Method and system for communicating with authenticator

A method for communicating with an authenticator, comprising:

• Step S1, obtaining, by a client, a first key stored in the client, generating a first client identification and a first authenticator identification according to the first key, obtaining a second key corresponding to the first key, generating a first session key according to the second key, and broadcasting data comprising the first client identification according to a preset time interval;
• Step S2, scanning, by the authenticator, the broadcast data, obtaining the first client identification in the broadcast data, obtaining a third key stored in the authenticator, verifying the first client identification according to the third key, executing Step S3 if the verifying is successful, rescanning the broadcast data if the verifying is failed;
• Step S3, generating, by the authenticator, a second authenticator identification according to the third key, obtaining a fourth key corresponding to the third key, generating a second session key according to the fourth key, notifying that the verifying of the first client identification is successful, and stopping scanning and broadcasting broadcast data comprising the second authenticator identification;
• Step S4, stopping, by the client, broadcasting, starting to scan the broadcast data sent from the authenticator, parsing the broadcast data obtained by scanning to obtain the second authenticator identification, and verifying the second authenticator identification, establishing a Bluetooth connection with the authenticator and executing Step S5 if the verifying is successful, ending the procedure if the verifying is failed;
• Step S5, obtaining, by the client, a first handshake key by computation with the first session key, performing computation on the client data with the first handshake key to obtain a client data digest value, and sending a handshake command comprising the client data and the client data digest value to the authenticator;
• Step S6, obtaining, by the authenticator, the client data and the client data digest value according to the handshake command, obtaining a second handshake key by computation with the second session key, verifying the client data according to the second handshake key, the client data and the client data digest value, performing computation on the authenticator data with the second handshake key to obtain an authenticator data digest value if the verifying is successful, and sending a handshake response comprising the authenticator data and the authenticator data digest value to the client;
• Step S7, obtaining, by the client, the authenticator data and the authenticator data digest value according to the handshake response, and verifying the authenticator data according to the first handshake key, the authenticator data and the authenticator digest value, executing Step S8 in case of a successful handshake if the verifying is successful;
• otherwise, performing disconnection;
• Step S8, obtaining, by the client, a first encryption key by computation with the first session key, performing computation on operating data with the first encryption key to obtain encryption data, and sending an operating command comprising the encryption data to the authenticator;
• and
• Step S9, obtaining, by the authenticator, the encryption data in the operating command, obtaining a second encryption key by computation with the second session key, decrypting the encryption data with the second encryption key to obtain operating data, performing corresponding operation according to the operating data to obtain operating result data, performing computation on the operating result data with the second encryption key to obtain operating response data, and sending an operating response comprising the operating response data to the client.

A system for communicating with an authenticator, comprising a client and an authenticator;

• the client is configured to:
• obtain a first key stored in the client;
• generate a first client identification and a first authenticator identification according to the first key;
• obtain a second key corresponding to the first key;
• generate a first session key according to the second key;
• broadcast data comprising the first client identification according to a preset time interval;
• stop broadcasting, start to scan broadcast data sent from the authenticator, and parse the broadcast data obtained by scanning;
• verify a second authenticator identification;
• obtain a first handshake key by computation with the first session key, and perform computation on the client data with the first handshake key to obtain a client data digest value;
• send a handshake command comprising the client data and the client data digest value to the authenticator;
• obtain authenticator data and a authenticator digest value according to a handshake response;
• verify the authenticator data according to the first handshake key, the authenticator data and the authenticator digest value;
• obtain a first encryption key by computation with the first session key, and perform computation on operating data with the first encryption key to obtain encryption data;
• and
• send an operating command comprising the encryption data to the authenticator;
• the authenticator is configured to:
• scan the broadcast data and obtain the first client identification from the broadcast data;
• obtain a third key stored in the authenticator;
• verify the first client identification according to the third key;
• generate a second authenticator identification according to the third key;
• obtain a fourth key corresponding to the third key;
• generate a second session key according to the fourth key;
• notify that the verifying of the first client identification is successful;
• stop scanning and broadcast the broadcast data comprising the second authenticator identification;
• obtain the client data and the client data digest value according to the handshake command;
• obtain a second handshake key by computation with the second session key;
• verify the client data according to the second handshake key, the client data and the client data digest value;
• perform computation on the authenticator data with the second handshake key to obtain an authenticator data digest value;
• send the handshake response comprising the authenticator data and the authenticator data digest value to the client;
• obtain the encryption data in the operating command;
• obtain a second encryption key by computation with the second session key;
• decrypt the encryption data with the second encryption key to obtain operating data, perform corresponding operation according to the operating data to obtain operating result data, and perform computation on the operating result data with the second encryption key to obtain operating response data;
• and
• send an operating response comprising the operating response data to the client.