Method, apparatus, and system for controlling intelligent device, and storage medium

• US 10,547,609 B2
• Filed: 11/10/2016
• Issued: 01/28/2020
• Est. Priority Date: 04/27/2016
• Status: Active Grant

• Current Assignee: Tencent Technology Company Limited (Tencent Holdings Limited)
• Original Assignee: Tencent Technology Company Limited (Tencent Holdings Limited)
• Inventors: Liu, Wenqing, Shen, Zixi, Wang, Qiang
• Primary Examiner(s): Pearson, David J
• Assistant Examiner(s): Champakesanatusptodotgov, Badridot
• Application Number:
  US15/771,177
• Publication Number:
  US 20180316664A1
• Time in Patent Office: 1,174 Days
• Field of Search: 726 5
• CPC Class Codes: G05B 19/042 using digital processors G05B19/05 takes precedence
• CPC Class Codes: G05B 2219/24161 Use of key, in key is stored access level
• CPC Class Codes: G05B 2219/25428 Field device
• CPC Class Codes: G05B 2219/2642 Domotique, domestic, home control, automation, smart house
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 9/30 Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/33 using wearable devices, e.g. using a smartwatch or smart-glasses
• CPC Class Codes: H04W 12/47 using near field communication [NFC] or radio frequency identification [RFID] modules
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: Y02P 90/02 Total factory control, e.g. smart factories, flexible manufacturing systems [FMS] or integrated manufacturing systems [IMS]

Abstract

A method, an apparatus, and a system for controlling an intelligent device are provided. The device transmits a control request including a first intelligent device identifier corresponding to a first intelligent device to be controlled. In response to transmitting the control request, the device receives a first verification character string that corresponds to the control request. The first verification character string is transmitted to a first wearable device locally establishing a data connection with the first wearable device. First signed information is received from the first wearable device. The first signed information is a result of performing a signature on first to-be-signed information and includes the first verification character string. The first signed information and operation information for controlling the first intelligent device are transmitted.

Claims

1. A device comprising:

at least one memory configured to store computer program code; and

at least one processor configured to access the at least one memory and operate according to the computer program code, the computer program code including;

first sending code configured to cause the at least one processor to transmit a control request comprising a first intelligent device identifier corresponding to a first intelligent device to be controlled;

first receiving code configured to cause the at least one processor to receive, in response to transmitting the control request, a first verification character string that corresponds to the control request;

second sending code configured to cause the at least one processor to transmit the first verification character string to a first wearable device locally establishing a data connection with the first wearable device;

second receiving code configured to cause the at least one processor to receive first signed information from the first wearable device, the first signed information being a result of performing a signature on first to-be-signed information and the first signed information comprising at least the first verification character string; and

third sending code configured to cause the at least one processor to transmit the first signed information and operation information for controlling the first intelligent device,

wherein the computer program code further comprises;

second obtaining code configured to cause the at least one processor to obtain the first intelligent device identifier from the first intelligent device, and obtain the first wearable device identifier from the first wearable device;

fourth sending code configured to cause the at least one processor to transmit a wearable device binding request to the first intelligent device;

third receiving code configured to cause the at least one processor to receive a second verification character string from the first intelligent device;

fifth sending code configured to cause the at least one processor to transmit the second verification character string and the first intelligent device identifier to the first wearable device;

fourth receiving code configured to cause the at least one processor to receive second signed information, a first key index, and a first binding public key from the first wearable device, the second signed information being a result of performing signature on second to-be-signed information, wherein the second to-be-signed information comprises the second verification character string, the first intelligent device identifier, the first key index, and the first binding public key; and

sixth sending code configured to cause the at least one processor to transmit the second signed information, the first binding public key, the first key index, and the first wearable device identifier to the first intelligent device.

2. The device according to claim 1, wherein the control request further comprise a first wearable device identifier corresponding to the first wearable device.

3. The device according to claim 1, wherein the first to-be-signed information further comprises the first intelligent device identifier;

and

the second sending code is configured to cause the at least one processor to;

transmit the first verification character string and the first intelligent device identifier to the first wearable device locally establishing the data connection with the first wearable device.

4. The device according to claim 1, wherein the first to-be-signed information further comprises a first routing device identifier of a first routing device that the first intelligent device accesses;

the first receiving code is configured to cause the at least one processor to;

receive the first verification character string corresponding to the control request and the first routing device identifier; and

the second sending code is configured to cause the at least one processor to;

transmit the first verification character string, the first intelligent device identifier, and the first routing device identifier to the first wearable device locally establishing the data connection with the first wearable device.

5. The device according to claim 1, wherein the first to-be-signed information further comprises a signature quantity that corresponds to a current total quantity of signature

times of the first wearable device;

the second receiving code is configured to cause the at least one processor to;

receive the first signed information and the signature quantity from the first wearable device; and

the third sending code is configured to cause the at least one processor to;

transmit the first signed information, the operation information, and the signature quantity.

6. The device according to claim 1, wherein the first to-be-signed information further comprises the operation information;

the computer program code further comprises;

first obtaining code configured to cause the at least one processor to obtain the operation information for the first intelligent device from a user; and

the second sending code is configured to cause the at least one processor to;

transmit the first verification character string and the operation information to the first wearable device.

7. The device according to claim 1, wherein the computer program code further comprises:

third obtaining code configured to cause the at least one processor to obtain the first intelligent device identifier and the first wearable device identifier from a user;

seventh sending code configured to cause the at least one processor to transmit a wearable device unbinding request to the first intelligent device, the wearable device unbinding request comprising the first wearable device identifier;

fifth receiving code configured to cause the at least one processor to receive an unbinding success notification from the first intelligent device, the unbinding success notification comprising the first key index; and

eighth sending code configured to cause the at least one processor to transmit an intelligent device unbinding request to the first wearable device, the intelligent device unbinding request comprising the first key index.

8. A device comprising:

at least one memory configured to store computer program code; and

at least one processor configured to access the at least one memory and operate according to the computer program code, the computer program code including;

first receiving code configured to cause the at least one processor to receive a first verification character string from a first terminal device;

first signature code configured to cause the at least one processor to perform a signature on first to-be-signed information according to a locally pre-stored private key to generate first signed information, the first to-be-signed information comprising at least the first verification character string; and

first sending code configured to cause the at least one processor to transmit first signed information to the first terminal device,

wherein the computer program code further comprises;

second receiving code configured to cause the at least one processor to receive a second verification character string and a first intelligent device identifier from the first terminal device;

determining code configured to cause the at least one processor to generate a first binding public key and a first binding private key, and determine a first key index;

second signature code configured to cause the at least one processor to perform a signature on second to-be-signed information according to the first binding private key, wherein the second to-be-signed information comprises the second verification character string, the first intelligent device identifier, the first key index, and the first binding public key;

storage code configured to cause the at least one processor to correspondingly store locally the first binding private key, the first key index, and the first intelligent device identifier; and

second sending code configured to cause the at least one processor to transmit second signed information that is a result of performing the signature on the second to-be-signed information, the first key index, and the first binding public key, to the first terminal device.

9. The device according to claim 8, wherein the first to-be-signed information further comprises a first intelligent device identifier corresponding to a first intelligent device;

the first receiving code is configured to cause the at least one processor to;

receive the first verification character string and the first intelligent device identifier from the first terminal device; and

the first signature code is configured to cause the at least one processor to;

determine a first private key corresponding to the first intelligent device identifier according to a pre-stored correspondence between an intelligent device identifier and a private key, and perform the signature on the first to-be-signed information according to the first private key.

10. The device according to claim 9, wherein the first to-be-signed information further comprises a first routing device identifier of a first routing device that the first intelligent

device accesses;

the first receiving code is configured to cause the at least one processor to;

receive the first verification character string, the first intelligent device identifier, and the first routing device identifier from the first terminal device; and

the first signature code is configured to cause the at least one processor to;

determine the first private key corresponding to the first intelligent device identifier and the first routing device identifier according to a correspondence among a pre-stored intelligent device identifier, a routing device identifier, and a private key.

11. The device according to claim 8, wherein the first to-be-signed information further comprises the operation information, and the first receiving module is configured to cause the at least one processor to:

receive the first verification character string and the operation information from the first terminal device.

12. The device according to claim 11, wherein the first wearable device further comprises:

display code configured to cause the at least one processor to display the operation information; and

the first signature code is configured to cause the at least one processor to;

perform signature on the first to-be-signed information according to the locally pre-stored private key in response to a signature confirmation instruction.

13. The device according to claim 8, wherein the computer program code further comprises:

third receiving code configured to cause the at least one processor to receive an intelligent device unbinding request from the first terminal device, the intelligent device unbinding request comprising the first key index; and

deletion code configured to cause the at least one processor to delete the first binding private key and the first intelligent device identifier that correspond to the locally stored first key index.

14. A system comprising:

a first terminal device, a server, a first intelligent device, and a first wearable device,

the first terminal device comprising at least one first memory configured to store first computer program code, and at least one first processor configured to access the at least one first memory and operate according to the first computer program code to;

transmit a control request corresponding to the first intelligent device to the server, the control request comprising a first intelligent device identifier;

receive a first verification character string that corresponds to the control request from the server;

transmit the first verification character string to the first wearable device locally establishing a data connection with the first wearable device;

receive first signed information that is a result of performing a signature on first to-be-signed information from the first wearable device, the first to-be-signed information comprising at least the first verification character string; and

transmit, to the server, the first signed information and operation information for controlling the first intelligent device;

the server comprising at least one second memory configured to store second computer program code, and at least one second processor configured to access the at least one second memory and operate according to the second computer program code to;

receive the control request that corresponds to the first intelligent device from the first terminal device,

transmit a verification request to the first intelligent device corresponding to the first intelligent device identifier,

receive the first verification character string from the first intelligent device, and transmit the first verification character string to the first terminal device, and

receive the first signed information and the operation information for the first intelligent device from the first terminal device, the first signed information being obtained by performing a signature on the first to-be-signed information, and transmit the first signed information and the operation information to the first intelligent device;

the first intelligent device comprising at least one third memory configured to store third computer program code, and at least one third processor configured to access the at least one third memory and operate according to the third computer program code to;

receive the verification request from the server,

send the first verification character string to the server,

receive the first signed information and the operation information from the server, the first signed information being obtained by performing the signature on the first to-be-signed information,

perform signature verification on the first signed information according to a locally pre-stored public key, and

perform corresponding operation processing according to the operation information if the signature verification succeeds; and

the first wearable device comprising at least one fourth memory configured to store fourth computer program code, and at least one fourth processor configured to access the at least one fourth memory and operate according to the fourth computer program code to;

receive the first verification character string from the first terminal device,

perform the signature on the first to-be-signed information according to a locally pre-stored private key to generate first signed information, and

transmit the first signed information to the first terminal device,

wherein the at least one first processor of the first terminal device accesses the at least one first memory and operates according to the first computer program code to further;

obtain the first intelligent device identifier from the first intelligent device, and obtain the first wearable device identifier from the first wearable device;

transmit a wearable device binding request to the first intelligent device;

receive a second verification character string from the first intelligent device;

transmit the second verification character string and the first intelligent device identifier to the first wearable device;

receive second signed information, a first key index, and a first binding public key from the first wearable device, the second signed information being a result of performing signature on second to-be-signed information, wherein the second to-be-signed information comprises the second verification character string, the first intelligent device identifier, the first key index, and the first binding public key; and

transmit the second signed information, the first binding public key, the first key index, and the first wearable device identifier to the first intelligent device.