An authentication method and terminal for an Internet of Things device

Abstract

An authentication method and terminal for an Internet of Things device. The method includes: when the terminal receives the authentication request of the IoT device, the terminal checks whether the binding relationship between the terminal and the IoT device is stored, and confirms whether the first secure channel between the IoT device and the terminal has been established; Once a secure channel has been established, the terminal sends a request for establishing a second secure channel between the IoT device and the network device to the network device; if it is confirmed that the second secure channel has been established, the terminal receives the second secure channel establishment request sent by the network device. Response; the terminal sends an authentication response to the IoT device. A corresponding terminal is also disclosed. The present invention binds the Internet of Things device to the smart terminal for network access authentication, which can reduce the storage and synchronization costs of the background on the network side, and also solves the problem of insufficient identification of the Internet of Things device, so that the access of the Internet of Things device can be realized Lightweight security authentication process for mobile networks.

Description

technical field [0001] The invention relates to the technical field of the Internet of Things, in particular to an authentication method and a terminal of an Internet of Things device. Background technique [0002] With the rapid development of the Internet of Things, Internet of Things devices, namely Machine Type Communication (MTC) devices, have become a new type of network security threat. Attack techniques that have appeared on the Internet, such as Distributed Denial of Service , DDoS), certificate theft, etc., may appear on the Internet of Things. For example, thousands of ovens launched a large-scale DDoS attack on the InfoWord website, causing the background service of the website to be paralyzed. An effective solution is universal authentication of IoT devices. [0003] In the 3rd Generation Partnership Project (3GPP) MTC network architecture, IoT devices authenticate devices through the SMS registration process, and the security architecture of MTC devices based ...

AI Technical Summary

Problems solved by technology

In order to identify the identity of the MTC device and prevent illegal devices from accessing the mobile communication network, the background home subscriber server (Home Subscriber Server, HSS) / home location register (Home Location Register, HLR) needs to store the user information of each MTC device And contract data, with the development and maturity of IoT technology and the diversification of application fields, the number of MTC devices will explode to the order of tens of billions, even several orders of magnitude more than the current number of smart terminals, hundreds of The number of billions of devices is a huge cost for background storage and synchronization

In addition, the user identification of MTC equipment, that is, Mobile Subscriber International ISDN number (MSISDN), has a 16-bit length limit in international standards, so the address space of MSISDN may not be enough to support a large number of MTC equipment in the future.

Images