preset key to the server 10 according to the first verification request signal, and the server 10 verifies the first device It is determined whether the key matches the key of the other first device to determine whether the first electronic device transmits the first type of data to the server 10.

Referring to FIG. 3, the communication method for the first electronic device 11 and the server 10 to transmit the second type of data includes the following steps:

Provide a second transmission request signal (step S200); generate a second transmission key (step S201); provide a second transmission key to the first electronic device (step S202); according to the first time stamp and the second transmission password The key generates a first encrypted hash value (step S203); provides the first encrypted hash value to the server (step S204); generates a second encrypted hash value based on a second time stamp and a second transmission key (step S205) ); compare the first encrypted hash value and the second encrypted hash value (step S206); and provide a comparison result to the first electronic device to determine whether the first electronic device transmits the second type of data (step S207).

In this embodiment, the first electronic device 11 will first detect the data type before transmitting the data, that is, the first electronic device 11 will first detect the first type of data before transmitting the first type data or the second type data Or which key and transmission method is suitable for the second type of data to be transmitted, that is, in this embodiment, the key is selected according to the classification of the confidentiality of the data.

In step S200, before transmitting the second type of data, the first electronic device 11 first provides a second transmission request signal corresponding to the second type to the server 10.

In step S201, the server 10 generates a second transmission key according to the second transmission request signal. In this embodiment, the second transmission key is a one-time key, that is, only the current transmission request can use. In other transmission requirements, a new second transmission key is required.

In step S202, the server 10 provides a second transmission key corresponding to the second transmission request signal to the first electronic device 11.

In step S203, the first electronic device 11 generates a first encrypted hash value according to the first time stamp and the second transmission key.

In step S204, the first electronic device 11 provides the first encrypted hash value to the server 10.

In step S205, the server 10 generates a second encrypted hash value based on a second time stamp and a second transmission key. In this embodiment, the first encrypted hash value and the second encrypted hash value in step S203 and step S205 are obtained by performing a hash operation using the second transmission key and different time stamps.

In step S206, the server 10 compares whether the first encrypted hash value and the second encrypted hash value match to generate a comparison result.

In step 207, the server 10 provides the comparison result to the first electronic device 11 to determine whether the first electronic device 11 transmits the second type of data. If the comparison result is consistent, the first electronic device 11 transmits the second type of data. If the comparison result is not consistent, the first electronic device 11 will not perform the second type of data transmission. .

In this embodiment, a time difference between the first time stamp and the second time stamp is less than a predetermined time. The predetermined time is, for example, 5 seconds or 10 seconds. In other embodiments, the first time stamp and the second time stamp may also be the same time.

In this embodiment, the confidentiality level of the first type data is higher than that of the second type data. That is, the first type of data may be power usage data, and the second type of data may be notification signals, warning signals, or other protection signals, which are not limited in the present invention.

In summary, the communication system according to the embodiment of the present invention uses two different keys for different types of data transmission. In addition to different encryption levels of data transmission for different confidential levels of data, it is also due to the two The key is only used for the current data transmission, which further improves the security level of the communication method of the present invention.

The above are only the preferred embodiments of the present invention, and are not intended to limit the scope of patent protection of the present invention, so the equivalent changes in the description and drawings of the present invention are used. Both of them are included in the scope of protection of the rights of the present invention, and are given to Chen Ming.

1‧‧‧Communication system

10‧‧‧Server

11‧‧‧ First electronic device

12‧‧‧Second electronic device

Claims (9)

A communication system suitable for an electric power system using two types of keys for communication transmission includes: a server; and a first electronic device having a first device preset key; wherein, when the first electronic Before the device sends a first type of data to the server, the first electronic device provides a first transmission request signal corresponding to the first type of data to the server, the server according to the first The transmission request signal generates a first device key, and the server provides a first verification request signal to the first electronic device according to the first transmission request signal, and the first electronic device according to the first The verification request signal transmits the first device preset key to the server, and the server verifies whether the first device preset key matches the first device key to decide whether to agree to the first An electronic device transmits the first type of data to the server; wherein, when the first electronic device sends a second type of data to the server, the first electronic device pairs a first time stamp And a transmission key is encrypted and encoded to generate a first encrypted hash value, and the first electronic device transmits the first encrypted hash value to the server. A communication system as claimed in item 1 of the patent scope, wherein, before the first electronic device sends the second type of data to the server, the first electronic device provides a corresponding to the second type of data A second transmission request signal to the server, the server generates the transmission key according to the second transmission request signal, and the server transmits the transmission key generated by the server to the server The first electronic device is described. A communication system as claimed in item 2 of the patent scope, wherein the server generates a second encrypted hash value based on a second time stamp and the transmission key, and the server compares the first encrypted hash Value and the second encrypted hash value to determine whether to allow the first electronic device to transmit the second type of data to all Describe the server. For example, in the communication system of claim 1, the confidentiality level of the first type of data is higher than that of the second type of data. For example, in the communication system of claim 3, wherein a time difference between the first time stamp and the second time stamp is less than a predetermined time. For example, in the communication system of claim 3, the first time stamp is the same as the second time stamp. For example, in the communication system of claim 1, the first electronic device uses Bluetooth communication protocol 4.0 or Bluetooth communication protocol 5.0 to communicate with the server. For example, the communication system of claim 1 of the patent scope further includes: a second electronic device; wherein, the first electronic device and the second electronic device are based on Bluetooth communication protocol 4.0 or Bluetooth communication protocol 5.0 and the The server communicates with the second electronic device, and the second electronic device communicates with the first electronic device and the server using Bluetooth communication protocol 4.0 or Bluetooth communication protocol 5.0. A communication method using two keys suitable for an electric power system includes: transmitting a first transmission request signal corresponding to a first type of data; providing a first verification signal; according to the first verification signal, providing a The first device preset key; verify whether the first device preset key matches a first device key to determine whether to agree to send the first type of data; send a corresponding to a second type of data A second transmission request signal; generating a transmission key according to the second transmission request signal; returning the transmission key; generating a first encrypted hash value according to the transmission key and a first time stamp; Generating a second encrypted hash value based on the transmission key and a second time stamp; comparing the first encrypted hash value and the second encrypted hash value to generate a comparison result; and based on the comparison As a result, it is decided whether to agree to the transmission of the said type of material.

Images