An Internet of Things terminal identity authentication method, system, device and storage medium

Abstract

The present application discloses an Internet of Things terminal identity authentication method, system, device and storage medium, wherein the method comprises: obtaining the first authentication information of the terminal; the first authentication information comprises the authentication information after encrypting the terminal ID and the product operation certificate; decrypting the first authentication information to obtain the first hash operation result and the decryption timestamp; obtaining the terminal ID and the product operation certificate; obtaining the second hash operation result according to the terminal ID and the product operation certificate; authenticating the identity of the terminal according to the first hash operation result, the second hash operation result and the decryption timestamp; the present method can encrypt the terminal ID and the product operation certificate of the Internet of Things terminal during the Internet of Things identity authentication, and complete the authentication of the Internet of Things terminal identity after decryption on the platform side, which can reduce the risk of the authentication information being stolen and tampered with during the authentication. The present application can be widely used in the field of Internet of Things technology.

Description

Technical Field

[0001] The present application relates to the field of Internet of Things technology, and in particular to an Internet of Things terminal identity authentication method, system, device and storage medium. Background Art

[0002] At present, the identity authentication of IoT terminals is mostly based on IMEI authentication or Token authentication. The platform uses the legitimacy of IMEI as the only criterion for terminal identity authentication. IMEI is transmitted in plain text on the network, which is at risk of being stolen or tampered with. LTE scenarios mostly use Token authentication. The platform allocates Tokens to terminals, and terminals need to pre-set Tokens or obtain Tokens online. In actual applications, pre-setting Tokens increases the difficulty of mass production of terminals. The Tokens of each terminal are different and cannot be operated in batches. They need to be injected one by one. If the Token is obtained online, there is a risk of the Token being stolen during transmission. Therefore, a new IoT terminal identity authentication method is needed. Summary of the invention

[0003] The purpose of this application is to solve one of the technical problems existing in the prior art to at least a certain extent.

[0004] To this end, one purpose of an embodiment of the present application is to provide an Internet of Things terminal identity authentication method, system, device and storage medium. The method encrypts the terminal ID and product operation credentials of the Internet of Things terminal during Internet of Things identity authentication, and completes the authentication of the Internet of Things terminal identity after decryption on the platform side, which can reduce the risk of authentication information being stolen and tampered with during authentication.

[0005] In order to achieve the above technical objectives, the technical solutions adopted by the embodiments of the present application include:

[0006] In a first aspect, an embodiment of the present application provides an IoT terminal identity authentication method, comprising the following steps:

[0007] Obtaining first authentication information of the terminal; the first authentication information includes authentication information obtained by encrypting the terminal ID and the product operation credential;

[0008] Decrypting the first authentication information to obtain a first hash operation result and a decryption timestamp;

[0009] Obtain terminal ID and product operation credentials;

[0010] Obtaining a second hash operation result according to the terminal ID and the product operation credential;

[0011] The identity of the terminal is authenticated according to the first hash operation result, the second hash operation result and the decryption timestamp.

[0012] In addition, the method for authenticating an IoT terminal according to the above embodiment of the present invention may also have the following additional technical features:

[0013] Furthermore, in an embodiment of the present application, the step of encrypting the terminal ID and the product operation credentials specifically includes: obtaining first original data and a first timestamp based on the terminal ID and the product operation credentials; performing operations on the first original data and the first timestamp to obtain a first operation result; and performing encryption calculations on the first operation result to obtain first authentication information.

[0014] Furthermore, in the embodiment of the present application, the step of obtaining the first original data according to the terminal ID and the product operation certificate specifically includes: concatenating the terminal ID and the product operation certificate to obtain the first original data.

[0015] Furthermore, in an embodiment of the present application, the step of performing an operation on the first original data and the first timestamp to obtain a first operation result specifically includes: performing a hash operation on the first original data to obtain a first hash operation result; and concatenating the first hash operation result with the first timestamp to obtain a first operation result.

[0016] Furthermore, in an embodiment of the present application, the step of authenticating the identity of the terminal based on the first hash operation result, the second hash operation result and the decryption timestamp specifically includes: presetting a time error; obtaining an authentication time difference based on the first timestamp and the decryption timestamp; obtaining a time authentication result based on the authentication time difference and the time error; comparing the first hash operation result with the second hash operation result to obtain a comparison result; and authenticating the identity of the terminal based on the comparison result and the time authentication result.

[0017] Furthermore, in an embodiment of the present application, the step of obtaining a time authentication result based on the authentication time difference and the time error specifically includes: comparing the authentication time difference and the time error; if the authentication time difference is smaller than the time error, the authentication is successful; if the authentication time difference is larger than the time error, the authentication is unsuccessful.

[0018] Furthermore, in an embodiment of the present application, the step of obtaining a second hash operation result based on the terminal ID and the product operation certificate specifically includes: obtaining second original data based on the terminal ID and the product operation certificate; performing a hash operation on the second original data to obtain a second hash operation result.

[0019] On the other hand, an embodiment of the present application also provides an Internet of Things terminal identity authentication system, including a first acquisition module for acquiring first authentication information of the terminal; a second acquisition module for acquiring a terminal ID and a product operation credential; a decryption module for decrypting the first authentication information to obtain a first hash operation result and a decryption timestamp; an authentication module for authenticating the identity of the terminal based on the first hash operation result, the second hash operation result and the decryption timestamp.

[0020] On the other hand, the present application also provides an IoT terminal identity authentication device, comprising:

[0021] at least one processor;

[0022] at least one memory for storing at least one program;

[0023] When the at least one program is executed by the at least one processor, the at least one processor implements an Internet of Things terminal identity authentication method as described in any one of the invention contents.

[0024] In addition, the present application also provides a storage medium, which stores processor-executable instructions, and the processor-executable instructions are used to execute an Internet of Things terminal identity authentication method as described in any of the above items when executed by the processor.

[0025] The advantages and benefits of the present application will be partially given in the following description, and partially become apparent from the following description, or be understood through the practice of the present application:

[0026] This application can encrypt the terminal ID and product operation credentials of the IoT terminal during IoT identity authentication, and after decryption on the platform side, authenticate the IoT terminal identity by comparing the hash operation result and the authentication timestamp. This can reduce the risk of authentication information being stolen and tampered with during authentication and improve the security of identity authentication. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] Figure 1 A schematic diagram of the steps of an Internet of Things terminal identity authentication method in a specific embodiment of the present invention;

[0028] Figure 2 A schematic diagram of the steps of encrypting the terminal ID and the product operation certificate in a specific embodiment of the present invention;

[0029] Figure 3 A schematic diagram of the steps of performing operation on the first original data and the first timestamp to obtain a first operation result in a specific embodiment of the present invention;

[0030] Figure 4A schematic diagram of steps for authenticating the identity of a terminal according to the first Hash operation result, the second Hash operation result and the decryption timestamp in a specific embodiment of the present invention;

[0031] Figure 5 This is a structural diagram of an Internet of Things terminal identity authentication system in a specific embodiment of the present invention;

[0032] Figure 6 The figure is a schematic diagram of the structure of an Internet of Things terminal identity authentication device in a specific embodiment of the present invention. DETAILED DESCRIPTION

[0033] The embodiments of the present invention are described in detail below with reference to the accompanying drawings to illustrate the principles and processes of the Internet of Things terminal identity authentication method, system, device and storage medium in the embodiments of the present invention.

[0034] First, the traditional authentication method of IoT terminals is explained: the traditional authentication method of IoT terminals is that when the terminal registers on the IoT platform, the platform allocates a token to the terminal. When the terminal logs in, it sends the terminal's ID and token to the IoT platform. The IoT platform performs corresponding identity verification through the terminal ID and token, and then responds to the login. In actual applications, the traditional method of pre-setting tokens increases the difficulty of mass production of terminals. The tokens of each terminal are different and cannot be operated in batches. They need to be injected one by one. If the token is obtained online, there is a risk of the token being stolen during the transmission process.

[0035] Therefore, this application proposes a new IoT terminal identity authentication method, referring to Figure 1 The IoT terminal identity authentication method of the present application includes the following steps:

[0036] S1. Obtain first authentication information of the terminal; the first authentication information includes authentication information obtained by encrypting the terminal ID and product operation credentials;

[0037] In an embodiment of the present application, the first authentication information may be authentication information after the terminal ID and the product operation credentials are encrypted; and the terminal ID and the product operation credentials may be registered on the Internet of Things platform through the Internet of Things terminal, and the terminal ID and the product operation credentials of the Internet of Things terminal may be obtained through platform allocation. When the Internet of Things terminal performs identity authentication again, the Internet of Things terminal may encrypt the terminal ID and the product operation credentials into the first authentication information, and send the first authentication information and the terminal ID to the Internet of Things terminal.

[0038] S2. Decrypt the first authentication information to obtain a first hash operation result and a decryption timestamp;

[0039] In an embodiment of the present application, the first authentication information is decrypted using the platform private key to obtain a calculation result, which is the result of concatenating the first hash calculation result and the timestamp. Therefore, the decrypted first hash calculation result and the decryption timestamp can be taken out according to the calculation result. Due to network congestion and the platform data processing rate, there may be errors in the timestamps before and after decryption. According to the decryption timestamp and the encryption timestamp, the validity of the time can be verified.

[0040] S3. Obtain terminal ID and product operation credentials;

[0041] In an embodiment of the present application, after the terminal completes registration on the platform, the platform can obtain the terminal's ID and product operation credentials.

[0042] S4, the terminal ID and the product operation certificate, obtaining a second hash operation result;

[0043] In the embodiment of the present application, the second hash operation result is different from the first hash operation result, and the second hash operation result is the data obtained by the platform through hash operation based on the terminal ID and the terminal product operation certificate when the terminal is registered.

[0044] S5. authenticating the identity of the terminal according to the first hash operation result, the second hash operation result and the decryption timestamp;

[0045] In an embodiment of the present application, the first hash operation result obtained by decrypting the authentication information can be compared with the second hash operation result obtained by calculating the platform registration information, and the identity authentication can be completed according to the comparison result; combined with the authentication of the decryption timestamp and the timestamp before decryption, the terminal identity authentication can be realized.

[0046] Further, refer to Figure 2 The step of encrypting the terminal ID and the product operation certificate may specifically include:

[0047] S11, obtaining first original data and a first timestamp according to the terminal ID and the product operation certificate;

[0048] In the device embodiment, the first original data can be obtained according to the formula, which is specifically: first original data = terminal ID + product operation certificate. The first original data of the identity information can be obtained by splicing the terminal ID with the product operation certificate, and the first timestamp is the timestamp for obtaining the first original data.

[0049] S12, performing an operation on the first original data and the first timestamp to obtain a first operation result;

[0050] In the implementation of the present application, a hash operation can be performed on the first original data and the first timestamp, and the hash result can be concatenated with the encrypted timestamp to obtain a calculation result. Specifically, take the first original data as rawData, the first operation result as r, and the timestamp as timestamp as an example; the operation formula is r=hash(rawData)+timestamp; hash() represents a hash operation on the parameters in the brackets, and a hash function is a mathematical equation that can use text (such as e-mail information) to generate a code called a message digest; among them, famous hash functions include: MD4, MD5 and SHS; a hash function that can be used for digital authentication must have specific properties to make it sufficiently secure for password use.

[0051] S13, performing encryption calculation on the first operation result to obtain first authentication information;

[0052] In an embodiment of the present application, the first operation result obtained in the above steps is encrypted using the platform public key to obtain the first authentication information. The first operation result is r, the first authentication information is authInfo, and the operation result is encrypted according to the formula: authInfo=encrypt(r); encrypt() is the encryption function.

[0053] Furthermore, the step of obtaining the first original data according to the terminal ID and the product operation certificate may specifically include: concatenating the terminal ID and the product operation certificate to obtain the first original data. In an embodiment of the present application, the terminal ID and the product operation certificate may be concatenated to obtain the first original data. Specifically, the formula may be referred to: rawData=terminal ID+Master-Key, wherein rawData is the original data, the first original data represents the original data obtained according to the terminal ID and the product operation certificate during the encryption process, and Master-Key is the product operation certificate.

[0054] Further, refer to Figure 3 The step of performing operation on the first original data and the first timestamp to obtain a first operation result may specifically include:

[0055] S121, performing a hash operation on the first original data to obtain a first hash operation result;

[0056] In an embodiment of the present application, a hash operation can be performed on the first original data to obtain a first hash operation result, which can be obtained according to the formula: h=hash(rawData); where h is the hash result. The first hash operation result in the present application can be the result of the hash operation during the encryption process, and rawData is the first original data.

[0057] S122: concatenate the first hash operation result with the first timestamp to obtain a first operation result;

[0058] In an embodiment of the present application, the first hash operation result can be concatenated with the first timestamp to obtain a first operation result; according to the formula r=h+timestamp; where h is the first operation result and timestamp is the timestamp. In an embodiment of the present application, the first timestamp can be the timestamp when the hash operation is performed.

[0059] Further, refer to Figure 4 The step of authenticating the identity of the terminal according to the first hash operation result, the second hash operation result and the decryption timestamp may specifically include:

[0060] S51, preset time error;

[0061] In the embodiment of the present application, since there may be network congestion during the entire authentication process and the platform needs to spend time to process data, a certain time error needs to be set. The specific time error can be adjusted according to the actual situation.

[0062] S52, obtaining an authentication time difference according to the first timestamp and the decryption timestamp;

[0063] In an embodiment of the present application, the first timestamp may be the timestamp when the hash operation is performed during encryption, and the decryption timestamp may be the timestamp after decryption; due to network congestion and the platform's data processing time, there is a certain error between the two, and this error is the authentication time difference, which can be obtained by subtracting the decryption timestamp from the first timestamp.

[0064] S53, obtaining a time authentication result according to the authentication time difference and the time error;

[0065] In an embodiment of the present application, a time authentication result can be obtained based on a calculation result of a preset time error and an authentication time difference, and the time authentication result can be used to verify the time of identity authentication.

[0066] S54, comparing the first Hash operation result with the second Hash operation result to obtain a comparison result;

[0067] In the embodiment of the present application, the first hash operation result and the second hash operation result can be compared to obtain a comparison result.

[0068] S55: authenticating the identity of the terminal according to the comparison result and the time authentication result;

[0069] In an embodiment of the present application, if the comparison result of the first hash operation result and the second hash operation result is consistent, combined with the time authentication result of the timestamp, the error between the decrypted timestamp and the first timestamp is within the preset time error, then the identity authentication is considered to be successful; if the comparison result of the first hash operation result and the second hash operation result is inconsistent, or the error between the decrypted timestamp and the first timestamp is outside the preset time error, then the identity authentication is considered to be unsuccessful.

[0070] Furthermore, the step of obtaining a time authentication result according to the authentication time difference and the time error may specifically include:

[0071] S531, comparing the authentication time difference and the time error;

[0072] In an embodiment of the present application, the authentication time difference can be obtained by subtracting the decryption timestamp from the first timestamp, and by comparing the authentication time difference with the preset time error, it can be determined whether the time authentication is passed.

[0073] S532: If the authentication time difference is less than the time error, the authentication is successful; if the authentication time difference is greater than the time error, the authentication is unsuccessful;

[0074] In the embodiment of the present application, if the authentication time difference is less than the time error, the authentication is considered successful; if the authentication time difference is greater than the time error, the authentication is unsuccessful. Specifically, the time error can be preset to 5 seconds; if the authentication time difference is less than 5 seconds, the authentication of the timestamp is considered successful; if the authentication time difference is greater than 5 seconds, the authentication of the timestamp is considered failed.

[0075] In addition, some embodiments of the present application also include the steps of: returning the authentication result to the terminal; after the IoT platform completes the identity authentication, the IoT platform needs to return the authentication result to the IoT terminal to complete the identity login.

[0076] In summary, the IoT terminal identity authentication method described in this application has the following advantages:

[0077] 1. Reduce the maintenance cost of IoT terminals; Different from the traditional identity authentication method using Token, using the identity authentication method of this application, the platform does not need to allocate and maintain Token for each terminal.

[0078] 2. Reduce the complexity of application; the data required for terminal calculation authentication information in this method: terminal ID, product operation certificate, platform encryption public key can be injected into the terminal in batches, reducing the complexity of terminal production and improving the extensiveness of application;

[0079] 3. Increased security of identity information. During the terminal login process, only the terminal ID and the encrypted first authentication information are carried. The product operation credentials will not be transmitted in the network, thus ensuring the security of identity information from being stolen. The identity information is encrypted and transmitted after hash operation, further improving data security.

[0080] 4. It can effectively resist replay attacks. This method adds a timestamp to the authentication information. The platform can effectively resist replay attacks by verifying the timestamp.

[0081] In addition, Figure 1 Corresponding to the method, refer to Figure 5 The embodiment of the present application also provides an Internet of Things terminal identity authentication system, including a first acquisition module, used to obtain first authentication information of the terminal; a second acquisition module, used to obtain the terminal ID and product operation credentials; a decryption module, used to decrypt the first authentication information to obtain a first hash operation result and a decryption timestamp; an authentication module, used to authenticate the identity of the terminal according to the first hash operation result, the second hash operation result and the decryption timestamp.

[0082] and Figure 1 Corresponding to the method, the embodiment of the present application also provides an Internet of Things terminal identity authentication device, the specific structure of which can be referred to Figure 6 ,include:

[0083] at least one processor;

[0084] at least one memory for storing at least one program;

[0085] When the at least one program is executed by the at least one processor, the at least one processor implements the Internet of Things terminal identity authentication method.

[0086] The contents of the above method embodiments are all applicable to the present device embodiments. The functions specifically implemented by the present device embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0087] and Figure 1 Corresponding to the method, an embodiment of the present invention further provides a storage medium, which stores instructions executable by a processor, and the instructions executable by the processor are used to execute the Internet of Things terminal identity authentication method when executed by the processor.

[0088] In some optional embodiments, the function / operation mentioned in the block diagram may not occur in the order mentioned in the operation diagram. For example, depending on the function / operation involved, the two boxes shown in succession can actually be executed substantially simultaneously or the boxes can sometimes be executed in reverse order. In addition, the embodiment presented and described in the flow chart of the application is provided by way of example, for the purpose of providing a more comprehensive understanding of technology. The disclosed method is not limited to the operation and logic flow presented herein. Optional embodiments are expected, wherein the order of various operations is changed and the sub-operation described as a part of a larger operation is performed independently.

[0089] In addition, although the present application is described in the context of functional modules, it should be understood that, unless otherwise specified, one or more of the functions and / or features can be integrated into a single physical device and / or software module, or one or more functions and / or features can be implemented in a separate physical device or software module. It is also understood that a detailed discussion of the actual implementation of each module is unnecessary for understanding the present application. More specifically, in view of the properties, functions, and internal relationships of the various functional modules in the device disclosed herein, the actual implementation of the module will be understood within the conventional techniques of the engineer. Therefore, those skilled in the art can implement the present application set forth in the claims without excessive experimentation using ordinary techniques. It is also understood that the specific concepts disclosed are merely illustrative and are not intended to limit the scope of the present application, which is determined by the full scope of the attached claims and their equivalents.

[0090] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium, including several programs to enable a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0091] The logic and / or steps represented in the flowchart or otherwise described herein, for example, may be considered as an ordered list of executable programs for implementing the logical functions, and may be embodied in any computer-readable medium for use by a program execution system, device or apparatus (such as a computer-based system, a system including a processor, or other system that can fetch and execute a program from a program execution system, device or apparatus), or in conjunction with such program execution systems, devices or apparatuses. For purposes of this specification, a "computer-readable medium" may be any device that can contain, store, communicate, propagate or transmit a program for use by a program execution system, device or apparatus, or in conjunction with such program execution systems, devices or apparatuses.

[0092] More specific examples of computer-readable media (a non-exhaustive list) include the following: an electrical connection with one or more wires (electronic device), a portable computer disk case (magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable and programmable read-only memory (EPROM or flash memory), an optical fiber device, and a portable compact disk read-only memory (CDROM). In addition, the computer-readable medium may even be a paper or other suitable medium on which the program is printed, since the program may be obtained electronically, for example, by optically scanning the paper or other medium, followed by editing, deciphering or, if necessary, processing in another suitable manner, and then stored in a computer memory.

[0093] It should be understood that the various parts of the present application can be implemented by hardware, software, firmware or a combination thereof. In the above-mentioned embodiments, multiple steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable program execution system. For example, if implemented by hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or their combination: a discrete logic circuit having a logic gate circuit for implementing a logic function for a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.

[0094] In the above description of this specification, the description with reference to the terms "one embodiment / example", "another embodiment / example" or "certain embodiments / examples" etc. means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present application. In this specification, the schematic representation of the above terms does not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner.

[0095] Although the embodiments of the present application have been shown and described, those skilled in the art will appreciate that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present application, and that the scope of the present application is defined by the claims and their equivalents.

[0096] The above is a specific description of the preferred implementation of the present application, but the present application is not limited to the described embodiments. Technical personnel familiar with the field may make various equivalent modifications or substitutions without violating the spirit of the present application. These equivalent modifications or substitutions are all included in the scope defined by the claims of the present application.

Claims

1. A method for authenticating an Internet of Things terminal identity, characterized in that: The following steps are involved: Obtaining first authentication information of the terminal; the first authentication information includes authentication information obtained by encrypting the terminal ID and the product operation credential; Decrypting the first authentication information to obtain a first hash operation result and a decryption timestamp; Obtain terminal ID and product operation credentials; Obtaining a second hash operation result according to the terminal ID and the product operation credential; authenticating the identity of the terminal according to the first hash operation result, the second hash operation result and the decryption timestamp; The step of authenticating the identity of the terminal according to the first hash operation result, the second hash operation result and the decryption timestamp specifically includes: Preset time error; Obtaining an authentication time difference according to the first timestamp and the decryption timestamp; Obtaining a time authentication result according to the authentication time difference and the time error; Comparing the first Hash operation result with the second Hash operation result to obtain a comparison result; authenticating the identity of the terminal according to the comparison result and the time authentication result; The step of obtaining a time authentication result according to the authentication time difference and the time error specifically includes: Compare the authentication time difference and time error; If the authentication time difference is smaller than the time error, the authentication is successful; if the authentication time difference is larger than the time error, the authentication is unsuccessful.

2. According to claim 1, a method for authenticating an Internet of Things terminal, characterized in that: The step of encrypting the terminal ID and the product operation certificate specifically includes: Obtaining first original data and a first timestamp according to the terminal ID and the product operation certificate; Performing an operation on the first original data and the first timestamp to obtain a first operation result; The first operation result is encrypted to obtain first authentication information.

3. According to claim 2, a method for authenticating an Internet of Things terminal, characterized in that: The step of obtaining the first original data according to the terminal ID and the product operation certificate specifically includes: concatenating the terminal ID and the product operation certificate to obtain the first original data.

4. According to claim 2, a method for authenticating an Internet of Things terminal, characterized in that: The step of performing operation on the first original data and the first timestamp to obtain a first operation result specifically includes: Performing a hash operation on the first original data to obtain a first hash operation result; The first hash operation result is concatenated with the first timestamp to obtain a first operation result.

5. According to claim 1, a method for authenticating an Internet of Things terminal identity, characterized in that: The step of obtaining a second hash operation result according to the terminal ID and the product operation certificate specifically includes: Obtaining second original data according to the terminal ID and the product operation certificate; Perform a hash operation on the second original data to obtain a second hash operation result.

6. An Internet of Things terminal identity authentication system, characterized in that: include: A first acquisition module, used to acquire first authentication information of the terminal; the first authentication information includes authentication information obtained by encrypting the terminal ID and the product operation certificate; The second acquisition module is used to obtain the terminal ID and product operation certificate; A decryption module, used to decrypt the first authentication information to obtain a first hash operation result and a decryption timestamp; An authentication module, configured to obtain a second hash operation result according to the terminal ID and the product operation credential; authenticating the identity of the terminal according to the first hash operation result, the second hash operation result and the decryption timestamp; The step of authenticating the identity of the terminal according to the first hash operation result, the second hash operation result and the decryption timestamp specifically includes: Preset time error; Obtaining an authentication time difference according to the first timestamp and the decryption timestamp; Obtaining a time authentication result according to the authentication time difference and the time error; Comparing the first Hash operation result with the second Hash operation result to obtain a comparison result; authenticating the identity of the terminal according to the comparison result and the time authentication result; The step of obtaining a time authentication result according to the authentication time difference and the time error specifically includes: Compare the authentication time difference and time error; If the authentication time difference is smaller than the time error, the authentication is successful; if the authentication time difference is larger than the time error, the authentication is unsuccessful.

7. An Internet of Things terminal identity authentication device, characterized in that: include: at least one processor; at least one memory for storing at least one program; When the at least one program is executed by the at least one processor, the at least one processor implements an Internet of Things terminal identity authentication method as described in any one of claims 1 to 5.

8. A storage medium storing instructions executable by a processor, characterized in that: The processor-executable instructions are used to execute an Internet of Things terminal identity authentication method as described in any one of claims 1 to 5 when executed by the processor.

Images