Verification information update

A verification information update method includes: receiving a first request message for binding to a smart device from a terminal device, the first request message carrying a universally unique identifier (UUID) of the smart device; determining a binding relationship between the UUID and a user identifier of the terminal device, and generating a session random number corresponding to the binding relationship; and generating a new verification number and a new verification password of the smart device based on the session random number. The technical solution of the present disclosure implement dynamic update of verification information during a session, thus increasing the difficulty in monitoring the verification information during update.

TECHNICAL FIELD

The present disclosure relates to the field of network security technologies, and, more particularly, to verification information update methods and apparatuses.

BACKGROUND

In order to provide users with Internet of Things services such as smart home and mobile health care services, information from multiple smart devices needs to be collected, which may include information of home devices such as a thermometer, a hygrometer, a refrigerator, and a lamp in the home of a user, and information of personal health such as blood pressure, blood sugar, heart rate, height, and weight. In conventional techniques, a verification number (Key) and a verification password (Secret) are assigned for each smart device by a management platform, a signature value is calculated based on the verification number and the verification password, and the identity of the smart device is authenticated based on the signature value at the management platform. As the verification number and the verification password are both preset before the smart device leaves the factory, and identical verification numbers and identical verification passwords are assigned to a same type of smart devices, the smart device is easily masqueraded or attacked, thus providing low security.

SUMMARY

This Summary is provided to introduce a selection of concepts in a simplified form that are further described below in the Detailed Description. This Summary is not intended to identify all key features or essential features of the claimed subject matter, nor is it intended to be used alone as an aid in determining the scope of the claimed subject matter. The term “technique(s) or technical solution(s)” for instance, may refer to apparatus(s), system(s), method(s) and/or computer-readable instructions as permitted by the context above and throughout the present disclosure.

In view of the above, the present disclosure provides a novel technical solution which dynamically updates verification information of a smart device, to increase the difficulty in monitoring the verification information during update.

The present disclosure provides the following technical solutions:

According to a first aspect of the present disclosure, a verification information update method is provided, which is applied to a server and includes:

receiving a first request message for binding to a first device such as a smart device from a second device such as a terminal device, the first request message carrying a unique identifier such as a universally unique identifier (UUID) of the smart device;

determining a binding relationship between the UUID and a user identifier of the terminal device, and generating a session random number corresponding to the binding relationship; and

generating a new verification number and a new verification password of the smart device based on the session random number.

According to a second aspect of the present disclosure, a verification information update method is provided, which is applied to the second device such as the terminal device and includes:

sending a first request message for binding to the first device such as the smart device to a server, the first request message carrying a unique identifier such as UUID of the smart device;

receiving a session random number generated by the server based on the first request message; and

sending the session random number to the smart device, such that the smart device generates a new verification number and a new verification password of the smart device based on the session random number.

According to a third aspect of the present disclosure, a verification information update method is provided, which is applied to the first device such as the smart device and includes:

receiving a session random number from a server forwarded by the second device such as the terminal device; and

generating a new verification number and a new verification password of the smart device based on the session random number.

According to a fourth aspect of the present disclosure, a verification information update apparatus is provided, which is applied to a server and includes:

a first receiving module configured to receive a first request message for binding to the first device such as the smart device from the second device such as the terminal device, the first request message carrying a unique identifier such as UUID of the smart device;

a first determination module configured to determine a binding relationship between the UUID received by the first receiving module and a user identifier of the terminal device, and generate a session random number corresponding to the binding relationship; and

a first generation module configured to generate a new verification number and a new verification password of the smart device based on the session random number determined by the first determination module.

According to a fifth aspect of the present disclosure, a verification information update apparatus is provided, which is applied to the second device such as the terminal device and includes:

a third sending module configured to send a first request message for binding to the first device such as the smart device to a server, the first request message carrying a unique identifier such as UUID of the smart device;

a fourth receiving module configured to receive a session random number generated by the server based on the first request message sent by the third sending module; and

a fourth sending module configured to send the session random number received by the fourth receiving module to the smart device, such that the smart device generates a new verification number and a new verification password of the smart device based on the session random number.

According to a sixth aspect of the present disclosure, a verification information update apparatus is provided, which is applied to the first device such as the smart device and includes:

a seventh receiving module configured to receive a session random number from a server forwarded by the second device such as the terminal device; and

a third generation module configured to generate a new verification number and a new verification password of the smart device based on the session random number received by the seventh receiving module.

As shown from the above technical solutions, in the present disclosure, a terminal device is introduced, and a session random number is generated by using a binding relationship between a unique identifier UUID of the first device such as a smart device and a user identifier of the second device such as a terminal device, thus implementing dynamic update of verification information of the smart device (a verification number and a verification password of the smart device in the present disclosure), and increasing the difficulty in monitoring the verification information during update. Authentication and authorization of the smart device and the server are implemented based on the verification information in a session, thereby enhancing the security of a system, and effectively preventing the smart device from being masqueraded or attacked in the Internet of Things.

DETAILED DESCRIPTION

Example embodiments will be described in detail herein, and the example embodiments are shown in the accompanying drawings. In the following description involving the accompanying drawings, the same numerals in different accompanying drawings denote the same or similar elements, unless specified otherwise. Implementations described in the following example embodiments do not represent all implementations consistent with the present disclosure. In contrast, they are merely examples of apparatuses and methods consistent with some aspects of the present disclosure as described in detail in the appended claims.

Terms used in the present disclosure are merely used for describing specific embodiments, instead of limiting the present disclosure. Singular forms “a(n)”, “said”, and “the” used in the present disclosure and the appended claims also include plural forms, unless clearly specified in the context that other meanings are denoted. It should be further understood that, the term “and/or” used in this text refers to and includes any or all possible combinations of one or more associated items listed.

It should be understood that, although terms such as “first”, “second”, and “third” may be used to describe various kinds of information in the present disclosure, these kinds of information should not be limited to these terms. These terms are merely used to distinguish information of the same type from each other. For example, without departing from the scope of the present disclosure, the first information may also be referred to as second information, and similarly, the second information may also be referred to as first information. Depending on the context, the word “if” used here may be explained as “when . . . ”, “as . . . ”, or “in response to the determination”.

In the present disclosure, a terminal device is introduced, and a session random number is generated by using a binding relationship between a UUID of a smart device and a user identifier of the terminal device, thus implementing dynamic update of verification information of the smart device (a verification number and a verification password of the smart device in the present disclosure), and increasing the difficulty in monitoring the verification information during update. Therefore, authentication and authorization of the smart device and the server are implemented based on the verification information in a session, thus enhancing the security of a system, and effectively preventing the smart device from being masqueraded or attacked in the Internet of Things.

The following embodiments are provided for further describing the present disclosure.

FIG. 1Ais a schematic flowchart of a verification information update method according to a first example embodiment of the present invention, andFIG. 1Bis a scenario diagram according to a first example embodiment of the present invention. This embodiment is applied to a server, and as shown inFIG. 1A, includes the following steps:

Step102: A first request message for binding to a smart device from a terminal device is received, the first request message carrying a UUID of the smart device.

Step104: A binding relationship between the UUID and a user identifier of the terminal device is determined, and a session random number corresponding to the binding relationship is generated.

Step106: A new verification number and a new verification password of the smart device are generated based on the session random number.

In step102, in an example embodiment, the terminal device may be a device that may be installed with an application (app) or software, such as a smart phone and a tablet computer. The smart device may be a device having a communication function, such as a smart refrigerator, a smart TV, and a smart thermometer. In an example embodiment, the first request message may be generated by a user triggering a button on a user interface of an application installed in the terminal device, which carries the Universally Unique Identifier (UUID) of the smart device.

In step104, during registration of the smart device on the server, the UUID of the smart device may be generated and a binding relationship between the smart device and a user identifier may be recorded. As such, it may be determined that only a user identifier having a binding relationship has a permission to manage the smart device. In an example embodiment, a session random number (session_random) may be generated by a pseudo random algorithm.

In step106, in an example embodiment, the server may calculate a new verification number and a new verification password based on the session random number, for example,

As shown inFIG. 1B, for example, in an exemplary illustration, the first device such as the smart device is a smart refrigerator108, the second device such as the terminal device is a smart phone110, and the server112acquires device data from the smart refrigerator108and provides the smart refrigerator108with services such as query and control through an application on the smart phone110. When the server112needs to authenticate the smart refrigerator108, the server112generates an initial verification number and an initial verification password for the smart refrigerator108. When the smart refrigerator108needs to register on the server112, a new verification number and a new verification password are generated by using the above step102to step106. The smart refrigerator108and the server112authenticate the identity of the smart refrigerator108by using the new verification number and the new verification password in the subsequent authentication procedure, thus preventing the smart refrigerator108from being masqueraded or attacked by an illegal device.

As may be seen from the above description, in the example embodiment of the present invention, a terminal device is introduced, and a session random number is generated by using a binding relationship between a UUID of a smart device and a user identifier of the terminal device, thus implementing dynamic update of verification information of the smart device (a verification number and a verification password of the smart device in the present disclosure), and increasing the difficulty in monitoring the verification information during update. Therefore, authentication and authorization of the smart device and the server are implemented based on the verification information in a session, thus enhancing the security of a system, and effectively preventing the smart device from being masqueraded or attacked in the Internet of Things. Moreover, after acquiring the UUID of the smart device, a malicious user cannot bind the smart device as the UUID has been bound to a legal user identifier.

FIG. 2is a schematic flowchart of a verification information update method according to a second example embodiment of the present invention. This embodiment makes an exemplary illustration by taking generation of a session random number at a server side as an example. As shown inFIG. 2, the method includes the following steps:

Step202: A first request message for binding to a smart device from a terminal device is received, the first request message carrying a UUID of the smart device.

Step204: A binding relationship between the UUID and a user identifier of the terminal device is determined, and a session random number corresponding to the binding relationship is generated.

Step206: An initial verification number and an initial verification password of the smart device are determined.

Step208: A new verification number of the smart device is generated based on the initial verification number and the session random number.

Step210: A new verification password of the smart device is generated based on the initial verification password and the session random number.

Step212: The session random number is returned to the terminal device, such that the smart device generates a new verification number and a new verification password of the smart device based on the session random number after the terminal device forwards the session random number to the smart device.

Reference may be made to the above step102to step104for step202to step204, which are not described in detail here.

In step206, in an example embodiment, the server may pre-assign an initial verification number and an initial verification password (a Key/Secret pair) for each model of smart device before the smart device leaves the factory and is put into use. The assignment may be implemented for the smart device in a manner such as hardware writing, thus reducing operation and maintenance complexity of the server.

Reference may be made to related descriptions of the example embodiment shown inFIG. 1Afor the descriptions of generating a new verification number and a new verification password in step208and step210, which are not described in detail here.

In step212, in an example embodiment, the smart device may generate a new verification number and a new verification password at a smart device side based on the session random number by using the generation method identical to that in the above step208and step210. As such, it may be guaranteed that identical new verification numbers and identical new verification passwords are generated by the smart device and the server separately, thus facilitating the server to verify the smart device by using the new verification number and the new verification password.

In this embodiment, the terminal device forwards the session random number to the smart device, and it can guarantee that identical new verification numbers and identical new verification passwords are generated by the server and the smart device, thus facilitating the server to verify the smart device by using the new verification number and the new verification password. Transmission of the new verification number and the new verification password over the network is avoided, and therefore, the risk of leakage of the new verification number and the new verification password over the network is reduced.

FIG. 3is a schematic flowchart of a verification information update method according to a third example embodiment of the present invention. This embodiment makes an exemplary illustration by taking acquisition of a UUID from a server by a smart device as an example. As shown inFIG. 3, the method includes the following steps:

Step302: A second request message for registering on a server is received from a smart device, the second request message carrying identity information of the smart device and a first signature value of the smart device.

Step304: A second signature value of the smart device is calculated based on an initial verification number and an initial verification password corresponding to the identity information.

Step306: A UUID is generated for the smart device if the second signature value is identical to the first signature value.

Step308: The UUID is returned to the smart device.

In step302, in an example embodiment, the identity information of the smart device may include, but not limited to, a MAC of the smart device, a model of the smart device, a chip identity (ID) of the smart device, and an initial verification code of the smart device. In an example embodiment, the first signature value may be calculated by the smart device using a hash algorithm after the smart device ranks the initial verification number and the initial verification password of the smart device and forms a character string. Reference may be made to the example embodiment shown inFIG. 2for the related descriptions of the initial verification number and the initial verification password, which are not described in detail here.

In step304, in an example embodiment, the second signature value may also be calculated by the server using a hash algorithm after the server ranks the initial verification number and the initial verification password of the smart device and forms a character string.

In step306, the UUID of the smart device may be generated by using a hash algorithm. Those skilled in the art may understand that the method for generating the UUID in the present disclosure is not limited, as long as the UUID of the smart device may be guaranteed to be unique.

In step308, the UUID is returned to the smart device, such that the smart device may be recognized by using the UUID during subsequent interaction of the smart device and the terminal device, thus preventing the smart device from being masqueraded by an illegal device.

In this embodiment, when the second signature value is identical to the first signature value, a UUID having a unique identifier is generated for the smart device. As such, the server may bind the UUID to the user identifier of the terminal device and establish a binding relationship between the two. Therefore, after a malicious user acquires the UUID of the smart device, the smart device cannot be bound on the server, thus preventing the illegal user from controlling the smart device, preventing registration attack of a malicious device on the smart device, and improving the security of the system.

FIG. 4is a schematic flowchart of a verification information update method according to a fourth example embodiment of the present invention. This embodiment makes an exemplary illustration by taking clearing of a new verification number and a new verification password of a smart device at a server after the smart device is reset as an example.

Step402: A notification message for resetting from a smart device is received.

Step404: A new verification number and a new verification password of the smart device are cleared based on the notification message.

In step402, in an example embodiment, a notification message may be generated after the smart device is reset by a physical button.

In step404, in an example embodiment, related information of the smart device may all be cleared.

In this embodiment, the new verification number and the new verification password of the smart device are cleared after the smart device is reset, such that storage space of the server may be effectively released, and the new verification number and the new verification password may be prevented from being illegally used by other smart devices.

FIG. 5is a schematic flowchart of a verification information update method according to a fifth example embodiment of the present invention. This embodiment may be applied to a terminal device. The terminal device may be a device that may be installed with an application (app) or software, such as a smart phone and a tablet computer. As shown inFIG. 5, the method includes the following steps:

Step502: A first request message for binding to a smart device is sent to a server, the first request message carrying a UUID of the smart device.

Step504: A session random number generated by the server based on the first request message is received.

Step506: The session random number is sent to the smart device, such that the smart device generates a new verification number and a new verification password of the smart device based on the session random number.

Reference may be made to the example embodiment shown inFIG. 1Afor the related descriptions of the smart device and the first request message in step502, which are not described in detail here.

Reference may be made to the example embodiment shown inFIG. 1Afor the method of generating a session random number in step504, which is not described in detail here.

In step506, the session random number is sent to the smart device by using a point-to-point communication link established between a smart application and the smart device; or, the session random number is displayed on a user interface of the terminal device, such that a user input module of the smart device inputs to acquire the session random number input by the user.

As may be seen from the above descriptions, in the example embodiment of the present invention, the session random number that is generated by the server and corresponds to the binding relationship between the UUID and the user identifier of the terminal device is acquired through the terminal device, and the session random number is sent to the smart device, such that the smart device generates the new verification number and the new verification password of the smart device based on the session random number, thus implementing dynamic update of verification information (the verification number and the verification password of the smart device in the present disclosure) by using a third party, and increasing the difficulty in monitoring the verification information during update. Therefore, authentication and authorization of the smart device and the server are implemented based on the verification information in a session, thus enhancing the security of a system, and effectively preventing the smart device from being masqueraded or attacked in the Internet of Things.

FIG. 6is a schematic flowchart of a verification information update method according to a sixth example embodiment of the present invention. This embodiment makes an exemplary illustration by taking generation of a UUID of a smart deceive at a server side and resetting of the UUID of the smart device and a session random number as an example. As shown inFIG. 6, the method includes the following steps:

Step602: A third request message for establishing a connection with a smart device is sent to the smart device, the third request message carrying a user account.

Step604: A UUID of the smart device returned by the smart device based on the third request message is received after the smart device authenticates the user account.

Step606: A notification message for resetting from the smart device is received.

Step608: The UUID of the smart device and the session random number are cleared based on the notification message.

In step602, when needing to control the smart device, the user may log in to an application for controlling the smart device on the terminal device by using a user account and a user password, and send the third request message for establishing a connection with the smart device to the smart device by using the application.

In step604, the smart device may authenticate the user account to determine whether the user account is a legal user. The UUID of the smart device is received to acquire the UUID of the smart device if the user account is a legal user. The smart device refuses to return the UUID to the terminal device if the user account is an illegal user.

In step606and step608, related information of the smart device may all be cleared through a notification message generated after the smart device is reset by a physical button.

In this embodiment, the UUID of the smart device is acquired from the smart device, such that the UUID may be carried in the first request message, and then the server may generate a session random number that corresponds to the binding relationship between the UUID and the user identifier of the terminal device, and send the session random number to the smart device, thus preventing an illegal user from controlling the smart device, preventing registration attack of a malicious device on the smart device, and improving the security of the system. The new verification number and the new verification password of the smart device are cleared after the smart device is reset, such that storage space of the server may be effectively released, and the new verification number and the new verification password may be prevented from being illegally used by other smart devices.

FIG. 7is a schematic flowchart of a verification information update method according to a seventh example embodiment of the present invention. This embodiment may be applied to a smart device. The smart device may be a device having a communication function, such as a smart refrigerator, a smart TV, and a smart thermometer. As shown inFIG. 7, the method includes the following steps:

Step702: A session random number from a server forwarded by a terminal device is received.

Step704: A new verification number and a new verification password of the smart device are generated based on the session random number.

In an example embodiment, reference may be made to the example embodiment shown inFIG. 1Afor the method of generating a session random number and the generation of the new verification number and the new verification password of the smart device based on the session random number, which are not described in detail here.

As may be seen from the above descriptions, in the example embodiment of the present invention, the session random number from the server forwarded by the terminal device is received, and the new verification number and the new verification password of the smart device are generated based on the session random number, thus implementing dynamic update of verification information of the smart device (the verification number and the verification password of the smart device in the present disclosure), and increasing the difficulty in monitoring the verification information during update.

FIG. 8is a schematic flowchart of a verification information update method according to an eighth example embodiment of the present invention. This embodiment makes an exemplary illustration by taking generation of a session random number at a smart device side as an example. As shown inFIG. 8, the method includes the following steps:

Step802: An initial verification number and an initial verification password of a smart device are determined.

Step804: A new verification number of the smart device is generated based on the initial verification number and a session random number.

Step806: A new verification password of the smart device is generated based on the initial verification password and the session random number.

Step808: A notification message is generated after a button for resetting is triggered.

Step810: The notification message is sent to a terminal device and a server, such that the server clears the new verification number and the new verification password of the smart device based on the notification message, and the terminal device clears a UUID of the smart device and the session random number based on the notification message.

Reference may be made to related descriptions of the example embodiment shown inFIG. 2for the descriptions of step802to step806, which are not described in detail here. Reference may be made to related descriptions of the example embodiment shown inFIG. 4for the descriptions of step808to step810, which are not described in detail here.

In this embodiment, the terminal device forwards the session random number to the smart device, and it may be guaranteed that identical new verification numbers and identical new verification passwords are generated by the server and the smart device, thus facilitating the server to verify the smart device by using the new verification number and the new verification password. Transmission of the new verification number and the new verification password over the network is avoided, and therefore, the risk of leakage of the new verification number and the new verification password over the network is reduced. The new verification number and the new verification password of the smart device are cleared after the smart device is reset, such that storage space of the server may be effectively released, and the new verification number and the new verification password may be prevented from being illegally used by other smart devices.

FIG. 9is a signaling diagram of a verification information update method according to an example embodiment of the present invention. A server needs to pre-assign an initial verification number and an initial verification password (also referred to as a Key/Secret pair) for each model of smart device before the smart device leaves the factory and is put into use. The assignment may be implemented for each smart device in a manner of hardware writing. As shown inFIG. 9, the method includes the following steps:

Step902: The smart device sends a second request message to the server by using an initial Key/Secret pair to register the device. Here, the second request message may carry a MAC of the smart device, a model of the smart device, a chip identity (ID) of the smart device, and an initial verification code of the smart device. A first signature value may be calculated by using a hash algorithm (e.g., MD5) after the initial verification number and the initial verification password of the smart device are ranked lexicographically to form a character string.

Step904: After receiving the second request message, the server calculates a second signature value by using the initial Key/Secret pair, and if the second signature value is identical to the received first signature value, verification succeeds and a unique UUID is generated for the smart device.

Step906: The server returns the generated UUID to the smart device.

Step908: The smart device receives the UUID and then stores the UUID locally in the smart device.

Step910: The terminal device establishes a communication connection with the smart device. Here, an application of the terminal device may be logged in to by using a user account and a user password. A request for establishing a communication connection is sent to the smart device by using the application, to connect to the smart device and acquire the UUID of the smart device.

Step912: The smart device returns the UUID to the terminal device.

Step914: The terminal device sends a first request message for binding to the smart device to the server. Here, the first request message carries the UUID of the to-be-bound smart device.

Step916: The server records a binding relationship between a user and the smart device, and generates a session random number (session_random).

Step918: The server returns the session random number to the terminal device.

Step920: The terminal device forwards the session random number to the smart device. Here, the forwarding method may include, but not limited to: first, the terminal device directly sends the session random number to the smart device by establishing a point-to-point communication link with the smart device; second, when the smart device has a user input module, the terminal device displays the received session random number on a user interface of the application to the user, and the user inputs the session random number to the smart device by using the user input module on the smart device.

Step922: The smart device and the server separately calculate a new verification number and a new verification password based on the session random number by using the same calculation method.

Then, the identity of the smart device is authenticated by using the verification number and the new verification password, till the smart device is reset. After the reset, the smart device and the server will both clear the new verification numbers and the new verification passwords.

Therefore, registration attack of a malicious device may be prevented on the server. A malicious user cannot bind the smart device after acquiring the UUID of the smart device, thus improving the security of the system.

Corresponding to the above verification information update method, the present disclosure further provides a schematic structural diagram of a server according to an example embodiment of the present disclosure as shown inFIG. 10. Referring toFIG. 10, on a hardware level, a server1000includes one or more processor(s)1002, an internal bus1004, a network interface1006, a memory1008, and a non-volatile memory1010, and certainly may further include hardware required by other services. The processor(s)1002read a corresponding computer program or computer-readable instructions from the non-volatile memory1010to the memory1008and run the computer program, thus forming a verification information update apparatus1012on a logic level. Certainly, in addition to the software implementation manner, the present disclosure does not exclude other implementation manners, such as logic devices or a combination of software and hardware. In other words, the following processing procedure is performed by, but not limited to, various logic units, and may also be performed by hardware or logic devices. The memory1008and the non-volatile memory1010are examples of computer readable media.

Computer readable media, including both permanent and non-permanent, removable and non-removable media, may be stored by any method or technology for storage of information. The information can be computer readable instructions, data structures, modules of programs, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read only memory Such as ROM, EEPROM, flash memory or other memory technology, CD-ROM, DVD, or other optical storage, Magnetic cassettes, magnetic tape magnetic tape storage or other magnetic storage devices, or any other non-transitory medium, may be used to store information that may be accessed by a computing device. As defined herein, computer-readable media do not include non-transitory transitory media such as modulated data signals and carriers.

Corresponding to the above verification information update method, the present disclosure further provides a schematic structural diagram of a terminal device according to an example embodiment of the present disclosure as shown inFIG. 11. Referring toFIG. 11, on a hardware level, a terminal device1100includes one or more processor(s)1102, an internal bus1104, a network interface1106, a memory1108, and a non-volatile memory1110, and certainly may further include hardware required by other services. The processor(s)1102read a corresponding computer program or computer-readable instructions from the non-volatile memory1110to the memory1108and run the computer program, thus forming a verification information update apparatus1112on a logic level. Certainly, in addition to the software implementation manner, the present disclosure does not exclude other implementation manners, such as logic devices or a combination of software and hardware. In other words, the following processing procedure is performed by, but not limited to, various logic units, and may also be performed by hardware or logic devices. The memory1108and the non-volatile memory1110are examples of computer readable media.

Corresponding to the above verification information update method, the present disclosure further provides a schematic structural diagram of a smart device according to an example embodiment of the present disclosure as shown inFIG. 12. Referring toFIG. 12, on a hardware level, a smart device1200includes one or more processor(s)1202, an internal bus1204, a network interface1206, a memory1208, and a non-volatile memory1210, and certainly may further include hardware required by other services. The processor(s)1202read a corresponding computer program or computer-readable instructions from the non-volatile memory1210to the memory1208and run the computer program, thus forming a verification information update apparatus1212on a logic level. Certainly, in addition to the software implementation manner, the present disclosure does not exclude other implementation manners, such as logic devices or a combination of software and hardware. In other words, the following processing procedure is performed by, but not limited to, various logic units, and may also be performed by hardware or logic devices. The memory1208and the non-volatile memory1210are examples of computer readable media.

FIG. 13is a schematic structural diagram of a verification information update apparatus according to a first example embodiment of the present invention, which may be applied to a server. As shown inFIG. 13, a verification information update apparatus1300may include: a first receiving module1302, a first determination module1304, and a first generation module1306.

The first receiving module1302is configured to receive a first request message for binding to a smart device from a terminal device, the first request message carrying a UUID of the smart device.

The first determination module1304is configured to determine a binding relationship between the UUID received by the first receiving module1302and a user identifier of the terminal device, and generate a session random number corresponding to the binding relationship.

The first generation module1306is configured to generate a new verification number and a new verification password of the smart device based on the session random number determined by the first determination module1304.

FIG. 14is a schematic structural diagram of a verification information update apparatus according to a second example embodiment of the present invention. As shown inFIG. 14, on the basis of the example embodiment shown inFIG. 13, a verification information update apparatus1400may further include:

a first sending module1402configured to return the session random number determined by the first determination module1304to the terminal device, such that the smart device generates a new verification number and a new verification password of the smart device based on the session random number after the terminal device forwards the session random number to the smart device.

In an example embodiment, the first generation module1306may include:

a first determination unit1404configured to determine an initial verification number and an initial verification password of the smart device;

a first generation unit1406configured to generate the new verification number of the smart device based on the initial verification number determined by the first determination unit1402and the session random number; and

a second generation unit1408configured to generate the new verification password of the smart device based on the initial verification password determined by the first determination unit1402and the session random number.

In an example embodiment, the verification information update apparatus1400further includes:

a second receiving module1410configured to receive a second request message for registering on the server from the smart device, the second request message carrying identity information of the smart device and a first signature value of the smart device;

a first calculation module1412configured to calculate a second signature value of the smart device based on an initial verification number and an initial verification password corresponding to the identity information carried in the second request message received by the second receiving module1410;

a second generation module1414configured to generate the UUID for the smart device if the second signature value calculated by the first calculation module1412is identical to the first signature value; and

a second sending module (not shown inFIG. 14) configured to return the UUID generated by the second generation module to the smart device.

In an example embodiment, the first signature value may be calculated by the smart device using a hash algorithm after the smart device ranks the initial verification number and the initial verification password of the smart device and forms a character string.

In an example embodiment, the verification information update apparatus1400may further include:

a third receiving module1416configured to receive a notification message for resetting from the smart device; and

a first clearing module1418configured to clear the new verification number and the new verification password of the smart device based on the notification message received by the third receiving module1416.

FIG. 15is a schematic structural diagram of a verification information update apparatus according to a third example embodiment of the present invention, which may be applied to a terminal device. As shown inFIG. 15, a verification information update apparatus1500may include: a third sending module1502, a fourth receiving module1504, and a fourth sending module1506.

The third sending module1502is configured to send a first request message for binding to a smart device to a server, the first request message carrying a UUID of the smart device.

The fourth receiving module1504is configured to receive a session random number generated by the server based on the first request message sent by the third sending module1502.

The fourth sending module1506is configured to send the session random number received by the fourth receiving module1504to the smart device, such that the smart device generates a new verification number and a new verification password of the smart device based on the session random number.

FIG. 16is a schematic structural diagram of a verification information update apparatus according to a fourth example embodiment of the present invention. As shown inFIG. 16, on the basis of the example embodiment shown inFIG. 15, a verification information update apparatus1600further includes:

a fifth sending module1602configured to send a third request message for establishing a connection with the smart device to the smart device, the third request message carrying a user account; and

a fifth receiving module1604configured to receive the UUID of the smart device returned by the smart device based on the third request message after the smart device authenticates the user account carried in the third request message sent by the fifth sending module1602.

In an example embodiment, the fourth sending module1506may include:

a sending unit1606configured to send the session random number to the smart device by using a point-to-point communication link established between a smart application and the smart device; or

a display unit1608configured to display the session random number on a user interface of the terminal device, such that a user input module of the smart device inputs to acquire the session random number input by the user.

In an example embodiment, the verification information update apparatus1600may further include:

a sixth receiving module1610configured to receive a notification message for resetting from the smart device; and

a second clearing module1612configured to clear the UUID of the smart device and the session random number based on the notification message received by the sixth receiving module1610.

FIG. 17is a schematic structural diagram of a verification information update apparatus according to a fifth example embodiment of the present invention, which may be applied to a smart device. As shown inFIG. 17, the verification information update apparatus may include: a seventh receiving module1702and a third generation module1704.

The seventh receiving module1702is configured to receive a session random number from a server forwarded by a terminal device.

The third generation module1704is configured to generate a new verification number and a new verification password of the smart device based on the session random number received by the seventh receiving module1702.

FIG. 18is a schematic structural diagram of a verification information update apparatus according to a sixth example embodiment of the present invention. As shown inFIG. 18, on the basis of the example embodiment shown inFIG. 17, a verification information update apparatus1800may further include:

a sixth sending module1802configured to send to the server a second request message for registering on the server, the second request message carrying identity information of the smart device and a first signature value of the smart device; and

an eighth receiving module1804configured to receive a UUID of the smart device generated by the server based on the second request message.

In an example embodiment, the third generation module1704may include:

a second determination unit1806configured to determine an initial verification number and an initial verification password of the smart device;

a third generation unit1808configured to generate the new verification number of the smart device based on the initial verification number determined by the second determination unit1806and the session random number; and

a fourth generation unit1810configured to generate the new verification password of the smart device based on the initial verification password determined by the second determination unit1808and the session random number.

In an example embodiment, the verification information update apparatus1800may further include:

a fourth generation module1812configured to generate a notification message after it is detected that a button for resetting is triggered;

a seventh sending module1814configured to send the notification message generated by the fourth generation module1812to the terminal device and the server, such that the server clears the new verification number and the new verification password of the smart device based on the notification message, and the terminal device clears a UUID of the smart device and the session random number based on the notification message.

As may be seen from the above embodiments, in the present disclosure, a terminal device is introduced, and dynamic update and management of a verification number and a verification password of a smart device is implemented by using an interaction mechanism between the smart device and a server, thus guaranteeing that the server may authenticate and authorize the smart device subsequently by using the updated verification number and verification password (the new verification number and the new verification password in the present disclosure), and increasing the difficulty in monitoring the verification number and the verification password during update. Meanwhile, the smart device may be effectively prevented from being masqueraded or attacked by other smart devices in the Internet of Things, thus further improving the security of the system.

Those skilled in the art may easily obtain other implementation solutions of the present disclosure after considering the specification and practicing the invention disclosed here. The present disclosure is intended to cover any variations, usages, or adaptive changes of the present disclosure, and these variations, usages or adaptive changes follow general principles of the present disclosure and include common general knowledge or conventional technical measures in this technical field that are not disclosed in the present disclosure. The specification and embodiments are considered as merely exemplary, and real scope and spirit of the present disclosure are defined by the following claims.

It should be further noted that, the term “include”, “comprise” or other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements not only includes the elements, but also includes other elements not clearly listed, or further includes inherent elements of the process, method, commodity or device. Without more limitations, an element defined by “including a/an . . . ” does not exclude that the process, method, commodity or device including the element further has other identical elements.

The above descriptions are merely preferred embodiments of the present disclosure, and are not intended to limit the present disclosure. Any modification, equivalent replacement and improvement made within the spirit and principle of the present disclosure shall fall within the protection scope of the present disclosure.

The present disclosure may further be understood with clauses as follows.

Clause 1. A verification information update method, applied to a server, comprising:

receiving a first request message for binding to a smart device from a terminal device, the first request message carrying a universally unique identifier (UUID) of the smart device;

determining a binding relationship between the UUID and a user identifier of the terminal device, and generating a session random number corresponding to the binding relationship; and

generating a new verification number and a new verification password of the smart device based on the session random number.

Clause 2. The method of clause 1, further comprising:

returning the session random number to the terminal device, such that the smart device generates a new verification number and a new verification password of the smart device based on the session random number after the terminal device forwards the session random number to the smart device.

Clause 3. The method of clause 1, wherein the generating the new verification number and the new verification password of the smart device based on the session random number comprises:

determining an initial verification number and an initial verification password of the smart device;

generating the new verification number of the smart device based on the initial verification number and the session random number; and

generating the new verification password of the smart device based on the initial verification password and the session random number.

Clause 4. The method of clause 1, further comprising:

receiving a second request message for registering on the server from the smart device, the second request message carrying identity information of the smart device and a first signature value of the smart device;

calculating a second signature value of the smart device based on an initial verification number and an initial verification password corresponding to the identity information;

generating the UUID for the smart device if the second signature value is identical to the first signature value; and

returning the UUID to the smart device.

Clause 5. The method of clause 4, wherein the first signature value is calculated by the smart device applies a hash algorithm to a character string after the smart device ranks the initial verification number and the initial verification password of the smart device and forms the character string.

Clause 6. The method of any of clauses 1 to 5, further comprising:

receiving a notification message for resetting from the smart device; and

clearing the new verification number and the new verification password of the smart device based on the notification message.

Clause 7. A verification information update method, applied to a terminal device, comprising:

sending a first request message for binding to a smart device to a server, the first request message carrying a universally unique identifier (UUID) of the smart device;

receiving a session random number generated by the server based on the first request message; and

sending the session random number to the smart device, such that the smart device generates a new verification number and a new verification password of the smart device based on the session random number.

Clause 8. The method of clause 7, further comprising:

sending a third request message for establishing a connection with the smart device to the smart device, the third request message carrying a user account; and

receiving the UUID of the smart device returned by the smart device based on the third request message after the smart device authenticates the user account.

Clause 9. The method of clause 7, wherein the sending the session random number to the smart device comprises:

sending the session random number to the smart device by using a point-to-point communication link established between a smart application and the smart device; or

displaying the session random number on a user interface of the terminal device, such that a user input module of the smart device acquires the session random number input by the user.

Clause 10. The method of any of clauses 7 to 9, further comprising:

receiving a notification message for resetting from the smart device; and

clearing the UUID of the smart device and the session random number based on the notification message.

Clause 11. A verification information update method, applied to a smart device, comprising:

receiving a session random number from a server forwarded by a terminal device; and

generating a new verification number and a new verification password of the smart device based on the session random number.

Clause 12. The method of clause 11, further comprising:

sending to the server a second request message for registering on the server, the second request message carrying identity information of the smart device and a first signature value of the smart device; and

receiving a universally unique identifier (UUID) of the smart device generated by the server based on the second request message.

Clause 13. The method of clause 11, wherein the generating the new verification number and the new verification password of the smart device based on the session random number comprises:

determining an initial verification number and an initial verification password of the smart device;

generating the new verification number of the smart device based on the initial verification number and the session random number; and

generating the new verification password of the smart device based on the initial verification password and the session random number.

Clause 14. The method of any of clauses 11 to 13, further comprising:

generating a notification message after detecting that a button for resetting is triggered; and

sending the notification message to the terminal device and the server, such that the server clears the new verification number and the new verification password of the smart device based on the notification message, and the terminal device clears the UUID of the smart device and the session random number based on the notification message.

Clause 15. A verification information update apparatus, applied to a server, comprising:

a first receiving module configured to receive a first request message for binding to a smart device from a terminal device, the first request message carrying a universally unique identifier (UUID) of the smart device;

a first determination module configured to determine a binding relationship between the UUID received by the first receiving module and a user identifier of the terminal device, and generate a session random number corresponding to the binding relationship; and

a first generation module configured to generate a new verification number and a new verification password of the smart device based on the session random number determined by the first determination module.

Clause 16. The apparatus of clause 15, further comprising:

a first sending module configured to return the session random number determined by the first determination module to the terminal device, such that the smart device generates a new verification number and a new verification password of the smart device based on the session random number after the terminal device forwards the session random number to the smart device.

Clause 17. The apparatus of clause 15, wherein the first generation module comprises:

a first determination unit configured to determine an initial verification number and an initial verification password of the smart device;

a first generation unit configured to generate the new verification number of the smart device based on the initial verification number determined by the first determination unit and the session random number; and

a second generation unit configured to generate the new verification password of the smart device based on the initial verification password determined by the first determination unit and the session random number.

Clause 18. The apparatus of clause 15, further comprising:

a second receiving module configured to receive a second request message for registering on the server from the smart device, the second request message carrying identity information of the smart device and a first signature value of the smart device;

a first calculation module configured to calculate a second signature value of the smart device based on an initial verification number and an initial verification password corresponding to the identity information carried in the second request message received by the second receiving module;

a second generation module configured to generate the UUID for the smart device if the second signature value calculated by the first calculation module is identical to the first signature value; and

a second sending module configured to return the UUID generated by the second generation module to the smart device.

Clause 19. The apparatus of clause 18, wherein the first signature value is calculated by the smart device using a hash algorithm after the smart device ranks the initial verification number and the initial verification password of the smart device and forms a character string.

Clause 20. The apparatus of any of clauses 15 to 19, further comprising:

a third receiving module configured to receive a notification message for resetting from the smart device; and

a first clearing module configured to clear the new verification number and the new verification password of the smart device based on the notification message received by the third receiving module.

Clause 21. A verification information update apparatus, applied to a terminal device, comprising:

a third sending module configured to send a first request message for binding to a smart device to a server, the first request message carrying a universally unique identifier (UUID) of the smart device;

a fourth receiving module configured to receive a session random number generated by the server based on the first request message sent by the third sending module; and

a fourth sending module configured to send the session random number received by the fourth receiving module to the smart device, such that the smart device generates a new verification number and a new verification password of the smart device based on the session random number.

Clause 22. The apparatus of clause 21, further comprising:

a fifth sending module configured to send a third request message for establishing a connection with the smart device to the smart device, the third request message carrying a user account; and

a fifth receiving module configured to receive the UUID of the smart device returned by the smart device based on the third request message after the smart device authenticates the user account carried in the third request message sent by the fifth sending module.

Clause 23. The apparatus of clause 21, wherein the fourth sending module comprises:

a sending unit configured to send the session random number to the smart device by using a point-to-point communication link established between a smart application and the smart device; or

a display unit configured to display the session random number on a user interface of the terminal device, such that a user input module of the smart device inputs to acquire the session random number input by the user.

Clause 24. The apparatus of any of clauses 21 to 23, further comprising:

a sixth receiving module configured to receive a notification message for resetting from the smart device; and

a second clearing module configured to clear the UUID of the smart device and the session random number based on the notification message received by the sixth receiving module.

Clause 25. A verification information update apparatus, applied to a smart device, comprising:

a seventh receiving module configured to receive a session random number from a server forwarded by a terminal device; and

a third generation module configured to generate a new verification number and a new verification password of the smart device based on the session random number received by the seventh receiving module.

Clause 26. The apparatus of clause 25, further comprising:

a sixth sending module configured to send to the server a second request message for registering on the server, the second request message carrying identity information of the smart device and a first signature value of the smart device; and

an eighth receiving module configured to receive a universally unique identifier (UUID) of the smart device generated by the server based on the second request message.

Clause 27. The apparatus of clause 25, wherein the third generation module comprises:

a second determination unit configured to determine an initial verification number and the initial verification password of the smart device;

a third generation unit configured to generate the new verification number of the smart device based on the initial verification number determined by the second determination unit and the session random number; and

a fourth generation unit configured to generate the new verification password of the smart device based on the initial verification password determined by the second determination unit and the session random number.

Clause 28. The apparatus of any of clauses 25 to 27, further comprising:

a fourth generation module configured to generate a notification message after it is detected that a button for resetting is triggered; and

a seventh sending module configured to send the notification message generated by the fourth generation module to the terminal device and the server, such that the server clears the new verification number and the new verification password of the smart device based on the notification message, and the terminal device clears the UUID of the smart device and the session random number based on the notification message.