Certificate and key downloading method and system of Internet of Things terminal

Abstract

The embodiment of the invention discloses a certificate and key downloading method and system of an Internet of Things terminal, and relates to the technical field of Internet of Things information security. The method comprises the steps: generating a key pair through a security module, and generating a first token according to pre-configured first security SDK authorization information and first certificate authorization control information, wherein the first security SDK authorization information comprises a device ID and a random number; enabling the Internet of Things terminal to send a certificate and key downloading request to the Internet of Things platform through the security module; enabling the Internet of Things platform to generate a second token and judge whether the first token is consistent with the second token; if the first token is consistent with the second token, enabling the Internet of Things platform to generate a certificate key and encrypt the certificate key by using the public key to generate a certificate ciphertext. According to the invention, the random number is set in the authorization information of the first security SDK, and the random number and the device ID jointly represent the device identity, so that guessing is not easy, the risk that the device is illegally used is reduced, and the security of certificate and key downloading is improved.

Description

technical field [0001] The present invention relates to the technical field of Internet of Things information security, in particular to a certificate and key download method and system for an Internet of Things terminal. Background technique [0002] The security issue of IoT terminals is becoming more and more prominent. When IoT terminals access platforms or applications through the network, there are risks such as fraudulent use of identities and data eavesdropping. In order to ensure the identity legitimacy and data security of IoT terminals, it has gradually become a method to issue identity certificates and assign signature / encryption keys to terminals to realize identity signature authentication and data encryption transmission in the process of terminal access by using cryptographic algorithm technology. a trend. The implementation of this method needs to deploy a security module (security SDK, security chip, etc.) It involves many links, which is not conducive to...

AI Technical Summary

Problems solved by technology

[0004] The embodiment of the present invention provides a method and system for downloading a certificate and a key for an Internet of Things terminal, aiming

Images