A method and apparatus for security hardening of the perception layer gateway in an Internet of Things (IoT) system

Abstract

This invention provides a method and apparatus for security hardening of a perception layer gateway in an Internet of Things (IoT) system, belonging to the field of IoT security technology. The method comprises the following steps: setting up an operating system security boot module on the perception layer gateway, and setting up a business application security boot module and a management port security protection module after the operating system starts; the operating system security boot module performs trusted verification on the operating system of the perception layer gateway, and allows the operating system to start when the trusted verification is successful; the business application security boot module performs trusted verification on the business software, and allows the business software to start when the trusted verification is successful; the management port security protection module performs trusted verification on the access identity of the management port through the business software, and allows the control port to access the perception layer gateway through the management port when the trusted verification is successful. This invention forms a trust chain mechanism among the operating system, business software, and management port, reducing or even eliminating the risk of attacks on the perception layer gateway.

Description

Technical Field

[0001] This invention belongs to the field of Internet of Things (IoT) security technology, specifically relating to a method and apparatus for security hardening of the perception layer gateway of an IoT system. Background Technology

[0002] With the rapid growth and fragmented applications of the Internet of Things (IoT) system, security has become an essential feature for IoT products. Existing secure IoT architectures consist of sensing terminals, sensing layer gateways, sensing information transmission networks, and communication network access systems. Building a secure IoT architecture is intended to counter various forms of attacks, and such an architecture requires implementing multiple types of security mechanisms within a single system.

[0003] The perception layer gateway, located at the edge of the entire IoT system, is responsible for connecting various types of sensors as sensing terminals and interfacing them with various IoT platforms according to a unified materialization model. Because the perception layer gateway is not deployed in a closed and secure environment such as a data center, physical isolation cannot be guaranteed. Therefore, it also needs to defend against intrusion attacks on physical entities, in addition to network attacks. Currently, IoT perception layer gateways are primarily focused on business implementation, neglecting the importance of edge security. They rely solely on simple software mechanisms or passwords for protection, lacking a systematic approach to hardening.

[0004] This is a shortcoming of the existing technology. Therefore, it is very necessary to provide a method and device for security hardening of the perception layer gateway of an Internet of Things system in view of the above-mentioned defects in the existing technology. Summary of the Invention

[0005] The existing IoT sensing layer gateways currently focus on business implementation and neglect the importance of edge security, relying solely on simple software mechanisms or passwords for protection without a systematic hardening method. This invention provides a method and apparatus for hardening the security of IoT system sensing layer gateways to solve the above-mentioned technical problems.

[0006] In a first aspect, the present invention provides a method for security hardening of a perception layer gateway in an Internet of Things (IoT) system, comprising the following steps:

[0007] S1. Configure the operating system security boot module in the perception layer gateway, and configure the business application security boot module and the management port security protection module after the operating system starts.

[0008] S2. The operating system security boot module performs a first-level trusted verification on the operating system of the perception layer gateway. If the first-level trusted verification passes, the operating system is allowed to start. If the first-level trusted verification fails, the operating system is prohibited from starting.

[0009] S3. After the operating system of the perception layer gateway starts, the business application security startup module performs a second-level trusted verification on the business software. If the second-level trusted verification passes, the business software is allowed to start; if the second-level trusted verification fails, the business software is prohibited from starting.

[0010] S4. After the business software starts, the management port security protection module performs a third-level trusted verification on the access identity of the management port through the business software. When the third-level trusted verification is successful, the control port is allowed to access the perception layer gateway through the management port. When the third-level trusted verification fails, the control port is prohibited from accessing the perception layer gateway through the management port.

[0011] Furthermore, the specific steps of step S1 are as follows:

[0012] S11. Generate a pair of system public key and system private key for the perception layer gateway operating system. Write the system public key into the eFuse hardware in a trusted root manner. Use the system private key to sign the operating system image. Set the system public key to verify the signature of the operating system image when the operating system starts up. Generate the operating system secure boot module.

[0013] S12. Generate a pair of business software public key and business software private key for the business software, embed the business software public key in the operating system, calculate the digest of the business software package, sign it with the business software private key and store it in the business software package to generate the business application secure startup module.

[0014] S13. In the business software, set up a USB port detection unit, an access authentication unit, and a control port connection unit for the management port to generate a management port security protection module.

[0015] Furthermore, the specific steps of step S11 are as follows:

[0016] S111. The operating system of the perception layer gateway starts;

[0017] S112. Use the operating system image signing tool to generate a pair of system public and system private keys;

[0018] S113. Write the system public key into the eFuse hardware of the on-chip chip of the perception layer gateway in the form of a trusted root;

[0019] S114. Sign the digest of the operating system image using the system private key, and package the signed operating system digest and the operating system image into system firmware according to a predetermined data format, and then burn the system firmware into the processor of the perception layer gateway.

[0020] S115. Configure the perception layer gateway to connect to the trusted root inside the eFuse hardware when the operating system starts up, verify the system firmware, and generate the operating system secure boot module.

[0021] Furthermore, in step S114, a digest of the operating system is first calculated, and then the calculated operating system digest is signed using the system private key.

[0022] Furthermore, the specific steps of step S12 are as follows:

[0023] S121. Use a business software signing tool to generate a pair of business software public keys and business software private keys;

[0024] S122. Perform HMAC digest operation on the business software package and store the HMAC key in the operating system.

[0025] S123. Sign the business software package after performing HMAC digest operation using the business software private key, and download the business software public key to the operating system's built-in storage space;

[0026] S124. Add the signed business software package HMAC digest to the business software package and package it to generate the business application secure startup module.

[0027] Furthermore, the specific steps of step S2 are as follows:

[0028] S21. The operating system of the perception layer gateway restarts;

[0029] S22. Obtain the operating system image from the packaged system firmware, perform a digest operation on the operating system image to obtain a digest of the operating system image to be booted;

[0030] S23. Obtain the operating system image signature value from the packaged system firmware;

[0031] S24. Verify the signature value and image digest of the operating system image to be booted;

[0032] If the signature verification fails, proceed to step S25;

[0033] If the signature verification is successful, the operating system will be allowed to start, and the process will proceed to step S3.

[0034] S25. The operating system cannot be started. Startup failed. End.

[0035] Furthermore, the specific steps of step S3 are as follows:

[0036] S31. After the operating system starts, the business application secure startup module obtains the business software package, downloads the HMAC key and the business software public key;

[0037] S32. The business application secure startup module obtains the business software from the business software package and performs HMAC digest operation on the business software using the HMAC key to obtain the digest of the business software to be started.

[0038] S33. Obtain the business software signature value from the business software package;

[0039] S34. Verify the HMAC digest and signature value of the business software package;

[0040] S35. If the signature verification fails, the business software will be prohibited from starting and the process will end.

[0041] If the signature verification is successful, the business software is allowed to start, and the process proceeds to step S4.

[0042] Furthermore, the specific steps of step S4 are as follows:

[0043] S41. When the business software detects that the control port sends a connection request to the management port, it uses the USB port detection unit to detect whether a USB password key has been inserted.

[0044] If not, proceed to step S43;

[0045] If so, proceed to step S42;

[0046] S42. The access authentication unit in the business software verifies the access identity through a USB key;

[0047] If the verification fails, proceed to step S43;

[0048] If the verification passes, proceed to step S44;

[0049] S43. Current management port access authentication failed. Control port connection to management port is prohibited. End.

[0050] S44. The control port connection unit of the business software notifies the operating system to load the control port driver;

[0051] S45. Clients that have been authenticated can connect to the HTTP server, which acts as the management port of the perception layer gateway, through the control port.

[0052] S46. The client enables SSL service and remote login service in the management interface to log in via the console and perform file operations.

[0053] Secondly, the present invention provides a security hardening device for a sensing layer gateway in an Internet of Things (IoT) system, comprising:

[0054] The security settings module is used to set up the operating system security boot module at the perception layer gateway, and to set up the business application security boot module and the management port security protection module after the operating system starts.

[0055] The operating system trust verification module is used by the operating system security boot module to perform first-level trust verification on the operating system of the perception layer gateway. If the first-level trust verification is successful, the operating system is allowed to start; if the first-level trust verification fails, the operating system is prohibited from starting.

[0056] The business software trusted verification module is used to perform a second level of trusted verification on the business software after the operating system of the perception layer gateway starts. If the second level of trusted verification passes, the business software is allowed to start; if the second level of trusted verification fails, the business software is prohibited from starting.

[0057] The management port access authentication module is used to perform third-level trusted authentication on the access identity of the management port through the business software after the business software starts. When the third-level trusted authentication is successful, the control port is allowed to access the perception layer gateway through the management port. When the third-level trusted authentication fails, the control port is prohibited from accessing the perception layer gateway through the management port.

[0058] Furthermore, the security settings module includes:

[0059] The operating system secure boot module generation unit is used to generate a pair of system public keys and system private keys for the perception layer gateway operating system. The system public key is burned into the eFuse hardware in a trusted root manner, while the system private key is used to sign the operating system image. The system public key is set to be used to verify the signature of the operating system image when the operating system starts up, thereby generating the operating system secure boot module.

[0060] The business application secure startup module generation unit is used to generate a pair of business software public keys and business software private keys for business software, embed the business software public key in the operating system, calculate the digest of the business software program package, sign it with the business software private key and store it in the business software program package, thereby generating the business application secure startup module.

[0061] The management port security protection module generation unit is used to set up a USB port detection unit, an access authentication unit, and a control port connection unit for the management port in the business software, and generate a management port security protection module.

[0062] The operating system trust verification module includes:

[0063] Operating system restart unit, used to restart the operating system of the perception layer gateway;

[0064] The operating system image digest calculation unit is used to obtain the operating system image from the packaged system firmware, perform digest calculation on the operating system image, and obtain the digest of the operating system image to be booted.

[0065] The operating system image digest calculation unit is used to obtain the operating system image signature value from the packaged system firmware;

[0066] The operating system verification unit is used to verify the signature value and image digest of the operating system image to be booted.

[0067] The operating system startup and execution unit is used to allow the operating system to start when the digest of the operating system image to be started and the digest of the operating system image to be compared are consistent.

[0068] The operating system boot prohibition unit is used to prevent the operating system from booting when the digest of the operating system image to be booted and the digest of the operating system image to be compared are inconsistent, resulting in boot failure.

[0069] Business software trusted verification module:

[0070] The business software package acquisition unit is used by the business application secure startup module to acquire the business software package, download the HMAC key and the business software public key after the operating system starts.

[0071] The business software digest calculation unit is used by the business application secure startup module to obtain the business software from the business software package and perform HMAC digest operation on the business software using the HMAC key to obtain the business software digest to be started.

[0072] The software package digest signature acquisition unit is used to obtain the business software signature value from the business software package.

[0073] The business software verification unit is used to verify the HMAC digest and signature value of the business software package.

[0074] The business software startup prohibition unit is used to prevent the business software from starting when the HMAC digest and signature value of the business software package fail to be verified.

[0075] The business software startup permission unit is used to allow the business software to start when the HMAC digest and signature value of the business software package are verified to be valid.

[0076] The management port access authentication module includes:

[0077] The USB key insertion detection unit is used by the business software to detect whether a USB key has been inserted when the control port sends a connection request to the management port.

[0078] The management port access authentication unit is used to verify the access identity of the access unit in the business software through the USB key when a USB password key is inserted.

[0079] Management port connection prohibited; authentication failure for current management port access; control port connection to management port prohibited.

[0080] The control port driver loading unit is used to notify the operating system to load the control port driver when the access authentication is successful.

[0081] The management port connection unit is used for clients with access authentication to connect to the HTTP server of the management port, which acts as the gateway of the perception layer, through the control port.

[0082] The console login unit is used by clients to enable SSL and remote login services in the management interface, allowing them to log in via the console and perform file operations.

[0083] The beneficial effects of this invention are as follows:

[0084] The IoT system perception layer gateway security hardening method and device provided by the present invention forms a trust chain mechanism of operating system, business software and management port. The trusted root in eFuse hardware verifies the trustworthiness of the operating system, the trusted operating system verifies the trustworthiness of the business software, and the trusted business software verifies the trustworthiness of the access identity of the management port, thereby reducing or even eliminating the risk of attacks on the perception layer gateway.

[0085] Furthermore, the design principle of this invention is reliable, the structure is simple, and it has a very wide range of application prospects.

[0086] Therefore, it is evident that the present invention has outstanding substantive features and significant progress compared with the prior art, and the beneficial effects of its implementation are also obvious. Attached Figure Description

[0087] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, for those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0088] Figure 1 This is a schematic flowchart of Embodiment 1 of the method for security hardening of the perception layer gateway in the Internet of Things system of the present invention.

[0089] Figure 2 This is a schematic flowchart of Embodiment 2 of the method for security hardening of the perception layer gateway in the Internet of Things system of the present invention.

[0090] Figure 3 This is a schematic flowchart of Embodiment 2 of the method for security hardening of the perception layer gateway in the Internet of Things system of the present invention. Detailed Implementation

[0091] To enable those skilled in the art to better understand the technical solutions of this invention, the technical solutions of the embodiments of this invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this invention, and not all embodiments. Based on the embodiments of this invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of this invention.

[0092] Example 1:

[0093] like Figure 1 As shown, the present invention provides a method for security hardening of the perception layer gateway in an Internet of Things (IoT) system, comprising the following steps:

[0094] S1. Configure an operating system security boot module, a business application security startup module, and a management port security protection module within the operating system of the perception layer gateway;

[0095] S2. The operating system security boot module performs a first-level trusted verification on the operating system of the perception layer gateway. If the first-level trusted verification passes, the operating system is allowed to start. If the first-level trusted verification fails, the operating system is prohibited from starting.

[0096] S3. After the operating system of the perception layer gateway starts, the business application security startup module performs a second-level trusted verification on the business software. If the second-level trusted verification passes, the business software is allowed to start; if the second-level trusted verification fails, the business software is prohibited from starting.

[0097] S4. After the business software starts, the management port security protection module performs a third-level trusted verification on the access identity of the management port through the business software. When the third-level trusted verification is successful, the control port is allowed to access the perception layer gateway through the management port. When the third-level trusted verification fails, the control port is prohibited from accessing the perception layer gateway through the management port.

[0098] Example 2:

[0099] like Figure 2 and Figure 3 As shown, the present invention provides a method for security hardening of the perception layer gateway in an Internet of Things (IoT) system, comprising the following steps:

[0100] S1. Configure the operating system secure boot module, business application secure startup module, and management port security protection module within the operating system of the perception layer gateway; the specific steps of step S1 are as follows:

[0101] S11. Generate a system public key and a system private key pair for the perception layer gateway operating system. Write the system public key into the eFuse hardware in a one-time trusted root manner, and use the system private key to sign the operating system image. Configure the operating system to verify the signature using the system public key during startup, generating the operating system secure boot module. The specific steps of step S11 are as follows:

[0102] S111. The operating system of the perception layer gateway starts;

[0103] S112. Use the operating system image signing tool to generate a pair of system public and system private keys;

[0104] S113. The system public key is programmed into the eFuse hardware of the on-chip chip of the perception layer gateway in the form of a trusted root. The trusted root is based on the one-time programmability of the eFuse hardware inside the SOC chip. Once programmed, it cannot be changed. After the system public key is programmed, only the operating system image signed by the corresponding system private key can be started.

[0105] S114. Sign the digest of the operating system image using the system private key, and package the signed operating system digest and the operating system image into system firmware according to a predetermined data format. Then, burn the system firmware into the processor of the perception layer gateway. First, calculate the digest of the operating system, and then sign the calculated operating system digest using the system private key. For example, the digest can be calculated using the SHA256 algorithm, or the SHA1 and SM3 digest algorithms, or symmetric encryption and asymmetric encryption algorithms can also be used.

[0106] S115. Configure the operating system of the perception layer gateway to connect to the trusted root inside the eFuse hardware when the operating system starts up, verify the system firmware, and generate the operating system secure boot module;

[0107] S12. Generate a public key and a private key pair for the business software. Root the public key in the operating system. Calculate a digest for the business software package, sign it with the private key, and store it in the business software package to generate the secure startup module for the business application. The specific steps of step S12 are as follows:

[0108] S121. Use a business software signing tool to generate a pair of business software public keys and business software private keys;

[0109] S122. Perform HMAC digest operation on the business software package and store the HMAC key in the operating system.

[0110] S123. Sign the business software package after performing HMAC digest operation using the business software private key, and download the business software public key to the operating system's built-in storage space;

[0111] S124. Add the signed business software package HMAC digest to the business software package and package it to generate the business application secure startup module;

[0112] Since trusted authentication of both the operating system and business software involves cryptographic operations, using asymmetric algorithms to perform operations on the binary programs of the operating system and business software would obviously increase system startup time. This application first performs hash operations on the binary programs of the operating system and business software. Hash operations are significantly more efficient than asymmetric algorithms. Taking the SHA256 hash algorithm as an example, performing SHA256 hash operations on data of arbitrary length results in a fixed data length of 256 bits. Then, an asymmetric algorithm is used to verify the hash data, which minimizes the time consumed in the trusted authentication process, thereby reducing the startup time of the perception layer gateway device.

[0113] S13. In the business software, a USB port detection unit, an access authentication unit, and a control port connection unit are set for the management port to generate a management port security protection module;

[0114] S2. The operating system security boot module performs a first-level trusted verification on the operating system of the perception layer gateway. If the first-level trusted verification passes, the operating system is allowed to boot; if the first-level trusted verification fails, the operating system boot is prohibited. The specific steps of step S2 are as follows:

[0115] S21. The operating system of the perception layer gateway restarts;

[0116] S22. Obtain the operating system image from the packaged system firmware, perform a digest operation on the operating system image to obtain a digest of the operating system image to be booted;

[0117] S23. Obtain the operating system image signature value from the packaged system firmware;

[0118] S24. Verify the signature value and image digest of the operating system image to be booted;

[0119] If the signature verification fails, proceed to step S25;

[0120] If the signature verification is successful, the operating system will be allowed to start, and the process will proceed to step S3.

[0121] S25. Prevent the operating system from booting; booting fails, end.

[0122] S3. After the operating system of the perception layer gateway starts, the business application security startup module performs a second-level trusted verification on the business software. If the second-level trusted verification passes, the business software is allowed to start; if the second-level trusted verification fails, the business software is prohibited from starting. The specific steps of step S3 are as follows:

[0123] S31. After the operating system starts, the business application secure startup module obtains the business software package, downloads the HMAC key and the business software public key;

[0124] S32. The business application secure startup module obtains the business software from the business software package and performs HMAC digest operation on the business software using the HMAC key to obtain the digest of the business software to be started.

[0125] S33. Obtain the business software signature value from the business software package;

[0126] S34. Verify the HMAC digest and signature value of the business software package;

[0127] S35. If the signature verification fails, the business software will be prohibited from starting and the process will end.

[0128] If the signature verification is successful, the business software is allowed to start, and the process proceeds to step S4.

[0129] S4. After the business software starts, the management port security protection module performs third-level trusted verification on the access identity of the management port through the business software. When the third-level trusted verification is successful, the control port is allowed to access the perception layer gateway through the management port; when the third-level trusted verification fails, the control port is prohibited from accessing the perception layer gateway through the management port. The specific steps of step S4 are as follows:

[0130] S41. When the business software detects that the control port sends a connection request to the management port, it uses the USB port detection unit to detect whether a USB password key has been inserted.

[0131] If not, proceed to step S43;

[0132] If so, proceed to step S42;

[0133] S42. The access authentication unit in the business software verifies the access identity through a USB key;

[0134] If the verification fails, proceed to step S43;

[0135] If the verification passes, proceed to step S44;

[0136] S43. Current management port access authentication failed. Control port connection to management port is prohibited. End.

[0137] S44. The control port connection unit of the business software notifies the operating system to load the control port driver;

[0138] S45. Clients that have been authenticated can connect to the HTTP server, which acts as the management port of the perception layer gateway, through the control port.

[0139] S46. The client enables SSL service and remote login service in the management interface to log in via the console and perform file operations.

[0140] Example 3:

[0141] This invention provides a security hardening device for the perception layer gateway of an Internet of Things (IoT) system, comprising:

[0142] The security settings module is used to configure the operating system secure boot module at the perception layer gateway, and after the operating system boots, to configure the business application secure boot module and the management port security protection module; the security settings module includes:

[0143] The operating system secure boot module generation unit is used to generate a pair of system public keys and system private keys for the perception layer gateway operating system. The system public key is burned into the eFuse hardware in a trusted root manner, while the system private key is used to sign the operating system image. The system public key is set to be used to verify the signature of the operating system image when the operating system starts up, thereby generating the operating system secure boot module.

[0144] The business application secure startup module generation unit is used to generate a pair of business software public keys and business software private keys for business software, embed the business software public key in the operating system, calculate the digest of the business software program package, sign it with the business software private key and store it in the business software program package, thereby generating the business application secure startup module.

[0145] The management port security protection module generation unit is used to set up a USB port detection unit, an access authentication unit, and a control port connection unit for the management port in the business software, and generate a management port security protection module.

[0146] The operating system trust verification module is used by the operating system security boot module to perform first-level trust verification on the operating system of the perception layer gateway. If the first-level trust verification passes, the operating system is allowed to boot; if the first-level trust verification fails, the operating system boot is prohibited. The operating system trust verification module includes:

[0147] Operating system restart unit, used to restart the operating system of the perception layer gateway;

[0148] The operating system image digest calculation unit is used to obtain the operating system image from the packaged system firmware, perform digest calculation on the operating system image, and obtain the digest of the operating system image to be booted.

[0149] The operating system image digest calculation unit is used to obtain the operating system image signature value from the packaged system firmware;

[0150] The operating system verification unit is used to verify the signature value and image digest of the operating system image to be booted.

[0151] The operating system startup and execution unit is used to allow the operating system to start when the digest of the operating system image to be started and the digest of the operating system image to be compared are consistent.

[0152] The operating system boot prohibition unit is used to prevent the operating system from booting when the digest of the operating system image to be booted and the digest of the operating system image to be compared are inconsistent, resulting in boot failure.

[0153] The business software trusted verification module is used after the operating system of the perception layer gateway starts. The business application secure startup module performs a second-level trusted verification on the business software. If the second-level trusted verification passes, the business software is allowed to start; if it fails, the startup of the business software is prohibited. The business software trusted verification module includes:

[0154] The business software package acquisition unit is used by the business application secure startup module to acquire the business software package, download the HMAC key and the business software public key after the operating system starts.

[0155] The business software digest calculation unit is used by the business application secure startup module to obtain the business software from the business software package and perform HMAC digest operation on the business software using the HMAC key to obtain the business software digest to be started.

[0156] The software package digest signature acquisition unit is used to obtain the business software signature value from the business software package.

[0157] The business software verification unit is used to verify the HMAC digest and signature value of the business software package.

[0158] The business software startup prohibition unit is used to prevent the business software from starting when the HMAC digest and signature value of the business software package fail to be verified.

[0159] The business software startup permission unit is used to allow the business software to start when the HMAC digest and signature value of the business software package are verified to be valid.

[0160] The management port access authentication module is used after the business software starts. The management port security protection module performs third-level trusted verification on the access identity of the management port through the business software. If the third-level trusted verification passes, the control port is allowed to access the perception layer gateway through the management port; if the third-level trusted verification fails, the control port is prohibited from accessing the perception layer gateway through the management port. The management port access authentication module includes:

[0161] The USB key insertion detection unit is used by the business software to detect whether a USB key has been inserted when the control port sends a connection request to the management port.

[0162] The management port access authentication unit is used to verify the access identity of the access unit in the business software through the USB key when a USB password key is inserted.

[0163] Management port connection prohibited; authentication failure for current management port access; control port connection to management port prohibited.

[0164] The control port driver loading unit is used to notify the operating system to load the control port driver when the access authentication is successful.

[0165] The management port connection unit is used for clients with access authentication to connect to the HTTP server of the management port, which acts as the gateway of the perception layer, through the control port.

[0166] The console login unit is used by clients to enable SSL and remote login services in the management interface, allowing them to log in via the console and perform file operations.

[0167] The digest algorithm and asymmetric algorithm used in this patent both support national cryptographic algorithms.

[0168] Although the present invention has been described in detail with reference to the accompanying drawings and preferred embodiments, the invention is not limited thereto. Various equivalent modifications or substitutions can be made to the embodiments of the invention by those skilled in the art without departing from the spirit and essence of the invention, and such modifications or substitutions should all be within the scope of the invention. Any variations or substitutions that can be easily conceived by those skilled in the art within the technical scope disclosed in the invention should also be covered within the protection scope of the invention. Therefore, the protection scope of the invention should be determined by the scope of the claims.

Claims

1. A method for securing the perception layer gateway of an Internet of Things system, characterized in that, The method comprises the following steps: S1. Setting an operating system security booting module in the perception layer gateway, and setting a business application security booting module and a management port security protection module after the operating system is started; S2. The operating system security booting module performs first-level trusted verification on the operating system of the perception layer gateway, and allows starting the operating system when the first-level trusted verification is passed, and prohibits starting the operating system when the first-level trusted verification is not passed; S3. After the operating system of the perception layer gateway is started, the business application security booting module performs second-level trusted verification on the business software, and allows starting the business software when the second-level trusted verification is passed, and prohibits starting the business software when the second-level trusted verification is not passed; S4. After the business software is started, the management port security protection module performs third-level trusted verification on the access identity of the management port by the business software, and allows the control port to access the perception layer gateway through the management port when the third-level trusted verification is passed, and prohibits the control port from accessing the perception layer gateway through the management port when the third-level trusted verification is not passed; The specific steps of step S1 are as follows: S11. Generating a pair of system public key and system private key for the operating system of the perception layer gateway, burning the system public key into the eFuse hardware inside the chip in the form of trusted root, signing the operating system image by using the system private key, and setting the system public key to verify the operating system image when the operating system is started, to generate the operating system security booting module; S12. Generating a pair of business software public key and business software private key for the business software, solidifying the business software public key in the operating system, calculating the digest of the business software package, and then storing the signed business software private key in the business software package to generate the business application security booting module; S13. Setting a USB port detection unit, an access identity verification unit and a control port connection unit for the management port in the business software to generate the management port security protection module.

2. The IoT system perception layer gateway security hardening method of claim 1, wherein, The specific steps of step S11 are as follows: S111. Starting the operating system of the perception layer gateway; S112. Generating a pair of system public key and system private key by using the operating system image signing tool; S113. Burning the system public key into the eFuse hardware inside the chip on chip of the perception layer gateway in the form of trusted root; S114. Signing the digest of the operating system image by using the system private key, and packaging the signed operating system digest and the operating system image into a system firmware according to a predetermined data format, and then burning the system firmware into the processor of the perception layer gateway; S115. Setting the trusted root connected with the eFuse hardware inside the perception layer gateway to verify the system firmware when the operating system of the perception layer gateway is started, to generate the operating system security booting module.

3. The IoT system perception layer gateway security hardening method of claim 2, wherein, In step S114, the digest of the operating system is calculated first, and then the calculated operating system digest is signed by using the system private key.

4. The IoT system perception layer gateway security hardening method of claim 1, wherein, The specific steps of step S12 are as follows: S121. Generating a pair of business software public key and business software private key by using the business software signing tool; S122. Performing HMAC digest operation on the business software package, and storing the HMAC key in the operating system; S123. Sign the business software package after the HMAC digest operation using the business software private key, and download the business software public key to the built-in storage space of the operating system; S124. Add the signed business software package HMAC digest to the business software package and package it to generate a business application security startup module.

5. The IoT system perception layer gateway security hardening method of claim 4, wherein, Step S2 includes the following specific steps: S21. Restart the operating system of the perception layer gateway; S22. Obtain the operating system image from the packaged system firmware, and perform a digest operation on the operating system image to obtain a to-be-started operating system image digest; S23. Obtain the operating system image signature value from the packaged system firmware; S24. Verify the signature of the to-be-started operating system image signature value and the image digest; If the verification fails, go to step S25; If the verification passes, allow the operating system to start, and go to step S3; S25. Inhibit the start of the operating system, and end the startup.

6. The IoT system perception layer gateway security hardening method of claim 4, wherein, Step S3 includes the following specific steps: S31. After the operating system starts, the business application security startup module obtains the business software package, downloads the HMAC key, and obtains the business software public key; S32. The business application security startup module obtains the business software from the business software package, and performs an HMAC digest operation on the business software using the HMAC key to obtain a to-be-started business software digest; S33. Obtain the business software signature value from the business software package; S34. Verify the signature of the business software package HMAC digest and the signature value; S35. If the verification fails, prohibit the business software from starting, and end the startup; If the verification passes, allow the business software to start, and go to step S4.

7. The IoT system perception layer gateway security hardening method of claim 1, wherein, Step S4 includes the following specific steps: S41. When the business software detects that the control port sends a connection request to the management port, the USB port detection unit detects whether a USB password key is inserted; If not, go to step S43; If yes, go to step S42; S42. The access identity verification unit in the business software verifies the access identity through the USB key; If the verification fails, go to step S43; If the verification passes, go to step S44; S43. The current management port access identity verification fails, the control port is prohibited from connecting to the management port, and the startup ends; S44. The control port connection unit of the business software notifies the operating system to load the control port driver; S45. The client that passes the access identity verification connects to the HTTP service end of the management port of the perception layer gateway through the control port; S46. The client opens the SSL service and the remote login service in the management interface to realize the console login and perform file operations.

8. An Internet of Things system perception layer gateway security hardening apparatus, characterized in that, The security setting module is configured to set the operating system security boot module in the perception layer gateway, and set the business application security startup module and the management port security protection module after the operating system starts; ​ The operating system trusted verification module is configured to perform first-level trusted verification on the operating system of the perception layer gateway by the operating system security booting module, and allow starting of the operating system when the first-level trusted verification is passed, and prohibit starting of the operating system when the first-level trusted verification is not passed; the business software trusted verification module is configured to perform second-level trusted verification on the business software by the business application security starting module after the operating system of the perception layer gateway is started, and allow starting of the business software when the second-level trusted verification is passed, and prohibit starting of the business software when the second-level trusted verification is not passed; The management port access identity authentication module is configured to perform third-level trusted verification on the access identity of the management port by the management port security protection module after the business software is started, and allow the control port to access the perception layer gateway through the management port when the third-level trusted verification is passed, and prohibit the control port from accessing the perception layer gateway through the management port when the third-level trusted verification is not passed; The security setting module comprises: The operating system security booting module generation unit is configured to generate a pair of system public key and system private key for the operating system of the perception layer gateway, burn the system public key into the eFuse hardware in a trusted root manner once, sign the operating system image by using the system private key, and set the operating system to use the system public key to verify the operating system image when the operating system is started, thereby generating the operating system security booting module; The business application security starting module generation unit is configured to generate a pair of business software public key and business software private key for the business software, solidify the business software public key in the operating system, calculate the digest of the business software package, and store the business software private key in the business software package after signing, thereby generating the business application security starting module; The management port security protection module generation unit is configured to set the USB port detection unit, the access identity authentication unit and the control port connection unit for the management port in the business software, thereby generating the management port security protection module.

9. The IoT system perception layer gateway security hardening apparatus of claim 8, wherein, The operating system trusted verification module comprises: The operating system restart unit is configured to restart the operating system of the perception layer gateway; The to-be-started operating system image digest calculation unit is configured to obtain the operating system image from the packaged system firmware, and perform digest operation on the operating system image to obtain the to-be-started operating system image digest; The to-be-compared operating system image digest calculation unit is configured to obtain the operating system image signature value from the packaged system firmware; The operating system verification unit is configured to verify the to-be-started operating system image signature value and the image digest; The operating system starting running unit is configured to allow starting of the operating system when the to-be-started operating system image digest and the to-be-compared operating system image digest are consistent; The operating system starting prohibition unit is configured to prohibit starting of the operating system when the to-be-started operating system image digest and the to-be-compared operating system image digest are inconsistent, and the starting fails; The business software trusted verification module The business software package obtaining unit is configured to obtain a business software package, download an HMAC key, and obtain a business software public key by the business application security starting module after the operating system is started. The software package digest signature obtaining unit is configured to obtain a business software signature value from the business software package. The business software verification unit is configured to verify the HMAC digest and the signature value of the business software package. The business software starting prohibition unit is configured to prohibit the starting of the business software when the verification of the HMAC digest and the signature value of the business software package fails. The business software starting permission unit is configured to permit the starting of the business software when the verification of the HMAC digest and the signature value of the business software package succeeds. The management port access identity authentication module includes: The USB key key insertion detection unit is configured to detect whether a USB password key is inserted by the business software when the control port sends a connection request to the management port. The management port access identity authentication unit is configured to authenticate the access identity by the USB key key when the USB password key is inserted. The management port connection prohibition unit is configured to prohibit the connection of the control port to the management port when the current management port access identity authentication fails. The control port driver loading unit is configured to notify the operating system to load the control port driver by the control port connection unit of the business software when the access identity authentication succeeds. The management port connection unit is configured to connect the client to the HTTP service of the management port of the perception layer gateway through the control port by the access identity authentication. The console login unit is configured to open the SSL service and the remote login service in the management interface by the client, implement the console login, and perform the file operation.

Images