Method, device and computer equipment for secure uninstallation of IoT terminal
By judging the terminal's whitelist or blacklist and measurement factors, the edge computing server denial of service caused by malicious terminals is solved, and the security and stability of the uninstallation task is improved.
Patent Information
- Application Number
- CN202111251360.5
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2021-10-26
- Publication Date
- 2024-12-27
- Estimated Expiration
- 2041-10-26
AI Technical Summary
Uninstall tasks initiated by malicious terminals may cause edge computing servers to fail to provide computing uninstall services for normal terminals, resulting in denial of service and other problems.
By obtaining the target terminal's calculation unloading request and terminal information, it is determined whether it belongs to a preset whitelist or blacklist, and judges the normality of the unloading task based on the preset metric factors, and uninstalls it based on the results or reduces its credibility.
It improves the terminal identity recognition rate and security of uninstall tasks, reduces the situation where malicious terminals occupy network resources, and ensures the stability of edge computing networks.
Smart Images

Figure CN113986266B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of edge computing technology for IoT terminals, and in particular to a method, device and computer equipment for secure uninstallation of IoT terminals. Background Art
[0002] With the increasing popularity of 5G networks, the size of data and business requests that the core network needs to process per unit time are growing exponentially. With the increase in network traffic carried by mobile terminals and IoT terminals, the centralized processing mode adopted by the mobile cloud computing model can no longer meet the daily needs of users because it is far away from the terminals. In addition, for computing services with high performance requirements such as latency and energy consumption, this model will cause high latency, network congestion and other problems. Therefore, in response to these problems, the industry has proposed mobile edge computing.
[0003] Since the mobile edge computing application is deployed on a general server close to the user in a relatively insecure physical environment, the management and control capabilities are weakened, resulting in the mobile edge computing platform and mobile edge computing applications facing security issues such as unauthorized access, sensitive data leakage, Dos attacks, and physical attacks on physical devices. While the edge network server provides services to the terminal, malicious terminals may perform malicious uninstallation and other operations. The uninstallation tasks initiated by malicious terminals will cause the edge network resources to be occupied and resources to conflict, making it impossible to provide computing offload services to normal terminals, resulting in denial of service and other problems. Summary of the invention
[0004] Therefore, the technical problem to be solved by the present invention is to overcome the problem that in the existing edge computing services, the unloading tasks initiated by malicious terminals may cause the edge computing server to be unable to provide computing unloading services to normal terminals, resulting in denial of service and other problems, thereby providing a method, device and computer equipment for safe unloading of IoT terminals.
[0005] According to the first aspect, an embodiment of the present invention discloses a computing task edge unloading method, which obtains a computing offloading request and terminal information of a target terminal, wherein the terminal information includes device identity information of the target terminal; based on the device identity information, it is determined whether the target terminal belongs to a preset whitelist; if the target terminal belongs to the preset whitelist, it is determined whether the computing offloading task is normal based on a preset measurement factor; if the computing offloading task is normal, the target terminal is unloaded based on the computing offloading request.
[0006] Optionally, the terminal information also includes credibility information of the target terminal; the IoT terminal security uninstallation method also includes: if the target terminal does not belong to a preset whitelist, determining whether the target terminal belongs to a preset blacklist based on the device identity information; if the target terminal belongs to the preset blacklist, marking the target terminal as a trusted violating terminal and reducing the credibility of the target terminal.
[0007] Optionally, if the target terminal does not belong to a preset blacklist, a step is performed to determine whether the computing offloading task is normal based on a preset metric factor; if the computing offloading task is normal, the target terminal is uninstalled based on the computing offloading request.
[0008] Optionally, if the computation offloading task is abnormal, the target terminal is marked as a trust violation terminal, and the credibility of the target terminal is reduced.
[0009] Optionally, the preset measurement factors include interaction frequency, task execution cycle, memory utilization and number of channels, and the process of judging whether the computing offloading task is normal based on the preset measurement factors includes: judging whether the interaction frequency of the target terminal exceeds a first threshold, and if so, generating an alarm message and reducing the credibility of the target terminal; if the interaction frequency of the target terminal does not exceed the first threshold, judging whether the task execution cycle of the target terminal exceeds a second threshold, and if so, generating an alarm message and reducing the credibility of the target terminal; if the task execution cycle of the target terminal does not exceed the second threshold, judging whether the memory utilization of the target terminal exceeds a third threshold, and if so, generating an alarm message and reducing the credibility of the target terminal; if the memory utilization of the target terminal does not exceed the third threshold, judging whether the number of channels of the target terminal exceeds a fourth threshold, and if so, generating an alarm message and reducing the credibility of the target terminal; if the number of channels of the target terminal does not exceed the fourth threshold, determining that the offloading task is normal.
[0010] Optionally, if the computation offloading task is abnormal, the target terminal is marked as a trust violation terminal, and the credibility of the target terminal is reduced.
[0011] Optionally, the credibility information of the target terminal is calculated by the following formula:
[0012]
[0013] Where W(j) is the credibility of the jth measurement factor, q is the number of measurement factors, H j is the information entropy of the jth metric factor, and the calculation formula of information entropy is:
[0014]
[0015] Where p is the number of times the metric factor is evaluated,
[0016]
[0017] where a ij is the evaluation value of the jth metric factor in the ith evaluation of the metric factor.
[0018] According to the second aspect, an embodiment of the present invention also discloses a secure uninstallation device for an IoT terminal, comprising: an acquisition module, used to obtain a computing offloading request and terminal information of a target terminal, the terminal information including device identity information of the target terminal; a judgment module, used to judge whether the target terminal belongs to a preset whitelist based on the device identity information; a calculation module, used to judge whether the computing offloading task is normal based on a preset measurement factor if the target terminal belongs to the preset whitelist; and an unloading module, used to uninstall the target terminal based on the computing offloading request if the computing offloading task is normal.
[0019] According to the third aspect, an embodiment of the present invention also discloses a computer device, comprising: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor performs the steps of the method for securely uninstalling an IoT terminal as described in the first aspect or any optional embodiment of the first aspect.
[0020] According to the fourth aspect, an embodiment of the present invention further discloses a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the method for securely uninstalling an IoT terminal as described in the first aspect or any optional embodiment of the first aspect.
[0021] The technical solution of the present invention has the following advantages:
[0022] The invention provides a method, device and computer equipment for secure uninstallation of an IoT terminal, the method comprising: obtaining a computing uninstallation request and terminal information of a target terminal, the terminal information including the device identity information of the target terminal; judging whether the target terminal belongs to a preset whitelist based on the device identity information; if the target terminal belongs to the preset whitelist, judging whether the computing uninstallation task is normal based on a preset metric factor; if the computing uninstallation task is normal, uninstalling the target terminal based on the computing uninstallation request. By identifying the terminal information of the target terminal and judging the identity of the target terminal, the recognition rate of the terminal identity is improved, and further judging whether the terminal uninstallation task is normal improves the security of the uninstallation task in the edge computing network and reduces the occurrence of malicious terminals occupying network resources. BRIEF DESCRIPTION OF THE DRAWINGS
[0023] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.
[0024] Figure 1 This is a flowchart of a specific example of a method for securely uninstalling an IoT terminal in an embodiment of the present invention;
[0025] Figure 2 This is a flowchart of a specific example of a method for securely uninstalling an IoT terminal in an embodiment of the present invention;
[0026] Figure 3 A flowchart of a specific example of a method for determining an uninstallation task in an embodiment of the present invention;
[0027] Figure 4 It is a principle block diagram of a specific example of a secure uninstallation device for an IoT terminal in an embodiment of the present invention;
[0028] Figure 5 It is a principle block diagram of a specific example of a secure uninstallation device for an IoT terminal in an embodiment of the present invention;
[0029] Figure 6 FIG. 4 is a specific example diagram of a computer device in an embodiment of the present invention. DETAILED DESCRIPTION
[0030] The technical solution of the present invention will be described clearly and completely below in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.
[0031] In the description of the present invention, it should be noted that the terms "center", "upper", "lower", "left", "right", "vertical", "horizontal", "inner", "outer", etc., indicating the orientation or positional relationship, are based on the orientation or positional relationship shown in the drawings, and are only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as limiting the present invention. In addition, the terms "first", "second", and "third" are used for descriptive purposes only, and cannot be understood as indicating or implying relative importance.
[0032] In the description of the present invention, it should be noted that, unless otherwise clearly specified and limited, the terms "installed", "connected", and "connected" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be indirectly connected through an intermediate medium, it can also be the internal connection of two components, it can be a wireless connection, or it can be a wired connection. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.
[0033] In addition, the technical features involved in the different embodiments of the present invention described below can be combined with each other as long as they do not conflict with each other.
[0034] Computation offloading means that the terminal transfers part or all of the computing tasks to the edge computing node to solve the deficiencies of mobile terminals in terms of resource storage, computing performance, and energy efficiency. Although the computation offloading technology in the edge computing network solves the problem of limited resources of power 5G IoT terminals, it exposes a series of problems in terms of security. The offloading tasks initiated by malicious terminals will cause the edge network resources to be occupied and resource conflicts, making it impossible to provide computation offloading services for normal terminals, resulting in denial of service problems. Therefore, it is necessary to design reasonable security measures.
[0035] The embodiment of the present invention discloses a method for safely uninstalling an IoT terminal. Figure 1 As shown, the method comprises the following steps:
[0036] Step 101: Obtain a computing offloading request and terminal information of a target terminal, wherein the terminal information includes device identity information of the target terminal.
[0037] Exemplarily, the computing offloading request is that when the target terminal needs to perform an offloading task, it needs to send an offloading request instruction to the edge computing node. When the edge computing node agrees to the offloading, the offloading is performed. The terminal information is the identity information of the terminal that needs to perform the offloading task. The edge computing node can identify various types of information about the terminal by identifying the terminal information, such as the historical behavior information of the terminal, or the completion status of the computing task of the terminal, etc. The embodiment of the present invention does not limit the information category contained in the terminal information, and technical personnel in this field can determine it according to actual needs.
[0038] Step 102: Determine whether the target terminal belongs to a preset whitelist based on the device identity information. Exemplarily, the preset whitelist can be the edge computing node analyzing the historical interactions between each terminal and the edge computing node collected by the trust collector, and listing the terminals with high scores as the preset whitelist. The embodiment of the present invention does not limit the setting method of the preset whitelist, and those skilled in the art can determine it according to actual needs.
[0039] Step 103: If the target terminal belongs to the preset whitelist, determine whether the computing offloading task is normal based on the preset metric factor. If the target terminal belongs to the preset whitelist, it means that the target terminal has previously interacted well with the edge computing node, so the corresponding offloading instruction can be further executed based on the offloading task. Exemplarily, the metric factor is a criterion for determining whether a terminal is a malicious terminal. The embodiment of the present invention does not limit the type of metric factor and the metric factor criterion, and those skilled in the art can determine it according to actual needs.
[0040] Step 104: If the computing offloading task is normal, the target terminal is offloaded based on the computing offloading request. Exemplarily, when the target terminal's metric factor determines that the offloading task is normal, the terminal is offloaded according to the offloading task, and the computing task of the terminal is handed over to the edge computing node for computing.
[0041] The invention provides a method for secure uninstallation of an IoT terminal, the method comprising: obtaining a computing uninstallation request and terminal information of a target terminal, the terminal information including the device identity information of the target terminal; judging whether the target terminal belongs to a preset whitelist based on the device identity information; if the target terminal belongs to the preset whitelist, judging whether the computing uninstallation task is normal based on a preset metric factor; if the computing uninstallation task is normal, uninstalling the target terminal based on the computing uninstallation request. By identifying the terminal information of the target terminal and judging the identity of the target terminal, the recognition rate of the terminal identity is improved, and further judging whether the terminal uninstallation task is normal improves the security of the uninstallation task in the edge computing network and reduces the occurrence of malicious terminals occupying network resources.
[0042] As an optional implementation manner of the present invention, the terminal information further includes the credibility information of the target terminal; Figure 2 As shown, the IoT terminal safe uninstallation method also includes:
[0043] Step 105: If the target terminal does not belong to the preset whitelist, execute step 1051: determine whether the target terminal belongs to the preset blacklist based on the device identity information; if the target terminal belongs to the preset blacklist, execute step 1052: mark the target terminal as a trusted illegal terminal and reduce the credibility of the target terminal.
[0044] Exemplarily, the credibility information of the target terminal may be the interaction between the target terminal and the edge computing node. The preset blacklist may be the historical interaction between each terminal and the edge computing node collected by the trust collector. The corresponding terminal is listed in the preset blacklist according to the interaction situation. The terminals in the blacklist are all terminals that have poor interaction with the edge computing node. The embodiment of the present invention does not limit the setting method of the preset blacklist, and those skilled in the art can determine it according to actual needs. When the target terminal is in the blacklist, a trust violation label is attached to the target terminal, marking it as a trust violation terminal, and reducing the target terminal score.
[0045] As an optional implementation manner of the present invention, the credibility information of the target terminal is calculated by the following formula:
[0046]
[0047] Where W(j) is the credibility of the jth measurement factor, q is the number of measurement factors, H j is the information entropy of the jth metric factor, and the calculation formula of information entropy is:
[0048]
[0049] Where p is the number of times the metric factor is evaluated,
[0050]
[0051] where a ij is the evaluation value of the jth metric factor in the ith evaluation of the metric factor.
[0052] As an optional implementation of the present invention, if the target terminal does not belong to the preset blacklist, execute step 103; if the computing offloading task is normal, execute step 104: unload the target terminal based on the computing offloading request.
[0053] Exemplarily, when the target terminal is neither in the whitelist nor in the blacklist, the target terminal is a new terminal, and it is necessary to determine whether the uninstallation task of the target terminal is normal. If the uninstallation task is normal, then if the uninstallation task is abnormal, a trust violation label is attached to the target terminal, marking it as a trust violation terminal, and reducing the target terminal score.
[0054] As an optional implementation of the present invention, the preset measurement factors include interaction frequency, task execution cycle, memory utilization and number of channels. Step 103 includes: determining whether the interaction frequency of the target terminal exceeds a first threshold value, and if so, generating an alarm message and reducing the credibility of the target terminal; if the interaction frequency of the target terminal does not exceed the first threshold value, determining whether the task execution cycle of the target terminal exceeds a second threshold value, and if so, generating an alarm message and reducing the credibility of the target terminal; if the task execution cycle of the target terminal does not exceed the second threshold value, determining whether the memory utilization of the target terminal exceeds a third threshold value, and if so, generating an alarm message and reducing the credibility of the target terminal; if the memory utilization of the target terminal does not exceed the third threshold value, determining whether the number of channels of the target terminal exceeds a fourth threshold value, and if so, generating an alarm message and reducing the credibility of the target terminal; if the number of channels of the target terminal does not exceed the fourth threshold value, determining that the unloading task is normal. Figure 3 As shown, it is a flowchart for judging whether the uninstallation task is normal.
[0055] Exemplarily, whether the target terminal's unloading task is normal is determined by judging the target terminal's measurement factor, wherein the measurement factor includes four indicators: interaction frequency, task execution cycle, memory utilization, and number of channels. The interaction frequency is the sum of the frequencies of the target terminal entering and leaving the network, the task execution cycle is the CPU cycle required by the target terminal to execute the unloading task, the memory utilization is the memory required to execute the unloading task, and the number of channels is the historical number of channels of the target terminal and the edge computing node and the number of allocated channels. When the target terminal is a new terminal, the number of channels is only the number of allocated channels. When the four indicators in the measurement factor do not exceed the corresponding thresholds, the unloading task is normal. When any one of the four indicators in the measurement factor does not meet the corresponding threshold, the unloading task is abnormal, and an alarm message is generated to mark the target terminal as a trust violation terminal and reduce the credibility of the target terminal accordingly.
[0056] The embodiment of the present invention also discloses a secure uninstallation device for an IoT terminal, such as Figure 4 As shown, the device comprises:
[0057] The acquisition module 401 is used to acquire the computing offloading request and terminal information of the target terminal, wherein the terminal information includes the device identity information of the target terminal. For example, the details are described in the above step 101, which will not be described here.
[0058] The judgment module 402 is used to judge whether the target terminal belongs to a preset whitelist based on the device identity information. For example, the details are described in the above step 102, which will not be repeated here.
[0059] The calculation module 403 is used to determine whether the calculation offloading task is normal based on a preset metric factor if the target terminal belongs to a preset whitelist. For example, the details are described in the above step 103, which will not be repeated here.
[0060] The unloading module 404 is used to unload the target terminal based on the computing offloading request if the computing offloading task is normal. For example, the details are described in the above step 104, which will not be repeated here.
[0061] The present invention provides a secure uninstallation device for an Internet of Things terminal, which includes: an acquisition module 401, which is used to obtain a computing uninstallation request and terminal information of a target terminal, wherein the terminal information includes the device identity information of the target terminal. A judgment module 402, which is used to judge whether the target terminal belongs to a preset whitelist based on the device identity information. A calculation module 403, which is used to judge whether the computing uninstallation task is normal based on a preset measurement factor if the target terminal belongs to the preset whitelist. An uninstallation module 404, which is used to uninstall the target terminal based on the computing uninstallation request if the computing uninstallation task is normal. By implementing this device, the acquisition module 401 identifies the terminal information of the target terminal and judges the identity of the target terminal, thereby improving the recognition rate of the terminal identity. Furthermore, the calculation module 403 and the uninstallation module 404 determine whether the terminal uninstallation task is normal, thereby improving the security of the uninstallation task in the edge computing network and reducing the occurrence of malicious terminals occupying network resources.
[0062] The following is a specific application example to further define the IoT terminal security uninstallation device of the embodiment of the present invention. Figure 5 The IoT terminal security uninstall device comprises an acquisition module, a judgment module, a detection module, a processing module, a trust replication module, an alarm model and a monitoring module.
[0063] The acquisition module is used to acquire the terminal whitelist, the terminal blacklist, and the target terminal uninstall request. The detailed process can be found in the description of step 101 of the above method embodiment.
[0064] Judgment module: used to judge whether the target terminal is in the white list and whether the credibility information of the target terminal meets the requirements; judge whether the terminal is in the black list and whether the credibility information of the target terminal does not meet the requirements. The specific process can be seen in the relevant description of step 102 and step 1051 of the above method embodiment.
[0065] Detection module: used to detect whether the offloading task is normal according to the preset metric factor. The specific process can be found in the relevant description of step 103 of the above method embodiment.
[0066] Trustworthiness assignment module: attaches a trust violation label to the target terminal and reduces the trustworthiness of the terminal. The specific process can be found in the description of step 1052 of the above method embodiment.
[0067] Alarm module: When the measurement factor of the offloading task exceeds the specified range, an alarm message is generated and an alarm is sounded.
[0068] Monitoring module: Continuously monitor malicious terminals and malicious tasks that are judged to have abnormal uninstallation tasks.
[0069] Processing module: used to execute the unloading of the unloading task of the edge computing node. When there are multiple unloading tasks to be unloaded, the unloading is performed according to the affinity relationship between the target terminal and the edge computing node. The affinity relationship is divided according to the historical interaction between the target terminal and the edge computing node. The specific process can be seen in the relevant description of step 104 of the above method embodiment.
[0070] The embodiment of the present invention also provides a computer device, such as Figure 6 As shown, the computer device may include a processor 601 and a memory 602, wherein the processor 601 and the memory 602 may be connected via a bus or other means. Figure 6 The example of connecting through bus is taken in the following.
[0071] The processor 601 may be a central processing unit (CPU). The processor 601 may also be other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, or a combination of the above chips.
[0072] The memory 602 is a non-transient computer-readable storage medium that can be used to store non-transient software programs, non-transient computer executable programs and modules, such as program instructions / modules corresponding to the IoT terminal security uninstallation method in the embodiment of the present invention. The processor 601 executes various functional applications and data processing of the processor by running the non-transient software programs, instructions and modules stored in the memory 602, that is, the IoT terminal security uninstallation method in the above method embodiment is implemented.
[0073] The memory 602 may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required by at least one function; the data storage area may store data created by the processor 601, etc. In addition, the memory 602 may include a high-speed random access memory, and may also include a non-transitory memory, such as at least one disk storage device, a flash memory device, or other non-transitory solid-state storage device. In some embodiments, the memory 602 may optionally include a memory remotely arranged relative to the processor 601, and these remote memories may be connected to the processor 601 via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.
[0074] The one or more modules are stored in the memory 602, and when executed by the processor 601, the following is performed: Figure 1 The secure uninstallation method of the Internet of Things terminal in the illustrated embodiment.
[0075] For details of the above computer equipment, please refer to Figure 1 The corresponding related descriptions and effects in the illustrated embodiments can be understood and will not be repeated here.
[0076] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be implemented by instructing the relevant hardware through a computer program, and the program can be stored in a computer-readable storage medium, and when the program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, the storage medium can be a disk, an optical disk, a read-only memory (ROM), a random access memory (RAM), a flash memory, a hard disk drive (HDD) or a solid-state drive (SSD), etc.; the storage medium can also include a combination of the above-mentioned types of memory.
[0077] Although the embodiments of the present invention have been described in conjunction with the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present invention, and such modifications and variations are all within the scope defined by the appended claims.
Claims
1. A secure uninstallation method for an IoT terminal, characterized in that: include: Obtaining a computing offloading request and terminal information of a target terminal, wherein the terminal information includes device identity information of the target terminal; Determining whether the target terminal belongs to a preset whitelist based on the device identity information; If the target terminal belongs to a preset whitelist, judging whether the calculation offloading task is normal based on a preset metric factor; If the computing offloading task is normal, unloading the target terminal based on the computing offloading request; The preset measurement factors include interaction frequency, task execution cycle, memory utilization and number of channels; The terminal information also includes the credibility information of the target terminal; The credibility information of the target terminal is calculated by the following formula: Where W(j) is the credible value of the jth metric factor, q is the number of metric factors, and H j is the information entropy of the jth metric factor, and the calculation formula of information entropy is: Where p is the number of times the metric factor is evaluated, where a ij is the evaluation value of the jth metric factor in the i-th evaluation of the metric factor; The process of judging whether the computing offloading task is normal based on the preset metric factor includes: Determining whether the credibility value of the interaction frequency of the target terminal exceeds a first threshold, and if it exceeds the first threshold, generating an alarm message and reducing the credibility of the target terminal; If the credibility value of the interaction frequency of the target terminal does not exceed the first threshold, determining whether the task execution period of the target terminal exceeds the second threshold, and if it exceeds the second threshold, generating an alarm message and reducing the credibility of the target terminal; If the credibility value of the task execution period of the target terminal does not exceed the second threshold, determining whether the memory utilization of the target terminal exceeds a third threshold, and if it exceeds the third threshold, generating an alarm message and reducing the credibility of the target terminal; If the credibility value of the memory utilization of the target terminal does not exceed the third threshold, determining whether the number of channels of the target terminal exceeds a fourth threshold, and if it exceeds the fourth threshold, generating an alarm message and reducing the credibility of the target terminal; If the number of channels of the target terminal does not exceed the fourth threshold, it is determined that the offloading task is normal.
2. The IoT terminal secure uninstallation method according to claim 1, characterized in that: The IoT terminal safe uninstallation method also includes: If the target terminal does not belong to the preset whitelist, determining whether the target terminal belongs to the preset blacklist based on the device identity information; If the target terminal belongs to a preset blacklist, the target terminal is marked as a trust-violating terminal, and the credibility of the target terminal is reduced.
3. The IoT terminal secure uninstallation method according to claim 2, characterized in that: If the target terminal does not belong to the preset blacklist, executing the step of judging whether the computing offloading task is normal based on a preset metric factor; If the computing offloading task is normal, the target terminal is offloaded based on the computing offloading request.
4. The method for secure uninstallation of IoT terminals according to claim 3, characterized in that: If the computation offloading task is abnormal, the target terminal is marked as a trust violation terminal, and the credibility of the target terminal is reduced.
5. A secure uninstallation device for an IoT terminal, characterized in that: include: An acquisition module, used to acquire a computing offloading request and terminal information of a target terminal, wherein the terminal information includes device identity information of the target terminal; A determination module, configured to determine whether the target terminal belongs to a preset whitelist based on the device identity information; A calculation module, configured to determine whether the calculation offloading task is normal based on a preset metric factor if the target terminal belongs to a preset whitelist; an unloading module, configured to unload the target terminal based on the computing unloading request if the computing unloading task is normal; the terminal information also includes the credibility information of the target terminal, and the credibility information of the target terminal is calculated by the following formula: Where W(j) is the credible value of the jth metric factor, q is the number of metric factors, and H j is the information entropy of the jth metric factor, and the calculation formula of information entropy is: Where p is the number of times the metric factor is evaluated, where a ij is the evaluation value of the jth metric factor in the i-th evaluation of the metric factor; The preset measurement factors include interaction frequency, task execution cycle, memory utilization and number of channels; The process of judging whether the computing offloading task is normal based on the preset metric factor includes: Determining whether the credibility value of the interaction frequency of the target terminal exceeds a first threshold, and if it exceeds the first threshold, generating an alarm message and reducing the credibility of the target terminal; If the credibility value of the interaction frequency of the target terminal does not exceed the first threshold, determining whether the task execution period of the target terminal exceeds the second threshold, and if it exceeds the second threshold, generating an alarm message and reducing the credibility of the target terminal; If the credibility value of the task execution period of the target terminal does not exceed the second threshold, determining whether the memory utilization of the target terminal exceeds a third threshold, and if it exceeds the third threshold, generating an alarm message and reducing the credibility of the target terminal; If the credibility value of the memory utilization of the target terminal does not exceed the third threshold, determining whether the number of channels of the target terminal exceeds a fourth threshold, and if it exceeds the fourth threshold, generating an alarm message and reducing the credibility of the target terminal; If the number of channels of the target terminal does not exceed the fourth threshold, it is determined that the offloading task is normal.
6. A computer device, characterized in that: include: at least one processor; And a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor performs the steps of the IoT terminal security uninstallation method as described in any one of claims 1-4.
7. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by the processor, the steps of the method for securely uninstalling an IoT terminal are implemented as described in any one of claims 1 to 4.
Citation Information
Patent Citations
Internet of Things safety early warning system
CN110225067A
Mobile user terminal task unloading method under distributed edge computing service system
CN111262906A
Terminal equipment management and control method based on edge computing, electronic equipment and medium
CN112039886A
Trust-based task unloading method
CN112714416A
Attestation token sharing in edge computing environments
US20200084202A1
