A security and anti-counterfeiting system suitable for the perception layer of the Internet of Things

Abstract

The present invention relates to the field of anti-counterfeiting technology of the perception layer of the Internet of Things, and discloses a security anti-counterfeiting system suitable for the perception layer of the Internet of Things, including: a cloud computing server CCSpdss running a perception data anti-counterfeiting system service end and deployed in the application layer of the Internet of Things, a proxy server ASpdss running a perception data anti-counterfeiting system user end and deployed in the transmission layer of the Internet of Things, and a perception terminal PTi running a perception data anti-counterfeiting system user end and deployed in the perception layer of the Internet of Things; the perception terminal PTi performs signature processing on the monitoring data MDi1, and obtains the signature Si1 of the monitoring data MDi1; the system administrator SAas of the proxy server ASpdss verifies the signature Si1 of the monitoring data MDi1 and performs signature processing on the received monitoring data MDi2, and obtains the signature Si2 of the monitoring data MDi2; the system administrator SAccs of the cloud computing server CCSpdss verifies the signature Si2 of the monitoring data MDi2. The present invention solves the problem of how to overcome the problem of incomplete, inaccurate and forged data in the terminal equipment of the perception layer of the Internet of Things.

Description

Technical Field

[0001] The present invention relates to the technical field of anti-counterfeiting of the perception layer of the Internet of Things, and in particular to a security anti-counterfeiting system suitable for the perception layer of the Internet of Things. Background Art

[0002] The Internet of Things refers to a network of objects that are interconnected. The way of interconnection is to install sensors or wireless radio frequency identification tags on carriers, and use communication technology to support the transmission of sensing information between carriers, or even automatic control devices, to achieve the functions of intelligent automatic control and response of objects. Further through intelligent functional interfaces or cloud computing technology, it can be used as a more advanced application function such as remote monitoring, massive information analysis and interpretation. The network based on object communication is called the Internet of Things, but the information of objects must also be fed back to people to achieve the purpose of service. In the past, scholars have conducted relevant research on the deep heterogeneity and unknown topology architecture of the Internet of Things intermediary layer, but their research results cannot solve the problems of inaccurate data, huge and complex data, and data insecurity in the Internet of Things environment. Summary of the invention

[0003] 1. Technical issues to be resolved

[0004] In view of the deficiencies in the prior art, the present invention provides a security anti-counterfeiting system suitable for the perception layer of the Internet of Things to solve the technical problem of how to overcome the incomplete, inaccurate and forged data in the terminal devices of the perception layer of the Internet of Things.

[0005] (II) Technical solution

[0006] To achieve the above object, the present invention provides the following technical solutions:

[0007] A security anti-counterfeiting system suitable for the perception layer of the Internet of Things, comprising: a cloud computing server CCSpdss running a perception data anti-counterfeiting system server software and deployed in the application layer of the Internet of Things, a proxy server ASpdss running a perception data anti-counterfeiting system user software and deployed in the transmission layer of the Internet of Things, and a perception terminal PTi running a perception data anti-counterfeiting system user software and deployed in the perception layer of the Internet of Things;

[0008] The sensing terminal PTi performs signature processing on the monitoring data MDi1 on the sensing data anti-counterfeiting system, and obtains the signature of the monitoring data MDi1 as Si1;

[0009] The system administrator SAas of the proxy server ASpdss verifies the signature Si1 of the monitoring data MDi1 and performs signature processing on the received monitoring data MDi2, and obtains the signature Si2 of the monitoring data MDi2;

[0010] The system administrator SAccs of the cloud computing server CCSpdss verifies the signature Si2 of the monitoring data MDi2.

[0011] Furthermore, the method for the sensing terminal PTi to sign the monitoring data MDi1 on the sensing data anti-counterfeiting system includes the following steps:

[0012] Step1, the sensing terminal PTi calculates its own private key on the sensing data anti-counterfeiting system and publishes its public key to the system, specifically as follows:

[0013] The sensing terminal PTi selects two different large prime numbers p and q. First, it calculates n = pq, and then calculates f(n) = (p - 1)(q - 1);

[0014] After that, the sensing terminal PTi selects a random number y such that 0 < y < f(n) and y and f(n) are relatively prime, that is, gcd(y, f(n)) = 1;

[0015] The sensing terminal PTi calculates x = y -1 mod f(n), and saves the private key (x, n), and publishes the public key (y, n) on the sensing data anti-counterfeiting system;

[0016] Step2, the sensing terminal PTi generates a digest Z = H(MDi1) for the monitoring data MDi1 on the sensing data anti-counterfeiting system and generates a digital signature using the private key (x, n). This signature is Si1 = (Z) x mod f(n), and transmits the signature Si1 and the monitoring data MDi1 together to the proxy server Aspdss;

[0017] Among them, H(MDi1) is obtained from the monitoring data MDi1 through a one-way hash function;

[0018] Step3, the system administrator SAas of the proxy server Aspdss verifies the legality of the signature Si1 of the monitoring data MDi1 of the sensing terminal PTi on the sensing data anti-counterfeiting system, specifically as follows:

[0019] The system administrator SAas of the proxy server Aspdss first constructs a digest Z' = H(MDi1) of the monitoring data MDi1, and then calculates Z” = (Si1) y mod f(n), and then verifies whether the equation Z' = Z” holds;

[0020] If it holds, it proves that the signature Si1 is legal and valid.

[0021] Furthermore, the perception terminal PTi exchanges data with the perception data anti-counterfeiting system server software running on the proxy server ASpdss through the perception data anti-counterfeiting system user software.

[0022] Furthermore, the proxy server ASpdss exchanges data with the perception data anti-counterfeiting system server software running on the cloud computing server CCSpdss through the perception data anti-counterfeiting system client software.

[0023] (III) Beneficial technical effects

[0024] Compared with the prior art, the present invention has the following beneficial technical effects:

[0025] In the present invention, before the perception terminal PTi requests the perception data anti-counterfeiting system user-side software to interact with the perception data anti-counterfeiting system server-side software running on the proxy server ASpdss, the perception terminal PTi performs signature processing on the monitoring data MDi1 on the perception data anti-counterfeiting system, and obtains the signature of the monitoring data MDi1 as Si1;

[0026] Before the proxy server ASpdss requests the perception data anti-counterfeiting system client software to interact with the perception data anti-counterfeiting system server software running on the cloud computing server CCSpdss, the system administrator SAas of the proxy server ASpdss first verifies the signature Si1 of the monitoring data MDi1, and then further performs signature processing on the received monitoring data MDi2, and obtains the signature Si2 of the monitoring data MDi2; and the system administrator SAccs of the cloud computing server CCSpdss verifies the signature Si2 of the monitoring data MDi2;

[0027] This solves the technical problem of how to overcome incomplete, inaccurate and forged data in terminal devices at the perception layer of the Internet of Things. DETAILED DESCRIPTION

[0028] The following will be combined with the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present invention.

[0029] A security anti-counterfeiting system applicable to the perception layer of the Internet of Things, comprising: a cloud computing server CCSpdss installed and running with a perception data anti-counterfeiting system server software and deployed at the application layer of the Internet of Things, a proxy server ASpdss installed and running with a perception data anti-counterfeiting system user software and deployed at the transmission layer of the Internet of Things, and a perception terminal PTi installed and running with a perception data anti-counterfeiting system user software and deployed at the perception layer of the Internet of Things;

[0030] The perception terminal PTi interacts with the perception data anti-counterfeiting system server software running on the proxy server ASpdss through the perception data anti-counterfeiting system user software;

[0031] The proxy server ASpdss performs data exchange with the perception data anti-counterfeiting system server software running on the cloud computing server CCSpdss through the perception data anti-counterfeiting system client software;

[0032] In order to solve the problem of incomplete, inaccurate and forged data in the perception terminal PTi of the perception layer of the Internet of Things, before the perception terminal PTi requests the perception data anti-counterfeiting system client software to interact with the perception data anti-counterfeiting system server software running on the proxy server ASpdss, the perception terminal PTi signs the monitoring data MDi1 on the perception data anti-counterfeiting system, and obtains the signature of the monitoring data MDi1 as Si1;

[0033] Before the proxy server ASpdss requests the perception data anti-counterfeiting system client software to interact with the perception data anti-counterfeiting system server software running on the cloud computing server CCSpdss, the system administrator SAas of the proxy server ASpdss first verifies the signature Si1 of the monitoring data MDi1, and then further performs signature processing on the received monitoring data MDi2, and obtains the signature Si2 of the monitoring data MDi2; and the system administrator SAccs of the cloud computing server CCSpdss verifies the signature Si2 of the monitoring data MDi2;

[0034] Furthermore, the method for the perception terminal PTi to perform signature processing on the monitoring data MDi1 in the perception data anti-counterfeiting system includes the following steps:

[0035] Step 1, the perception terminal PTi calculates its own private key on the perception data anti-counterfeiting system and publishes its public key to the system, as follows:

[0036] The sensing terminal PTi selects two different large prime numbers p and q, and first calculates n=pq, and then calculates f(n)=(p-1)(q-1);

[0037] After that, the sensing terminal PTi selects a random number y such that 0 < y < f(n), and y and f(n) are relatively prime, i.e., gcd(y, f(n)) = 1;

[0038] The sensing terminal PTi calculates x = y -1 mod f(n), and saves the private key (x, n), and publishes the public key (y, n) on the sensing data anti-counterfeiting system;

[0039] Step2, the sensing terminal PTi generates a digest Z = H(MDi1) for the monitoring data MDi1 on the sensing data anti-counterfeiting system, and generates a digital signature using the private key (x, n), and the signature is Si1 = (Z) x mod f(n), and transmits the signature Si1 and the monitoring data MDi1 to the proxy server Aspdss together;

[0040] Among them, H(MDi1) is obtained from the monitoring data MDi1 through a one-way hash function;

[0041] Step3, the system administrator SAas of the proxy server Aspdss verifies the legality of the signature Si1 of the monitoring data MDi1 of the sensing terminal PTi on the sensing data anti-counterfeiting system, specifically as follows:

[0042] The system administrator SAas of the proxy server Aspdss first constructs a digest Z' = H(MDi1) of the monitoring data MDi1, and then calculates Z” = (Si1) y mod f(n), and then verifies whether the equation Z' = Z” holds;

[0043] If it holds, it proves that the signature Si1 is legal and valid; otherwise, it proves that the signature Si1 is illegal, and at this time it means that the monitoring data MDi1 is untrustworthy;

[0044] Step4, the system administrator SAas of the proxy server Aspdss calculates its own private key on the sensing data anti-counterfeiting system, and publishes its public key to the system, and the calculation method of its key refers to the key calculation method of the sensing terminal PTi in Step1.

[0045] Step5, the system administrator SAas of the proxy server Aspdss performs signature processing on the monitoring data MDi2 on the sensing data anti-counterfeiting system, and the specific algorithm method of the signature Si2 of the monitoring data MDi2 refers to the signature method of the sensing terminal PTi in Step2;

[0046] Step 6, the method for the system administrator SAccs of the cloud computing server CCSpdss to verify the signature Si2 of the monitoring data MDi2 refers to the method for the proxy server ASpdss in Step 3 to verify the signature Si1 of the monitoring data MDi1 of the perception terminal PTi.

[0047] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A security and anti-counterfeiting system suitable for the perception layer of the Internet of Things, characterized in that: Including: A cloud computing server CCSpdss installed and running with the server software of the sensing data anti-counterfeiting system and deployed in the Internet of Things application layer, a proxy server Aspdss installed and running with the client software of the sensing data anti-counterfeiting system and deployed in the Internet of Things transport layer, and a sensing terminal PTi installed and running with the client software of the sensing data anti-counterfeiting system and deployed in the Internet of Things sensing layer; The sensing terminal PTi performs data interaction with the server software of the sensing data anti-counterfeiting system running on the proxy server Aspdss through the client software of the sensing data anti-counterfeiting system; The proxy server Aspdss performs data interaction with the server software of the sensing data anti-counterfeiting system running on the cloud computing server CCSpdss through the client software of the sensing data anti-counterfeiting system; Before the sensing terminal PTi requests to perform data interaction with the server software of the sensing data anti-counterfeiting system running on the proxy server Aspdss through the client software of the sensing data anti-counterfeiting system, the sensing terminal PTi performs signature processing on the monitoring data MDi1 on the sensing data anti-counterfeiting system to obtain the signature of the monitoring data MDi1 as Si1; Before the proxy server Aspdss requests to perform data interaction with the server software of the sensing data anti-counterfeiting system running on the cloud computing server CCSpdss through the client software of the sensing data anti-counterfeiting system, the system administrator SAas of the proxy server Aspdss first verifies the signature Si1 of the monitoring data MDi1 and then performs further signature processing on the received monitoring data MDi2 to obtain the signature of the monitoring data MDi2 as Si2; and the system administrator SAccs of the cloud computing server CCSpdss verifies the signature Si2 of the monitoring data MDi2; Method for the sensing terminal PTi to perform signature processing on the monitoring data MDi1 on the sensing data anti-counterfeiting system Including the following steps: Step1, the sensing terminal PTi calculates its own private key on the sensing data anti-counterfeiting system and publishes its public key to the system, specifically as follows: The sensing terminal PTi selects two different large prime numbers p and q, first calculates n = pq, and then calculates f(n)=(p - 1)(q - 1); After that, the sensing terminal PTi selects a random number y such that 0 < y < f(n) and y and f(n) are relatively prime, that is, gcd(y, f(n)) = 1; The sensing terminal PTi calculates x=y -1 modf(n), and save the private key (x, n), and publish the public key (y, n) on the perception data anti-counterfeiting system; Step 2, the sensing terminal PTi generates a summary Z = H (MDi1) of the monitoring data MDi1 on the sensing data anti-counterfeiting system, and uses the private key (x, n) to generate a digital signature, which is Si1 = (Z) x modf(n), and transmit the signature Si1 and the monitoring data MDi1 to the proxy server ASpdss; Among them, H(MDi1) is obtained from the monitoring data MDi1 through a one-way hash function; Step3, the system administrator SAas of the proxy server Aspdss verifies the legality of the signature Si1 of the monitoring data MDi1 of the sensing terminal PTi on the sensing data anti-counterfeiting system, specifically as follows: The system administrator SAas of the proxy server ASpdss first constructs the summary Z'=H(MDi1) of the monitoring data MDi1, and then calculates Z''=(Si1) y modf(n), then verify whether the equation Z'=Z'' holds; If it holds, it proves that the signature Si1 is legal and valid; otherwise, it proves that the signature Si1 is illegal, and at this time it indicates that the monitoring data MDi1 is untrustworthy; Step 4, the system administrator SAas of the proxy server ASpdss calculates his own private key on the perception data anti-counterfeiting system and publishes his public key to the system. The calculation method of his key refers to the key calculation method of the perception terminal PTi in Step 1; Step 5, the system administrator SAas of the proxy server ASpdss signs the monitoring data MDi2 on the perception data anti-counterfeiting system. The specific algorithm method of the signature Si2 of the monitoring data MDi2 refers to the signature method of the perception terminal PTi in Step 2; Step 6, the method for the system administrator SAccs of the cloud computing server CCSpdss to verify the signature Si2 of the monitoring data MDi2 refers to the method for the proxy server ASpdss in Step 3 to verify the signature Si1 of the monitoring data MDi1 of the perception terminal PTi.