Patent Description:
An existing air-conditioning unit generally provides a permanent or periodically updated fixed password for a user to log into a control system. For example, the password can be a four-digit numeral. However, the fixed password brings about a potential safety risk. For example, an unauthorized person may obtain the password and log into the control system of the air-conditioning unit. Moreover, there are also potential risks that the fixed password is prone to be forgotten or brute-force broken.

<CIT> discloses a method and apparatus for logging a service technician into an electrical device. A secret key is produced and displayed as a QR code, the login password is decrypted from the secret key, displayed and entered by the service technician. <CIT> discloses a method of authentication of users in data processing systems and data networks. <CIT> discloses a method of facilitating access to a user device, in particular techniques for tracking, accessing and applying credit and prize balance information for redemption-style games.

Viewed from a first aspect, the invention provides an unlock method for an air-conditioning unit as defined by claim <NUM>.

Optionally, the update code is regenerated according to one of the following conditions: a predetermined time has expired, or a manual refresh request is received.

Optionally, the dynamic graphic includes a QR code, a bar code, a numeral, a letter, or a combination thereof.

Optionally, in step (ii), the user terminal device acquires the dynamic graphic through an optical input device or by manual input of the user.

Optionally, the update code includes a randomly generated character string.

Optionally, the certificate is a share certificate stored in the server and the control apparatus, and an algorithm for the control apparatus to generate the unlock password in step (i) is the same as an algorithm for the server to generate the unlock password in step (v).

Optionally, the algorithm includes an irreversible hash algorithm.

Optionally, the server stores a series of identification codes and certificates corresponding to the identification codes, and in step (iv), the server looks for a certificate corresponding to the identification code according to the identification code.

Optionally, the identification code includes a MAC address.

Optionally, the step of granting a corresponding permission includes granting a control or debugging permission of the air-conditioning unit in a predetermined time.

In a further aspect, the invention provides an unlock system for an air-conditioning unit, as defined by claim <NUM>.

Optionally, the control apparatus regenerates the update code according to one of the following conditions: a predetermined time has expired, or a manual refresh request is received.

Optionally, the control apparatus generates the unlock password according to an irreversible hash algorithm.

Optionally, the operation of granting a corresponding permission includes granting a control or debugging permission of the air-conditioning unit in a predetermined time.

Optionally, the operation of granting a corresponding permission includes displaying content and a page corresponding to the permission on the display apparatus.

Optionally, the display apparatus includes a touch screen.

Optionally, the input apparatus includes a physical keyboard or a virtual keyboard located on the touch screen.

The unlock method and system for an air-conditioning unit according to at least the example embodiments of this application are advantageous in a simple structure, easy manufacturing, convenient use, and the like, and can improve the safety of the air-conditioning unit and user login.

Certain example embodiments will now be described by way of example only and with reference to the accompanying drawings, which are listed below. Moreover, unless otherwise specified, the accompanying drawings are merely intended to conceptually express the composition or construction of the described object and may include exaggerations, and the accompanying drawings are not necessarily drawn proportionally.

In the following, example embodiments of this application will be described in detail with reference to the accompanying drawings. Those skilled in the art will understand that these descriptions are merely descriptive and exemplary, and should not be construed as limiting the scope of the invention, which is as defined by the claims.

First, it should be noted that orientation terms such as top, bottom, upward, downward and the like mentioned in this text are defined relative to directions in the accompanying drawings, and they are relative concepts and thus can be changed according to different positions and different use states thereof. Therefore, these or other orientation terms should not be construed as restrictive terms.

It should be noted that, in different accompanying drawings, identical reference numerals represent identical or substantially identical components.

<FIG> is a schematic principle diagram of an unlock system and method. An unlock system <NUM> for an air-conditioning unit includes: a display apparatus <NUM>, an input apparatus <NUM>, and a control apparatus <NUM>. The control apparatus <NUM> is electrically connected to at least the display apparatus <NUM> and the input apparatus <NUM>, and the input apparatus <NUM> can communicate with the display apparatus <NUM>.

The display apparatus <NUM> can be any suitable display device including, but not limited to, a television, an LED display screen, an LCD display screen, an electronic ink display screen, and the like. The input apparatus <NUM> can be any suitable input device including an external keyboard, a physical keyboard, a virtual keyboard, a voice input apparatus, and the like. In an embodiment, the display apparatus <NUM> is a touch screen having an input function, and the input apparatus <NUM> can be a virtual keyboard selectively displayed on the touch screen. The control apparatus <NUM> can be any suitable processor, e.g., any suitable data processing device on the air-conditioning unit, which includes, but is not limited to, a digital signal processor, a single-chip computer, a universal central processing unit, a processor having ARM architecture, and the like. The unlock system <NUM> can be set in an air-conditioning unit, physically attached to the air-conditioning unit, constructed as a detachable component, or remotely connected to the air-conditioning unit.

Specifically, the control apparatus <NUM> is configured to perform the following operations: generating a dynamic graphic according to at least an identification code and an update code; generating an unlock password according to at least a certificate, the identification code and the update code; acquiring an unlock password from the input apparatus <NUM> based on at least the dynamic graphic presented on the display apparatus <NUM>, i.e., receiving an unlock password through the input apparatus <NUM>; comparing the unlock password received from the input apparatus <NUM> with the generated unlock password; and granting a corresponding permission to a user if the acquired unlock password is consistent with the generated unlock password.

The specific working principle of the unlock system <NUM> will be described in detail in the following with reference to a control method for an air-conditioning unit.

An unlock method for an air-conditioning unit includes steps described in detail in the following, wherein step S1 to step S8 are performed sequentially.

In step S1, the control apparatus <NUM> generates a dynamic graphic according to at least an identification code and an update code and presents the dynamic graphic on a display apparatus <NUM>. The control apparatus <NUM> further generates an unlock password according to a certificate, the identification code and the update code. The operation of generating an unlock password can be performed simultaneously with or at a different time from the operation of generating a dynamic graphic, or performed after the dynamic graphic is generated. For example, the operation of generating an unlock password can be performed at any time point before the subsequent step S8.

Specifically, the identification code includes a character string for marking a specific air-conditioning unit. The identification code can be preset and is unchangeable, and can be stored in the control apparatus <NUM> or read by the control apparatus <NUM>. The identification code may be a MAC address of the unlock system <NUM>. Alternatively, the identification code may be any character string preset in the unlock system <NUM> and used for uniquely representing the specific unlock system <NUM>.

The update code includes a randomly generated character string, e.g., a random number character string generated by a built-in random number generator of the control apparatus <NUM>, which includes, but is not limited to, a combination of numerals, uppercase letters and/or lowercase letters. The update code has the following function: the finally generated unlock password will be changed once the update code is regenerated. Therefore, the unlock password may be redefined by changing the update code. The update code may be regenerated according to one of the following conditions: a predetermined time has expired, or a manual refresh request is received. The predetermined time may be any suitable time, and can be set to several seconds to several months. The length of the predetermined time can be preset or set by the user manually. The manual refresh request can be any refresh request of the user received by the control apparatus <NUM>, e.g., a key input of the user through the input apparatus <NUM> or an input on the touch screen, or any instruction sent to the control apparatus <NUM> over a wired or wireless network.

The identification code and the update code can have any suitable length, e.g., several to dozens of characters.

The dynamic graphic can be any graphic presented on the display apparatus <NUM>, e.g., including a QR code, a bar code, a numeral, a letter, or a combination thereof. For example, the numeral can include an Arabic numeral, and the letter can include any uppercase or lowercase English letter. The size of the display apparatus <NUM> is configured to be suitable for displaying one or more of the foregoing graphics, and has a sufficient resolution for performing the subsequent steps. The process of generating the above graphics according to one or more character strings is a technical specification known to those skilled in the art, and specific details and steps are not elaborated herein.

The certificate can be any suitable encryption certificate or decryption certificate, e.g., a certificate suitable for hash encryption and decryption operations. The certificate can be pre-stored in the unlock system <NUM> or the control apparatus <NUM>, and can be selectively read or called by the control apparatus <NUM>.

The operation of generating an unlock password by the control apparatus <NUM> can include using an irreversible hash algorithm. The specific content of the hash algorithm is a technical specification known to those skilled in the art, and specific details and steps are not elaborated in the text.

In <FIG>, step S1 is performed in the unlock system <NUM>. Although not shown in <FIG>, it is easy to understand that the control apparatus <NUM> generates a dynamic graphic and then sends the dynamic graphic to the display apparatus <NUM> for display. After generating the unlock password, the control apparatus <NUM> will not perform any operation that can be displayed in <FIG>, and the generated unlock password is stored for use in the subsequent steps.

For the sake of safety, the unlock apparatus <NUM> described herein is incapable of directly communicating with the server <NUM>. The unlock apparatus <NUM> is completely isolated from the server <NUM> physically, and they are not electrically connected.

In step S2, a user terminal device <NUM> acquires the dynamic graphic and sends the dynamic graphic to the server <NUM>. The user terminal device <NUM> can be any suitable device manually operated by the user <NUM>, e.g., a smart phone including a camera. The process of acquiring the dynamic graphic can be implemented by special software on the user terminal device <NUM>. The special software can be, for example, a mobile phone application or APP suitable for use in cooperation with the unlock system <NUM> or the air-conditioning unit including the unlock system <NUM>. The process of acquiring the dynamic graphic can also be implemented in other manners, e.g., photographing with an optical imaging apparatus, sensing with an infrared sensor, or the user <NUM> manually inputs the dynamic graphic to the user terminal device <NUM> after viewing the dynamic graphic.

Moreover, the user terminal device <NUM> can include a permission management function. For example, the user terminal device <NUM> is allowed to perform the operation in step S2 after login of the user <NUM>. The permission of the user <NUM> can be preset or assigned by an administrator.

The process of sending the dynamic graphic to the server <NUM> can be implemented by any known communication means, including, but not limited to, a cellular data network, Bluetooth, infrared, a <NUM> or <NUM> network, Zigbee, a wired network connection, a wireless network connection, or the like.

In step S3, the server <NUM> decodes the received dynamic graphic to obtain at least the identification code and the update code. The process of decoding the dynamic graphic to obtain one or more characters is a technical specification known to those skilled in the art, and specific details and steps are not elaborated herein.

In step S4, the server <NUM> obtains an unlock password according to a certificate, the identification code and the update code. The server <NUM> can acquire a certificate the same as the above-mentioned certificate pre-stored in the unlock system <NUM> or control apparatus <NUM>, and obtain an unlock password by using an algorithm the same as the above-mentioned algorithm used by the unlock system <NUM> or control apparatus <NUM> to generate the unlock password. For example, the certificate that can be acquired by the server <NUM> and the certificate that can be acquired by the unlock system <NUM> can be preset during manufacturing of the air-conditioning unit, and it is ensured that the certificate and the algorithm for generating an unlock password in the unlock system <NUM> are the same as those in the server <NUM>. The certificate can be stored in the server <NUM> or stored in a medium readable by the server <NUM>.

The operation of generating an unlock password by the server <NUM> can include using an irreversible hash algorithm. The specific content of the hash algorithm is a technical specification known to those skilled in the art, and specific details and steps are not elaborated in the text.

In some examples, different air-conditioning units are set in different regions, and an unlock system <NUM> on each air-conditioning unit includes a single certificate and an identification code. The certificate and the identification code on each air-conditioning unit are different from certificates and identification codes on other air-conditioning units. For example, during manufacturing of the air-conditioning units, different certificates and identification codes can be added to the unlock systems <NUM>. At the same time, the certificates and the corresponding identification codes are stored in a database, and the database is associated with the server <NUM>. Therefore, after obtaining the identification code in step S3, the server <NUM> can search the database for a corresponding certificate according to the identification code, and use the corresponding certificate to generate an unlock password in step S4.

If no corresponding certificate can be found according to the identification code obtained in step S3, the identification code in the unlock system <NUM> may be erroneous or may be a forged identification code. The server <NUM> performs corresponding processing according to known safety rules, thus improving the safety of the whole unlock system.

Steps S3 and S4 are not shown in <FIG>. It is easy to understand that steps S3 and S4 are performed in the server <NUM>, and can be performed by any suitable computer system or data processing system in the server <NUM>.

In step S5, the server <NUM> sends the unlock password to the user terminal device <NUM>. Similarly, the sending operation can also be performed by any above-mentioned suitable communication means.

In step S6, the user terminal device <NUM> displays the unlock password. The user terminal device <NUM> can include a display apparatus capable of displaying the unlock password, or can present the unlock password by means of sound, audio, or the like.

In step S7, an unlock password is input through an input device <NUM>. The unlock password can be input by, for example, the user <NUM>, and can also be input in any other suitable manner.

In step S8, the control apparatus <NUM> compares the generated unlock password with the input unlock password to judge whether to grant a corresponding permission. In an embodiment of this application, the operation of grating a corresponding permission includes granting a control or debugging permission of the air-conditioning unit in a predetermined time. For example, after the permission is granted, a specific control page can be browsed, or a specific control and debugging operation can be performed, including displaying content and a page corresponding to the permission on the display apparatus <NUM>.

The operation of granting a permission can include granting a permission in a predetermined time. The predetermined time can be any suitable preset time length or a time length set by the user, and can be several seconds to several months. The time length or countdown thereof can also be displayed on the display apparatus <NUM>, to inform the user <NUM> of the remaining operating time.

There may be a potential safety risk if the generated unlock password is inconsistent with the input unlock password. The reason for the inconsistency may be a potential malicious attack, or a data error or human error in any of the above steps. When the inconsistency occurs, the control apparatus <NUM> will operate appropriately to prevent the potential malicious attack. For example, when the generated unlock password is inconsistent with the input unlock password for several times successively, the display apparatus <NUM> can be locked for a period of time, or any operation associated with permission granting can be rejected. Therefore, the unlock system and unlock method according to this application can prevent or reduce the risk caused by a malicious attack at least to some extent.

<FIG> is a display picture of an embodiment of a display apparatus. The display apparatus <NUM> may be a known display type, e.g., an LCD display screen disposed on the air-conditioning unit. The display screen can have a function of touch screen input.

An exemplary two-dimensional code or QR code is shown on the display apparatus <NUM>. The two-dimensional code is generated according to step S1 described above, and includes at least information of an identification code and an update code. A "Refresh" virtual button is further displayed on the display apparatus <NUM>. The user <NUM> can manually touch the button to send a manual refresh request. After the manual refresh request is received, a new update code will be generated and the previous update code will be discarded. That is, a new update code will be generated each time the user presses the "Refresh" virtual button manually. An exemplary numeral "hsdhshd1234" is further displayed on the display apparatus <NUM>. The numeral is digital content of the exemplary two-dimensional code or QR code. The user manually inputs the numeral to the user terminal device <NUM> when the two-dimensional code or QR code cannot be scanned or photographed by using the user terminal device <NUM> in step S2, to facilitate subsequent operations.

It is easy to understand that the two-dimensional code or QR code is merely exemplary, so does the exemplary numeral. Moreover, the numeral shown in the drawing is not necessarily directly corresponding to the two-dimensional code shown in the drawing.

A password input field is further displayed on the display apparatus <NUM>. The password input field is used for the user <NUM> to manually input the unlock password in step S7. The unlock password can be input by using a physical key that is not shown, or input by using a virtual key that will be shown on the display apparatus <NUM>.

The displaying in <FIG> is merely exemplary, and different displaying can be made according to actual requirements.

With the unlock method and unlock system, a password can be provided according to actual requirements to unlock an air-conditioning unit, and illegal login of an unauthorized user can be effectively avoided, thus reducing the risk of a malicious attack, and effectively improving the safety of the air-conditioning unit.

Claim 1:
An unlock method for an air-conditioning unit, comprising the following steps:
i) a control apparatus (<NUM>) generating a dynamic graphic according to at least an identification code and an update code and presenting the dynamic graphic on a display apparatus (<NUM>), and generating an unlock password according to a certificate, the identification code and the update code;
ii) a user terminal device (<NUM>) acquiring the dynamic graphic and sending the dynamic graphic to a server (<NUM>);
iii) the server (<NUM>) decoding the dynamic graphic to obtain at least the identification code and the update code;
iv) the server (<NUM>) obtaining an unlock password according to a certificate, the identification code and the update code;
v) the server (<NUM>) sending the unlock password to the user terminal device (<NUM>);
vi) the user terminal device (<NUM>) displaying the unlock password;
vii) inputting the unlock password through an input device (<NUM>); and
viii) the control apparatus (<NUM>) comparing the generated unlock password with the input unlock password to judge whether to grant a corresponding permission;
wherein the generated unlock password is changed once the update code is regenerated.