CN105636032A - Device access processing method, device access processing device and terminal - Google Patents

Abstract

The present invention proposes a device access processing method, a processing device, and a terminal, wherein the processing method includes: when the terminal receives a device access request from the device to be accessed, sending the first request to the device to be accessed A random code. After the access device receives the first random code, it calculates the first target key according to the first random code, the pre-stored second random code and the pre-stored first public key, and uses the second A target key is sent to the terminal; receiving the second random code and the first target key from the device to be accessed, and calculating the second Target key: judging whether the second target key is the same as the first target key, and if the judgment result is yes, allow the device to be accessed to access the WBAN, otherwise, prohibit access to the WBAN. The technical solution of the invention is general, has low calculation amount, and can efficiently perform security authentication on the access equipment in the wireless body area network.

Description

Device access processing method, device access processing device and terminal

technical field

The present invention relates to the technical field of terminal access authentication, in particular to a device access processing method, a device access processing device and a terminal.

Background technique

WBAN (Wireless Body Area Network, Wireless Body Area Network) is a short-distance wireless network centered on the human body. Specifically, it is a network attached to the human body. It consists of a set of small and movable sensors with communication functions and a body Composition of the main station. As an emerging technology, wireless body area network has very broad application prospects in the fields of medical treatment, health care, and consumer electronics. In order to prevent malicious nodes from accessing the WBAN and then attacking and destroying the WBAN, the devices accessing the WBAN must be authenticated. At present, in the existing technical solutions, there are mainly three authentication methods:

1) An authentication method is: WBAN body subject (such as a terminal) and an external access device (such as a sensor) conduct two-way identity authentication, but the two-way identity authentication process involves encryption and decryption operations, and the calculation required for encryption and decryption operations The amount is very large, and implementation on mobile devices and wearable devices with limited computing power will cause a large delay.

2) Another authentication method is: after collecting ECG signals for a certain period of time through the sensor, by detecting the signal feature points, intercepting a stable waveform containing complete physiological signal cycle information, generating a template T, and the template T is stored between the device and the body master station. (Mobile terminals) are safely shared, and the sensor can safely transmit the template T to the mobile terminal through a safe ultra-short-distance transmission technology, and the mobile terminal stores the template T and registers the user for identification. The method relies on sensors for collecting ECG signals, is suitable for medical equipment networking, and cannot be used by ordinary users (non-medical WBAN users).

3) The last authentication method is: regard the body area network as a whole, and each sensor node and control unit are regarded as an antenna, so as to detect whether the distance between the nodes to be authenticated is close enough by using the difference in received signal strength of different antennas, The node to be authenticated is authenticated based on the principle of near-distance trustworthiness. However, this method is to determine that the node to be accessed is close enough to the WBAN through the signal strength, thereby authenticating it, without considering that the attacker may place malicious attack nodes around the WBAN user (for example, in front of and behind the seat).

The above three authentication methods realize the authentication between the WBAN and the access device under certain conditions, but each has its own defects: or the authentication operation is cumbersome, or limited, or the security is not enough.

Therefore, how to improve the versatility of the access authentication method for WBAN, and how to efficiently and securely authenticate access devices in WBAN while reducing the amount of access authentication calculations has become an urgent problem to be solved.

Contents of the invention

Based on the above problems, the present invention proposes a new device access processing scheme, which is universal, low in calculation, and can efficiently perform security authentication on access devices in a wireless body area network.

In view of this, an aspect of the present invention proposes a device access processing method, including: when a terminal receives a device access request from a device to be accessed, sending a first random code to the device to be accessed so that after the device to be accessed receives the first random code, it calculates the first target encryption key according to the first random code, the pre-stored second random code, and the pre-stored first public key. key, and send the first target key to the terminal; receive the second random code and the first target key from the device to be accessed, according to the first random code, the The second random code and the pre-stored second public key are used to calculate the second target key; judge whether the second target key is the same as the first target key, and when the judgment result is yes, allow The device to be accessed accesses the wireless body area network constructed by the terminal, otherwise, the device to be accessed is prohibited from accessing the wireless body area network constructed by the terminal.

In this technical solution, by sending a first random code to the device to be accessed, the device to be accessed can be encrypted according to its own encryption algorithm according to the first random code, the pre-stored second random code and the first public key. Calculate a first target key, and send the first target key to the terminal, so that the terminal can calculate according to its own algorithm according to the first random code, the pre-stored second random code and the second public key Generate a second target password, and compare it with the received first target key to judge whether the device to be accessed is a legal device that the terminal allows access according to the judgment result, and if so, allow the device to be accessed Otherwise, it means that the device to be connected is an illegal device, which will pose a threat to the security of the wireless body area network, and the device to be connected is prohibited from accessing the wireless body area network built by the terminal. In this way, the security authentication of the device to be accessed into the wireless body area network can be efficiently completed through a simple encryption algorithm with a low amount of calculation, which can effectively prevent the wireless body area network constructed by the illegal device to be accessed from accessing the terminal. area network and cause damage to the wireless body area network.

In the above technical solution, preferably, after the device to be accessed is allowed to access the wireless body area network constructed by the terminal, according to the second random code and the second public key, the third target key; sending the third target key to the device to be accessed, so that the device to be accessed can calculate a fourth target according to the second random code and the first public key determine whether the third target key is the same as the fourth target key, and when the determination result is the same, send confirmation information for accessing the wireless body area network to the terminal; otherwise, No confirmation information for accessing the wireless body area network is sent.

In this technical solution, after the terminal calculates the third target key according to the second random code and the second public key, it can transmit the third target key to the device to be accessed, so that the device to be accessed can use the The second random code and the first public key, after calculating the fourth target key, compare the fourth target key with the received third target key, if the comparison result is that the third target key and the first The four target keys are the same, and the device to be connected will confirm that it has connected to the correct wireless body area network again, and will send a confirmation message to the terminal to complete the access. Of course, when the judgment result is that the third target key is the same as When the fourth target key is different, it means that the device to be accessed may have mistakenly connected to the wrong wireless body area network, that is, the wireless body area network currently constructed by the terminal is not the wireless body area network that the device to be accessed actually needs to access. Body area network, the device to be connected will not send confirmation information to the terminal, nor will it access the wireless body area network. Through the above process, the two-way authentication of the access authentication process of the device to be connected can be realized, improving The accuracy of the access process of the equipment to be accessed can not only prevent illegal equipment to be accessed from accessing the wireless body area network constructed by the current terminal, improve the access security of the wireless body area network, but also prevent the equipment to be accessed from being mistakenly connected wrong wireless body area network, thereby improving the accuracy of the access process of the device to be accessed. Of course, since the two-way authentication process does not need to limit the type of the device to be accessed, the two-way authentication method has high versatility. It is suitable for security authentication of various types of devices to be connected.

In the above technical solution, preferably, further comprising: when the device to be accessed is a device to be accessed that is permitted by the terminal, the first public key is the same as the second public key, And the algorithm used by the device to be accessed when calculating the first target key and the fourth target key is the same as the algorithm used by the terminal when calculating the second target key and the third target key The algorithm is the same.

In this technical solution, by presetting the same first public key and the second public key to the terminal and the legal equipment to be accessed that the terminal is allowed to access, and controlling them to use the same encryption algorithm, it can be ensured that During the process of accessing the wireless body area network built by the terminal, only the legal waiting device can calculate the same target key as the terminal, and then successfully pass the access security authentication of the wireless body area network. However, because the illegal device to be accessed does not have the same public key as the terminal, and does not have the same encryption algorithm as the terminal, it is impossible to calculate the same target key as the terminal, thus Unable to successfully pass the access security authentication of the wireless body area network, and unable to access the wireless body area network constructed by the terminal, so as to ensure the security of the access device to the wireless body area network to the greatest extent. Wherein, the first public key and the second public key include but are not limited to: passwords, passwords, etc. set by users. The calculation method used to obtain the target key preferably adopts a cryptographic hash function.

In the above technical solution, preferably, it further includes: when the terminal allows or prohibits the device to be accessed from accessing the wireless body area network, sending a prompt signal; and when the device to be accessed accesses the wireless body area network After the wireless body area network, the terminal communicates with the device to be accessed through at least one of WIFI, Bluetooth, infrared, NFC, wired network, and wireless network.

In this technical solution, by sending prompt information to the user, the user is made aware of the current access status of the device to be accessed, so as to effectively monitor the access status of the device to be accessed. Of course, you can also choose a more convenient communication method for the terminal and the access device according to the current environment of the access device and the terminal, such as WIFI, Bluetooth, infrared, NFC, wired network, wireless network, etc.

In the above technologies, preferably, in the processing method of device access in any of the above technical solutions, the device to be connected includes: at least one of ordinary mobile devices, wearable devices, wearable sensors and medical devices kind of equipment.

In this technical solution, the devices to be accessed include but are not limited to ordinary mobile devices, wearable devices, wearable sensors and medical devices, and all devices that can communicate with terminals through wireless body area networks to improve user convenience are Can.

Another aspect of the present invention proposes a device access processing device, including: a sending unit, when the terminal receives a device access request from a device to be accessed, it sends a first random code to the device to be accessed so that after the device to be accessed receives the first random code, it calculates the first target encryption key according to the first random code, the pre-stored second random code, and the pre-stored first public key. key, and send the first target key to the terminal; the receiving unit receives the second random code and the first target key from the device to be accessed; the computing unit, according to the The first random code, the second random code and the pre-stored second public key calculate the second target key; the judging unit judges whether the second target key is the same as the first target key The processing unit, when the judgment result is yes, allows the device to be accessed to access the wireless body area network constructed by the terminal, otherwise, prohibits the device to be accessed to access the wireless body area network constructed by the terminal .

In this technical solution, by sending a first random code to the device to be accessed, the device to be accessed can be encrypted according to its own encryption algorithm according to the first random code, the pre-stored second random code and the first public key. Calculate a first target key, and send the first target key to the terminal, so that the terminal can calculate according to its own algorithm according to the first random code, the pre-stored second random code and the second public key Generate a second target password, and compare it with the received first target key to judge whether the device to be accessed is a legal device that the terminal allows access according to the judgment result, and if so, allow the device to be accessed Otherwise, it means that the device to be connected is an illegal device, which will pose a threat to the security of the wireless body area network, and the device to be connected is prohibited from accessing the wireless body area network built by the terminal. In this way, the security authentication of the device to be accessed into the wireless body area network can be efficiently completed through a simple encryption algorithm with a low amount of calculation, which can effectively prevent the wireless body area network constructed by the illegal device to be accessed from accessing the terminal. area network and cause damage to the wireless body area network.

In the above technical solution, preferably, the calculation unit is further configured to: after allowing the device to be accessed to access the wireless body area network constructed by the terminal, according to the second random code and the second public key to calculate a third target key; the sending unit is further configured to: send the third target key to the device to be accessed, so that the device to be accessed can use the second Random code and the first public key, after calculating the fourth target key, determine whether the third target key is the same as the fourth target key, and when the determination result is the same, send the The terminal sends confirmation information for accessing the wireless body area network, otherwise, does not send confirmation information for accessing the wireless body area network.

In this technical solution, after the terminal calculates the third target key according to the second random code and the second public key, it can transmit the third target key to the device to be accessed, so that the device to be accessed can use the The second random code and the first public key, after calculating the fourth target key, compare the fourth target key with the received third target key, if the comparison result is that the third target key and the first The four target keys are the same, and the device to be connected will confirm that it has connected to the correct wireless body area network again, and will send a confirmation message to the terminal to complete the access. Of course, when the judgment result is that the third target key is the same as When the fourth target key is different, it means that the device to be accessed may have mistakenly connected to the wrong wireless body area network, that is, the wireless body area network currently constructed by the terminal is not the wireless body area network that the device to be accessed actually needs to access. Body area network, the device to be connected will not send confirmation information to the terminal, nor will it access the wireless body area network. Through the above process, the two-way authentication of the access authentication process of the device to be connected can be realized, improving The accuracy of the access process of the equipment to be accessed can not only prevent illegal equipment to be accessed from accessing the wireless body area network constructed by the current terminal, improve the access security of the wireless body area network, but also prevent the equipment to be accessed from being mistakenly connected wrong wireless body area network, thereby improving the accuracy of the access process of the device to be accessed. Of course, since the two-way authentication process does not need to limit the type of the device to be accessed, the two-way authentication method has high versatility. It is suitable for security authentication of various types of devices to be connected.

In the above technical solution, preferably, further comprising: when the device to be accessed is a device to be accessed that is permitted by the terminal, the first public key is the same as the second public key, And the algorithm used by the device to be accessed when calculating the first target key and the fourth target key is the same as the algorithm used by the terminal when calculating the second target key and the third target key The algorithm is the same.

In this technical solution, by presetting the same first public key and the second public key to the terminal and the legal equipment to be accessed that the terminal is allowed to access, and controlling them to use the same encryption algorithm, it can be ensured that During the process of accessing the wireless body area network built by the terminal, only the legal waiting device can calculate the same target key as the terminal, and then successfully pass the access security authentication of the wireless body area network. However, because the illegal device to be accessed does not have the same public key as the terminal, and does not have the same encryption algorithm as the terminal, it is impossible to calculate the same target key as the terminal, thus Unable to successfully pass the access security authentication of the wireless body area network, and unable to access the wireless body area network constructed by the terminal, so as to ensure the security of the access device to the wireless body area network to the greatest extent. Wherein, the first public key and the second public key include but are not limited to: passwords, passwords, etc. set by users. The calculation method used to obtain the target key preferably adopts a cryptographic hash function.

In the above technical solution, preferably, further comprising: a prompting unit, sending a prompting signal when the terminal allows or prohibits the device to be accessed from accessing the wireless body area network; and a control unit, when the terminal to be accessed After the access device accesses the wireless body area network, control the terminal to communicate with the device to be accessed through at least one of WIFI, Bluetooth, infrared, NFC, wired network, and wireless network.

In this technical solution, by sending prompt information to the user, the user is made aware of the current access status of the device to be accessed, so as to effectively monitor the access status of the device to be accessed. Of course, you can also choose a more convenient communication method for the terminal and the access device according to the current environment of the access device and the terminal, such as WIFI, Bluetooth, infrared, NFC, wired network, wireless network, etc.

In the above technical solution, preferably, the device to be accessed includes: at least one device among ordinary mobile devices, wearable devices, wearable sensors and medical devices.

In this technical solution, the devices to be accessed include but are not limited to ordinary mobile devices, wearable devices, wearable sensors and medical devices, and all devices that can communicate with terminals through wireless body area networks to improve user convenience are Can.

The third aspect of the present invention proposes a terminal, including the processing device for device access described in any one of the above technical solutions, therefore, the terminal has the device access device described in any one of the above technical solutions The same technical effect as the processing device, will not be repeated here.

Through the technical solution of the present invention, the universality of the access authentication method of the wireless body area network can be improved, and while the calculation amount of access authentication is reduced, the access device in the wireless body area network can be authenticated efficiently and safely.

Description of drawings

FIG. 1 shows a schematic flowchart of a method for processing device access according to an embodiment of the present invention;

Fig. 2 shows a schematic block diagram of a processing device for device access according to an embodiment of the present invention;

FIG. 3 shows a schematic structural diagram of a terminal according to an embodiment of the present invention;

FIG. 4 shows a schematic structural diagram of a WBAN according to an embodiment of the present invention;

Fig. 5 shows a schematic flowchart of a method for processing device access according to another embodiment of the present invention;

Fig. 6 shows a schematic flow diagram of master station configuration according to an embodiment of the present invention;

Fig. 7 shows a schematic flowchart of configuration of a device to be accessed according to an embodiment of the present invention;

Fig. 8 shows a schematic flowchart of a two-way authentication process between a master station and a device to be accessed according to an embodiment of the present invention.

detailed description

In order to have a clearer understanding of the above objects, features and advantages of the present invention, the present invention will be further described in detail below in conjunction with the accompanying drawings and specific embodiments. It should be noted that, in the case of no conflict, the embodiments of the present application and the features in the embodiments can be combined with each other.

In the following description, many specific details are set forth in order to fully understand the present invention. However, the present invention can also be implemented in other ways different from those described here. Therefore, the protection scope of the present invention is not limited by the specific details disclosed below. EXAMPLE LIMITATIONS.

Fig. 1 shows a schematic flowchart of a method for processing device access according to an embodiment of the present invention.

As shown in Figure 1, the processing method for device access according to an embodiment of the present invention includes: step 102, when the terminal receives a device access request from the device to be accessed, the terminal sends a request to the device to be accessed The first random code, so that after the device to be accessed receives the first random code, it calculates according to the first random code, the pre-stored second random code, and the pre-stored first public key The first target key, and send the first target key to the terminal; step 104, receive the second random code and the first target key from the device to be accessed, and according to the The first random code, the second random code and the pre-stored second public key are used to calculate the second target key; step 106, determine whether the second target key and the first target key are Similarly, when the judgment result is yes, the device to be accessed is allowed to access the wireless body area network built by the terminal, otherwise, the device to be accessed is prohibited from accessing the wireless body area network built by the terminal.

In this technical solution, by sending a first random code to the device to be accessed, the device to be accessed can be encrypted according to its own encryption algorithm according to the first random code, the pre-stored second random code and the first public key. Calculate a first target key, and send the first target key to the terminal, so that the terminal can calculate according to its own algorithm according to the first random code, the pre-stored second random code and the second public key Generate a second target password and compare it with the received first target key to judge whether the device to be accessed is a legitimate device that the terminal allows access according to the judgment result, if so (that is, the second target key is the same as the first target key), then the device to be accessed is allowed to access the wireless body area network built by the terminal, otherwise, it means that the device to be accessed is an illegal device, which will pose a threat to the security of the wireless body area network , the device to be accessed is prohibited from accessing the wireless body area network built by the terminal, so that the security authentication of the device to be accessed into the wireless body area network can be efficiently completed through a simple encryption algorithm with a low computational complexity, and can It effectively prevents the wireless body area network constructed by illegal access devices from accessing the terminal and causing damage to the wireless body area network.

In the above technical solution, preferably, after the device to be accessed is allowed to access the wireless body area network constructed by the terminal, according to the second random code and the second public key, the third target key; sending the third target key to the device to be accessed, so that the device to be accessed can calculate a fourth target according to the second random code and the first public key determine whether the third target key is the same as the fourth target key, and when the determination result is the same, send confirmation information for accessing the wireless body area network to the terminal; otherwise, No confirmation information for accessing the wireless body area network is sent.

In this technical solution, after the terminal calculates the third target key according to the second random code and the second public key, it can transmit the third target key to the device to be accessed, so that the device to be accessed can use the The second random code and the first public key, after calculating the fourth target key, compare the fourth target key with the received third target key, if the comparison result is that the third target key and the first The four target keys are the same, and the device to be connected will confirm that it has connected to the correct wireless body area network again, and will send a confirmation message to the terminal to complete the access. Of course, when the judgment result is that the third target key is the same as When the fourth target key is different, it means that the device to be accessed may have mistakenly connected to the wrong wireless body area network, that is, the wireless body area network currently constructed by the terminal is not the wireless body area network that the device to be accessed actually needs to access. Body area network, the device to be connected will not send confirmation information to the terminal, nor will it access the wireless body area network. Through the above process, the two-way authentication of the access authentication process of the device to be connected can be realized, improving The accuracy of the access process of the equipment to be accessed can not only prevent illegal equipment to be accessed from accessing the wireless body area network constructed by the current terminal, improve the access security of the wireless body area network, but also prevent the equipment to be accessed from being mistakenly connected wrong wireless body area network, thereby improving the accuracy of the access process of the device to be accessed. Of course, since the two-way authentication process does not need to limit the type of the device to be accessed, the two-way authentication method has high versatility. It is suitable for security authentication of various types of devices to be connected.

In the above technical solution, preferably, further comprising: when the device to be accessed is a device to be accessed that is permitted by the terminal, the first public key is the same as the second public key, And the algorithm used by the device to be accessed when calculating the first target key and the fourth target key is the same as the algorithm used by the terminal when calculating the second target key and the third target key The algorithm is the same.

In this technical solution, by presetting the same first public key and the second public key to the terminal and the legal equipment to be accessed that the terminal is allowed to access, and controlling them to use the same encryption algorithm, it can be ensured that During the process of accessing the wireless body area network built by the terminal, only the legal waiting device can calculate the same target key as the terminal, and then successfully pass the access security authentication of the wireless body area network. However, because the illegal device to be accessed does not have the same public key as the terminal, and does not have the same encryption algorithm as the terminal, it is impossible to calculate the same target key as the terminal, thus Unable to successfully pass the access security authentication of the wireless body area network, and unable to access the wireless body area network constructed by the terminal, so as to ensure the security of the access device to the wireless body area network to the greatest extent. Wherein, the first public key and the second public key include but are not limited to: passwords, passwords, etc. set by users. The calculation method used to obtain the target key preferably adopts a cryptographic hash function.

In the above technical solution, preferably, it further includes: when the terminal allows or prohibits the device to be accessed from accessing the wireless body area network, sending a prompt signal; and when the device to be accessed accesses the wireless body area network After the wireless body area network, the terminal communicates with the device to be accessed through at least one of WIFI, Bluetooth, infrared, NFC, wired network, and wireless network.

In this technical solution, by sending prompt information to the user, the user is made aware of the current access status of the device to be accessed, so as to effectively monitor the access status of the device to be accessed. Of course, you can also choose a more convenient communication method for the terminal and the access device according to the current environment of the access device and the terminal, such as WIFI, Bluetooth, infrared, NFC, wired network, wireless network, etc.

In the above technologies, preferably, in the processing method of device access in any of the above technical solutions, the device to be connected includes: at least one of ordinary mobile devices, wearable devices, wearable sensors and medical devices kind of equipment.

In this technical solution, the devices to be accessed include but are not limited to ordinary mobile devices, wearable devices, wearable sensors and medical devices, and all devices that can communicate with terminals through wireless body area networks to improve user convenience are Can.

Fig. 2 shows a schematic block diagram of an apparatus for processing device access according to an embodiment of the present invention.

As shown in FIG. 2, the device access processing device 200 according to an embodiment of the present invention includes: a sending unit 202, when the terminal receives a device access request from a device to be accessed, The device sends the first random code, so that after the device to be accessed receives the first random code, according to the first random code, the pre-stored second random code, and the pre-stored first public key, Calculate the first target key, and send the first target key to the terminal; the receiving unit 204 receives the second random code and the first target key from the device to be accessed The calculation unit 206 calculates the second target key according to the first random code, the second random code and the pre-stored second public key; the judging unit judges the relationship between the second target key and the Whether the first target key is the same; the processing unit 208, when the judgment result is yes, allows the device to be accessed to access the wireless body area network constructed by the terminal, otherwise, prohibits the device to be accessed to access The wireless body area network constructed by the terminal.

In this technical solution, by sending a first random code to the device to be accessed, the device to be accessed can be encrypted according to its own encryption algorithm according to the first random code, the pre-stored second random code and the first public key. Calculate a first target key, and send the first target key to the terminal, so that the terminal can calculate according to its own algorithm according to the first random code, the pre-stored second random code and the second public key Generate a second target password, and compare it with the received first target key to judge whether the device to be accessed is a legal device that the terminal allows access according to the judgment result, and if so, allow the device to be accessed Otherwise, it means that the device to be connected is an illegal device, which will pose a threat to the security of the wireless body area network, and the device to be connected is prohibited from accessing the wireless body area network built by the terminal. In this way, the security authentication of the device to be accessed into the wireless body area network can be efficiently completed through a simple encryption algorithm with a low amount of calculation, which can effectively prevent the wireless body area network constructed by the illegal device to be accessed from accessing the terminal. area network and cause damage to the wireless body area network.

In the above technical solution, preferably, the calculation unit 206 is further configured to: after allowing the device to be accessed to access the wireless body area network constructed by the terminal, according to the second random code and the first Two public keys are used to calculate a third target key; the sending unit is further configured to: send the third target key to the device to be accessed, so that the device to be accessed is configured according to the first Two random codes and the first public key, after calculating the fourth target key, determine whether the third target key is the same as the fourth target key, and when the result of the determination is the same, report to the The terminal sends confirmation information for accessing the wireless body area network, otherwise, does not send confirmation information for accessing the wireless body area network.

In this technical solution, after the terminal calculates the third target key according to the second random code and the second public key, it can transmit the third target key to the device to be accessed, so that the device to be accessed can use the The second random code and the first public key, after calculating the fourth target key, compare the fourth target key with the received third target key, if the comparison result is that the third target key and the first The four target keys are the same, and the device to be connected will confirm that it has connected to the correct wireless body area network again, and will send a confirmation message to the terminal to complete the access. Of course, when the judgment result is that the third target key is the same as When the fourth target key is different, it means that the device to be accessed may have mistakenly connected to the wrong wireless body area network, that is, the wireless body area network currently constructed by the terminal is not the wireless body area network that the device to be accessed actually needs to access. Body area network, the device to be connected will not send confirmation information to the terminal, nor will it access the wireless body area network. Through the above process, the two-way authentication of the access authentication process of the device to be connected can be realized, improving The accuracy of the access process of the equipment to be accessed can not only prevent illegal equipment to be accessed from accessing the wireless body area network constructed by the current terminal, improve the access security of the wireless body area network, but also prevent the equipment to be accessed from being mistakenly connected wrong wireless body area network, thereby improving the accuracy of the access process of the device to be accessed. Of course, since the two-way authentication process does not need to limit the type of the device to be accessed, the two-way authentication method has high versatility. It is suitable for security authentication of various types of devices to be connected.

In the above technical solution, preferably, further comprising: when the device to be accessed is a device to be accessed that is permitted by the terminal, the first public key is the same as the second public key, And the algorithm used by the device to be accessed when calculating the first target key and the fourth target key is the same as the algorithm used by the terminal when calculating the second target key and the third target key The algorithm is the same.

In this technical solution, by presetting the same first public key and the second public key to the terminal and the legal equipment to be accessed that the terminal is allowed to access, and controlling them to use the same encryption algorithm, it can be ensured that During the process of accessing the wireless body area network built by the terminal, only the legal waiting device can calculate the same target key as the terminal, and then successfully pass the access security authentication of the wireless body area network. However, because the illegal device to be accessed does not have the same public key as the terminal, and does not have the same encryption algorithm as the terminal, it is impossible to calculate the same target key as the terminal, thus Unable to successfully pass the access security authentication of the wireless body area network, and unable to access the wireless body area network constructed by the terminal, so as to ensure the security of the access device to the wireless body area network to the greatest extent. Wherein, the first public key and the second public key include but are not limited to: passwords, passwords, etc. set by users. The calculation method used to obtain the target key preferably adopts a cryptographic hash function.

In the above technical solution, preferably, further comprising: a prompt unit 210, sending a prompt signal when the terminal allows or prohibits the device to be accessed from accessing the wireless body area network; and a control unit 212, when the After the device to be accessed accesses the wireless body area network, control the terminal to communicate with the device to be accessed through at least one of WIFI, Bluetooth, infrared, NFC, wired network, and wireless network.

In this technical solution, by sending prompt information to the user, the user is made aware of the current access status of the device to be accessed, so as to effectively monitor the access status of the device to be accessed. Of course, you can also choose a more convenient communication method for the terminal and the access device according to the current environment of the access device and the terminal, such as WIFI, Bluetooth, infrared, NFC, wired network, wireless network, etc.

In the above technical solution, preferably, the device to be accessed includes: at least one device among ordinary mobile devices, wearable devices, wearable sensors and medical devices.

In this technical solution, the devices to be accessed include but are not limited to ordinary mobile devices, wearable devices, wearable sensors and medical devices, and all devices that can communicate with terminals through wireless body area networks to improve user convenience are Can.

Fig. 3 shows a schematic structural diagram of a terminal according to an embodiment of the present invention.

As shown in FIG. 3, a terminal 300 according to an embodiment of the present invention includes a device access processing device 200 according to any one of the above technical solutions, therefore, the terminal has the same The technical effect of the processing apparatus 200 for device access described above is the same, and will not be repeated here.

Fig. 4 shows a schematic structural diagram of a WBAN according to an embodiment of the present invention; Fig. 5 shows a schematic flowchart of a processing method for device access according to another embodiment of the present invention; Fig. 6 shows Fig. 7 shows a schematic flow diagram of configuration of a device to be accessed according to an embodiment of the present invention; Fig. 8 shows a schematic flow diagram of a master station and a device according to an embodiment of the present invention Schematic flow chart of the two-way authentication process between devices to be connected.

The technical solution of the present invention will be further described below with reference to FIG. 4 to FIG. 8 .

As shown in Fig. 4, according to the structure of the WBAN according to an embodiment of the present invention, the WBAN is a network attached to the human body, consisting of a set of small and movable sensors with communication functions and a body master station. The body master station is usually a smart phone, tablet computer and other devices with strong computing and storage capabilities. In addition, the device access processing scheme of this embodiment includes three processes: the general access process of the device to be accessed (as shown in Figure 5): the master station configuration process (as shown in Figure 6), the device to be accessed The configuration process (as shown in Figure 7), and the access authentication process of the device to be connected (as shown in Figure 8). The parameters and symbols used in this scheme include: h: cryptographic hash function; s: secret value or public key, including but not limited to values such as passwords and passwords set by users. The following is a detailed description of the above three processes:

The general access process of the device to be connected, including:

Step 502, configure the master station (usually smart phones, tablet computers and other mobile devices with strong computing and storage capabilities), that is, configure the master station with necessary authentication parameters;

Step 504, configuring the device to be accessed;

Step 506, performing security authentication on the device to be accessed.

The master station configuration process includes the following steps:

Step 602, the user inputs a secret value s for the master station.

Step 604, the master station executes other necessary WBAN parameters to complete the initialization operation.

The configuration of the device to be connected includes the following steps:

Step 702, when determining to access the WBAN of the current body master station, the user inputs the same secret value s as in the configuration process of the master station for the device to be connected.

Step 704, the device to be accessed executes other necessary WBAN parameters to complete initialization.

The access authentication process is as follows:

After completing the above configuration of the master station and the configuration of the device to be accessed, the access authentication is started. The access authentication process involves three message interactions, as shown in Figure 8: When the master station of the body receives the device sent by the device to be accessed When accessing the request, the body master station selects a random code a, and sends the random code a to the device to be accessed, and the device to be accessed uses the cryptographic Calculate the hash function to obtain the target key c1 (c1=h(a, b, s)), that is, the first target key, and send the first target key c1 and the random code b to the body master station, and the body master station According to its own random code a, the received random code b and its own secret value s, the target key c2 (c2=h(a, b, s)) is obtained through cryptographic hash function calculation, which is the second target key , the body master station judges whether the calculated second target key c2 is the same as the received first target key c1. When c2 is the same, the device to be accessed is allowed to access the WBAN to complete the authentication of the identity of the device to be accessed (in this embodiment, since the device to be accessed and the body subject have the same public key that is indispensable in the encryption calculation and the same encryption algorithm, therefore, the device to be accessed is a legal device allowed by the body subject, c1 and c2 are the same). After allowing the device to be accessed to access the wireless body area network constructed by the body master station, the body master station calculates and obtains the target key d1 (d1= h(b, s)) is the third target key, and the third target key d1 is sent to the device to be accessed, and the device to be accessed uses cryptographic hashing according to its own random code b and its own secret value s The function calculation obtains the target key d2 (d2=h(b, s)), that is, the fourth target key, and the device to be accessed judges whether the calculated fourth target key d2 is the same as the received third target key d1 , when it is judged that d1 and d2 are the same, the device to be connected will reconfirm that it has connected to the correct wireless body area network, and will send a confirmation message to the terminal to complete the access. Of course, when it is judged that d1 is not the same as d2 , indicating that the device to be connected may have mistakenly connected to the wrong wireless body area network, that is, the wireless body area network constructed by the current body master station is not the wireless body area network that the device to be connected really needs to access, then the The device to be connected will not send confirmation information to the terminal, nor will it access the wireless body area network to complete the authentication of the identity of the body master station, thereby realizing two-way authentication between the body master station and the device to be connected ( Of course, in this embodiment, since the device to be accessed has the same public key and the same encryption algorithm that are indispensable in encryption calculations as the body subject, the device to be accessed is a legal system that the body subject allows access to. device, d1 is the same as d2).

In the specific flow of the processing scheme for the above-mentioned device access, by presetting the same secret value s to the body master station and legal devices to be accessed by the body master station, and controlling them to use the same encryption algorithm cryptographic hash The Greek function h can ensure that only the legitimate device to be accessed can calculate the same target key as the terminal when the device to be accessed accesses the wireless body area network constructed by the terminal, and then pass through the wireless body area network smoothly. Network access security authentication, and the illegal access equipment does not have the same public key as the terminal and the same encryption algorithm as the body master station, so it is impossible to calculate The same target key as the main station of the body, so that it cannot pass the access security authentication of the wireless body area network smoothly, and cannot access the wireless body area network built by the main station of the body, so that the device to be accessed can be guaranteed to the greatest extent Security for accessing wireless body area networks.

The technical scheme of the present invention has been described in detail above in conjunction with the accompanying drawings. The present invention proposes a new processing scheme for device access, which is universal, low in calculation, and can efficiently control the access equipment in the wireless body area network. Perform security authentication.

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and changes. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention shall be included within the protection scope of the present invention.

Claims (11)

1. A processing method for device access, comprising: When the terminal receives a device access request from a device to be accessed, it sends a first random code to the device to be accessed, so that after the device to be accessed receives the first random code, according to the the first random code, the pre-stored second random code and the pre-stored first public key, calculate the first target key, and send the first target key to the terminal; receiving the second random code and the first target key from the device to be accessed, and calculating according to the first random code, the second random code and the pre-stored second public key the second target key; judging whether the second target key is the same as the first target key, and if the judging result is yes, allowing the device to be accessed to access the wireless body area network constructed by the terminal; otherwise, prohibiting the The device to be accessed accesses the wireless body area network built by the terminal. 2. The processing method for device access according to claim 1, characterized in that, After allowing the device to be accessed to access the wireless body area network constructed by the terminal, calculate a third target key according to the second random code and the second public key; After sending the third target key to the device to be accessed, so that the device to be accessed calculates a fourth target key according to the second random code and the first public key, Determine whether the third target key is the same as the fourth target key, and when the determination result is the same, send confirmation information for accessing the wireless body area network to the terminal, otherwise, do not send access Confirmation information of the wireless body area network. 3. The method for processing device access according to claim 1, further comprising: When the device to be accessed is a device to be accessed that is allowed by the terminal, the first public key and the second public key are the same, and the device to be accessed calculates the first The algorithm used for the target key and the fourth target key is the same as the algorithm used by the terminal for calculating the second target key and the third target key. 4. The method for processing device access according to claim 1, further comprising: Sending a prompt signal when the terminal allows or prohibits the device to be accessed from accessing the wireless body area network; and After the device to be accessed accesses the wireless body area network, the terminal communicates with the device to be accessed through at least one of WIFI, Bluetooth, infrared, NFC, wired network, and wireless network. 5. The method for processing device access according to any one of claims 1 to 4, characterized in that, The device to be accessed includes: at least one device among ordinary mobile devices, wearable devices, wearable sensors and medical devices. 6. A device for processing device access, comprising: A sending unit, when the terminal receives a device access request from a device to be accessed, send a first random code to the device to be accessed, so that after the device to be accessed receives the first random code, calculating a first target key according to the first random code, the pre-stored second random code, and the pre-stored first public key, and sending the first target key to the terminal; a receiving unit, configured to receive the second random code and the first target key from the device to be accessed; a calculation unit, calculating a second target key according to the first random code, the second random code and the pre-stored second public key; a judging unit, judging whether the second target key is the same as the first target key; The processing unit, when the judgment result is yes, allows the device to be accessed to access the wireless body area network constructed by the terminal, otherwise, prohibits the device to be accessed to access the wireless body area network constructed by the terminal. 7. The processing device for device access according to claim 6, characterized in that, The calculation unit is also used for: After allowing the device to be accessed to access the wireless body area network constructed by the terminal, calculate a third target key according to the second random code and the second public key; The sending unit is also used for: After sending the third target key to the device to be accessed, so that the device to be accessed calculates a fourth target key according to the second random code and the first public key, Determine whether the third target key is the same as the fourth target key, and when the determination result is the same, send confirmation information for accessing the wireless body area network to the terminal, otherwise, do not send access Confirmation information of the wireless body area network. 8. The apparatus for processing device access according to claim 6, further comprising: When the device to be accessed is a device to be accessed that is allowed by the terminal, the first public key and the second public key are the same, and the device to be accessed calculates the first The algorithm used for the target key and the fourth target key is the same as the algorithm used by the terminal for calculating the second target key and the third target key. 9. The apparatus for processing device access according to claim 6, further comprising: A prompting unit, when the terminal allows or prohibits the device to be accessed from accessing the wireless body area network, sending a prompting signal; and A control unit, after the device to be accessed accesses the wireless body area network, controls the terminal and the device to be accessed to communicate through at least one of WIFI, Bluetooth, infrared, NFC, wired network, and wireless network way of communication. 10. The device access processing device according to any one of claims 6 to 9, characterized in that, The device to be accessed includes: at least one device among ordinary mobile devices, wearable devices, wearable sensors and medical devices. 11. A terminal, characterized by comprising: a device for processing device access according to any one of claims 6 to 10.