Resource operation method and device

Abstract

The embodiment of the invention provides a resource operation method and device, and relates to the technical field of the internet of things. A resource server can perform validity verification on atoken sent by a terminal when the resource server cannot connect with an authorization server in real time. A specific scheme is as follows: the resource server receives a resource request message sent by the terminal, the resource request message carries the token and ciphertext information, and the ciphertext information is the encrypted information of the token verification information; the ciphertext information is decrypted according to a decryption key negotiated between the resource server and the authorizations server, thereby acquiring the token verification information; whether the token is valid is determined according to the token verification information, and a resource response message is sent to the terminal when the token is valid. The resource operation method and device provided by the embodiment of the invention are used for the resource operation.

Description

technical field [0001] Embodiments of the present invention relate to the technical field of the Internet of Things, and in particular, to a resource operation method and device. Background technique [0002] The Internet of Things refers to a network that connects people and things, things and things, and realizes informatization, remote management control and intelligence. In the existing Internet of Things technology, according to the open authorization protocol (Web Authorization Protocol, OAuth) 2.0 or machine-to-machine (one Machine to Machine, oneM2M) and other protocols, the basic flow of the token-based authentication and authorization scheme can be found in figure 1 . [0003] exist figure 1 In the flow shown, the terminal 1100 first sends a token request message to the authorization server 1200 through step 101 to obtain a token. The authorization server 1200 sends the token to the terminal 1100 in step 102 . The terminal 1100 sends the obtained token to the r...

AI Technical Summary

Problems solved by technology

[0004] Since the resource server and the authorization server usually communicate remotely through the Internet, when the resource server is a resource-constrained device with low energy consumption, low storage, and low resource processing capabilities in the Internet of Things, it may not be able to support the clock synchronization mechanism. It also cannot maintain a real-time connection with the authorization server through the Internet, so the validity of the token sent by the terminal cannot be verified, so that the terminal cannot access the resources in the resource server

Images