Control method, apparatus, and system

A home hub, comprising:

• memory configured to store one or more programs;
• and
• a processor coupled to the memory and configured to execute the one or more programs to cause the home hub to:
• receive, from a second device, a first identity credential of the second device and first public key information of a second identity credential of a first device, wherein the first identity credential comprises second public key information of the second device and first private key information of the second device;
• control at least one internet of things (IoT) device based on the first identity credential;
• receive, from the first device, second private key information of the second identity credential;
• and
• control the at least one IoT device based on the second identity credential,
• wherein the second identity credential comprises the first public key information and the second private key information.

A control system, comprising:

• at least one internet of things (IoT) device;
• a home hub having a first trusted execution environment (TEE) platform and configured to:
• receive, from a second device having a second TEE platform, a secure channel establishment protocol when the second device logs into an IoT application program for a first time, wherein the IoT application program is for controlling the home hub and the at least one IoT device;
• establish, according to the secure channel establishment protocol, a secure channel with the second device;
• receive, via the secure channel and from the second device, a first identity credential of the second device and first public key information of a second identity credential of the first device;
• and
• control the at least one IoT device based on the first identity credential;
• and
• a first device having the first TEE platform and configured to log in to the IoT application program,
• wherein the home hub is further configured to:
• attempt to verify an identity of the first device based on the first public key information when the first device logs in to the IoT application program;
• receive, from the first device and after verifying the identity, private key information of the second identity credential of the first device;
• and
• control the at least one IoT device based on the second identity credential,
• wherein the second identity credential comprises the first public key information and the private key information.