IOT (Internet of Things) based equipment authentication method, device and system

Abstract

The invention discloses an IOT based equipment authentication method, device and system, and relates to the field of authentication of IOT terminals and servers. In order to guarantee the safety of an IOT system and the authentication effectiveness, a remote management platform generates a first message when receiving a bidirectional authentication request of IOT equipment; an IOT equipment message and the generated first message are sent to an authentication center; the authentication center seeks a root key message K corresponding to the IOT equipment according to the IOT equipment message, generates a bidirectional authentication message according to the root key message and the first message and returns the bidirectional authentication message to the remote management platform; and the remote management platform finishes bidirectional authentication according to the bidirectional authentication message and the IOT equipment. According to the provided method and system, only legal IOT equipment can be accessed to the management platform, illegal equipment can be prevented from being accessed, and simultaneously, the legitimate right of a user using the IOT equipment can be protected from loss.

Description

technical field [0001] The invention relates to the field of authentication of terminals and servers of the Internet of Things. Background technique [0002] The Internet of Things is called the third wave of the world's information industry after computers and the Internet, and represents the development direction of the next generation of information technology. The United States, the European Union, China and other countries have issued development plans for the Internet of Things to carry out relevant technology and industry forward-looking layouts . [0003] With the popularization of IoT technology, more and more traditional commodities such as automobiles, smart watches, consumer electronics, and monitoring equipment are embedded with sensors and communication modules to become IoT devices. The working environment of these IoT devices (such as unattended, high temperature, high humidity, frequent vibration and shaking, etc.) is more complex and harsh than traditional...

AI Technical Summary

Problems solved by technology

[0007] However, there is currently no standard agreement on how IoT devices authenticate with application servers or management platforms. Some IoT applications use a shared secret mechanism for one-way authentication of devices. This scheme usually assumes that one of the authentication parties is credible , that is, the server side is considered to be trusted, and only verifies the identity of the device, not the identity of the server, and the key or private information of the device can be pre-stored on the server for subsequent verification

This authentication method cannot be applied to the authentication of a third-party remote management platform, because in this case the platform and the IoT device are untrustworthy, and it is difficult for two untrustworthy entities to share secret information, so it is not suitable to use symmetric key mechanism for authentication

In addition, two-way authentication is not a superposition of two one-way authentication, and the existing one-way authentication scheme cannot be simply extended to two-way authentication for scenarios where both parties are untrustworthy

[0008] Furthermore, if the keys or secret information of all IoT devices are saved on the remote management platform, when the scale of IoT devices increases sharply, the information to be saved will increase massively, making maintenance extremely difficult

Moreover, when IoT devices need to switch remote management platforms due to changes in cooperation strategies, keys or secret information need to be exchanged between the two remote management platforms, which also poses security risks

[0009] Therefore, the existing Internet of Things authentication technology has been unable to meet the needs of Internet of Things devices and remote management platforms to verify each other's legitimacy, so as to ensure the security of the Internet of Things system

Images