Method and apparatus for controlling secure exchange of information

Abstract

The application belongs to the technical field of network, and particularly relates to a control method and device for safely exchanging information, which comprises the following steps: a security policy verification process responds to request information sent by a terminal device in a wireless mesh network, and verifies the request information according to a global security policy, wherein the global security policy is an information exchange authorization rule of the wireless mesh network; in the case that the request information passes the verification, an output process synchronizes the verification result to each second device in the wireless mesh network, and sends the request information to at least one second device, wherein the second device is used for providing a communication routing service or an edge computing service for the wireless mesh network; and in the case that the request information fails to pass the verification, the security policy verification process discards the request information; the load pressure of the wireless mesh network is effectively reduced, and the reliability and security of the wireless mesh network are improved.

Description

Technical Field

[0001] This application belongs to the field of network technology, specifically relating to a control method and device for secure information exchange. Background Technology

[0002] Wireless mesh networks, with their multi-hop interconnection and mesh topology, have evolved into an effective solution for various wireless access networks, including broadband home networks, community networks, enterprise networks, and metropolitan area networks.

[0003] Current IoT home appliance networking methods typically involve using home appliances with strong communication and computing capabilities as communication routing nodes and edge computing nodes, building a wireless mesh network between these appliances, so that less capable home appliances can access the service network through nearby communication routing nodes and obtain edge computing services provided by edge computing nodes through the service network.

[0004] When a large number of requests from home appliances need to cross complex network environments and transmission links to reach the target edge computing nodes, it will put a lot of load pressure on the service network. However, in home scenarios, due to the diversity of home appliance locations and indoor layouts, the communication access environment of various IoT smart home appliances may have weak network transmission capabilities, resulting in poor service timeliness and availability. Summary of the Invention

[0005] This application provides a control method and device for secure information exchange, which solves the problems of high transmission pressure and poor reliability in wireless mesh networks composed of Internet of Things (IoT) home appliances.

[0006] In a first aspect, this application provides a control method for secure information exchange, applied to a first device, the first device being used to provide communication routing services for a wireless mesh network, the first device including at least one security kernel, the security kernel being used to control a security policy verification process, an input process, and an output process, the method comprising:

[0007] The security policy verification process responds to the request information sent by the terminal device in the wireless mesh network and verifies the request information according to the global security policy, which is the information exchange authorization rule of the wireless mesh network.

[0008] If the request information is verified, the output process will synchronize the verification result to each second device in the wireless mesh network and send the request information to at least one second device, wherein the second device is used to provide communication routing services or edge computing power services for the wireless mesh network;

[0009] If the request information fails verification, the security policy verification process discards the request information.

[0010] Optionally, the security kernel is also used to control the measurement process; the verification of the request information includes:

[0011] The security policy verification process parses the request information to obtain the first security tag and routing information of the request information;

[0012] The security policy verification process verifies the first security tag according to the global security policy;

[0013] If the first security tag verification fails, the security policy verification process determines that the request information verification has failed.

[0014] If the first security tag verification passes, the measurement process verifies the routing information according to the routing verification rules;

[0015] If the routing information verification passes, the measurement process determines that the request information verification passes.

[0016] If the routing information verification fails, the measurement process determines that the request information verification has failed.

[0017] Optionally, synchronizing the verification result to each second device in the wireless mesh network and sending the request information to at least one second device includes:

[0018] The output process generates a simplified security tag based on the first security tag and the verification result, and synchronizes the access policy of the simplified security tag to each second device in the wireless mesh network;

[0019] The output process generates simplified request information corresponding to the request information based on the request information and the simplified security tag, and sends the simplified request information to at least one of the second devices.

[0020] Optionally, the method further includes:

[0021] In response to the access security label and its access policy issued by the IoT server, the security policy verification process verifies the access security label, wherein the access security label is used to indicate that the registration and binding of the third device for the first time is successful;

[0022] If the access security tag verification passes, the output process synchronizes the access security tag's allowance policy to each second device in the wireless mesh network.

[0023] Optionally, the method further includes:

[0024] The security policy verification process responds to the return information sent by the second device and verifies the return information according to the global security policy.

[0025] If the return information verification passes, the output process will synchronize the verification result to each first device or the terminal device in the wireless mesh network, and send the return information to the terminal device or at least one first device;

[0026] If the returned information fails verification, the security policy verification process discards the returned information.

[0027] Secondly, this application provides a control method for secure information exchange, applied to a second device, the second device being used to provide edge computing services for a wireless mesh network, the second device including at least one secure kernel and at least one general-purpose kernel, the secure kernel being used to control a security policy verification process, an input process, and an output process, the general-purpose kernel being used to control at least one computing service process, the method comprising:

[0028] The security policy verification process responds to the request information sent by the terminal device or the first device in the wireless mesh network, and verifies the request information according to the global security policy. The first device is used to provide communication routing services for the wireless mesh network.

[0029] If the request information passes verification, the input process parses the request information and sends the parsed request information to the target computing service process;

[0030] The target computing service process determines the return data based on the parsed request information and sends the return data to the output process;

[0031] The output process generates return information based on the returned data and sends the return information to at least one first device or terminal device.

[0032] Optionally, parsing the request information and sending the parsed request information to the target computing service process includes:

[0033] The input process parses the request information to obtain the security tag, routing information, data to be processed, and data processing instructions of the request information;

[0034] The input process determines the target computing service process based on the routing information;

[0035] The input process sends the data to be processed and the data processing instructions to the target computing service process.

[0036] Optionally, generating return information based on the returned data includes:

[0037] The output process generates a second security tag, and generates the return information based on the returned data and the second security tag;

[0038] The output process synchronizes the allowance policy of the second security tag to each first device and the terminal device in the wireless mesh network.

[0039] Optionally, the security kernel is also used to control the service measurement process and the evaluation process; the method further includes:

[0040] When the measurement triggering conditions are met, the service measurement process determines the identifier and hash value of the computation service process to be measured and its key components, and sends the identifier and hash value to the evaluation process;

[0041] The evaluation process verifies the identifier and the hash value to determine the security of the computation service process to be measured.

[0042] Thirdly, this application provides an electronic device, characterized in that it includes: a processor, and a memory communicatively connected to the processor;

[0043] The memory stores computer-executed instructions;

[0044] The processor executes computer execution instructions stored in the memory to implement the method as described in the first or second aspect.

[0045] Fourthly, this application provides a first control device applied to a first device, the first device being used to provide communication routing services for a wireless mesh network, the first control device comprising:

[0046] The first security policy verification module is used to respond to request information sent by terminal devices in the wireless mesh network, and to verify the request information according to a global security policy, wherein the global security policy is the information exchange authorization rule of the wireless mesh network; if the request information fails verification, the request information is discarded.

[0047] The first output module is configured to, upon successful verification of the request information, synchronize the verification result to each second device in the wireless mesh network and send the request information to at least one second device, wherein the second device is configured to provide communication routing services or edge computing services for the wireless mesh network.

[0048] Fifthly, this application provides a second control device applied to a second device, the second device being used to provide edge computing services for a wireless mesh network, the second control device comprising:

[0049] The second security policy verification module is used to respond to the request information sent by the terminal device or the first device in the wireless mesh network and verify the request information according to the global security policy. The first device is used to provide communication routing services for the wireless mesh network.

[0050] The input module is used to parse the request information if the request information verification passes, and send the parsed request information to the computing service module 503;

[0051] The computation service module is used to determine the return data based on the parsed request information and send the return data to the second output module 504;

[0052] The second output module is used to generate return information based on the returned data and send the return information to at least one first device or terminal device.

[0053] Sixthly, this application provides a program product including a computer program that, when executed by a processor, implements the method described in the first or second aspect.

[0054] The secure information exchange control method and apparatus provided in this application, in response to request information sent by terminal devices in the wireless mesh network, control a security policy verification process to verify the request information according to a global security policy, wherein the global security policy is the information exchange authorization rule of the wireless mesh network; if the request information passes verification, control an output process to synchronize the verification result to each second device in the wireless mesh network and send the request information to at least one second device, wherein the second device is used to provide communication routing services or edge computing services for the wireless mesh network; if the request information fails verification, control the security policy verification process to discard the request information, effectively reducing the load pressure on the wireless mesh network and improving the reliability and security of the wireless mesh network. Attached Figure Description

[0055] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this application and, together with the description, serve to explain the principles of this application.

[0056] Figure 1 A schematic diagram illustrating a scenario for a control method for secure information exchange provided in an embodiment of this application;

[0057] Figure 2 Flowchart of the control method for secure information exchange provided in this application Figure 1 ;

[0058] Figure 3 Flowchart of the control method for secure information exchange provided in this application Figure 2 ;

[0059] Figure 4 A schematic diagram of the structure of a first control device provided in this application;

[0060] Figure 5 A schematic diagram of the structure of a second control device provided in this application;

[0061] Figure 6 This is a schematic diagram of the structure of an electronic device provided in this application.

[0062] The accompanying drawings illustrate specific embodiments of this application, which will be described in more detail below. These drawings and descriptions are not intended to limit the scope of the concept in any way, but rather to illustrate the concept of this application to those skilled in the art through reference to particular embodiments. Detailed Implementation

[0063] To make the objectives, technical solutions, and advantages of this application clearer, the technical solutions of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0064] Wireless mesh networks, with their multi-hop interconnection and mesh topology, have evolved into an effective solution for various wireless access networks, including broadband home networks, community networks, enterprise networks, and metropolitan area networks.

[0065] Current IoT home appliance networking methods typically involve using home appliances with strong communication and computing capabilities as communication routing nodes and edge computing nodes, building a wireless mesh network between these appliances, so that less capable home appliances can access the service network through nearby communication routing nodes and obtain edge computing services provided by edge computing nodes through the service network.

[0066] When a large number of requests from home appliances need to cross complex network environments and transmission links to reach the target edge computing nodes, it will put a lot of load pressure on the service network. However, in home scenarios, due to the diversity of home appliance locations and indoor layouts, the communication access environment of various IoT smart home appliances may have weak network transmission capabilities, resulting in poor service timeliness and availability.

[0067] To address the aforementioned issues, this application proposes the following technical concept: When a request message sent by a home appliance flows through the first communication routing device with a secure kernel, the secure kernel of that communication routing device controls a security policy verification process to verify the request message according to the global security policy. If the request message passes verification, the secure kernel controls an output process to send the request message to the next communication routing device or the target edge computing device on the transmission link. If the request message fails verification, the secure kernel controls the communication protocol stack to discard the request message through the security policy verification process. This ensures that data packets that do not conform to the global security policy are discarded at the first communication routing device with identification capabilities (i.e., possessing a secure kernel), and do not continue to propagate along the transmission link in the wireless mesh network. This saves home communication resources, effectively reduces the load pressure on the wireless mesh network, and improves the reliability and security of the wireless mesh network.

[0068] Figure 1 This is a schematic diagram illustrating a scenario for a secure information exchange control method provided in an embodiment of this application. The secure information exchange control method provided in this application can be applied to, for example... Figure 1 The hardware environment shown consists of terminal device 101, communication routing device 102, and edge computing device 103. For example... Figure 1 As shown, the communication routing device 102 is connected to the terminal device 101 and the edge computing device 103 via network communication. When the terminal device 101 needs to use the edge computing service provided by the edge computing node in the wireless mesh network, the terminal device 101 generates request information and sends the request information to the communication routing device 102. The communication routing device 102 responds to the request information and verifies the request information according to the global security policy. If the request information passes the verification, the communication routing device 102 synchronizes the verification result to other communication routing devices and edge computing devices 103 in the wireless mesh network and sends the request information to the edge computing device 103. If the request information fails the verification, the communication routing device 102 discards the request information.

[0069] The technical solutions of this application and how they solve the aforementioned technical problems are described in detail below with specific embodiments. These specific embodiments may exist independently or in combination with each other. Identical or similar concepts or processes may not be repeated in some embodiments. The embodiments of this application will now be described with reference to the accompanying drawings.

[0070] Figure 2 Flowchart of the control method for secure information exchange provided in the embodiments of this application Figure 1 .like Figure 2 As shown, the method includes:

[0071] S201: The output process of the terminal device in the wireless mesh network generates request information and sends the request information to the first device.

[0072] The terminal device can be, for example, a washing machine, air conditioner, or water heater in a user's home. The terminal device includes at least one security kernel for controlling the security policy verification process, input process, and output process of the first device. The first device provides communication routing services for the wireless mesh network, i.e., a communication routing node in the wireless mesh network. The first device includes at least one security kernel for controlling the security policy verification process, input process, and output process of the first device. The first device may also include at least one general-purpose kernel for controlling the general application process of the first device. The first device can be, for example, a router in a user's home.

[0073] Specifically, when it is necessary to use the edge computing services provided by edge computing nodes in the wireless mesh network, the output process of the terminal device generates request information in a preset data format according to preset encoding rules, and sends the request information to the first device according to the corresponding communication protocol.

[0074] S202: The security policy verification process of the first device responds to the request information sent by the terminal device in the wireless mesh network and verifies the request information according to the global security policy.

[0075] The global security policy refers to the information exchange authorization rules of the wireless mesh network. The global security policy may include, for example, authentication rules, encryption rules, information verification rules, and access control rules.

[0076] Specifically, the security policy verification process matches the request information against the global security policy to determine whether the request information violates any rule in the global security policy.

[0077] S203: If the request information verification fails, the security policy verification process of the first device discards the request information.

[0078] Specifically, if the request information verification fails, the security policy verification process of the first device retrieves the request information from the communication protocol stack and discards it.

[0079] S204: If the request information is verified, the output process of the first device will synchronize the verification result to each second device in the wireless mesh network and send the request information to at least one second device.

[0080] The second device is used to provide communication routing services or edge computing services for wireless mesh networks.

[0081] Specifically, if the request information is verified successfully, the output process of the first device sends a confirmation signal indicating that the request information has been verified to each second device in the wireless mesh network according to a preset synchronization mechanism, and determines the transmission path of the request information according to the routing policy of the wireless mesh network, and sends the request information to at least one second device indicated by the transmission path.

[0082] S205: The security policy verification process of the second device responds to the request information sent by the first device in the wireless mesh network and verifies the request information according to the global security policy.

[0083] The second device used to provide edge computing services for the wireless mesh network can be, for example, a computing power control screen or computing power box in a user's home. It includes at least one security kernel and at least one general kernel. The security kernel is used to control the security policy verification process, the input process and the output process. The general kernel is used to control at least one computing service process. The computing service can be, for example, a model inference service.

[0084] The implementation method of step S205 is similar to that of step S202, and will not be described again in this embodiment.

[0085] S206: If the request information is verified, the input process of the second device parses the request information and sends the parsed request information to the target computing service process.

[0086] Specifically, the input process of the second device parses the request information according to a preset decoding rule, obtains the data to be processed, the data processing instructions, and the target computing service process of the request information based on the parsing result, and sends the data to be processed and the data processing instructions to the target computing service process.

[0087] S207: The target computing service process of the second device determines the return data based on the parsed request information and sends the return data to the output process.

[0088] Specifically, the target computing service of the second device performs computing processing on the data to be processed according to a preset data processing algorithm, determines the return data based on the computing results, and sends the return data to the output process.

[0089] S208: The output process of the second device generates return information based on the returned data, and sends the return information to at least one terminal device or the first device.

[0090] Specifically, the output process of the second device generates return information in a preset data format according to the returned data based on the preset encoding rules, and sends the return information to at least one terminal device or the first device according to the corresponding communication protocol.

[0091] The secure information exchange control method, apparatus, device, and storage medium provided in this application embodiment achieve the following: When a request message sent by a home appliance flows through the first communication routing device with a secure kernel, the secure kernel of the communication routing device controls a security policy verification process to verify the request message according to the global security policy. If the request message passes verification, the secure kernel controls an output process to send the request message to the next communication routing device or target edge computing node on the transmission link. If the request message fails verification, the secure kernel controls the communication protocol stack to discard the request message through the security policy verification process. This ensures that data packets that do not conform to the global security policy are discarded at the first communication routing device with identification capabilities (i.e., possessing a secure kernel), and do not continue to propagate along the transmission link in the wireless mesh network. This saves home communication resources, effectively reduces the load pressure on the wireless mesh network, and improves the reliability and security of the wireless mesh network.

[0092] Figure 3 Flowchart of the control method for secure information exchange provided in the embodiments of this application Figure 2 .like Figure 3 As shown, the method includes:

[0093] S301: The output process of the terminal device in the wireless mesh network generates request information and sends the request information to the first device.

[0094] The terminal device can be, for example, a washing machine, air conditioner, or water heater in a user's home. The terminal device includes at least one security kernel for controlling the security policy verification process, input process, and output process of the first device. The first device provides communication routing services for the wireless mesh network, i.e., a communication routing node in the wireless mesh network. The first device includes at least one security kernel for controlling the security policy verification process, input process, and output process of the first device. The first device may also include at least one general-purpose kernel for controlling the general application process of the first device. The first device can be, for example, a router in a user's home.

[0095] Specifically, when edge computing services provided by edge computing nodes in a wireless mesh network are needed, the output process of the terminal device reads the parameters to be transmitted, data processing instructions, and data transmission routing information from the corresponding location. It generates a first security tag according to a preset security tag generation algorithm, and generates a request message in a preset data format using the first security tag, the parameters to be transmitted, the data processing instructions, and the routing information according to preset encoding rules. The request message is then sent to a first device according to the corresponding communication protocol, and the release policy of the first security tag is synchronized to each first device in the wireless mesh network. The security tag can be, for example, a general IP security option attached to the Wi-Fi wireless mesh network IP protocol, a custom extended field for Bluetooth Low Energy wireless mesh networks, or other communication data fields independent of service data information. The security tag generation algorithm can include, for example, an encryption algorithm and a message authentication code or hash value verification algorithm. This application embodiment does not impose any special restrictions on the specific form and generation algorithm of the first security tag.

[0096] S302: The security policy verification process of the first device responds to the request information sent by the terminal device in the wireless mesh network, parses the request information, and obtains the first security tag and routing information of the request information.

[0097] Specifically, the security policy verification process of the first device parses the request information according to the preset decoding rules, and obtains the first security tag and routing information of the request information from the parsing result.

[0098] S303: The security policy verification process of the first device verifies the first security tag according to the global security policy.

[0099] Specifically, the security policy verification process determines whether the format of the first security tag conforms to the format specification indicated in the global security policy according to the corresponding format requirements in the global security policy. It reads each field of the first security tag and its field value, and determines whether the content corresponding to each field value of the first security tag conforms to the corresponding rules, such as authentication rules, encryption rules, information verification rules, and access control rules in the global security policy. If the format and content of the first security tag both conform to the global security policy, the first security tag verification is determined to be successful; otherwise, the first security tag verification is determined to be unsuccessful.

[0100] Optionally, the security kernel is also used to control the measurement process; the specific method and steps for the security policy verification process of the first device to verify the first security tag according to the global security policy can be described as follows:

[0101] Step 1: If the first security mark verification fails, the security policy verification process determines that the request information verification has failed.

[0102] Specifically, if the first security mark verification fails, the security policy verification process determines that the request information verification has failed.

[0103] Step 2: If the first security mark verification passes, the measurement process of the first device verifies the routing information according to the routing verification rules.

[0104] The routing information may include, for example, the output process identifier and input process identifier of the terminal device that sent the request information, and the input process identifier, input process identifier, and computing service process identifier of the target edge computing device.

[0105] Specifically, if the first security mark verification passes, the measurement process verifies the routing information according to preset routing verification rules. For example, it may include determining whether each process identifier in the routing information is a valid process identifier, and whether the terminal device has the permission to call the corresponding process of the target edge computing device. If the routing information meets each item in the routing verification rules, it is determined that the routing information verification passes; otherwise, it is determined that the routing information verification fails.

[0106] Step 3: If the routing information verification fails, the measurement process of the first device determines that the request information verification has failed.

[0107] Specifically, if the routing information verification fails, the measurement process determines that the request information verification has failed.

[0108] Step 4: If the routing information verification passes, the measurement process of the first device determines that the request information verification passes.

[0109] S304: If the request information fails verification, the security policy verification process of the first device discards the request information.

[0110] S305: If the request information verification passes, the output process of the first device generates a simplified security tag based on the first security tag and the verification result, and synchronizes the release policy of the simplified security tag to each second device in the wireless mesh network.

[0111] The addition of security tags and the synchronization of access policies can only be triggered by the output processes of each device; other processes do not have this permission.

[0112] Understandably, the first security tag may include the device's identity information, digital signature, message authentication code, and version information involved in the request information, as well as context information such as the session identifier and timestamp of this request. The simplified security tag may, for example, only include security verification data indicating that the request information has been verified. The first security tag may also be compressed using a corresponding encoding algorithm so that the data size of the simplified security tag is smaller than that of the first security tag. The output process of the first device uses the simplified security tag instead of the first security tag, which can reduce the communication overhead in the subsequent transmission process and reduce the communication transmission pressure of the wireless mesh network while ensuring transmission security.

[0113] Specifically, the output process of the first device parses the first security tag to obtain the session identifier, timestamp, and unique identifier of the device. The above data and the digital signature of the second device are compressed according to a preset compression encoding algorithm to obtain a simplified security tag. The simplified security tag's access policy is then synchronized to each second device in the wireless mesh network according to a preset synchronization mechanism.

[0114] S306: The output process of the first device generates simplified request information corresponding to the request information based on the request information and the simplified security tag, and sends the simplified request information to at least one of the second devices.

[0115] The second device is either a next communication routing device or a target edge computing device. The communication routing device is used to provide communication routing services for the wireless mesh network, and the target edge computing device is used to provide edge computing services for the wireless mesh network.

[0116] Specifically, the output process of the second device generates simplified request information in a preset data format from the simplified security tag, the parameters to be transmitted, the data processing instructions, and the routing information in the parsing result of the request information according to the preset encoding rules, and sends the simplified request information to at least one of the second devices according to the corresponding communication protocol.

[0117] S307: The security policy verification process of the second device responds to the simplified request information sent by the first device and verifies the simplified request information according to the global security policy.

[0118] The implementation method of step S307 is similar to that of step S303, and will not be described again in this embodiment.

[0119] Optionally, if the second device is a communication routing node, the output process of the second device, upon determining that the simplified request information has passed verification, continues to send the simplified request information to the next second device according to the corresponding link rules. The next second device performs a verification process for the simplified request information. If the next second device is also a communication routing node, the simplified request information continues to be transmitted and verified, and so on, until the simplified request information is sent to the target edge computing node.

[0120] S308: If the request information is verified, the input process of the second device, which is the target edge computing node, parses the simplified request information to obtain the simplified security tag, routing information, data to be processed, and data processing instructions of the request information.

[0121] The second device for providing edge computing services to the wireless mesh network includes at least one secure kernel and at least one general-purpose kernel. The secure kernel is used to control the security policy verification process, the input process, and the output process. The general-purpose kernel is used to control at least one computing service process, which may be, for example, a model inference service.

[0122] The implementation of step S308 is similar to that of step S206, and will not be described again in this embodiment.

[0123] S309: The input process of the second device determines the target computing service process based on the routing information.

[0124] Specifically, the input process of the second device reads the routing information and obtains the target computing service process identifier therein.

[0125] S310: The input process of the second device sends the data to be processed and the data processing instructions to the target computing service process.

[0126] Specifically, the input process of the second device sends the data to be processed and the data processing instructions to the target computing service process according to the target computing service process identifier.

[0127] For example, the first device is a washing machine, the second device is a computing power box, the data to be processed includes the clothing processing program to be executed, the weight of the tubular clothing, and the user's historical setting parameters for using the clothing processing program, the target computing service process is the recommendation service process of the parameter recommendation model of the clothing processing program, and the computing power box sends the data to be processed and the corresponding data processing instructions to the recommendation service process according to the target computing service process identifier to obtain the recommended values ​​of the setting parameters output by the parameter recommendation model.

[0128] S311: The target computing service process of the second device determines the return data based on the parsed request information and sends the return data to the output process.

[0129] Continuing with the example above, the computing power box's recommendation computing service process inputs the data to be processed into the parameter recommendation model according to the data processing instructions, obtains the recommended values ​​of the setting parameters output by the parameter recommendation model, and sends the recommended values ​​of the setting parameters to the computing power box's output process.

[0130] S312: The output process of the second device generates a second security tag, and generates the return information based on the returned data and the second security tag.

[0131] S313: The output process of the second device synchronizes the release policy of the second security tag to each first device and the terminal device in the wireless mesh network, and sends the return information to at least one first device.

[0132] The implementation methods of steps S312 and S313 are similar to those of step S301, and will not be described again in this embodiment.

[0133] Optionally, the security kernel of the second device, serving as an edge computing node, can also be used to control the service measurement process and the evaluation process. These processes are used to perform integrity measurements on the computing service process and its key components of the second device. Specific methods and steps may be as follows:

[0134] Step 1: When the measurement triggering conditions are met, the service measurement process determines the identifier and hash value of the computation service process to be measured and its key components, and sends the identifier and hash value of the computation service process to be measured and its key components to the evaluation process.

[0135] The measurement triggering condition can be, for example, a preset period since the last integrity measurement, or a specific event, such as a version update, abnormal behavior, or a change in global security policy. This application embodiment does not impose any special restrictions on this. The key component can be, for example, a model engine.

[0136] Step 2: The evaluation process verifies the identifiers and hash values ​​of the computing service process to be measured and its key components to determine the security of the computing service process.

[0137] S314: The security policy verification process of the first device responds to the return information sent by the second device and verifies the return information according to the global security policy.

[0138] The implementation of step S314 is similar to that of step S303, and will not be described again in this embodiment.

[0139] S315: If the return information verification passes, the output process of the first device will synchronize the verification result to each first device or the terminal device in the wireless mesh network, and send the return information to the terminal device or at least one first device.

[0140] The implementation of step S315 is similar to that of steps S305 to S306, and will not be described again in this embodiment.

[0141] Optionally, the security policy verification process of the terminal device responds to the returned information and verifies the returned information; if the returned information is verified, the input process of the terminal device parses the returned information and inputs the parsed returned information (i.e., the data calculation result) into the corresponding application process of the terminal device.

[0142] S316: If the returned information fails verification, the security policy verification process of the first device discards the returned information.

[0143] The implementation of step S316 is similar to that of step S304, and will not be described again in this embodiment.

[0144] Optionally, when a terminal device joins a wireless mesh network for the first time, its initial network configuration process may include the following steps:

[0145] Step 1: When a user binds a terminal device to their account, the terminal device's output process retrieves the terminal device's registration information from the corresponding storage location and sends the registration information to the IoT server.

[0146] The registration information may include, for example, user identifier, unique identifier of terminal device, security kernel, version information and integrity hash value of each functional module.

[0147] Step 2: The IoT server verifies the registration information, and after the registration information is verified, it associates and stores the user identifier and the unique identifier of the terminal device, and sends the access security tag of the terminal device and its access policy to the terminal device and at least two target first devices.

[0148] The target first device is used to provide communication routing services for the wireless mesh network, and the access security tag is used to indicate that the registration and binding of the third device that is accessing for the first time is successful.

[0149] Step 3: In response to the access security label and its access policy issued by the IoT server, the security policy verification process of the target first device verifies the access security label.

[0150] Step 4: If the access security tag verification passes, the output process of the target first device will synchronize the access security tag's allowance policy to each second device in the wireless mesh network.

[0151] Understandably, after the initial network access configuration process described above, when the terminal device needs to communicate with other devices in the wireless mesh network, its output process can generate request information carrying the access security tag. The security policy verification process of other devices in the wireless mesh network can then allow the request information, thereby establishing a communication connection between the newly connected terminal device and other devices.

[0152] The secure information exchange control method provided in this application verifies the transmitted information at the first communication routing node with a secure kernel, replaces the security tag carried by the verified information with a simplified security tag, and then proceeds with subsequent transmission. This further reduces communication transmission overhead and lowers the communication load pressure on the network. By separating the functions and permissions of each process in the device, the receipt and transmission of information are handled by different processes. That is, data packets transmitted in the network are only allowed to enter and remove tags unidirectionally by the input process and be sent and added tags unidirectionally by the output process. This achieves unidirectional transmission of data packets within the device. At the same time, by combining data packet routing information and the integrity measurement of the device's computing service process, the security of the wireless mesh network is effectively improved.

[0153] Figure 4 This is a schematic diagram of the structure of a first control device provided in an embodiment of this application; as shown below. Figure 4As shown, this application provides a first control device applied to a first device, the first device being used to provide communication routing services for a wireless mesh network. The first control device 400 provided in this embodiment includes:

[0154] The first security policy verification module 401 is used to respond to request information sent by terminal devices in the wireless mesh network, and to verify the request information according to a global security policy, wherein the global security policy is the information exchange authorization rule of the wireless mesh network; if the request information fails verification, the request information is discarded.

[0155] The first output module 402 is configured to synchronize the verification result to each second device in the wireless mesh network and send the request information to at least one second device when the request information verification passes, wherein the second device is configured to provide communication routing services or edge computing services for the wireless mesh network.

[0156] Optionally, the first control device 400 further includes a measurement module 403;

[0157] The first security policy verification module 401 is specifically used to parse the request information to obtain the first security tag and routing information of the request information; the security policy verification process verifies the first security tag according to the global security policy; if the first security tag verification fails, it is determined that the request information verification fails.

[0158] The measurement module 403 is used to verify the routing information according to the routing verification rules if the first security mark verification passes; to determine that the request information verification passes if the routing information verification passes; and to determine that the request information verification fails if the routing information verification fails.

[0159] Optionally, the first output module 402 is specifically configured to generate a simplified security tag based on the first security tag and the verification result, and synchronize the access policy of the simplified security tag to each second device in the wireless mesh network; generate simplified request information corresponding to the request information based on the request information and the simplified security tag, and send the simplified request information to at least one second device.

[0160] Optionally, the first security policy verification module 401 is further configured to verify the access security mark in response to the access security mark and its access policy issued by the IoT server, wherein the access security mark is used to indicate that the third device successfully registered and bound for the first time.

[0161] The first output module 402 is further configured to synchronize the access security label's allowance policy to each second device in the wireless mesh network if the access security label verification passes.

[0162] Optionally, the first security policy verification module 401 is further configured to, in response to the return information sent by the second device, verify the return information according to the global security policy; and discard the return information if the return information fails verification.

[0163] The first output module 402 is further configured to, if the return information verification passes, synchronize the verification result to each first device or the terminal device in the wireless mesh network, and send the return information to the terminal device or at least one first device.

[0164] The first control device provided in this embodiment can execute the method provided in the above-described method embodiments. Its implementation principle and technical effects are similar, and will not be elaborated upon here.

[0165] Figure 5 This is a schematic diagram of the structure of a second control device provided in an embodiment of this application; as shown below. Figure 5 As shown, this application provides a second control device applied to a second device, the second device being used to provide edge computing services for a wireless mesh network. The second control device 500 provided in this embodiment includes:

[0166] The second security policy verification module 501 is used to verify the request information sent by the terminal device or the first device in the wireless mesh network in accordance with the global security policy. The first device is used to provide communication routing services for the wireless mesh network.

[0167] The input module 502 is used to parse the request information if the request information verification passes, and send the parsed request information to the computing service module 503;

[0168] The computing service module 503 is used to determine the return data based on the parsed request information and send the return data to the second output module 504;

[0169] The second output module 504 is used to generate return information based on the returned data and send the return information to at least one first device or terminal device.

[0170] Optionally, the input module 502 is specifically used to parse the request information to obtain the security tag, routing information, data to be processed, and data processing instructions of the request information; determine the target computing service process based on the routing information; and send the data to be processed and data processing instructions to the computing service module 503.

[0171] Optionally, the second output module 504 is specifically used to generate a second security tag, and based on the returned data and the second security tag, generate the returned information; and synchronize the allowance policy of the second security tag to each first device and the terminal device in the wireless mesh network.

[0172] Optionally, the second control device 500 further includes a service measurement module 505 and an evaluation module 506. The service measurement module 505 is used to determine the identifier and hash value of the computation service process to be measured and its key components when the measurement triggering conditions are met, and send the identifier and the hash value to the evaluation module 506.

[0173] The evaluation module 506 is used to verify the identifier and the hash value to determine the security of the computation service process to be measured.

[0174] The second control device provided in this embodiment can execute the method provided in the above method embodiment. Its implementation principle and technical effect are similar, and will not be described in detail here.

[0175] This application also provides an electronic device, including: at least one processor and a memory;

[0176] The memory stores instructions that the computer executes;

[0177] At least one processor executes computer execution instructions stored in memory, causing at least one processor to perform a control method for securely exchanging information.

[0178] Figure 6 This is a hardware schematic diagram of an electronic device provided in an embodiment of the present invention. For example... Figure 6 As shown, the electronic device 600 provided in this embodiment includes at least one processor 601 and a memory 602. The device 600 also includes a communication interface 603. The processor 601, memory 602, and communication interface 603 are connected via a bus 604.

[0179] In the specific implementation process, at least one processor 601 executes computer execution instructions stored in memory 602, causing at least one processor 601 to execute the control method for secure information exchange as described above.

[0180] The specific implementation process of processor 601 can be found in the above method embodiments, and its implementation principle and technical effect are similar. It will not be repeated here.

[0181] In the above Figure 6 In the illustrated embodiments, it should be understood that the processor can be a Central Processing Unit (CPU), or other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), etc. The general-purpose processor can be a microprocessor or any conventional processor. The steps of the method disclosed in this invention can be directly implemented by a hardware processor, or implemented by a combination of hardware and software modules within the processor.

[0182] The memory may include random access memory (RAM) and may also include non-volatile memory (NVM), such as at least one disk storage device.

[0183] The bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. Buses can be categorized as address buses, data buses, control buses, etc. For ease of illustration, the buses shown in the accompanying drawings are not limited to a single bus or a single type of bus.

[0184] In addition, this embodiment also provides a computer-readable storage medium storing a computer program thereon, which is executed by a processor to implement the control method for secure information exchange described in the above embodiment.

[0185] The aforementioned computer-readable storage medium can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic storage, flash memory, magnetic disk, or optical disk. The readable storage medium can be any available medium accessible to a general-purpose or special-purpose computer.

[0186] An exemplary readable storage medium is coupled to a processor, enabling the processor to read information from and write information to the readable storage medium. Of course, the readable storage medium can also be a component of the processor. The processor and the readable storage medium can reside in an Application Specific Integrated Circuit (ASIC). Alternatively, the processor and the readable storage medium can exist as discrete components in the device.

[0187] The division of units described herein is merely a logical functional division. In actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be indirect coupling or communication connection through some interfaces, devices, or units, and may be electrical, mechanical, or other forms.

[0188] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0189] In addition, the functional units in the various embodiments of the present invention can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit.

[0190] If the aforementioned functions are implemented as software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this invention, essentially, or the part that contributes to the prior art, or a portion of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0191] Those skilled in the art will understand that all or part of the steps of the above-described method embodiments can be implemented by hardware related to program instructions. The aforementioned program can be stored in a computer-readable storage medium. When executed, the program performs the steps of the above-described method embodiments; and the aforementioned storage medium includes various media capable of storing program code, such as ROM, RAM, magnetic disks, or optical disks.

[0192] The technical solutions of this application have been described above with reference to the preferred embodiments shown in the accompanying drawings. However, it is readily understood by those skilled in the art that the scope of protection of this application is obviously not limited to these specific embodiments. The above embodiments are only used to illustrate the technical solutions of this application and are not intended to limit them. Although this application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some or all of the technical features therein. These modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of this application.

Claims

1. A control method for secure information exchange, characterized in that, Applied to a first device, the first device being used to provide communication routing services for a wireless mesh network, the first device including at least one security kernel, the security kernel being used to control a security policy verification process, an input process, and an output process, the method comprising: The security policy verification process responds to the request information sent by the terminal device in the wireless mesh network and verifies the request information according to the global security policy, which is the information exchange authorization rule of the wireless mesh network. If the request information is verified, the output process will synchronize the verification result to each second device in the wireless mesh network and send the request information to at least one second device, wherein the second device is used to provide communication routing services or edge computing power services for the wireless mesh network; If the request information fails verification, the security policy verification process discards the request information.

2. The method according to claim 1, characterized in that, The security kernel is also used to control the measurement process; the verification of the request information includes: The security policy verification process parses the request information to obtain the first security tag and routing information of the request information; The security policy verification process verifies the first security tag according to the global security policy; If the first security tag verification fails, the security policy verification process determines that the request information verification has failed. If the first security tag verification passes, the measurement process verifies the routing information according to the routing verification rules; If the routing information verification passes, the measurement process determines that the request information verification passes. If the routing information verification fails, the measurement process determines that the request information verification has failed.

3. The method according to claim 2, characterized in that, The step of synchronizing the verification result to each second device in the wireless mesh network and sending the request information to at least one second device includes: The output process generates a simplified security tag based on the first security tag and the verification result, and synchronizes the access policy of the simplified security tag to each second device in the wireless mesh network; The output process generates simplified request information corresponding to the request information based on the request information and the simplified security tag, and sends the simplified request information to at least one of the second devices.

4. The method according to claim 1, characterized in that, The method further includes: In response to the access security label and its access policy issued by the IoT server, the security policy verification process verifies the access security label, wherein the access security label is used to indicate that the registration and binding of the third device for the first time is successful; If the access security tag verification passes, the output process synchronizes the access security tag's allowance policy to each second device in the wireless mesh network.

5. The method according to claim 1, characterized in that, The method further includes: The security policy verification process responds to the return information sent by the second device and verifies the return information according to the global security policy. If the return information verification passes, the output process will synchronize the verification result to each first device or the terminal device in the wireless mesh network, and send the return information to the terminal device or at least one first device; If the returned information fails verification, the security policy verification process discards the returned information.

6. A control method for secure information exchange, characterized in that, The method is applied to a second device, which provides edge computing services for a wireless mesh network. The second device includes at least one secure kernel and at least one general-purpose kernel. The secure kernel controls a security policy verification process, an input process, and an output process. The general-purpose kernel controls at least one computing service process. The method includes: The security policy verification process responds to the request information sent by the terminal device or the first device in the wireless mesh network, and verifies the request information according to the global security policy. The first device is used to provide communication routing services for the wireless mesh network. If the request information passes verification, the input process parses the request information and sends the parsed request information to the target computing service process; The target computing service process determines the return data based on the parsed request information and sends the return data to the output process; The output process generates return information based on the returned data and sends the return information to at least one first device or terminal device.

7. The method according to claim 6, characterized in that, The step of parsing the request information and sending the parsed request information to the target computing service process includes: The input process parses the request information to obtain the security tag, routing information, data to be processed, and data processing instructions of the request information; The input process determines the target computing service process based on the routing information; The input process sends the data to be processed and the data processing instructions to the target computing service process.

8. The method according to claim 6, characterized in that, The step of generating return information based on the returned data includes: The output process generates a second security tag, and generates the return information based on the returned data and the second security tag; The output process synchronizes the allowance policy of the second security tag to each first device and the terminal device in the wireless mesh network.

9. The method according to claim 6, characterized in that, The security kernel is also used to control the service measurement process and the evaluation process; the method further includes: When the measurement triggering conditions are met, the service measurement process determines the identifier and hash value of the computation service process to be measured and its key components, and sends the identifier and hash value to the evaluation process; The evaluation process verifies the identifier and the hash value to determine the security of the computation service process to be measured.

10. An electronic device, characterized in that, include: A processor, and a memory communicatively connected to the processor; The memory stores computer-executed instructions; The processor executes computer execution instructions stored in the memory to implement the method as described in any one of claims 1-5 or 6-9.

Images