Processing method and system for identity authentication of IoT devices

Abstract

The present invention discloses a method and system for processing identity authentication of an Internet of Things device. The method of the present invention sends a written smart contract to an Internet of Things blockchain through an issuing server. When an Internet of Things device is newly added to an Internet of Things platform, a certificate generation request is sent to the Internet of Things blockchain through the Internet of Things platform, so that the Internet of Things blockchain executes the smart contract of the manufacturer corresponding to the Internet of Things device according to the certificate generation request to generate a device certificate for the Internet of Things device; then a certificate issuance request is sent to the Internet of Things blockchain through the issuing server, so that the Internet of Things blockchain sends batches of device certificates to the issuing server according to the certificate issuance request; the device certificate is pre-set to the Internet of Things device through the issuing server, so that after the Internet of Things device uses the device certificate to access the Internet of Things platform, the Internet of Things platform judges the legitimacy of the Internet of Things device through the smart contract, thereby effectively improving the security of the device certificate and reducing the certificate management cost.

Description

Technical Field

[0001] The present invention relates to the technical field of Internet of Things, and in particular to a method and system for processing identity authentication of Internet of Things devices. Background Art

[0002] Currently, the authentication of IoT devices relies on device certificates issued by CA centers. This issuance method, which uses CA as the central node for issuing certificates, may result in the leakage of certificates of all devices if a single point is compromised. In addition, the data of IoT devices is huge and diverse, resulting in high issuance costs and difficult maintenance. It is difficult for centralized CAs to quickly respond to the needs of different manufacturers for different types of certificates. In addition, the method of pre-setting certificates also requires a lot of manpower and time costs. Summary of the invention

[0003] The present invention aims to solve at least one of the technical problems existing in the prior art. To this end, the present invention proposes a method and system for processing identity authentication of an Internet of Things device, which can improve the security of device certificates and reduce costs.

[0004] On the one hand, an embodiment of the present invention provides a method for processing identity authentication of an Internet of Things device, comprising the following steps:

[0005] Sending the written smart contract to the IoT blockchain through the issuing server to create a manufacturer device library on the IoT blockchain according to the manufacturer device list in the smart contract;

[0006] When an IoT device is added to the IoT platform, a certificate generation request is sent to the IoT blockchain through the IoT platform, so that the IoT blockchain executes the smart contract of the manufacturer corresponding to the IoT device according to the certificate generation request to generate a device certificate for the IoT device;

[0007] Sending a certificate issuance request to the Internet of Things blockchain through the issuing server, so that the Internet of Things blockchain sends the batch of device certificates to the issuing server according to the certificate issuance request;

[0008] The device certificate is pre-set to the IoT device through the issuing server, so that the IoT device uses the device certificate to access the IoT platform, and the IoT platform determines the legitimacy of the IoT device through the smart contract.

[0009] In some embodiments, when generating a device certificate for the IoT device, the method further includes the following steps:

[0010] The operation process of executing the smart contract of the manufacturer corresponding to the IoT device and the device certificate are stored in the IoT blockchain.

[0011] In some embodiments, generating a device certificate for the IoT device includes:

[0012] Determine whether the IoT device is a legitimate device of the manufacturer;

[0013] When the IoT device is a legitimate device of the manufacturer, generate a private key and a public key of the IoT device;

[0014] Calculating authentication information of the IoT device;

[0015] Calculate a signature for the authentication information using the private key;

[0016] The device certificate is generated according to the authentication information and the signature.

[0017] In some embodiments, determining whether the IoT device is a legitimate device of the manufacturer includes:

[0018] Determine whether the IMEI of the IoT device falls into the long-term business device list of the smart contract.

[0019] In some embodiments, generating the private key and the public key of the IoT device includes:

[0020] The private key and public key of the IoT device are generated by an asymmetric algorithm.

[0021] In some embodiments, after generating the private key and the public key of the IoT device, the method further comprises the following steps:

[0022] The private key and the public key are recorded in the manufacturer's device library.

[0023] In some embodiments, determining the legitimacy of the IoT device through the smart contract includes:

[0024] Compare the relationship between the IMEI, device model, manufacturer ID and the private key in the IoT device business data through the smart contract;

[0025] The signature in the device certificate corresponding to the IoT device is verified using the public key.

[0026] On the other hand, an embodiment of the present invention provides a processing system for IoT device identity authentication, including:

[0027] An issuing server, the issuing server is used to send the written smart contract to the IoT blockchain; send a certificate issuance request to the IoT blockchain; pre-set the device certificate to the IoT device, so that the IoT device uses the device certificate to access the IoT platform;

[0028] The IoT blockchain is used to create a manufacturer device library according to the manufacturer device list in the smart contract; execute the smart contract of the manufacturer corresponding to the IoT device according to the certificate generation request to generate a device certificate for the IoT device; and send a batch of the device certificates to the issuing server according to the certificate issuance request;

[0029] An Internet of Things platform, the Internet of Things platform is used to add new Internet of Things devices; when a new Internet of Things device is added, a certificate generation request is sent to the Internet of Things blockchain; and the legitimacy of the Internet of Things device is judged through the smart contract.

[0030] In some embodiments, generating a device certificate for the IoT device includes:

[0031] Determine whether the IoT device is a legitimate device of the manufacturer;

[0032] When the IoT device is a legitimate device of the manufacturer, generate a private key and a public key of the IoT device;

[0033] Calculating authentication information of the IoT device;

[0034] Calculate a signature for the authentication information using the private key;

[0035] The device certificate is generated according to the authentication information and the signature.

[0036] In some embodiments, determining the legitimacy of the IoT device through the smart contract includes:

[0037] Compare the relationship between the IMEI, device model, manufacturer ID and the private key in the IoT device business data through the smart contract;

[0038] The signature in the device certificate corresponding to the IoT device is verified using the public key.

[0039] The embodiment of the present invention provides a method for processing identity authentication of an Internet of Things device, which has the following beneficial effects:

[0040] After the written smart contract is sent to the IoT blockchain through the issuing server, when a new IoT device is added to the IoT platform, a certificate generation request is sent to the IoT blockchain through the IoT platform, so that the IoT blockchain executes the smart contract of the manufacturer corresponding to the IoT device according to the certificate generation request and generates a device certificate for the IoT device; then a certificate issuance request is sent to the IoT blockchain through the issuing server, so that the IoT blockchain sends a batch of device certificates to the issuing server according to the certificate issuance request; the device certificate is pre-set to the IoT device through the issuing server, so that after the IoT device uses the device certificate to access the IoT platform, the IoT platform determines the legitimacy of the IoT device through the smart contract, thereby not relying on the CA center of the platform to issue certificates, effectively improving the security of the device certificate, and the IoT platform does not need to maintain the life cycle management and security protection of massive device certificates, effectively reducing the cost of the IoT platform on certificate management.

[0041] Additional aspects and advantages of the present invention will be given in part in the following description and in part will be obvious from the following description, or will be learned through practice of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] The present invention will be further described below with reference to the accompanying drawings and embodiments, wherein:

[0043] Figure 1 This is a flow chart of a method for processing identity authentication of an Internet of Things device according to an embodiment of the present invention;

[0044] Figure 2 This is a flow chart of issuing a device certificate according to an embodiment of the present invention;

[0045] Figure 3 A flow chart of a device certificate authentication process according to an embodiment of the present invention;

[0046] Figure 4 A module block diagram of a processing system for identity authentication of an Internet of Things device according to an embodiment of the present invention;

[0047] Figure 5 The present invention is an application flow chart of a processing system for IoT device identity authentication according to an embodiment of the present invention. DETAILED DESCRIPTION

[0048] Embodiments of the present invention are described in detail below, examples of which are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are only used to explain the present invention, and cannot be understood as limiting the present invention.

[0049] In the description of the present invention, "several" means more than one, "many" means more than two, "greater than", "less than", "exceed", etc. are understood to exclude the number itself, and "above", "below", "within", etc. are understood to include the number itself. If there is a description of "first" or "second", it is only used for the purpose of distinguishing the technical features, and cannot be understood as indicating or implying the relative importance or implicitly indicating the number of the indicated technical features or implicitly indicating the order of the indicated technical features.

[0050] In the description of the present invention, unless otherwise clearly defined, terms such as setting, installing, connecting, etc. should be understood in a broad sense, and technicians in the relevant technical field can reasonably determine the specific meanings of the above terms in the present invention based on the specific content of the technical solution.

[0051] In the description of the present invention, the description with reference to the terms "one embodiment", "some embodiments", "illustrative embodiments", "examples", "specific examples", or "some examples" means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representation of the above terms does not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner.

[0052] In the related technology, the identity authentication of highly reliable IoT devices relies on the device data certificate issued by the CA center. Among them, the CA center (Certificate Authority) is a trusted third party in e-commerce transactions and is responsible for verifying the legitimacy of the public key in the public key system. Specifically, the existing data certificate issuance methods include the following two:

[0053] The first is the pre-set method: the IoT device manufacturer first applies for a certificate from the CA center of the IoT platform. After the CA center issues the certificate, the manufacturer needs to configure or install the issued certificate into the IoT device. The device uses the pre-set certificate to prove its identity when accessing the network.

[0054] The second is the online application method: before connecting to the IoT platform, the IoT device applies to the platform for certificate issuance through a pre-negotiated interface. The platform identifies the device through the device identifier, and then requests the CA center to issue a certificate for the device. Finally, the platform passes the certificate to the device through the interface.

[0055] However, no matter which of the above issuance methods is adopted, there are the following problems:

[0056] As the central node for issuing certificates, CA poses a huge security risk. If a single point is breached, the certificates of all devices may be leaked.

[0057] The number of IoT devices is extremely large, so the issuance cost is high and maintenance is difficult;

[0058] There are many types of IoT devices, and it is difficult for centralized CAs to quickly respond to the issuance needs of different types of certificates from different manufacturers;

[0059] The method of pre-setting certificates requires a lot of manpower and time costs.

[0060] Based on this, the embodiment of the present invention provides a method and system for processing the identity authentication of an IoT device. This embodiment disperses the risk of certificate leakage, reduces the cost of certificate management, and improves the efficiency of certificate issuance through a certificate issuance and identity authentication mechanism based on blockchain 2.0. It can quickly respond to different types of certificate issuance requirements, making the certificate issuance and identity authentication process safer and more efficient. Among them, blockchain 2.0 is programmable finance, which is a blockchain application in the economic, market and financial fields, such as stocks, bonds, futures, loans, mortgages, property rights, smart properties and smart contracts.

[0061] The embodiments of the present invention are described in detail below with reference to the accompanying drawings:

[0062] Reference Figure 1 The embodiment of the present invention provides a method for processing identity authentication of an Internet of Things device, including but not limited to the following steps:

[0063] Step S110: Send the written smart contract to the IoT blockchain through the issuing server, so as to create a manufacturer device library on the IoT blockchain according to the manufacturer device list in the smart contract;

[0064] Step S120: When a new IoT device is added to the IoT platform, a certificate generation request is sent to the IoT blockchain through the IoT platform, so that the IoT blockchain executes the smart contract of the manufacturer corresponding to the IoT device according to the certificate generation request to generate a device certificate for the IoT device;

[0065] Step S130: Send a certificate issuance request to the Internet of Things blockchain through the issuing server, so that the Internet of Things blockchain sends a batch of device certificates to the issuing server according to the certificate issuance request;

[0066] Step S140: presetting the device certificate to the IoT device through the issuing server, so that the IoT device uses the device certificate to access the IoT platform, and the IoT platform determines the legitimacy of the IoT device through the smart contract.

[0067] In this embodiment, the smart contract is a smart contract written by the manufacturer, which contains a list of manufacturer devices, an algorithm for generating device certificates algo Cert, an algorithm for device identity authentication algo IA, and a series of operation interfaces. The issuing server belongs to the manufacturer certificate issuing server. The manufacturer certificate issuing server is responsible for publishing the smart contract to the IoT blockchain, and the smart contract will create a manufacturer device library based on the manufacturer device list. When the user adds an IoT device to the IoT platform (AIoT), the IoT platform (AIoT) initiates a certificate generation request to the IoT blockchain to request the execution of the smart contract issued by the device manufacturer, generate a device certificate for the IoT device, and store the operation process of executing the smart contract of the manufacturer corresponding to the IoT device and the issued certificate on the chain. After generating the device certificate, the certificate issuing server requests a batch of device certificates from the IoT blockchain, and pre-sets the batch of device certificates to the IoT device, so that the IoT device can use the certificate to access the IoT platform. During the access process, the IoT platform determines the legitimacy of the device identity through the smart contract.

[0068] It can be understood that the device list of the embodiment of the present application is a batch of legitimate IoT devices pre-set by the manufacturer, including information such as device IMEI, device model, manufacturer ID, etc. The smart contract published to the IoT blockchain will automatically generate a device library based on the device list to record device status, public and private keys, certificates and other information.

[0069] In the embodiment of the present application, when generating a device certificate for an IoT device, such as Figure 2 As shown, this can be achieved by following the steps below:

[0070] Determine whether the IoT device is a legitimate device of the manufacturer; specifically, this step may be to determine whether the IMEI of the IoT device falls into the long-term business device list of the smart contract.

[0071] When the IoT device is a legitimate device of the manufacturer, generate the private key and public key of the IoT device; specifically, this step can generate the private key and public key of the IoT device through an asymmetric algorithm. Among them, the asymmetric algorithm includes the RSE algorithm. When the IoT device is not a legitimate device of the manufacturer, it is determined that the certificate generation has failed. After the private key is generated, the private key and public key are recorded in the device library.

[0072] Calculate the authentication information auth info of the IoT device; the authentication information auth info consists of the device IMEI + device model + manufacturer ID.

[0073] The signature of the authentication information auth info is calculated using the private key Private-Key.

[0074] Generate a device certificate based on the authentication information and signature. Specifically, the device certificate consists of auth info + signature.

[0075] In the embodiment of the present application, when judging the legitimacy of an IoT device through a smart contract, Figure 3 As shown, this can be achieved by following the steps below:

[0076] When the IoT platform calls the identity authentication algorithm of the smart contract, it needs to input the IMEI, device model, manufacturer ID information and device certificate in the device business data;

[0077] The relationship between the IMEI, device model, manufacturer ID and the private key in the IoT device business data is compared through a smart contract; specifically, the IMEI, device model, manufacturer ID in the device business data is verified to be consistent with the auth_info in the certificate; if they are consistent, the signature in the device certificate corresponding to the IoT device is verified through the public key; otherwise, it is determined that the authentication has failed.

[0078] In summary, the method for processing IoT device identity authentication provided by the embodiment of the present application has the following beneficial effects:

[0079] First, the issuance of certificates no longer relies on the platform's CA center, but is handled by the smart contracts of various device manufacturers. Manufacturers can adjust and innovate the certificate content, certificate algorithm, etc. according to their own needs;

[0080] Second, when the blockchain is hacked, since the encryption methods and authentication algorithms of the certificates of different manufacturers are different, the attacker cannot obtain the authentication policies of all devices through a single crack, thus effectively isolating the authentication policies of devices from different manufacturers.

[0081] Third, the IoT platform no longer needs to maintain the lifecycle management and security of massive device certificates, which greatly reduces the cost of certificate management for the IoT platform.

[0082] Reference Figure 4 The embodiment of the present invention provides a processing system for IoT device identity authentication, including:

[0083] The issuing server is used to send the written smart contract to the IoT blockchain; send a certificate issuance request to the IoT blockchain; pre-set the device certificate to the IoT device so that the IoT device can access the IoT platform using the device certificate;

[0084] IoT blockchain, which is used to create a manufacturer device library based on the manufacturer device list in the smart contract; execute the smart contract of the manufacturer corresponding to the IoT device according to the certificate generation request to generate the device certificate of the IoT device; send the batch of device certificates to the issuance server according to the certificate issuance request;

[0085] IoT platform, the IoT platform is used to add new IoT devices; when a new IoT device is added, a certificate generation request is sent to the IoT blockchain; the legitimacy of the IoT device is determined through smart contracts.

[0086] In the embodiment of the present application, when generating a device certificate for an IoT device, such as Figure 2 As shown, this can be achieved by following the steps below:

[0087] Determine whether the IoT device is a legitimate device of the manufacturer; specifically, this step may be to determine whether the IMEI of the IoT device falls into the long-term business device list of the smart contract.

[0088] When the IoT device is a legitimate device of the manufacturer, generate the private key and public key of the IoT device; specifically, this step can generate the private key and public key of the IoT device through an asymmetric algorithm. Among them, the asymmetric algorithm includes the RSE algorithm. When the IoT device is not a legitimate device of the manufacturer, it is determined that the certificate generation has failed. After the private key is generated, the private key and public key are recorded in the device library.

[0089] Calculate the authentication information auth info of the IoT device; the authentication information auth info consists of the device IMEI + device model + manufacturer ID.

[0090] The signature of the authentication information auth info is calculated using the private key Private-Key.

[0091] Generate a device certificate based on the authentication information and signature. Specifically, the device certificate consists of auth info + signature.

[0092] In the embodiment of the present application, when judging the legitimacy of an IoT device through a smart contract, Figure 3 As shown, this can be achieved by following the steps below:

[0093] When the IoT platform calls the identity authentication algorithm of the smart contract, it needs to input the IMEI, device model, manufacturer ID information and device certificate in the device business data;

[0094] The relationship between the IMEI, device model, manufacturer ID and the private key in the IoT device business data is compared through a smart contract; specifically, the IMEI, device model, manufacturer ID in the device business data is verified to be consistent with the auth_info in the certificate; if they are consistent, the signature in the device certificate corresponding to the IoT device is verified through the public key; otherwise, it is determined that the authentication has failed.

[0095] In some embodiments, Figure 4 When the system shown is applied to actual scenarios, such as Figure 5 As shown, including the following:

[0096] Step 1: Write a smart contract;

[0097] Step 2: Submit the smart contract to the IoT blockchain through the issuing server;

[0098] Step 3: When the IoT platform adds an IoT device, the IoT platform requests the IoT blockchain to generate a device certificate for the IoT device;

[0099] Step 4: After the issuing server obtains the device certificate of the IoT device, it imports the device certificate into the IoT device;

[0100] Step 5: The IoT device logs in to the IoT platform with the device certificate;

[0101] Step 6: The IoT platform authenticates the device certificate.

[0102] The contents of the method embodiments of the present invention are all applicable to the system embodiments. The functions specifically implemented by the system embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method.

[0103] The embodiments of the present invention are described in detail above in conjunction with the accompanying drawings, but the present invention is not limited to the above embodiments. Various changes can be made within the knowledge of ordinary technicians in the relevant technical field without departing from the purpose of the present invention. In addition, the embodiments of the present invention and the features in the embodiments can be combined with each other without conflict.

Claims

1. A method for processing identity authentication of an Internet of Things device, characterized in that: The following steps are involved: Sending the written smart contract to the IoT blockchain through the issuing server to create a manufacturer device library on the IoT blockchain according to the manufacturer device list in the smart contract; When an IoT device is added to the IoT platform, a certificate generation request is sent to the IoT blockchain through the IoT platform, so that the IoT blockchain executes the smart contract of the manufacturer corresponding to the IoT device according to the certificate generation request to generate a device certificate for the IoT device; Sending a certificate issuance request to the Internet of Things blockchain through the issuing server, so that the Internet of Things blockchain sends the batch of device certificates to the issuing server according to the certificate issuance request; The device certificate is pre-set to the IoT device through the issuing server, so that the IoT device uses the device certificate to access the IoT platform, and the IoT platform determines the legitimacy of the IoT device through the smart contract.

2. A method for processing identity authentication of an Internet of Things device according to claim 1, characterized in that: When generating the device certificate of the IoT device, the method further includes the following steps: The operation process of executing the smart contract of the manufacturer corresponding to the IoT device and the device certificate are stored in the IoT blockchain.

3. The method for processing identity authentication of an Internet of Things device according to claim 1, characterized in that: The generating of the device certificate of the IoT device comprises: Determine whether the IoT device is a legitimate device of the manufacturer; When the IoT device is a legitimate device of the manufacturer, generate a private key and a public key of the IoT device; Calculating authentication information of the IoT device; Calculate a signature for the authentication information using the private key; The device certificate is generated according to the authentication information and the signature.

4. A method for processing identity authentication of an Internet of Things device according to claim 3, characterized in that: The determining whether the IoT device is a legitimate device of the manufacturer includes: Determine whether the IMEI of the IoT device falls into the manufacturer device list of the smart contract.

5. The method for processing identity authentication of an Internet of Things device according to claim 3, characterized in that: The generating of the private key and the public key of the IoT device comprises: The private key and the public key of the IoT device are generated by an asymmetric algorithm.

6. The method for processing identity authentication of an Internet of Things device according to claim 3, characterized in that: After generating the private key and the public key of the IoT device, the method further comprises the following steps: The private key and the public key are recorded in the manufacturer's device library.

7. The method for processing identity authentication of an Internet of Things device according to claim 3, characterized in that: The determining the legitimacy of the IoT device through the smart contract includes: Compare the relationship between the IMEI, device model, manufacturer ID and the private key in the IoT device business data through the smart contract; The signature in the device certificate corresponding to the IoT device is verified using the public key.

8. A processing system for identity authentication of an Internet of Things device, characterized in that: include: An issuing server, which is used to send the written smart contract to the IoT blockchain; Sending a certificate issuance request to the IoT blockchain; Presetting the device certificate to the IoT device so that the IoT device can access the IoT platform using the device certificate; An IoT blockchain, wherein the IoT blockchain is used to create a manufacturer device library according to the manufacturer device list in the smart contract; Execute the smart contract of the manufacturer corresponding to the IoT device according to the certificate generation request to generate a device certificate for the IoT device; Sending a batch of the device certificates to the issuing server according to the certificate issuance request; An Internet of Things platform, wherein the Internet of Things platform is used to add new Internet of Things devices; When a new IoT device is added, a certificate generation request is sent to the IoT blockchain; The legitimacy of the IoT device is determined through the smart contract.

9. The processing system for IoT device identity authentication according to claim 8, characterized in that: The generating of the device certificate of the IoT device comprises: Determine whether the IoT device is a legitimate device of the manufacturer; When the IoT device is a legitimate device of the manufacturer, generate a private key and a public key of the IoT device; Calculating authentication information of the IoT device; Calculate a signature for the authentication information using the private key; The device certificate is generated according to the authentication information and the signature.

10. The system for processing identity authentication of an Internet of Things device according to claim 9, characterized in that: The determining the legitimacy of the IoT device through the smart contract includes: Compare the relationship between the IMEI, device model, manufacturer ID and the private key in the IoT device business data through the smart contract; The signature in the device certificate corresponding to the IoT device is verified using the public key.

Images