Internet of Things security data processing method, device and system based on real-time dynamic transmission

Abstract

The present invention discloses a method, device and system for processing secure data of the Internet of Things based on real-time dynamic transmission, the method comprising reading a message configuration file configured in a sender device, randomly selecting one of multiple information items in the message configuration file as data to be sent, obtaining a frame type of the data to be sent, framing the data to be sent, sending the framed data to be sent to a receiver device, the receiver device receiving the framed data to be sent sent by the sender device and using it as data to be parsed, reading a message configuration file configured in the receiver device, parsing the data to be parsed to obtain parsed data, and processing the parsed data in response to determining that the parsed data matches one of the multiple information items. The present invention can be applied to Internet of Things devices with limited hardware resources, effectively solving the privacy and security issues of wireless Internet of Things data transmission.

Description

Technical Field

[0001] The present invention belongs to the technical field of communication technology, and specifically relates to a method, device and system for processing secure data of the Internet of Things based on real-time dynamic transmission. Background Art

[0002] The Internet of Things is a local area network that connects devices through the Internet. Regardless of whether the local area network is connected to the Internet, as long as it has the four links of sensing, connection, knowledge, and control, it belongs to the scope of the Internet of Things. Devices are connected and communicated through the Internet of Things to achieve the identification, positioning, management, and monitoring of smart devices.

[0003] The scale of the IoT market is growing rapidly, and the number of connected devices continues to increase. IoT technology is accelerating its penetration into various industries, and smart offices, smart industries, smart cities, smart homes, smart energy and other fields are most likely to become the fastest growing areas in terms of the number of IoT connections.

[0004] With the rapid development of the Internet of Things, the information security of the Internet of Things should be given more attention. The security of the Internet of Things not only involves personal privacy issues, but also property security issues. Once information leakage occurs, various important information will be obtained by criminals. Therefore, it is urgent to improve the information security of the Internet of Things through technical means.

[0005] Transmission security is a very important aspect of IoT security. In particular, the wireless channels used by wireless IoT are open channels, which makes it easier for data to be eavesdropped and destroyed during wireless signal transmission. When IoT is in a working environment of wireless networks and sensor networks, attackers can intrude malicious programs through several entrances.

[0006] To ensure the privacy and security of IoT data transmission, you can choose an IoT communication gateway equipped with communication encryption algorithms and hardware encryption chips, with dual hardware and software protection to ensure that important IoT data is fully controlled and not leaked.

[0007] However, in IoT devices such as wireless sensors, some end-node devices have limited hardware resources. Due to price, size and power consumption restrictions, their computing power, program space and memory space are extremely limited. For example, the method of configuring strong encryption and secure data transmission media on IoT protocols such as Bluetooth, Zigbee, Wi-Fi, and 6LoWPAN cannot be fully applied to the vast number of low-cost end-IoT devices. Summary of the invention

[0008] In view of the shortcomings of the prior art, the present invention provides a method, device and system for processing secure data of the Internet of Things based on real-time dynamic transmission, which can be applied to Internet of Things devices with limited hardware resources to effectively solve the privacy and security issues of wireless Internet of Things data transmission.

[0009] In order to solve the above technical problems and achieve the above technical effects, the present invention is implemented through the following technical solutions:

[0010] The present invention discloses a method for processing secure data of the Internet of Things based on real-time dynamic transmission, comprising:

[0011] S001. Read the message configuration file configured in the sender device;

[0012] S002, randomly selecting one of the multiple information items in the message configuration file as the data to be sent, and obtaining the frame type of the data to be sent;

[0013] S003, framing the data to be sent based at least on a frame type of the data to be sent;

[0014] S004, sending the framed data to be sent to a receiving device;

[0015] S005. The receiving device receives the framed data to be sent from the sending device and uses it as data to be parsed;

[0016] S006. Read the message configuration file configured on the receiving device;

[0017] S007, parsing the data to be parsed to obtain parsed data;

[0018] S008. In response to determining that the parsed data matches one of the multiple information entries, process the parsed data.

[0019] Furthermore, in steps S001 and S006, each device maintains a corresponding copy of the defined message configuration file, the message configuration file includes a plurality of information items, and each of the information items stores a corresponding application layer message protocol format among a plurality of application layer message protocol formats.

[0020] Furthermore, there are four types of application layer message protocol formats.

[0021] Further, in step S002, randomly selecting one of the multiple information items in the message configuration file includes:

[0022] A random number generator function is called to obtain one of the multiple information entries in the message configuration file.

[0023] Further, in step S003, framing the data to be sent based at least on the frame type of the data to be sent includes:

[0024] The bit-by-bit and byte-by-byte message organization algorithm is called according to the randomly selected information item, and the bit-by-bit and byte-by-byte message organization algorithm is used to perform data processing on the data to be sent.

[0025] Furthermore, in step S004, the framed data to be sent is sent to a receiving device, including:

[0026] The framed data to be sent is sent to the receiving device based on the UDP protocol.

[0027] Furthermore, in step S007, the data to be parsed is parsed to obtain parsed data, including:

[0028] The bit-by-bit and byte-by-byte message parsing algorithms are called according to the received data to be parsed, and the bit-by-bit and byte-by-byte message parsing algorithms are used to perform data processing on the data to be parsed.

[0029] Further, in step S008, in response to determining that the parsed data matches one of the multiple information entries, processing the parsed data includes:

[0030] According to the message configuration file of the receiving device, find out whether the current data to be parsed conforms to a certain information item in the message configuration file of the receiving device. If it conforms, further process the parsed data. If it does not conform, the parsed data is illegal and will not be further processed, and the data packet will be discarded. In this way, the Internet of Things transmission security problem of illegal access to data is avoided.

[0031] Furthermore, the IoT security data processing method based on real-time dynamic transmission also includes:

[0032] The devices are uniformly configured with message configuration files when they leave the factory, and then the message configuration files are updated regularly or irregularly to further enhance the communication security of the devices.

[0033] The present invention also discloses an IoT security data processing device based on real-time dynamic transmission, comprising:

[0034] A sending message configuration file reading module, an information item acquisition module, a framing module, a data sending module, a data receiving module, a receiving message configuration file reading module, a parsing module and a data processing module; wherein,

[0035] The sending message configuration file reading module is responsible for reading the message configuration file configured in the device, the message configuration file includes a plurality of information items, each of the information items stores a corresponding application layer message protocol format among a plurality of application layer message protocol formats;

[0036] The information item acquisition module is responsible for randomly selecting one of the multiple information items in the message configuration file as the data to be sent, and determining the frame type of the data to be sent;

[0037] The framing module is responsible for calling the bit-by-bit and byte-by-byte message organization algorithm to frame the data to be sent at least based on the frame type;

[0038] The data sending module is responsible for sending the framed data to be sent to the data receiving module of the receiving device;

[0039] The data receiving module is responsible for receiving the framed data to be sent from the data sending module of the sending device and using it as the data to be parsed;

[0040] The receiving message configuration file reading module is responsible for reading the message configuration file configured in the device, the message configuration file includes a plurality of information items, each of the information items stores a corresponding application layer message protocol format among a plurality of application layer message protocol formats;

[0041] The parsing module is responsible for calling the bit-by-bit and byte-by-byte message parsing algorithms to parse the data to be parsed and obtain parsed data;

[0042] The data processing module is responsible for processing the parsed data in response to determining that the parsed data matches one of the multiple information entries.

[0043] The present invention also discloses an Internet of Things security data processing system based on real-time dynamic transmission, comprising:

[0044] A network, and a server and a plurality of IoT devices connected to the network; wherein,

[0045] The IoT device stores at least one executable instruction, and the executable instruction enables the IoT device to perform operations corresponding to the IoT security data processing method based on real-time dynamic transmission; and

[0046] The Internet of Things device at least includes the above-mentioned Internet of Things security data processing device based on real-time dynamic transmission.

[0047] The beneficial effects of the present invention are:

[0048] The advantage of the present invention is that the frame format selected for current transmission before device communication is random, and the frame format of transmission is diverse. In this way, the difficulty of communication data being intercepted and then cracked is increased, while the cost of device hardware design is not increased. It is suitable for solving the transmission security problem of low-cost terminal wireless Internet of Things devices.

[0049] The above description is only an overview of the technical solution of the present invention. In order to more clearly understand the technical means of the invention and implement it according to the contents of the specification, the following is a detailed description of the preferred embodiments of the present invention in conjunction with the accompanying drawings. The specific implementation of the present invention is given in detail by the following embodiments and their accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0050] The drawings described herein are used to provide a further understanding of the present invention and constitute a part of this application. The exemplary embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute an improper limitation of the present invention. In the drawings:

[0051] Figure 1 This is a schematic diagram of the environment of an Internet of Things security data processing system based on real-time dynamic transmission provided in an embodiment of the present invention.

[0052] Figure 2 The present invention provides a schematic diagram of the steps of a method for processing secure data of the Internet of Things based on real-time dynamic transmission according to an embodiment of the present invention.

[0053] Figure 3 The present invention provides an overall method flow diagram of a method for processing secure data of the Internet of Things based on real-time dynamic transmission according to an embodiment of the present invention.

[0054] Figure 4 A schematic diagram of a frame format provided in an embodiment of the present invention.

[0055] Figure 5 This is a schematic diagram of another frame format provided in an embodiment of the present invention.

[0056] Figure 6 This is a schematic diagram of another frame format provided in an embodiment of the present invention.

[0057] Figure 7 This is a schematic diagram of another frame format provided in an embodiment of the present invention.

[0058] Figure 8 This is a flow chart of a random function generator provided in an embodiment of the present invention.

[0059] Fig. 9 This is a schematic diagram of the structure of an IoT security data processing device based on real-time dynamic transmission according to an embodiment of the present invention.

[0060] Fig.10 A simplified block diagram of an example device is provided for an embodiment of the present invention. DETAILED DESCRIPTION

[0061] The preferred embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings so that the purpose, features and advantages of the invention can be more clearly understood. It should be understood that the embodiments shown in the accompanying drawings are not intended to limit the scope of the present invention, but are only intended to illustrate the essential spirit of the technical solution of the present invention.

[0062] In the following description, certain specific details are set forth for the purpose of illustrating various disclosed embodiments to provide a thorough understanding of the various disclosed embodiments. However, those skilled in the relevant art will recognize that the embodiments may be practiced without one or more of these specific details. In other cases, well-known devices, structures, and techniques associated with the present application may not be shown or described in detail to avoid unnecessarily obscuring the description of the embodiments.

[0063] Unless the context requires otherwise, throughout the specification and claims, the word "comprise" and variations such as "include" and "have" should be construed in an open, inclusive sense, ie, should be interpreted as "including, but not limited to."

[0064] References throughout the specification to "one embodiment" or "an embodiment" indicate that a particular feature, structure, or characteristic described in connection with the embodiment is included in at least one embodiment. Thus, the appearances of "in one embodiment" or "in an embodiment" in various places throughout the specification are not necessarily all referring to the same embodiment. Furthermore, the particular features, structures, or characteristics may be combined in any manner in one or more embodiments.

[0065] As used in this specification and the appended claims, the singular forms "a," "an," and "the" include plural referents unless the context clearly dictates otherwise. It should be noted that the term "or" is generally employed in its sense including "and / or" unless the context clearly dictates otherwise.

[0066] In addition, the technical features involved in the different embodiments of the present invention described below can be combined with each other as long as they do not conflict with each other.

[0067] As mentioned before, transmission security is a very important aspect of IoT security. In particular, the wireless channels used by wireless IoT are open channels, which makes it easier for data to be eavesdropped and destroyed during wireless signal transmission. When IoT is in a working environment of wireless networks and sensor networks, attackers can intrude malicious programs through several entrances.

[0068] To ensure the privacy and security of IoT data transmission, you can choose an IoT communication gateway equipped with communication encryption algorithms and hardware encryption chips, with dual hardware and software protection to ensure that important IoT data is fully controlled and not leaked.

[0069] However, in IoT devices such as wireless sensors, some end-node devices have limited hardware resources. Due to price, size and power consumption restrictions, their computing power, program space and memory space are extremely limited. For example, the method of configuring strong encryption and secure data transmission media on IoT protocols such as Bluetooth, Zigbee, Wi-Fi, and 6LoWPAN cannot be fully applied to the vast number of low-cost end-IoT devices.

[0070] The present invention proposes a method for processing secure data of the Internet of Things based on real-time dynamic transmission, which is reflected in the randomness of the frame format selected for current transmission before device communication, and the diversity of the frame format of transmission. In this way, the difficulty of communication data being intercepted and then cracked is increased, while the hardware design cost of the device is not increased, and it is suitable for solving the transmission security problem of low-cost terminal wireless Internet of Things devices. The various embodiments of the present invention fully consider the practical application characteristics of the wireless Internet of Things communication system, and can be applied to Internet of Things devices with limited hardware resources, effectively solving the privacy and security issues of wireless Internet of Things data transmission.

[0071] The following will be combined Figures 1 to 10 Various exemplary embodiments according to the present invention are described in detail.

[0072] Figure 1 The present invention discloses an exemplary embodiment of an Internet of Things security data processing system based on real-time dynamic transmission. Figure 1As shown, the environment of the system includes a server 110, a network 107 connected to the server 110 for communication, and a first IoT device 101, a second IoT device 103, and a third IoT device 105 connected to the server 110 for communication via the network 107. The server 110 can be an independent physical entity, or it can exist alone as a non-independent physical entity. The server 110 can also be a soft switch device or a gatekeeper device, etc., as long as it can provide wireless communication services for the first IoT device 101, the second IoT device 103, and the third IoT device 105, the present invention does not limit this. The network 107 can be implemented by a network device such as a router, or it can be established by any other suitable method in a local area network, the present invention does not limit this.

[0073] In some embodiments, the first IoT device 101, the second IoT device 103 and the third IoT device 105 are merely exemplary, and the network 107 can also be communicatively connected to more IoT devices, such as 5, 8 or 10 IoT devices, etc.; and the first IoT device 101, the second IoT device 103 and the third IoT device 105 may include smart phone terminals, humidity sensors, temperature sensors, power monitors, dedicated terminals, audio sensors, forestry monitors, vehicle-mounted sensors, power system sensors, industry-specific equipment, infrared sensors, traffic monitors and mobile sensors, blood pressure monitors, car navigation and electric meters or any other suitable physical network devices, which are not limited in this application.

[0074] In some embodiments, the first IoT device 101, the second IoT device 103, and the third IoT device 105 can communicate with the network 107. In other embodiments, the first IoT device 101, the second IoT device 103, the third IoT device 105, and any IoT device in more IoT devices can also communicate with each other. Accordingly, each device of the first IoT device 101, the second IoT device 103, the third IoT device 105, and the server 110 in the system environment has its own sending unit and receiving unit, so as to complete the sending and receiving of data respectively.

[0075] In some embodiments, the network 107 preferably adopts a wireless network. Therefore, in the process of communication between the first IoT device 101, the second IoT device 103, the third IoT device 105, the network 107, and the server 110, it is necessary to ensure the security of information transmission to avoid data or personal privacy leakage caused by data destruction or eavesdropping.

[0076] Figure 2The following is an example step diagram of a method for processing IoT security data based on real-time dynamic transmission according to an exemplary embodiment of the present invention. The method can be implemented, for example, in Figure 1 Any of the first IoT device 101, the second IoT device 103, and the third IoT device 105 shown in the figure is implemented in communication with the network 107 or the server 110, and see Figure 2 As shown, the method includes the operations of steps S001 to S008. For example, when the first IoT device 101 communicates information with the server 110 via the network 107, the method can be used to ensure that data is not eavesdropped or destroyed during the wireless signal transmission process; for another example, when the first IoT device 101 (for example, as a transmitter) and the second IoT device 103 (for example, as a receiver) communicate via the network 107 or other methods, the method can be used to ensure the security of wireless transmission information.

[0077] See also Figure 2 As shown, an embodiment of the present invention discloses a method for processing IoT security data based on real-time dynamic transmission, comprising:

[0078] S001) reading a message configuration file configured in a sending device, the message configuration file comprising a plurality of information items, each of the information items storing a corresponding application layer message protocol format among a plurality of application layer message protocol formats;

[0079] S002) randomly selecting one of the plurality of information entries in the message configuration file as data to be sent, and obtaining a frame type of the data to be sent;

[0080] S003) framing the data to be sent based at least on a frame type of the data to be sent;

[0081] S004) calling a transmitter to send the framed data to be sent to a receiving device;

[0082] S005) calling a receiver, the receiving device receiving the framed data to be sent sent by the sending device and using it as data to be parsed;

[0083] S006) reading a message configuration file configured in the receiving device, the message configuration file comprising a plurality of information items, each of the information items storing a corresponding application layer message protocol format among a plurality of application layer message protocol formats;

[0084] S007) parsing the data to be parsed to obtain parsed data;

[0085] S008) In response to determining that the parsed data matches one of the plurality of information entries, processing the parsed data.

[0086] It should be understood that the first IoT device 101, the second IoT device 103 and the third IoT device 105 can act as senders to send information to the server 110 via the network 107, and can also act as receivers to receive information sent by the server 110 via the network 107; and any one of the first IoT device 101, the second IoT device 103 and the third IoT device 105 can act as a sender to send information to other IoT devices via the network 107, and can also act as a receiver to receive information sent by other IoT devices via the network 107.

[0087] The following will combine Figure 3 To introduce Figure 2 An exemplary embodiment of a method is shown. Figure 3 The present invention discloses an overall method flow diagram of an IoT security data processing method based on real-time dynamic transmission according to an exemplary embodiment of the present invention. The method includes encryption and parsing of data by a sending device and a receiving device, respectively.

[0088] exist Figure 3 In the illustrated embodiment, before the Internet of Things communicates, a variety of application layer message protocol formats may be first defined. In one embodiment, the transport layer uses the UDP protocol, that is, the UDP data portion carries a variety of application layer messages. There are, for example, 4 types of application layer message protocol formats, and there are also 4 types of corresponding frame formats. In other embodiments, the application layer message protocol format depends on the requirements for the security level, and may be 5, 6 or more, which is not limited by the present disclosure. It should be understood that the more message protocol formats there are, the more difficult it is for the data to be eavesdropped, and the better the corresponding security transmission performance.

[0089] In one embodiment, Figures 4 to 7 The following is a schematic diagram showing four frame formats transmitted using the UDP protocol. Figure 4 A schematic diagram of a frame format of an exemplary embodiment disclosed in the present invention is shown in FIG. Figure 5 is a schematic diagram of another frame format of an exemplary embodiment disclosed in the present invention, Figure 6 is a schematic diagram of another frame format of an exemplary embodiment disclosed in the present invention, Figure 7 The figure is a schematic diagram of yet another frame format according to an exemplary embodiment of the present invention.

[0090] In one embodiment, see Figure 4As shown, the frame start code of the frame format may be 68H, the address field code may be A0 to A5, the control code may be C, the data field length code may be L, the data field code may be DATA, the check code may be CS, and the end code may be 16H. Such an exemplary frame format may be transmitted as one of the four frame formats.

[0091] In one embodiment, see Figure 5 As shown, the fixed message header may include a start character and a length L field, and the control field C may be Figure 4 The same as the embodiment in FIG. 1 , the user data area is used to carry user data. Figure 5 The fixed header in is different from Figure 4 The message header in the 4 frame formats can therefore be transmitted as another one of the 4 frame formats.

[0092] In one embodiment, see Figure 6 As shown, a byte-based data frame can be used. The message port number can be, for example, 1 byte, the message ID can be, for example, 2 bytes, the message control word can be, for example, 1 byte, and the bytes of the specific service message of the application layer are not limited and can be set according to the specific situation of the service message. This byte-based frame type is different from Figure 4 and Figure 5 The frame format can be used as a byte-based organized message format for information transmission.

[0093] In one embodiment, see Figure 7 As shown, Figure 7 The frame format is also based on byte configuration, but its configuration method is the same as Figure 6 The example frames shown are not in the same format. Figure 7 In the illustrated embodiment, the number of bytes in the frame control field FCD may be 1, the number of bytes in the frame sequence number field may be 1, and the service extension field OED may be correspondingly lengthened by L and may include the length of the extension field data area, the manufacturer identifier, and the extension field data area. The frame control field FCD, the frame sequence number field, and the service extension field OED together constitute the APS header. The number of bytes in the data unit identifier DUI may also be set to 1, and the data unit DU becomes L, and the data unit DU and the data unit identifier DUI together constitute the APS payload. Figure 7 The example frame format can be used as one of the four alternative frame formats.

[0094] exist Figures 4 to 7 In the embodiment, the application layer message protocol format adopts 4 bit-by-bit and byte-by-byte message protocol format methods. Compared with the traditional single message protocol format method, the transmission confidentiality is better and the possibility of data being eavesdropped is lower.

[0095] Continue to see Figure 2As shown, in one embodiment, after defining multiple application layer message protocols, a message configuration file can be defined. Any device in the Internet of Things device can maintain a message configuration file, and the message configuration file can be used to add and delete a database file of a specific application layer message protocol format. In one embodiment, the format structure of the message configuration file can be fixed, and each information entry stores an application layer message protocol format. The message configuration file can store multiple information entries, for example, up to 100 information entries.

[0096] In one embodiment, continue to see Figure 3 As shown, a protocol algorithm for organizing messages bit by bit and byte by byte can be subsequently constructed according to the entry information in the message configuration file, and a protocol algorithm for parsing messages bit by bit and byte by byte can be constructed according to the entry information in the message configuration file.

[0097] exist Figure 3 In the illustrated embodiment, when sending a data frame, the device first reads the configuration file, and restores the configuration file if the reading fails. After successfully reading the configuration file, it can select a specific entry information in the configuration file according to the random number generator function, obtain the currently sent frame type, and call the constructed bit-by-bit and byte-by-byte message organization algorithm to process the data and form the frame based on this entry information, and then use the UDP protocol and call the transmitter to send the data packet.

[0098] Figure 8 The following is a flow chart of a random function generator according to an exemplary embodiment of the present invention. The random number generator function may be, for example:

[0099] #include<stdlib.h>

[0100] #include<time.h>

[0101] #include<stdbool.h>

[0102] int get_frame_type(int total_types)

[0103] {

[0104] srand((int)time(0));

[0105] if (total_types <= 0)

[0106] return false;

[0107] else

[0108] return rand()%total_types;

[0109] }

[0110] See also Figure 8 As shown, firstly, the random seed srand((int)time(0) of the initial random number generator is configured, and then based on the random seed, whether the current number of frame types is legal is determined. If it is illegal, false is returned to stop the execution, and if it is legal, a random number is returned. In such an embodiment, the randomness of data transmission is further improved by setting a random number generator to randomly determine the number of frame types, and combined with the diversity of frame formats, the difficulty of intercepting and cracking the communication data is significantly increased without increasing the hardware design cost.

[0111] It should be noted that the above-mentioned random number generator function and process are merely exemplary, and any suitable random number generator function may be used to achieve the corresponding random number generation purpose, and any suitable process may be used to determine whether the current number of frame types is legal, and the present invention does not impose any limitation on this.

[0112] Continue to see Figure 3 As shown, in one embodiment, on the receiving device side, the device receiver receives the UDP protocol data packet, calls the constructed bit-by-bit and byte-by-byte parsing algorithm for data processing, and searches the device configuration file to see if the currently received data packet meets a certain information item. If it meets, the data is further processed, otherwise the data is illegal and is not processed, thereby avoiding the Internet of Things transmission security problem of illegal access to data in this way. Specifically, the receiver can scan the data and read the configuration file. If the reading fails, the configuration file is restored. If the reading is successful, the parsing algorithm can be called for parsing. If the parsing fails, the data packet can be discarded to terminate the processing. If it succeeds, the application layer can be notified to process the data, thereby completing the safe reception and processing of the transmitted information and data.

[0113] In one embodiment, the message configuration files may be uniformly configured for the devices before leaving the factory, and the devices may then periodically or irregularly upgrade and update the message configuration files to further enhance the communication security of the devices.

[0114] It should be noted that Figure 3 The embodiments described are merely exemplary and do not constitute a limitation to the present invention.

[0115] Fig. 9 This is a schematic diagram of the structure of an IoT security data processing device based on real-time dynamic transmission according to an exemplary embodiment of the present invention. Fig. 9 As shown, the IoT security data processing device based on real-time dynamic transmission disclosed in an embodiment of the present invention includes:

[0116] A sending message configuration file reading module 1001, an information item acquisition module 1002, a framing module 1003, a data sending module 1004, a data receiving module 1005, a receiving message configuration file reading module 1006, a parsing module 1007 and a data processing module 1008; wherein,

[0117] The sending message configuration file reading module 1001 is responsible for reading the message configuration file configured in the device, the message configuration file includes multiple information items, each of which stores a corresponding application layer message protocol format among multiple application layer message protocol formats;

[0118] The information item acquisition module 1002 is responsible for randomly selecting one of the multiple information items in the message configuration file as the data to be sent, and determining the frame type of the data to be sent;

[0119] The framing module 1003 is responsible for calling the bit-by-bit and byte-by-byte message organization algorithm to frame the data to be sent at least based on the frame type;

[0120] The data sending module 1004 is responsible for sending the framed data to be sent to the data receiving module of the receiving device;

[0121] The data receiving module 1005 is responsible for receiving the framed data to be sent from the data sending module 1004 of the sending device and using it as data to be parsed;

[0122] The receiving message configuration file reading module 1006 is responsible for reading the message configuration file configured in the device, the message configuration file includes multiple information items, each of which stores a corresponding application layer message protocol format among multiple application layer message protocol formats;

[0123] The parsing module 1007 is responsible for calling the bit-by-bit and byte-by-byte message parsing algorithms to parse the data to be parsed and obtain parsed data;

[0124] The data processing module 1008 is responsible for processing the parsed data in response to determining that the parsed data matches one of the information entries.

[0125] See also Figure 1As shown, in one embodiment, in the environment of the Internet of Things security data processing system based on real-time dynamic transmission of the present invention, at least one executable instruction is stored in all the Internet of Things devices, and the executable instruction enables the Internet of Things devices to perform operations corresponding to the above-mentioned Internet of Things security data processing method based on real-time dynamic transmission; and the Internet of Things devices at least include the above-mentioned Internet of Things security data processing device based on real-time dynamic transmission.

[0126] Fig.10 1 is a simplified block diagram of an exemplary device of the present invention. The device can be used to implement the following example. Figure 1 Each IoT device or server device or system shown. Fig.10 As shown, the device includes one or more processors 1210 , one or more memories 1220 coupled to the processors 1210 , and a communication module 1240 coupled to the processors 1210 .

[0127] The communication module 1240 may be used for two-way communication. The communication module 1240 may have at least one communication interface for communication. The communication interface may include any interface necessary for communication with other devices.

[0128] Processor 1210 may be any type suitable for the local technical network, and may include, but is not limited to, at least one of the following: a general purpose computer, a special purpose computer, a microcontroller, a digital signal processor (DSP), or one or more of a controller-based multi-core controller architecture. The device may have multiple processors, such as application specific integrated circuit chips, which are time-slave to a clock synchronized with a main processor.

[0129] The memory 1220 may include one or more non-volatile memories and one or more volatile memories. Examples of non-volatile memories include, but are not limited to, at least one of the following: Read-Only Memory (ROM) 1224, Erasable Programmable Read Only Memory (EPROM), flash memory, hard disk, compact disc (CD), digital video disc (DVD), or other magnetic storage and / or optical storage. Examples of volatile memories include, but are not limited to, at least one of the following: Random Access Memory (RAM) 1222, or other volatile memories that do not persist during the duration of a power outage.

[0130] The computer program 1230 includes computer executable instructions that are executed by the associated processor 1210. The computer program 1230 may be stored in the ROM 1220. The processor 1210 may perform any suitable actions and processes by loading the computer program 1230 into the RAM 1220.

[0131] The embodiments of the present invention can be implemented with the aid of the computer program 1230 so that the device can execute the following operations: Figure 2 Any operation in the method for processing secure data of the Internet of Things based on real-time dynamic transmission discussed in the embodiment of the present invention can also be implemented by hardware or by a combination of software and hardware.

[0132] In some embodiments, the computer program 1230 may be tangibly embodied in a computer-readable medium, which may be included in the device 1200 (such as in the memory 1220) or other storage device accessible by the device 1200. The computer program 1230 may be loaded from the computer-readable medium to the RAM 1222 for execution. The computer-readable medium may include any type of tangible non-volatile memory, such as ROM, EPROM, flash memory, hard disk, CD, DVD, etc.

[0133] In general, various embodiments of the present invention may be implemented in hardware or dedicated circuits, software, logic, or any combination thereof. Some aspects may be implemented in hardware, while other aspects may be implemented in firmware or software, which may be performed by a controller, microprocessor, or other computing device. Although various aspects of embodiments of the present invention are shown and described as block diagrams, flow charts, or using some other graphical representation, it should be understood that the blocks, devices, systems, techniques, or methods described herein may be implemented as, by way of non-limiting example, hardware, software, firmware, dedicated circuits or logic, general purpose hardware or a controller or other computing device, or some combination thereof.

[0134] The present invention also provides at least one computer program product tangibly stored on a non-transitory computer readable storage medium. The computer program product includes computer executable instructions, such as instructions included in program modules, which are executed in a device on a real or virtual processor of a target to perform the above-referenced Figure 2 or Figure 3 Typically, a program module includes routines, programs, libraries, objects, classes, components, data structures, etc. that perform specific tasks or implement specific abstract data types. In various embodiments, the functions of program modules can be combined or divided between program modules as needed. Machine executable instructions for program modules can be executed in local or distributed devices. In distributed devices, program modules can be located in local and remote storage media.

[0135] The computer program code for implementing the method of the present invention can be written in one or more programming languages. These computer program codes can be provided to the processor of a general-purpose computer, a special-purpose computer or other programmable data processing device, so that the program code, when executed by the computer or other programmable data processing device, causes the function / operation specified in the flow chart and / or block diagram to be implemented. The program code can be executed completely on a computer, partially on a computer, as an independent software package, partially on a computer and partially on a remote computer or completely on a remote computer or server.

[0136] In the context of the present invention, computer program codes or related data may be carried by any appropriate carrier to enable a device, apparatus or processor to perform the various processes and operations described above. Examples of carriers include signals, computer readable media, and the like. Examples of signals may include electrical, optical, radio, acoustic or other forms of propagation signals, such as carrier waves, infrared signals, and the like.

[0137] A computer readable medium may be any tangible medium that contains or stores a program for or related to an instruction execution system, apparatus, or device. A computer readable medium may be a computer readable signal medium or a computer readable storage medium. A computer readable medium may include, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any suitable combination thereof. More detailed examples of computer readable storage media include an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical storage device, a magnetic storage device, or any suitable combination thereof.

[0138] In addition, although the operation of the method of the present invention is described in a particular order in the accompanying drawings, this does not require or imply that these operations must be performed in this particular order, or that all the operations shown must be performed to achieve the desired result. On the contrary, the steps described in the flow chart can change the order of execution. Additionally or alternatively, some steps can be omitted, multiple steps can be combined into one step for execution, and / or one step can be decomposed into multiple steps for execution. It should also be noted that the features and functions of two or more devices according to the present invention can be embodied in one device. On the contrary, the features and functions of a device described above can be further divided into being embodied by multiple devices.

[0139] Although several specific implementation details are included in the above discussion, these should not be construed as limiting the scope of the present invention. Certain features described in the context of separate embodiments may also be implemented in a single implementation in combination. On the contrary, the various features described in the context of a single implementation may also be implemented in multiple implementations individually or in any suitable sub-combination.

[0140] The above descriptions of various implementations of the present invention are exemplary, non-exhaustive, and not limited to the disclosed implementations. Many modifications and variations will be apparent to those of ordinary skill in the art without departing from the scope and spirit of the described implementations. The selection of terms used herein is intended to explain the principles of the implementations, practical applications, or improvements to the technology in the market, or to enable other persons of ordinary skill in the art to understand the various implementations disclosed herein.

Claims

1. A method for processing Internet of Things security data based on real-time dynamic transmission, characterized in that: include: S001. Read the message configuration file configured in the sender device; S002. Randomly select one of the multiple information items in the message configuration file as the data to be sent, and obtain the frame type of the data to be sent; S003, framing the data to be sent based at least on a frame type of the data to be sent; S004, sending the framed data to be sent to a receiving device; S005. The receiving device receives the framed data to be sent from the sending device and uses it as data to be parsed; S006. Read the message configuration file configured on the receiving device; S007, parsing the data to be parsed to obtain parsed data; S008. In response to determining that the parsed data matches one of the multiple information entries, process the parsed data.

2. The method for processing Internet of Things security data based on real-time dynamic transmission according to claim 1 is characterized in that: In steps S001 and S006, each device maintains a corresponding defined message configuration file, wherein the message configuration file includes a plurality of information items, and each of the information items stores a corresponding application layer message protocol format among a plurality of application layer message protocol formats.

3. The method for processing Internet of Things security data based on real-time dynamic transmission according to claim 1 is characterized in that: In step S002, randomly selecting one of the plurality of information items in the message configuration file includes: A random number generator function is called to obtain one of the multiple information entries in the message configuration file.

4. The method for processing Internet of Things security data based on real-time dynamic transmission according to claim 1 is characterized in that: In step S003, framing the data to be sent based at least on the frame type of the data to be sent includes: The bit-by-bit and byte-by-byte message organization algorithm is called according to the randomly selected information item, and the bit-by-bit and byte-by-byte message organization algorithm is used to perform data processing on the data to be sent.

5. The method for processing Internet of Things security data based on real-time dynamic transmission according to claim 1 is characterized in that: In step S004, the framed data to be sent is sent to a receiving device, including: The framed data to be sent is sent to the receiving device based on the UDP protocol.

6. The method for processing Internet of Things security data based on real-time dynamic transmission according to claim 1 is characterized in that: In step S007, the data to be parsed is parsed to obtain parsed data, including: The bit-by-bit and byte-by-byte message parsing algorithms are called according to the received data to be parsed, and the bit-by-bit and byte-by-byte message parsing algorithms are used to perform data processing on the data to be parsed.

7. The method for processing Internet of Things security data based on real-time dynamic transmission according to claim 1 is characterized in that: In step S008, in response to determining that the parsed data matches one of the information entries, processing the parsed data includes: According to the message configuration file of the receiving device, find out whether the current data to be parsed conforms to a certain information entry in the message configuration file of the receiving device. If it conforms, further process the parsed data; if it does not conform, the parsed data is illegal, no further processing is performed on it, and the data packet is discarded.

8. The method for processing Internet of Things security data based on real-time dynamic transmission according to claim 1 is characterized in that: The method further comprises: Update the message configuration file of the device regularly or irregularly.

9. An IoT security data processing device based on real-time dynamic transmission, characterized in that: include: A sending message configuration file reading module, an information item acquisition module, a framing module, a data sending module, a data receiving module, a receiving message configuration file reading module, a parsing module and a data processing module; wherein, The sending message configuration file reading module is responsible for reading the message configuration file configured in the device, the message configuration file includes a plurality of information items, each of the information items stores a corresponding application layer message protocol format among a plurality of application layer message protocol formats; The information item acquisition module is responsible for randomly selecting one of the multiple information items in the message configuration file as the data to be sent, and determining the frame type of the data to be sent; The framing module is responsible for calling the bit-by-bit and byte-by-byte message organization algorithm to frame the data to be sent at least based on the frame type; The data sending module is responsible for sending the framed data to be sent to the data receiving module of the receiving device; The data receiving module is responsible for receiving the framed data to be sent from the data sending module of the sending device and using it as the data to be parsed; The receiving message configuration file reading module is responsible for reading the message configuration file configured in the device, the message configuration file includes a plurality of information items, each of the information items stores a corresponding application layer message protocol format among a plurality of application layer message protocol formats; The parsing module is responsible for calling the bit-by-bit and byte-by-byte message parsing algorithms to parse the data to be parsed and obtain parsed data; The data processing module is responsible for processing the parsed data in response to determining that the parsed data matches one of the multiple information entries.

10. An Internet of Things security data processing system based on real-time dynamic transmission, characterized in that: include: A network, and a server and a plurality of IoT devices connected to the network; wherein, At least one executable instruction is stored in the IoT device, and the executable instruction enables the IoT device to perform an operation corresponding to the method according to any one of claims 1 to 8; and The Internet of Things device includes the apparatus as claimed in claim 9.

Images