5G user identity authentication method, device, equipment and medium based on header enhancement

Abstract

The embodiment of the present invention discloses a 5G user identity authentication method, device, equipment and medium based on header enhancement, the method comprising: if an intranet access request for accessing an intranet service sent by an IoT terminal is received, parsing the intranet access request to obtain identification information of the IoT terminal; confirming whether header enhancement information matching the identification information is recorded; if header enhancement information matching the identification information is recorded, allowing the IoT terminal to access the intranet service. The present invention can prevent illegal users from accessing intranet services and eliminate security risks.

Description

Technical Field

[0001] The present invention relates to the field of Internet of Things technology, and in particular to a 5G user identity authentication method, device, equipment and medium based on header enhancement. Background Art

[0002] With the popularity of remote work and the demand for office efficiency, more and more companies allow employees' mobile terminals to access the corporate intranet to access and operate intranet services. However, due to the privacy of mobile terminals and the openness of remote access, there are security threats when mobile terminals directly access intranet services. For example, mobile terminals access intranet services in abnormal physical areas, such as outside the enterprise campus, or unauthorized terminals abuse legitimate SIM cards to access intranet services. In other words, there is currently a lack of effective authentication methods for mobile terminals to access intranet services. Summary of the invention

[0003] The embodiments of the present invention provide a 5G user identity authentication method, device, equipment and medium based on header enhancement, which aims to solve the problem of security risks in the current mobile terminal access to intranet services.

[0004] In a first aspect, an embodiment of the present invention provides a 5G user identity authentication method based on header enhancement, the method comprising:

[0005] If an intranet access request for accessing an intranet service sent by an IoT terminal is received, the intranet access request is parsed to obtain identification information of the IoT terminal;

[0006] confirming whether header enhancement information matching the identification information is recorded;

[0007] If header enhancement information matching the identification information is recorded, the Internet of Things terminal is allowed to access the intranet service.

[0008] In a second aspect, an embodiment of the present invention further provides a 5G user identity authentication device based on header enhancement, the device comprising:

[0009] A first parsing unit is configured to, upon receiving an intranet access request for accessing an intranet service sent by an Internet of Things terminal, parse the intranet access request to obtain identification information of the Internet of Things terminal;

[0010] A first confirmation unit, used to confirm whether header enhancement information matching the identification information is recorded;

[0011] The first passing unit is used to allow the Internet of Things terminal to access the intranet service if header enhancement information matching the identification information is recorded.

[0012] In a third aspect, an embodiment of the present invention further provides a computer device, which includes a memory and a processor, wherein a computer program is stored in the memory, and the processor implements the above method when executing the computer program.

[0013] In a fourth aspect, an embodiment of the present invention further provides a computer-readable storage medium, wherein the storage medium stores a computer program, and the computer program can implement the above method when executed by a processor.

[0014] The embodiment of the present invention provides a 5G user identity authentication method, device, equipment and medium based on header enhancement. Among them, the method includes: if an intranet access request for accessing an intranet service sent by an Internet of Things terminal is received, the intranet access request is parsed to obtain the identification information of the Internet of Things terminal; confirm whether the header enhancement information matching the identification information is recorded; if the header enhancement information matching the identification information is recorded, the Internet of Things terminal is allowed to access the intranet service. When receiving an intranet access request sent by a user through a 5G Internet of Things terminal, the embodiment of the present invention can parse the intranet access request to obtain the identification information of the Internet of Things terminal, and confirm whether the header enhancement information matching the identification information is recorded. If the header enhancement information matching the identification information is recorded, the Internet of Things terminal is allowed to access the intranet service. By authenticating the Internet of Things terminal through the header enhancement information, security risks can be eliminated and illegal users can be prevented from accessing the intranet service. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying any creative work.

[0016] Figure 1 It is a flowchart of a 5G user identity authentication method based on header enhancement provided by an embodiment of the present invention;

[0017] Figure 2 It is a block diagram of a 5G user identity authentication method based on header enhancement provided by an embodiment of the present invention;

[0018] Figure 3 It is an authentication flow chart of a 5G user identity authentication method based on header enhancement provided in an embodiment of the present invention;

[0019] Figure 4 It is a schematic block diagram of a 5G user identity authentication device based on header enhancement provided by an embodiment of the present invention;

[0020] Figure 5It is a schematic block diagram of a computer device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0021] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0022] It should be understood that when used in this specification and the appended claims, the terms "include" and "comprises" indicate the presence of described features, integers, operations, elements and / or components, but do not exclude the presence or addition of one or more other features, integers, operations, elements, components and / or groups thereof.

[0023] It should also be understood that the terms used in this specification of the present invention are only for the purpose of describing specific embodiments and are not intended to limit the present invention. As used in the specification of the present invention and the appended claims, unless the context clearly indicates otherwise, the singular forms of "a", "an" and "the" are intended to include plural forms. It should also be further understood that the term "and / or" used in the specification of the present invention and the appended claims refers to any combination of one or more of the associated listed items and all possible combinations, and includes these combinations.

[0024] See also Figure 1 , Figure 1 The flowchart of the 5G user identity authentication method based on header enhancement provided by an embodiment of the present invention is shown in FIG. The 5G user identity authentication method based on header enhancement provided by an embodiment of the present invention is applied to a computer device to authenticate a 5G user accessing an intranet service through an IoT terminal, thereby improving the security of the IoT terminal accessing an intranet service. Figure 1 As shown, the method includes steps S110 to S130.

[0025] S110: If an intranet access request for accessing an intranet service sent by an Internet of Things terminal is received, the intranet access request is parsed to obtain identification information of the Internet of Things terminal.

[0026] In the embodiment of the present invention, the IoT terminal generally refers to a 5G terminal, such as a mobile phone, and a user can send an intranet access request through the IoT terminal to access the intranet service. When the intranet access request of the IoT terminal is received, the intranet access request is parsed to obtain the identification information of the IoT terminal.

[0027] The identification information is used to identify different IoT terminals, which may include identification number, IP address, device code and other information. For example, if a user sends an intranet access request via a mobile phone, the identification information may include the mobile phone number of the mobile phone, the IP address when sending the intranet access request, and the device code of the mobile phone.

[0028] S120: Determine whether header enhancement information matching the identification information is recorded.

[0029] In an embodiment of the present invention, for an IoT terminal that is not visiting for the first time, if it has successfully accessed the intranet service before, corresponding header enhancement information will be recorded. The header enhancement information matches the identification information of the IoT terminal. It can be determined whether the authentication is successful, that is, whether the IoT terminal is allowed to access the intranet service, by confirming whether the header enhancement information matches the identification information of the IoT terminal.

[0030] For IoT terminals that access the intranet for the first time, or IoT terminals that have previously accessed intranet services but were rejected, a verification process can be entered to confirm whether the IoT terminal is authorized.

[0031] For example, if a user accesses an intranet service through a mobile phone, and the obtained identification information may include a mobile phone number, an IP address, and a device code, if header enhancement information matching the identification information is recorded, the header enhancement information is obtained, and it is confirmed whether the information contained in the header enhancement information is consistent with the mobile phone number, the IP address, and the device code. That is, the header enhancement information may also include a mobile phone number, an IP address, and a device code. When confirming, it can be confirmed whether the header enhancement information of the IoT terminal is recorded based on whether the mobile phone number is consistent. When the mobile phone number is recorded, it indicates that the header enhancement information of the IoT terminal is recorded, and it can be further determined whether the IoT terminal is allowed to access the intranet service.

[0032] S130: If header enhancement information matching the identification information is recorded, the Internet of Things terminal is allowed to access the intranet service.

[0033] In the embodiment of the present invention, when the header enhancement information matching the identification information is recorded, the IoT terminal is allowed to access the intranet service. That is, in the aforementioned embodiment, when the same mobile phone number as the mobile phone number included in the identification information is recorded in the header enhancement information, it indicates that the header enhancement information of the IoT terminal is recorded, and it can be further confirmed whether it is allowed to access the intranet service.

[0034] If the identification information also contains an IP address, the IP address will also be recorded in the enhanced header information. The IP address recorded in the enhanced header information is the IP address that allows the IoT terminal to access the intranet. When the IP address in the identification information is inconsistent with the IP address in the enhanced header information, access is denied or the re-authorization step is entered. When the IP address in the identification information is consistent with the IP address in the enhanced header information, the IoT terminal is allowed to access the intranet service.

[0035] In some embodiments, such as this embodiment, the header-enhanced 5G user identity authentication method may include the following steps:

[0036] If the header enhancement information matching the identification information is not recorded, sending a first redirection instruction to the Internet of Things terminal to enable the Internet of Things terminal to access a first preset address and configuring the header enhancement information for the Internet of Things terminal;

[0037] If it is detected that the Internet of Things terminal accesses the first preset address, the header enhancement information of the Internet of Things terminal is obtained, and the Internet of Things terminal is verified according to the header enhancement information of the Internet of Things terminal;

[0038] If the verification of the Internet of Things terminal is passed, the header enhancement information of the Internet of Things terminal is recorded, and a second redirection instruction is sent to the Internet of Things terminal to enable the Internet of Things terminal to access the initial access address;

[0039] If the Internet of Things terminal fails to be authenticated, the Internet of Things terminal is denied access to the intranet service.

[0040] In an embodiment of the present invention, when there is no header enhancement information matching the identification information, the verification process can be entered. First, the server can be simulated to send a first redirection instruction to the IoT terminal, and the access target of the IoT terminal can be changed from accessing the intranet service to accessing the first preset address, and the header enhancement information can be configured for the IoT terminal. Then, when it is detected that the IoT terminal accesses the first preset address, the IoT terminal is verified according to the header enhancement information of the IoT terminal, for example, whether the IoT terminal is legal in the system. If the IoT terminal is legal in the system, the verification is passed. If the IoT terminal is an illegal user in the system, the IoT terminal is denied access to the intranet service.

[0041] When the verification is passed, the header enhancement information of the IoT terminal is recorded, and a second redirection instruction is sent to the IoT terminal to modify the access address of the IoT terminal to its initial access address, and then enter step S110 to re-authenticate the IoT terminal.

[0042] like Figure 2 As shown, the above authentication method can be configured in a 5G security management platform. Figure 2 SMF (Session Management Function) is the 5G session management function, which is used to manage the sessions of IoT terminals, UPF (User Plane Function) is used to process the data of IoT terminals, and AMF (Access and Mobility Management Function) is used to complete the access and mobility management of IoT terminals. The IoT terminal sends an intranet access request to UPF through the base station, and UPF forwards the intranet access request to the 5G security management platform.

[0043] like Figure 3 As shown, the 5G security management platform parses the intranet access request to obtain the identification information of the IoT terminal. When the 5G security management platform does not record the header enhancement information that matches the identification information, it sends a first redirection instruction to the IoT terminal, that is, to modify the access address of the IoT terminal, and change the access address of the IoT terminal from the intranet to the first preset address. The first preset address can be the 5G security management platform. Then the IoT terminal re-accesses the 5G security management platform. At this time, the UPF detects that the access address of the IoT terminal is the 5G security management platform. Before forwarding the access request of the IoT terminal to the 5G security management platform, it configures the header enhancement information for it. For example, the access address can usually be expressed as a URL (Uniform Resource Locator). When the UPF detects that the URL contains the first preset address, the header enhancement information is added to the head of the URL. The header enhancement information can be information such as a mobile phone number and a device code, and the relevant information is encrypted.

[0044] After UPF completes the addition of header enhancement information, it sends the access request of the IoT terminal to the 5G security management platform. The address received by the 5G security management platform is the enhanced first preset address. The enhanced first preset address is identified, and the header enhancement information added by UPF is parsed to obtain the mobile phone number, device code, IP address and other information of the IoT terminal, and then verify whether the IoT terminal is legal in the system. For example, it can verify whether the mobile phone number is legal. If the IoT terminal is legal in the system, the header enhancement information of the IoT terminal is recorded, and a second redirection instruction is sent to the IoT terminal. The second redirection instruction is also used to modify the access address of the IoT terminal, and the access address of the IoT terminal is modified from the first preset address to the initial address initially accessed by the IoT terminal, that is, the address of the intranet service that the IoT terminal needs to access.

[0045] The IoT terminal resends the intranet access request according to the second redirection instruction. After receiving the intranet access request, the 5G security management platform parses the intranet access request and obtains the identification information of the IoT terminal. At this time, the 5G security management platform generally records the header enhancement information that matches the identification information, and allows the IoT terminal to access the intranet service. By verifying and adding the header enhancement information, the security of the intranet service can be ensured, and illegal users can be prevented from accessing the intranet service.

[0046] In addition, the 5G security management platform can independently manage user access rules or connect to the identity authentication system. The system will obtain user identity information and access rights periodically or when the terminal information changes. When the access rights change, the corresponding rules will be updated in time. A user can associate multiple rules, and the relationship between multiple rules is "or", that is, if one rule is hit, the next rule will not be searched. There can be multiple attributes in a rule, and the relationship between multiple attributes is "and", that is, if multiple attributes are met at the same time, the rule is hit. When the 5G security management platform identifies the user's identity information, it obtains the corresponding rules and matches them with the rules according to the user's access service, access time and other information. If the rules are hit, forwarding or discarding will be executed according to the rules. If the rules are not hit, the data will be directly discarded.

[0047] In some embodiments, such as this embodiment, the header-enhanced 5G user identity authentication method may include the following steps:

[0048] Confirm the access rights of the IoT terminal, and restrict the access of the IoT terminal to the intranet service according to the access rights.

[0049] In the embodiment of the present invention, different IoT terminals have different access rights. For example, different IP addresses correspond to different access rights. If a user accesses an intranet service through an IoT terminal within a specified range, normal access rights can be granted. If a user accesses an intranet service through an IoT terminal outside the specified range, restricted access rights can be granted, for example, only some functions are open. In addition to adjusting access rights based on IP addresses, the access rights of IoT terminals can also be actively adjusted, which can be set by the administrator.

[0050] In some embodiments, such as this embodiment, the header-enhanced 5G user identity authentication method may include the following steps:

[0051] Acquire a first identification number and a first IP address of the Internet of Things terminal according to the identification information, and confirm whether there is a second identification number matching the first identification number in the header enhancement information;

[0052] If there is a second identification number matching the first identification number in the header enhancement information, confirming whether a second IP address corresponding to the second identification number is consistent with the first IP address;

[0053] If the second IP address corresponding to the second identification number is inconsistent with the first IP address, a first redirection instruction is sent to the Internet of Things terminal to enable the Internet of Things terminal to access the first preset address and reconfigure header enhancement information for the Internet of Things terminal.

[0054] In the embodiment of the present invention, the first identification number may be the mobile phone number of the IoT terminal, the first IP address is the address when the IoT terminal accesses the intranet, and the type of the second identification number is the same as the first identification number. If the first identification number is a mobile phone number, the second identification number is also a mobile phone number. When the system contains a second identification number that matches the first identification number, it is further verified whether the first IP address is consistent with the second IP address. When the first IP address is consistent with the second IP address, the IoT terminal is allowed to access the intranet service. If the first IP address and the second IP address are inconsistent, the header enhancement information may be reconfigured. When the header enhancement information is reconfigured, the corresponding access rights are adjusted according to the specific IP address.

[0055] Figure 4 is a schematic block diagram of a 5G user identity authentication device 100 based on header enhancement provided by an embodiment of the present invention. Figure 4 As shown, corresponding to the above header-enhanced 5G user identity authentication method, the present invention also provides a header-enhanced 5G user identity authentication device 100. The header-enhanced 5G user identity authentication device 100 includes a unit for executing the above header-enhanced 5G user identity authentication method. Specifically, please refer to Figure 4 The 5G user identity authentication device 100 based on header enhancement includes a first parsing unit 110, a first confirmation unit 120 and a first passing unit 130.

[0056] Wherein, the first parsing unit 110 is used to parse the intranet access request for accessing the intranet service sent by the Internet of Things terminal to obtain the identification information of the Internet of Things terminal if an intranet access request is received;

[0057] The first confirmation unit 120 is used to confirm whether the header enhancement information matching the identification information is recorded;

[0058] The first passing unit 130 is used to allow the Internet of Things terminal to access the intranet service if header enhancement information matching the identification information is recorded.

[0059] In certain embodiments, such as the present embodiment, the header-enhanced 5G user authentication device further includes a first sending unit, a first detection unit, a first verification unit, and a second verification unit.

[0060] Wherein, the first sending unit is used for sending a first redirection instruction to the Internet of Things terminal to enable the Internet of Things terminal to access a first preset address and configure the header enhancement information for the Internet of Things terminal if the header enhancement information matching the identification information is not recorded;

[0061] The first detection unit is used to obtain the header enhancement information of the Internet of Things terminal if it is detected that the Internet of Things terminal accesses the first preset address, and verify the Internet of Things terminal according to the header enhancement information of the Internet of Things terminal;

[0062] The first verification unit is used to record the header enhancement information of the Internet of Things terminal if the verification of the Internet of Things terminal is passed, and send a second redirection instruction to the Internet of Things terminal to enable the Internet of Things terminal to access the initial access address;

[0063] The second verification unit is used to deny the Internet of Things terminal access to the intranet service if the Internet of Things terminal fails to pass the verification.

[0064] In certain embodiments, such as the present embodiment, the header-enhanced 5G user authentication device further includes a second confirmation unit.

[0065] The second confirmation unit is used to confirm the access rights of the IoT terminal and restrict the access of the IoT terminal to the intranet service according to the access rights.

[0066] In certain embodiments, such as the present embodiment, the header-enhanced 5G user identity authentication device further includes a first acquisition unit, a third confirmation unit, and a second sending unit.

[0067] The first acquisition unit is used to acquire the first identification number and the first IP address of the Internet of Things terminal according to the identification information, and confirm whether there is a second identification number matching the first identification number in the header enhancement information;

[0068] The third confirmation unit is used to confirm whether a second IP address corresponding to the second identification number is consistent with the first IP address if there is a second identification number matching the first identification number in the header enhancement information;

[0069] The second sending unit is used to send a first redirection instruction to the Internet of Things terminal to enable the Internet of Things terminal to access a first preset address and reconfigure header enhancement information for the Internet of Things terminal if the second IP address corresponding to the second identification number is inconsistent with the first IP address.

[0070] It should be noted that technical personnel in the relevant field can clearly understand that the specific implementation process of the above-mentioned 5G user identity authentication device based on header enhancement and each unit can refer to the corresponding description in the aforementioned method embodiment, and for the convenience and conciseness of the description, it will not be repeated here.

[0071] The above-mentioned 5G user identity authentication device based on header enhancement can be implemented in the form of a computer program, which can be used in the following manner: Figure 5 Runs on the computer device shown.

[0072] See also Figure 5 , Figure 5 is a schematic block diagram of a computer device provided in an embodiment of the present application. Figure 5 The computer device 500 includes a processor 502 , a memory and a network interface 505 connected via a system bus 501 , wherein the memory may include a non-volatile storage medium 503 and an internal memory 504 .

[0073] The non-volatile storage medium 503 can store an operating system 5031 and a computer program 5032. When the computer program 5032 is executed, the processor 502 can perform a 5G user identity authentication method based on header enhancement.

[0074] The processor 502 is used to provide computing and control capabilities to support the operation of the entire computer device 500 .

[0075] The internal memory 504 provides an environment for the operation of the computer program 5032 in the non-volatile storage medium 503. When the computer program 5032 is executed by the processor 502, the processor 502 can execute a 5G user identity authentication method based on header enhancement.

[0076] The network interface 505 is used to communicate with other devices. Those skilled in the art will appreciate that Figure 5 The structure shown in the figure is merely a block diagram of a portion of the structure related to the solution of the present application, and does not constitute a limitation on the computer device 500 to which the solution of the present application is applied. The specific computer device 500 may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0077] It should be understood that in the embodiment of the present application, the processor 502 may be a central processing unit (CPU), and the processor 502 may also be other general-purpose processors, digital signal processors (FSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. Among them, the general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc.

[0078] It is understood by those skilled in the art that all or part of the processes in the method for implementing the above embodiment can be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a storage medium, which is a computer-readable storage medium. The computer program is executed by at least one processor in the computer system to implement the process steps of the embodiment of the above method.

[0079] Therefore, the present invention also provides a storage medium. The storage medium may be a computer-readable storage medium. The storage medium stores a computer program. When the computer program is executed by a processor, any embodiment of the above-mentioned 5G user identity authentication method based on header enhancement is implemented.

[0080] The storage medium may be a USB flash drive, a mobile hard disk, a read-only memory (ROM), a magnetic disk, or an optical disk, or any other computer-readable storage medium that can store program codes.

[0081] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in terms of function in the above description. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0082] In the several embodiments provided by the present invention, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of each unit is only a logical function division, and there may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed.

[0083] The steps in the method of the embodiment of the present invention can be adjusted in order, combined and deleted according to actual needs. The units in the device of the embodiment of the present invention can be combined, divided and deleted according to actual needs. In addition, the functional units in the various embodiments of the present invention can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit.

[0084] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a storage medium. Based on this understanding, the technical solution of the present invention is essentially or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including several instructions for a computer device to execute all or part of the steps of the method described in each embodiment of the present invention.

[0085] In the above embodiments, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0086] Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.

[0087] The above is only a specific embodiment of the present invention, but the protection scope of the present invention is not limited thereto. Any technician familiar with the technical field can easily think of various equivalent modifications or replacements within the technical scope disclosed by the present invention, and these modifications or replacements should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention shall be based on the protection scope of the claims.

Claims

1. A 5G user identity authentication method based on header enhancement, characterized in that: The method comprises: If an intranet access request for accessing an intranet service is received from an IoT terminal, the intranet access request is parsed to obtain Obtaining identification information of the Internet of Things terminal; confirming whether header enhancement information matching the identification information is recorded; If header enhancement information matching the identification information is recorded, the IoT terminal is allowed to access the intranet service; If the header enhancement information matching the identification information is not recorded, sending a first redirection instruction to the Internet of Things terminal to enable the Internet of Things terminal to access a first preset address and configuring the header enhancement information for the Internet of Things terminal; If it is detected that the Internet of Things terminal accesses the first preset address, the header enhancement information of the Internet of Things terminal is obtained, and the Internet of Things terminal is verified according to the header enhancement information of the Internet of Things terminal; If the verification of the Internet of Things terminal is passed, the header enhancement information of the Internet of Things terminal is recorded, and a second redirection instruction is sent to the Internet of Things terminal to enable the Internet of Things terminal to access the initial access address; If the Internet of Things terminal fails to be authenticated, the Internet of Things terminal is denied access to the intranet service.

2. The method according to claim 1, characterized in that After the step of allowing the Internet of Things terminal to access the intranet service if header enhancement information matching the identification information is recorded, the method further includes: Confirm the access rights of the IoT terminal, and restrict the access of the IoT terminal to the intranet service according to the access rights.

3. The method according to claim 1, characterized in that The method further comprises: According to the identification information, the first identification number and the first IP address of the Internet of Things terminal are obtained, and the first identification number and the first IP address of the Internet of Things terminal are added to the header. confirming in the strong information whether there is a second identification number matching the first identification number; If there is a second identification number matching the first identification number in the header enhancement information, confirming whether a second IP address corresponding to the second identification number is consistent with the first IP address; If the second IP address corresponding to the second identification number is inconsistent with the first IP address, a first redirection instruction is sent to the Internet of Things terminal to enable the Internet of Things terminal to access the first preset address and reconfigure header enhancement information for the Internet of Things terminal.

4. A 5G user identity authentication device based on header enhancement, characterized in that: The device comprises: A first parsing unit is configured to, upon receiving an intranet access request for accessing an intranet service sent by an Internet of Things terminal, parse the intranet access request to obtain identification information of the Internet of Things terminal; A first confirmation unit, used to confirm whether header enhancement information matching the identification information is recorded; A first passing unit, configured to allow the Internet of Things terminal to access the intranet service if header enhancement information matching the identification information is recorded; A first sending unit is configured to send a first redirection instruction to the Internet of Things terminal to enable the Internet of Things terminal to access a first preset address and configure the header enhancement information for the Internet of Things terminal if the header enhancement information matching the identification information is not recorded; A first detection unit, configured to obtain header enhancement information of the Internet of Things terminal if it is detected that the Internet of Things terminal accesses the first preset address, and verify the Internet of Things terminal according to the header enhancement information of the Internet of Things terminal; A first verification unit, configured to record the header enhancement information of the Internet of Things terminal if the verification of the Internet of Things terminal is passed, and send a second redirection instruction to the Internet of Things terminal to enable the Internet of Things terminal to access an initial access address; The second verification unit is used to deny the Internet of Things terminal from accessing the intranet service if the Internet of Things terminal fails to be verified.

5. A computer device, characterized in that: The computer device comprises a memory and a processor connected to the memory; the memory is used to store a computer program; the processor is used to run the computer program stored in the memory to execute the steps of the method according to any one of claims 1 to 3.

6. A computer-readable storage medium, characterized in that: The storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 3 can be implemented on a computer device.

Images