The application relates to an
MQTT protocol sensing access
verification method, which comprises the following steps: receiving a connection request initiated by a
client, and analyzing a CONNECT message in the connection request to obtain a plurality of parameter fields, wherein the parameter fields comprise protocol version information, a
client identifier, a username, a keep-alive time and an
MQTT5.0 attribute field; based on a preset policy set organized according to tenants, performing
rule matching and parameter consistency
verification on the parameter fields; when any
verification result does not satisfy a condition preset by a corresponding policy, generating a corresponding rejection
reason code and a hit policy identifier, and rejecting the connection request before an
MQTT session is formally established; and when all verification results satisfy the policy requirements, allowing the MQTT session to be established. Through the application, the problem of insufficient access security of the MQTT protocol is solved, protocol semantic level verification is performed before the MQTT session is established, invalid connections are blocked, and
application layer attacks are prevented.