Device sharing method and electronic device

Patent metadata

Field	Value
Publication number	US-12101396-B2
Application number	US-202017789143-A
Country	US
Kind code	B2
Filing date	Oct 29, 2020
Priority date	Dec 31, 2019
Publication date	Sep 24, 2024
Grant date	Sep 24, 2024

Abstract

A first device obtains a public key of a first home device and a first message leaving key that is used to encrypt an offline message between the first device and the first home device; obtains a public key of a second device and a second message leaving key that is used to encrypt an offline message between the first device and the second device; obtains a third message leaving key used to encrypt an offline message between the second device and the first home device; encrypts the public key of the second device and the third message leaving key by using the first message leaving key, to obtain first encrypted information, and requests a server to push the first encrypted information to the first home device; and encrypts the public key of the first home device and the third message leaving key by using the second message leaving key.

First claim

What is claimed is:

1. A first device, comprising
a communications module;
a memory; and
one or more processors, wherein the communications module, the memory, and the one or more processors are coupled, wherein the memory is configured to store computer program code comprising computer instructions, which when executed by the one or more processors, cause the first device to:
obtain a first message leaving key, wherein the first message leaving key is used to encrypt an offline message between the first device and a first home device;
obtain a public key of the first home device, wherein the public key of the first home device is used to perform verification on an online message from the first home device;
obtain a second message leaving key and a public key of a second account, wherein the second message leaving key is used to encrypt an offline message between the first device and a second device, wherein the second account is an account associated with a first application (app) installed on the second device, wherein the first app is logged in to by using a first account, and wherein the public key of the second account is used to perform verification on an online message from the second device;
obtain a third message leaving key, wherein the third message leaving key is used to encrypt an offline message between the second device and the first home device;
encrypt the public key of the second account and the third message leaving key by using the first message leaving key, to obtain first encrypted information, and request a server to push the first encrypted information to the first home device; and
encrypt the public key of the first home device and the third message leaving key by using the second message leaving key, to obtain second encrypted information, and request the server to push the second encrypted information to the second device.

2. The first device according to claim 1 , wherein the first device is further to:
access a first wireless network provided by the first home device;
negotiate a shared key with the first home device over the first wireless network by using a password authenticated key exchange (PAKE) protocol;
receive third encrypted information from the first home device over the first wireless network, wherein the third encrypted information is obtained by encrypting the public key of the first home device by using the shared key; and
decrypt the third encrypted information by using the shared key, to obtain the public key of the first home device.

3. The first device according to claim 2 , wherein the first device is further to:
generate the first message leaving key;
encrypt a public key of the first account, the first message leaving key, and access information of a second wireless network by using the shared key, to obtain fourth encrypted information, wherein the access information comprises an identifier and an access password of the second wireless network, and the public key of the first account is used to perform verification on an online message from the first device; and
send the fourth encrypted information to the first home device over the first wireless network.

4. The first device according to claim 1 , wherein the first device is further to:
obtain verification information of the second device, wherein the verification information comprises the second account and a shared key;
obtain a shared block from the server based on the second account, wherein the shared block is obtained by the second device by encrypting the public key of the second account and the second message leaving key by using the shared key, and is uploaded to the server; and
decrypt the shared block by using the shared key, to obtain the public key of the second account and the second message leaving key.

5. The first device according to claim 4 , wherein the first device further comprises a display; and
wherein the first device is further to:
display a first interface of the first app, wherein the first interface is used to manage one or more home devices;
receive a first operation performed by a user on the first interface, wherein the first operation is used to trigger the first device to share the first home device with the second device; and
in response to the first operation, send a first request message, to the server, to request the server to indicate the second device to generate the verification information and upload the shared block to the server.

6. The first device according to claim 5 , wherein the shared block further comprises a first challenge code; and
wherein the first device is further to:
decrypt the shared block by using the shared key, to obtain the first challenge code;
determine whether the first challenge code is the same as a second challenge code generated by the first device for the second account; and
in response to that the first challenge code is the same as the second challenge code, generate the third message leaving key.

7. The first device according to claim 5 , wherein the first device is further to:
in response to the first operation, generate a second challenge code for the second account, wherein the first request message further comprises the second challenge code.

8. A second device, comprising:
a first application (app) installed on the second device, wherein the first app is logged in to by using a second account;
a communications module;
a memory; and
one or more processors, wherein the communications module, the memory, and the one or more processors are coupled, wherein the memory is configured to store computer program code comprising computer instructions, which when executed by the one or more processors, cause the second device to:
obtain a second message leaving key, wherein the second message leaving key is used to encrypt an offline message between a first device and the second device;
receive second encrypted information from a server, wherein the second encrypted information is obtained by encrypting a public key of a first home device and a third message leaving key by using the second message leaving key, wherein the public key of the first home device is used to perform verification on an online message from the first home device, and wherein the third message leaving key is used to encrypt an offline message between the second device and the first home device; and
decrypt the second encrypted information by using the second message leaving key, to obtain the public key of the first home device and the third message leaving key.

9. The second device according to claim 8 , wherein, the second device is further to:
receive a first challenge code from the server; and
generate the second message leaving key.

10. The second device according to claim 9 , wherein the second device is further to:
generate a shared key after receiving the first challenge code from the server;
encrypt a public key of the second account, the first challenge code, and the second message leaving key by using the shared key, to obtain a shared block; and
send the shared block to the server.

11. The second device according to claim 10 , wherein the second device is further to:
after receiving the first challenge code from the server, generate verification information, and display the verification information comprising the second account and the shared key; and
wherein the verification information comprises at least one of a two-dimensional code, a bar code, or an electronic label.

12. A first home device, comprising
a communications module;
a memory; and
one or more processors, wherein the communications module, the memory, and the one or more processors are coupled,

Assignees

• Huawei Tech Co Ltd

Inventors

• Xu Bingkun
• Qiao Yong

Classifications

• H04L67/12

  specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks · CPC title

• H04L9/0825 Primary

  using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates · CPC title

• H04L12/2803 Primary

  Home automation networks · CPC title

• H04L63/062

  for key distribution, e.g. centrally by trusted party (cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819) · CPC title

• H04L9/3247

  involving digital signatures · CPC title