Communication authentication method and device, computer device, storage medium and program product
By using preset propositions and Gödel number mappings to perform encryption and decryption communication authentication at edge computing nodes, the authentication problem between IoT devices and edge computing nodes is solved, enabling efficient and secure inter-device communication.
Patent Information
- Application Number
- CN202410531401.3
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2024-04-29
- Publication Date
- 2025-12-09
- Estimated Expiration
- 2044-04-29
AI Technical Summary
Due to insufficient computing power and storage, IoT devices and edge computing nodes cannot efficiently perform encryption and decryption communication authentication, and need to rely on remote cloud computing centers for assistance, which increases the complexity of communication authentication.
Edge computing nodes utilize a pre-defined proposition and Gödel number mapping relationship to perform encryption and decryption communication authentication, including receiving connection requests, determining Gödel numbers, encryption processing, and decryption processing, thereby achieving authentication between devices.
This reduces the complexity of communication authentication and improves the security and efficiency of authentication without relying on a remote cloud computing center.
Smart Images

Figure CN118300879B_ABST
Abstract
Description
TECHNICAL FIELD
[0001] The present application relates to the technical field of Internet of Things, and in particular to a communication authentication method and device, a computer device, a storage medium and a program product. BACKGROUND
[0002] In the Internet of Things service, when the Internet of Things device processes a low-load task, data processing needs to be completed through an edge computing node, and therefore, it is essential to establish secure communication between the Internet of Things device and the edge computing node. Communication verification needs to be performed when secure communication is established, but the edge computing node and the Internet of Things device generally do not have high computing power and large storage, and are not suitable for time-consuming encryption and decryption communication authentication, and therefore, remote cloud computing centers must be used to assist the Internet of Things device and the edge computing node to establish secure communication.
[0003] At present, there is an urgent need for a method of completing encryption and decryption communication authentication by only using the edge computing node and the Internet of Things device without the aid of a remote cloud computing center. SUMMARY
[0004] Therefore, it is necessary to provide a communication authentication method, device, computer device, storage medium and program product capable of completing encryption and decryption communication authentication without the aid of a remote cloud computing center in view of the above technical problems.
[0005] In a first aspect, the present application provides a communication authentication method applied to an edge computing node, comprising:
[0006] receiving a connection request sent by an Internet of Things device;
[0007] determining a first target symbol corresponding to a first Gödel number according to a first mapping relationship; the first mapping relationship includes a mapping relationship between different symbols and different Gödel number symbols, and the first target symbol is determined according to a preset proposition;
[0008] sending a first encryption result corresponding to the first Gödel number to the Internet of Things device; the first encryption result is used for the Internet of Things device to determine an authentication result between the Internet of Things device and the edge computing node.
[0009] In one embodiment, the determining of the first target symbol corresponding to the first Gödel number according to the first mapping relationship comprises:
[0010] transforming the preset proposition into a mathematical definition formula;
[0011] splitting the mathematical definition formula to obtain the first target symbol;
[0012] determining the first Gödel number corresponding to the preset proposition based on the first target symbol and the first mapping relationship.
[0013] In one of the embodiments, the determining the first Godel number corresponding to the preset proposition based on the first target symbol and the first mapping relationship comprises:
[0014] The first Godel number corresponding to the preset proposition is determined based on the first target symbol and the first mapping relationship.
[0015] The first Godel number is determined according to the first Godel symbol.
[0016] In one of the embodiments, the method further comprises:
[0017] The first solving result corresponding to the preset proposition is obtained.
[0018] The second Godel number corresponding to the second target symbol in the first solving result is determined according to the first mapping relationship.
[0019] The second Godel number is encrypted to obtain a second encryption result corresponding to the second Godel number.
[0020] The authentication result between the Internet of Things device and the edge computing node is determined based on the second encryption result and a third encryption result, wherein the third encryption result is determined by the Internet of Things device based on the first encryption result.
[0021] In one of the embodiments, the determining the authentication result between the Internet of Things device and the edge computing node based on the second encryption result and the third encryption result comprises:
[0022] If the second encryption result and the third encryption result are consistent, it is determined that the authentication result is authentication passed.
[0023] If the second encryption result and the third encryption result are inconsistent, it is determined that the authentication result is authentication failed.
[0024] In a first aspect, the present application provides a communication authentication method applied to an Internet of Things device, comprising:
[0025] Sending a connection request to an edge computing node.
[0026] Receiving a first encryption result sent by the edge computing node, wherein the first encryption result is obtained by encrypting the first Godel number by the edge computing node, the first Godel number is a Godel number corresponding to a first target symbol determined by the edge computing node based on a first mapping relationship, and the first mapping relationship comprises a mapping relationship between different symbols and different Godel number symbols.
[0027] Decrypting the first encryption result sent by the edge computing node to obtain a third Godel number.
[0028] According to the first mapping relationship, the third Gödel number corresponding reduction result is determined;
[0029] Based on the third Gödel number corresponding reduction result, the authentication result between the Internet of Things device and the edge computing node is determined.
[0030] In one embodiment, according to the first mapping relationship, the third Gödel number corresponding reduction result is determined, including:
[0031] The third Gödel number is decomposed to obtain the second Gödel symbol corresponding to the third Gödel number;
[0032] Based on the second Gödel symbol, the first mapping relationship, the third Gödel number corresponding reduction result is determined.
[0033] In one embodiment, based on the third Gödel number corresponding reduction result, the authentication result between the Internet of Things device and the edge computing node is determined, including:
[0034] Verify whether the reduction result has mathematical meaning;
[0035] Verify whether the reduction result can be solved within a predetermined time;
[0036] If the reduction result does not have mathematical meaning, or the reduction result cannot be solved within a predetermined time, it is determined that the authentication result between the Internet of Things device and the edge computing node is not passed.
[0037] In one embodiment, the method further includes:
[0038] Obtain the second solution result corresponding to the reduction result;
[0039] According to the first mapping relationship, the fourth Gödel number corresponding to the third target symbol in the second solution result is determined;
[0040] The fourth Gödel number corresponding third encryption result is sent to the edge computing node; The third encryption result is used for the edge computing node to determine the authentication result between the Internet of Things device and the edge computing node according to the third encryption result.
[0041] Thirdly, the present application also provides a communication authentication device, which is arranged in an edge computing node, including:
[0042] The receiving module is used for receiving the connection request sent by the Internet of Things device;
[0043] The first determining module is configured to determine a first target symbol corresponding to a first Godel number according to a first mapping relationship, wherein the first mapping relationship comprises a mapping relationship between different symbols and different Godel number symbols, and the first target symbol is determined according to a preset proposition.
[0044] The sending module is configured to send a first encryption result corresponding to the first Godel number to the Internet of Things device, wherein the first encryption result is used for determining an authentication result between the Internet of Things device and the edge computing node.
[0045] In a fourth aspect, the present application further provides a communication authentication apparatus, which is arranged in an Internet of Things device and comprises:
[0046] The first sending module is configured to send a connection request to an edge computing node.
[0047] The receiving module is configured to receive a first encryption result sent by the edge computing node, wherein the first encryption result is obtained by encrypting the first Godel number by the edge computing node, the first Godel number is a Godel number corresponding to a first target symbol determined by the edge computing node based on the first mapping relationship, and the first mapping relationship comprises a mapping relationship between different symbols and different Godel number symbols.
[0048] The decryption processing module is configured to decrypt the first encryption result sent by the edge computing node to obtain a third Godel number.
[0049] The first determining module is configured to determine a restoration result corresponding to the third Godel number according to the first mapping relationship.
[0050] The second determining module is configured to determine an authentication result between the Internet of Things device and the edge computing node based on the restoration result corresponding to the third Godel number.
[0051] In a fifth aspect, the present application further provides a computer device, which comprises a memory and a processor, the memory stores a computer program, and the processor implements the steps of any one of the above methods when executing the computer program.
[0052] In a sixth aspect, the present application further provides a computer readable storage medium, which stores a computer program, and the computer program implements the steps of any one of the above methods when executed by a processor.
[0053] In a seventh aspect, the present application further provides a computer program product, which comprises a computer program, and the computer program implements the steps of any one of the above methods when executed by a processor.
[0054] The communication authentication method, device, computer device, storage medium and program product can receive a connection request sent by the Internet of Things device, determine a first target symbol corresponding to a first Godel number according to a first mapping relationship, and then send a first encryption result corresponding to the first Godel number to the Internet of Things device. The first mapping relationship includes a mapping relationship between different symbols and different Godel number symbols, the first target symbol is determined according to a preset proposition, and the first encryption result is used to determine an authentication result between the Internet of Things device and the edge computing node. Compared with the method of performing the encryption and decryption communication authentication through a remote cloud computing center to assist the Internet of Things device and the edge computing node to establish secure communication, the method provided in the embodiment of the application can complete the encryption and decryption communication authentication without the aid of a remote cloud computing center, and only the edge computing node and the Internet of Things device are used. Since the communication authentication can be completed without the aid of an external device, the complexity of the communication authentication is reduced. BRIEF DESCRIPTION OF DRAWINGS
[0055] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the related art, the drawings needed to be used in the embodiments or the related art description will be briefly introduced. Obviously, the drawings in the following description are only some embodiments of the present application, and other drawings can be obtained by those skilled in the art without creative labor.
[0056] Figure 1 An application environment diagram of a communication authentication method in an embodiment;
[0057] Figure 2 One of the flowcharts of a communication authentication method in an embodiment;
[0058] Figure 3 One of the flowcharts of a first Godel number determination method in an embodiment;
[0059] Figure 4 The second flowchart of the first Godel number determination method in an embodiment;
[0060] Figure 5 The second flowchart of the communication authentication method in an embodiment;
[0061] Figure 6 The third flowchart of the communication authentication method in an embodiment;
[0062] Figure 7 One of the flowcharts of a third Godel number corresponding to a reduction result method in an embodiment;
[0063] Figure 8Fig. 2 is a flowchart illustrating a method for reducing a third Gödel number according to an embodiment;
[0064] Figure 9 Fig. 4 is a flowchart illustrating a method for communication authentication according to an embodiment;
[0065] Figure 10 Fig. 5 is a flowchart illustrating a method for communication authentication according to an embodiment;
[0066] Figure 11 Fig. 6 is a block diagram illustrating a communication authentication device according to an embodiment;
[0067] Figure 12 Fig. 7 is a block diagram illustrating a communication authentication device according to an embodiment;
[0068] Figure 13 Fig. 8 is a block diagram illustrating an internal structure of a computer device according to an embodiment. DETAILED DESCRIPTION
[0069] In order to make the objects, technical solutions and advantages of the present application clearer, the present application will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and should not be used to limit the present application.
[0070] The communication authentication method provided by the embodiments of the present application can be applied to an application environment as shown in Figure 1 In the application environment, the security authentication between the edge computing node 101 and the Internet of Things device 102 can establish secure communication without the assistance of a remote cloud computing center. The Internet of Things device can be a smart speaker, a smart TV, a smart air conditioner, a smart vehicle device, etc.
[0071] In an exemplary embodiment, as shown in Figure 2 A communication authentication method is provided. Taking the edge computing node 101 in Figure 1 as an example, the method includes the following steps:
[0072] S201, receiving a connection request sent by an Internet of Things device.
[0073] In the embodiments of the present application, when the Internet of Things device is ready to communicate with the edge computing node, the Internet of Things device usually sends a connection request to the edge computing node. After the edge computing node receives the connection request sent by the Internet of Things device, a preset proposition can be obtained from a preset mathematical proposition library.
[0074] It should be noted that the preset mathematical proposition library can be stored in the edge computing node or sent to the edge computing node by an external device.
[0075] S202, determine a first target symbol corresponding to a first Godel number according to a first mapping relationship; the first mapping relationship includes a mapping relationship between different symbols and different Godel number symbols, and the first target symbol is determined according to a preset proposition.
[0076] The first mapping relationship can be sent by the security center to the edge computing node, or can be saved by the edge computing node. The security center can generate a set of random mapping relationships between full-amount mathematical formula symbols and Godel symbols according to the timestamp and by the random number method. The preset proposition can be in the mathematical proposition library of the edge computing node, and the calculation time of the mathematical proposition library can be dynamically adjusted according to the P / NP principle to prevent the edge computing node from receiving a DDOS attack. The P / NP problem is an unsolved problem in the field of computational complexity theory in theoretical information science. The DDOS attack generally refers to a distributed denial of service attack, which is an attack in which an attacker manipulates a large number of computers, or multiple attackers located in different positions, and in a short period of time, launches an attack on server resources by disguising the attack as a large number of legitimate requests.
[0077] In the embodiments of the present application, the preset proposition can be converted into a mathematical definition formula, and then the symbol corresponding to the mathematical definition formula, i.e., the first target symbol, can be obtained. The first target symbol corresponding to the first Godel symbol can be determined according to the mapping relationship between different symbols and different Godel number symbols, and the first Godel number can be obtained by processing the first Godel symbol by using the Godel number method.
[0078] Optionally, the preset proposition can be converted into a mathematical definition formula, and then the symbol corresponding to the mathematical definition formula, i.e., the first target symbol, can be obtained. The first target symbol corresponding to the first Godel symbol can be determined according to the mapping relationship between different symbols and different Godel number symbols, and the first Godel number can be obtained by processing the first Godel symbol by using the Godel number method. The initial Godel number is verified to obtain a verification result, if the verification result is passed, the initial Godel number is taken as the first Godel number, if the verification fails, the first Godel symbol is processed by using the Godel number method again to obtain a new initial Godel number, the new initial Godel number is verified to obtain a new verification result, if the verification result of the new initial Godel number is passed, the new initial Godel number is taken as the first Godel number, if the verification fails, the above steps are repeated to obtain the next new initial Godel number, until the new verification result is passed, and the new initial Godel number that passes the verification is taken as the first Godel number. The method for verifying the initial Godel number can be error method, comparison method, etc.
[0079] S203, send a first encryption result corresponding to the first Godel number to the Internet of Things device; the first encryption result is used for the Internet of Things device to determine an authentication result between the Internet of Things device and the edge computing node.
[0080] In the embodiment of the present application, the edge computing node can perform encryption processing on the first Gödel number to obtain a first encryption result. The encryption processing on the first Gödel number can be a symmetric encryption algorithm or an asymmetric encryption algorithm, such as SM2, SM4, AES, etc. The edge computing node sends the first encryption result corresponding to the first Gödel number to the Internet of Things device. After receiving the first encryption result, the Internet of Things device can decrypt the first encryption result to obtain a third Gödel number, and use the first mapping relationship to restore the third Gödel number to a mathematical definition formula. It can be determined whether the data definition formula has mathematical meaning. If the mathematical definition formula has no mathematical meaning, the Internet of Things device can determine that the edge computing node is not trustworthy, so as to determine that the authentication result between the Internet of Things device and the edge computing node is authentication failure. It can also be that if the mathematical definition formula has meaning, but the relevant solution cannot be calculated within a preset time, it can be determined that the authentication result between the Internet of Things device and the edge computing node is authentication failure.
[0081] It should be noted that the mathematical expression symbol of the Gödel number conforms to the legality of the pre-defined compiler, that is, it can be correctly compiled by the syntax, lexicon, semantics and the like specified by the pre-defined compiler. If it cannot be successfully compiled, it can be considered to have no mathematical meaning.
[0082] When the third Gödel number is restored to the mathematical definition formula, it occurs when it has mathematical meaning. At this time, a program needs to be set in advance to read the mathematical expression and convert it into a computer program method for solving the operation expression. For example, sequential calculation is performed using the exhaustion method, and the calculation is terminated when the first operation result conforming to the mathematical expression is obtained.
[0083] The above communication authentication method receives the connection request sent by the Internet of Things device, determines the first Gödel number corresponding to the first target symbol according to the first mapping relationship, and then sends the first encryption result corresponding to the first Gödel number to the Internet of Things device. The first mapping relationship includes the mapping relationship between different symbols and different Gödel number symbols, the first target symbol is determined according to a preset proposition, and the first encryption result is used for the Internet of Things device to determine the authentication result between the Internet of Things device and the edge computing node. Compared with the method of performing encryption and decryption communication authentication through a remote cloud computing center to assist the Internet of Things device and the edge computing node to establish secure communication, the method provided in the embodiment of the present application can complete the encryption and decryption communication authentication method without the aid of a remote cloud computing center, and only by using the edge computing node and the Internet of Things device. Since the communication authentication can be completed without the aid of external equipment, the complexity of the communication authentication is reduced.
[0084] In one exemplary embodiment, as Figure 3As shown, the embodiment relates to a possible implementation of how to determine the first Godel number corresponding to the first target symbol according to the first mapping relationship. Based on the above embodiment, S202 includes:
[0085] S301, converting the preset proposition into a mathematical definition formula.
[0086] In the embodiment of the application, the text of the preset proposition can be recognized to obtain a recognition result, and a machine learning algorithm is used to convert the recognition result to obtain the mathematical definition formula corresponding to the preset proposition.
[0087] For example, the preset proposition is that the natural number 0 is not equal to 1, and the corresponding mathematical definition formula is: .
[0088] S302, splitting the mathematical definition formula to obtain the first target symbol.
[0089] According to the above example, the mathematical definition formula can be split into 0, , 1, therefore, 0, , 1 are the first target symbols corresponding to the split mathematical definition formula.
[0090] S303, determining the first Godel number corresponding to the preset proposition based on the first target symbol and the first mapping relationship.
[0091] As a possible implementation, the first Godel symbol corresponding to the first target symbol can be obtained according to the mapping relationship between different symbols and Godel symbols in the first mapping relationship, and the initial Godel number is obtained by processing the first Godel symbol using the Godel number method. The initial Godel number is verified to obtain a verification result. If the verification result is passed, the initial Godel number is taken as the first Godel number. If the verification fails, the above process is checked, and a check result is generated to determine the first Godel number corresponding to the preset proposition according to the first target symbol and the first mapping relationship again according to the above steps.
[0092] As another possible implementation, Figure 4 As shown, the embodiment relates to a possible implementation of how to determine the first Godel number corresponding to the preset proposition based on the first target symbol and the first mapping relationship. Based on the above embodiment, S303 includes:
[0093] S401, determining the first Godel symbol corresponding to the preset proposition based on the first target symbol and the first mapping relationship.
[0094] In the embodiment of the present application, the first target symbol corresponding to the first Gödel symbol can be obtained according to the mapping relationship between different symbols and the Gödel symbol in the first mapping relationship. The first Gödel symbol is also the first Gödel symbol corresponding to the preset proposition.
[0095] For example, Table 1 shows a possible first mapping relationship. Assuming that the preset proposition is that the natural number 0 is not equal to 1, the corresponding mathematical definition formula is: The first target symbol includes: 0, 1, and the first Gödel symbol obtained after converting the first target symbol into a Gödel symbol is: 213. The first Gödel number is obtained by processing the first Gödel symbol using the Gödel pairing method.
[0096] Table 1
[0097]
[0098] S402, determining the first Gödel number according to the first Gödel symbol.
[0099] In the embodiment of the present application, the first Gödel number can be obtained by processing the first Gödel symbol using the Gödel pairing method. In the above example, the first Gödel number is calculated using the Gödel pairing method , and the first Gödel number is: .
[0100] In the embodiment, the preset proposition is converted into a mathematical definition formula, the first target symbol is obtained by splitting the mathematical definition formula, the first Gödel symbol corresponding to the preset proposition is determined based on the first target symbol and the first mapping relationship, and the first Gödel number is determined according to the first Gödel symbol. According to the fundamental theorem of arithmetic in number theory, the prime factorization of each natural number is unique and can be mutually inverse, and the first Gödel number 132 forms a unique mapping relationship with the mathematical definition formula 0≠1.
[0101] In an exemplary embodiment, as Figure 5 shown, the method further includes the following steps:
[0102] S501, obtaining a first solving result corresponding to a preset proposition.
[0103] In the embodiment of the present application, the edge computing node can analyze and calculate the numerical value conforming to the preset proposition, that is, the first solving result corresponding to the preset proposition.
[0104] For example, the preset proposition is: there is a prime number a, which is a Mersenne prime number, and the number of digits is equal to 10 digits. The preset proposition has only one solution 2147483647. Correspondingly, a mathematical proposition with multiple solutions can also be established.
[0105] S502, determine a second Gödel number corresponding to a second target symbol in the first solving result according to the first mapping relationship.
[0106] In the embodiment of the present application, the second target symbol in the first solving result can be obtained, and the Gödel symbol corresponding to the second target symbol can be determined according to the mapping relationship between different symbols and different Gödel symbols in the first mapping relationship. The second Gödel number corresponding to the second target symbol can be calculated according to the Gödel symbol corresponding to the second target symbol and the Gödel number calculation method.
[0107] S503, encrypt the second Gödel number to obtain a second encryption result corresponding to the second Gödel number.
[0108] The encryption algorithm for encrypting the second Gödel number can be agreed by the edge computing node and the Internet of Things device. For example, the encryption algorithm can be a symmetric encryption algorithm or an asymmetric encryption algorithm, such as SM2, SM4, and AES, etc.
[0109] In the embodiment of the present application, the edge computing node can use a symmetric encryption algorithm or an asymmetric encryption algorithm to encrypt the second Gödel number to obtain a second encryption result corresponding to the second Gödel number. For example, the SM2 encryption algorithm is used to encrypt the second Gödel number to obtain the second encryption result.
[0110] Optionally, the security center can send a method name corresponding to a digital signature algorithm to the edge computing node and the Internet of Things device, and the digital signature algorithm can be a hash algorithm. The edge computing node can use the digital signature algorithm to process the second Gödel number to obtain a first digital signature P1.
[0111] Alternatively, the edge computing node can use the digital signature algorithm to process the second encryption result to obtain the first digital signature P1.
[0112] S504, determine an authentication result between the Internet of Things device and the edge computing node based on the second encryption result and a third encryption result, and the third encryption result is determined by the Internet of Things device based on the first encryption result.
[0113] In the embodiment of the present application, after receiving the first encryption result, the Internet of Things device decrypts the first encryption result to obtain a third Gödel number, and restores the third Gödel number into a mathematical definition formula by using the first mapping relationship. If the Internet of Things device determines that the mathematical definition formula has mathematical meaning and there is a solution within a preset time, the Internet of Things device determines a fourth Gödel number corresponding to the third target symbol in the second solution result according to the first mapping relationship, and can encrypt the fourth Gödel number, and sends a third encryption result corresponding to the fourth Gödel number to the edge computing node. The edge computing node can determine the third encryption result and the second encryption result calculated by itself, and thus determine the authentication result between the Internet of Things device and the edge computing node.
[0114] Optionally, the Internet of Things device can process the fourth Gödel number by using a digital signature algorithm to obtain a second digital signature P2, and send the second digital signature to the edge computing node. The edge computing node can determine whether there is a hit in the sequence of the first digital signature P1 and the second digital signature P2, and if there is a hit, it can be determined that the authentication between the Internet of Things device and the edge computing node is passed.
[0115] In addition, the Internet of Things device can process the third encryption result by using a digital signature algorithm to obtain a second digital signature P2, and send the second digital signature to the edge computing node. The edge computing node can determine whether there is a hit in the sequence of the first digital signature P1 and the second digital signature P2, and if there is a hit, it can be determined that the authentication between the Internet of Things device and the edge computing node is passed. At this time, the first digital signature P1 is the first digital signature P1 obtained by the edge computing node by processing the second encryption result by using a digital signature algorithm.
[0116] In addition, the Internet of Things device and the edge computing node can agree to use the second solution result as a key generation seed, and then encrypt the key generation seed according to an encryption algorithm agreed by the Internet of Things device and the edge computing node to obtain a target key. Before the security center next time issues a new first mapping relationship, the Internet of Things device and the edge computing node can use the target key to encrypt and decrypt the message for communication.
[0117] In the embodiment, by obtaining the first solution result corresponding to the preset proposition, determining the second Gödel number corresponding to the second target symbol in the first solution result according to the first mapping relationship, encrypting the second Gödel number to obtain the second encryption result corresponding to the second Gödel number, and determining the authentication result between the Internet of Things device and the edge computing node based on the second encryption result and the third encryption result, the accuracy of the authentication result can be improved.
[0118] In one example embodiment, the present embodiment relates to a possible implementation of how to determine the authentication result between the IoT device and the edge computing node based on the second encryption result and the third encryption result, and the S504 comprises the following two cases based on the above embodiment:
[0119] Case one, if the second encryption result and the third encryption result are consistent, it is determined that the authentication result is passed.
[0120] Case two, if the second encryption result and the third encryption result are inconsistent, it is determined that the authentication result is not passed.
[0121] In the embodiment of the present application, a method for determining the authentication result between the IoT device and the edge computing node is provided, which can determine whether the authentication result is passed through the consistency of the second encryption result and the third encryption result. It can also be that the edge computing node can determine whether there is a hit in the sequence of the second encryption result calculated by itself and the third encryption result, and if there is a hit, it can be determined that the IoT device and the edge computing node are authenticated.
[0122] In the embodiment, the second encryption result and the third encryption result are compared to determine whether the authentication result is passed. Since the second encryption result and the third encryption result are both encryption results corresponding to the solution of the preset proposition, it is equivalent to not only determining whether the edge computing terminal is feasible by the IoT device using the related information of the solution of the preset proposition, but also determining by the edge computing node using the related information of the solution of the preset proposition, so that the security of the authentication can be further improved.
[0123] In one example embodiment, as shown in Figure 6 , a communication authentication method is provided, which is applied to the IoT device 102 in Figure 1 for example, and comprises the following steps:
[0124] S601, sending a connection request to an edge computing node.
[0125] Corresponding to the foregoing embodiment, when the IoT device is ready to communicate with the edge computing node, the IoT device will usually send a connection request to the edge computing node.
[0126] S602, receiving a first encryption result sent by the edge computing node; the first encryption result is obtained by the edge computing node encrypting a first Gödel number, and the first Gödel number is a Gödel number corresponding to a first target symbol determined by the edge computing node based on a first mapping relationship; the first mapping relationship includes the mapping relationship between different symbols and different Gödel number symbols.
[0127] In the embodiment of the present application, the edge computing node converts the preset proposition into a mathematical definition, and then can obtain the symbol corresponding to the mathematical definition, that is, the first target symbol. The edge computing node can determine the first Godel symbol corresponding to the first target symbol according to the mapping relationship between different symbols and different Godel symbols, and can process the first Godel symbol by using the Godel numbering method to obtain the first Godel number. The edge computing node can encrypt the first Godel number to obtain the first encryption result. The edge computing node sends the first encryption result to the Internet of Things device. Therefore, the Internet of Things device can receive the first encryption result sent by the edge computing node. The encryption algorithm used in the encryption process can be a symmetric encryption algorithm or an asymmetric encryption algorithm, such as SM2, SM4, AES, etc.
[0128] S603, decrypting the first encryption result sent by the edge computing node to obtain a third Godel number.
[0129] S604, determining a restoration result corresponding to the third Godel number according to the first mapping relationship.
[0130] In the embodiment of the present application, the third Godel number can be processed by using the Godel numbering method to obtain the second Godel symbol corresponding to the third Godel number. According to the mapping relationship between different symbols and different Godel symbols in the first mapping relationship, the restoration result corresponding to the second Godel symbol can be obtained, that is, the restoration result corresponding to the third Godel number.
[0131] S605, determining an authentication result between the Internet of Things device and the edge computing node based on the restoration result corresponding to the third Godel number.
[0132] In the embodiment of the present application, it can be verified whether the restoration result has mathematical meaning. If it has mathematical meaning, it can be verified whether the restoration result can be solved within a preset time. If the restoration result cannot be solved within the preset time, it is determined that the authentication result between the Internet of Things device and the edge computing node is authentication failure.
[0133] In the embodiment, the connection request is sent to the edge computing node, the first encryption result sent by the edge computing node is received, the first encryption result sent by the edge computing node is decrypted to obtain the third Gödel number, the reduction result corresponding to the third Gödel number is determined according to the first mapping relationship, and the authentication result between the Internet of Things device and the edge computing node is determined based on the reduction result corresponding to the third Gödel number. Compared with the method of performing the encryption and decryption communication authentication by means of the remote cloud computing center to assist the Internet of Things device and the edge computing node to establish the secure communication, the method provided in the embodiment can complete the encryption and decryption communication authentication without the remote cloud computing center, and only the edge computing node and the Internet of Things device are used. Since the communication authentication can be completed without the external device, the complexity of the communication authentication is reduced.
[0134] In one example embodiment, as shown in Figure 7 The embodiment relates to a possible implementation manner of how to determine the reduction result corresponding to the third Gödel number according to the first mapping relationship. Based on the above embodiment, the S604 includes:
[0135] S701, decomposing the third Gödel number to obtain the second Gödel symbol corresponding to the third Gödel number.
[0136] In the embodiment, the third Gödel number can be prime factor decomposed according to the arithmetic principle to obtain the second Gödel symbol corresponding to the third Gödel number.
[0137] S702, determining the reduction result corresponding to the third Gödel number based on the second Gödel symbol and the first mapping relationship.
[0138] In the embodiment, the mapping relationship between different symbols and different Gödel symbols in the first mapping relationship can be used to obtain the reduction result corresponding to the second Gödel symbol, that is, the reduction result corresponding to the third Gödel number. The reduction result can be in the form of a mathematical definition.
[0139] In the embodiment, the third Gödel number is decomposed to obtain the second Gödel symbol corresponding to the third Gödel number. Therefore, based on the second Gödel symbol and the first mapping relationship, the reduction result corresponding to the third Gödel number can be determined, and the efficiency of the communication authentication is improved.
[0140] In one example embodiment, as shown in Figure 8 The embodiment relates to a possible implementation manner of how to determine the reduction result corresponding to the third Gödel number according to the first mapping relationship. Based on the above embodiment, the S604 includes:
[0141] S801, verify whether the reduction result has mathematical meaning.
[0142] In the embodiment of the present application, verifying whether the reduction result has mathematical meaning is to verify whether the syntax of the mathematical definition formula is legal. For example, the legality of the syntax can be determined by a preset check index.
[0143] S802, verify whether the reduction result can be solved within a preset time.
[0144] In this way, it can be determined whether the reduction result can be solved within a preset time by attempting to solve the mathematical definition formula within the preset time.
[0145] S803, if the reduction result does not have mathematical meaning, or the reduction result cannot be solved within a preset time, it is determined that the authentication result between the Internet of Things device and the edge computing node is authentication failure.
[0146] In the embodiment of the present application, if the reduction result does not have mathematical meaning, it can be determined that the edge computing node is not trusted, and then it can be determined that the authentication result between the Internet of Things device and the edge computing node is authentication failure. If the reduction result has mathematical meaning, but the reduction result cannot be solved within a preset time, it can also be determined that the edge computing node is not trusted, and then it can be determined that the authentication result between the Internet of Things device and the edge computing node is authentication failure.
[0147] In the embodiment, by verifying whether the reduction result has mathematical meaning, verifying whether the reduction result can be solved within a preset time, if the reduction result does not have mathematical meaning, or the reduction result cannot be solved within a preset time, it is determined that the authentication result between the Internet of Things device and the edge computing node is authentication failure. Since the feasibility of the edge computing terminal can be determined by the Internet of Things device using the preset proposition related information, the security of the authentication can be improved.
[0148] In one exemplary embodiment, as shown in Figure 9 the method further comprises the following steps:
[0149] S901, obtaining a second solving result corresponding to the reduction result.
[0150] In the embodiment of the present application, the reduction result can be solved to obtain a second solving result corresponding to the reduction result.
[0151] S902, according to the first mapping relationship, determining a fourth Gödel number corresponding to a third target symbol in the second solving result.
[0152] In the embodiment of the present application, the fourth Gödel symbol corresponding to the third target symbol can be obtained according to the relationship between different symbols and different Gödel symbols in the first mapping relationship. Further, the fourth Gödel symbol can be processed by using the Gödel numbering method to obtain the fourth Gödel number.
[0153] S903, the fourth Gödel number corresponding to the third encryption result is sent to the edge computing node; the third encryption result is used for the edge computing node to determine the authentication result between the Internet of Things device and the edge computing node according to the third encryption result.
[0154] In the embodiment of the present application, the fourth Gödel number corresponding to the third encryption result can be sent to the edge computing node. Therefore, the edge computing node can determine that the comparison result of the third encryption result and the second encryption result calculated by itself determines that the authentication of the Internet of Things device and the edge computing node is passed.
[0155] Optionally, the Internet of Things device can process the fourth Gödel number by using a digital signature algorithm to obtain a second digital signature P2, and send the second digital signature to the edge computing node. The edge computing node can determine whether there is a hit in the sequence of the first digital signature P1 and the second digital signature P2. If there is a hit, it can be determined that the authentication of the Internet of Things device and the edge computing node is passed.
[0156] Further, the Internet of Things device can process the third encryption result by using a digital signature algorithm to obtain a second digital signature P2, and send the second digital signature to the edge computing node. The edge computing node can determine whether there is a hit in the sequence of the first digital signature P1 and the second digital signature P2. If there is a hit, it can be determined that the authentication of the Internet of Things device and the edge computing node is passed. At this time, the first digital signature P1 is the first digital signature P1 obtained by processing the second encryption result by the edge computing node using the digital signature algorithm.
[0157] And, the Internet of Things device and the edge computing node can agree to use the second solution result as a key generation seed, and then encrypt the key generation seed according to the encryption algorithm agreed by the Internet of Things device and the edge computing node to obtain a target key. Before the security center issues a new first mapping relationship next time, the Internet of Things device and the edge computing node can use the target key to encrypt and decrypt the message for communication.
[0158] In this embodiment, by obtaining the second solving result corresponding to the reduction result, the fourth Gödel number corresponding to the third target symbol in the second solving result is determined according to the first mapping relationship, so that the third encrypted result corresponding to the fourth Gödel number can be sent to the edge computing node, that is, the third encrypted result used to determine the authentication result between the Internet of Things device and the edge computing node. Since the edge computing node can not only determine whether the edge computing terminal is feasible by using the preset proposition related information through the Internet of Things device, but also can be determined through the edge computing node by using the solution of the preset proposition related information, the security of the authentication can be further improved.
[0159] In one detailed embodiment, as shown in Figure 10 the method comprises the following steps:
[0160] S1001, the Internet of Things device sends a connection request to the edge computing node.
[0161] S1002, the edge computing node receives the connection request sent by the Internet of Things device.
[0162] S1003, the edge computing node determines the first Gödel number corresponding to the first target symbol according to the first mapping relationship.
[0163] S1004, the edge computing node sends the first encrypted result corresponding to the first Gödel number to the Internet of Things device.
[0164] S1005, the Internet of Things device receives the first encrypted result sent by the edge computing node.
[0165] S1006, the Internet of Things device decrypts the first encrypted result sent by the edge computing node to obtain the third Gödel number.
[0166] S1007, the Internet of Things device determines the reduction result corresponding to the third Gödel number according to the first mapping relationship.
[0167] S1008, if the reduction result has no mathematical meaning, or the reduction result cannot be solved within a preset time, the Internet of Things device determines that the authentication result between the Internet of Things device and the edge computing node is authentication failure.
[0168] S1009, the Internet of Things device obtains the second solving result corresponding to the reduction result.
[0169] S1010, the Internet of Things device determines the fourth Gödel number corresponding to the third target symbol in the second solving result according to the first mapping relationship.
[0170] S1011, the Internet of Things device sends the third encrypted result corresponding to the fourth Gödel number to the edge computing node.
[0171] S1012, the edge computing node determines an authentication result between the Internet of Things device and the edge computing node based on the second encryption result and the third encryption result.
[0172] The second encryption result is that the edge computing node first obtains a first solving result corresponding to the preset proposition, determines a second Gödel number corresponding to a second target symbol in the first solving result according to the first mapping relationship, and finally encrypts the second Gödel number to obtain the second encryption result corresponding to the second Gödel number.
[0173] In the above embodiments, compared with the method of performing the encryption and decryption communication authentication by the remote cloud computing center to assist the Internet of Things device and the edge computing node to establish secure communication, the method provided in the embodiments of the present application can complete the encryption and decryption communication authentication without the aid of the remote cloud computing center, and only the edge computing node and the Internet of Things device are used. Since the communication authentication can be completed without the aid of external devices, the complexity of the communication authentication is reduced. In addition, since the second encryption result and the third encryption result are both encryption results corresponding to the solving result of the preset proposition, it is equivalent to not only being able to determine whether the edge computing terminal is feasible by the Internet of Things device using the related information of the preset proposition, but also being able to determine by the edge computing node using the related information of the solution of the preset proposition, so that the security of the authentication can be further improved.
[0174] It should be understood that, although each step in the flowchart involved in each of the above embodiments is displayed in sequence according to the arrow, these steps are not necessarily executed in sequence according to the arrow. Unless otherwise specified herein, the execution of these steps has no strict order limitation, and these steps can be executed in other orders. Moreover, at least part of the steps in the flowchart involved in each of the above embodiments can include multiple steps or multiple stages, which are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily sequential, but can be alternately executed with at least part of other steps or steps or stages in other steps.
[0175] Based on the same inventive concept, the embodiments of the present application also provide a communication authentication device for implementing the above-mentioned communication authentication method. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme described in the above method, so the specific limitations in one or more communication authentication device embodiments provided below can refer to the limitations of the communication authentication method in the above text, and will not be repeated here.
[0176] In one exemplary embodiment, as Figure 11As shown, a communication authentication apparatus 1100 is provided, arranged at an edge computing node, comprising: a receiving module 1101, a first determining module 1102 and a sending module 1103, wherein:
[0177] The receiving module 1101 is configured to receive a connection request sent by an Internet of Things device.
[0178] The first determining module 1102 is configured to determine a first Gödel number corresponding to a first target symbol according to a first mapping relationship; the first mapping relationship comprises a mapping relationship between different symbols and different Gödel number symbols, and the first target symbol is determined according to a preset proposition.
[0179] The sending module 1103 is configured to send a first encryption result corresponding to the first Gödel number to the Internet of Things device; the first encryption result is used for the Internet of Things device to determine an authentication result between the Internet of Things device and the edge computing node.
[0180] In an exemplary embodiment, the first determining module 1102 comprises:
[0181] A conversion unit is configured to convert the preset proposition into a mathematical definition formula.
[0182] A splitting processing unit is configured to split process the mathematical definition formula to obtain the first target symbol.
[0183] A first determining unit is configured to determine the first Gödel number corresponding to the preset proposition based on the first target symbol and the first mapping relationship.
[0184] In an exemplary embodiment, the determining unit is specifically configured to determine the first Gödel symbol corresponding to the preset proposition based on the first target symbol and the first mapping relationship; and determine the first Gödel number according to the first Gödel symbol.
[0185] In an exemplary embodiment, the communication authentication apparatus 1100 further comprises:
[0186] An obtaining module is configured to obtain a first solving result corresponding to the preset proposition.
[0187] A second determining module is configured to determine a second Gödel number corresponding to a second target symbol in the first solving result according to the first mapping relationship.
[0188] A third determining module is configured to encrypt the second Gödel number to obtain a second encryption result corresponding to the second Gödel number.
[0189] A fourth determining module is configured to determine an authentication result between the Internet of Things device and the edge computing node based on the second encryption result and a third encryption result; the third encryption result is determined by the Internet of Things device based on the first encryption result.
[0190] In an example embodiment, the fourth determining module comprises:
[0191] The second determining unit is configured to determine that the authentication result is passed if the second encryption result and the third encryption result are consistent.
[0192] The third determining unit is configured to determine that the authentication result is failed if the second encryption result and the third encryption result are inconsistent.
[0193] In an example embodiment, as shown in Figure 12 A communication authentication apparatus 1200 is provided, which is arranged in an Internet of Things device and comprises a sending module 1201, a receiving module 1202, a decryption processing module 1203, a first determining module 1204, and a second determining module 1205, wherein:
[0194] The sending module 1201 is configured to send a connection request to an edge computing node.
[0195] The receiving module 1202 is configured to receive a first encryption result sent by the edge computing node, wherein the first encryption result is obtained by encrypting a first Gödel number by the edge computing node, and the first Gödel number is a Gödel number corresponding to a first target symbol determined by the edge computing node based on a first mapping relationship, and the first mapping relationship comprises a mapping relationship between different symbols and different Gödel number symbols.
[0196] The decryption processing module 1203 is configured to perform decryption processing on the first encryption result sent by the edge computing node to obtain a third Gödel number.
[0197] The first determining module 1204 is configured to determine a restoration result corresponding to the third Gödel number according to the first mapping relationship.
[0198] The second determining module 1205 is configured to determine an authentication result between the Internet of Things device and the edge computing node based on the restoration result corresponding to the third Gödel number.
[0199] In an example embodiment, the first determining module 1204 comprises:
[0200] The first determining unit is configured to perform decomposition processing on the third Gödel number to obtain a second Gödel symbol corresponding to the third Gödel number.
[0201] The second determining unit is configured to determine the restoration result corresponding to the third Gödel number based on the second Gödel symbol and the first mapping relationship.
[0202] In an example embodiment, the second determining module 1205 comprises:
[0203] The first verification unit is configured to verify whether the restoration result has mathematical meaning.
[0204] The second verification unit is configured to verify whether the reduction result is solvable within a preset time.
[0205] The third determination unit is configured to determine that the authentication result between the Internet of Things device and the edge computing node is not passed if the reduction result is not mathematically meaningful or the reduction result is not solvable within the preset time.
[0206] In an exemplary embodiment, the communication authentication apparatus 1200 further includes:
[0207] The acquisition module is configured to acquire a second solution result corresponding to the reduction result.
[0208] The third determination module is configured to determine, according to the first mapping relationship, a fourth Gödel number corresponding to a third target symbol in the second solution result.
[0209] The second sending module is configured to send, to the edge computing node, a third encrypted result corresponding to the fourth Gödel number; the third encrypted result is used by the edge computing node to determine the authentication result between the Internet of Things device and the edge computing node according to the third encrypted result.
[0210] The above modules can be all or partially implemented by software, hardware, and combinations thereof. The above modules can be embedded in or independent of a processor in a computer device in a hardware form, or stored in a memory in the computer device in a software form, so as to be called and executed by a processor to perform operations corresponding to the above modules.
[0211] In an exemplary embodiment, a computer device is provided, which can be a terminal, and an internal structure diagram of the computer device can be as shown in Figure 13The computer device includes a processor, a memory, an input / output interface, a communication interface, a display unit and an input device. The processor, the memory and the input / output interface are connected through a system bus, and the communication interface, the display unit and the input device are connected to the system bus through the input / output interface. The processor of the computer device is configured to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operating system and the computer program in the non-volatile storage medium to run. The input / output interface of the computer device is configured to exchange information between the processor and external devices. The communication interface of the computer device is configured to perform wired or wireless communication with external terminals. The wireless communication can be achieved through WIFI, mobile cellular network, NFC (Near Field Communication) or other technologies. The computer program is executed by the processor to implement a communication authentication method. The display unit of the computer device is configured to form a visually visible picture, which can be a display screen, a projection device or a virtual reality imaging device. The display screen can be a liquid crystal display screen or an electronic ink display screen. The input device of the computer device can be a touch layer overlaid on the display screen, or a key, trackball or touchpad arranged on the shell of the computer device, or an external keyboard, touchpad or mouse, etc.
[0212] Those skilled in the art can understand that Figure 13 The structure shown in the figure is only a block diagram of part of the structure related to the scheme of the present application, and does not constitute a limitation on the computer device to which the scheme of the present application is applied. The specific computer device can include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.
[0213] In one exemplary embodiment, a computer device is provided, including a memory and a processor, the memory storing a computer program, and the processor executing the computer program to implement the following steps:
[0214] receiving a connection request sent by an Internet of Things device;
[0215] determining a first target symbol corresponding to a first target symbol according to a first mapping relationship; the first mapping relationship includes a mapping relationship between different symbols and different Godel numbers, and the first target symbol is determined according to a preset proposition;
[0216] sending a first encryption result corresponding to the first Godel number to the Internet of Things device; the first encryption result is used for the Internet of Things device to determine an authentication result between the Internet of Things device and the edge computing node.
[0217] In one embodiment, the processor executing the computer program further implements the following steps:
[0218] convert the preset proposition into a mathematical definition formula;
[0219] split the mathematical definition formula to obtain a first target symbol;
[0220] determine a first Gödel number corresponding to the preset proposition based on the first target symbol and a first mapping relationship.
[0221] In one embodiment, the processor, when executing the computer program, further implements the following steps:
[0222] determine a first Gödel symbol corresponding to the preset proposition based on the first target symbol and the first mapping relationship;
[0223] determine a first Gödel number according to the first Gödel symbol.
[0224] In one embodiment, the processor, when executing the computer program, further implements the following steps:
[0225] obtain a first solving result corresponding to the preset proposition;
[0226] determine a second Gödel number corresponding to a second target symbol in the first solving result according to the first mapping relationship;
[0227] encrypt the second Gödel number to obtain a second encryption result corresponding to the second Gödel number;
[0228] determine an authentication result between the Internet of Things device and the edge computing node based on the second encryption result and a third encryption result; the third encryption result is determined by the Internet of Things device based on the first encryption result.
[0229] In one embodiment, the processor, when executing the computer program, further implements the following steps:
[0230] if the second encryption result and the third encryption result are consistent, it is determined that the authentication result is authentication passed;
[0231] if the second encryption result and the third encryption result are inconsistent, it is determined that the authentication result is authentication failed.
[0232] In one embodiment, the processor, when executing the computer program, further implements the following steps:
[0233] send a connection request to the edge computing node;
[0234] receive the first encryption result sent by the edge computing node; the first encryption result is obtained by the edge computing node after encrypting the first Gödel number, the first Gödel number is a Gödel number corresponding to the first target symbol determined by the edge computing node based on the first mapping relationship, and the first mapping relationship includes the mapping relationship between different symbols and different Gödel number symbols;
[0235] decrypting the first encrypted result sent by the edge computing node to obtain a third Gödel number;
[0236] According to the first mapping relationship, a restoration result corresponding to the third Gödel number is determined.
[0237] Based on the restoration result corresponding to the third Gödel number, an authentication result between the Internet of Things device and the edge computing node is determined.
[0238] In one embodiment, the processor, when executing the computer program, also implements the following steps:
[0239] The third Gödel number is decomposed to obtain a second Gödel symbol corresponding to the third Gödel number.
[0240] Based on the second Gödel symbol and the first mapping relationship, the restoration result corresponding to the third Gödel number is determined.
[0241] In one embodiment, the processor, when executing the computer program, also implements the following steps:
[0242] Verify whether the restoration result has mathematical meaning.
[0243] Verify whether the restoration result can be solved within a preset time.
[0244] If the restoration result does not have mathematical meaning, or the restoration result cannot be solved within the preset time, it is determined that the authentication result between the Internet of Things device and the edge computing node is authentication failure.
[0245] In one embodiment, the processor, when executing the computer program, also implements the following steps:
[0246] A second solution result corresponding to the restoration result is obtained.
[0247] According to the first mapping relationship, a fourth Gödel number corresponding to a third target symbol in the second solution result is determined.
[0248] The fourth Gödel number corresponding to the third encrypted result is sent to the edge computing node; the third encrypted result is used for the edge computing node to determine the authentication result between the Internet of Things device and the edge computing node according to the third encrypted result.
[0249] In one embodiment, a computer readable storage medium is provided, and the computer readable storage medium stores a computer program. The computer program is executed by a processor to implement the following steps:
[0250] A connection request sent by an Internet of Things device is received.
[0251] According to the first mapping relationship, a first target symbol corresponds to a first Godel number; the first mapping relationship includes the mapping relationship between different symbols and different Godel number symbols, and the first target symbol is determined according to a preset proposition;
[0252] The first Godel number corresponds to a first encryption result is sent to the Internet of Things device; the first encryption result is used for the Internet of Things device to determine the authentication result between the Internet of Things device and the edge computing node.
[0253] In one embodiment, the computer program is executed by the processor to further implement the following steps:
[0254] The preset proposition is converted into a mathematical definition formula;
[0255] The mathematical definition formula is split to obtain the first target symbol;
[0256] Based on the first target symbol and the first mapping relationship, the first Godel number corresponding to the preset proposition is determined.
[0257] In one embodiment, the computer program is executed by the processor to further implement the following steps:
[0258] Based on the first target symbol and the first mapping relationship, the first Godel symbol corresponding to the preset proposition is determined;
[0259] According to the first Godel symbol, the first Godel number is determined.
[0260] In one embodiment, the computer program is executed by the processor to further implement the following steps:
[0261] Obtain the first solving result corresponding to the preset proposition;
[0262] According to the first mapping relationship, a second target symbol in the first solving result corresponds to a second Godel number;
[0263] The second Godel number is encrypted to obtain a second encryption result corresponding to the second Godel number;
[0264] Based on the second encryption result and the third encryption result, the authentication result between the Internet of Things device and the edge computing node is determined; the third encryption result is determined by the Internet of Things device based on the first encryption result.
[0265] In one embodiment, the computer program is executed by the processor to further implement the following steps:
[0266] If the second encryption result and the third encryption result are consistent, it is determined that the authentication result is authentication passed;
[0267] If the second encryption result and the third encryption result are inconsistent, it is determined that the authentication result is authentication failed.
[0268] In one embodiment, the computer program, when executed by the processor, further implements the following steps:
[0269] sending a connection request to the edge computing node;
[0270] receiving a first encrypted result sent by the edge computing node; the first encrypted result is obtained by the edge computing node encrypting a first Gödel number determined by the edge computing node based on a first mapping relationship, the first mapping relationship including a mapping relationship between different symbols and different Gödel number symbols;
[0271] decrypting the first encrypted result sent by the edge computing node to obtain a third Gödel number;
[0272] determining a restoration result corresponding to the third Gödel number according to the first mapping relationship;
[0273] determining an authentication result between the Internet of Things device and the edge computing node based on the restoration result corresponding to the third Gödel number.
[0274] In one embodiment, the computer program, when executed by the processor, further implements the following steps:
[0275] decomposing the third Gödel number to obtain a second Gödel symbol corresponding to the third Gödel number;
[0276] determining the restoration result corresponding to the third Gödel number based on the second Gödel symbol and the first mapping relationship.
[0277] In one embodiment, the computer program, when executed by the processor, further implements the following steps:
[0278] verifying whether the restoration result has mathematical meaning;
[0279] verifying whether the restoration result can be solved within a preset time;
[0280] If the restoration result does not have mathematical meaning, or the restoration result cannot be solved within the preset time, it is determined that the authentication result between the Internet of Things device and the edge computing node is authentication failure.
[0281] In one embodiment, the computer program, when executed by the processor, further implements the following steps:
[0282] obtaining a second solving result corresponding to the restoration result;
[0283] determining a fourth Gödel number corresponding to a third target symbol in the second solving result according to the first mapping relationship;
[0284] The edge computing node is sent a third encryption result corresponding to a fourth Godel number; the third encryption result is used by the edge computing node to determine an authentication result between the Internet of Things device and the edge computing node according to the third encryption result.
[0285] In one embodiment, a computer program product is provided, comprising a computer program which, when executed by a processor, implements the following steps:
[0286] A connection request sent by the Internet of Things device is received.
[0287] According to the first mapping relationship, a first Godel number corresponding to a first target symbol is determined; the first mapping relationship includes a mapping relationship between different symbols and different Godel number symbols, and the first target symbol is determined according to a preset proposition;
[0288] The edge computing node is sent a third encryption result corresponding to a fourth Godel number; the third encryption result is used by the edge computing node to determine an authentication result between the Internet of Things device and the edge computing node according to the third encryption result.
[0289] In one embodiment, the computer program, when executed by the processor, further implements the following steps:
[0290] The preset proposition is converted into a mathematical definition formula;
[0291] The mathematical definition formula is split to obtain a first target symbol;
[0292] Based on the first target symbol and the first mapping relationship, a first Godel number corresponding to the preset proposition is determined.
[0293] In one embodiment, the computer program, when executed by the processor, further implements the following steps:
[0294] Based on the first target symbol and the first mapping relationship, a first Godel symbol corresponding to the preset proposition is determined;
[0295] The first Godel number is determined according to the first Godel symbol.
[0296] In one embodiment, the computer program, when executed by the processor, further implements the following steps:
[0297] A first solution result corresponding to the preset proposition is obtained;
[0298] According to the first mapping relationship, a second Godel number corresponding to a second target symbol in the first solution result is determined;
[0299] The second Godel number is encrypted to obtain a second encryption result corresponding to the second Godel number;
[0300] determine the authentication result between the IOT device and the edge computing node based on the second encryption result and the third encryption result; the third encryption result is determined by the IOT device based on the first encryption result.
[0301] In one embodiment, the computer program, when executed by the processor, further implements the following steps:
[0302] If the second encryption result and the third encryption result are consistent, it is determined that the authentication result is passed;
[0303] If the second encryption result and the third encryption result are inconsistent, it is determined that the authentication result is not passed.
[0304] In one embodiment, the computer program, when executed by the processor, further implements the following steps:
[0305] sending a connection request to the edge computing node;
[0306] receiving the first encryption result sent by the edge computing node; the first encryption result is obtained by encrypting the first Godel number by the edge computing node, and the first Godel number is the Godel number corresponding to the first target symbol determined by the edge computing node based on the first mapping relationship; the first mapping relationship includes the mapping relationship between different symbols and different Godel number symbols;
[0307] decrypting the first encryption result sent by the edge computing node to obtain the third Godel number;
[0308] determining the restoration result corresponding to the third Godel number according to the first mapping relationship;
[0309] determining the authentication result between the IOT device and the edge computing node based on the restoration result corresponding to the third Godel number.
[0310] In one embodiment, the computer program, when executed by the processor, further implements the following steps:
[0311] decomposing the third Godel number to obtain the second Godel symbol corresponding to the third Godel number;
[0312] determining the restoration result corresponding to the third Godel number based on the second Godel symbol and the first mapping relationship.
[0313] In one embodiment, the computer program, when executed by the processor, further implements the following steps:
[0314] verifying whether the restoration result has mathematical meaning;
[0315] verifying whether the restoration result can be solved within a preset time;
[0316] If the reduction result does not have mathematical meaning, or the reduction result cannot be solved within the preset time, it is determined that the authentication result between the Internet of Things device and the edge computing node is not passed.
[0317] In one embodiment, the computer program, when executed by the processor, also implements the following steps:
[0318] Obtaining a second solving result corresponding to the reduction result;
[0319] According to the first mapping relationship, determining a fourth Gödel number corresponding to a third target symbol in the second solving result;
[0320] Sending a third encrypted result corresponding to the fourth Gödel number to the edge computing node; the third encrypted result is used for the edge computing node to determine the authentication result between the Internet of Things device and the edge computing node according to the third encrypted result.
[0321] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a non-volatile computer readable storage medium, and when the computer program is executed, the processes of the above-mentioned embodiments of the methods can be included. Any reference to memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile and volatile memory. The non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical storage, high-density embedded non-volatile memory, resistive memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric memory (FRAM), phase change memory (PCM), graphene memory, etc. The volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration but not limitation, the RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM), etc. The database involved in the embodiments provided in the present application can include at least one of a relational database and a non-relational database. The non-relational database can include a distributed database based on a block chain, etc., without being limited thereto. The processor involved in the embodiments provided in the present application can be a general-purpose processor, a central processing unit, a graphics processing unit, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., without being limited thereto.
[0322] Any combination of the technical features of the above embodiments can be made. In order to make the description simple, all possible combinations of the technical features in the above embodiments are not described, however, as long as the combination of the technical features does not exist, it should be considered as the scope of the present application.
[0323] The above embodiments only express several implementation manners of the present application, and the description is more specific and detailed, but it should not be understood as a limitation on the scope of the patent of the present application. It should be pointed out that for ordinary skilled in the art, without departing from the concept of the present application, a number of modifications and improvements can be made, which are within the scope of protection of the present application. Therefore, the protection scope of the present application should be subject to the appended claims.
Claims
1. A communication authentication method characterized by, The method applied to an edge computing node comprises: receiving a connection request sent by an Internet of Things device; determining a first target symbol corresponding to a first Gödel number according to a first mapping relationship; the first mapping relationship comprises a mapping relationship between different symbols and different Gödel number symbols, and the first target symbol is determined according to a preset proposition; sending a first encryption result corresponding to the first Gödel number to the Internet of Things device; the first encryption result is used for determining an authentication result between the Internet of Things device and the edge computing node by the Internet of Things device.
2. The method of claim 1, wherein, The method further comprises: obtaining a first solving result corresponding to the preset proposition; determining a second target symbol corresponding to a second Gödel number according to the first mapping relationship in the first solving result; encrypting the second Gödel number to obtain a second encryption result corresponding to the second Gödel number; 3. The method of claim 2, wherein, determining an authentication result between the Internet of Things device and the edge computing node based on the second encryption result and a third encryption result; the third encryption result is determined by the Internet of Things device based on the first encryption result. The method further comprises: if the second encryption result and the third encryption result are consistent, determining that the authentication result is authentication passed; 4. The method of claim 1, wherein, if the second encryption result and the third encryption result are inconsistent, determining that the authentication result is authentication failed. The method applied to an Internet of Things device comprises: sending a connection request to an edge computing node; receiving a first encryption result sent by the edge computing node; the first encryption result is obtained by the edge computing node by encrypting a first Gödel number; the first Gödel number is a Gödel number corresponding to a first target symbol determined by the edge computing node based on a first mapping relationship; the first mapping relationship comprises a mapping relationship between different symbols and different Gödel number symbols; decrypting the first encryption result sent by the edge computing node to obtain a third Gödel number; 5. The method of claim 4, wherein, determining a restoration result corresponding to the third Gödel number according to the first mapping relationship; determining an authentication result between the Internet of Things device and the edge computing node based on the restoration result corresponding to the third Gödel number. The method further comprises:
6. A communication authentication method characterized by, if the second encryption result and the third encryption result are consistent, determining that the authentication result is authentication passed; if the second encryption result and the third encryption result are inconsistent, determining that the authentication result is authentication failed. 7. The method of claim 6, wherein, The third Gödel number is decomposed to obtain a second Gödel symbol corresponding to the third Gödel number; Based on the second Gödel symbol and the first mapping relationship, a reduction result corresponding to the third Gödel number is determined.
8. The method of claim 6, wherein, The authentication result between the Internet of Things device and the edge computing node is determined based on the reduction result corresponding to the third Gödel number, including: Verify whether the reduction result has mathematical meaning; Verify whether the reduction result can be solved within a preset time; If the reduction result does not have mathematical meaning, or the reduction result cannot be solved within a preset time, it is determined that the authentication result between the Internet of Things device and the edge computing node is authentication failure.
9. The method of claim 8, wherein, The method further comprises: Obtaining a second solving result corresponding to the reduction result; According to the first mapping relationship, a fourth Gödel number corresponding to a third target symbol in the second solving result is determined; The fourth Gödel number corresponding to the third encryption result is sent to the edge computing node; the third encryption result is used for the edge computing node to determine the authentication result between the Internet of Things device and the edge computing node according to the third encryption result.
10. A communication authentication apparatus characterized by comprising: The device is arranged at the edge computing node, and the device comprises: The receiving module is configured to receive a connection request sent by an Internet of Things device; The first determining module is configured to determine a first Gödel number corresponding to a first target symbol according to a first mapping relationship; the first mapping relationship comprises a mapping relationship between different symbols and different Gödel number symbols, and the first target symbol is determined according to a preset proposition; The sending module is configured to send a first encryption result corresponding to the first Gödel number to the Internet of Things device; the first encryption result is used for the Internet of Things device to determine an authentication result between the Internet of Things device and the edge computing node.
11. A communication authentication apparatus characterized by comprising: The device is arranged at the Internet of Things device, and the device comprises: The first sending module is configured to send a connection request to an edge computing node; The receiving module is configured to receive a first encryption result sent by the edge computing node; the first encryption result is obtained by the edge computing node after encrypting a first Gödel number, the first Gödel number is a Gödel number corresponding to a first target symbol determined by the edge computing node based on a first mapping relationship, and the first mapping relationship comprises a mapping relationship between different symbols and different Gödel number symbols; The decryption processing module is configured to decrypt the first encryption result sent by the edge computing node to obtain a third Gödel number; The first determining module is configured to determine a reduction result corresponding to the third Gödel number according to the first mapping relationship; The second determining module is configured to determine an authentication result between the Internet of Things device and the edge computing node based on the reduction result corresponding to the third Gödel number.
12. A computer device comprising a memory and a processor, the memory storing a computer program, characterized in that, The processor executes the computer program to realize the steps of the method in any one of claims 1 to 9.
13. A computer readable storage medium having stored thereon a computer program, characterized in that, The computer program is executed by the processor to realize the steps of the method in any one of claims 1 to 9.
14. A computer program product comprising a computer program, characterized in that, The computer program is executed by the processor to realize the steps of the method in any one of claims 1 to 9.
Citation Information
Patent Citations
Data verification method and safety multi-party calculation system
CN108683669A
Communication method and communications apparatus
US20230080139A1