WO2017016065A1 - Smart home system equipment authentication method and apparatus - Google Patents

Abstract

Disclosed is a smart home system equipment authentication method. The method comprises: acquiring first user fingerprint data, and storing the first user fingerprint data and a first authentication key and encryption algorithm; receiving a smart home control command input by a user and generating a control message; encrypting the first user fingerprint data and an IMEI of terminal equipment by use of the stored first authentication key and encryption algorithm; and sending authentication data to smart home equipment, so as to trigger the smart home equipment to realize terminal equipment authentication according to the authentication data, wherein the authentication data comprises the encrypted first user fingerprint data, the encrypted IMEI and the control message. In the present invention, by means of the equipment authentication method combining fingerprint matching and data encryption, the security of the smart home system can be greatly improved, and illegal users and terminals are prevented from intruding into the smart home system.

Description

Device authentication method and device for smart home system Technical field

The invention relates to the field of smart homes, in particular to a device authentication method and device for a smart home system.

Background technique

Smart home is a residential platform, using integrated wiring technology, network communication technology, security technology, automatic control technology, audio and video technology to integrate home life related facilities, and build an efficient management system for residential facilities and family schedules. Improve home safety, convenience, comfort, and artistry, and achieve an environmentally friendly and energy-saving living environment.

The smart home system may include a terminal device, an intelligent routing device, and a smart home device, and the smart home device includes a smart door lock, a smart refrigerator, a smart television, a smart air conditioner, or a smart washing machine, and the terminal device includes a smart terminal device such as a mobile phone, a computer, and a notebook. The terminal device and the smart home device are connected to the intelligent routing device, and the terminal device controls and manages the smart home device through the intelligent routing device.

In order to ensure the security of the smart home system, the terminal equipment needs to be authenticated to control the smart home equipment. In the existing smart home system security authentication technology, the terminal device is usually authenticated by setting a password or an access password, that is, the terminal inputs a password or a password, and matches the password or access password stored in the smart home device, and the technical solution The security is low, and once the password or password is cracked by the criminals, the consequences are unimaginable.

Therefore, designing a highly secure terminal device authentication mechanism is an urgent problem to be solved.

Summary of the invention

The embodiment of the invention discloses a device authentication method and device for a smart home system, which can greatly improve the security of the smart home system, thereby preventing illegal users and terminals from intruding into the smart home system.

A first aspect of the embodiments of the present invention provides a device authentication method for a smart home system, including:

Obtaining first user fingerprint data, setting a first authentication key and a first encryption algorithm, and storing the first user fingerprint data, the first authentication key, and an encryption algorithm;

Receiving a smart home control command input by the user, and generating, according to the smart home control command, a control message sent to the smart home device;

Encrypting the first user fingerprint data and an International Mobility Equipment Identity (IMEI) of the terminal device by using the stored first authentication key and an encryption algorithm;

Sending the authentication data to the smart home device to trigger the smart home device to implement terminal device authentication according to the authentication data, where the authentication data includes the encrypted first user fingerprint data, the encrypted IMEI, and the control Message.

With reference to the first aspect, in a first possible implementation manner of the embodiment of the present invention, the encrypting the user fingerprint data and the IMEI by using the stored first authentication key and an encryption algorithm, including:

Intercepting a specified part of the stored first user fingerprint data to obtain sampled first user fingerprint data;

The sampled first user fingerprint data and IMEI are encrypted using the stored first authentication key and encryption algorithm.

With reference to the first aspect or the first possible implementation manner of the first aspect, in a second possible implementation, after the storing the user fingerprint data, the authentication key, and the encryption algorithm, the method Also includes:

Setting the access period T of the terminal device;

When receiving the smart home control command input by the user, determining whether it is within the access period T, if within the access period T, generating a control message sent to the smart home device according to the smart home control command If it is not within the access period T of the terminal, the terminal device authentication is ended.

With reference to the second possible implementation of the first aspect, in a third possible implementation, after the step of setting the access period T, the method further includes:

The stored user fingerprint data is deleted after the access period T.

A second aspect of the embodiments of the present invention provides a device authentication method for a smart home system, which is used in a smart home device, and includes:

Obtaining second user fingerprint data of the terminal device, setting a second authentication key and a decryption algorithm of the terminal device, and storing the IMEI of the terminal device, the second user fingerprint data, the second authentication key, and a decryption algorithm ;

Receiving authentication data sent by the terminal device;

Decrypting the first user fingerprint data and the IMEI in the authentication data sent by the terminal device by using the second authentication key and the decryption algorithm of the stored terminal device;

Performing verification on the decrypted IMEI, and verifying the decrypted first user fingerprint data;

If the decrypted IMEI passes the check, and the decrypted first user fingerprint data passes the check, the terminal device is successfully authenticated, and the user's control command is executed according to the control message in the authentication data;

If the decrypted IMEI fails the verification, or the decrypted first user fingerprint data fails the verification, the terminal device fails to be authenticated, and the user's control is not performed according to the control message in the authentication data. command.

With reference to the second aspect, in a first possible implementation, the verifying the decrypted IMEI includes:

Comparing the decrypted IMEI with the IMEI of the stored terminal device, and if the decrypted IMEI matches the IMEI of the stored terminal device, determining that the decrypted IMEI passes the verification, if If the decrypted IMEI does not match the IMEI of the stored terminal device, it is determined that the decrypted IMEI fails the verification.

With reference to the second aspect, in a second possible implementation, the verifying the decrypted first user fingerprint data includes:

Intercepting a specified part of the second user fingerprint data of the stored terminal device to obtain Second user fingerprint data;

Comparing the decrypted first user fingerprint data with the sampled second user fingerprint data, and if the decrypted first user fingerprint data is consistent with the sampled second user fingerprint data, determining the location Determining, the decrypted first user fingerprint data is verified, and if the decrypted first user fingerprint data is inconsistent with the sampled second user fingerprint data, determining that the decrypted first user fingerprint data fails check.

In combination with the first aspect to any one of the second possible implementation manners of the first aspect, in a third possible implementation, the storing the IMEI of the terminal device, the second user fingerprint data After the step of the second authentication key and the decryption algorithm, the method further includes:

Setting an access period T of the terminal device;

After the decrypted IMEI passes the verification, the method further includes:

Determining whether the time when the authentication data sent by the terminal device is received is within the access period T of the terminal device; if not within the access period T of the terminal device, the terminal device fails to be authenticated;

And if the decrypted first user fingerprint data is verified within the access period T of the terminal device, if the decrypted user fingerprint data passes the verification, the terminal authentication succeeds, if the decryption After the first user fingerprint data fails the verification, the terminal device authentication fails.

With the third possible implementation of the second aspect, in a fourth possible implementation, after the setting the access period T of the terminal device, the method further includes:

The second user fingerprint data of the stored terminal device is deleted after the access period T of the terminal device.

A third aspect of the embodiments of the present invention provides a terminal device, including:

a receiving unit, configured to acquire first user fingerprint data;

a processing unit, configured to set a first authentication key and a first encryption algorithm, and store first user fingerprint data, the first authentication key, and an encryption algorithm acquired by the receiving unit;

The receiving unit is further configured to receive a smart home control command input by the user, and generate a control message sent to the smart home device according to the smart home control command;

The processing unit is further configured to use the stored first authentication key and an encryption algorithm to Encrypting the first user fingerprint data and the IMEI of the terminal device;

a sending unit, configured to send the authentication data to the smart home device, to trigger the smart home device to implement terminal device authentication according to the authentication data, where the authentication data includes the encrypted first user fingerprint data, and the encrypted IMEI and the control message.

With reference to the third aspect, in a first possible implementation, the processing unit is specifically configured to:

Intercepting a specified part of the stored first user fingerprint data to obtain sampled first user fingerprint data;

The sampled first user fingerprint data and IMEI are encrypted using the stored first authentication key and encryption algorithm.

With reference to the third aspect or the first possible implementation manner of the third aspect, in a second possible implementation manner, the processing unit is further configured to:

Setting the access period T of the terminal device;

When the receiving unit receives the smart home control command input by the user, determining whether it is within the access period T, if it is within the access period T, generating and transmitting to the smart home according to the smart home control command The control message of the device; if not within the access period T of the terminal, the terminal device authentication is ended.

In conjunction with the second possible implementation of the third aspect, in a third possible implementation, the processing unit is further configured to:

The stored user fingerprint data is deleted after the access period T.

A fourth aspect of the embodiments of the present invention provides a smart home device, including:

a receiving unit, configured to acquire second user fingerprint data of the terminal device;

a processing unit, configured to set a second authentication key and a decryption algorithm of the terminal device, and store an IMEI of the terminal device, second user fingerprint data acquired by the receiving unit, the second authentication key, and a decryption algorithm;

The receiving unit is further configured to receive authentication data sent by the terminal device;

The processing unit is further configured to:

Sending to the terminal device by using a second authentication key and a decryption algorithm of the stored terminal device Decrypting the first user fingerprint data and the IMEI in the sent authentication data;

Performing verification on the decrypted IMEI, and verifying the decrypted first user fingerprint data;

If the decrypted IMEI passes the check, and the decrypted first user fingerprint data passes the check, the terminal device is successfully authenticated, and the user's control command is executed according to the control message in the authentication data;

If the decrypted IMEI fails the verification, or the decrypted first user fingerprint data fails the verification, the terminal device fails to be authenticated, and the user's control is not performed according to the control message in the authentication data. command.

With reference to the fourth aspect, in a first possible implementation, the processing unit is specifically configured to:

Comparing the decrypted IMEI with the IMEI of the stored terminal device, and if the decrypted IMEI matches the IMEI of the stored terminal device, determining that the decrypted IMEI passes the verification, if If the decrypted IMEI does not match the IMEI of the stored terminal device, it is determined that the decrypted IMEI fails the verification.

With reference to the fourth aspect, in a second possible implementation manner, the processing unit is specifically configured to:

Obtaining a specified part of the second user fingerprint data of the stored terminal device to obtain sampled second user fingerprint data;

Comparing the decrypted first user fingerprint data with the sampled second user fingerprint data, and if the decrypted first user fingerprint data is consistent with the sampled second user fingerprint data, determining the location Determining, the decrypted first user fingerprint data is verified, and if the decrypted first user fingerprint data is inconsistent with the sampled second user fingerprint data, determining that the decrypted first user fingerprint data fails check.

With reference to any one of the fourth aspect to the second possible implementation of the fourth aspect, in a third possible implementation, the processing unit is further configured to:

Setting an access period T of the terminal device;

Determining whether the time when the authentication data sent by the terminal device is received is within the access period T of the terminal device; if not within the access period T of the terminal device, the terminal device fails to be authenticated;

And if the decrypted first user fingerprint data is verified within the access period T of the terminal device, if the decrypted user fingerprint data passes the verification, the terminal authentication succeeds, if the decryption After the first user fingerprint data fails the verification, the terminal device authentication fails.

In conjunction with the third possible implementation of the fourth aspect, in a fourth possible implementation, the processing unit is further configured to:

The second user fingerprint data of the stored terminal device is deleted after the access period T of the terminal device.

The technical solution provided by the embodiment of the present invention enables the terminal device and the smart home device to respectively acquire and store the first user fingerprint data and the second user fingerprint data of the terminal device, and the terminal uses the first smart home control command input by the user. The authentication key and the encryption algorithm encrypt the first user fingerprint data and the IMEI of the terminal device, and send the encrypted data and the smart home control message as authentication data to the smart home device, and the smart home device uses the authentication data. The second authentication key and the decryption algorithm perform decryption, and use the stored second fingerprint data and the IMEI to check the first user fingerprint data and the IMEI in the authentication data to implement terminal authentication. It can be seen that the technical solution proposed by the present invention adopts a combination of user fingerprint matching and data encryption to authenticate the terminal of the smart home system, thereby greatly improving the security of the smart home system, thereby preventing the illegal user and the terminal from intruding into the smart home system. Is a highly secure terminal device authentication mechanism.

Further, if the terminal device receives the smart terminal control command of the user within the access period T, the terminal device authentication is started, that is, the authentication data is sent to the smart home device, otherwise the terminal device authentication is cancelled, and if the smart home device is accessed, After receiving the authentication data of the terminal within the time limit T, the terminal device is authenticated, otherwise the terminal device authentication fails, which can effectively control the access rights of the terminal device, and further enhance the security of the smart home system.

DRAWINGS

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings to be used in the embodiments will be briefly described below. Obviously, the drawings in the following description are merely the present invention. Some of the embodiments can be obtained by those of ordinary skill in the art in view of the drawings without any inventive effort.

1 is a schematic structural diagram of a smart home system according to an embodiment of the present invention;

2 is a schematic flowchart of a device authentication method of a smart home system according to Embodiment 1 of the present invention;

3 is a schematic flowchart of a device authentication method of a smart home system according to Embodiment 2 of the present invention;

4 is a schematic flowchart of a device authentication method of a smart home system according to Embodiment 3 of the present invention;

FIG. 5 is a schematic flowchart of another device authentication method of a smart home system according to Embodiment 4 of the present invention; FIG.

FIG. 6 is a schematic structural diagram of a terminal device according to Embodiment 5 of the present invention; FIG.

7 is a schematic structural diagram of a smart home device according to Embodiment 6 of the present invention;

FIG. 8 is a schematic structural diagram of another terminal device according to Embodiment 7 of the present invention; FIG.

FIG. 9 is a schematic structural diagram of another smart home device according to Embodiment 8 of the present invention.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

Each embodiment will be described below separately.

The terms "first", "second", "third" and "fourth" and the like in the specification and claims of the present invention and the above drawings are used to distinguish different objects, and are not intended to describe a specific order. Furthermore, the terms "comprises" and "comprising" and "comprising" are intended to cover a non-exclusive inclusion. For example, a process, method, system, product, or device that comprises a series of steps or units is not limited to the listed steps or units, but optionally also includes steps or units not listed, or alternatively Other steps or units inherent to these processes, methods, products, or devices are also included.

First, referring to FIG. 1 , FIG. 1 is a schematic structural diagram of a smart home system. As shown in FIG. 1 , the smart home system includes a terminal device 11 , an intelligent routing device 12 , and a smart home device 13 , and the smart home device 13 can be a smart door lock. Intelligent appliances such as smart refrigerators, smart TVs, smart air conditioners or smart washing machines that can be managed by the terminal device 11, and the terminal devices include mobile phones, tablet computers, notebook computers, handheld computers, mobile internet devices (MIDs), etc. Equipment for home control functions. The terminal device 11, the smart home device 13 and the intelligent routing device 12 are connected through a wireless network, for example, via a wireless local area network (WiFi) or Bluetooth connection, and the terminal device 11 controls and manages the smart home device 13 through the intelligent routing device 12. In FIG. 1, the connection between the terminal device 11 and the smart home device 13 and the intelligent routing device 12 is a wireless connection, and in practical applications, it may also be a wired connection.

The embodiment of the invention provides a device authentication method and device for a smart home system, which is used for authenticating a terminal device by a smart home device in a smart home system.

The embodiment of the present invention provides a device authentication method for a smart home system, which is used in a terminal device of a smart home system, as shown in FIG. 2, a device authentication method for a smart home system according to Embodiment 1 of the present invention The steps can be included:

S101. Acquire first user fingerprint data, set a first authentication key and a first encryption algorithm, and store first user fingerprint data, a first authentication key, and an encryption algorithm.

The terminal device in the smart home system controls and manages the smart home device to be authenticated by the smart home device. The embodiment of the invention provides a method for combining fingerprint matching and data encryption to realize authentication of the terminal device, thereby greatly improving the smart home system. The security of device authentication.

First, the terminal device and the smart home device should obtain user fingerprint data for authenticating the terminal device, where the user enters the first user fingerprint data in the terminal device, and the second user fingerprint data is entered in the smart home device, in the smart The second user fingerprint data in the home device is bound to the IMEI of the terminal device. In the technical solution proposed by the present invention, the terminal device is authenticated and authenticated by using the fingerprint data of the user, and the user inputs the first user fingerprint data and the second user fingerprint data in the terminal device and the smart home device respectively, and the same user is at the terminal. The first user fingerprint data entered by the device and The second user fingerprint data entered by the smart home device should be consistent, so that the smart home device can authenticate the terminal device.

The terminal device can be divided into a host terminal device and a guest terminal device, and the guest terminal device is a terminal device that provides convenience and authorization for the guest who is a guest at home. The user fingerprint data of the host terminal device is the fingerprint data of the home owner, and the user fingerprint data of the guest terminal device may be the fingerprint data of the host or the visitor. If the owner simultaneously enters the fingerprint in the owner terminal device and the guest terminal device, the different fingers should be entered. To distinguish. The host terminal device generally has permanent access rights, and the access period is infinitely long. The guest terminal device is generally a temporary access right. After the access period is exceeded, the access rights of the guest terminal device are automatically canceled, and the different smart home devices may be the guest terminal device. Set different access periods.

In addition, a first authentication key and an encryption algorithm are set in the terminal device, and a second authentication key and a decryption algorithm are set in the smart home device for encrypting and decrypting the first user fingerprint data and the IMEI of the terminal. The first authentication key and the second authentication key may be a public key or a different private key of each terminal device, and the first authentication key, the second authentication key, the encryption algorithm, and the decryption algorithm may be fixed settings. It is also possible that the negotiation between the terminal device and the smart home device is variable, and the embodiment of the present invention is not limited in terms of how to set the authentication key and the encryption and decryption algorithm.

The first user fingerprint data, the first authentication key, and the encryption algorithm may be stored in a Security Boot module in the terminal device that can ensure data security.

S102. Receive a smart home control command input by the user, and generate a control message sent to the smart home device according to the smart home control command.

After receiving the smart home control command of the user, the terminal device generates a control message sent to the smart home device according to the control command, where the control message is used to instruct the smart home device to implement the related control operation according to the command of the user.

S103. Encrypt the first user fingerprint data and the IMEI of the terminal device by using the stored first authentication key and an encryption algorithm.

After the terminal device generates the control message sent to the smart home device, the first user fingerprint data and the IMEI of the terminal device are encrypted by using the first authentication key and the encryption algorithm stored in the secure boot module. Among them, IMEI is the world's only fixed identifier of the terminal equipment, which is set when the terminal equipment is shipped from the factory. Set.

In a specific implementation, a part of the first user fingerprint data is generally used for terminal device authentication, and the terminal device may intercept a specified part of the first user fingerprint data to obtain the sampled first user fingerprint data, which is stored in the secure boot module. The first authentication key and the encryption algorithm encrypt the sampled first user fingerprint data and simultaneously encrypt the IMEI.

S104: Send the authentication data to the smart home device to trigger the smart home device to implement the terminal device authentication according to the authentication data, where the authentication data includes the encrypted first user fingerprint data, the encrypted IMEI, and the control message.

After the terminal device encrypts the first user fingerprint data (or the sampled first user fingerprint data) and the IMEI, the first user fingerprint data, the IMEI, and the control message generated in step S102 are configured to be sent into the authentication data. For smart home devices, the authentication data triggers smart home devices to implement terminal device authentication. In a specific implementation, the communication message between the terminal device and the smart home device needs to be forwarded by the intelligent routing device, and the terminal device sends the authentication data to the intelligent routing device, and then the intelligent routing device forwards the authentication data to the smart home device.

It can be seen that the technical solution proposed by the present invention adopts a combination of user fingerprint and data encryption to authenticate the terminal of the smart home system, which can greatly improve the security of the smart home system, thereby preventing illegal users and terminals from intruding into the smart home system. It is a highly secure terminal device authentication mechanism.

A second embodiment of the present invention provides a device authentication method for a smart home system, which is used in a terminal device of a smart home system, as shown in FIG. 3, a device authentication method for a smart home system according to Embodiment 2 of the present invention The steps can be included:

S201. Acquire first user fingerprint data, set a first authentication key and a first encryption algorithm, and store first user fingerprint data, a first authentication key, and an encryption algorithm.

In the technical solution proposed by the present invention, the terminal device is authenticated and authenticated by using the fingerprint data of the user, and the user inputs the first user fingerprint data and the second user fingerprint data in the terminal device and the smart home device respectively, in the smart home device. The second user fingerprint data and the IMEI of the terminal device Bind. The first user fingerprint data entered by the same user in the terminal device and the second user fingerprint data entered in the smart home device should be consistent, so that the smart home device authenticates the terminal device.

The terminal device can be divided into a host terminal device and a guest terminal device, and the guest terminal device is a terminal device that provides convenience and authorization for the guest who is a guest at home. The user fingerprint data of the host terminal device is the fingerprint data of the home owner, and the user fingerprint data of the guest terminal device may be the fingerprint data of the host or the visitor. If the owner simultaneously enters the fingerprint in the owner terminal device and the guest terminal device, the different fingers should be entered. To distinguish.

S202. Set an access period T of the terminal device.

The master terminal device is generally a permanent access right, the access period is infinitely long, and the guest terminal device is generally a temporary access right. After the access period is exceeded, the access right of the guest terminal device is automatically canceled. Therefore, the access period T can be set in the terminal device, and the terminal device authentication is cancelled when the access period T is exceeded, and the different access period T can be set for the guest terminal device for different smart home devices.

S203. Receive a smart home control command input by the user, and determine whether it is within the access period T.

Determining whether the time of receiving the smart home control command input by the user is within the access period T. If the terminal device has the access right within the access period T, the authentication may be started; if not within the access period T, the terminal device has Without access, cancel the terminal device authentication.

S204. If the access period T is within the control period, generate a control message sent to the smart home device according to the smart home control command.

If the terminal device has the access right within the access period T, the control message sent to the smart home device is generated according to the control command of the user, and the control message is used to instruct the smart home device to implement the related control operation according to the user's command.

S205. Encrypt the first user fingerprint data and the IMEI of the terminal device by using the stored first authentication key and an encryption algorithm.

After the terminal device generates the control message sent to the smart home device, the first user fingerprint data and the IMEI of the terminal device are encrypted by using the first authentication key and the encryption algorithm stored in the secure boot module. In a specific implementation, a part of the first user fingerprint data is generally sent for the terminal device to recognize The terminal device may intercept the specified part of the first user fingerprint data, obtain the sampled first user fingerprint data, and use the first authentication key and the encryption algorithm stored in the secure startup module to sample the first user fingerprint data. Encrypt and encrypt the IMEI at the same time.

S206: Send the authentication data to the smart home device to trigger the smart home device to implement terminal device authentication according to the authentication data, where the authentication data includes the encrypted first user fingerprint data, the encrypted IMEI, and the control message.

After the terminal device encrypts the first user fingerprint data (or the sampled first user fingerprint data) and the IMEI, the first user fingerprint data, the IMEI, and the control message generated in step S204 are configured to be sent into the authentication data. For smart home devices, the authentication data triggers smart home devices to implement terminal device authentication. In a specific implementation, the communication message between the terminal device and the smart home device needs to be forwarded by the intelligent routing device, and the terminal device sends the authentication data to the intelligent routing device, and then the intelligent routing device forwards the authentication data to the smart home device.

Further, after the terminal device sets the access period T, the terminal device may delete the stored user fingerprint data after the T time, so as to save storage space of the terminal device and better control access rights of the terminal device.

It can be seen that the technical solution proposed by the present invention adopts a combination of user fingerprint matching and data encryption to authenticate the terminal of the smart home system, thereby greatly improving the security of the smart home system, thereby preventing the illegal user and the terminal from intruding into the smart home system. Is a highly secure terminal device authentication mechanism. Further, if the terminal device receives the smart terminal control command of the user within the access period T, the terminal device authentication is started, that is, the authentication data is sent to the smart home device, otherwise the terminal device authentication is cancelled, and the access authority of the terminal device can be effectively controlled, and further Enhance the security of smart home systems.

The third embodiment of the present invention provides a method for device authentication of a smart home system, which is used in a smart home device. As shown in FIG. 4, a method for device authentication of a smart home system according to Embodiment 3 of the present invention may include the following. step:

S301. Acquire second user fingerprint data of the terminal device, and set a second authentication password of the terminal device. The key and decryption algorithm, and store the IMEI of the terminal device, the second user fingerprint data, the second authentication key, and the decryption algorithm.

The terminal device in the smart home system controls and manages the smart home device to be authenticated by the smart home device. The embodiment of the invention provides a method for combining fingerprint matching and data encryption to implement authentication of the terminal device.

First, the terminal device and the smart home device should obtain user fingerprint data for authenticating the terminal device, where the user enters the first user fingerprint data in the terminal device, and the second user fingerprint data is entered in the smart home device, in the smart The second user fingerprint data in the home device is bound to the IMEI of the terminal device. In the technical solution proposed by the present invention, the terminal device is authenticated and authenticated by using the fingerprint data of the user, and the user inputs the first user fingerprint data and the second user fingerprint data in the terminal device and the smart home device respectively, and the same user is at the terminal. The first user fingerprint data entered by the device and the second user fingerprint data entered in the smart home device should be consistent, so that the smart home device authenticates the terminal device.

The terminal device can be divided into a host terminal device and a guest terminal device, and the guest terminal device is a terminal device that provides convenience and authorization for the guest who is a guest at home. The user fingerprint data of the host terminal device is the fingerprint data of the home owner, and the user fingerprint data of the guest terminal device may be the fingerprint data of the host or the visitor. If the owner simultaneously enters the fingerprint in the owner terminal device and the guest terminal device, the different fingers should be entered. To distinguish.

In addition, a second authentication key and a decryption algorithm are set in the smart home device for decrypting the first user fingerprint data sent by the terminal device and the IMEI of the terminal. The decryption algorithm set in the smart device and the encryption algorithm set in the terminal device are inverse algorithms for the same terminal device to ensure successful decryption. The second authentication key may be a public key or a different private key of each terminal device, and the second authentication key decryption algorithm may be fixedly set or may be negotiated between the terminal device and the smart home device. The embodiment of the present invention is not limited to how to set the authentication key and the encryption and decryption algorithm.

The second user fingerprint data, the second authentication key, and the decryption algorithm may be stored in a Security Boot module in the smart home device that can ensure data security.

S302. Receive authentication data sent by the terminal device, and use the second authentication of the stored terminal device. The key and decryption algorithm decrypts the first user fingerprint data and the IMEI in the authentication data sent by the terminal device.

In a specific implementation, the communication message between the terminal device and the smart home device needs to be forwarded by the intelligent routing device, and the terminal device sends the authentication data to the intelligent routing device, and the intelligent routing device forwards the authentication data to the smart home device, and the smart home device The authentication data sent by the terminal device is received from the intelligent routing device.

When the smart home device receives the authentication data sent by the terminal device, first decrypting the first user fingerprint data and the IMEI in the authentication data sent by the terminal device by using the stored second authentication key and the decryption algorithm.

S303. Perform verification on the decrypted IMEI, and verify the decrypted first user fingerprint data.

After the smart home device decrypts the first user fingerprint data and the IMEI in the authentication data, the decrypted IMEI is verified, and the decrypted first user fingerprint data is verified.

The smart home device first verifies the IMEI by comparing the decrypted IMEI with the stored IMEI of the terminal device. If the decrypted IMEI is consistent with the IMEI of the stored terminal device, it is determined that the decrypted IMEI passes the verification. If the decrypted IMEI does not match the IMEI of the stored terminal device, it is determined that the decrypted IMEI has not passed the verification.

The smart home device then verifies the first user fingerprint data according to the second user fingerprint data bound by the IMEI. In a specific implementation, part of the user fingerprint data is generally used as a basis for terminal device authentication, and the smart home device intercepts the IMEI binding. a specified part of the second user fingerprint data to obtain the sampled second user fingerprint data, and compare the decrypted first user fingerprint data with the sampled second user fingerprint data, if the decrypted first user fingerprint data Consistent with the sampled second user fingerprint data, determining that the decrypted first user fingerprint data passes the verification, and if the decrypted first user fingerprint data is inconsistent with the sampled second user fingerprint data, determining the first decrypted data User fingerprint data failed verification.

S304. Determine whether the decrypted IMEI and the decrypted first user fingerprint data pass the verification.

S305. If the decrypted IMEI and the decrypted first user fingerprint data pass the verification, the terminal device is successfully authenticated, and the user's control command is executed according to the control message in the authentication data.

If the decrypted IMEI and the decrypted first user fingerprint data pass the above verification, the smart home device determines that the terminal device authentication is successful, and executes the user's control command according to the control message in the authentication data.

S306. If the first user fingerprint data that has not passed the verification or decryption of the decrypted IMEI fails the verification, the terminal device fails to authenticate, and the control command of the user is not executed according to the control message in the authentication data.

If the decrypted IMEI fails the verification, or the decrypted first user fingerprint data fails the above verification, the terminal device authentication fails, and the user's control command is not executed according to the control message in the authentication data.

It can be seen that the technical solution proposed by the present invention adopts a combination of user fingerprint matching and data encryption to authenticate the terminal of the smart home system, thereby greatly improving the security of the smart home system, thereby preventing the illegal user and the terminal from intruding into the smart home system. Is a highly secure terminal device authentication mechanism.

A fourth embodiment of the present invention provides a method for device authentication of a smart home system, which is used in a smart home device. As shown in FIG. 5, a method for device authentication of a smart home system according to Embodiment 4 of the present invention may include the following. step:

S401. Acquire second user fingerprint data of the terminal device, set a second authentication key and a decryption algorithm of the terminal device, and store the IMEI of the terminal device, the second user fingerprint data, the second authentication key, and a decryption algorithm.

First, the terminal device and the smart home device should obtain user fingerprint data for authenticating the terminal device, where the user enters the first user fingerprint data in the terminal device, and the second user fingerprint data is entered in the smart home device, in the smart The second user fingerprint data in the home device is bound to the IMEI of the terminal device. The first user fingerprint data entered by the same user in the terminal device and the second user fingerprint data entered in the smart home device should be consistent, so that the smart home device authenticates the terminal device.

In addition, a second authentication key and a decryption algorithm are set in the smart home device for decrypting the first user fingerprint data sent by the terminal device and the IMEI of the terminal. Wherein, the decryption algorithm set in the smart device and the encryption algorithm set in the terminal device are inverse algorithms for the same terminal device, To ensure successful decryption. The second authentication key may be a public key or a different private key of each terminal device, and the second authentication key decryption algorithm may be fixedly set or may be negotiated between the terminal device and the smart home device. The embodiment of the present invention is not limited to how to set the authentication key and the encryption and decryption algorithm.

S402. Set an access period T of the terminal device.

The terminal device can be divided into a host terminal device and a guest terminal device, and the guest terminal device is a terminal device that provides convenience and authorization for the guest who is a guest at home. The master terminal device is generally a permanent access right, the access period is infinitely long, and the guest terminal device is generally a temporary access right. After the access period is exceeded, the access right of the guest terminal device is automatically canceled. Therefore, the smart home device can set the access period T for the terminal device. If the access period T is exceeded, the terminal device authentication is cancelled. For different smart home devices, different access periods T can be set for the guest terminal device, and the set access period is set. T is bound to the IMEI of the terminal.

S403. Receive authentication data sent by the terminal device, and decrypt the first user fingerprint data and the IMEI in the authentication data sent by the terminal device by using the second authentication key and the decryption algorithm of the stored terminal device.

In a specific implementation, the communication message between the terminal device and the smart home device needs to be forwarded by the intelligent routing device, and the terminal device sends the authentication data to the intelligent routing device, and the intelligent routing device forwards the authentication data to the smart home device, and the smart home device The authentication data sent by the terminal device is received from the intelligent routing device.

When the smart home device receives the authentication data sent by the terminal device, first decrypting the first user fingerprint data and the IMEI in the authentication data sent by the terminal device by using the stored second authentication key and the decryption algorithm.

S404. Perform verification on the decrypted IMEI.

The smart home device first verifies the IMEI by comparing the decrypted IMEI with the stored IMEI of the terminal device. If the decrypted IMEI is consistent with the IMEI of the stored terminal device, it is determined that the decrypted IMEI passes the verification. If the decrypted IMEI does not match the IMEI of the stored terminal device, it is determined that the decrypted IMEI has not passed the verification.

S405. Determine whether the decrypted IMEI passes the verification.

If the decrypted IMEI check fails, the smart home device determines that the terminal device authentication fails, and does not execute the user's control command according to the control message in the authentication data.

S406. If the decrypted IMEI passes the verification, determine whether the time for receiving the authentication data is within the access period T of the terminal device.

If the decrypted IMEI passes the verification, the smart terminal device acquires the access period T bound to the IMEI, and verifies whether the terminal device has the access right, that is, whether it is within the access period.

S407. If the terminal device is not within the access period T of the terminal device, the terminal device authentication fails, and the user's control command is not executed according to the control message in the authentication data.

If it is not within the access period T of the terminal device, it indicates that the terminal device has no access right, and the terminal device authentication is cancelled.

S408. Perform verification on the decrypted first user fingerprint data if the terminal device has the access period T.

If the terminal device has access rights within the access period T of the terminal device, the terminal device can be authenticated. The smart home device verifies the first user fingerprint data according to the second user fingerprint data bound by the IMEI. In a specific implementation, part of the user fingerprint data is generally used as a basis for terminal device authentication, and the smart home device intercepts the IMEI binding. Specifying a portion of the second user fingerprint data to obtain the sampled second user fingerprint data, and comparing the decrypted first user fingerprint data with the sampled second user fingerprint data, if the decrypted first user fingerprint data and If the sampled second user fingerprint data is consistent, it is determined that the decrypted first user fingerprint data passes the verification, and if the decrypted first user fingerprint data is different from the sampled second user fingerprint data, the decrypted first user is determined. The fingerprint data did not pass the check.

S409. Determine whether the decrypted first user fingerprint data passes the verification.

S410. If the decrypted user fingerprint data passes the verification, the terminal authentication is successful, and the user's control command is executed according to the control message in the authentication data.

If the decrypted user fingerprint data passes the verification, the smart home device determines that the terminal device authentication is successful, and executes the user's control command according to the control message in the authentication data.

If the decrypted user fingerprint data passes the verification, the smart home device determines that the terminal device authentication fails, and does not execute the user's control command according to the control message in the authentication data.

Further, in a specific implementation, after the smart home device sets the access period T of the terminal device, the stored user fingerprint data of the terminal device may be deleted after the access period T time of the terminal device, so as to save the storage space of the smart home device. And better control access to the terminal device.

It can be seen that the technical solution proposed by the present invention adopts a combination of user fingerprint matching and data encryption to authenticate the terminal of the smart home system, thereby greatly improving the security of the smart home system, thereby preventing the illegal user and the terminal from intruding into the smart home system. Is a highly secure terminal device authentication mechanism. Further, if the smart home device receives the authentication data of the terminal within the access period T, the terminal device is authenticated, otherwise the terminal device authentication fails, thereby effectively controlling the access rights of the terminal device, and further enhancing the security of the smart home system. .

The fifth embodiment of the present invention provides a terminal device for implementing the device authentication method of the smart home system proposed by the present invention. Referring to FIG. 6, the device a00 may include a receiving unit a10, a processing unit a20, and a transmitting unit.

The receiving unit a10 is configured to acquire first user fingerprint data.

The processing unit a20 is configured to set a first authentication key and a first encryption algorithm, and store first user fingerprint data, a first authentication key, and an encryption algorithm acquired by the receiving unit a10;

The receiving unit a10 is further configured to receive a smart home control command input by the user, and generate a control message sent to the smart home device according to the smart home control command;

The processing unit a20 is further configured to encrypt the first user fingerprint data and the IMEI of the terminal device by using the stored first authentication key and an encryption algorithm;

The sending unit a30 is configured to send the authentication data to the smart home device to trigger the smart home device to implement terminal device authentication according to the authentication data, where the authentication data includes the encrypted first user fingerprint data, the encrypted IMEI, and the control message.

The specific implementation method for the processing unit a20 to encrypt the first user fingerprint data and the IMEI of the terminal device by using the stored first authentication key and the encryption algorithm is to intercept the specified part of the stored first user fingerprint data to obtain the sampled First user fingerprint data; the sampled first user fingerprint data and IMEI are encrypted using the stored first authentication key and encryption algorithm.

The processing unit a20 is further configured to set an access period T of the terminal device; when the receiving unit receives the smart home control command input by the user, determine whether it is within the access period T, if the access period T Then, the control message sent to the smart home device is generated according to the smart home control command; if not within the access period T of the terminal, the terminal device authentication is ended.

The processing unit a20 is further configured to delete the stored user fingerprint data after the access period T.

It can be seen that the technical solution proposed by the present invention adopts a combination of user fingerprint and data encryption to authenticate the terminal of the smart home system, which can greatly improve the security of the smart home system, thereby preventing illegal users and terminals from intruding into the smart home system. It is a highly secure terminal device authentication mechanism.

The sixth embodiment of the present invention provides a smart home device for implementing the device authentication method of the smart home system proposed by the present invention. Referring to FIG. 7, the device b00 may include a receiving unit b10 and a processing unit b20.

a receiving unit b10, configured to acquire second user fingerprint data of the terminal device;

a processing unit b20, configured to set a second authentication key and a decryption algorithm of the terminal device, and store an IMEI of the terminal device, second user fingerprint data acquired by the receiving unit b10, a second authentication key, and a decryption algorithm;

The receiving unit b10 is further configured to receive the authentication data sent by the terminal device;

The processing unit b20 is further configured to:

Decrypting the first user fingerprint data and the IMEI in the authentication data sent by the terminal device by using the second authentication key and the decryption algorithm of the stored terminal device;

Performing verification on the decrypted IMEI, and verifying the decrypted first user fingerprint data;

If the decrypted IMEI passes the verification, and the decrypted first user fingerprint data passes the verification, the terminal device is successfully authenticated, and the user's control command is executed according to the control message in the authentication data;

If the decrypted IMEI fails the verification, or the decrypted first user fingerprint data fails the verification, the terminal device authentication fails, and the user's control command is not executed according to the control message in the authentication data.

The specific method for the processing unit b20 to verify the decrypted IMEI is to compare the decrypted IMEI with the stored IMEI of the terminal device, and if the decrypted IMEI matches the IMEI of the stored terminal device, determine the decrypted IMEI passes verification, if the decrypted IMEI and the end of storage If the IMEI of the end device is inconsistent, it is determined that the decrypted IMEI has not passed the check.

The specific method for verifying the decrypted first user fingerprint data by the processing unit b20 is: intercepting a specified part of the second user fingerprint data of the stored terminal device to obtain the sampled second user fingerprint data; Comparing the first user fingerprint data with the sampled second user fingerprint data, and if the decrypted first user fingerprint data is consistent with the sampled second user fingerprint data, determining that the decrypted first user fingerprint data passes the verification, if After the decrypted first user fingerprint data is inconsistent with the sampled second user fingerprint data, it is determined that the decrypted first user fingerprint data fails the verification.

The processing unit b20 is further configured to set an access period T of the terminal device;

Determining whether the time for receiving the authentication data sent by the terminal device is within the access period T of the terminal device, and if not within the access period T of the terminal device, the terminal device authentication fails;

If the access period T of the terminal device is within the time limit, the decrypted first user fingerprint data is verified. If the decrypted user fingerprint data passes the verification, the terminal authentication succeeds, and if the decrypted first user fingerprint data is not After verification, the terminal device authentication fails.

The processing unit b20 is further configured to delete the second user fingerprint data of the stored terminal device after the access period T of the terminal device.

It can be seen that the technical solution proposed by the present invention adopts a combination of user fingerprint matching and data encryption to authenticate the terminal of the smart home system, thereby greatly improving the security of the smart home system, thereby preventing the illegal user and the terminal from intruding into the smart home system. Is a highly secure terminal device authentication mechanism.

The seventh embodiment of the present invention provides another terminal device for implementing the device authentication method of the smart home system proposed by the present invention. Referring to Figure 8, the device c00 includes a processor c10, a memory c20, a bus system c30, a receiver c40, and a transmitter c50. The processor c10, the memory c20, the receiver c40 and the transmitter c50 are connected by a bus system c30 for storing instructions for executing the instructions stored in the memory c20 to control the receiver c40 to receive. Signal, and control transmitter c50 to send a signal to complete the steps in the above mobile payment method. The receiver c40 and the transmitter c50 may be the same or different physical entities. When they are the same physical entity, they can be collectively referred to as transceivers.

The method steps performed by the device c00 may at least include:

Obtaining first user fingerprint data, setting a first authentication key and a first encryption algorithm, and storing first user fingerprint data, a first authentication key, and an encryption algorithm;

Receiving a smart home control command input by the user, and generating a control message sent to the smart home device according to the smart home control command;

Encrypting the first user fingerprint data and the IMEI of the terminal device using the stored first authentication key and encryption algorithm;

The authentication data is sent to the smart home device to trigger the smart home device to implement terminal device authentication according to the authentication data, where the authentication data includes the encrypted first user fingerprint data, the encrypted IMEI, and the control message.

For the concepts, explanations, detailed descriptions and other steps related to the technical solutions provided by the embodiments of the present invention, refer to the descriptions of the foregoing methods or embodiments, and no further details are provided herein.

The eighth embodiment of the present invention further provides another smart home device for implementing the device authentication method of the smart home system proposed by the present invention. Referring to Figure 9, the device d00 includes a processor d10, a memory d20, a bus system d30, a receiver d40, and a transmitter d50. The processor d10, the memory d20, the receiver d40 and the transmitter d50 are connected by a bus system d30 for storing instructions, and the processor d10 is configured to execute the instructions stored in the memory d20 to control the receiver d40 to receive Signal, and control the transmitter d50 to send a signal to complete the steps in the above mobile payment method. The receiver d40 and the transmitter d50 may be the same or different physical entities. When they are the same physical entity, they can be collectively referred to as transceivers.

The method steps performed by the device d00 may at least include:

Obtaining second user fingerprint data of the terminal device, setting a second authentication key and a decryption algorithm of the terminal device, and storing the IMEI of the terminal device, the second user fingerprint data, the second authentication key, and a decryption algorithm;

Receiving authentication data sent by the terminal device; decrypting the first user fingerprint data and the IMEI in the authentication data sent by the terminal device by using the second authentication key and the decryption algorithm of the stored terminal device;

Performing verification on the decrypted IMEI, and verifying the decrypted first user fingerprint data;

If the decrypted IMEI passes the verification, and the decrypted first user fingerprint data passes the verification, the terminal device is successfully authenticated, and the user's control command is executed according to the control message in the authentication data;

If the decrypted IMEI fails the verification, or the decrypted first user fingerprint data fails the verification, the terminal device authentication fails, and the user's control command is not executed according to the control message in the authentication data.

For the concepts, explanations, detailed descriptions, and other steps related to the technical solutions provided by the embodiments of the present invention, refer to the descriptions of the foregoing methods or embodiments, and no further details are provided herein.

Those of ordinary skill in the art will appreciate that various aspects of the present invention, or possible implementations of various aspects, may be embodied as a system, method, or computer program product. Furthermore, aspects of the invention, or possible implementations of various aspects, may take the form of a computer program product, which is a computer readable program code stored in a computer readable medium.

The computer readable medium can be a computer readable data medium or a computer readable storage medium. The computer readable storage medium includes, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any suitable combination of the foregoing, such as random access memory (RAM), read only memory (ROM), Erase programmable read-only memory (EPROM or flash memory), optical fiber, portable read-only memory (CD-ROM).

The processor in the computer reads the computer readable program code stored in the computer readable medium such that the processor is capable of performing the various functional steps specified in each step of the flowchart, or a combination of steps; A device that functions as specified in each block, or combination of blocks.

The computer readable program code can execute entirely on the user's computer, partly on the user's computer, as a separate software package, partly on the user's local computer and partly on the remote computer, or entirely on the remote computer or server. carried out. It should also be noted that in some alternative implementations, the functions noted in the various steps in the flowcharts or in the blocks in the block diagrams may not occur in the order noted. For example, two steps, or two blocks, shown in succession may be executed substantially concurrently or the blocks may be executed in the reverse order.

In the several embodiments provided herein, it should be understood that the disclosed apparatus may be implemented in other ways. For example, the device embodiments described above are merely illustrative. The division of the functional units is only a logical function division. In the specific implementation, there may be other division manners, for example, multiple units may be combined into the same subsystem. Or implemented in a module, or split a unit into several unit implementations, or some implementation features can be ignored or not executed.

The device authentication method and device for a smart home system disclosed in the embodiment of the present invention are described in detail. The principle and implementation manner of the present invention are described in the following. The description of the above embodiment is only for helping. The method of the present invention and its core idea are understood; at the same time, for those skilled in the art, according to the idea of the present invention, there are changes in the specific embodiments and application scopes. It should be understood that the invention is limited.

Claims (18)

A device authentication method for a smart home system, which is used in a terminal device of a smart home system, and is characterized in that: Obtaining first user fingerprint data, setting a first authentication key and a first encryption algorithm, and storing the first user fingerprint data, the first authentication key, and an encryption algorithm; Receiving a smart home control command input by the user, and generating, according to the smart home control command, a control message sent to the smart home device; Encrypting the first user fingerprint data and the international mobile terminal identity IMEI of the terminal device by using the stored first authentication key and an encryption algorithm; Sending the authentication data to the smart home device to trigger the smart home device to implement terminal device authentication according to the authentication data, where the authentication data includes the encrypted first user fingerprint data, the encrypted IMEI, and the control Message. The method according to claim 1, wherein said encrypting said user fingerprint data and IMEI using said stored first authentication key and encryption algorithm comprises: Intercepting a specified part of the stored first user fingerprint data to obtain sampled first user fingerprint data; The sampled first user fingerprint data and IMEI are encrypted using the stored first authentication key and encryption algorithm. The method according to claim 1 or 2, wherein after the storing the user fingerprint data, the authentication key and the encryption algorithm, the method further comprises: Setting the access period T of the terminal device; When receiving the smart home control command input by the user, determining whether it is within the access period T, if within the access period T, generating a control message sent to the smart home device according to the smart home control command If it is not within the access period T of the terminal, the terminal device authentication is ended. The method according to claim 3, wherein after the step of setting the access period T, the method further comprises: The stored user fingerprint data is deleted after the access period T. A device authentication method for a smart home system, which is used in a smart home device, and includes: Obtaining second user fingerprint data of the terminal device, setting a second authentication key and a decryption algorithm of the terminal device, and storing the IMEI of the terminal device, the second user fingerprint data, the second authentication key, and a decryption algorithm ; Receiving authentication data sent by the terminal device; Decrypting the first user fingerprint data and the IMEI in the authentication data sent by the terminal device by using the second authentication key and the decryption algorithm of the stored terminal device; Performing verification on the decrypted IMEI, and verifying the decrypted first user fingerprint data; If the decrypted IMEI passes the check, and the decrypted first user fingerprint data passes the check, the terminal device is successfully authenticated, and the user's control command is executed according to the control message in the authentication data; If the decrypted IMEI fails the verification, or the decrypted first user fingerprint data fails the verification, the terminal device fails to be authenticated, and the user's control is not performed according to the control message in the authentication data. command. The method according to claim 5, wherein the verifying the decrypted IMEI comprises: Comparing the decrypted IMEI with the IMEI of the stored terminal device, and if the decrypted IMEI matches the IMEI of the stored terminal device, determining that the decrypted IMEI passes the verification, if If the decrypted IMEI does not match the IMEI of the stored terminal device, it is determined that the decrypted IMEI fails the verification. The method according to claim 5, wherein the verifying the decrypted first user fingerprint data comprises: Obtaining a specified part of the second user fingerprint data of the stored terminal device to obtain sampled second user fingerprint data; Comparing the decrypted first user fingerprint data with the sampled second user fingerprint data, and if the decrypted first user fingerprint data is consistent with the sampled second user fingerprint data, determining the location Determining, the decrypted first user fingerprint data is verified, and if the decrypted first user fingerprint data is inconsistent with the sampled second user fingerprint data, determining that the decrypted first user fingerprint data fails check. The method according to any one of claims 5 to 7, wherein after the step of storing the IMEI of the terminal device, the second user fingerprint data, the second authentication key, and a decryption algorithm The method further includes: Setting an access period T of the terminal device; After the decrypted IMEI passes the verification, the method further includes: Determining whether the time when the authentication data sent by the terminal device is received is within the access period T of the terminal device; if not within the access period T of the terminal device, the terminal device fails to be authenticated; And if the decrypted first user fingerprint data is verified within the access period T of the terminal device, if the decrypted user fingerprint data passes the verification, the terminal authentication succeeds, if the decryption After the first user fingerprint data fails the verification, the terminal device authentication fails. The method according to claim 8, wherein after the setting the access period T of the terminal device, the method further comprises: The second user fingerprint data of the stored terminal device is deleted after the access period T of the terminal device. A smart home terminal device, comprising: a receiving unit, configured to acquire first user fingerprint data; a processing unit, configured to set a first authentication key and a first encryption algorithm, and store first user fingerprint data, the first authentication key, and an encryption algorithm acquired by the receiving unit; The receiving unit is further configured to receive a smart home control command input by the user, and generate a control message sent to the smart home device according to the smart home control command; The processing unit is further configured to encrypt the first user fingerprint data and the IMEI of the terminal device by using the stored first authentication key and an encryption algorithm; a sending unit, configured to send the authentication data to the smart home device, to trigger the smart home device to implement terminal device authentication according to the authentication data, where the authentication data includes the encrypted first user fingerprint data, and the encrypted IMEI and the control message. The device according to claim 10, wherein the processing unit is specifically configured to: Intercepting a specified part of the stored first user fingerprint data to obtain sampled first user fingerprint data; The sampled first user fingerprint data and IMEI are encrypted using the stored first authentication key and encryption algorithm. The device according to claim 10 or 11, wherein the processing unit is further configured to: Setting the access period T of the terminal device; When the receiving unit receives the smart home control command input by the user, determining whether it is within the access period T, if it is within the access period T, generating and transmitting to the smart home according to the smart home control command The control message of the device; if not within the access period T of the terminal, the terminal device authentication is ended. The device according to claim 12, wherein the processing unit is further configured to: The stored user fingerprint data is deleted after the access period T. A smart home device, comprising: a receiving unit, configured to acquire second user fingerprint data of the terminal device; a processing unit, configured to set a second authentication key and a decryption algorithm of the terminal device, and store an IMEI of the terminal device, second user fingerprint data acquired by the receiving unit, the second authentication key, and a decryption algorithm; The receiving unit is further configured to receive authentication data sent by the terminal device; The processing unit is further configured to: Decrypting the first user fingerprint data and the IMEI in the authentication data sent by the terminal device by using the second authentication key and the decryption algorithm of the stored terminal device; Performing verification on the decrypted IMEI, and performing the decrypted first user fingerprint data Perform verification If the decrypted IMEI passes the check, and the decrypted first user fingerprint data passes the check, the terminal device is successfully authenticated, and the user's control command is executed according to the control message in the authentication data; If the decrypted IMEI fails the verification, or the decrypted first user fingerprint data fails the verification, the terminal device fails to be authenticated, and the user's control is not performed according to the control message in the authentication data. command. The device according to claim 14, wherein the processing unit is specifically configured to: Comparing the decrypted IMEI with the IMEI of the stored terminal device, and if the decrypted IMEI matches the IMEI of the stored terminal device, determining that the decrypted IMEI passes the verification, if If the decrypted IMEI does not match the IMEI of the stored terminal device, it is determined that the decrypted IMEI fails the verification. The device according to claim 14, wherein the processing unit is specifically configured to: Obtaining a specified part of the second user fingerprint data of the stored terminal device to obtain sampled second user fingerprint data; Comparing the decrypted first user fingerprint data with the sampled second user fingerprint data, and if the decrypted first user fingerprint data is consistent with the sampled second user fingerprint data, determining the location Determining, the decrypted first user fingerprint data is verified, and if the decrypted first user fingerprint data is inconsistent with the sampled second user fingerprint data, determining that the decrypted first user fingerprint data fails check. The device according to any one of claims 14 to 16, wherein the processing unit is further configured to: Setting an access period T of the terminal device; Determining whether the time when the authentication data sent by the terminal device is received is within the access period T of the terminal device; if not within the access period T of the terminal device, the terminal device fails to be authenticated; And if the decrypted first user fingerprint data is verified within the access period T of the terminal device, if the decrypted user fingerprint data passes the verification, the terminal authentication succeeds. If the decrypted first user fingerprint data fails verification, the terminal device authentication fails. The device according to claim 17, wherein the processing unit is further configured to: The second user fingerprint data of the stored terminal device is deleted after the access period T of the terminal device.

Images