Security authentication method based on MQTT, device and storage medium

Abstract

The invention relates to a security technology, and discloses a security authentication method based on MQTT, an electronic device and a storage medium. The method comprises the steps of creating a virtual account and a group identity according to a registration request sent by a client, and returning the virtual account and the group identity to the client; receiving a login request sent by the client, carrying out authentication by using a preset authentication rule, and if the authentication is passed, establishing a subscription connection with the client; and finally, receiving a theme subscription request sent by the client, carrying out comparison authentication on a subscription theme and a theme list according to the received theme subscription request, and if the subscription theme exists in the theme list, indicating that the authentication is passed, and pushing subscription information to the client according to the subscription theme. By means of the method, the securityauthentication on the client can be improved, the security of a server can be effectively guaranteed, and distributed denial of service attacks can be reduced.

Description

technical field [0001] The present invention relates to the technical field of computer security, in particular to an MQTT-based security authentication method, device and computer-readable storage medium. Background technique [0002] Message Queuing Telemetry Transport (MQTT) is an instant messaging protocol developed by International Business Machines Corporation (IBM). The protocol adopts a lightweight subscription / publishing mode for message transmission, and is specially optimized for low bandwidth, low computing power, and unstable network environments, and is suitable for embedded smart terminals and mobile The information push of the terminal can effectively save the power consumption and flow of the terminal. [0003] However, in the communication process based on the MQTT protocol, many security issues may be faced, such as distributed denial of service (Distributed Denial Of Service, DDOS) attack issues, security authentication and authorization issues for user ...

AI Technical Summary

Problems solved by technology

[0003] However, in the communication process based on the MQTT protocol, many security issues may be faced, such as distributed denial of service (Distributed Denial Of Service, DDOS) attack issues, security authentication and authorization issues for user equipment access, etc.

These problems pose a great threat to the communication network. Therefore, it is urgent to design an MQTT-based security service system that can perform security authentication on the client, effectively guarantee the security of the server, and reduce DDOS attacks.

Images