Internet of Things weak resource terminal key security management method

Abstract

The invention discloses an Internet of Things weak resource terminal key security management method comprising obtaining a key for fragmentation of encryption and decryption key, key encryption storage, key decryption call, online key update and the like. When the key for the fragmentation of the encryption and decryption key is obtained, the key does not appear in the program directly in the plaintext, is fragmented and needs to be converted by a certain method, and the parameters for obtaining the encryption key comprises an MAC address, a device ID number and other firmware parameters thatcannot be obtained from the program code, the process of obtaining the key can prevent decompilation, that is, the key cannot be directly obtained through the program source code. Therefore, the anti-decompilation acquisition key can be realized by the method, and the existing key can be compensated in time in the case of leakage, thereby fully utilizing the limited hardware resources to maximizethe security of the key.

Description

technical field [0001] The invention relates to the technical field of information security of the Internet of Things, in particular to a security management method for weak resource terminal keys of the Internet of Things. Background technique [0002] The Internet of Things is a huge application system built on the Internet infrastructure. It has developed rapidly in recent years. It is estimated that there will be 28 billion Internet of Things devices by 2020. With the rapid growth of IoT devices, security problems are becoming more and more serious, and the implementation process of IoT information security lags behind the expansion speed of IoT. [0003] At present, there are a large number of terminal devices in the Internet of Things that transmit information in plain text on the Internet. Hackers can easily intercept these Internet of Things information and obtain methods to control devices. The impact on the security of IoT terminal equipment is multifaceted. For t...

AI Technical Summary

Problems solved by technology

Among them, the security problems of weak resource terminals mainly include: exposing the hardware debugging interface, retaining the debugging command interface in the firmware, no encryption of the channel, no correct authentication from the device to the service, replay attacks, and no protection against man-in-the-middle attacks from the device to the server , there is an unprocessed plaintext key in the firmware, the system has only one key and there is no key change mechanism, etc.

Images