Wireless device authentication method, system, wearable medical device, and product

A wireless device authentication method for a cloud connected to a device, comprising the following steps:

• sending an authentication request to the device, and receiving the first encrypted packet sent by the device in response to the authentication request;
• and
• when determining that the decrypted first encrypted packet passes the authentication, generating the second encrypted packet based on the first encrypted packet, and feeding the second encrypted packet to the device, so that the device responds to an encrypted instruction sent by the cloud after determining that the second encrypted packet meets the pre-set conditions, wherein the pre-set conditions comprise that the keys corresponding to the second encrypted packet and the first encrypted packet are the same and the second encrypted packet has passed the integrity authentication,
• wherein generating the second encrypted packet comprises performing a bit-flip operation on a random number contained within the first encrypted packet.

A wearable medical device, comprising:

• a first encrypted packet generation module, being configured for responding to an authentication request from the target device to generate a first encrypted packet, and sending the first encrypted packet to the target device, wherein the target device comprises a cloud that controls the wearable medical device;
• a second encrypted packet receiving module, being configured for receiving a second encrypted packet fed by the target device, wherein the second encrypted packet is generated by the target device by modifying the data in the first encrypted packet after verifying the decrypted first encrypted packet passes authentication;
• and
• a second encrypted packet authentication module, being configured for determining that the target device has passed authentication when the second encrypted packet meets pre-set conditions, and responding to an encrypted instruction sent by the target device, wherein the pre-set conditions include that the keys corresponding to the second encrypted packet and the first encrypted packet are the same and the second encrypted packet has passed integrity authentication,
• wherein the step of “responding to an authentication request from the target device to generate a first encrypted packet” comprises:
• receiving the authentication request from the target device to generate a random number, and using the random number and a first encryption algorithm corresponding to the key to generate the first encrypted packet;
• the step of “using the random number and a first encryption algorithm corresponding to the key to generate the first encrypted packet” comprises:
• processing the random number using the first encryption algorithm and performing a signature operation using the key to generate a hash-based message authentication code (HMAC);
• and generating the first encrypted packet according to the HMAC of a pre-set size and the random number;
• wherein the step of “generating the first encrypted packet according to the HMAC of a pre-set size and the random number” comprises:
• encapsulating the HMAC of the pre-set size and the random number to form a data packet;
• and encrypting the data packet based on the key and a second encryption algorithm with a preset operating mode to obtain the first encrypted packet, wherein the preset operating mode comprises a cipher block chaining mode.