Network management method and system for Openharmony equipment

Abstract

The embodiment of the invention discloses a network management method and system of Openharmony equipment, the method is applied to the network management system, the system comprises embedded equipment, a gateway, a credible verification platform and a terminal management platform, the embedded equipment forms a local area network through a distributed soft bus, the embedded equipment comprises a security chip, and the security chip is connected with the gateway through a network interface. The security chip generates a trusted measurement message according to the behavior information of the network behavior, the hardware measurement information and the trusted measurement result; the credibility verification platform judges whether the embedded equipment is credible or not according to the credibility measurement message forwarded by the gateway, determines a credibility judgment result and sends the credibility judgment result to the terminal management platform; the terminal management platform determines a management strategy according to the credible judgment result; and the gateway is used for managing and controlling the network behavior of the embedded equipment in the local area network according to the management strategy. According to the technical scheme provided by the invention, the security and reliability of the local area network can be ensured, and meanwhile, the credible security of the network behaviors of the network equipment of the local area network can be ensured.

Description

Technical Field

[0001] The present invention relates to the field of communication networks, and in particular, to a network management method and system for Openharmony devices. Background Art

[0002] In today's digital age, the Internet of Things (IoT) is booming, and device connectivity has become the norm. Open Harmony is an open-source distributed operating system incubated by the OpenAtom Open Source Foundation, designed specifically for full-scenario intelligent terminals, supporting cross-device collaboration and resource integration. Openharmony IoT devices achieve seamless connection and computing power collaboration between intelligent hardware through a unified communication protocol and an elastic service framework. For example, in smart homes, sensors and home appliances can be linked, and in industrial scenarios, data interconnection and task scheduling between heterogeneous devices are supported. However, the security and trustworthiness of the IoT face severe challenges. Building a trusted IoT network aims to provide a secure and reliable connection environment for devices, ensuring the authenticity and integrity of data. It can effectively resist network attacks, protect user privacy, and improve the overall stability of the IoT system. This is of great significance for promoting the development of fields such as intelligent transportation, industrial automation, and smart homes, is a key step towards an intelligent society, and is also the cornerstone for ensuring security and trust in the digital age.

[0003] Current network management methods are only limited to building a trusted network and performing trusted security verification on devices based on device identifiers. However, the networks built by current methods have low security, and the security verification methods are relatively single and unreliable. Summary of the Invention

[0004] Embodiments of the present invention provide a network management method and system, specifically, a network management method and system for Openharmony devices. Through the technical solutions of the embodiments of the present invention, the security and reliability of device interaction in the network can be ensured.

[0005] In a first aspect, embodiments of the present invention provide a network management method, which is applied to a network management system. The network management system includes multiple embedded devices, a gateway, a trusted verification platform, and a terminal management platform. The embedded devices form a local area network through a distributed soft bus, and the embedded devices include security chips.

[0006] The security chip obtains the network behavior and hardware information of the embedded device, generates hardware measurement information according to the hardware information of the embedded device, generates a trusted measurement result according to the hardware measurement information, generates a trusted measurement message according to the behavior information of the network behavior, the hardware measurement information and the trusted measurement result, and sends the trusted measurement message to the gateway, where the network behavior is the behavior when the embedded device interacts with other devices in the local area network;

[0007] The trusted verification platform determines whether the embedded device is trusted according to the trusted measurement message forwarded by the gateway, determines a trusted judgment result, and sends the trusted judgment result to the terminal management platform, and the trusted judgment result is used to represent whether the network behavior and hardware information of the embedded device are trusted;

[0008] The terminal management platform determines a management policy according to the trusted judgment result and sends the management policy to the gateway;

[0009] The gateway controls the network behavior of the embedded device in the local area network according to the management policy.

[0010] In a second aspect, an embodiment of the present invention provides a network management system. The network management system includes multiple embedded devices, a gateway, a trusted verification platform, and a terminal management platform. The embedded devices form a local area network through a distributed soft bus, and the embedded devices include security chips;

[0011] The security chip is used to obtain the network behavior and hardware information of the embedded device, generate hardware measurement information according to the hardware information of the embedded device, generate a trusted measurement result according to the hardware measurement information, generate a trusted measurement message according to the behavior information of the network behavior, the hardware measurement information and the trusted measurement result, and send the trusted measurement message to the gateway, where the network behavior is the behavior when the embedded device interacts with other devices in the local area network;

[0012] The trusted verification platform is used to determine whether the embedded device is trusted according to the trusted measurement message forwarded by the gateway, determine a trusted judgment result, and send the trusted judgment result to the terminal management platform, and the trusted judgment result is used to represent whether the network behavior and hardware information of the embedded device are trusted;

[0013] The terminal management platform is used to determine a management policy according to the trusted judgment result and send the management policy to the gateway;

[0014] The gateway is used to control the network behavior of the embedded device in the local area network according to the management policy.

[0015] An embodiment of the present invention provides a network management method and system. The method is applied to a network management system, which includes multiple embedded devices, a gateway, a trusted verification platform, and a terminal management platform. The embedded devices form a local area network through a distributed soft bus, and the embedded devices include security chips. The security chip obtains the network behavior and hardware information of the embedded device, generates hardware measurement information according to the hardware information of the embedded device, generates a trusted measurement result according to the hardware measurement information, generates a trusted measurement message according to the behavior information, hardware measurement information, and trusted measurement result of the network behavior, and sends the trusted measurement message to the gateway. Among them, the network behavior is the behavior when the embedded device applies to interact with other devices in the local area network. The trusted verification platform determines whether the embedded device is trusted according to the trusted measurement message forwarded by the gateway, determines a trusted judgment result, and sends the trusted judgment result to the terminal management platform. The trusted judgment result is used to represent whether the network behavior and hardware information of the embedded device are trusted. The terminal management platform determines a management policy according to the trusted judgment result and sends the management policy to the gateway. The gateway controls the network behavior of the embedded device in the local area network according to the management policy. Specifically, a trusted measurement message can be generated through a security chip. The trusted verification platform determines whether the network behavior and hardware information of the embedded device are trusted according to the trusted measurement message. The terminal management platform determines a management policy according to the trusted judgment result and sends the management policy to the gateway, so that the gateway controls the network behavior of the embedded device in the local area network according to the management policy. Through the above technical solution, the security and reliability of network device interaction in the local area network can be improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following will briefly introduce the drawings required for the description of the embodiments. Obviously, the following drawings are only some embodiments of the present invention. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative efforts.

[0017] Figure 1 It is a flowchart of a network management method provided in Embodiment 1 of the present invention;

[0018] Figure 2 It is a schematic structural diagram of an embedded device provided in an embodiment of the present invention;

[0019] Figure 3 It is a flowchart of a network management method provided in Embodiment 2 of the present invention;

[0020] Figure 4Flowchart of a method for trusted verification of embedded devices in a local area network provided in Embodiment 3 of the present invention;

[0021] Figure 5 Schematic diagram of trusted behavior verification provided in an embodiment of the present invention;

[0022] Figure 6 Schematic diagram of the structure of a network management system provided in Embodiment 4 of the present invention. Detailed implementation manners

[0023] In order to enable those skilled in the art to better understand the solution of the present invention, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

[0024] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above drawings are used to distinguish similar objects, and do not necessarily need to describe a specific order or sequence. It should be understood that such data can be interchanged under appropriate circumstances so that the embodiments of the present invention described herein can be implemented in an order different from those illustrated or described herein. In addition, the terms "include" and "have" and any variations thereof are intended to cover non-exclusive inclusion. For example, a process, method, system, product or device including a series of steps or units does not necessarily have to be limited to those steps or units clearly listed, but may include other steps or units not clearly listed or inherent to these processes, methods, products or devices.

[0025] It should be noted that in the technical solution of the present disclosure, the collection, storage, use, processing, transmission, provision, and disclosure of user personal information and other processes all comply with the provisions of relevant laws and regulations and do not violate public order and good customs.

[0026] Embodiment 1

[0027] Figure 1The flowchart of a network management method provided in Embodiment 1 of the present invention. Specifically, the method can be a network management method for Openharmony devices, which is applied to a network management system. The network management system includes multiple embedded devices, a gateway, a trusted verification platform, and a terminal management platform. The embedded devices form a local area network through a distributed soft bus. The embedded devices include security chips. Further, the local area network can be a trusted network. This method can be applied to the construction of a trusted network and the communication of network devices in the trusted network. Among them, the distributed soft bus, as the core communication framework of Openharmony, unifies heterogeneous device protocols in a software form, constructs a virtual communication layer across terminals, and realizes the efficient and orderly interconnection of Openharmony devices within the local area network. Further, the distributed soft bus is a virtual "bus", which draws on the design concept of traditional hardware buses and is constructed in a software form between various distributed terminals and embedded devices. It realizes the orderly communication between devices, solves the problem that different devices cannot directly communicate or even conflict due to using different communication technologies, and enables various types of devices to communicate with each other within the same local area network.

[0028] As Figure 1 shown, it includes:

[0029] Step 110: The security chip obtains the network behavior and hardware information of the embedded device, generates hardware measurement information according to the hardware information of the embedded device, generates a trusted measurement result according to the hardware measurement information, generates a trusted measurement message according to the behavior information of the network behavior, the hardware measurement information, and the trusted measurement result, and sends the trusted measurement message to the gateway, where the network behavior is the behavior when the embedded device interacts with other devices in the local area network.

[0030] Among them, the embedded device can be an Internet of Things device that supports the Openharmony protocol and system. The Openharmony Internet of Things device is an embedded terminal based on the open-source HarmonyOS, realizes multi-device interconnection and unified resource scheduling through a distributed soft bus, and adapts to multiple scenarios such as smart home and industry. It has the capabilities of security and trust, and cross-terminal collaboration. Further, the embedded device includes a security chip, and the security chip has functions such as security verification of the embedded device, generation and sending of security messages, storage and invocation of security information. Further, Figure 2Schematic diagram of the structure of the embedded device provided by the embodiment of the present invention. Among them, the network camera is used as an example for the embedded device, and the embodiment of the present invention does not limit the specific type of the embedded device. The secure operating system and secure execution environment are used to protect sensitive data and operation information, and can ensure that algorithm calculations and data processing run in an isolated secure and trusted execution environment. The secure chip can be a secure chip SE (Secure Element): a secure chip that adopts the second-level authentication of Guoxin Trusted National Cryptography, passes the GM / T 0013-2021 Trusted Computing - Trusted Cryptographic Module Conformance Testing Specification, and the GM / T 0008-2012 Secure Chip Cryptography Detection Criteria, and is used to cooperate with the operating system to provide functions such as trusted security algorithms and trusted storage. The distributed soft bus can connect all embedded devices configured with a specific operating system within the same local area network. Exemplarily, the configured operating system can be the Openharmony operating system, and it has the capabilities of self-discovery, self-networking, high bandwidth, and low latency. The distributed soft bus includes multiple protocol modules, which are respectively used for device publishing, discovery, and connection: responsible for device publishing and discovery, and connection management between devices. Device authentication and connection disconnection processing: used to process the authentication process of devices, including key exchange and security processing, and is also used to ensure the connection service between devices, ensuring the stability and reliability of data transmission. Link service line pool layer: an intermediate layer used to centrally manage communication resources (connections and threads) between services, with the goal of improving performance, stability, and resource utilization. Message encryption and sending protocol: responsible for message encryption processing and management of the sending protocol, ensuring the security and standardization of data transmission. Network service protocol: defines the protocol for network services, used to guide communication between devices. Soft bus adaptation protocol: adapts different soft bus protocols to ensure compatibility and interoperability between different devices.

[0031] Among them, the network behavior is the behavior when the embedded device applies to interact with other devices in the local area network, which can be a connection request when the embedded device connects to other devices, or a data transmission request, etc. Further, since the embedded device meets the national security hardware requirements when leaving the factory, however, it may be illegally tampered with and used for security intrusion. Therefore, the hardware information is the hardware composition information of the embedded device, which can include CPU identification, network card MAC, disk serial number, trusted chip, identification information and version information of memory and network interface, etc.

[0032] Among them, the hardware measurement information is the information obtained by the secure chip through trusted measurement calculation based on the hardware information, and the trusted measurement calculation can be the SM3_HMAC (Hash-based Message Authentication Code) algorithm.

[0033] Among them, the trusted measurement result is the result of the trusted self-verification of the embedded device. The trusted self-verification is based on the activation hardware measurement information and the hardware measurement information stored in the security chip, and is used to verify whether the current hardware state of the embedded device is trusted.

[0034] Optionally, when the embedded device is activated for the first time, the security chip generates activation hardware measurement information according to the hardware information of the embedded device; the security chip compares the hardware measurement information with the activation hardware measurement information, and determines the trusted measurement result according to the comparison result.

[0035] Specifically, when the embedded device is activated for the first time at the factory, the hardware information of the device is secure and reliable. Therefore, it is necessary to perform trusted measurement calculation on the hardware information at the time of factory and store the calculated activation hardware measurement information in the security chip. When the embedded device performs network behavior, the security chip generates activation hardware measurement information according to the hardware information of the embedded device to characterize the current hardware state, compares the hardware measurement information with the activation hardware measurement information, and determines the trusted measurement result according to the comparison result. If the comparison is consistent, it means that the hardware has not been illegally tampered with and the device is secure.

[0036] Among them, the behavior information of the network behavior is used to characterize the characteristics of the network behavior, and may include the type of the behavior, the target data of the behavior, the target system, etc.

[0037] Specifically, a trusted measurement message can be generated according to the behavior information, the hardware measurement information and the trusted measurement result of the network behavior, and the trusted measurement message is sent to the gateway, so that the gateway forwards the trusted measurement message to the trusted verification platform, and the trusted verification platform verifies whether the network behavior and the hardware state of the embedded device are trusted.

[0038] Step 120, the trusted verification platform determines whether the embedded device is trusted according to the trusted measurement message forwarded by the gateway, determines the trusted judgment result, and sends the trusted judgment result to the terminal management platform. The trusted judgment result is used to characterize whether the network behavior and the hardware information of the embedded device are trusted.

[0039] Among them, the trusted verification platform is used to perform trusted verification on the trusted measurement message of the embedded device, determine the trusted judgment result, and the trusted judgment result is used to characterize whether the network behavior and the hardware information of the embedded device are trusted.

[0040] Specifically, after the trusted verification platform stores the hardware information that has been confirmed to be secure and the corresponding historical hardware measurement information of the embedded device after security verification. Furthermore, it can confirm whether the hardware information of the embedded device is trustworthy by comparing the hardware measurement information in the trusted measurement message with the historical hardware measurement information, and determine whether the network behavior of the embedded device is trustworthy through the behavior information in the trusted measurement message.

[0041] It should be noted that the trusted authentication of the embedded device needs to be comprehensively judged based on aspects such as the network behavior, hardware environment, system, and network of the embedded device. Therefore, the trusted judgment result represents the final result after comprehensive judgment in multiple aspects.

[0042] Step 130: The terminal management platform determines a management strategy according to the trusted judgment result and sends the management strategy to the gateway.

[0043] Specifically, the terminal management platform is used to formulate overall strategies for the interactions of devices in the local area network. The management strategy is used to control the gateway to manage the network behavior of the embedded device and the connection relationship between the embedded device and other devices. Optionally, the management strategy may include commands such as allowing communication, prohibiting communication, and network isolation.

[0044] Step 140: The gateway manages the network behavior of the embedded device in the local area network according to the management strategy.

[0045] Specifically, the gateway stores a network connection relationship table, which includes the connection relationships of each embedded device. The gateway is used to control the opening and closing of the connection channels of each embedded device. If the management strategy indicates that communication or data interaction is allowed, the gateway opens the connection channels of the embedded device, and then the embedded devices can communicate or perform data interaction.

[0046] Optionally, if the management strategy indicates device isolation for the embedded device, the gateway determines the connection relationship between the embedded device and other devices in the local area network according to the network connection relationship table; and disconnects the connection between the embedded device and other devices in the local area network.

[0047] Specifically, if the network behavior or hardware information of the embedded device is insecure, the terminal management platform will determine the management strategy as device isolation. Then, the gateway determines the connection relationship between the embedded device and other devices in the local area network according to the network connection relationship table and cuts off the connection between the embedded device and other devices in the local area network to avoid the interaction between other devices in the local area network and the dangerous device and protect the security of the local area network.

[0048] It should be noted that the network management method of the local area network includes the construction method of the local area network, specifically, the method for a new embedded device to join the local area network.

[0049] Optionally, the terminal management platform obtains the historical hardware information of candidate embedded devices to be connected to the local area network, verifies whether the historical hardware information of the candidate embedded devices is secure, and if so, registers the candidate terminals in the local area network to generate registration information.

[0050] Specifically, the terminal management platform will verify whether the historical hardware information of the candidate embedded devices is secure, such as whether the operating system is a secure system recognized by the platform; whether the core hardware is Xinchuang hardware; whether the corresponding system and hardware are in the platform access list. Conduct the first review of device access entry manually: Since trusted scenarios are generally scenarios with high security and trust requirements such as infrastructure, power, and public security, there are different requirements for device management, requirements for the localization of Xinchuang of devices, and consistency verification is required for the access devices and the tender parameters.

[0051] Send the historical hardware information to the trusted verification platform, and send the registration information to the gateway, so that the gateway adds the candidate terminal to the local area network according to the registration information.

[0052] Specifically, for the embedded devices that pass the verification, the terminal management platform will generate corresponding registration information according to the hardware information of the embedded devices, such as recording the unique codes of each hardware of the embedded devices and making backup registrations. Among them, the registration information includes the connection permissions of the embedded device with other devices, specifying the devices that the embedded device can communicate with.

[0053] Furthermore, the registration information will be sent to the gateway, so that the gateway adds the candidate terminal to the local area network according to the registration information.

[0054] Furthermore, send the historical hardware information to the trusted verification platform, and the trusted verification platform performs trusted measurement on the historical hardware information, determines and stores the historical hardware measurement information.

[0055] The historical hardware measurement information is the information corresponding to secure and reliable hardware. When the embedded device performs network behavior, it can determine whether the current hardware of the embedded device has been tampered with according to the hardware measurement information corresponding to the current hardware information of the embedded device and the historical hardware measurement information, and then confirm whether the embedded device is secure and trusted.

[0056] Furthermore, the above content is the information entry stage for the first access of the embedded device to the local area network. For the trusted verification method after the embedded device accesses the network, see the following content.

[0057] Optionally, the network behavior includes a connection request, the trusted measurement message includes the device identifier of the embedded device; the trusted judgment result includes a connection judgment result.

[0058] When the embedded device applies for a connection request with other devices in the local area network, judging whether the embedded device is trusted according to the trusted measurement message forwarded by the gateway, and determining a trusted judgment result, including:

[0059] Obtain the historical hardware measurement information of the embedded device according to the device identifier.

[0060] Specifically, the historical hardware measurement information of multiple embedded devices is stored in the trusted verification platform. Therefore, the historical hardware measurement information of the embedded device can be obtained according to the device identifier.

[0061] Compare the hardware measurement information with the historical hardware measurement information. According to the comparison result, the behavior information of the network behavior and the trusted measurement result are used to determine the connection judgment result, and the connection judgment result is sent to the terminal management platform, so that the terminal management platform determines the management strategy according to the connection judgment result.

[0062] Specifically, compare the hardware measurement information with the historical hardware measurement information. According to the comparison result, the behavior information of the network behavior and the trusted measurement result are used to determine the connection judgment result. It should be noted that for the trusted authentication of embedded devices, multiple parameters need to be verified simultaneously, such as the trusted measurement result representing the self-check result, the behavior verification result determined according to the behavior information of the network behavior, and the comparison result determined according to the hardware measurement information and the historical hardware measurement information. Further, the connection judgment result representing the credibility of the embedded device can be determined through comprehensive verification from multiple different angles. Here, only the specific determination method of the comparison result is described, and the determination method of the behavior verification result is not elaborated here. For details, see the following content. Further, through multi-angle trusted verification, comprehensive security detection can be performed on the embedded device to ensure the security and reliability of the trusted network.

[0063] Exemplarily, the trusted verification may include the following aspects. To ensure the trustworthiness of the device and the message, the trustworthiness of the hardware environment can be verified by parsing the measurement value of the device hardware environment (hardware information) and comparing it with the hardware information database; the trustworthiness of the connection address can be verified by checking whether the access connection address is within the trusted network whitelist determined by the service and configured by the network administrator; the trustworthiness of the message content can be verified by invoking a malicious code scanning tool to scan the message data; the access control behavior of the message can be parsed and verified according to the behavior control whitelist formulated by the device permissions and the security team and configured by the security administrator to ensure the trustworthiness of the network behavior of different embedded devices. It may also include the verification of trusted connection attributes: the gateway obtains the list of currently allowed IP ranges and the allowed port information from the trusted verification platform, modifies its own flow table rules, generates flow table configurations and their measurement information. After the modification is completed, when implementing the access to the network, the device hardware information of the gateway (which needs to include the flow table rule configuration information) is entered into the trusted verification platform. Verification of the trustworthiness of trusted connection messages: all traffic and messages are sent to the trusted authentication management platform, and the trusted authentication management platform uses traffic detection tools to perform traffic size range detection, traffic malicious code detection, and message content trustworthiness verification to generate security event information. If a trusted connection message with a failed trusted verification is found, a security event is generated, and according to the preset processing flow, the security access gateway performs operations such as prohibiting access to the corresponding device IP, access isolation, and secondary identity verification. During the access authentication process, when the verification fails, security alerts are generated and security logs are generated. These are provided for the security administrator to handle the corresponding illegal access events and for the security auditor to conduct subsequent security audits.

[0064] An embodiment of the present invention provides a network management method, which is applied to a network management system. The network management system includes multiple embedded devices, a gateway, a trusted verification platform, and a terminal management platform. The embedded devices form a local area network through a distributed soft bus, and the embedded devices include security chips. The security chip obtains the network behavior and hardware information of the embedded device, generates hardware measurement information according to the hardware information of the embedded device, generates a trusted measurement result according to the hardware measurement information, generates a trusted measurement message according to the behavior information of the network behavior, the hardware measurement information, and the trusted measurement result, and sends the trusted measurement message to the gateway. Wherein, the network behavior is the behavior when the embedded device applies to interact with other devices in the local area network. The trusted verification platform determines whether the embedded device is trusted according to the trusted measurement message forwarded by the gateway, determines a trusted judgment result, and sends the trusted judgment result to the terminal management platform. The trusted judgment result is used to represent whether the network behavior and hardware information of the embedded device are trusted. The terminal management platform determines a management policy according to the trusted judgment result and sends the management policy to the gateway. The gateway controls the network behavior of the embedded device in the local area network according to the management policy. Specifically, a trusted measurement message can be generated by the security chip. The trusted verification platform determines whether the network behavior and hardware information of the embedded device are trusted according to the trusted measurement message. The terminal management platform determines a management policy according to the trusted judgment result and sends the management policy to the gateway, so that the gateway controls the network behavior of the embedded device in the local area network according to the management policy. Through the above technical solution, the security and reliability of network device interaction in the local area network can be improved.

[0065] Embodiment 2

[0066] Figure 3 It is a flowchart of a network management method provided in Embodiment 2 of the present invention. Based on the above embodiments, the flow of controlling network behavior is further defined.

[0067] As Figure 3 shown, it includes:

[0068] Step 210: The security chip obtains the network behavior and hardware information of the embedded device, generates hardware measurement information according to the hardware information of the embedded device, generates a trusted measurement result according to the hardware measurement information, generates a trusted measurement message according to the behavior information of the network behavior, the hardware measurement information, and the trusted measurement result, and sends the trusted measurement message to the gateway. Wherein, the network behavior is the behavior when the embedded device applies to interact with other devices in the local area network.

[0069] Step 220: The trusted verification platform determines the behavior frequency of the network behavior of the embedded device in a preset time period according to the behavior type of the network behavior of the embedded device.

[0070] Step 230: According to a preset risk value assessment table, determine the risk values of the behavior type, behavior frequency, target data, and target system respectively.

[0071] Step 240: Determine the current total risk value of the network behavior according to each of the risk values.

[0072] Specifically, for different types of network behaviors, different risk value scores can be preset, such as malicious code, phishing, man-in-the-middle tools, Ddos (Distributed Denial of Service), SQL injection, 0Day (Zero-Day Attack), and XSS (Cross-Site Scripting), etc., and different risk values are assigned respectively: low risk is 1 point, medium risk is 3 points, high risk is 5 points, etc.

[0073] Specifically, the target data is the data required to be accessed by the network behavior, and different data categories and their corresponding storage service systems can be specified with different risk values. For example, the risk value of confidential data is set to 5 points, and the risk value of ordinary data is set to 1 point.

[0074] Specifically, to avoid repeated network behaviors, the behavior frequency of the network behavior in a preset time period can be determined according to the behavior type of the network behavior, and the risk value of the network behavior with an excessive behavior frequency is set to 5 points.

[0075] Furthermore, the current total risk value of the network behavior can be determined by accumulating each of the risk values.

[0076] Step 250: According to the device identifier and behavior type of the embedded device, determine the historical target behavior of the behavior type and the historical risk value of the historical target behavior in the historical behavior record of the embedded device.

[0077] Step 260: Update the current total risk value according to the current total risk value and the historical risk value, and determine the trusted judgment result of the network behavior according to the updated current total risk value, hardware measurement information, and trusted measurement result, and send the trusted judgment result to the terminal management platform.

[0078] Among them, the historical risk value is the risk value corresponding to the historical network behavior with the same behavior type as the current network behavior.

[0079] Specifically, due to the occurrence of network behaviors with high risk values, there may be human errors, such as mistyping the password during login. Therefore, the historical target behavior of the behavior type and the historical risk value of the historical target behavior can be determined in the historical behavior record of the embedded device. If the historical risk value is low, this may be a misoperation this time. According to the current total risk value and the historical risk value, the current total risk value is updated, for example, the current total risk value can be appropriately reduced.

[0080] Optionally, if the historical risk value indicates that the historical target behavior is credible, the current total risk value is attenuated.

[0081] Furthermore, the credibility judgment result of the network behavior can be determined according to the updated current total risk value, hardware measurement information, and credibility measurement result, so as to ensure that the embedded device is verified for credibility from multiple aspects simultaneously, and thus achieve the purpose of comprehensive security judgment. Specifically, the credibility of the network behavior level of the embedded device can be determined through the updated current total risk value, the credibility of the hardware level of the embedded device can be determined through the hardware measurement information, and the credibility of the self-verification of the embedded device can be determined through the credibility measurement result. Then, the final credibility judgment result is determined according to the credibility of each level.

[0082] Exemplarily, for the risk value of each behavior verification, it can be stored in the risk database and bound to the device identifier for subsequent extraction and use.

[0083] Step 270: The terminal management platform receives the credibility judgment result sent by the credibility verification platform. If the credibility judgment result indicates that the network behavior is secure and credible, it is determined that the management policy is a behavior permission command, and the behavior permission command is sent to the gateway.

[0084] Step 280: The gateway controls the network behavior of the embedded device in the local area network according to the management policy.

[0085] Specifically, if the credibility judgment result indicates that the network behavior is secure and credible, it is determined that the management policy is a behavior permission command; otherwise, it is a behavior prohibition command. Furthermore, the gateway can control the network behavior of the embedded device according to the behavior permission command or the behavior prohibition command.

[0086] The embodiment of the present invention provides a network management method. This embodiment can perform risk scoring on network behaviors from multiple angles to determine the current total risk value, and then adjust the current total risk value through the historical risk value, which can improve the reliability of the credibility verification platform for verifying the credibility of the network behavior of the embedded device, and thus enhance the security of the trusted network.

[0087] Embodiment III

[0088] Figure 4 The flowchart shows a method for trusted verification of embedded devices in a local area network provided by Embodiment 3 of the present invention, specifically illustrating the process of an embedded device from accessing the local area network to determining the trusted judgment result.

[0089] As Figure 4 shown, it includes:

[0090] Step 310: When the system of the embedded device starts, perform trusted measurement to determine the trusted verification result.

[0091] Specifically, starting from the BIOS, through the hardware trusted root in the SE trusted chip of the embedded device, measure bootloader, kernel image, TEE image, and uboot level by level, verify level by level, and trust level by level until the operating system runs normally, so as to ensure the security and trustworthiness of the device and provide a more secure execution environment for upper-layer applications.

[0092] Step 320: Generate a trusted measurement message according to the behavior information, hardware information, and trusted verification result of the network behavior of the embedded device.

[0093] Specifically, after the system is activated and started for the first time, store the measurement value of the device hardware information in the secure storage area of the SE trusted chip. This storage area is only written once during initialization and cannot be rewritten. The source data for calculating the hardware environment measurement value includes CPU identification, network card MAC, disk serial number, and trusted chip. After string concatenation, perform SM3_HMAC calculation through the SE trusted chip to obtain the measurement value of the hardware information. After each operating system startup, automatically detect whether it is consistent with the hardware environment measurement value.

[0094] Step 330: The trusted verification platform determines whether the embedded device is registered.

[0095] Step 340: The device is not registered.

[0096] Specifically, if the device is not registered, execute Step 350, the device registration program.

[0097] Step 350: The terminal management platform performs security verification on the embedded device. After the security verification passes, register the embedded device and send the hardware information of the embedded device to the trusted verification platform.

[0098] Specifically, if the embedded device is not recorded, the terminal management platform will perform a security check on the hardware information of the embedded device, such as CPU identification, CPU model, network card MAC, network card model, disk serial number, hard disk model, trusted chip SN, trusted chip model, operating system version, operating system configuration file, business application configuration file, and hardware physical environment. Then, after the security check passes, the hardware information will be sent to the trusted verification platform, which will measure the hardware information and save the historical hardware measurement information.

[0099] Step 360: The device has been recorded.

[0100] Specifically, if the device has been recorded, the trusted verification program will be executed, and step 370 will be performed.

[0101] Step 370 performs trusted verification on the embedded device from aspects such as hardware information, connection address, message content, and network behavior to determine the trusted judgment result.

[0102] Specifically, the trusted verification platform will perform trusted verification on the embedded device from multiple aspects, including: verifying the trustworthiness of the device's hardware environment: parsing the measured value of the device's hardware environment in the message and comparing it with the hardware information database of the trusted verification platform. Verifying the trustworthiness of the access connection address: whether the access address is within the whitelist of allowed access in the trusted network. Verifying the trustworthiness of the message content: the trusted authentication management platform calls the malicious code scanning tool to scan the message data for malicious code to ensure the security and trustworthiness of the transmitted message. Verifying the trustworthiness of the message control behavior: parsing the access control behavior of the message and verifying it with the corresponding behavior control whitelist according to the device's permissions. It also includes the verification of the network behavior of the embedded device. Specifically, see Figure 5 , Figure 5 is a schematic diagram of the trusted behavior verification provided by the embodiment of the present invention. Specifically, the authentication of network behavior can identify different threat types (behavior types), threat resource values (target data), system vulnerabilities (target systems), and threat frequencies (occurrence frequencies of network behaviors) through traffic and code detection tools combined with the device behavior feature authentication set, and assign risk values. At the same time, the current total risk value is dynamically adjusted according to the risk values of historical network behaviors. If the historical network behavior is trusted, the current total risk value will be attenuated. Further, it can be determined whether the current total risk value reaches the threshold through periodic detection to determine the behavior judgment result. If it is less than the threshold, the trusted information and risk information corresponding to the embedded device in the risk database will be updated. If it is greater than the threshold, the access permission of the corresponding embedded device will be closed, the risk device will be isolated, and it will be allowed to access the network after the authentication credibility reaches the standard again.

[0103] The embodiments of the present invention specifically define a method for an embedded device to perform trusted authentication in a trusted network, specifically illustrate the process of an embedded device accessing a trusted network, and the process of multi-angle trusted authentication for a device that has already accessed the trusted network. Through the method of the embodiments of the present invention, the security of the embedded device accessing the trusted network can be improved, the reliability of the trusted network can be enhanced, and network security is ensured.

[0104] Embodiment 4

[0105] Figure 6 FIG. is a schematic structural diagram of a network management system provided in Embodiment 4 of the present invention. This system is used to execute any network management method described in the embodiments of the present invention, and specifically can be a network management method for an Openharmony device. As Figure 6 shown, the system includes: The network management system includes multiple embedded devices 410, a gateway 420, a trusted verification platform 430, and a terminal management platform 440. The embedded devices form a local area network through a distributed soft bus. The embedded devices include a security chip 450.

[0106] The security chip 450 is used to obtain the network behavior and hardware information of the embedded device, generate hardware measurement information according to the hardware information of the embedded device, generate a trusted measurement result according to the hardware measurement information, generate a trusted measurement message according to the behavior information of the network behavior, the hardware measurement information, and the trusted measurement result, and send the trusted measurement message to the gateway, where the network behavior is the behavior when the embedded device interacts with other devices in the local area network.

[0107] The trusted verification platform 430 is used to determine whether the embedded device is trusted according to the trusted measurement message forwarded by the gateway, determine a trusted judgment result, and send the trusted judgment result to the terminal management platform. The trusted judgment result is used to characterize whether the network behavior and hardware information of the embedded device are trusted.

[0108] The terminal management platform 440 is used to determine a management strategy according to the trusted judgment result and send the management strategy to the gateway.

[0109] The gateway 440 is used to control the network behavior of the embedded device in the local area network according to the management strategy.

[0110] Optionally, during the construction of the local area network,

[0111] The terminal management platform is used to obtain the historical hardware information of candidate embedded devices to be connected to the local area network, verify whether the historical hardware information of the candidate embedded devices is secure, and if it is secure, register the candidate terminals in the local area network to generate registration information.

[0112] Send the historical hardware information to the trusted verification platform, and send the registration information to the gateway, so that the gateway can add the candidate terminal to the local area network according to the registration information.

[0113] The trusted verification platform is used to perform trusted measurement on the historical hardware information, determine and store the historical hardware measurement information.

[0114] Optionally, the network behavior includes a connection request, the trusted judgment result includes a connection judgment result, and the trusted measurement message includes the device identifier of the embedded device.

[0115] When the embedded device applies to establish a connection with other devices in the local area network, the trusted verification platform is used to receive the trusted measurement message of the embedded device forwarded by the gateway.

[0116] Obtain the historical hardware measurement information of the embedded device according to the device identifier.

[0117] Compare the hardware measurement information with the historical hardware measurement information, determine the connection judgment result according to the comparison result, the behavior information of the network behavior and the trusted measurement result, and send the connection judgment result to the terminal management platform, so that the terminal management platform can determine the management policy according to the connection judgment result.

[0118] Optionally, the terminal management platform is used to determine a connection policy according to the connection judgment result, and send the connection policy to the gateway, so that the gateway can allow or prohibit the connection request of the embedded device with other devices according to the connection policy.

[0119] Optionally, the security chip generates activation hardware measurement information according to the hardware information of the embedded device. When the embedded device is first activated, the security chip is used to compare the hardware measurement information with the activation hardware measurement information, and determine the trusted measurement result according to the comparison result.

[0120] Optionally, the behavior information of the network behavior includes: the behavior type of the network behavior, the target data and the target system.

[0121] The trusted verification platform is used to determine the behavior frequency of the network behavior in a preset period according to the behavior type of the network behavior of the embedded device.

[0122] According to the preset risk value assessment table, determine the risk values of the behavior type, behavior frequency, target data, and target system respectively.

[0123] Determine the current total risk value of the network behavior according to each of the risk values.

[0124] According to the device identifier and behavior type of the embedded device, determine the historical target behavior of the behavior type and the historical risk value of the historical target behavior in the historical behavior record of the embedded device.

[0125] Update the current total risk value according to the current total risk value and the historical risk value, and determine the trust judgment result of the network behavior according to the updated current total risk value, hardware measurement information, and trusted measurement result.

[0126] The updating the current total risk value according to the current total risk value and the historical risk value includes:

[0127] If the historical risk value indicates that the historical target behavior is trustworthy, attenuate the current total risk value.

[0128] Optionally, the terminal management platform is configured to receive the trust judgment result sent by the trust verification platform. If the trust judgment result indicates that the network behavior is safe and trustworthy, determine the management policy as a behavior permission command, and send the behavior permission command to the gateway so that the gateway allows the network behavior of the embedded device and other devices.

[0129] Optionally, the gateway is configured to determine the connection relationship between the embedded device and other devices in the local area network according to the network connection relationship table if the management policy indicates device isolation of the embedded device.

[0130] Disconnect the connection between the embedded device and other devices in the local area network.

[0131] The network management system provided by the embodiments of the present invention can execute the network management method provided by any embodiment of the present invention, and has corresponding functional modules and beneficial effects for executing the method.

Claims

1. A network management method, characterized in that: The method is applied to a network management system, which includes a plurality of embedded devices, a gateway, a trusted verification platform and a terminal management platform, wherein the embedded devices form a local area network through a distributed soft bus, and the embedded devices include a security chip; The security chip obtains the network behavior and hardware information of the embedded device, generates hardware measurement information according to the hardware information of the embedded device, generates a trusted measurement result according to the hardware measurement information, generates a trusted measurement message according to the behavior information of the network behavior, the hardware measurement information and the trusted measurement result, and sends the trusted measurement message to the gateway, wherein the network behavior is the behavior of the embedded device when interacting with other devices in the local area network; The trusted verification platform determines whether the embedded device is trustworthy based on the trusted measurement message forwarded by the gateway, determines a trusted judgment result, and sends the trusted judgment result to the terminal management platform, wherein the trusted judgment result is used to characterize whether the network behavior and hardware information of the embedded device are trustworthy; The terminal management platform determines a management policy according to the trustworthy judgment result, and sends the management policy to the gateway; The gateway controls the network behavior of the embedded device in the local area network according to the management policy.

2. The method according to claim 1, characterized in that: The construction process of the local area network includes: The terminal management platform obtains historical hardware information of a candidate embedded device to be connected to the local area network, verifies whether the historical hardware information of the candidate embedded device is safe, and if so, registers the candidate terminal in the local area network to generate registration information; The historical hardware information is sent to the trusted verification platform, and the registration information is sent to the gateway, so that the gateway adds the candidate terminal to the local area network according to the registration information.

3. The method according to claim 2, characterized in that Also includes: The trusted verification platform performs trusted measurement on the historical hardware information, and determines and stores the historical hardware measurement information.

4. The method according to claim 3, characterized in that: The network behavior includes a connection request, the trust measurement message includes a device identification of an embedded device, and the trust judgment result includes a connection judgment result; When the embedded device applies to establish a connection with other devices in the local area network, judging whether the embedded device is trustworthy based on the trust measurement message forwarded by the gateway and determining a trustworthy judgment result includes: The trusted verification platform receives the trusted measurement message of the embedded device forwarded by the gateway; Acquire historical hardware measurement information of the embedded device according to the device identification; Compare the hardware measurement information with the historical hardware measurement information, determine the connection judgment result according to the comparison result, the behavior information of the network behavior and the trustworthy measurement result, and send the connection judgment result to the terminal management platform so that the terminal management platform determines the management policy according to the connection judgment result.

5. The method according to claim 4, characterized in that The determining of a management strategy according to the credible judgment result includes: The terminal management platform determines a connection strategy according to the connection judgment result, and sends the connection strategy to the gateway, so that the gateway permits or prohibits connection requests between the embedded device and other devices according to the connection strategy.

6. The method according to claim 1, characterized in that When the embedded device is activated for the first time, the security chip generates activation hardware measurement information according to the hardware information of the embedded device; Generating a trusted measurement result according to the hardware measurement information includes: The security chip compares the hardware measurement information with the activated hardware measurement information, and determines a trusted measurement result according to the comparison result.

7. The method according to claim 1, characterized in that The behavior information of the network behavior includes: the behavior type of the network behavior, target data and target system; The step of judging whether the embedded device is credible according to the credible measurement message forwarded by the gateway and determining a credible judgment result includes: The trusted verification platform determines the behavior frequency of the network behavior in a preset time period according to the behavior type of the network behavior of the embedded device; According to the preset risk value assessment table, the risk values ​​of the behavior type, behavior frequency, target data and target system are determined respectively; Determine the total current risk value of the network behavior based on each of the risk values; Determining, according to the device identification and behavior type of the embedded device, a historical target behavior of the behavior type and a historical risk value of the historical target behavior in the historical behavior record of the embedded device; The current total risk value is updated according to the current total risk value and the historical risk value, and the trustworthy judgment result of the network behavior is determined according to the updated current total risk value, hardware measurement information and trustworthy measurement result.

8. The method according to claim 7, characterized in that The updating of the current total risk value according to the current total risk value and the historical risk value includes: If the historical risk value represents that the historical target behavior is credible, then the current total risk value is attenuated.

9. The method according to claim 7, characterized in that: The determining a management policy according to the trustworthy judgment result and sending the management policy to the gateway includes: The terminal management platform receives the trusted judgment result sent by the trusted verification platform. If the trusted judgment result indicates that the network behavior is safe and reliable, the management policy is determined to be a behavior permission command, and the behavior permission command is sent to the gateway so that the gateway allows the network behavior of the embedded device and other devices.

10. The method according to claim 1, characterized in that The controlling the network behavior of the embedded device in the local area network according to the management policy includes: If the management policy indicates that the embedded device is to be isolated, the gateway determines the connection relationship between the embedded device and other devices in the local area network according to the network connection relationship table; Disconnect the embedded device from other devices in the local area network.

11. A network management system, characterized in that: The network management system includes multiple embedded devices, a gateway, a trusted verification platform and a terminal management platform. The embedded devices form a local area network through a distributed soft bus. The embedded devices include a security chip; The security chip is used to obtain the network behavior and hardware information of the embedded device, generate hardware measurement information according to the hardware information of the embedded device, generate a trusted measurement result according to the hardware measurement information, generate a trusted measurement message according to the behavior information of the network behavior, the hardware measurement information and the trusted measurement result, and send the trusted measurement message to the gateway, wherein the network behavior is the behavior of the embedded device when interacting with other devices in the local area network; The trusted verification platform is used to determine whether the embedded device is trustworthy based on the trusted measurement message forwarded by the gateway, determine a trusted judgment result, and send the trusted judgment result to the terminal management platform, wherein the trusted judgment result is used to characterize whether the network behavior and hardware information of the embedded device are trustworthy; The terminal management platform is used to determine a management policy according to the trust judgment result, and send the management policy to the gateway; The gateway is used to control the network behavior of the embedded device in the local area network according to the management policy.

Images