Granted Patent B2

US 12,556,928 · App. 17/971,820 · Granted Feb 17, 2026

Inventors: Huazhang Liu (Shenzhen, CN); Weihua Li (Shanghai, CN); Zhan Guo (Shanghai, CN)

Assignee: HUAWEI TECHNOLOGIES CO., LTD.

H04W12/50H04W12/03H04W12/069H04W76/14

Abstract

Claims (70)

1 . A pairing method applied to a short-range communication system including a first wireless device and a second wireless device, comprising:

obtaining, by the first wireless device, a first password, wherein the first password is shared by the first wireless device and the second wireless device; and

pairing, by the first wireless device, with the second wireless device based on a password-based authenticated key exchange (PAKE) protocol and by using the first password as an encryption password in a key exchange process,

the pairing with the second wireless device based on a password-based authenticated key exchange (PAKE) protocol and by using the first password as an encryption password in a key exchange process comprises:

sending by the first wireless device, first information to the second wireless device, wherein the first information is obtained by the first wireless device by encrypting a first public key by using the first password, and the first information is used by the second wireless device to obtain a first session key based on the first public key;

receiving, by the first wireless device, second information fed back by the second wireless device in response to the first information, wherein the second information is obtained by the second wireless device by using the first session key and is used to respond to the first information; and

obtaining, by the first wireless device, third information based on the first password and the second information, wherein the third information is used by the second wireless device to obtain a first random number generated by the first wireless device.

2 . The method according to claim 1 , wherein the first password comprises at least one of an account, a password, a digital signature, biometric feature information, a digital certificate, or voice information.

3 . The method according to claim 1 , wherein the pairing with the second wireless device based on a password-based authenticated key exchange (PAKE) protocol and by using the first password as an encryption password in a key exchange process further comprises:

pairing, by the first wireless device, with the second wireless device by using the first password and the second information.

4 . The method according to claim 3 , wherein the pairing with the second wireless device by using the first password and the second information comprises:

sending, by the first wireless device, the third information to the second wireless device;

receiving, by the first wireless device, fourth information fed back by the second wireless device in response to the third information, wherein the fourth information is used by the first wireless device to obtain a second random number fed back by the second wireless device for the first random number; and

determining, by the first wireless device when the first random number is the same as the second random number, that pairing with the second wireless device succeeds.

5 . The method according to claim 4 , wherein the obtaining, by the first wireless device, third information based on the first password and the second information comprises:

processing, by the first wireless device, the second information by using the first password, to obtain a second public key;

obtaining, by the first wireless device, a second session key based on the second public key and a first private key; and

encrypting, by the first wireless device, the first random number by using the second session key, to obtain the third information.

6 . The method according to claim 5 , wherein the processing, by the first wireless device, the second information by using the first password, to obtain a second public key comprises:

processing, by the first wireless device, the second information by using the first password, to obtain the second public key and a third random number, wherein the third random number corresponds to a fourth random number generated by the second wireless device; and

the encrypting, by the first wireless device, the first random number by using the second session key, to obtain the third information comprises:

processing, by the first wireless device, the first random number and the third random number by using the second session key, to obtain the third information, wherein the third random number is used by the second wireless device to determine to end a pairing procedure with the first wireless device or to continue a pairing procedure with the first wireless device.

7 . The method according to claim 3 , wherein before the sending, by the first wireless device, first information to the second wireless device, the method further comprises:

sending, by the first wireless device, feature exchange acknowledgement information to the second wireless device, wherein the feature exchange acknowledgement information comprises a first encryption algorithm; and

encrypting, by the first wireless device, the first public key by using the first password as an encryption password and by using the first encryption algorithm, to obtain the first information.

8 . The method according to claim 7 , wherein the feature exchange acknowledgement information further comprises a second encryption algorithm; and before the encrypting, by the first wireless device, the first public key by using the first password as an encryption password and by using the first encryption algorithm, to obtain the first information, the method further comprises:

performing, by the first wireless device, one-way encryption on private information by using the second encryption algorithm, to obtain the first password, wherein the private information is shared by the first wireless device and the second wireless device.

9 . A wireless device pairing method applied to a short-range communication system including a first wireless device and a second wireless device, comprising:

obtaining, by the second wireless device, a first password, wherein the first password is shared by the second wireless device and the first wireless device; and

pairing, by the second wireless device, with the first wireless device based on a password-based authenticated key exchange (PAKE) protocol and by using the first password as an encryption password in a key exchange process,

the pairing, by the second wireless device, with the first wireless device based on a password-based authenticated key exchange (PAKE) protocol and by using the first password as an encryption password in a key exchange process comprises:

receiving, by the second wireless device, first information from the first wireless device;

processing, by the second wireless device, the first information by using the first password, to obtain a first session key;

encrypting, by the second wireless device by using the first session key, a fourth random number generated by the second wireless device, to obtain a first encrypted random number; and

encrypting, by the second wireless device, the first encrypted random number by using the first password as an encryption password, to obtain second information for pairing.

10 . The method according to claim 9 , wherein the first password comprises at least one of an account, a password, a digital signature, biometric feature information, a digital certificate, or voice information.

11 . The method according to claim 9 , wherein the pairing, by the second wireless device, with the first wireless device based on a password-based authenticated key exchange (PAKE) protocol and by using the first password as an encryption password in a key exchange process comprises:

pairing, by the second wireless device, with the first wireless device by using the first password and the first session key.

12 . The method according to claim 11 , wherein the pairing, by the second wireless device, with the first wireless device by using the first password and the first session key comprises:

sending, by the second wireless device, the second information to the first wireless device;

receiving, by the second wireless device, third information fed back by the first wireless device in response to the second information; and

pairing, by the second wireless device, with the first wireless device by using the first session key and the third information.

13 . The method according to claim 12 , wherein the encrypting, by the second wireless device, the first encrypted random number by using the first password as an encryption password, to obtain second information comprises:

encrypting, by the second wireless device, the first encrypted random number and a second public key by using the first password as an encryption password, to obtain the second information, wherein the second public key is used by the first wireless device to obtain a second session key, and the second session key is information required by the first wireless device to respond to the second information.

14 . A wireless device, comprising:

at least one processor, configured to obtain a first password, wherein the first password is shared by the wireless device and another wireless device, wherein

the at least one processor is further configured to pair with the another wireless device based on a password-based authenticated key exchange (PAKE) protocol and by using the first password as an encryption password in a key exchange process;

wherein the at least one processor is further configured to obtain third information based on the first password and second information, wherein the third information is used by the another wireless device to obtain a first random number generated by the wireless device; and

a transceiver, configured to implement, under control of the at least one processor, a transceiver operation in a process of pairing with the another wireless device, the transceiver being further configured to,

send first information to the another wireless device, wherein the first information is obtained by the another wireless device by encrypting a first public key by using the first password, and the first information is used by the another wireless device to obtain a first session key based on the first public key; and

receive the second information fed back by the another wireless device in response to the first information.

15 . The wireless device according to claim 14 , wherein the first password comprises at least one of an account, a password, a digital signature, biometric feature information, a digital certificate, or voice information.

16 . The wireless device according to claim 14 , wherein

the second information is obtained by the another wireless device by using the first session key and is used to respond to the first information; and

the at least one processor is further configured to pair with the another wireless device by using the first password and the second information.

17 . The wireless device according to claim 16 , wherein

the transceiver is further configured to: send the third information to the another wireless device under control of the at least one processor; and receive fourth information fed back by the another wireless device in response to the third information, wherein the fourth information is used by the wireless device to obtain a second random number fed back by the another wireless device for the first random number; and

the at least one processor is further configured to determine, when the first random number is the same as the second random number, that pairing with the another wireless device succeeds.

18 . The wireless device according to claim 17 , wherein

the at least one processor is further configured to: process the second information by using the first password, to obtain a second public key; obtain a second session key based on the second public key and a first private key; and encrypt the first random number by using the second session key, to obtain the third information.

19 . The wireless device according to claim 18 , wherein

the at least one processor is further configured to: process the second information by using the first password, to obtain the second public key and a third random number, wherein the third random number corresponds to a fourth random number generated by the another wireless device; and process the first random number and the third random number by using the second session key, to obtain the third information, wherein the third random number is used by the another wireless device to determine to end a pairing procedure with the wireless device or to continue a pairing procedure with the wireless device.

20 . A wireless device, comprising:

at least one processor, configured to obtain a first password, wherein the first password is shared by the wireless device and another wireless device, wherein

the at least one processor is further configured to pair with the another wireless device based on a password-based authenticated key exchange (PAKE) protocol and by using the first password as an encryption password in a key exchange process; and

a transceiver, configured to implement, under control of the at least one processor, a transceiver operation in a process of pairing with the another wireless device,

wherein the transceiver is further configured to:

send first information to the another wireless device, wherein the first information is obtained by the wireless device by encrypting a first public key by using the first password, and the first information is used by the another wireless device to obtain a first session key based on the first public key; and

receive second information fed back by the another wireless device in response to the first information, and

wherein the at least one processor is further configured to obtain third information based on the first password and second information received from the another wireless device, wherein the third information is used by the another wireless device to obtain a first random number generated by the wireless device.

Assignments (1)

Continuity (2)

References Cited (28)