A key distribution method, device, electronic equipment and storage medium

Abstract

The application provides a key distribution method and device, electronic equipment and a storage medium, and the key distribution method applied to a control center comprises the following steps: obtaining the serial number of a target Internet of Things device, wherein each Internet of Things device has a unique serial number; randomly generating a first communication key; encrypting the first communication key according to the serial number and sending the first key ciphertext obtained after encryption to the target Internet of Things device, so that the target Internet of Things device decrypts the first key ciphertext through the serial number to obtain the first communication key and encrypts the first to-be-transmitted data sent to the control center through the first communication key. According to the application, the first communication key is randomly generated through the serial number of each Internet of Things device, so that each Internet of Things device has a unique communication key, and in the process of data transmission, each Internet of Things device can encrypt the data through the communication key, thereby ensuring the security of the data.

Description

Technical Field

[0001] This application relates to the field of information security technology, and in particular to a key distribution method, apparatus, electronic device, and storage medium. Background Technology

[0002] In recent years, my country's satellite Internet of Things (IoT) has shown a vigorous development trend. With the continuous deepening of the integration and innovative applications of new technologies such as 5G, edge computing, and artificial intelligence with industries, the transformation and upgrading of traditional industries has been accelerated. However, as satellite IoT is a new concept and is currently in its developmental stage, the global IoT system has many security vulnerabilities, posing a significant challenge to satellite IoT security.

[0003] Currently, in order to address security issues arising during the information-based construction of satellite IoT, key negotiation is generally conducted via SMS channels.

[0004] However, the method of using SMS channels for key distribution requires several SMS interactions and the terminal must be equipped with a secure TF card or other devices, which increases operating costs. Summary of the Invention

[0005] This invention provides a key distribution method, apparatus, electronic device, and storage medium to solve or alleviate technical problems in the prior art.

[0006] The technical solution adopted in this invention is as follows:

[0007] In a first aspect, embodiments of this application provide a key distribution method applied to a control center, comprising: obtaining the serial number of a target IoT device, wherein each IoT device has a unique serial number; randomly generating a first communication key; encrypting the first communication key according to the serial number, and sending the encrypted first key ciphertext to the target IoT device, so that the target IoT device decrypts the first key ciphertext using the serial number to obtain the first communication key, and encrypts first data to be transmitted to the control center using the first communication key.

[0008] Optionally, in one embodiment, the key distribution method further includes: sending a key update instruction to the target IoT device, so that the target IoT device deletes the first communication key according to the key update instruction; randomly generating a second communication key; encrypting the second communication key according to the serial number, and sending the encrypted second key ciphertext to the target IoT device, so that the target IoT device decrypts the second key ciphertext using the serial number to obtain the second communication key, and encrypts the first data to be transmitted to the control center using the second communication key.

[0009] Optionally, in one embodiment, the key distribution method further includes: obtaining a root key generated during the initialization of the control center; generating a control center service key based on the root key and the control center serial number, wherein the control center service key is used to encrypt the second data to be transmitted; encrypting the second data to be transmitted using the control center service key to obtain a second ciphertext; encrypting the control center service key using the first communication key to obtain an encryption key; and sending the second ciphertext and the encryption key to the target IoT device, so that the target IoT device decrypts the encryption key using the first communication key to obtain the control center service key, and decrypts the second ciphertext using the control center service key to obtain the second data to be transmitted.

[0010] Optionally, in one embodiment, the root key and the control center business key are stored in a security chip, wherein the security chip refuses to export the root key and the control center business key in plaintext.

[0011] Optionally, in one embodiment, the key distribution method further includes: destroying the first communication key or the second communication key when the first communication key or the second communication key reaches a preset lifespan.

[0012] Secondly, embodiments of this application provide a key distribution method applied to an Internet of Things (IoT) device, comprising: receiving a first key ciphertext from a control center, wherein the first key ciphertext is obtained by the control center encrypting a randomly generated first communication key according to the serial number of the IoT device; and decrypting the first key ciphertext according to the serial number to obtain the first communication key, wherein the first communication key is used to encrypt first data to be transmitted sent to the control center, so that the control center decrypts the data sent by the IoT device according to the first communication key.

[0013] Thirdly, embodiments of this application provide a key distribution apparatus, which includes:

[0014] The module includes an acquisition module for acquiring the serial number of the target IoT device, wherein each IoT device has a unique serial number; a generation module for randomly generating a first communication key; and an encryption module for encrypting the first communication key according to the serial number and sending the encrypted first key ciphertext to the target IoT device, so that the target IoT device can decrypt the first key ciphertext using the serial number to obtain the first communication key, and encrypt the first data to be transmitted to the control center using the first communication key.

[0015] Fourthly, embodiments of this application provide an electronic device having a computer program stored thereon, which, when executed by a processor, implements the key distribution method as described in any one of the first aspects of the embodiments.

[0016] The processor, communication interface, memory, and communication bus communicate with each other via the communication bus. The memory stores at least one executable instruction, which causes the processor to perform the operation corresponding to the key distribution method as described in any of the first aspects of the embodiments.

[0017] Fifthly, embodiments of this application provide a computer storage medium having a computer program stored thereon, which, when executed by a processor, implements the key distribution method as described in any one of the first aspects of the embodiments.

[0018] As shown in the above scheme, by randomly generating a first communication key using the serial number of each IoT device, each IoT device possesses a unique communication key. During data transmission, each IoT device can encrypt data using its own communication key, ensuring data security. Furthermore, since the first communication key is randomly generated, it lacks any regularity, increasing the difficulty of decryption. Attached Figure Description

[0019] Figure 1 This is a flowchart of a key distribution method according to an embodiment of this application;

[0020] Figure 2 This is a flowchart of a key distribution method according to another embodiment of this application;

[0021] Figure 3 This is a schematic diagram of a key distribution apparatus according to an embodiment of this application;

[0022] Figure 4 This is a schematic diagram of a key distribution apparatus according to another embodiment of this application;

[0023] Figure 5 This is a schematic diagram of an electronic device according to an embodiment of this application. Detailed Implementation

[0024] To make the technical problems, technical solutions and advantages of the present invention clearer, a detailed description will be given below in conjunction with the accompanying drawings and specific embodiments.

[0025] Key distribution method

[0026] Figure 1 Here is a flowchart of a key distribution method according to an embodiment of this application, as follows: Figure 1As shown, this key distribution method is applied to a control center and includes the following steps:

[0027] Step 101: Obtain the serial number of the target IoT device.

[0028] During key distribution, the serial number of the target IoT device to which the key needs to be distributed is first obtained. Each IoT device has a unique serial number, and all serial numbers are stored in the control center's database. During key distribution, the serial number of the target IoT device can be directly retrieved from the control center's database based on the target IoT device's ID and other identification information.

[0029] Step 102: Randomly generate the first communication key.

[0030] After obtaining the serial number of the target IoT device, a first communication key is randomly generated. The key can be generated using a domestically produced cryptographic machine. The algorithm used by the domestic cryptographic machine is a national cryptographic algorithm, which may include SM1, SM2, SM3, SM4, SM7, SM9, and the Zu Chongzhi Cryptographic Algorithm (ZUC), among others.

[0031] Step 103: Encrypt the first communication key according to the serial number, and send the encrypted first key ciphertext to the target IoT device.

[0032] After generating the first communication key, the control center encrypts the first communication key using the previously obtained serial number of the target IoT device as a symmetric key, and then sends the encrypted first key ciphertext to the target IoT device. This transmission can be done via satellite. The target IoT device decrypts the first key ciphertext using its serial number to obtain the first communication key, and can then use this first communication key to encrypt the first data to be transmitted to the control center.

[0033] It should be noted that IoT devices are in standby mode after leaving the factory. At this time, the control center does not communicate with IoT devices in standby mode. IoT devices in standby mode are activated after being powered on. After activation, IoT devices will send activation information to the control center via satellite. After receiving the activation information, the control center will execute the key distribution process.

[0034] In this embodiment, a first communication key is randomly generated using the serial number of each IoT device. This allows each IoT device to possess a unique communication key, and during data transmission, each IoT device can encrypt data using its own communication key, ensuring data security. Furthermore, since the first communication key is randomly generated, it lacks regularity, increasing the difficulty of decryption.

[0035] In one possible implementation, a key update command can be sent to the target IoT device, causing the target IoT device to delete the first communication key according to the key update command. After the target IoT device deletes the first communication key, a second communication key is randomly generated, encrypted according to a serial number, and the encrypted second key ciphertext is sent to the target IoT device. The target IoT device then decrypts the second key ciphertext using the serial number to obtain the second communication key, and uses the second communication key to encrypt the first data to be transmitted to the control center.

[0036] After key distribution is complete, the distributed keys can be updated for communication security. First, a key update command is sent to the target IoT device. Upon receiving the command, the target IoT device deletes the previously decrypted first communication key. Then, the control center randomly generates a second communication key, which can be generated using a domestically produced cryptographic machine. After generating the second communication key, the control center encrypts it using the target IoT device's serial number as a symmetric key and sends the encrypted second key ciphertext to the target IoT device. The target IoT device decrypts the second key ciphertext using its serial number to obtain the second communication key, and can then use this second communication key to encrypt the first data to be transmitted to the control center.

[0037] It should be noted that key update instructions can be generated periodically or manually, and no restriction is made here.

[0038] In this embodiment, the key update command allows the IoT device to delete the key that needs updating, ensuring communication security. Furthermore, updating the communication key further reduces the possibility of security risks due to communication key leakage.

[0039] In one possible implementation, the root key generated during control center initialization can also be obtained. After obtaining the root key, a control center service key is generated based on the root key and the control center serial number. This control center service key is used to encrypt the second data to be transmitted.

[0040] After the control center is initialized, the cryptographic device within it generates a random number, which is then used as the root key. The control center's business key is then generated based on this root key. When transmitting non-key-related secondary data within the control center, encryption can be performed using the control center's business key to prevent plaintext transmission.

[0041] During data transmission, the second data to be transmitted is first encrypted using the control center's business key to obtain the second ciphertext. Simultaneously, the control center's business key is encrypted using the first communication key to obtain the encryption key. After obtaining the second ciphertext and the encryption key, they are sent to the target IoT device. The target IoT device then decrypts the encryption key using the first communication key to obtain the control center's business key, and finally decrypts the second ciphertext using the control center's business key to obtain the second data to be transmitted.

[0042] In this embodiment of the application, the generated control center business key can be used to encrypt the second data to be transmitted by the control center and transmit it in plaintext, thus ensuring the security of communication.

[0043] In one possible implementation, the root key and the control center business key are stored in a secure chip, which refuses to export the root key and the control center business key in plaintext.

[0044] After generating the root key and control center business key, to ensure security, these keys are stored in a secure chip. The secure chip prohibits any form of plaintext export of the root key and control center business key. Furthermore, the root key and control center business key are stored in a single backup configuration.

[0045] In this embodiment of the application, by securely storing the root key and the control center business key, the possibility of key leakage is further reduced and security is improved.

[0046] In one possible implementation, the first or second communication key is destroyed when it reaches a preset lifespan.

[0047] For example, the preset lifespan is 31 days. The first or second communication key is destroyed when 31 days have passed since its generation. Destruction can be achieved by overloading the chip storing the first or second communication key with an electrical current.

[0048] In this embodiment of the application, the security of key management can be improved by destroying the communication key at a preset lifecycle time.

[0049] Figure 2 This is a flowchart illustrating a key distribution method according to another embodiment of this application. Figure 2 As shown, this file storage method is applied to IoT devices and includes the following steps:

[0050] Step 201: Receive the first key ciphertext from the control center;

[0051] During the key distribution process, the IoT device first receives the first key ciphertext sent by the control center. The first key ciphertext is obtained by the control center encrypting the randomly generated first communication key according to the serial number of the IoT device.

[0052] Step 202: Decrypt the first key ciphertext according to the serial number to obtain the first communication key.

[0053] Upon receiving the first key ciphertext, the IoT device decrypts it using its stored serial number, obtaining the first communication key. This first communication key is used to encrypt the first data to be transmitted to the control center, enabling the control center to decrypt the data sent by the IoT device using the first communication key.

[0054] In this embodiment of the application, the method of decryption using the serial number stored by the IoT device itself can save costs. Moreover, the serial number of each IoT device is unique, which ensures the uniqueness of each first communication key. The data to be transmitted is encrypted using the first communication key, thereby improving the security of communication.

[0055] Key distribution device

[0056] Figure 3 This is a schematic diagram of a key distribution apparatus according to an embodiment of this application, as shown below. Figure 3 As shown, the key distribution device 300 is applied to a control center and includes: an acquisition module 301, a generation module 302, and an encryption module 303.

[0057] The acquisition module 301 is used to acquire the serial number of the target IoT device, wherein each IoT device has a unique serial number.

[0058] During the key distribution process, the acquisition module 301 first obtains the serial number of the target IoT device to which the key needs to be distributed. Each IoT device has a unique serial number, and all serial numbers are stored in the control center's database. During key distribution, the serial number of the target IoT device can be directly retrieved from the control center's database based on its identification information, such as its ID.

[0059] The generation module 302 is used to randomly generate the first communication key.

[0060] After the acquisition module 301 obtains the serial number of the target IoT device, the generation module 302 randomly generates the first communication key. The key can be generated using a domestically produced cryptographic machine. The algorithm used by the domestically produced cryptographic machine is a national cryptographic algorithm, which may include SM1, SM2, SM3, SM4, SM7, SM9, and the Zu Chongzhi Cryptographic Algorithm (ZUC), among others.

[0061] The encryption module 303 is used to encrypt the first communication key according to the serial number, and send the encrypted first key ciphertext to the target IoT device, so that the target IoT device can decrypt the first key ciphertext according to the serial number to obtain the first communication key, and encrypt the first data to be transmitted to the control center using the first communication key.

[0062] After the generation module 302 generates the first communication key, the encryption module 303 encrypts the first communication key using the previously obtained serial number of the target IoT device as a symmetric key, and sends the encrypted first key ciphertext to the target IoT device. The target IoT device decrypts the first key ciphertext using the serial number to obtain the first communication key, and can use the first communication key to encrypt the first data to be transmitted to the control center.

[0063] In this embodiment, the generation module 302 randomly generates a first communication key using the serial number of each IoT device. This allows each IoT device to possess a unique communication key, and during data transmission, each IoT device can encrypt data using its own communication key, ensuring data security. Furthermore, since the first communication key is randomly generated by the generation module 302, it lacks regularity, increasing the difficulty of decryption.

[0064] Figure 4 This is a schematic diagram of a key distribution apparatus according to another embodiment of this application, as shown below. Figure 4 As shown, the key distribution device 400 includes a receiving module 401 and a decryption module 402.

[0065] The receiving module 401 is used to receive the first key ciphertext from the control center, wherein the first key ciphertext is obtained by the control center encrypting a randomly generated first communication key according to the serial number of the Internet of Things device.

[0066] During the key distribution process, the IoT device first receives the first key ciphertext sent by the control center through the receiving module 401. The first key ciphertext is obtained by the control center encrypting the randomly generated first communication key according to the serial number of the IoT device.

[0067] The decryption module 402 is used to decrypt the first key ciphertext according to the serial number to obtain the first communication key. The first communication key is used to encrypt the first data to be transmitted sent to the control center, so that the control center can decrypt the data sent by the IoT device according to the first communication key.

[0068] After receiving the first key ciphertext, the IoT device decrypts it using the decryption module 402 based on its stored serial number, obtaining the first communication key. The first communication key is used to encrypt the first data to be transmitted to the control center, enabling the control center to decrypt the data sent by the IoT device based on the first communication key.

[0069] In this embodiment, the IoT device can save costs by decrypting the serial number stored in its own memory using the decryption module 402. Furthermore, each IoT device has a unique serial number, which ensures the uniqueness of each first communication key. The first communication key is used to encrypt the data to be transmitted, thereby improving the security of communication.

[0070] electronic devices

[0071] Figure 5 This is a schematic diagram of an electronic device according to one embodiment of this application. The specific embodiments of this application do not limit the specific implementation of the electronic device. Figure 5 As shown, the electronic device 500 may include: a processor 501, a communications interface 502, a memory 503, and a communications bus 504. Wherein:

[0072] The processor 501, communication interface 502, and memory 503 communicate with each other through the communication bus 504.

[0073] Communication interface 502 is used for communication with other electronic devices or servers.

[0074] The processor 501 is used to execute program 505, which can specifically execute the relevant steps in any of the aforementioned method embodiments.

[0075] Specifically, program 505 may include program code that includes computer operation instructions.

[0076] The processor 501 may be a CPU, an application-specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of this application. The smart device includes one or more processors, which may be processors of the same type, such as one or more CPUs; or processors of different types, such as one or more CPUs and one or more ASICs.

[0077] Memory 503 is used to store program 505. Memory 503 may include high-speed RAM memory, and may also include non-volatile memory, such as at least one disk storage device.

[0078] Specifically, program 505 can be used to cause processor 501 to execute any of the methods in the foregoing embodiments.

[0079] The specific implementation of each step in procedure 505 can be found in the corresponding steps and units described in the foregoing key distribution method embodiments, and will not be repeated here. Those skilled in the art will understand that, for the sake of convenience and brevity, the specific working processes of the devices and modules described above can be referred to the corresponding process descriptions in the foregoing method embodiments, and will not be repeated here.

[0080] The electronic device described in this application generates a first communication key randomly using the serial number of each IoT device. This allows each IoT device to possess a unique communication key, and during data transmission, each IoT device can encrypt data using its own communication key, ensuring data security. Furthermore, since the first communication key is randomly generated, it lacks regularity, increasing the difficulty of decryption.

[0081] Computer storage media

[0082] This application also provides a computer-readable storage medium storing instructions for causing a machine to perform any of the methods described in the plurality of method embodiments herein. Specifically, a system or apparatus equipped with a storage medium storing software program code that implements the functions of any of the embodiments described above, and enabling the computer (or CPU or MPU) of the system or apparatus to read and execute the program code stored in the storage medium.

[0083] In this case, the program code read from the storage medium can itself implement the function of any of the above embodiments, and therefore the program code and the storage medium storing the program code constitute part of this application.

[0084] Examples of storage media used to provide program code include floppy disks, hard disks, magneto-optical disks, optical disks (such as CD-ROM, CD-R, CD-RW, DVD-ROM, DVD-RAM, DVD-RW, DVD+RW), magnetic tapes, non-volatile memory cards, and ROMs. Alternatively, program code can be downloaded from a server computer via a communication network.

[0085] Computer program products

[0086] This application also provides a computer program product, including computer instructions that instruct a computing device to perform any corresponding operation in the above-described plurality of method embodiments.

[0087] It should be noted that, depending on the implementation needs, the various components / steps described in the embodiments of this application can be broken down into more components / steps, or two or more components / steps or parts of the operation of components / steps can be combined into new components / steps to achieve the purpose of the embodiments of this application.

[0088] The methods described in the embodiments of this application can be implemented in hardware, firmware, or as software or computer code that can be stored in a recording medium (such as a CD-ROM, RAM, floppy disk, hard disk, or magneto-optical disk), or as computer code downloaded over a network that is originally stored in a remote recording medium or a non-transitory machine-readable medium and will be stored in a local recording medium. Thus, the methods described herein can be processed by software stored on a recording medium using a general-purpose computer, a dedicated processor, or programmable or dedicated hardware (such as an ASIC or FPGA). It is understood that the computer, processor, microprocessor controller, or programmable hardware includes storage components (e.g., RAM, ROM, flash memory, etc.) capable of storing or receiving software or computer code that, when accessed and executed by the computer, processor, or hardware, implements the methods described herein. Furthermore, when a general-purpose computer accesses code used to implement the methods shown herein, the execution of the code transforms the general-purpose computer into a dedicated computer for executing the methods shown herein.

[0089] It should be noted that not all steps and modules in the above processes and system structure diagrams are necessary; some steps or modules can be omitted as needed. The execution order of each step is not fixed and can be adjusted as required. The system structure described in the above embodiments can be a physical structure or a logical structure. That is, some modules may be implemented by the same physical entity, or some modules may be implemented by multiple physical entities, or they may be jointly implemented by certain components in multiple independent devices.

[0090] In the above embodiments, the hardware modules can be implemented mechanically or electrically. For example, a hardware module may include permanent dedicated circuitry or logic (such as a dedicated processor, FPGA, or ASIC) to perform the corresponding operation. The hardware module may also include programmable logic or circuitry (such as a general-purpose processor or other programmable processor), which can be temporarily configured by software to perform the corresponding operation. The specific implementation method (mechanical, dedicated permanent circuitry, or temporarily configured circuitry) can be determined based on cost and time considerations.

[0091] The present application has been shown and described in detail above with reference to the accompanying drawings and preferred embodiments. However, the present application is not limited to these disclosed embodiments. Based on the above multiple embodiments, those skilled in the art will know that more embodiments of the present application can be obtained by combining the code review methods in the different embodiments above. These embodiments are also within the protection scope of the present application.

Claims

1. A key distribution method, applied in a control center, characterized in that, include: Obtain the serial number of the target IoT device, where each IoT device has a unique serial number; Randomly generate the first communication key; The first communication key is encrypted according to the serial number, and the encrypted first key ciphertext is sent to the target IoT device, so that the target IoT device can decrypt the first key ciphertext using the serial number to obtain the first communication key, and encrypt the first data to be transmitted to the control center using the first communication key; The method further includes: obtaining a root key generated during the initialization of the control center; generating a control center service key based on the root key and the control center serial number, wherein the control center service key is used to encrypt the second data to be transmitted; encrypting the second data to be transmitted using the control center service key to obtain a second ciphertext; encrypting the control center service key using the first communication key to obtain an encryption key; sending the second ciphertext and the encryption key to the target IoT device, so that the target IoT device decrypts the encryption key using the first communication key to obtain the control center service key, and decrypts the second ciphertext using the control center service key to obtain the second data to be transmitted; The root key and the control center business key are stored in a security chip, wherein the security chip refuses to export the root key and the control center business key in plaintext.

2. The method according to claim 1, characterized in that, The method further includes: A key update instruction is sent to the target IoT device so that the target IoT device deletes the first communication key according to the key update instruction; A second communication key is generated randomly; The second communication key is encrypted according to the serial number, and the encrypted second key ciphertext is sent to the target IoT device, so that the target IoT device can decrypt the second key ciphertext using the serial number to obtain the second communication key, and encrypt the first data to be transmitted to the control center using the second communication key.

3. The method according to claim 2, characterized in that, The method further includes: When the first communication key or the second communication key reaches a preset lifespan, the first communication key or the second communication key is destroyed.

4. A key distribution method applied to Internet of Things (IoT) devices, characterized in that, include: Receive a first key ciphertext from the control center, wherein the first key ciphertext is obtained by the control center encrypting a randomly generated first communication key according to the serial number of the Internet of Things device; According to the serial number, the first key ciphertext is decrypted to obtain the first communication key, wherein the first communication key is used to encrypt the first data to be transmitted sent to the control center, so that the control center can decrypt the data sent by the IoT device according to the first communication key; The method further includes: receiving a second ciphertext and an encryption key from the control center, wherein the encryption key is obtained by the control center encrypting a control center business key using a first communication key, and the second ciphertext is obtained by the control center encrypting second data to be transmitted using the control center business key; decrypting the encryption key according to the first communication key to obtain the control center business key; and decrypting the second ciphertext according to the control center business key to obtain the second data to be transmitted.

5. A key distribution device, applied in a control center, characterized in that, include: The acquisition module is used to acquire the serial number of the target IoT device, where each IoT device has a unique serial number; The generation module is used to randomly generate the first communication key; An encryption module is used to encrypt the first communication key according to the serial number, and send the encrypted first key ciphertext to the target IoT device, so that the target IoT device can decrypt the first key ciphertext using the serial number to obtain the first communication key, and encrypt the first data to be transmitted to the control center using the first communication key; The key distribution device is further configured to: acquire the root key generated during the initialization of the control center; generate a control center service key based on the root key and the control center serial number, wherein the control center service key is used to encrypt the second data to be transmitted; encrypt the second data to be transmitted using the control center service key to obtain a second ciphertext; encrypt the control center service key using the first communication key to obtain an encryption key; send the second ciphertext and the encryption key to the target IoT device, so that the target IoT device decrypts the encryption key using the first communication key to obtain the control center service key, and decrypts the second ciphertext using the control center service key to obtain the second data to be transmitted; the root key and the control center service key are stored in a security chip, wherein the security chip refuses to export the root key and the control center service key in plaintext.

6. A key distribution device for use in Internet of Things (IoT) devices, characterized in that, include: The receiving module is used to receive a first key ciphertext from the control center, wherein the first key ciphertext is obtained by the control center encrypting a randomly generated first communication key according to the serial number of the Internet of Things device; The decryption module is used to decrypt the first key ciphertext according to the serial number to obtain the first communication key, wherein the first communication key is used to encrypt the first data to be transmitted sent to the control center, so that the control center can decrypt the data sent by the IoT device according to the first communication key; The receiving module is also configured to receive a second ciphertext and an encryption key from the control center, wherein the encryption key is obtained by the control center encrypting the control center business key using the first communication key, and the second ciphertext is obtained by the control center encrypting the second data to be transmitted using the control center business key; The decryption module is further configured to decrypt the encryption key according to the first communication key to obtain the control center business key; and to decrypt the second ciphertext according to the control center business key to obtain the second data to be transmitted.

7. An electronic device, comprising: The processor, communication interface, memory, and communication bus communicate with each other through the communication bus. The memory is used to store at least one executable instruction that causes the processor to perform the operation corresponding to the key distribution method as described in any one of claims 1-3.

8. A computer storage medium having a computer program stored thereon, which, when executed by a processor, implements the key distribution method as described in any one of claims 1-3.

Images