CN115065932A - Communication device, user equipment and communication system of NFC equipment - Google Patents

Communication device, user equipment and communication system of NFC equipment Download PDF

Info

Publication number
CN115065932A
CN115065932A CN202210966937.9A CN202210966937A CN115065932A CN 115065932 A CN115065932 A CN 115065932A CN 202210966937 A CN202210966937 A CN 202210966937A CN 115065932 A CN115065932 A CN 115065932A
Authority
CN
China
Prior art keywords
module
communication
ranging
nfc
user equipment
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202210966937.9A
Other languages
Chinese (zh)
Inventor
孙金龙
田琦
郑子君
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Shenzhen Goodix Technology Co Ltd
Original Assignee
Shenzhen Goodix Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Shenzhen Goodix Technology Co Ltd filed Critical Shenzhen Goodix Technology Co Ltd
Priority to CN202210966937.9A priority Critical patent/CN115065932A/en
Publication of CN115065932A publication Critical patent/CN115065932A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W4/00Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/80Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07CTIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00Individual registration on entry or exit
    • G07C9/20Individual registration on entry or exit involving the use of a pass
    • G07C9/29Individual registration on entry or exit involving the use of a pass the pass containing active electronic elements, e.g. smartcards
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W4/00Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/02Services making use of location information
    • H04W4/023Services making use of location information using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

The application provides a communication device, user equipment and a communication system of Near Field Communication (NFC) equipment, which can improve the use experience of a user on the NFC equipment. The communication device of the NFC equipment is used for communicating with the NFC equipment and the user equipment, and comprises: the device comprises a first ranging module, a first NFC module and a first processing module; the first ranging module is used for measuring distance information between the first ranging module and the user equipment, and the communication distance of the first ranging module is larger than that of the first NFC module; the first processing module is used for controlling the first NFC module to communicate with the NFC equipment according to the distance information so that the NFC equipment can execute a preset function. According to the scheme, the NFC equipment can be controlled by the communication device with a larger communication distance to complete the preset function under the condition that the user does not sense, so that the use experience of the user on the NFC equipment can be improved to a larger extent.

Description

Communication device, user equipment and communication system of NFC equipment
Technical Field
The present application relates to the field of electronic technology, and more particularly, to a communication apparatus, a user equipment, and a communication system for an NFC device.
Background
With the progress and development of scientific technology, the application of Near Field Communication (NFC) technology has received much attention worldwide. Devices (such as mobile phones and the like) using the NFC technology can exchange data in the close proximity of each other, so that various applications such as mobile payment, electronic ticketing, door access, mobile identification, anti-counterfeiting and the like can be realized.
In some application scenarios, the NFC device may include a smart card and a card reader, and according to the NFC-related communication protocol, a user must hold the card with a hand and swing the card close to the card reader within a certain distance range (for example, 7cm to 15 cm) from a surface of the card reader, so that the card reader can read card information to control other functional devices to perform related operations. Under the condition that a user is inconvenient to wave the card, the card reader cannot be matched with other functional devices to realize related operations, so that the use experience of the user is poor.
In view of this, how to provide an NFC device with better user experience is a technical problem to be solved.
Disclosure of Invention
The application provides a communication device, user equipment and a communication system of NFC equipment, which can improve the use experience of users on the NFC equipment.
In a first aspect, a communication apparatus of an NFC device is provided, configured to communicate with an NFC device and a user equipment, and includes: the device comprises a first ranging module, a first NFC module and a first processing module; the first ranging module is used for measuring distance information between the first ranging module and the user equipment, and the communication distance of the first ranging module is larger than that of the first NFC module; the first processing module is used for controlling the first NFC module to communicate with the NFC equipment according to the distance information so that the NFC equipment can execute a preset function.
According to the technical scheme of the embodiment of the application, the communication device is arranged between the user equipment and the NFC equipment, the user equipment and the NFC equipment do not need to carry out the preset function through NFC within a short distance range, the distance information between the user equipment and the NFC equipment can be measured through the first ranging module with a large communication distance, and according to the distance information, the communication device can carry out data communication with the NFC equipment through controlling the first NFC module in advance, so that the NFC equipment carries out the preset function, and the user requirements are met. Therefore, according to the technical scheme, the communication device can control the NFC equipment to complete the preset function under the condition that the user does not sense the NFC equipment, so that the use experience of the user on the NFC equipment can be improved to a large extent, the communication device still controls the first NFC module to communicate with the NFC equipment, the NFC equipment does not need to be improved, and the technical scheme can be compatible with the existing NFC equipment at present.
In some possible embodiments, the communication device further comprises: the NFC equipment comprises a first storage module, a second storage module and a third storage module, wherein the first storage module is used for storing functional data of the user equipment, and the functional data corresponds to a preset function of the NFC equipment; the first processing module is used for controlling the first NFC module to communicate with the NFC equipment according to the distance information and the function data, so that the NFC equipment executes a preset function.
According to the technical scheme of the embodiment, the communication device is provided with a first storage module, and the first storage module is used for storing the functional data of the user equipment. When the communication device needs to control the NFC equipment to execute the preset function, the function data stored by the communication device can be directly utilized and does not need to be acquired from the outside, the function data is prevented from being stolen or tampered in the external transmission process, the effective control of the communication device on the NFC equipment and the safety performance of the NFC equipment are guaranteed, and the use experience of a user on the NFC equipment can be further improved.
In some possible embodiments, the NFC device is an access control device including a card reader, and the functional data of the user device is access control data; the first ranging module is used for judging whether the distance information enters a preset range or not; under the condition that the distance information enters the preset range, the first processing module is used for controlling the first NFC module to communicate with the access control equipment based on the access control data, so that the access control equipment executes the door opening function.
Through the technical scheme of this embodiment, can realize the entrance guard control of user's no perception, reach the purpose that no perception opened the door to promote the user and experience the use of entrance guard. In addition, according to the technical scheme, the first ranging module with the larger communication distance is used for measuring the distance information between the first ranging module and the user equipment, and the communication device can be in data communication with the access control equipment through the first processing module in advance according to the distance information, so that the access control equipment can execute the door opening function in advance, and therefore the possibility that multiple people simultaneously open the door simultaneously is technically provided.
In some possible embodiments, the first processing module is further configured to stop the first NFC module from communicating with the access control device when the distance information exceeds the preset range after entering the preset range, so that the access control device executes a door closing function.
Through the technical scheme of this embodiment, on the basis of realizing that the door is opened to the noninductive perception, can also realize the function that the door was closed to the insensitivity to the realization realizes realizing comprehensive and comparatively reliable control to entrance guard's equipment.
In some possible embodiments, the first processing module is further configured to perform identity authentication with the user equipment; and under the condition that the authentication is successful, the first processing module is used for notifying the first ranging module so that the first ranging module measures the distance information between the first ranging module and the user equipment.
According to the technical scheme of the embodiment, the first processing module can execute identity authentication with the user equipment, and under the condition that the identity authentication is successful, the first processing module informs the first ranging module to execute ranging and further the first processing module can execute follow-up actions according to the distance information.
In some possible embodiments, the first processing module is configured to perform password and/or key-based identity authentication with the user equipment.
In some possible embodiments, the first ranging module is configured to send a first ranging session to the ue, receive a first ranging response session sent by the ue, and measure distance information between the ue and the first ranging module according to the first ranging session and the first ranging response session.
In some possible embodiments, the first processing module is further configured to encrypt the first ranging session; the first ranging module is used for sending an encrypted first ranging session to the user equipment and receiving an encrypted first ranging response session sent by the user equipment; the first processing module is further configured to decrypt the encrypted first ranging response session.
Through the technical scheme of the embodiment, the ranging session of the first ranging module for ranging can be encrypted through the first processing module, so that the safety performance of the first ranging module in the ranging process can be improved, the ranging session is prevented from being tampered and attacked, and the overall safety performance of the NFC equipment and the system where the NFC equipment is located is improved.
In some possible embodiments, the first processing module is configured to perform key agreement with the user equipment to generate a session key; the first processing module is used for encrypting the first ranging session according to the session key and decrypting the encrypted first ranging response session according to the session key.
According to the technical scheme of the embodiment, the session key obtained by the first processing module and the user equipment through key negotiation has higher security performance. The session key with higher security can further improve the overall security performance of the NFC equipment and the system where the NFC equipment is located.
In some possible embodiments, the communication device further comprises: a first communication module; before the first ranging module is used for measuring distance information between the first ranging module and the user equipment, the first communication module is used for performing pairing of the communication device and the user equipment; and under the condition of successful pairing, the first communication module is used for awakening the first ranging module so as to enable the first ranging module to measure the distance information between the first ranging module and the user equipment.
In the technical solution of this embodiment, the pairing process between the communication device and the user equipment may also be understood as an authentication process between the communication device and the user equipment, which may further improve the security performance of the entire system. In addition, before the first communication module wakes up the first ranging module, the first ranging module can be in a dormant state, so that the overall power consumption of the first ranging module and the communication device where the first ranging module is located is saved.
In some possible embodiments, in case of successful pairing, the first communication module is configured to notify the first processing module; the first processing module is used for executing identity authentication with the user equipment through the first communication module; and under the condition of successful authentication, the first processing module is used for awakening the first ranging module so as to enable the first ranging module to measure the distance information between the first ranging module and the user equipment.
In the technical scheme of the embodiment, two authentication processes of pairing and identity authentication are executed between the communication device and the user equipment, so that the safety performance of the whole system can be further improved.
In some possible embodiments, the power consumption of the first communication module is less than the power consumption of the first ranging module, and/or the communication distance of the first communication module is greater than the communication distance of the first ranging module.
Through the technical scheme of the embodiment, under the condition that the power consumption of the first communication module is smaller than that of the first ranging module, the energy consumption required by the real-time operation of the first communication module can be saved, and the comprehensive performance of the whole system is improved. Under the condition that the communication distance of the first communication module is greater than that of the first ranging module, the communication device can be paired with the user equipment and even perform an identity authentication process under the condition that the communication distance of the first communication module is greater than that of the first ranging module, so that the user equipment can control the NFC equipment to execute a preset function through the communication device before being used, and the use experience of a user is further improved.
In some possible embodiments, the first communication module is a bluetooth chip.
Through the technical scheme of this embodiment, the bluetooth chip has advantages such as low-power consumption and low cost, and it can run in real time in order to realize pairing with user equipment's bluetooth, synthesizes the security performance that promotes entire system and reduces the energy consumption.
In some possible embodiments, the communication device further comprises: a second communication module; before the first ranging module is used for measuring the distance information between the first ranging module and the user equipment, the second communication module is used for transmitting the ranging configuration parameters between the first ranging module and the user equipment.
Through the technical scheme of this embodiment, communication device can be real-time through the range finding configuration parameter of the first distance measuring module of second communication module transmission, can be convenient for range finding configuration parameter's update and upgrade for the range finding performance of first distance measuring module is better.
In some possible embodiments, the first ranging module is an ultra-wideband UWB chip.
According to the technical scheme of the embodiment, the UWB chip is used as the first ranging module, so that the distance information which is accurate and high in safety of the user equipment can be measured, the accuracy of the follow-up first processing module for controlling the NFC equipment to execute the preset function according to the accurate distance information is improved, and the use experience of a user is further improved.
In some possible embodiments, the first processing module is a secure element SE chip.
According to the technical scheme of the embodiment, the safety chip is used as the first processing module to process data such as distance information, so that the safety performance of the communication device can be improved, and the overall safety performance of a system where the communication device is located can be improved.
In some possible embodiments, the communication device and the NFC apparatus are disposed separately and adjacent to each other; alternatively, the communication means is integrated inside the NFC device.
In the technical scheme of the embodiment, under the condition that the communication device and the NFC equipment are separated from each other and are adjacently arranged, the existing NFC equipment does not need to be changed, and only the communication device is arranged nearby, so that the actual use requirement can be met, the existing NFC equipment is compatible to the maximum extent, and the use experience of a user on the NFC equipment is improved. Under the condition that communication device is integrated in the inside of NFC equipment, can be convenient for NFC equipment and communication device installation and dismantlement at practical application in-process, promote the pleasing to the eye degree of outward appearance.
In a second aspect, a user equipment is provided, including: and the second ranging module is used for measuring distance information between the NFC equipment and the communication device of the NFC equipment, the communication distance of the second ranging module is greater than that of the first NFC module in the communication device, and the distance information is used for indicating the communication device to control the first NFC module to communicate with the NFC equipment so that the NFC equipment executes a preset function.
In some possible embodiments, the user equipment further includes: the second processing module is used for executing identity authentication with the communication device; and under the condition that the authentication is successful, the second processing module is used for informing the second ranging module so that the second ranging module measures the distance information between the communication device and the second ranging module.
In some possible embodiments, the second processing module is configured to perform password and/or key-based identity authentication with the communication device.
In some possible embodiments, the second ranging module is configured to receive a first ranging session sent by the communication device, and send a first ranging response session to the communication device, where the first ranging session and the first ranging response session are used to measure distance information between the second ranging module and the communication device.
In some possible embodiments, the second ranging module is configured to receive an encrypted first ranging session sent by the communication device; the second processing module is used for decrypting the encrypted first ranging session and encrypting the first ranging response session; the second ranging module is configured to send the encrypted first ranging response session to the communication device.
In some possible embodiments, the second processing module is configured to perform key agreement with the communication device to generate a session key; the second processing module is used for decrypting the encrypted first ranging session according to the session key and encrypting the first ranging response session according to the session key.
In some possible embodiments, the second processing module is a secure chip.
In some possible embodiments, the user equipment further includes: a third communication module; before the second ranging module is used for measuring the distance information between the communication device and the user equipment, the third communication module is used for pairing the user equipment and the communication device; and under the condition of successful pairing, the third communication module is used for awakening the second ranging module so as to enable the second ranging module to measure the distance information between the communication device and the communication module.
In some possible embodiments, in case of successful pairing, the third communication module is configured to notify the second processing module; the second processing module is used for performing identity authentication with the communication device through the third communication module; and under the condition that the authentication is successful, the second processing module is used for waking up the second ranging module so as to enable the second ranging module to measure the distance information between the communication device and the second ranging module.
In some possible embodiments, the power consumption of the third communication module is less than the power consumption of the second ranging module, and/or the communication distance of the third communication module is greater than the communication distance of the second ranging module.
In some possible embodiments, the third communication module is a bluetooth chip.
In some possible embodiments, the user equipment further includes: a fourth communication module; before the second ranging module is used for measuring the distance information between the second ranging module and the communication device, the fourth communication module is used for transmitting the ranging configuration parameters between the second ranging module and the communication device.
In some possible embodiments, the user equipment further includes: and the second NFC module is used for communicating with the NFC equipment so as to enable the NFC equipment to execute a preset function.
In some possible embodiments, the second ranging module is a UWB chip.
In some possible embodiments, the NFC device is an access control device including a card reader, and when the distance information enters a preset range, the distance information is used to instruct the communication device to control the first NFC module to communicate with the access control device, so that the access control device performs a door opening function; and under the condition that the distance information exceeds the preset range after entering the preset range, the distance information is used for indicating the communication device to control the first NFC module to stop communicating with the access control equipment, so that the access control equipment executes a door closing function.
In a third aspect, a communication method is provided, which is applied to a communication apparatus including an NFC module, and includes: measuring distance information between the NFC module and the user equipment, wherein the variation range of the distance information is larger than the communication range of the NFC module; and communicating with the NFC equipment through the NFC module according to the distance information so that the NFC equipment executes a preset function.
In a fourth aspect, a communication method is provided, which is applied to a user equipment, and the communication method includes: measuring distance information between a communication device of the NFC equipment; the change range of the distance information is larger than the communication range of the NFC module in the communication device, and the distance information is used for indicating the communication device to communicate with the NFC equipment through the NFC module so that the NFC equipment can execute a preset function.
In a fifth aspect, a communication system is provided, including: the communication device of the first aspect or any of the possible implementations of the first aspect, the user equipment of the second aspect or any of the possible implementations of the second aspect, and the NFC device.
In some possible embodiments, the NFC device is an access control device, and the communication device is configured to communicate with the NFC device and the user equipment, so that the access control device performs an access control function.
Drawings
Fig. 1 is an architecture diagram of an NFC communication system according to an embodiment of the present application.
Fig. 2 is a schematic structural block diagram of a communication apparatus of an NFC device according to an embodiment of the present application.
Fig. 3 is a schematic block diagram of another communication device according to an embodiment of the present disclosure.
Fig. 4 is a schematic block diagram of another communication device provided in an embodiment of the present application.
Fig. 5 is a schematic block diagram of another communication device provided in an embodiment of the present application.
Fig. 6 is a schematic block diagram of another communication device provided in an embodiment of the present application.
Fig. 7 is a schematic structural block diagram of a user equipment according to an embodiment of the present application.
Fig. 8 is a schematic structural block diagram of another user equipment provided in an embodiment of the present application.
Fig. 9 is a schematic structural block diagram of another user equipment provided in an embodiment of the present application.
Fig. 10 is a schematic structural block diagram of another user equipment provided in an embodiment of the present application.
Fig. 11 is a schematic structural block diagram of a communication system according to an embodiment of the present application.
Fig. 12 is a schematic structural block diagram of another two communication systems provided in the embodiment of the present application.
Fig. 13 is a schematic flow chart diagram of a communication method according to an embodiment of the present application.
Fig. 14 is a schematic flow chart diagram of another communication method provided in the embodiment of the present application.
Fig. 15 is a schematic flow chart diagram of another communication method provided in an embodiment of the present application.
Detailed Description
The technical solution in the present application will be described below with reference to the accompanying drawings.
The present application relates to NFC technology, and devices using this NFC technology are collectively referred to herein as NFC devices. For example, the NFC device includes but is not limited to: smart cards, card readers, cell phones, smart watches, and the like. The NFC equipment can be applied to various scenes such as an access control system, a payment system, a ticket system, an attendance system and the like.
Fig. 1 shows an architecture diagram of an NFC communication system according to an embodiment of the present application.
As shown in fig. 1, in the NFC communication system 10, two NFC devices, for example, a first NFC device 101 and a second NFC device 102 shown in fig. 1, are generally included. The first NFC device 101 and the second NFC device 102 are each provided with a coil and a related circuit, and data transmission is achieved between the first NFC device and the second NFC device through a radio frequency field generated by the coil.
In some scenarios, the first NFC device 101 may be a POS machine including a card reader, and the second NFC device 102 may be a card in NFC communication with the POS machine; for another example, in other scenarios, the first NFC device 101 may be an access control device including a card reader, and the second NFC device 102 may be a mobile phone for unlocking the access control device, where the mobile phone includes access control card data for unlocking the access control device.
For such NFC communication systems, there are currently a number of standard protocols within the industry to specify data communication between NFC devices, including, for example: ISO14443, ISO15693, etc., wherein the communication distance specified by ISO14443 is short, typically 7cm-15 cm. In this case, when a user uses an NFC device, the NFC device needs to establish a radio frequency field with another NFC device, and the distance between the NFC device and the other NFC device needs to satisfy the short communication distance, which results in poor user experience of the NFC device.
In view of this, the present application provides a communication apparatus, which can be applied to the NFC device to solve the technical problem of poor user experience caused by a close NFC communication distance of the NFC device.
Fig. 2 shows a schematic structural block diagram of a communication apparatus 200 of an NFC device according to an embodiment of the present application. Specifically, the communication apparatus 200 may perform communication between the user device 300 and the NFC device 400. The distance between the communication apparatus 200 and the NFC device 400 is within the NFC communication distance of the NFC device 400.
As shown in fig. 2, in the embodiment of the present application, the communication apparatus 200 includes: a first ranging module 210, a first NFC module 220, and a first processing module 230.
Specifically, the first ranging module 210 is configured to measure distance information with the user equipment 300, and a communication distance of the first ranging module 210 is greater than a communication distance of the first NFC module 220. The first processing module 230 is configured to control the first NFC module 220 to communicate with the NFC device 400 according to the distance information, so that the NFC device 400 executes a preset function.
Optionally, in this embodiment of the application, the user equipment 300 may be a terminal device such as a mobile phone, which may be controlled by a user, and the communication device 200 performs data communication with the NFC device 400 according to the distance information of the user equipment 300 to control the NFC device 400 to execute a preset function, where the preset function may be flexibly set according to an application scenario of the NFC device 400, so as to meet different requirements of the user in different application scenarios.
As an example, in the case that the NFC device 400 is an access control device, the communication apparatus 200 may control the NFC device 400 to perform door opening and closing functions according to the distance information of the user device 300. In some cases, when the distance between the user equipment 300 and the communication apparatus 200 enters a preset range, the communication apparatus 200 may control the NFC device 400 to perform a door opening function.
As another example, in the case where the NFC device 400 is a POS, the communication apparatus 200 may control the NFC device 400 to perform operations such as card payment according to the distance information of the user device 300.
Of course, in other examples, NFC device 400 may also be other types of devices to perform corresponding functions.
Specifically, to implement data communication between the communication apparatus 200 and the NFC device 400, the communication apparatus 200 includes: a first NFC module 220, where the first NFC module 220 includes but is not limited to an NFC chip, and a coil and related functional circuits for implementing NFC functions are disposed therein. It can be understood that, corresponding to the first NFC module 220 in the communication apparatus 200, an NFC module may also be correspondingly disposed in the NFC device 400, and a specific scheme of a related art may be referred to in an NFC data communication process between the NFC device 400 and the communication apparatus 200, which is not described herein in detail.
In addition, in order to implement the communication apparatus 200 to implement the distance measurement for the user equipment 300, the communication apparatus 200 includes a first ranging module 210, and a communication distance of the first ranging module 210 is greater than a communication distance of the first NFC module 220. When the ue 300 is far away from the communication device 200, the first ranging module 210 with a far communication distance is utilized to measure the distance information between the ue 300 and the ue. Based on the distance information, the first processing module 230 may further control the first NFC module 220 to perform data communication with the NFC device 400, so that the NFC device 400 executes a preset function in time.
According to the technical scheme of the embodiment of the application, the communication device 200 is arranged between the user equipment 300 and the NFC device 400, the user equipment 300 and the NFC device 400 do not need to perform the preset function through NFC communication within a short distance range, but the distance information between the user equipment 300 and the user equipment can be measured through the first ranging module 210 with a large communication distance, and according to the distance information, the communication device 200 can perform data communication with the NFC device 400 through controlling the first NFC module 220 in advance, so that the NFC device 400 performs the preset function, and the user requirements are met.
Therefore, according to the technical scheme, the communication device 200 can control the NFC device 400 to complete the preset function under the condition that the user does not sense the NFC device 400, so that the use experience of the user on the NFC device 400 can be improved to a greater extent, and the communication device 200 still controls the first NFC module 220 to communicate with the NFC device 400 without improving the NFC device 400, so that the technical scheme can be compatible with the existing NFC device.
In some possible embodiments, the first ranging module 210 is an Ultra Wide Band (UWB) module, and further, the UWB module may be a high-precision UWB module. Specifically, the UWB module may be a UWB chip. The UWB chip may be used to implement UWB communication technology. Based on the UWB chip and the UWB communication technology, the distance information which is high in precision, strong in multi-path resolution capability and capable of resisting relay attack based on electromagnetic waves can be measured.
Alternatively, the distance information measured by using the UWB chip may include, in addition to the distance between the UWB chip and the user equipment 300, a moving direction of the user equipment 300 with respect to the UWB chip, for example, a moving direction in which the user equipment 300 is located close to the UWB chip or a moving direction away from the UWB chip. Combining the distance and the moving direction, the UWB chip can obtain more accurate related information of the user equipment 300.
Through the technical scheme of this embodiment, the UWB chip is used as the first ranging module 210, so that the distance information that the user equipment 300 is relatively accurate and has relatively high security can be measured, and the accuracy that the subsequent first processing module 230 controls the NFC device to execute the preset function according to the relatively accurate distance information is favorably improved, thereby further improving the user experience.
Fig. 3 shows a schematic block diagram of another communication device 200 provided in the embodiment of the present application.
As shown in fig. 3, in the embodiment of the present application, the communication apparatus 200 further includes: a first storage module 240, where the first storage module 240 is configured to store function data of the user equipment 300, where the function data corresponds to a preset function of the NFC device 400. In this case, the first processing module 230 is configured to control the first NFC module 220 to perform data communication with the NFC device 400 according to the distance information and the function data.
In an actual application process, in order to enhance the security of the NFC device 400 executing the preset function, the communication device 200 needs to acquire the function data of the user equipment 300 and perform data communication with the NFC device 400 by using the function data, in addition to acquiring the distance information of the user equipment 300, and the NFC device 400 executes the preset function only when acquiring the correct function data.
As an example, in the case that the NFC device 400 is an access control device, the function data of the user device 300 is access control data corresponding to the access control, and the communication device 200 may control the NFC device 400 (i.e., the access control device) to perform the door opening and closing function according to the distance information of the user device 300 and the access control data.
In other examples, in the case where the NFC device 400 is another type of functional device, the functional data of the user device 300 corresponds to a function to be implemented by the functional device, in other words, the functional data of the user device 300 is data that must be used when the functional device implements the function.
The function data of the user equipment stored in the communication apparatus 200 may be specific function data for the user equipment or general function data applicable to a plurality of user equipments.
Through the technical solution of the embodiment of the present application, the communication device 200 is provided with the first storage module 240, and the first storage module 240 is used for storing the function data of the user equipment 300, such as the access control data. When the communication device 200 needs to control the NFC device 400 to execute the preset function, the function data stored in the NFC device 400 can be directly utilized without being acquired from the outside, so that the function data is prevented from being stolen or tampered in an external transmission process, effective control of the communication device 200 on the NFC device 400 and the security performance of the NFC device 400 are ensured, further, the execution speed and efficiency of the communication device 200 controlling the NFC device to execute the preset function can be improved, and the use experience of the user on the NFC device 400 is further improved.
For convenience of description, the following description will be made by taking the NFC device 400 as an access control device and taking the function data of the user device 300 as access control data as an example. It can be understood that, in the case that the NFC device 400 is an access control device, the NFC device 400 may include a card reader and an access control power device, where the card reader may be understood as an NFC module, which may perform NFC communication with the first NFC module 220 in the communication device 200, and the card reader may be used to control the access control power device to perform an access control function.
In the embodiment of the present application, the communication device 200 includes a first storage module 240 therein, and the first storage module 240 may be used to store entrance guard data of the user equipment 300 in advance. After the distance information of the user equipment 300 is measured by the first ranging module 210 in the communication device 200, the first ranging module 210 is configured to determine whether the distance information enters a preset range, and under the condition that the distance information enters the preset range, the first processing module 230 may simulate a scenario where the access card approaches the access control through the access control data, so that the access control performs a door opening operation.
In some embodiments, in the case that the distance information enters the preset range, the first processing module 230 is configured to control the first NFC module 220 to communicate with the door based on the door access data of the user device 300, so that the door access device performs a door opening function.
Alternatively, the first ranging module 210 may detect the distance between the first ranging module 210 and the ue 300 in real time, and when the distance becomes smaller, it may be determined that the ue 300 moves close to the communication apparatus 200 where the first ranging module 210 is located. Further, in the case that the distance enters the preset range, the first processing module 230 may be configured to control the first NFC module 220 to communicate with the door based on the door access data of the user equipment 300, so that the door access device performs a door opening function.
Through the technical scheme of this application embodiment, can realize the entrance guard control of user's no perception, reach the purpose that no perception opened the door to promote the user and experience the use of entrance guard. In addition, according to the technical solution, since the first ranging module 210 with a large communication distance is used to measure the distance information between the first ranging module and the user equipment 300, and according to the distance information, the communication device 200 can perform data communication with the access control device through the first processing module 230 in advance, so that the access control device can perform the door opening function in advance, the technical solution provides a possibility that multiple people simultaneously open the door.
Further, in the case that the distance information between the first ranging module 210 and the user equipment 300 exceeds the preset range after entering the preset range, the first processing module 230 may simulate a scene in which the access card is far away from the access control equipment, so that the access control equipment performs a door closing operation.
In some embodiments, the first processing module 230 may be configured to stop the first NFC module 220 from communicating with the door access device, so that the door access device performs a door closing function.
Optionally, the first ranging module 210 may detect a distance between the first ranging module 210 and the user equipment 300 in real time, and after the distance enters a preset range, if the distance is detected to be gradually increased, it may be determined that the user equipment 300 moves away from the communication device 200 where the first ranging module 210 is located, until the distance exceeds the preset range again, the first processing module 230 may be configured to stop the first NFC module 220 from communicating with the door access device, so that the door access device executes a door closing function.
Through the technical scheme of this embodiment, on the basis of realizing that the door is opened to the noninductive perception, can also realize the function that the door was closed to the insensitivity to the realization realizes realizing comprehensive and comparatively reliable control to entrance guard's equipment.
Optionally, on the basis of the foregoing application embodiment, the first processing module 230 is further configured to perform identity authentication with the user equipment 300, and in a case that the authentication is successful, the first processing module 230 is configured to notify the first ranging module 210, so that the first ranging module 210 measures distance information with the user equipment 300.
Optionally, the first processing module 230 may perform data interaction with the user equipment 300 through a communication module (e.g., the first communication module 251 in the following embodiments) in the communication apparatus 200 or the first ranging module 210 to implement identity authentication. In some possible examples, the first ranging module 210 may not be in real-time operation. The initial state of the first ranging module 210 may be a sleep state, which may be notified by the first processing module 230 to wake up, thereby entering an active state to perform the measurement of the distance information with the ue 300.
The first processing module 230 may be configured to perform identity authentication with the user equipment 300 to determine whether the user equipment 300 is a legal device capable of controlling the NFC apparatus 400 to perform a preset function. For example, in the case that the NFC device 400 is an access control device, the identity authentication performed by the first processing module 230 may be used to determine whether the user device 300 has a legal right in the access control system.
In case the identity authentication between the first processing module 230 and the user equipment 300 is successful, the first processing module 230 is configured to wake up the first ranging module 210 to enable the first ranging module 210 to start ranging. On the contrary, in case that the identity authentication between the first processing module 230 and the ue 300 fails, the first processing module 230 does not wake up the first ranging module 210 for ranging, and the ue 300 cannot control the NFC apparatus 400 to perform the preset function through the communication device 200.
Through the technical solution of the embodiment of the present application, the first processing module 230 can perform the identity authentication with the user equipment 300, and in case that the identity authentication is successful, the first processing module 230 notifies the first ranging module 210 to perform the ranging and then the first processing module 230 can perform the subsequent action according to the distance information, and this technical solution can prevent the unauthorized user equipment from controlling the NFC device 400 through the communication device 200, and ensure the validity of the user equipment 300 in the whole system and the security of the NFC device.
Alternatively, the identity authentication between the first processing module 230 and the user equipment 300 may be implemented in various ways.
As an example, the first processing module 230 is configured to perform identity authentication with the user equipment 300 based on a password and/or a key. The password may be a dynamic password or a static password, and the key may be a key preset in the communication apparatus 200 and the user equipment 300, or a key generated by a cryptographic algorithm.
In some embodiments, the first processing module 230 has an arithmetic unit supporting a space 2+ algorithm, where the space 2+ algorithm is an enhanced Key sharing (park) method, and through the space 2+ algorithm, a shared Key may be generated and bidirectional identity authentication between the first processing module 230 and the user equipment 300 may be implemented.
Alternatively, in other embodiments, the first processing module 230 may also implement password authentication based on the space 2+ algorithm, that is, the identity authentication between the first processing module 230 and the user device 300 is implemented by combining the password and the space 2+ algorithm.
Alternatively, in another embodiment, the first processing module 230 and the user equipment 300 may perform identity authentication through a Public Key Infrastructure (PKI) system. The embodiment of the present application does not limit a specific implementation manner of the identity authentication between the first processing module 230 and the user equipment 300.
Optionally, in the process of performing ranging by the first ranging module 210, the first ranging module 210 may be configured to send a first ranging session to the ue 300, receive a first ranging response session sent by the ue 300, and measure distance information between the ue 300 according to the first ranging session and the first ranging response session.
As an example, in this embodiment, the first ranging module 210 may utilize a time of flight (TOF) or a two-way time of flight (TW-TOF) method to measure distance information with the user device 300.
Optionally, the first ranging session sent by the first ranging module 210 and the received first ranging response session may include related information for ranging and direction finding, and the first ranging response session may be a response session sent when the user equipment 300 receives the first ranging session. The first ranging module 210 may measure a mutual distance and a mutual direction with the user equipment 300 through the related information in the first ranging session and the first ranging response session.
Optionally, the first ranging module 210 and the ue 300 may perform multiple session interactions, that is, in addition to the first ranging module 210 sending the first ranging session to the ue 300 and receiving the first ranging response session sent by the ue 300, the first ranging module 210 may also send a second ranging session or more to the ue 300, and correspondingly, the first ranging module 210 may also receive the second ranging response session or more sent by the ue. The first ranging module 210 may measure and obtain more accurate distance information according to the related information of multiple sessions.
In order to further improve the security performance of the first ranging module 210 during the ranging process and prevent the ranging session from being tampered and attacked, the ranging session between the first ranging module 210 and the ue 300 can be encrypted by the first processing module 230.
Specifically, after the first processing module 230 is configured to encrypt the first ranging session, the first ranging module 210 is configured to send the encrypted first ranging session to the user equipment 300 and receive the encrypted first ranging response session sent by the user equipment 300, and the first processing module 230 is further configured to decrypt the encrypted first ranging response session.
Optionally, in this embodiment of the application, the first processing module 230 may encrypt the first ranging session and decrypt the first ranging response session through a symmetric or asymmetric encryption and decryption algorithm.
As an example, the communication apparatus 200 and the user equipment 300 have a preset key therein, and both the first processing module 230 and the user equipment 300 can encrypt and decrypt the ranging session by using the preset key.
As another example, the first processing module 230 and the user device 300 have an arithmetic unit supporting a space 2+ algorithm, and the session key may be generated through the space 2+ algorithm. The first processing module 230 and the user equipment 300 may both encrypt and decrypt the ranging session using the session key.
As a third example, the first processing module 230 and the user equipment 300 may perform key negotiation to obtain a session key, and the first processing module 230 and the user equipment 300 may encrypt and decrypt the ranging session using the session key obtained through the negotiation. Optionally, the first processing module 230 may perform key agreement through a plurality of key agreement algorithms, including but not limited to: RSA algorithm, Elliptic Curve Cryptography (ECC) algorithm, ECDH algorithm, etc.
Alternatively, in this embodiment of the present application, the session key for encrypting and decrypting the ranging session may be the same key or a different key from the key for performing the identity authentication between the communication apparatus 200 and the user equipment 300 in the above embodiment. In the case of the same key, the internal algorithm of the first processing module 230 may be relatively simplified, which is beneficial to improve the execution efficiency of the first processing module 230. Under the condition of different keys, the first processing module 230 respectively executes the processes of identity authentication and session encryption through the different keys, so that external attacks can be further resisted, and the security performance of the whole system is improved.
In some embodiments, the first ranging module 210 may have a communication function in addition to the ranging function, that is, the first processing module 230 may implement data interaction with the user equipment 300 through the first ranging module 210, for example, the first processing module 230 may implement data interaction such as identity authentication and/or key agreement with the user equipment 300 through the first ranging module 210.
Alternatively, in other embodiments, the communication apparatus 200 may further include a communication module, so that the first processing module 230 may implement data interaction with the user device 300 through the communication module, for example, the first processing module 230 may implement data interaction such as identity authentication and/or key agreement with the user device 300 through the communication module.
Fig. 4 shows a schematic block diagram of another communication device 200 provided in the embodiment of the present application.
As shown in fig. 4, in the embodiment of the present application, the communication apparatus 200 further includes: a first communication module 251. The first communication module 251 is used to perform pairing of the communication device 200 and the user equipment 300 before the first ranging module 210 is used to measure the distance information with the user equipment 300. In case of successful pairing, the first communication module 251 is configured to wake up the first ranging module 210, so that the first ranging module 210 measures distance information with the user equipment 300.
Optionally, in this embodiment, the first communication module 251 may be a communication module operating in real time, which may perform pairing of the communication apparatus 200 and the user equipment 300 before the first ranging module 210 measures the distance information with the user equipment 300, so that the user equipment 300 can perform subsequent data interaction with the communication apparatus 200.
Further, in case of successful pairing, the first communication module 251 wakes up the first ranging module 210 again to enable the first ranging module 210 to start ranging. On the contrary, in case of pairing failure, the first communication module 251 does not wake up the first ranging module 210 for ranging, and the ue 300 cannot control the NFC apparatus 400 to perform the preset function through the communication device 200.
Therefore, in the embodiment of the present application, the pairing process can also be understood as an authentication process between the communication apparatus 200 and the user equipment 300, which can further improve the security performance of the whole system. In addition, before the first communication module 251 wakes up the first ranging module 210, the first ranging module 210 may be in a sleep state, so as to save the overall power consumption of the first ranging module 210 and the communication device 200 in which the first ranging module is located.
In the above-mentioned embodiment, the first communication module 251 may directly wake up the first ranging module 210 to enable the first ranging module 210 to start ranging. Alternatively, in other embodiments, the first communication module 251 may indirectly wake up the first ranging module 210 through the first processing module 230.
Specifically, in the case that the pairing of the communication apparatus 200 and the user device 300 is successful, the first communication module 251 is configured to notify (e.g., wake up) the first processing module 230, and the first processing module 230 is configured to perform identity authentication with the user device 300 through the first communication module 251. In case of successful authentication, the first processing module 230 is configured to wake up the first ranging module 210, so that the first ranging module 210 measures the distance information with the user equipment 300. In this embodiment, two authentication processes are performed between the communication apparatus 200 and the user equipment 300, which can further improve the security performance of the whole system.
Optionally, the power consumption of the first communication module 251 may be less than the power consumption of the first ranging module 210, so as to save the energy consumption required for the real-time operation of the first communication module 251, and improve the overall performance of the entire system.
Optionally, the communication distance of the first communication module 251 may be greater than the communication distance of the first ranging module 210, in this case, the communication apparatus 200 may implement pairing with the user equipment 300 or even an identity authentication process when the communication apparatus has a longer distance from the user equipment 300, so that the user equipment 300 may control the NFC apparatus 400 to perform a preset function through the communication apparatus 200 as far as possible, thereby further improving the user experience of the user.
As an example, in the above application embodiment, the first communication module 251 includes but is not limited to a Bluetooth (blue tooth) module, for example, the Bluetooth module may specifically be a Bluetooth Low Energy (BLE) chip. This bluetooth chip has advantages such as low-power consumption and low cost, and it can run in real time in order to realize pairing with user equipment 300's bluetooth, synthesizes the security performance that promotes entire system and reduces the energy consumption.
In practical applications, a certain ranging configuration parameter is required to be provided between the communication device 200 and the ue 300 for implementing the ranging function, in other words, only when the ranging configuration parameter is stored in the communication device 200, the first ranging module 210 in the communication device 200 can perform ranging communication with the ue 300.
In some examples, the ranging configuration parameters may be pre-stored in the communication apparatus 200 and the user equipment 300.
Alternatively, in other examples, fig. 5 shows a schematic block diagram of another communication apparatus 200 provided in an embodiment of the present application.
As shown in fig. 5, in the embodiment of the present application, the communication apparatus 200 further includes: the second communication module 252, before the first ranging module 210 is used to measure the distance information with the ue 300, the second communication module 252 is used to transmit the ranging configuration parameters between the first ranging module 210 and the ue 300.
Specifically, the communication device 200 may transmit the ranging configuration parameter through the second communication module 252, so that the first ranging module 210 can implement its ranging function. Compared to the pre-stored ranging configuration parameters, according to the technical solution of this embodiment, the communication device 200 can transmit the ranging configuration parameters of the first ranging module 210 through the second communication module 252 in real time, so as to facilitate updating and upgrading of the ranging configuration parameters, and enable the ranging performance of the first ranging module 210 to be better.
Optionally, in this embodiment of the present application, the second communication module 252 may be a short-range communication module or may also be a long-range communication module, for example, the second communication module 252 includes but is not limited to: a bluetooth module, a mobile communication module (e.g., 3G, 4G, 5G communication modules, etc.), a wireless communication module, etc., and the embodiment of the present application does not limit the specific type of the communication module.
It should be noted that the second communication module 252 may be the same module as the first communication module 251. For example, the first communication module 251 and the second communication module 252 may both be bluetooth modules, that is, the bluetooth modules may be configured to perform transmission of the ranging configuration parameters of the first ranging module 210, perform pairing with the user equipment 300 and wake up of the first ranging module 210, and perform data interaction such as identity authentication and/or key agreement with the user equipment 300.
Optionally, in the embodiment of the above application, the first processing module 230 may be a Secure Element (SE), and specifically, the first processing module 230 may be an SE chip or may also be referred to as a Secure chip. The security chip is provided with an encryption/decryption logic circuit, so that external malicious analysis attack can be prevented, and data security is protected.
By the technical scheme, the security chip is used as the first processing module 230 to process data such as distance information, so that the security performance of the communication device 200 can be improved, and the overall security performance of a system where the communication device 200 is located can be improved.
Optionally, in order to further improve the security performance of the communication device 200, the first storage module 240 may be a storage unit in a secure chip, in other words, the first storage module 240 and the first processing module 230 may be integrated in the same secure chip. Alternatively, in some alternative embodiments, the first storage module may also be a storage unit in another chip, for example, the first storage module 240 may be a storage unit in a communication chip (e.g., a bluetooth chip). The embodiment of the present application does not limit the specific setting manner of the first storage module 240.
Fig. 6 shows a schematic block diagram of another communication device 200 provided in the embodiment of the present application.
As shown in fig. 6, in the embodiment of the present application, the communication apparatus 200 may include: BLE chip, UWB chip, SE chip and NFC chip.
The BLE chip runs in real time and is used for bluetooth pairing with the user equipment 300, and the UWB chip can be awakened under the condition that pairing is successful, so that the UWB chip measures distance information between the user equipment 300 and the user equipment.
Alternatively, in case of successful pairing, the BLE chip may notify (e.g., wake up) the SE chip, which performs identity authentication with the user equipment 300 through the BLE chip, and in case of successful authentication, the SE chip wakes up the UWB chip so that the UWB chip measures distance information with the user equipment 300.
Further, the SE chip may acquire distance information measured by the UWB chip, and may perform NFC communication with the NFC device 400 through the NFC chip according to the distance information.
Optionally, the SE chip stores function data of the user equipment 300, and the SE chip may perform NFC communication with the NFC device 400 through the NFC chip according to the distance information and the function data.
As an example, in a case that the NFC device 400 is an access control device and the function data of the user device 300 is access control data, the communication device 200 may control the access control device to perform an access control function according to the distance information of the user device 300, and specifically, the communication device 200 may simulate a related operation of an access card according to the distance information of the user device 300, so as to control the access control device to perform the access control function.
In some embodiments, when the distance between the user equipment 300 and the SE chip is within the preset range, the SE chip may perform data interaction with the access control device through the NFC chip based on the stored function data of the user equipment 300, so that the access control device performs a door opening operation. When the distance between the user equipment 300 and the NFC chip exceeds the preset range after entering the preset range, the SE chip may stop data interaction between the NFC chip and the door control device, so that the door control device performs a door closing operation.
Through the technical solution of the embodiment of the present application, the communication apparatus 200 may include: four function chips of BLE chip, UWB chip, SE chip and NFC chip, this communication device 200 can have this UWB comparatively for accurate range finding direction finding characteristic concurrently, the stable transmission characteristic of low-power consumption of BLE to and the security characteristic of SE, and can also utilize NFC and current NFC equipment 400 to realize alternately. Therefore, with the communication apparatus 200, the user device 300 controlled by the user can not only safely and effectively control the existing NFC device 400, but also realize the user's imperceptibility, thereby improving the user experience of the NFC device 400.
In the above application embodiment, as a possible implementation manner, the communication apparatus 200 and the NFC apparatus 400 may be two physical modules that are separated from and adjacent to each other.
In order to provide a good NFC communication effect between the communication device 200 and the NFC device 400, the communication device 200 may be closer to the NFC device 400, and the NFC modules inside the communication device 200 and the NFC device 400 may be arranged relatively, specifically, the coils inside the communication device 200 and the NFC device 400 are also arranged relatively, so as to ensure that a stable radio frequency field is provided between the communication device 200 and the NFC device 400, thereby implementing stable and reliable data communication.
Alternatively, the communication apparatus 200 and the NFC device 400 may be arranged side by side on the same plane, or the communication apparatus 200 and the NFC device 400 may be arranged stacked in the same direction.
In the technical solution of this embodiment, the existing NFC device 400 does not need to be modified, and only the communication apparatus 200 is set near the existing NFC device 400, so that the actual use requirement can be met, and the existing NFC device 400 is maximally compatible, so as to improve the use experience of the user for the NFC device 400.
In other embodiments, the communication apparatus 200 may also be integrated inside the NFC device 400. Under this embodiment, the NFC device 400 and the communication apparatus 200 can be easily mounted and dismounted in the actual application process, and the appearance is more attractive.
The above describes, with reference to fig. 2 to fig. 6, a related technical solution applied to the communication apparatus 200 between the user equipment 300 and the NFC device 400 according to an embodiment of the present application, and the following describes, with reference to fig. 7 to fig. 10, a related technical solution of the user equipment 300 according to an embodiment of the present application.
Fig. 7 shows a schematic structural block diagram of a user equipment 300 provided in an embodiment of the present application.
As shown in fig. 7, in the embodiment of the present application, the user equipment 300 includes: a second ranging module 310. The second ranging module 310 is configured to measure distance information between the communication device 200 of the NFC apparatus 400 and the second ranging module 310, where a communication distance of the second ranging module 310 is greater than a communication distance of the first NFC module 220 in the communication device 200, and the distance information is used to instruct the communication device 200 to control the first NFC module 220 to communicate with the NFC apparatus 400, so that the NFC apparatus 400 performs a preset function.
Optionally, in some embodiments, the second ranging module 310 may cooperate with the first ranging module 210 in the communication apparatus 200 described in the above embodiments to jointly measure and obtain the distance information between the user equipment 300 and the communication apparatus 200.
Alternatively, in other embodiments, the second ranging module 310 may measure the distance information with the communication device 200 separately and transmit the distance information to the communication device 200.
Optionally, the second ranging module 310 is a UWB chip. Specifically, the second ranging module 310 may communicate with the first ranging module 210 in the communication apparatus 200 to jointly measure the distance and direction between the user equipment 300 and the communication apparatus 200.
Optionally, in some embodiments, the NFC device 400 is an access control device, and when the distance information enters a preset range, the distance information is used to instruct the communication device 200 to control the first NFC module 220 to communicate with the access control device, so that the access control device performs a door opening function; correspondingly, when the distance information exceeds the preset range after entering the preset range, the distance information is used for instructing the communication device 200 to control the first NFC module 220 to stop communicating with the access control device, so that the access control device executes a door closing function.
Specifically, in this embodiment, the specific scheme that the communication device 200 controls the NFC device 400 (for example, an access control device) according to the distance information may refer to the description of the above embodiment, and redundant description is not repeated here.
Fig. 8 shows a schematic structural block diagram of another user equipment 300 provided in the embodiment of the present application.
As shown in fig. 8, in the embodiment of the present application, the user equipment 300 further includes: a second processing module 320, configured to perform identity authentication with the communication device 200, where, in case of successful authentication, the second processing module 320 is configured to notify the second ranging module 310, so that the second ranging module 310 measures distance information with the communication device 200.
Optionally, the second processing module 320 may perform data interaction between the communication module (e.g., the third communication module 331 in the following embodiment) in the user equipment 300 or the second ranging module 310 and the communication device 200 to implement identity authentication.
Optionally, in some embodiments, the second processing module 320 is configured to perform identity authentication with the communication device 200 based on a password and/or a key.
Specifically, the specific technical solution of the second processing module 320 in the embodiment of the present application for performing identity authentication may refer to the related technical solution of the first processing module 230 in the above embodiment for performing identity authentication. Through mutual identity authentication of the second processing module 320 in the user equipment 300 and the first processing module 230 in the communication device 200, mutual authentication between the user equipment 300 and the communication device 200 can be ensured, so that the security system of the whole system is further improved.
Optionally, in the process of performing ranging by the second ranging module 310, the second ranging module 310 may be configured to receive a first ranging session sent by the communication device 200, and send a first ranging response session to the communication device 200, where the first ranging session and the first ranging response session are used to measure distance information between the second ranging module 310 and the communication device 200.
Specifically, in the embodiment of the present application, the second ranging module 310 may be adapted to the first ranging module 210 in the communication device 200 for ranging. The second ranging module 310 can perform session interaction with the first ranging module 210, that is, the second ranging module 310 can be configured to receive the first ranging session sent by the first ranging module 210 and send a first ranging response session to the first ranging module 210.
For the session interaction process between the first ranging module 210 and the second ranging module 310, reference may also be made to the relevant description of the above embodiments, and redundant description is not repeated here.
In order to further improve the security performance of the second ranging module 310 during the ranging process and prevent the ranging session from being tampered and attacked, the ranging session between the second ranging module 310 and the communication device 200 can be encrypted by the second processing module 320.
Specifically, the second ranging module 310 is configured to receive an encrypted first ranging session sent by the communication device 200, the second processing module 320 is configured to decrypt the encrypted first ranging session and encrypt the first ranging response session, and the second ranging module 310 is configured to send the encrypted first ranging response session to the communication device 200.
Optionally, in this embodiment, the second processing module 320 may decrypt the first ranging session and encrypt the first ranging response session through a symmetric or asymmetric encryption and decryption algorithm.
As an example, the communication apparatus 200 and the user equipment 300 have a preset key therein, and the first processing module 230 in the communication apparatus 200 and the second processing module 320 in the user equipment 300 can both encrypt and decrypt the ranging session by using the preset key.
As another example, the first processing module 230 and the second processing module 320 have arithmetic units supporting a space 2+ algorithm, and the session key may be generated through the space 2+ algorithm. The first processing module 230 and the second processing module 320 may each encrypt and decrypt the ranging session using the session key.
As a third example, the first processing module 230 and the second processing module 320 may perform key negotiation to obtain a session key, and the first processing module 230 and the second processing module 320 may encrypt and decrypt the ranging session using the session key obtained through the negotiation. Optionally, the second processing module 320 may perform key agreement through a plurality of key agreement algorithms, including but not limited to: RSA, ECC, ECDH, etc.
Alternatively, in this embodiment of the present application, the session key for encrypting and decrypting the ranging session may be the same key or a different key from the key for performing the identity authentication between the communication apparatus 200 and the user equipment 300 in the above embodiment. In the case of the same key, the internal algorithm of the second processing module 320 may be relatively simplified, which is beneficial to improve the execution efficiency of the second processing module 320. Under the condition of different keys, the second processing module 320 respectively executes the processes of identity authentication and session encryption through the different keys, so as to further resist external attacks and improve the security performance of the whole system.
Optionally, in the above-mentioned application embodiment, the second processing module 320 includes, but is not limited to, a secure chip.
Fig. 9 shows a schematic structural block diagram of another user equipment 300 provided in the embodiment of the present application.
As shown in fig. 9, in the embodiment of the present application, the user equipment 300 further includes: a third communication module 331. The third communication module 331 is used to perform pairing of the user equipment 300 and the communication apparatus 200 before the second ranging module 310 is used to measure the distance information with the communication apparatus 200. In case of successful pairing, the third communication module 331 is configured to wake up the second ranging module 310, so that the second ranging module 310 measures the distance information with the communication device 200.
Optionally, in this embodiment of the application, the third communication module 331 may be a communication module operating in real time. Alternatively, the third communication module 331 may communicate with the first communication module 251 in the communication apparatus 200.
The third communication module 331 may perform pairing of the communication apparatus 200 and the user equipment 300 before the second ranging module 310 measures the distance information with the communication apparatus 200, so that the communication apparatus 200 can perform subsequent data interaction with the user equipment 300.
In the above-mentioned application embodiment, the third communication module 331 may directly wake up the second ranging module 310 to enable the second ranging module 310 to start ranging. Alternatively, in other embodiments, the third communication module 331 may also wake up the second ranging module 310 indirectly through the second processing module 320.
In some possible embodiments, in case that the pairing of the communication apparatus 200 and the user device 300 is successful, the third communication module 331 is configured to notify (e.g., wake up) the second processing module 320, and the second processing module 320 is configured to perform the identity authentication with the communication apparatus 200 through the third communication module 331. In case of successful authentication, the second processing module 320 is configured to wake up the second ranging module 310, so that the second ranging module 310 measures the distance information with the communication device 200. Optionally, the power consumption of the third communication module 331 is less than the power consumption of the second ranging module 310, and/or the communication distance of the third communication module 331 is greater than the communication distance of the second ranging module 310.
As an example, in the above application embodiment, the third communication module 331 includes, but is not limited to, a bluetooth chip. The user equipment 300 realizes bluetooth pairing and data transmission with the bluetooth chip in the communication device 200 through the bluetooth chip.
Corresponding to the second communication module 252 in the communication apparatus 200, in the user equipment 300 provided in this embodiment of the present application, further including: a fourth communication module, configured to transmit the ranging configuration parameters between the second ranging module 310 and the communication device 200.
Optionally, in this embodiment of the present application, the fourth communication module may be a short-range communication module or may also be a long-range communication module, and this embodiment of the present application does not limit a specific type of the fourth communication module.
The fourth communication module may be the same as the third communication module 331 described above. For example, the fourth communication module and the third communication module 331 may both be bluetooth modules, that is, the bluetooth modules may be used to perform transmission of the ranging configuration parameters of the second ranging module 310, perform pairing with the communication device 200 and wake up the second ranging module 310, and perform data interaction such as identity authentication and/or key agreement with the communication device 200.
Fig. 10 shows a schematic structural block diagram of another user equipment 300 provided in the embodiment of the present application.
As shown in fig. 10, in the embodiment of the present application, the user equipment 300 further includes: a second NFC module 340, where the second NFC module 340 is configured to communicate with the NFC device 400, so that the NFC device 400 executes a preset function.
Specifically, in this embodiment, when the distance between the user equipment 300 and the NFC device 400 is within the NFC communication distance, the user equipment 300 may directly interact with the NFC device 400 through the second NFC module 340, so that the NFC device 400 executes the preset function.
Optionally, the user equipment 300 stores therein function data corresponding to the NFC apparatus 400. For example, in the case where the NFC device 400 is an access control device, the function data may be access control device data. For a detailed technical solution of directly performing NFC communication between the user equipment 300 and the NFC device 400, reference may be made to related technologies, which are not described herein for too much details.
Through the technical scheme of the embodiment of the application, when the communication device 200 fails or has other unexpected conditions, the user equipment 300 can still perform normal interaction with the NFC device 400 through the second NFC module 340 to control the NFC device 400, so as to further improve the user experience of the user on the NFC device 400.
In addition, fig. 10 shows a schematic diagram of interaction between the modules in the user equipment 300 and the modules in the above communication apparatus 200. As described in the above embodiments, the second ranging module 310 in the ue 300 is of the same type as the first ranging module 210 in the communication apparatus 200, and they are in communication with each other; similarly, the third communication module 331 in the user equipment 300 is of the same type as the first communication module 251 in the communication apparatus 200, and both realize mutual communication. The second NFC module 340 in the user device 300 and the first NFC module 220 in the communication apparatus 200 can communicate with the NFC device 400.
Fig. 11 shows a schematic block diagram of a communication system 20 according to an embodiment of the present application.
As shown in fig. 11, the communication system 20 may include the communication apparatus 200 in any of the above embodiments, the user equipment 300 in any of the above embodiments, and the NFC device 400.
In some embodiments, the NFC device 400 may be a door access device, and the communication device 200 is configured to communicate with the user device 300 and the door access device, so that the door access device performs a door access function.
Fig. 12 is a schematic block diagram of another two communication systems 20 provided in the embodiment of the present application.
As shown in fig. 12 (a) and (b), in the embodiment of the present application, the NFC device 400 is an access control device, which may include a card reader 410 and an access control power device 420. The card reader 410 includes an NFC module 411 therein, and the NFC module 411 can communicate with the first NFC module 220 in the communication device 200.
As shown in fig. 12 (a), the communication device 200 is disposed side by side on one side of the card reader 410, and both the communication device 200 and the card reader 410 can be fixedly disposed on a wall surface.
Alternatively, as shown in fig. 12 (b), the card reader 410 is fixedly installed on a wall surface, and the communication device 200 may be fastened to a side of the card reader 410 away from the card reader 410.
Alternatively, the communication device 200 may be powered by wall power, the card reader 410, or a built-in battery. The communication device 200 can interact with the card reader 410 through NFC on the one hand, and on the other hand, the NFC interaction of the card reader 410 with other smart cards or devices carrying smart card data is not affected.
For the communication apparatus 200 and the user equipment 300, the specific internal structure thereof can be referred to the relevant description of the above embodiments. In some cases, the user device 300 may control the access control device to perform an access control function through the communication apparatus 200. Or, in other cases, for example, in the case that the communication apparatus 200 is powered off, the user device 300 may directly perform NFC data interaction with the card reader 410 through the second NFC module 340 inside the user device to control the access control device to perform an access control function.
The device embodiment provided by the embodiment of the present application is described above with reference to fig. 2 to 14, and the method embodiment provided by the embodiment of the present application is described below with reference to fig. 13 to 15. It is to be understood that the specific implementation of the method embodiment may correspond to the apparatus embodiment described above, and for brevity, the specific schemes of the method embodiment may refer to the above description, which is not described in detail below.
Fig. 13 is a schematic flow chart diagram illustrating a communication method 500 provided in an embodiment of the present application. The communication method 500 may be applied to a communication system including a user equipment and a communication device, wherein the user equipment may be the user equipment 300 in the above embodiment, and the communication device may be the communication device 200 in the above embodiment.
As shown in fig. 13, a communication method 500 provided in the embodiment of the present application includes the following steps.
S510: and measuring distance information between the communication device and the user equipment, wherein the variation range of the distance information is larger than the communication range of the NFC module in the communication device.
S520: and the communication device communicates with the NFC equipment through the NFC module according to the distance information so that the NFC equipment executes a preset function.
Specifically, in step S510, for the communication apparatus, it may measure distance information with the user equipment. For the user equipment, it may measure distance information to the communication device. In some embodiments, the communication device and the user equipment may be in communication with each other to jointly measure distance information between each other. Alternatively, in other embodiments, only one of the communication device and the user equipment measures distance information to the other.
Specifically, the communication device and the user equipment may each include a ranging module, i.e., the first ranging module 210 and the second ranging module 310 in the above embodiments, which may communicate with each other to jointly measure the distance information between each other. That is, the executing entity of the above step S510 may be the first ranging module 210 and the second ranging module 310.
In addition, the communication device may further include a processing module, and the execution subject of the step S520 may be the first processing module 230 in the above embodiments. The NFC module in this step S520 may be the first NFC module 220 in the above embodiments.
In step S510, the maximum distance between the communication device and the user equipment that can be measured by the first ranging module 210 and the second ranging module 310 may be greater than the communication distance of the first NFC module 220, that is, the range of variation of the distance information measured by the first ranging module 210 and the second ranging module 310 may be greater than the communication range of the first NFC module 220, or the communication distance between the first ranging module 210 and the second ranging module 310 may be greater than the communication distance of the first NFC module 220, or the communication distance between the communication device 200 and the user equipment 300 may be greater than the communication distance between the communication device 200 and the NFC device 400.
Optionally, in some embodiments, the communication device and the user equipment may include: the UWB chip, i.e., the first ranging module 210 and the second ranging module 310, may be a UWB chip.
Fig. 14 shows a schematic flow chart diagram of another communication method 600 provided by an embodiment of the present application.
As shown in fig. 14, in the embodiment of the present application, the communication method 600 may include the following steps.
S610: and storing functional data of the user equipment, wherein the functional data correspond to the preset functions of the NFC equipment.
S640: distance information between the communication device and the user equipment is measured.
S650: and communicating with the NFC equipment through the NFC module according to the distance information and the function data so that the NFC equipment executes a preset function.
Optionally, in this embodiment of the present application, the communication apparatus may further include a first storage module 240, which may store function data of the user equipment in advance, where the function data corresponds to a preset function of the NFC device.
Optionally, step S650 may be an implementation manner of step S520 in the embodiment shown in fig. 13, in which, on the basis of the distance information, the communication device may further communicate with the NFC apparatus 400 through the first NFC module 220 according to the function data, so that the NFC apparatus 400 executes a preset function.
In some possible embodiments, the NFC device may be an access control device including a card reader, and the function data of the user device is access control data. In this case, the step S650 may include: judging whether the distance information enters a preset range or not; and under the condition that the distance information enters the preset range, the NFC module is used for communicating with the entrance guard based on entrance guard data, so that the entrance guard can execute the door opening function.
Further, the communication method 600 may further include: and under the condition that the distance information exceeds the preset range after entering the preset range, stopping the first NFC module from communicating with the entrance guard so that the entrance guard executes the door closing function.
Optionally, as shown in fig. 14, in some embodiments, before step S640, the communication method 600 may further include S630: authentication between the communication device and the user equipment is performed.
Specifically, in step S630, for the communication apparatus, it may perform authentication of the user equipment, and for the user equipment, it may perform authentication of the communication apparatus. Optionally, the communication device and the user equipment may each include a processing module, for example, the communication device includes a first processing module 230, the user equipment includes a second processing module 320, and the first processing module 230 and the second processing module 320 may perform identity authentication between the communication device and the user equipment.
Optionally, in some embodiments, the first processing module 230 and the second processing module 320 may perform data interaction with the ranging module (i.e., the first ranging module 210 and the second ranging module 310) in the user equipment through the communication device to implement identity authentication. Alternatively, in other embodiments, the first processing module 230 and the second processing module 320 may also perform data interaction through other communication modules to implement identity authentication.
Specifically, in case that the mutual identity authentication is successful, step S640 may be performed, where the first ranging module 210 and the second ranging module 310 in the communication device and the user equipment start to measure the distance information between the communication device and the user equipment. Alternatively, in case of successful mutual identity authentication, the first processing module 230 may notify the first ranging module 210, and the second processing module 320 may notify the second ranging module 310, so that the two communicate with each other to measure the distance information between the communication device and the user equipment.
Optionally, in some embodiments, the step S630 may include: password and/or key based identity authentication is performed.
With continuing reference to fig. 14, optionally, before step S640, the communication method 600 may further include S620: pairing between the communication device and the user equipment is performed.
Specifically, in step S640, for the communication apparatus, it may perform pairing with the user equipment, and for the user equipment, it may perform pairing with the communication apparatus. Optionally, the communication device and the user equipment may each include a communication module, for example, the communication device includes a first communication module 251, the user equipment includes a third communication module 331, and the first communication module 251 and the third communication module 331 may perform pairing between the communication device and the user equipment.
Optionally, in case the pairing is successful, the user equipment and the communication device may perform step S630 and subsequent step S640. In this case, the first communication module 251 and the third communication module 331 may respectively notify the first processing module 230 and the second processing module 320, so that the two processing modules perform step S630, and in case of successful identity authentication, the two processing modules respectively wake up the two ranging modules (the first ranging module 210 and the second ranging module 310) to perform step S640.
Alternatively, in case of successful pairing, the user equipment and the communication device may also directly perform step S640, in which case, the first communication module 251 and the third communication module 331 may directly wake up the first ranging module 210 and the second ranging module 310, respectively, to perform step S640.
Optionally, in some embodiments, the step S620 may include: bluetooth pairing of the communication device with the user equipment is performed. In this case, the first and third communication modules 251 and 331 in the communication apparatus and the user equipment may be bluetooth modules, for example, bluetooth chips.
Optionally, in the method 500 or 600, before measuring the distance information between the communication device and the user equipment, the method may further include: and transmitting the ranging configuration parameters. The ranging configuration parameter is adapted to the first ranging module 210 and the second ranging module 310 for performing ranging, and the ranging configuration parameter may be transmitted through the first communication module 251 and the third communication module 331, or the ranging configuration parameter may be transmitted through other types of communication modules.
As an alternative embodiment, the ranging configuration parameters may also be pre-stored in the communication device and the user equipment.
Fig. 15 shows a schematic flow chart diagram of another communication method 700 provided by an embodiment of the present application.
As shown in fig. 15, in the embodiment of the present application, the communication method 700 may include the following steps.
S710: and storing functional data of the user equipment, wherein the functional data correspond to the preset functions of the NFC equipment.
S720: the pairing between the communication device and the user equipment is measured.
S730: authentication between the communication device and the user equipment is performed.
S740: key agreement between the communication device and the user equipment is performed to generate a session key.
S750: performing a ranging session interaction between the communication device and the user equipment using the session key to measure distance information between the communication device and the user equipment.
S760: and communicating with the NFC equipment through the NFC module according to the distance information and the function data so that the NFC equipment executes a preset function.
Specifically, in the embodiment of the present application, the related technical solutions of steps S710 to S730 and S760 may refer to the related description of the above method embodiment, and are not described herein again.
Optionally, steps S740 to S750 may be an implementation manner of step S640 in the above embodiment.
Specifically, in step S740, key agreement may be performed between the communication device and the user equipment to generate a session key. In particular, the process of generating the session key may be as described above in relation to the method embodiment. The embodiment of the present application does not specifically limit the generation manner of the session key.
In step S750, both the ue and the communication device can use the session key to encrypt and decrypt the ranging session therebetween, so as to obtain the distance information between the communication device and the ue through a secure and accurate measurement.
Specifically, the specific process of encrypting and decrypting the ranging session by using the session key may refer to the specific description of the above embodiment of the apparatus, and will not be described in detail herein.
It should be understood that the specific examples are provided herein only to assist those skilled in the art in better understanding the embodiments of the present application and are not intended to limit the scope of the embodiments of the present application.
It should also be understood that, in the various embodiments of the present application, the sequence numbers of the processes do not mean the execution sequence, and the execution sequence of the processes should be determined by the functions and the inherent logic of the processes, and should not constitute any limitation to the implementation process of the embodiments of the present application.
It should also be understood that the various embodiments described in this specification can be implemented individually or in combination, and the examples in this application are not limited thereto.
Unless otherwise defined, all technical and scientific terms used in the examples of this application have the same meaning as commonly understood by one of ordinary skill in the art to which this application belongs. The terminology used in the present application is for the purpose of describing particular embodiments only and is not intended to limit the scope of the present application. As used herein, the term "and/or" includes any and all combinations of one or more of the associated listed items. As used in the examples of this application and the appended claims, the singular forms "a," "an," and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise.
It should be understood that the processor or processing module of the embodiments of the present application may be an integrated circuit chip having signal processing capabilities. In implementation, the steps of the above method embodiments may be performed by integrated logic circuits of hardware in a processor or instructions in the form of software. The steps of the method disclosed in connection with the embodiments of the present application may be directly implemented by a hardware decoding processor, or implemented by a combination of hardware and software modules in the decoding processor. The software module may be located in ram, flash memory, rom, prom, or eprom, registers, etc. storage media as is well known in the art. The storage medium is located in a memory, and a processor reads information in the memory and completes the steps of the method in combination with hardware of the processor.
The memory or storage modules in the embodiments of the present application may be either volatile memory or nonvolatile memory, or may include both volatile and nonvolatile memory.
Those of ordinary skill in the art will appreciate that the various illustrative elements and algorithm steps described in connection with the embodiments disclosed herein may be implemented as electronic hardware, or combinations of computer software and electronic hardware. Whether such functionality is implemented as hardware or software depends upon the particular application and design constraints imposed on the implementation. Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present application.
It is clear to those skilled in the art that, for convenience and brevity of description, the specific working processes of the above-described systems, apparatuses and units may refer to the corresponding processes in the foregoing method embodiments, and are not described herein again.
In the several embodiments provided in the present application, it should be understood that the disclosed system, apparatus and method may be implemented in other ways. For example, the above-described apparatus embodiments are merely illustrative, and for example, the division of the units is only one logical division, and other divisions may be realized in practice, for example, a plurality of units or components may be combined or integrated into another system, or some features may be omitted, or not executed. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be an indirect coupling or communication connection through some interfaces, devices or units, and may be in an electrical, mechanical or other form.
The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment.
In addition, functional units in the embodiments of the present application may be integrated into one processing unit, or each unit may exist alone physically, or two or more units are integrated into one unit.
The functions may be stored in a computer-readable storage medium if they are implemented in the form of software functional units and sold or used as separate products. Based on such understanding, the technical solutions of the present application may be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for causing a computer device (which may be a personal computer, a server, or a network device) to execute all or part of the steps of the methods described in the embodiments of the present application. And the aforementioned storage medium includes: various media capable of storing program codes, such as a usb disk, a removable hard disk, a Read Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk, or an optical disk.
The above description is only for the specific embodiments of the present application, but the scope of the present application is not limited thereto, and any person skilled in the art can easily conceive of the changes or substitutions within the technical scope of the present application, and shall be covered by the scope of the present application. Therefore, the protection scope of the present application shall be subject to the protection scope of the claims.

Claims (36)

1. A communication apparatus of a near field communication, NFC, device for communicating with the NFC device and a user equipment, the communication apparatus comprising: the device comprises a first ranging module, a first NFC module and a first processing module;
the first ranging module is used for measuring distance information between the first ranging module and the user equipment, and the communication distance of the first ranging module is greater than that of the first NFC module;
the first processing module is used for controlling the first NFC module to communicate with the NFC equipment according to the distance information so that the NFC equipment can execute a preset function.
2. The communications device of claim 1, further comprising: a first storage module;
the first storage module is used for storing functional data of the user equipment, wherein the functional data correspond to the preset function of the NFC equipment;
the first processing module is used for controlling the first NFC module to communicate with the NFC equipment according to the distance information and the function data, so that the NFC equipment executes a preset function.
3. The communication apparatus according to claim 2, wherein the NFC device is an access control device including a card reader, and the function data of the user device is access control data;
the first ranging module is used for judging whether the distance information enters a preset range or not;
under the condition that the distance information enters the preset range, the first processing module is used for controlling the first NFC module to communicate with the access control equipment based on the access control data, so that the access control equipment executes a door opening function.
4. The communication device according to claim 3, wherein the first processing module is further configured to stop the first NFC module from communicating with the access control device when the distance information exceeds the preset range after entering the preset range, so that the access control device performs a door closing function.
5. The communication apparatus according to any of claims 1 to 4, wherein the first processing module is further configured to perform identity authentication with the user equipment;
and under the condition that the authentication is successful, the first processing module is used for notifying the first ranging module so that the first ranging module measures the distance information between the first ranging module and the user equipment.
6. The apparatus according to claim 5, wherein the first processing module is configured to perform identity authentication with the user equipment based on a password and/or a key.
7. The communications apparatus as claimed in any of claims 1 to 4, wherein the first ranging module is configured to send a first ranging session to the ue, receive a first ranging response session sent by the ue, and measure the distance information between the ue according to the first ranging session and the first ranging response session.
8. The communications apparatus of claim 7, wherein the first processing module is further configured to encrypt the first ranging session;
the first ranging module is configured to send the encrypted first ranging session to the ue, and receive the encrypted first ranging response session sent by the ue;
the first processing module is further configured to decrypt the encrypted first ranging response session.
9. The communications apparatus as claimed in claim 8, wherein the first processing module is configured to perform key agreement with the user equipment to generate a session key;
the first processing module is used for encrypting the first ranging session according to the session key and decrypting the encrypted first ranging response session according to the session key.
10. The communication device according to any one of claims 1 to 4, further comprising: a first communication module;
before the first ranging module is used for measuring distance information with user equipment, the first communication module is used for performing pairing of the communication device and the user equipment;
and the first communication module is used for waking up the first ranging module under the condition of successful pairing so as to enable the first ranging module to measure the distance information between the first ranging module and the user equipment.
11. The communication device according to claim 10, wherein in case of successful pairing, the first communication module is configured to notify the first processing module;
the first processing module is used for performing identity authentication with the user equipment through the first communication module;
and under the condition of successful authentication, the first processing module is used for waking up the first ranging module so as to enable the first ranging module to measure the distance information between the first ranging module and the user equipment.
12. The apparatus according to claim 10, wherein the power consumption of the first communication module is smaller than the power consumption of the first ranging module, and/or the communication distance of the first communication module is larger than the communication distance of the first ranging module.
13. The communication device of claim 10, wherein the first communication module is a bluetooth chip.
14. The communication device according to any one of claims 1 to 4, further comprising: a second communication module;
before the first ranging module is used for measuring distance information between the first ranging module and the user equipment, the second communication module is used for transmitting ranging configuration parameters between the first ranging module and the user equipment.
15. The communication device according to any one of claims 1 to 4, wherein the first ranging module is an ultra-wideband UWB chip.
16. The communication device according to any of claims 1 to 4, wherein the first processing module is a Secure Element (SE) chip.
17. The apparatus according to any one of claims 1 to 4, wherein the apparatus and the NFC device are disposed apart from and adjacent to each other; or,
the communication device is integrated inside the NFC device.
18. A user device, comprising:
the NFC equipment comprises a first ranging module and a second ranging module, wherein the first ranging module is used for measuring distance information between the NFC equipment and the communication device of the NFC equipment, the communication distance of the second ranging module is larger than the communication distance of a first NFC module in the communication device, and the distance information is used for indicating the communication device to control the first NFC module to communicate with the NFC equipment so that the NFC equipment executes a preset function.
19. The user equipment of claim 18, wherein the user equipment further comprises:
a second processing module for performing identity authentication with the communication device;
and the second processing module is used for notifying the second ranging module to enable the second ranging module to measure the distance information between the communication device and the second ranging module under the condition of successful authentication.
20. The user equipment according to claim 19, wherein the second processing module is configured to perform password and/or key based identity authentication with the communication device.
21. The UE of claim 19, wherein the second ranging module is configured to receive a first ranging session sent by the communication device, and send a first ranging response session to the communication device, and wherein the first ranging session and the first ranging response session are configured to measure the distance information between the second ranging module and the communication device.
22. The UE of claim 21, wherein the second ranging module is configured to receive the encrypted first ranging session sent by the communication device;
the second processing module is used for decrypting the encrypted first ranging session and encrypting the first ranging response session;
the second ranging module is configured to send an encrypted first ranging response session to the communication device.
23. The ue of claim 22, wherein the second processing module is configured to perform key agreement with the communication device to generate a session key;
the second processing module is used for decrypting the encrypted first ranging session according to the session key and encrypting the first ranging response session according to the session key.
24. The user equipment according to any of claims 19 to 23, wherein the second processing module is a Secure Element (SE) chip.
25. The user equipment according to any of claims 19-23, wherein the user equipment further comprises: a third communication module;
before the second ranging module is configured to measure distance information with the communication device, the third communication module is configured to perform pairing of the user equipment and the communication device;
and if the pairing is successful, the third communication module is used for waking up the second ranging module so that the second ranging module measures the distance information between the communication device and the third communication module.
26. The ue of claim 25, wherein in case of successful pairing, the third communication module is configured to notify the second processing module;
the second processing module is used for performing identity authentication with the communication device through the third communication module;
and the second processing module is used for waking up the second ranging module under the condition that the authentication is successful so that the second ranging module measures the distance information between the communication device and the second ranging module.
27. The UE of claim 25, wherein power consumption of the third communication module is less than that of the second ranging module, and/or wherein a communication distance of the third communication module is greater than that of the second ranging module.
28. The user equipment according to claim 25, wherein the third communication module is a bluetooth chip.
29. The user equipment according to any of claims 18-23, wherein the user equipment further comprises: a fourth communication module;
before the second ranging module is used for measuring the distance information between the second ranging module and the communication device, the fourth communication module is used for transmitting the ranging configuration parameters between the second ranging module and the communication device.
30. The user equipment according to any of claims 18-23, wherein the user equipment further comprises: and the second NFC module is used for communicating with the NFC equipment so as to enable the NFC equipment to execute a preset function.
31. The UE of any one of claims 18 to 23, wherein the second ranging module is a UWB chip.
32. The user equipment according to any one of claims 18 to 23, wherein the NFC device is an access control device comprising a card reader, and when the distance information enters a preset range, the distance information is used to instruct the communication device to control the first NFC module to communicate with the access control device, so that the access control device performs a door opening function;
and under the condition that the distance information exceeds the preset range after entering the preset range, the distance information is used for indicating the communication device to control the first NFC module to stop communicating with the access control equipment, so that the access control equipment executes a door closing function.
33. A communication method applied to a communication apparatus including an NFC module, the communication method comprising:
measuring distance information between the NFC module and user equipment, wherein the variation range of the distance information is larger than the communication range of the NFC module;
and communicating with the NFC equipment through the NFC module according to the distance information so as to enable the NFC equipment to execute a preset function.
34. A communication method, applied to a user equipment, the communication method comprising:
measuring distance information between a communication device of the NFC equipment;
the variation range of the distance information is larger than the communication range of an NFC module in the communication device, and the distance information is used for indicating the communication device to communicate with the NFC equipment through the NFC module, so that the NFC equipment executes a preset function.
35. A communication system, comprising:
communication apparatus according to any of claims 1 to 17, user equipment according to any of claims 18 to 32, and NFC device.
36. The communication system according to claim 35, wherein the NFC device is an access control device, and the communication device is configured to communicate with the NFC device and the user equipment, so that the access control device performs an access control function.
CN202210966937.9A 2022-08-12 2022-08-12 Communication device, user equipment and communication system of NFC equipment Pending CN115065932A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202210966937.9A CN115065932A (en) 2022-08-12 2022-08-12 Communication device, user equipment and communication system of NFC equipment

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202210966937.9A CN115065932A (en) 2022-08-12 2022-08-12 Communication device, user equipment and communication system of NFC equipment

Publications (1)

Publication Number Publication Date
CN115065932A true CN115065932A (en) 2022-09-16

Family

ID=83208102

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202210966937.9A Pending CN115065932A (en) 2022-08-12 2022-08-12 Communication device, user equipment and communication system of NFC equipment

Country Status (1)

Country Link
CN (1) CN115065932A (en)

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112995948A (en) * 2021-02-03 2021-06-18 北京小米移动软件有限公司 Vehicle function control method, vehicle function control device, and storage medium
CN114550343A (en) * 2020-11-10 2022-05-27 Oppo广东移动通信有限公司 Intelligent lock control method and device based on UWB, medium and electronic equipment
CN114614850A (en) * 2020-12-07 2022-06-10 Oppo广东移动通信有限公司 Communication method, protection device and storage medium
CN114697058A (en) * 2020-12-28 2022-07-01 华为技术有限公司 Identity authentication method, electronic equipment and computer readable storage medium

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114550343A (en) * 2020-11-10 2022-05-27 Oppo广东移动通信有限公司 Intelligent lock control method and device based on UWB, medium and electronic equipment
CN114614850A (en) * 2020-12-07 2022-06-10 Oppo广东移动通信有限公司 Communication method, protection device and storage medium
CN114697058A (en) * 2020-12-28 2022-07-01 华为技术有限公司 Identity authentication method, electronic equipment and computer readable storage medium
CN112995948A (en) * 2021-02-03 2021-06-18 北京小米移动软件有限公司 Vehicle function control method, vehicle function control device, and storage medium

Similar Documents

Publication Publication Date Title
CN110325409B (en) Method and apparatus for authenticating vehicle smart key
KR102030474B1 (en) Electromechanical lock
CN102315942B (en) Security terminal with Bluetooth and communication method thereof of security terminal and client end
JP6681477B2 (en) Short range wireless communication tag
CN113039823A (en) System, method and apparatus for access control
CN101631104B (en) Communication apparatus, communication system, notification method, and program product
US9021557B2 (en) System and method for security using a sibling smart card
US20080089519A1 (en) Secure key exchange algorithm for wireless protocols
CN104727658A (en) Intelligent lock, intelligent key and control method and device thereof
CN103390297A (en) Multiple security control security system and security information processing method
CN104484918A (en) NFC-based Android intelligent door lock opening method
WO2013123453A1 (en) Data storage devices, systems, and methods
CN105825560B (en) Electronic door lock system and control method
CN117413278A (en) Powering bluetooth communication card-to-phone using NFC field from phone
CN107026735A (en) Method and managed devices that a kind of password is automatically entered
CN201150068Y (en) Multifunctional information safety equipment
CN202939674U (en) Multiple safety management security device and system
CN115065932A (en) Communication device, user equipment and communication system of NFC equipment
CN115314872A (en) Communication device, user equipment and communication system of NFC equipment
WO2023036951A1 (en) Fast bilateral key confirmation
EP3326401B1 (en) Electronic access control applying an intermediate
EP3051624B1 (en) Antenna device and terminal
CN107689946A (en) A kind of data communication method and data communication system
KR20150101016A (en) Method for Controlling Transaction Means by using End-To-End Mutual Authentication based on Near Field Communication
KR20150065996A (en) Method for providing safety login based on one time code by using user's card

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication

Application publication date: 20220916

RJ01 Rejection of invention patent application after publication