CN-122002296-A - Bluetooth equipment identity identification information generation method and device and electronic equipment

CN122002296ACN 122002296 ACN122002296 ACN 122002296ACN-122002296-A

Abstract

The application discloses an identification information generation method and device of Bluetooth equipment and electronic equipment, and relates to the technical field of electromagnetic supervision safety, wherein the method comprises the steps of determining a broadcasting event interval and an interval category according to a time stamp sequence of a broadcasting packet; and determining a broadcast event interval parameter, a broadcast delay generation parameter and a time drift value according to the broadcast event interval and the jump break point in the interval category, and combining the parameters to obtain the identification information of the Bluetooth equipment. The method can solve the problems that the identity identification information generated according to the load information is easy to fail or imitate, the safety is poor, and the accuracy and the stability of the generated identity identification information according to the characteristics of the data packet signals are low. The method extracts the broadcast event interval parameters from the application layer, extracts the broadcast delay generation parameters from the protocol layer, extracts the time drift value from the hardware layer, and jointly forms the cross-layer fingerprint as the identity identification information, wherein the identity identification information has long-term stability, and can accurately, stably and repeatedly identify the Bluetooth equipment.

Inventors

WANG TIANWEI
HUANG WEIQING
WEI DONG
GAO DI

Assignees

国科大杭州高等研究院

Dates

Publication Date: 20260508
Application Date: 20251229

Claims (10)

1. A method for generating identity information of a bluetooth device, the method comprising: Determining broadcast event intervals according to a time stamp sequence of a broadcast packet of the Bluetooth device, and classifying the broadcast event intervals to obtain a first preset number of interval categories; Determining a broadcast event interval parameter according to the broadcast event interval in the interval category, wherein the broadcast event interval parameter is used for determining a numerical range of the broadcast event interval; Determining a second preset number of clusters according to jump break points in the broadcast event intervals, and determining a broadcast delay generation parameter according to interval average values of the broadcast event intervals in the clusters; Obtaining a time drift value according to the broadcast event interval parameter, the interval average value and the broadcast delay generation parameter; and combining the broadcast event interval parameter, the broadcast delay generation parameter and the time drift value to obtain the identification information of the Bluetooth equipment.
2. The method of claim 1, wherein prior to determining the broadcast event interval from the sequence of time stamps of the broadcast packets of the bluetooth device, the method further comprises: Capturing a broadcast packet to be screened of the Bluetooth equipment; taking a broadcast packet to be screened, the broadcast type of which is the target broadcast type, as a middle broadcast packet; Analyzing the middle broadcast packet to obtain an analysis result, and performing data integrity verification on the middle broadcast packet according to the analysis result; Taking the intermediate broadcast packet passing the verification as the broadcast packet; and grouping the broadcast packets according to the broadcast addresses of the broadcast packets to obtain a third preset number of broadcast packet combinations, wherein the broadcast addresses of the broadcast packets in the broadcast packet combinations are the same.
3. The method of claim 2, wherein after grouping the broadcast packets according to their broadcast addresses to obtain a third predetermined number of broadcast packet combinations, the method further comprises: Obtaining the time stamp sequence according to the broadcast packets in the broadcast packet combination; Performing first-order differential calculation on the timestamp sequence to obtain a first calculation result, and obtaining the broadcast event interval according to the first calculation result; Acquiring an existing interval category, and determining a reference value range according to the value of the broadcast event interval in the existing interval category and a first parameter; If the broadcast event interval is not in the reference value range, creating a new interval category; adding the broadcast event interval to the existing interval category if the broadcast event interval is in the reference value range; obtaining the first preset number of interval categories according to the existing interval category and the newly added interval category; And acquiring a service switching point in the interval category, and dividing the broadcast stream corresponding to the interval category into broadcast stream segments according to the service switching point, wherein the identification information comprises sub-identification information corresponding to the broadcast stream segments.
4. The method of claim 1, wherein said determining a broadcast event interval parameter from a broadcast event interval in said interval category comprises: among the broadcast event intervals contained in the interval category, determining a first broadcast event interval with the largest value and a second broadcast event interval with the smallest value; obtaining a first target parameter according to the ratio of the first broadcast event interval to the second parameter and the second parameter; Obtaining a second target parameter according to the ratio of the second broadcast event interval to the second parameter, the second parameter and the third parameter; and obtaining the broadcast event interval parameter according to the first target parameter and the second target parameter.
5. The method of claim 1, wherein determining a second predetermined number of clusters based on the point of jump-break in the broadcast event interval, and determining a broadcast delay generation parameter based on an average of the broadcast event intervals in the clusters, comprises: sequencing the broadcast event intervals according to a preset sequence, and determining the data difference between adjacent broadcast event intervals; determining a jump break point according to adjacent broadcast event intervals of which the data difference is larger than a preset threshold value; Clustering the broadcast event intervals according to the jump break points to obtain a second preset number of clusters; determining interval average values of broadcast event intervals in the clusters, and generating an interval average value sequence containing the interval average values; performing differential operation on the interval average value sequence to obtain an average value difference value; Generating an equation to be optimized according to the average value difference value and the parameter to be optimized, and adjusting the value of the parameter to be optimized in a preset value range to enable the equation to be optimized to reach an optimization target; and taking the parameters to be optimized, which enable the equation to be optimized to reach an optimization target, as the broadcast delay generation parameters.
6. The method of claim 4, wherein the deriving a time drift value from the broadcast event interval parameter, the interval average value, and the broadcast delay generation parameter comprises: Acquiring the first target parameter from the broadcast event interval parameter; determining the difference value between the interval average value corresponding to each cluster and the first target parameter, and determining the sum of the difference values of a second preset number of clusters; performing modular operation on the difference sum and the broadcast delay generation parameter to obtain a second calculation result; And obtaining the time drift value according to the ratio of the second calculation result to the second preset number.
7. The method of claim 3, wherein after said combining the broadcast event interval parameter, the broadcast delay generation parameter, and the time drift value, the method further comprises: Acquiring reference identity identification information of candidate equipment, wherein the reference identity identification information comprises a reference broadcast event interval parameter, a reference broadcast delay generation parameter and a reference time drift value; Comparing the broadcast event interval parameter in the sub-identity information with the reference broadcast event interval parameter, and comparing the broadcast delay generation parameter in the sub-identity information with the reference broadcast delay generation parameter; If the broadcast event interval parameter is equal to the reference broadcast event interval parameter, and the broadcast delay generation parameter is equal to the reference broadcast delay generation parameter, determining the similarity of the time drift value in the sub-identity information and the reference time drift value, and determining the average similarity of the similarities; And taking the corresponding candidate equipment with the average similarity larger than or equal to the threshold value as target equipment, and determining the Bluetooth equipment as the target equipment.
8. The method of claim 7, wherein prior to the candidate device having a corresponding average similarity greater than or equal to a threshold value as the target device, the method further comprises: Acquiring a plurality of reference time drift values of a fourth preset number of candidate devices; Generating a plurality of first sample pairs and a plurality of second sample pairs according to a plurality of reference time drift values of the candidate devices, wherein the first sample pairs comprise reference time drift values of the same candidate device, and the second sample pairs comprise reference time drift values of different candidate devices; determining a similarity between reference time drift values in the first sample pair and determining a similarity between reference time drift values in the second sample pair; Acquiring a preset number of candidate thresholds; Determining a first number of first samples having a similarity greater than or equal to the candidate threshold, a second number of first samples having a similarity less than the candidate threshold, a third number of second samples having a similarity greater than or equal to the candidate threshold, and a fourth number of second samples having a similarity less than the candidate threshold; Obtaining a first total amount according to the first amount and the fourth amount, and obtaining a second total amount according to the first amount, the second amount, the third amount and the fourth amount; determining the accuracy corresponding to the candidate threshold according to the ratio of the first total amount to the second total amount; and taking the candidate threshold with the highest accuracy rate as the threshold among the candidate thresholds.
9. An identification information generating apparatus of a bluetooth device, the apparatus comprising: The interval determining module is used for determining the interval of the broadcasting event according to the time stamp sequence of the broadcasting packet of the Bluetooth device and classifying the interval of the broadcasting event to obtain a first preset number of interval categories; A first parameter determining module, configured to determine a broadcast event interval parameter according to a broadcast event interval in the interval category, where the broadcast event interval parameter is used to determine a numerical range of the broadcast event interval; the second parameter determining module is used for determining a second preset number of clusters according to jump break points in the broadcast event intervals, and determining a broadcast delay generating parameter according to an interval average value of the broadcast event intervals in the clusters; The third parameter determining module is used for obtaining a time drift value according to the broadcast event interval parameter, the interval average value and the broadcast delay generating parameter; And the information generation module is used for combining the broadcast event interval parameter, the broadcast delay generation parameter and the time drift value to obtain the identity identification information of the Bluetooth equipment.
10. An electronic device, comprising: A memory and a processor, the memory and the processor being communicatively connected to each other, the memory storing computer instructions, the processor executing the computer instructions to perform the method of generating identity information of a bluetooth device according to any one of claims 1 to 8.

Description

Bluetooth equipment identity identification information generation method and device and electronic equipment Technical Field The invention relates to the technical field of electromagnetic supervision safety, in particular to an identification information generation method and device of Bluetooth equipment and electronic equipment. Background The low-power consumption Bluetooth is widely applied to smart phones, computers, earphones, sports bracelets, smart home equipment and other equipment. Most bluetooth low energy devices employ a random address policy, however, malicious devices can utilize this mechanism to hide their own actual address, making it difficult for a supervisor to effectively supervise bluetooth devices, analyze abnormal traffic, and identify potentially high-risk communications. Therefore, the identification of the Bluetooth low-power-consumption equipment is an important means for guaranteeing the safety of the electromagnetic space. Currently, a fingerprint can be established through the specificity of payload information carried by a broadcast packet or a data packet of the low-power consumption Bluetooth, and the fingerprint is used as the identity identification information of the Bluetooth equipment. Or by extracting the characteristics of CFO (Carrier Frequency offset ), RSSI (RECEIVED SIGNAL STRENGTH Indicator) and the like of the data packet signal, and performing device identification by the characteristics. However, the specificity of the payload information is easily eliminated, and the payload information is extremely easily counterfeited, and malicious devices can still imitate a legal device to evade supervision by forging the field. In addition, the data packet signal has poor characteristic stability and high extraction difficulty, and errors are easily introduced to influence the identification accuracy. Therefore, the related technology has the problems that the identity identification information generated according to the load information is easy to fail or imitate, the safety is poor, and the accuracy and the stability of the generated identity identification information according to the characteristics of the data packet signals are low. Disclosure of Invention In view of the above, the invention provides a method and a device for generating identity identification information of a bluetooth device and an electronic device, so as to solve the problems that the identity identification information generated according to load information is easy to fail or imitate, has poor safety, and has low accuracy and poor stability in generating the identity identification information according to the characteristics of data packet signals. In a first aspect, the present application provides a method for generating identity information of a bluetooth device, where the method includes: determining broadcast event intervals according to a time stamp sequence of a broadcast packet of the Bluetooth device, and classifying the broadcast event intervals to obtain a first preset number of interval categories; Determining a broadcast event interval parameter according to the broadcast event interval in the interval category, wherein the broadcast event interval parameter is used for determining a numerical range of the broadcast event interval; Determining a second preset number of clusters according to jump break points in the broadcast event intervals, and determining broadcast delay generation parameters according to interval average values of the broadcast event intervals in the clusters; obtaining a time drift value according to the broadcast event interval parameter, the interval average value and the broadcast delay generation parameter; And combining the broadcast event interval parameter, the broadcast delay generation parameter and the time drift value to obtain the identification information of the Bluetooth equipment. In a second aspect, the present application provides an apparatus for generating identification information of a bluetooth device, including: The interval determining module is used for determining the interval of the broadcast event according to the time stamp sequence of the broadcast packet of the Bluetooth device and classifying the interval of the broadcast event to obtain a first preset number of interval categories; A first parameter determining module, configured to determine a broadcast event interval parameter according to a broadcast event interval in the interval category, where the broadcast event interval parameter is used to determine a numerical range of the broadcast event interval; The second parameter determining module is used for determining a second preset number of clusters according to jump break points in the broadcast event intervals, and determining broadcast delay generating parameters according to interval average values of the broadcast event intervals in the clusters; the third parameter determining module is used for obtaining a