Method, device and system of transmitting data safely

Abstract

The invention provides a method, a device and a system of transmitting data safely. The method of transmitting data safely is characterized by comprising that a user terminal sends a resource access request carrying a first authentication request header field to a server, wherein the first authentication request header field comprises user identification and server identification; a request response returned by the server is received, the request response comprises a second authentication request header field and a message body, and the second authentication request header field carries a third integrity summery; and after the server receives the resource access request, the third integrity summery is further obtained by calculation, wherein the calculation is carried out by using a third a message digest algorithm according to a user password and message contents and by using, and the message body carries the message contents encrypted by a shared key. The user password is obtained from the storage area of the server according to the user identification carried by the resource access request. The machine-to-machine (M2M) transmission based on a constrained application protocol (CoAP) is enabled to be carried out safely and reliably.

Description

Technical field [0001] The present invention relates to the field of communications, in particular to a method, device and system for safe data transmission. Background technique [0002] The CoAP (Constrained Application Protocol) protocol is mainly used in machine-to-machine (M2M) scenarios, such as home controllers, building automation, smart energy, and sensor-end networks. In such an environment, the functions of these machines are relatively simple. Generally, the processing end is only 8 bits, the storage space is small, complex transmission protocols are not supported, and the data transmission rate is also low. CoAP provides a request / response interaction mode, supports embedded resource discovery, including key network concepts, such as Universal Resource Identifier (URI) and content type. CoAP can be easily translated to Hyper Text Transfer Protocol (HTTP) for integration into the network. [0003] In CoAP, security issues are very important, especially some sensor dat...

AI Technical Summary

Problems solved by technology

[0004] In the prior art, there is no effective method to ensure the separate protection of CoAP protocol and HTTP protocol conversion information and message body transmission, so that the encryption of CoAP messages and the conversion between CoAP and HTTP protocols cannot be realized at the same time, so that after adding the proxy device Proxy, the existing The CaAP protocol cannot be transmitted normally under the condition of ensuring encryption security

Images