Patent Description:
Nowadays, Internet of Things (IoT) devices are widely used. A user may directly operate an Internet of Things device or may indirectly operate the Internet of Things device by using another device (such as a smart phone and other user equipment). In a case of remotely operating the Internet of Things device, the user usually first binds user equipment to the Internet of Things device, and then transmit an instruction to the Internet of Things device by using the user equipment. However, there may be a security risk in the method of using user equipment to operate the Internet of Things device.

Therefore, a method and system that can enhance the security during operation of the Internet of Things device are needed.

To overcome defects existing in existing technologies, one or more embodiments in this specification provide technical solutions that can enhance the security during operation of an Internet of Things device.

The one or more embodiments in this specification achieve the above objective through the following technical solutions.

According to one aspect, a method for operating an Internet of Things device is disclosed and includes, after completion of a binding process with a user equipment: receiving, by user equipment, an operation instruction for an Internet of Things device from a user; identifying, by the user equipment, a biometric feature of the user; verifying, by the user equipment, an identity of the user based on the biometric feature; signing, by the user equipment if the identity of the user is verified successfully, the operation instruction by using a first user key of the user; transmitting, by the user equipment, the signed operation instruction to the Internet of Things device; verifying, by the Internet of Things device, a signature for the signed operation instruction by using a second user key of the user, where the second user key and the first user key constitute a key pair; and executing, by the Internet of Things device, the operation instruction if the signature is verified successfully.

The method further includes: receiving, by the user equipment, a random number from the Internet of Things device, where the random number is generated by and stored in the Internet of Things device; transmitting, by the user equipment, both the random number and the signed operation instruction to the Internet of Things device; comparing, by the Internet of Things device after the signature is verified successfully, a random number received from the user equipment with the random number generated by the Internet of Things device; and executing, by the Internet of Things device, the operation instruction only when the random number received by the Internet of Things device from the user equipment and the random number generated by the Internet of Things device are consistent.

The method further includes: invalidating, by the Internet of Things device, the random number after the operation instruction is executed.

Preferably, the first user key is a user private key of the user, and the second user key is a user public key of the user.

Preferably, the first user key and the second user key are the same user key of the user.

Preferably, the binding, by the user equipment, the Internet of Things device further includes: identifying, by the user equipment, the biometric feature of the user; verifying, by the user equipment, the identity of the user based on the biometric feature; and transmitting, by the user equipment, the second user key to the Internet of Things device if the identity of the user is verified successfully.

Preferably, the method further includes generating, by the user equipment, the first user key and the second user key.

Preferably, the generating, by the user equipment, the first user key and the second user key further includes: entering, by the user equipment, the biometric feature of the user, and generating, by the user equipment, the first user key and the second user key for the user after the biometric feature is entered.

Preferably, the first user key and the second user key are stored in a secure environment of the user equipment, where the secure environment is a trusted execution environment (TEE) or a hardware secure element (SE).

According to another aspect, a system is disclosed and includes: user equipment and an Internet of Things device, where the system is configured to perform the foregoing method.

Preferably, the system further includes a router, and the user equipment communicates with the Internet of Things by using the router.

In another aspect, a computer-readable storage medium storing instructions is disclosed, the instructions, when executed by a computer device, causing the computer device to perform the foregoing method.

Compared with the existing technologies, in the one or more embodiments in this specification, the security during operation of the Internet of Things device can be enhanced.

The foregoing content of this application and the following implementations are better understood when read with reference to accompanying drawings. It is to be noted that, the accompanying drawings are merely used as examples of the inventions to be protected. The same reference numerals in the accompanying drawings represent the same or similar components.

The content of the following implementations is sufficient to enable a person skilled in the art to understand technical content of one or more embodiments in this specification and implement the technical content accordingly. According to the specification, claims, and accompanying drawings disclosed in this specification, a person skilled in the art can understand a related purpose and advantages of the one or more embodiments in this specification easily.

Biometric feature identification technology is a technology that performs identity authentication by using human biometric features. Compared with conventional identity authentication methods including identity identification items (e.g., a key, a certificate, and an ATM card, etc.) and identity identification knowledge (e.g., a user name and a password), the biometric feature identification technology is more secure, confidential and convenient. The biometric feature identification technology has advantages of not easy to forget, good anti-counterfeit and anti-theft performance, being convenient, and being available anytime and anywhere.

Various types of biometric feature identification technologies have emerged nowadays, such as fingerprint identification, palm print (hand geometry) identification, iris identification, face identification, voice identification, signature identification, and gene identification. In the following, fingerprints are usually used as an example, but it should be understood that other biometric features besides fingerprints may be used.

<FIG> shows a schematic diagram of a system <NUM> according to an embodiment of this specification. As shown in <FIG>, the system <NUM> includes user equipment <NUM> and an Internet of Things device <NUM>. The user equipment <NUM> is used by a user <NUM>.

The user equipment <NUM> is preferably a mobile device such as a mobile communication device (e.g., a smart phone, etc.), a tablet computer, a notebook computer, or a personal digital assistant (PDA). However, the user equipment <NUM> may alternatively be another device such as a desktop computer, and a set-top box.

Generally, the user equipment <NUM> includes a biometric feature identification capability. For example, the user equipment <NUM> may include a fingerprint scanner that may scan a fingerprint of the user <NUM> and process scanned data to identify the fingerprint of the user <NUM> and thus authenticate the user.

The Internet of Things device <NUM> is usually an object connected by the Internet of Things, and it usually has a network connection capability to interact with another device by using the Internet of Things. The Internet of Things device <NUM> is bound to the user equipment <NUM>, so that the user equipment <NUM> may control the Internet of Things device <NUM> or may perform other interactions with the Internet of Things device <NUM>.

Examples of the Internet of Things device <NUM> include but are not limited to an industrial device and a household device, for example, an industrial robot, a smart medical device, an automobile, a door lock, a rice cooker, and a refrigerator. In the following examples, a smart rice cooker is used as an example for description, but it should be understood that the embodiments of this specification are not limited to a specific Internet of Things device.

In some examples, an application that interacts with the Internet of Things device <NUM> may be installed on the user equipment <NUM>. The application may be an application for one or more Internet of Things devices. For example, the application may be a smart rice cooker application dedicated to a smart rice cooker. Alternatively, the application may be a general application for an Internet of Things device of a certain brand. Alternatively, the application may be a system-level Internet of Things device application. In the following examples, a smart rice cooker application is used as an example for description, but it should be understood that the embodiments of this specification are not limited to a smart rice cooker application.

As shown in <FIG>, in some examples, the system <NUM> may further include a router <NUM>. A network connection may be established between the user equipment <NUM> and the Internet of Things device <NUM> by using the router <NUM>, so that the user equipment <NUM> is allowed to communicate with the Internet of Things device <NUM> by using a network. Preferably, the network is a wireless network.

Alternatively, the system <NUM> may not include the router <NUM>, and the user equipment <NUM> and the Internet of Things device <NUM> may be connected in other ways, for example, connected through infrared, Bluetooth, Zigbee, and the like.

<FIG> is a schematic diagram of a process <NUM> of entering a biometric feature according to an embodiment of this specification and involves a user <NUM> and user equipment <NUM>.

To perform identity authentication by using a biometric feature later, a biometric feature of the user <NUM> usually needs to be entered first, so as to associate the biometric feature with the user <NUM>.

As shown in operation <NUM> in <FIG>, the user <NUM> may request the user equipment <NUM> to enable biometric feature identification. For example, the user <NUM> may click/tap a control on the smart rice cooker application in the user equipment <NUM> to request to enable the biometric feature identification. For example, the user <NUM> may click/tap a button "use fingerprint identification" on the user equipment <NUM> to transmit a request for enabling the biometric feature identification to the user equipment <NUM>. The user equipment may prompt the user to enable the biometric feature identification when the user opens or uses the smart rice cooker application.

In some embodiments, it is possible that the user <NUM> has not entered the biometric feature on the user equipment <NUM> yet. In this case, the following process of entering a biometric feature may be performed.

As shown in operation <NUM> in <FIG>, the user equipment <NUM> may prompt the user to present the biometric feature. For example, the user equipment may prompt the user <NUM> to put a finger on a fingerprint scanner. In some cases, this operation may be skipped. For example, when a user feature is an iris, the iris of the user may be directly scanned without prompting the user.

Subsequently, as shown in operation <NUM> in <FIG>, the user <NUM> may present the biometric feature according to the prompt. For example, the user <NUM> may put the finger on the fingerprint scanner of the user equipment <NUM>.

Subsequently, as shown in operation <NUM> in <FIG>, the biometric feature of the user <NUM> may be transmitted to the user equipment <NUM>. For example, the fingerprint scanner of the user equipment <NUM> may read the biometric feature of the user <NUM>.

Subsequently, as shown in operation <NUM> in <FIG>, the user equipment <NUM> may store the biometric feature of the user <NUM>.

During the scan, the user <NUM> may further be prompted to move the finger, so that complete fingerprint data is obtained.

In a later identity authentication process, a fingerprint of a to-be-authenticated user may be scanned to extract a fingerprint feature and compare the extracted fingerprint feature with a stored user fingerprint feature, so as to determine whether the two fingerprints match and further authenticate an identity of the user.

In some other embodiments, the user <NUM> may have entered the biometric feature on the user equipment <NUM>. For example, the user <NUM> may have previously entered the fingerprint or the like on the user equipment <NUM>. In this case, there is no need to enter the biometric feature again, and the entered biometric feature is used.

In some other examples, regardless of whether there is an entered biometric feature on the user equipment <NUM>, a dedicated biometric feature may be entered for a specific Internet of Things device. For example, a biometric feature dedicated to the smart rice cooker may be entered by using the smart rice cooker application. Security may be further enhanced by using the biometric feature dedicated to the specific Internet of Things device.

Different from existing technologies, in this embodiment of this specification, as shown in operation <NUM> in <FIG>, the user equipment <NUM> may further generate a public key/private key pair for the user <NUM>. Preferably, as described in detail below, a user public key may be stored in the Internet of Things device <NUM> later, and a user private key may be stored on the user equipment <NUM>, so that the user public key in the Internet of Things device <NUM> may be used for verifying the private key on the user equipment <NUM>.

Alternatively, a symmetric encryption solution may be adopted. For example, the user equipment <NUM> may generate a single user key, and the single user key may be stored on the user equipment <NUM> and stored on the Internet of Things device <NUM> later, so that the user key on the Internet of Things device <NUM> may be used for verifying the user key on the user equipment <NUM>.

Preferably, the user equipment <NUM> may include a secure environment, and a private key (and/or a biometric feature) of the user <NUM> may be stored in the secure environment. The secure environment may be a software-level secure environment or a hardware-level secure environment or a combination thereof.

For example, the user equipment <NUM> may include a Trusted Execution Environment (TEE). The TEE is a secure environment implemented by an independent operating system that is built in the user equipment <NUM> and isolated from a main operating system of the user equipment <NUM>, and the TEE may be used for ensuring the security of operations such as key storage, calculation, and biometric feature identification. In this case, the private key of the user <NUM> may be stored in the TEE.

In another example, the user equipment <NUM> may include a Secure Element (SE), and the SE is usually provided in the form of a chip. To prevent external malicious parser attacks and protect data security, a chip as an SE usually has an encryption/decryption logic circuit. In this case, the private key of the user <NUM> may be stored in the SE.

By using the secure environment, the embodiments of this specification may further enhance the protection for the public key/private key pair.

Subsequently, as shown in operation <NUM> in <FIG>, a result of the biometric feature entry may be returned to the user <NUM>. For example, the user <NUM> may be notified that the entry of the user biometric feature is completed. In addition, preferably, the user <NUM> may also be notified that the generation of the public key/private key pair is completed.

Before the user <NUM> is allowed to operate the Internet of Things device <NUM>, the Internet of Things device <NUM> is generally bound to the user <NUM> first. <FIG> is a schematic diagram of a process <NUM> of binding an Internet of Things device according to an embodiment of this specification;.

In an embodiment, as shown in operation <NUM> in <FIG>, a user <NUM> may initiate a binding request to user equipment <NUM>. For example, the user <NUM> may click/tap a control in a smart rice cooker application on the user equipment <NUM> to select a to-be-bound smart rice cooker. For example, the smart rice cooker may be found by searching for devices in a local area network by using the user equipment.

The user equipment <NUM> receives the binding request from the user <NUM>. As shown in operation <NUM> in <FIG>, the user equipment <NUM> may attempt to connect to an Internet of Things device <NUM> based on the binding request. The connection may be implemented by using the router <NUM> shown in <FIG> or implemented in another manner.

Optionally, as shown in operation <NUM> in <FIG>, after the connection is established successfully, the Internet of Things device <NUM> may return a connection result to the user equipment <NUM>. In addition, the user equipment may also notify the user that the connection is successful.

In this embodiment of this specification, a biometric feature authentication process may be performed on the user equipment <NUM>. For example, as shown in operation <NUM> in <FIG>, the user equipment <NUM> may request the user <NUM> to present a biometric feature. For example, it may be displayed in the smart rice cooker application in the user equipment <NUM>: "Please scan a fingerprint!".

As shown in operation <NUM> in <FIG>, the user <NUM> may present the biometric feature to the user equipment <NUM> in response to the request. For example, the user <NUM> may put a finger on a fingerprint scanner of the user equipment <NUM>.

Subsequently, as shown in operation <NUM> in <FIG>, the user equipment <NUM> may receive and verify the biometric feature presented by the user <NUM>. For example, the user equipment <NUM> may scan the fingerprint of the user by using the fingerprint scanner, and the user equipment <NUM> may extract a scanned fingerprint feature of the user fingerprint and compare the extracted fingerprint feature with a stored user fingerprint feature, so as to determine whether the two fingerprint features match and further authenticate an identity of the user.

In a case that the fingerprint feature provided by the user matches the stored user fingerprint feature, the identity of the user is successfully authenticated. In a case that the fingerprint feature provided by the user does not match the stored user fingerprint feature, the user may be prompted that the fingerprints do not match, and the biometric feature may be re-verified or the binding process may end (for example, the user may be prompted that the binding is unsuccessful).

As shown in operation <NUM> in <FIG>, after the user fingerprint is verified successfully, the user equipment <NUM> may transmit, by using, for example, the connection established in the previous operation <NUM>, the user public key associated with the authenticated user <NUM> to the Internet of Things device <NUM>.

After receiving the user public key associated with the user <NUM>, as shown in operation <NUM> in <FIG>, the Internet of Things device <NUM> may store the user public key, for example, in a memory of the Internet of Things device <NUM>. Similarly, to further enhance the security, the Internet of Things device may store the user public key in a secure environment, for example, a TEE or an SE.

Subsequently, as shown in operation <NUM> in <FIG>, the Internet of Things device <NUM> may return a result to the user equipment <NUM>, for example, it is acknowledged that the user public key is stored successfully.

Subsequently, as shown in operation <NUM> in <FIG>, the user equipment <NUM> may return a result to the user <NUM> after receiving an acknowledgment from the Internet of Things device <NUM>. For example, a prompt that the binding process is completed may be displayed to the user by using the smart rice cooker application.

<FIG> is a schematic diagram of a process <NUM> of operating an Internet of Things device according to an embodiment of this specification;.

In an embodiment, when a user <NUM> wants to operate an Internet of Things device <NUM>, as shown in operation <NUM> in <FIG>, the user <NUM> initiates an operation instruction by using user equipment <NUM>. The operation may be, for example, management for the Internet of Things device <NUM> or other interactions with the Internet of Things device <NUM>.

For example, the user <NUM> may tap/click a corresponding control in a smart rice cooker application in the user equipment to operate the Internet of Things device. For example, in the smart rice cooker application, after selecting parameters such as "rice type" and "taste", the user may tap/click a "start" button on the smart rice cooker application, so as to transmit an instruction for starting cooking to a smart rice cooker.

The user equipment <NUM> receives the operation instruction from the user <NUM>. As shown in operation <NUM> in <FIG>, the user equipment <NUM> may attempt to connect to the Internet of Things device <NUM> based on the operation instruction. Similarly, the connection may be implemented by using the router <NUM> shown in <FIG> or implemented in another manner. The connection may alternatively be an automatic connection after the user opens the smart rice cooker application, and then the user may transmit the operation instruction by using the application.

Optionally, as shown in operation <NUM> in <FIG>, after the connection is established successfully, the Internet of Things device <NUM> may return a connection result to the user equipment <NUM>.

As shown operation <NUM> in <FIG>, after the connection is established successfully, the Internet of Things device <NUM> returns a random number to the user equipment <NUM>. In a case that the connection is established automatically, after the smart rice cooker application is opened, the Internet of Things device <NUM> may return the random number to the user equipment <NUM> after the user transmits the operation instruction. The random number is generated and stored by the Internet of Things device <NUM>. The random number is beused for ensuring that the operation instruction is executed only once, so as to enhance the security of the Internet of Things device <NUM>. It can be understood that, the random number may be generated by using any random number generation solution known in the art.

For example, as shown in operation <NUM> in <FIG>, the user equipment <NUM> may request the user <NUM> to present a biometric feature. For example, it may be displayed in the smart rice cooker application in the user equipment <NUM>: "Please scan a fingerprint!".

Subsequently, as shown in operation <NUM> in <FIG>, the user equipment <NUM> receives and verifies the biometric feature presented by the user <NUM>. For example, the user equipment <NUM> may scan the fingerprint of the user by using the fingerprint scanner, and the user equipment <NUM> may extract a fingerprint feature and compare the extracted fingerprint feature with a stored user fingerprint feature, so as to determine whether the two fingerprint features match and further authenticate an identity of the user.

In a case that the fingerprint feature provided by the user matches the stored user fingerprint feature, the identity of the user is successfully authenticated. In a case that the fingerprint feature provided by the user does not match the stored user fingerprint feature, the user may be prompted that the fingerprints do not match, and the biometric feature may be re-verified or the operation process may end.

After the user fingerprint is verified successfully, as shown in operation <NUM> in <FIG>, the user equipment <NUM> assembles instruction data. Based on the instruction (for example, an instruction of starting cooking) transmitted by using the user equipment <NUM> by the user <NUM> and the random number returned by the Internet of Things device <NUM> in operation <NUM>, the user equipment <NUM> generates instruction data used for the Internet of Things device <NUM>.

Subsequently, as shown in operation <NUM> in <FIG>, the user equipment <NUM> signs the instruction data by using a stored user private key. The method of signing data by using a private key is known to those skilled in the art, and details are not repeated herein. Similarly, it should be understood that, in other embodiments, the user equipment <NUM> may sign the instruction data by using a stored user public key/user private key.

Subsequently, as shown in operation <NUM> in <FIG>, the user equipment <NUM> transmits the signed instruction data and the random number to the Internet of Things device <NUM> by using, for example, the connection established in operation <NUM>.

The Internet of Things device <NUM> receives the signed instruction data from the user equipment <NUM>. Subsequently, as shown in operation <NUM> in <FIG>, the Internet of Things device <NUM> verifies, by using the user public key stored in the Internet of Things device <NUM>, the instruction data that is signed by using the user private key.

If the signed instruction data cannot be verified successfully, it indicates that the instruction data is not signed by using a valid user private key. Therefore, the Internet of Things device <NUM> refuses to execute the user instruction (for example, a cooking instruction) and returns an error report to the user equipment <NUM>. In this case, the user equipment <NUM> may display information indicating a signature error to the user <NUM>.

If the signed instruction data is verified successfully, it indicates that the instruction data is signed by using valid data. In this case, the Internet of Things device <NUM> performs subsequent steps.

Subsequently, the Internet of Things device <NUM> compares the random number with the random number that is previously generated and stored. If a random number included in the instruction data is the same as the stored random number, as shown in operation <NUM> in <FIG>, the Internet of Things device <NUM> executes an instruction in the instruction data. For example, the Internet of Things device <NUM> may extract the instruction in the instruction data and execute the instruction.

The Internet of Things device <NUM> invalidates may the random number (for example, by deleting the random number). If the random number included in the instruction data is different from the stored random number or the instruction data does not include the random number, the Internet of Things device <NUM> may not execute the instruction in the instruction data and may return an error report to the user equipment.

It can be understood that, the step of comparing the random numbers may be performed before the step of verification using the private key.

After executing the instructions in the instruction data, as shown in operation <NUM> in <FIG>, the Internet of Things device <NUM> may return a result of the execution to the user equipment. For example, the Internet of Things device <NUM> may return, to the user equipment <NUM>, an acknowledgment that the cooking instruction has been executed successfully.

Subsequently, as shown in operation <NUM> in <FIG>, the user equipment <NUM> may return the result of the execution to the user <NUM>. For example, the user equipment <NUM> may display information "the cooking is started" to the user <NUM> in the smart rice cooker application.

It can be seen that, in this application, an identity of a user is verified by using a biometric feature, thereby avoiding risks related to stealing of a user name or a password and further improving the security of a system.

It should be understood that the embodiments of this specification have many variations.

For example, in one variation, the public key/private key pair is not generated during the entry of the user biometric feature but generated during the binding of the Internet of Things device. For example, step <NUM> in <FIG> may be performed after step <NUM> in <FIG>.

In another non-claimed variation, not all operation instructions need to be verified by using a user biometric feature. For example, in some embodiments, after receiving the operation instruction, the user equipment <NUM> may first determine a secure level of the operation instruction, and require, only when the secure level is relatively high, the user to present a biometric feature for verification.

In addition, although the foregoing descriptions show examples of an asymmetric encryption solution (that is public key/private key pair), it should be understood that, in other examples, a symmetric encryption solution may also be adopted, and both the user public key and the user private key may be replaced with the same user key.

<FIG> is a schematic diagram of a method <NUM> for operating an Internet of Things device according to an embodiment of this specification.

The method <NUM> includes step <NUM>, receiving, by user equipment, an operation instruction for an Internet of Things device from a user. For example, the user may tap/click a control on an application interface of the Internet of Things device on the user equipment to transmit the operation instruction, for example, an instruction of starting cooking for a rice cooker.

The method <NUM> further includes step <NUM>, identifying, by the user equipment, a biometric feature of the user. Specifically, as described above, the user equipment may request the user to present the biometric feature and then receive the biometric feature presented by the user.

The method <NUM> further includes step <NUM>, verifying, by the user equipment, an identity of the user based on the biometric feature. For example, the user equipment may compare the biometric feature presented by the user with a biometric feature of a user entered previously, to verify whether the user is a user associated with the Internet of Things device.

The method <NUM> includes : step <NUM>, signing, by the user equipment if the identity of the user is verified successfully, the operation instruction by using a first user key of the user. For example, the first user key and the second user key may be generated previously by the user equipment for a user whose biometric feature has been entered. Preferably, the first user key is a user private key of the user, and the second user key is a user public key of the user. Alternatively, the first user key and the second user key are the same user key of the user.

The first user key and the second user key may be generated by the user equipment during the entry of the biometric feature or during the binding of the Internet of Things device. The generating, by the user equipment, the first user key and the second user key further includes: entering, by the user equipment, the biometric feature of the user, and generating, by the user equipment, the first user key and the second user key for the user after the biometric feature is entered.

Preferably, the first user key and the second user key are stored in a secure environment of the user equipment, where the secure environment is a TEE or a hardware SE.

The method <NUM> further includes: step <NUM>, transmitting, by the user equipment, the signed operation instruction to the Internet of Things device. Both a random number and the signed operation instruction received from the Internet of Things device are transmitted to the Internet of Things device by the user equipment.

The method <NUM> further includes: step <NUM>, verifying, by the Internet of Things device, a signature for the signed operation instruction by using the second user key of the user, where the second user key and the first user key constitute a key pair.

The method <NUM> further includes: step <NUM>, executing, by the Internet of Things device, the operation instruction if the signature is verified successfully. The Internet of Things device further compares a random number received from the user equipment with a random number generated by the Internet of Things device, and executes the operation instruction only when the random number received by the Internet of Things device from the user equipment and the random number generated by the Internet of Things device are consistent. After executing the operation instruction, the Internet of Things device invalidates the random number.

Before the Internet of Things device is operated, the Internet of Things device is bound by the user equipment. The binding may be performed through the following operations: identifying, by the user equipment, the biometric feature of the user; verifying, by the user equipment, the identity of the user based on the biometric feature; and transmitting, by the user equipment, the second user key to the Internet of Things device if the identity of the user is verified successfully.

<FIG> is a schematic diagram of another method <NUM> for operating an Internet of Things device according to a non-claimed embodiment of this specification. The method <NUM> may be executed by user equipment.

The method <NUM> may include: step <NUM>, receiving an operation instruction for an Internet of Things device from a user.

The method <NUM> may further include: step <NUM>, identifying a biometric feature of the user.

The method <NUM> may include: step <NUM>, verifying an identity of the user based on the biometric feature.

The method <NUM> may include: step <NUM>, signing, if the identity of the user is verified successfully, the operation instruction by using a first user key of the user.

The method <NUM> may further include: step <NUM>, transmitting the signed operation instruction to the Internet of Things device. The signature is used by the Internet of Things device to authenticate the identity of the user by using a second user key, and the second user key and the first user key constitute a key pair.

Reference may be made to descriptions for <FIG> for specific operations of related steps.

<FIG> is a schematic diagram of another method <NUM> for operating an Internet of Things device according to an embodiment of this specification. The method <NUM> is executed by an Internet of Things device.

The method <NUM> may further include: step <NUM>, receiving, from user equipment, a second user key in a key pair constituted by a first user key and the second user key.

The method <NUM> includes: step <NUM>, receiving an operation instruction from the user equipment, where the operation instruction is signed by using the first user key.

The method <NUM> further includes: step <NUM>, verifying a signature for the operation instruction by using the second user key.

The method <NUM> further includes: step <NUM>, executing, by the Internet of Things device, the operation instruction if the signature is verified successfully.

The method <NUM> further includes generating a first random number and transmitting the first random number to the user equipment. Subsequently, a second random number is further received from the user equipment when the operation instruction from the user equipment is received. Subsequently, the second random number is compared with the first random number, and the operation instruction is executed only when the second random number and the first random number are consistent. The first random number is invalidated after the operation instruction is executed. For example, the first random number may be deleted.

In addition, a computer-readable storage medium storing computer executable instructions is further disclosed in this application, the computer executable instructions, when executed by a processor, causing the processor to perform the methods of the embodiments described herein.

In addition, a system is further disclosed in this application, the system including an apparatus configured to implement the methods of the embodiments described herein.

It can be understood that the methods according to one or more embodiments of this specification may be implemented by using software, hardware, or a combination of software and hardware.

It can be understood that, the embodiments of this specification are all described in a progressive manner, for same or similar parts in the embodiments, refer to these embodiments, and descriptions of each embodiment focus on a difference from other embodiments. Especially, apparatus and system embodiments are basically similar to a method embodiment, and therefore are described briefly. For related parts, reference may be made to partial descriptions in the method embodiment.

It should be understood that specific embodiments of this specification are described above. Other embodiments fall within the scope of the appended claims. In some cases, the actions or steps recorded in the claims may be performed in sequences different from those in the embodiments and an expected result may still be achieved. In addition, the processes depicted in the accompanying drawings is not necessarily performed in the specific order or successively to achieve an expected result. In some implementations, multitasking and parallel processing may be feasible or beneficial.

It should be understood that an element described in a singular form herein or displayed only one in the accompanying drawings does not represent that the element is limited to one. In addition, modules or elements described or shown as separate herein may be combined into a single module or element, and a module or an element described or shown herein as a single module or element may be split into a plurality of modules or elements.

Claim 1:
A method (<NUM>) for operating an Internet of Things device after completion of a binding process with a user equipment, the method comprising:
receiving (<NUM>), by user equipment, an operation instruction for an Internet of Things device initiated by a user to operate the Internet of Things device;
receiving, by the user equipment, a random number from the Internet of Things device, wherein the random number is generated by and stored in the Internet of Things device;
identifying (<NUM>), by the user equipment, a biometric feature of the user;
verifying (<NUM>), by the user equipment, an identity of the user based on the biometric feature;
signing (<NUM>), by the user equipment if the identity of the user is verified successfully, the operation instruction by using a first user key of the user;
transmitting (<NUM>), by the user equipment, both the random number and the signed operation instruction to the Internet of Things device;
verifying (<NUM>), by the Internet of Things device, a signature for the signed operation instruction by using a second user key of the user, wherein the second user key and the first user key constitute a key pair;
comparing, by the Internet of Things device after the signature is verified successfully, a random number received from the user equipment with the random number generated by the Internet of Things device;
executing (<NUM>), by the Internet of Things device, the operation instruction only when the random number received by the Internet of Things device from the user equipment and the random number generated by the Internet of Things device are consistent and if the signature is verified successfully; and
invalidating, by the Internet of Things device, the random number after the operation instruction is executed, thereby ensuring that the operation instruction is executed only once.