Data processing method and device, electronic equipment and storage medium

Abstract

The application relates to a data processing method and device, electronic equipment and a storage medium. The method comprises the following steps: receiving to-be-transmitted data sent by a first Internet of Things node, wherein the to-be-transmitted data comprises a first node identifier of the first Internet of Things node and a second node identifier of a second node receiving the to-be-transmitted data; obtaining a target verification item set based on the first node identifier and the second node identifier; performing analysis verification on the to-be-transmitted data based on the target verification item set to obtain an analysis verification result; obtaining a current legal node set; performing identity verification on the first Internet of Things node and a second Internet of Things node corresponding to the second node identifier based on the current legal node set to obtain an identity verification result; and if the analysis verification result is passed and the identity verification result is legal, transmitting the to-be-transmitted data to the second Internet of Things node. According to the technical scheme, the safety of data transmission in the Internet of Things can be improved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of Internet of Things security, and in particular to a data processing method and device, electronic equipment and a storage medium. BACKGROUND

[0002] With the advent of the era of Internet of Everything, the security of Internet of Things will become more and more important. Once an attack occurs, it will likely cause the Internet of Things devices to lose control, such as the home lights being abnormally turned on by hackers, the reported information being tampered with, and the sensitive data in the Internet of Things platform (Internet of Things server) being leaked, etc. serious consequences.

[0003] Currently, the server and the terminal device are generally verified by the server accessing the terminal device, and both use public and private key verification. A pair of public and private keys are issued by the server to the terminal device for access verification. In the current Internet of Things verification method, the secret key is easily lost and stolen through network transmission, and the server offline to the terminal device also causes low verification efficiency; and the static verification method has the risk of being attacked by exhaustion, and the secret key update is not convenient. SUMMARY

[0004] In view of the above technical problems, the present application provides a data processing method and device, electronic equipment and a storage medium.

[0005] According to an aspect of the present application, a data processing method is provided, which comprises:

[0006] receiving the to-be-transmitted data sent by a first Internet of Things node, the to-be-transmitted data comprising a first node identifier of the first Internet of Things node and a second node identifier receiving the to-be-transmitted data;

[0007] based on the first node identifier and the second node identifier, obtaining a target verification item set;

[0008] based on the target verification item set, analyzing and verifying the to-be-transmitted data to obtain an analysis and verification result;

[0009] obtaining a current set of legal nodes;

[0010] based on the current set of legal nodes, performing identity verification on the first Internet of Things node and a second Internet of Things node corresponding to the second node identifier to obtain an identity verification result;

[0011] if the analysis and verification result is passed and the identity verification result is legal, transmitting the to-be-transmitted data to the second Internet of Things node.

[0012] According to another aspect of the present application, a data processing device is provided, comprising:

[0013] receive a to-be-transmitted data sent by a first Internet of Things node, the to-be-transmitted data comprising a first node identifier of the first Internet of Things node and a second node identifier of a second Internet of Things node receiving the to-be-transmitted data;

[0014] a target verification item set obtaining module, configured to obtain a target verification item set based on the first node identifier and the second node identifier;

[0015] an analysis verification module, configured to perform analysis verification on the to-be-transmitted data based on the target verification item set, to obtain an analysis verification result;

[0016] a legal node set obtaining module, configured to obtain a current legal node set;

[0017] an identity verification module, configured to perform identity verification on the first Internet of Things node and a second Internet of Things node corresponding to the second node identifier based on the current legal node set, to obtain an identity verification result;

[0018] a transmission module, configured to transmit the to-be-transmitted data to the second Internet of Things node if the analysis verification result is passed and the identity verification result is legal.

[0019] According to another aspect of the present application, an electronic device is provided, comprising a processor, a memory for storing processor-executable instructions, wherein the processor is configured to perform the above method.

[0020] According to another aspect of the present application, a non-volatile computer readable storage medium is provided, having computer program instructions stored thereon, wherein the computer program instructions are executed by a processor to implement the above method.

[0021] By using the first node identifier and the second node identifier, a corresponding target verification item set is obtained; and based on the target verification item set, analysis verification is performed on the to-be-transmitted data, and identity verification is performed on the first Internet of Things node and the second Internet of Things node, and only after the verifications are all passed, the to-be-transmitted data is transmitted to the second Internet of Things node. Without a secret key, the security verification of data transmission in the Internet of Things can be realized, the verification is simpler, and the security is higher; and bidirectional verification of both parties of data interaction in the Internet of Things is realized, further improving the security of data transmission in the Internet of Things.

[0022] Other features and aspects of the present application will become apparent from the following detailed description of exemplary embodiments, taken in conjunction with the accompanying drawings. BRIEF DESCRIPTION OF DRAWINGS

[0023] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate examples, features, and aspects of the present application and, together with the description, serve to explain the principles and operations of the present application.

[0024] Figure 1 A schematic diagram showing an application system according to an embodiment of the present application.

[0025] Figure 2 A flow chart showing an Internet of Things node verification according to an embodiment of the present application.

[0026] Figure 3 A flow chart showing a method of verifying node attribute information based on registered node attribute information to obtain an attribute verification result according to an embodiment of the present application.

[0027] Figure 4 A flow chart showing a data processing method according to an embodiment of the present application.

[0028] Figure 5 A flow chart showing a method of obtaining a target verification item set based on a first node identifier and a second node identifier according to an embodiment of the present application.

[0029] Figure 6 A flow chart showing a method of obtaining preset data information corresponding to a second node identifier according to an embodiment of the present application.

[0030] Figure 7 A flow chart showing a data processing method according to an embodiment of the present application.

[0031] Figure 8 A block diagram showing a data processing apparatus according to an embodiment of the present application.

[0032] Figure 9 A block diagram showing an electronic device for data processing according to an embodiment of the present application. DETAILED DESCRIPTION

[0033] Various example embodiments, features and aspects of the present application will be described in detail with reference to the accompanying drawings. The same reference numbers in different drawings represent the same or similar elements. Although various aspects of the embodiments are illustrated in the drawings, the drawings are not necessarily drawn to scale unless specifically noted.

[0034] The word "exemplary" is used herein to mean "serving as an example, instance, or illustration." Any implementation described herein as "exemplary" is not necessarily to be construed as preferred or advantageous over other implementations.

[0035] In addition, for a better illustration of the present application, numerous specific details are given in the following detailed description. Those skilled in the art will understand that the present application can also be implemented without certain specific details. In some examples, methods, means, elements and circuits well known to those skilled in the art are not described in detail in order to highlight the principles of the present application.

[0036] Please refer to Figure 1 , Figure 1 A schematic diagram of an application system according to an embodiment of the present application is shown. The application system can be used for the data processing method of the present application, specifically, the data processing device 03 can be used for the data processing method of the present application. As shown in Figure 1 , the application system can at least include a server 01, a terminal 02 and a data processing device 03.

[0037] In an embodiment of the present application, the server 01 can be an Internet of Things server, which can be a server cluster or a distributed system composed of multiple physical servers, and can also be a cloud server providing cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, CDN (Content Delivery Network), and basic cloud computing services such as big data and artificial intelligence platforms.

[0038] In an embodiment of the present application, the terminal 02 can be an Internet of Things terminal device, which can include smart phones, desktop computers, tablet computers, notebook computers, smart speakers, digital assistants, augmented reality (AR) / virtual reality (VR) devices, smart wearable devices, and other types of physical devices. The physical device can also include software running on the physical device, such as applications and the like. The operating system running on the terminal 02 in an embodiment of the present application can include but is not limited to Android system, IOS system, Linux, Windows, and the like.

[0039] In an embodiment of the present application, the terminal 02 described above can interact with the server 01 through the data processing device 03, for example, the terminal 02 reports data to the server 01, and the server 01 issues instruction data to the terminal 02. The terminal 02 and the server 01 can be connected to the data processing device 03 through wired or wireless means, which is not limited in the present application.

[0040] In a specific embodiment, the server 01 is a distributed system, which can be a blockchain system. When the distributed system is a blockchain system, it can be formed by a plurality of nodes (any form of computing device in the access network, such as a server or a user terminal). The nodes form a peer-to-peer (P2P) network, and the P2P protocol is an application layer protocol running on the transmission control protocol (TCP) protocol. In the distributed system, any machine such as a server or a terminal can join as a node. The node includes a hardware layer, an intermediate layer, an operating system layer, and an application layer. Specifically, the functions of the nodes in the blockchain system can include:

[0041] 1) Routing, a basic function of the node, used to support communication between nodes.

[0042] In addition to the routing function, the node can also have the following functions:

[0043] 2) Application, used to deploy in the blockchain, implement specific business according to actual business needs, record data related to the implementation of the function to form record data, carry a digital signature in the record data to represent the source of the task data, and send the record data to other nodes in the blockchain system. When the other nodes successfully verify the source and integrity of the record data, they add the record data to the temporary block.

[0044] It should be noted that the following figure shows a possible sequence of steps, which does not necessarily have to be strictly followed. Some steps can be executed in parallel without being dependent on each other.

[0045] In the embodiments of the present specification, the content of the Internet of Things node continuous verification is first introduced. The Internet of Things node continuous verification does not require the triggering of data services, i.e., it does not need to receive the to-be-transmitted data, and can continuously verify the Internet of Things node in real time. Through the Internet of Things node continuous verification, the current legal node set can be obtained, which can include the current and verified legal Internet of Things node. The current legal node set can be used for identity verification in the subsequent to-be-transmitted data verification process. Specifically, Figure 2 The flowchart of the Internet of Things node verification according to an embodiment of the present application is shown. As Figure 2 shown, the method can include:

[0046] S201, receiving the node information reported by each Internet of Things node in the Internet of Things.

[0047] In actual application, each Internet of Things node in the Internet of Things can report node information to the data processing apparatus, and correspondingly, the data processing apparatus can receive the node information reported by each Internet of Things node in the Internet of Things. The node information can be information capable of representing the identity of the Internet of Things node, for example, node MAC (Media Access Control Address, physical address) address information, node IP (Internet Protocol) address information, node location information, etc., which are not limited in the present disclosure.

[0048] The Internet of Things node can include a server and a terminal device in the Internet of Things. In the embodiments of the present specification, the server and the terminal device in the Internet of Things are regarded as peer nodes, and both are uniformly verified as Internet of Things nodes.

[0049] S203, obtaining the sending time of each Internet of Things node sending node information, Internet of Things registered node information, and agreement time information.

[0050] The Internet of Things registered node information can be the information of the registered Internet of Things node in the physical network, that is, the information of the Internet of Things registered node. The Internet of Things registered node can be a legitimate Internet of Things node in the Internet of Things stored in the data processing apparatus, that is, an Internet of Things node registered in the Internet of Things. Correspondingly, each Internet of Things node described above can include a maliciously disguised registered Internet of Things node. The Internet of Things registered node information can be stored in the data processing apparatus and can be updated according to real-time registration.

[0051] In actual application, the legitimacy of the Internet of Things node reporting node information can be verified when the node information is received, based on which the reporting time of each Internet of Things node reporting node information, the Internet of Things registered node information, and the agreement time information can be obtained for legitimacy verification. In one example, the Internet of Things registered node information can be identification information capable of representing the legitimacy of the Internet of Things node, for example, the data processing apparatus can include identification information of legitimate Internet of Things nodes.

[0052] S205, based on the agreement time information and the Internet of Things registered node information, respectively verifying the reporting time and the node information, and taking the Internet of Things node whose verification passes as the current legitimate node set.

[0053] In the embodiments of the present specification, the reporting time can be verified based on the agreement time information to obtain a time verification result, and the node information can be verified based on the Internet of Things registered node information to obtain a node verification result. Further, the Internet of Things node whose time verification result and node verification result both pass can be taken as the current legitimate node set. The legitimate node set is a subset of each Internet of Things node and a subset of the Internet of Things registered node.

[0054] Optionally, the IoT node with the time verification result as not passing or the node verification result as not passing can be regarded as a blacklisted node, and the data processing apparatus can send a data transmission rejection instruction to the blacklisted node; or ignore the data sent by the blacklisted node, so that the blacklisted node cannot perform data interaction, thereby ensuring the communication security of the IoT.

[0055] In a possible implementation, the node information can include node attribute information and node location information, and the IoT registration node information can include registration node attribute information and registration node location information; the step S205 can include:

[0056] verify the sending time according to the agreed time information, to obtain a time verification result;

[0057] verify the node location information based on the registration node location information, to obtain a location verification result;

[0058] verify the node attribute information based on the registration node attribute information, to obtain an attribute verification result;

[0059] regard the IoT node with the time verification result, the location verification result and the attribute verification result all as passing as a current legal node set.

[0060] In an example, the node attribute information can include at least one of a node type, node MAC address information, IP address information, network information and certificate information; the registration node attribute information can be fingerprint identification information. Based on this, as shown in Figure 3 the above verification of the node attribute information based on the registration node attribute information, to obtain an attribute verification result, can include the following steps:

[0061] S301, generate a node fingerprint identification according to at least one of a node type, node MAC address information, IP address information, network information and certificate information;

[0062] S303, verify the node fingerprint identification based on the fingerprint identification information, to obtain an attribute verification result.

[0063] In the embodiments of the present specification, the node type can include a server type and a terminal device type. The network information can include network port information, and the certificate information can be a digital certificate issued in the IoT, which are not limited by the present disclosure.

[0064] As an example, the node fingerprint identifier can be generated according to at least one of the node type, the node MAC address information, the IP address information, the network information, and the certificate information by a hash operation. Thus, the node fingerprint identifier can be verified based on the fingerprint identifier information to obtain an attribute verification result.

[0065] S207, updating the appointment time information.

[0066] In the embodiments of the present specification, since the appointment time information is taken as a verification item, the node information reporting time of the next appointment needs to be determined after each verification round. Based on this, the appointment time information can be updated, for example, the appointment time information can be updated to 2 seconds later, and the present disclosure does not limit this.

[0067] S209, sending the updated appointment time information to the Internet of Things registration node, so that the Internet of Things registration node reports the node information based on the updated appointment time information.

[0068] In actual application, the updated appointment time information is sent to the Internet of Things registration node, so that the Internet of Things registration node reports the node information based on the updated appointment time information. In this way, the node that is mistakenly verified as not passing this time can continue to report node information next time, and the verification fault tolerance is improved.

[0069] Figure 4 A flowchart of a data processing method according to an embodiment of the present application is shown. As shown in Figure 4 The method can include:

[0070] S401, receiving the to-be-transmitted data sent by the first Internet of Things node, the to-be-transmitted data can include the first node identifier of the first Internet of Things node and the second node identifier receiving the to-be-transmitted data.

[0071] In actual application, when the server sends instructions to the terminal device or the terminal device reports data to the server, it needs to pass through the data processing device. Based on this, the data processing device can receive the to-be-transmitted data sent by the first Internet of Things node, and the to-be-transmitted data can include the first node identifier of the first Internet of Things node and the second node identifier receiving the to-be-transmitted data. The to-be-transmitted data can include instruction data and reported data.

[0072] S403, obtaining a target verification item set based on the first node identifier and the second node identifier.

[0073] Since the to-be-transmitted data is related to the first IoT node and the second IoT node, a corresponding target verification item set can be obtained based on the corresponding first node identifier and the second node identifier. The target verification item set can include a verification item for verifying the to-be-transmitted data, that is, the to-be-transmitted data can be verified by using the verification item in the target verification item set.

[0074] S405, analyzing and verifying the to-be-transmitted data based on the target verification item set to obtain an analysis verification result.

[0075] In actual application, the to-be-transmitted data can be analyzed and verified based on the target verification item set to obtain an analysis verification result. If the analysis verification result is passed, S411 can be reached. If the analysis verification result is not passed, an alarm processing can be triggered, for example, an alarm information can be sent to a terminal of a relevant person for reminding, or an alarm prompt information can be displayed, and the like, which are not limited in the present disclosure. And the forwarding processing of the to-be-transmitted data can be rejected.

[0076] S407, obtaining a current legal node set.

[0077] In the embodiments of the present disclosure, the current legal node set can be obtained, which can be obtained in step S205.

[0078] S409, performing identity authentication on the second IoT node corresponding to the first IoT node and the second node identifier based on the current legal node set to obtain an identity authentication result.

[0079] In the embodiments of the present disclosure, the nodes in the current legal node set can be IoT nodes with legal identity. Based on this, identity authentication can be performed on the second IoT node corresponding to the first IoT node and the second node identifier based on the current legal node set to obtain an identity authentication result. If the identity authentication result is legal, S411 can be reached. If the identity authentication result is illegal, an alarm processing can be triggered. For example, if the first IoT node and the second node identifier are both in the current legal node set, it can be determined that the identity authentication result is legal. If the first IoT node or the second node identifier is not in the current legal node set, it can be determined that the identity authentication result is illegal, so that the alarm processing can be performed to avoid malicious disguised nodes.

[0080] S411, if the analysis verification result is passed and the identity authentication result is legal, transmitting the to-be-transmitted data to the second IoT node.

[0081] In the embodiments of the present disclosure, if the analysis verification result is passed and the identity authentication result is legal, that is, after the data transmission parties are verified, the to-be-transmitted data can be transmitted to the second IoT node.

[0082] By the first node identifier and the second node identifier, a corresponding target verification item set is obtained; and based on the target verification item set, the to-be-transmitted data is analyzed and verified, and the first Internet of Things node and the second Internet of Things node are authenticated, and only after the verifications are passed, the to-be-transmitted data is transmitted to the second Internet of Things node. The security verification of data transmission in the Internet of Things can be realized without a secret key, the verification is simpler, and the security is higher; and the two-way verification of the two parties of data interaction in the Internet of Things is realized, and the security of Internet of Things data transmission is further improved.

[0083] Figure 5 A method flow chart for obtaining a target verification item set based on a first node identifier and a second node identifier according to an embodiment of the application is shown. As shown in Figure 5 In a possible implementation manner, the step S403 can include:

[0084] S501, when the first node identifier corresponds to the first Internet of Things node which is an Internet of Things server, and the second node identifier corresponds to the second Internet of Things node which is an Internet of Things terminal, a preset instruction set corresponding to the first node identifier is obtained;

[0085] S503, a preset data information corresponding to the second node identifier is obtained;

[0086] In the embodiments of the present application, when the first node identifier corresponds to the first Internet of Things node which is an Internet of Things server, and the second node identifier corresponds to the second Internet of Things node which is an Internet of Things terminal, that is, when the Internet of Things server sends instruction data to the Internet of Things terminal, the preset instruction set corresponding to the first node identifier can be obtained, and the preset data information corresponding to the second node identifier can be obtained.

[0087] The preset instruction set can be a set of pre-set legal instructions, for example, can include a preset number of instruction formats. The preset data information can include operation information, operation time information, etc.

[0088] In a possible implementation manner, as shown in Figure 6 The S503 can include:

[0089] S601, the historical transmission data corresponding to the second node identifier is obtained;

[0090] S603, the operation information and the operation time information of the historical transmission data are statistically processed to obtain the preset data information.

[0091] In the embodiments of the present specification, for example, the second node identifies that the corresponding second Internet of Things node is a lamp, and the corresponding historical transmission data can include information of turning on and off the lamp every day. By statistically processing the operation information and operation time information of the historical transmission data, it can be obtained that the lamp is turned off at 6 o'clock in the morning every day and turned on at 7 o'clock in the evening every day. Thus, it can be concluded that the operation information includes turning off and turning on, and the operation time information includes 6 o'clock in the morning every day and 7 o'clock in the evening every day, that is, the preset data information includes turning off / 6 o'clock in the morning every day and turning on / 7 o'clock in the evening every day.

[0092] S505, obtaining a target verification item set according to the preset instruction set and the preset data information.

[0093] In actual application, the preset instruction set and the preset data information can be combined to form the target verification item set.

[0094] In a possible implementation manner, the analysis verification result can include an instruction verification result and / or an instruction content verification result; and the step S405 can include:

[0095] verifying the instruction format of the to-be-transmitted data based on the preset instruction set to obtain an instruction verification result; and / or

[0096] verifying the content of the to-be-transmitted data based on the preset data information to obtain an instruction content verification result.

[0097] In the embodiments of the present specification, the instruction format of the to-be-transmitted data can be verified based on the preset instruction set, for example, whether the instruction format of the to-be-transmitted data matches the preset instruction format in the preset instruction set is verified, if it matches, it can be determined that the instruction verification result is passed, if it does not match, it can be determined that the instruction verification result is not passed.

[0098] The content of the to-be-transmitted data can also be verified based on the preset data information, for example, whether the content of the to-be-transmitted data matches the preset data information is verified to obtain an instruction content verification result, if it matches, it can be determined that the content verification result is passed, if it does not match, it can be determined that the content verification result is not passed. For example, if the content of the to-be-transmitted data is “turn on the lamp at 7 o'clock in the morning every day”, and the preset data information is “turn on the lamp / 7 o'clock in the evening every day”, it can be seen that the preset data information does not match the content of the to-be-transmitted data, that is, the instruction of the to-be-transmitted data is wrong, and it can be determined that the instruction content verification result is not passed.

[0099] In an example, taking the work of a water sprayer as an example, the instruction data (to-be-transmitted data) received by the server and issued to the water sprayer is as follows:

[0100]

[0101] The instruction format of the to-be-transmitted data is verified based on a preset instruction set, and the instruction verification result can be pass. However, the preset data information is “water sprayer works at 12 o'clock every day”, and it can be seen that the content of the to-be-transmitted data does not match the preset data information, specifically, the off of the operation information does not match the preset data information, and therefore the instruction content verification result is fail, which can trigger an alarm processing and reject to forward the to-be-transmitted data to ensure the security of the Internet of Things.

[0102] Figure 7 A flowchart of a data processing method according to an embodiment of the present application is shown. As shown in Figure 7 In a possible implementation, the step S403 can include:

[0103] S701, when the first node identifier corresponds to an Internet of Things terminal and the second node identifier corresponds to an Internet of Things server, obtaining the preset data content corresponding to the first node identifier and the preset data format corresponding to the first node identifier as a target verification item set.

[0104] In the embodiments of the present application, the mapping relationship between the registered Internet of Things terminal and the preset data content and the preset data format can be pre-stored, and according to the mapping relationship, the preset data content corresponding to the first node identifier and the preset data format corresponding to the first node identifier can be obtained. The preset data content can include time information, data type, data value, etc., and the data type can be the type of reported data, such as temperature data, humidity data, flow data, etc., which is not limited in the present disclosure.

[0105] Correspondingly, in one example, the analysis verification result can include a data format verification result and / or a content verification result; and the step S405 can include:

[0106] Based on the preset data format, the format of the to-be-transmitted data is verified to obtain a data format verification result; and / or

[0107] Based on the preset data content, the content of the to-be-transmitted data is verified to obtain a content verification result.

[0108] In the embodiments of the present application, the format of the to-be-transmitted data and / or the content of the to-be-transmitted data can be verified based on the preset data format and / or the preset data information, if both are matched, the data format verification result is pass and the content verification result is pass. If one of them is not matched, the analysis verification result is fail.

[0109] In one example, taking the Internet of Things terminal device reporting data to the Internet of Things server as an example, such as a smart water meter reporting data to the Internet of Things server, the log audit method can be used in analysis and verification, and the reported data (to-be-transmitted data) can be as follows:

[0110]

[0111]

[0112] Wherein, the flow rate and the current water consumption can be data types. The format reported by the smart water meter 2 at "2020-01-12 00:00:00" is correct, and for the data content, comparison needs to be made with the reported data at the previous time, for example, compared with "2020-01-10 00:00:00", in the case of a flow rate of 0.1, the current water consumption does not change, indicating that the reported data is tampered with, and the analysis verification result is not passed, which can trigger an alarm processing.

[0113] Figure 8 A block diagram of a data processing apparatus according to an embodiment of the application is shown. As shown in Figure 8 The apparatus can include:

[0114] The receiving module 801 is configured to receive the to-be-transmitted data sent by the first Internet of Things node, wherein the to-be-transmitted data includes the first node identifier of the first Internet of Things node and the second node identifier of the receiving second node;

[0115] The target verification item set acquisition module 803 is configured to acquire a target verification item set based on the first node identifier and the second node identifier;

[0116] The analysis verification module 805 is configured to perform analysis verification on the to-be-transmitted data based on the target verification item set to obtain an analysis verification result;

[0117] The legal node set acquisition module 807 is configured to acquire a current legal node set;

[0118] The identity verification module 809 is configured to perform identity verification on the first Internet of Things node and the second Internet of Things node corresponding to the second node identifier based on the current legal node set to obtain an identity verification result;

[0119] The transmission module 811 is configured to transmit the to-be-transmitted data to the second Internet of Things node if the analysis verification result is passed and the identity verification result is legal.

[0120] By the first node identifier and the second node identifier, a corresponding target verification item set is obtained; and based on the target verification item set, the to-be-transmitted data is analyzed and verified, and the first Internet of Things node and the second Internet of Things node are authenticated, and only after the verifications are passed, the to-be-transmitted data is transmitted to the second Internet of Things node. The security verification of data transmission in the Internet of Things can be realized without a secret key, the verification is simpler, and the security is higher; and the two-way verification of the two parties of data interaction in the Internet of Things is realized, and the security of the Internet of Things data transmission is further improved.

[0121] In a possible implementation manner, the method further includes:

[0122] receiving node information reported by each Internet of Things node in the Internet of Things;

[0123] obtaining reporting time of the node information reported by each Internet of Things node, Internet of Things registration node information, and agreement time information;

[0124] determining a legal node set based on the agreement time information and the Internet of Things registration node information, respectively verifying the reporting time and the node information, and grouping the Internet of Things nodes that pass the verification into a current legal node set;

[0125] updating the agreement time information;

[0126] sending the updated agreement time information to the Internet of Things registration node, so that the Internet of Things registration node reports the node information based on the updated agreement time information.

[0127] In a possible implementation manner, the node information includes node attribute information and node location information, and the Internet of Things registration node information includes registration node attribute information and registration node location information; the legal node set determining module can include:

[0128] a time verification unit configured to verify the sending time according to the agreement time information to obtain a time verification result;

[0129] a location verification unit configured to verify the node location information based on the registration node location information to obtain a location verification result;

[0130] an attribute verification unit configured to verify the node attribute information based on the registration node attribute information to obtain an attribute verification result;

[0131] The legal node set determination unit is configured to determine, as a current legal node set, an Internet of Things node whose time verification result, location verification result and attribute verification result are all passed.

[0132] In a possible implementation, the node attribute information includes at least one of a node type, node MAC address information, IP address information, network information and certificate information; the registered node attribute information is fingerprint identification information; and the attribute verification unit can include:

[0133] A node fingerprint identification generation subunit is configured to generate a node fingerprint identification according to at least one of the node type, node MAC address information, IP address information, network information and certificate information.

[0134] An attribute verification subunit is configured to verify the node fingerprint identification based on the fingerprint identification information to obtain the attribute verification result.

[0135] In a possible implementation, the target verification item set obtaining module 803 can include:

[0136] A preset instruction set obtaining unit is configured to, when the first node identifier corresponds to an Internet of Things server and the second node identifier corresponds to an Internet of Things terminal, obtain a preset instruction set corresponding to the first node identifier.

[0137] A preset data information obtaining unit is configured to obtain preset data information corresponding to the second node identifier.

[0138] A first target verification item set obtaining unit is configured to obtain the target verification item set according to the preset instruction set and the preset data information.

[0139] In a possible implementation, the analysis verification result includes an instruction verification result and / or an instruction content verification result; and the analysis verification module 805 can include:

[0140] An instruction verification unit is configured to verify an instruction format of the to-be-transmitted data based on the preset instruction set to obtain the instruction verification result; and / or

[0141] An instruction content verification unit is configured to verify a content of the to-be-transmitted data based on the preset data information to obtain the instruction content verification result.

[0142] In a possible implementation, the target verification item set obtaining module 803 can include:

[0143] The second target verification item set obtaining unit is configured to, when the first node identifier corresponds to an Internet of Things terminal and the second node identifier corresponds to an Internet of Things server, obtain preset data content corresponding to the first node identifier and a preset data format corresponding to the first node identifier as the target verification item set.

[0144] In a possible implementation, the analysis verification result includes a data format verification result and / or a content verification result; and the analysis verification module 805 can include:

[0145] The data format verification unit is configured to perform verification processing on the format of the to-be-transmitted data based on the preset data format, to obtain the data format verification result; and / or

[0146] The content verification unit is configured to perform verification on the content of the to-be-transmitted data based on the preset data content, to obtain the content verification result.

[0147] In a possible implementation, the preset data information obtaining unit can include:

[0148] The historical transmission data obtaining sub-unit is configured to obtain historical transmission data corresponding to the second node identifier;

[0149] The preset data information obtaining sub-unit is configured to perform statistical processing on operation information and operation time information of the historical transmission data, to obtain the preset data information.

[0150] As to the apparatus in the above-described embodiments, the specific manners in which various modules and units perform operations have been described in detail in the embodiments of the method, and will not be described here in detail.

[0151] In another aspect, the present application provides a computer program product or computer program, which includes computer instructions stored in a computer readable storage medium. A processor of a computer device reads the computer instructions from the computer readable storage medium, and the processor executes the computer instructions, so that the computer device performs the data recommendation method provided in the various optional implementations described above.

[0152] Figure 9 A block diagram of an electronic device for data processing according to an embodiment of the present application is shown. The electronic device can be a server, and its internal structure diagram can be as shown in FIG. 1. Figure 9As shown in the figure. The electronic device includes a processor, a memory and a network interface connected through a system bus. Among them, the processor of the electronic device is used to provide computing and control capabilities. The memory of the electronic device includes a non-volatile storage medium, an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operating system and the computer program in the non-volatile storage medium to run. The network interface of the electronic device is used to communicate with the external terminal through the network connection. The computer program is executed by the processor to implement a data processing method.

[0153] Those skilled in the art can understand that, Figure 9 The structure shown in the figure is only a block diagram of part of the structure related to the scheme of the present application, and does not constitute a limitation on the electronic device to which the scheme of the present application is applied. The specific electronic device can include more or less components than those shown in the figure, or combine certain components, or have a different component arrangement.

[0154] In an exemplary embodiment, an electronic device is also provided, comprising: a processor; a memory for storing instructions executable by the processor; wherein the processor is configured to execute the instructions to implement the data processing method in the embodiments of the present application.

[0155] In an exemplary embodiment, a storage medium is also provided, when the instructions in the storage medium are executed by the processor of the electronic device, the electronic device can execute the data processing method in the embodiments of the present application.

[0156] In an exemplary embodiment, a computer program product containing instructions is also provided, when it runs on a computer, so that the computer executes the data processing method in the embodiments of the present application.

[0157] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer readable storage medium. When the computer program is executed, the processes of the above-mentioned embodiments of the methods can be included. Any reference to memory, storage, databases, or other media in this application can include non-volatile and / or volatile memory. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), or flash memory. Volatile memory can include random access memory (RAM) or external cache memory. As an illustration but not limitation, RAM is available in many forms such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDR SDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM), etc.

[0158] Other embodiments of the application will be apparent to those skilled in the art from consideration of the specification and practice of the application disclosed herein. It is intended that the specification and examples be considered as exemplary only, with the true scope and spirit of the application being indicated by the following claims.

[0159] It should be understood that the application is not limited to the precise construction that has been described above and illustrated in the accompanying drawings, and that various modifications and changes can be made by those skilled in the art without departing from the scope of the application. The scope of the application is limited only by the appended claims.

Claims

1. A data processing method, characterized by, The method comprises: receiving data to be transmitted sent by a first Internet of Things node, the data to be transmitted comprising a first node identifier of the first Internet of Things node and a second node identifier of a second node receiving the data to be transmitted; based on the first node identifier and the second node identifier, obtaining a target verification item set; the obtaining of the target verification item set comprises: when the first node identifier corresponds to an Internet of Things server and the second node identifier corresponds to an Internet of Things terminal, obtaining a preset instruction set corresponding to the first node identifier; obtaining preset data information corresponding to the second node identifier, the preset data information comprising operation information and operation time information; and obtaining the target verification item set according to the preset instruction set and the preset data information; based on the target verification item set, analyzing and verifying the data to be transmitted to obtain an analysis and verification result; obtaining a current legal node set; the current legal node set is obtained through real-time continuous verification; based on the current legal node set, performing identity verification on the first Internet of Things node and the second node corresponding to the second node identifier to obtain an identity verification result; if the analysis and verification result is passed and the identity verification result is legal, transmitting the data to be transmitted to the second Internet of Things node; the method further comprises: receiving node information reported by each Internet of Things node in the Internet of Things; the node information comprises node attribute information and node location information; obtaining reporting time of the node information reported by each Internet of Things node, Internet of Things registration node information, and agreement time information; the Internet of Things registration node information comprises registration node attribute information and registration node location information; verifying the reporting time according to the agreement time information to obtain a time verification result; verifying the node location information based on the registration node location information to obtain a location verification result; verifying the node attribute information based on the registration node attribute information to obtain an attribute verification result; regarding the Internet of Things node whose time verification result, location verification result, and attribute verification result are all passed as the current legal node set; updating the agreement time information; and transmitting the updated agreement time information to an Internet of Things registration node, so that the Internet of Things registration node reports the node information based on the updated agreement time information.

2. The method of claim 1, wherein, the node attribute information comprises at least one of node type, node MAC address information, IP address information, network information, and certificate information; the registration node attribute information is fingerprint identifier information; the verifying of the node attribute information based on the registration node attribute information to obtain the attribute verification result comprises: generating a node fingerprint identifier according to at least one of the node type, node MAC address information, IP address information, network information, and certificate information; verifying the node fingerprint identifier based on the fingerprint identifier information to obtain the attribute verification result.

3. The method of claim 1, wherein, The analysis verification result includes an instruction verification result and / or an instruction content verification result; the analysis verification on the to-be-transmitted data based on the target verification item set includes: verification on an instruction format of the to-be-transmitted data based on the preset instruction set, to obtain the instruction verification result; and / or verification on content of the to-be-transmitted data based on the preset data information, to obtain the instruction content verification result.

4. The method of claim 1, wherein, The target verification item set is obtained based on the first node identifier and the second node identifier, including: when the first node identifier corresponds to an Internet of Things terminal and the second node identifier corresponds to an Internet of Things server, obtaining preset data content corresponding to the first node identifier and a preset data format corresponding to the first node identifier as the target verification item set.

5. A data processing apparatus, characterized by, including: a receiving module configured to receive to-be-transmitted data sent by a first Internet of Things node, the to-be-transmitted data including a first node identifier of the first Internet of Things node and a second node identifier receiving the to-be-transmitted data; a target verification item set obtaining module configured to obtain a target verification item set based on the first node identifier and the second node identifier; an analysis verification module configured to perform analysis verification on the to-be-transmitted data based on the target verification item set, to obtain an analysis verification result; a legal node set obtaining module configured to obtain a current legal node set; the current legal node set is obtained through real-time continuous verification, and the current legal node set includes an Internet of Things node whose time verification result and node verification result are both passed; an identity verification module configured to perform identity verification on the first Internet of Things node and a second Internet of Things node corresponding to the second node identifier based on the current legal node set, to obtain an identity verification result; a transmission module configured to, if the analysis verification result is passed and the identity verification result is legal, transmit the to-be-transmitted data to the second Internet of Things node; a node information receiving module configured to receive node information reported by each Internet of Things node in an Internet of Things; a reported related information obtaining module configured to obtain reporting time of the node information reported by each Internet of Things node, Internet of Things registered node information, and agreed time information; a legal node set determining module configured to perform verification processing on the reporting time and the node information based on the agreed time information and the Internet of Things registered node information, to form a current legal node set by combining Internet of Things nodes whose verification is passed; an agreed time information updating module configured to update the agreed time information; a sending module configured to send the updated agreed time information to the Internet of Things registered node, so that the Internet of Things registered node reports the node information based on the updated agreed time information; The node information includes node attribute information and node location information, and the Internet of Things registration node information includes registration node attribute information and registration node location information. The time verification unit is configured to verify the reporting time according to the appointment time information, and obtain a time verification result. The location verification unit is configured to verify the node location information based on the registration node location information, and obtain a location verification result. The attribute verification unit is configured to verify the node attribute information based on the registration node attribute information, and obtain an attribute verification result. The legal node set determination unit is configured to determine the Internet of Things node as a current legal node set when the time verification result, the location verification result, and the attribute verification result are all passed. The target verification item set acquisition module includes: The preset instruction set acquisition unit is configured to acquire a preset instruction set corresponding to the first node identifier when the first Internet of Things node corresponding to the first node identifier is an Internet of Things server and the second Internet of Things node corresponding to the second node identifier is an Internet of Things terminal. The acquisition unit is configured to acquire preset data information corresponding to the second node identifier. The first target verification item set acquisition unit is configured to acquire the target verification item set according to the preset instruction set and the preset data information.

6. The apparatus of claim 5, wherein, The node attribute information includes at least one of a node type, a node MAC address information, an IP address information, network information, and certificate information. The registration node attribute information is fingerprint identifier information. The attribute verification unit includes: The node fingerprint identifier generation subunit is configured to generate a node fingerprint identifier according to at least one of the node type, the node MAC address information, the IP address information, the network information, and the certificate information. The attribute verification subunit is configured to verify the node fingerprint identifier based on the fingerprint identifier information, and obtain the attribute verification result.

7. The apparatus of claim 5, wherein, The analysis verification result includes an instruction verification result and / or an instruction content verification result. The analysis verification module includes: The instruction verification unit is configured to verify an instruction format of the to-be-transmitted data based on the preset instruction set, and obtain the instruction verification result; and / or 8. The apparatus of claim 5, wherein, The instruction content verification unit is configured to verify a content of the to-be-transmitted data based on the preset data information, and obtain the instruction content verification result. The target verification item set acquisition module includes:

9. An electronic device, comprising: The second target verification item set acquisition unit is configured to acquire preset data content corresponding to the first node identifier and a preset data format corresponding to the first node identifier as the target verification item set when the first Internet of Things node corresponding to the first node identifier is an Internet of Things terminal and the second Internet of Things node corresponding to the second node identifier is an Internet of Things server. The processor; The memory for storing processor-executable instructions; The processor is configured to execute the executable instructions to implement the method of any one of claims 1 to 4.

10. A non-transitory computer readable storage medium having stored thereon computer program instructions, wherein, The computer program instructions are executed by the processor to implement the method of any one of claims 1 to 4.

11. A computer program product, characterised in that, comprising computer instructions that, when executed by a processor, cause the computer to perform the method of any one of claims 1 to 4.

Images