A communication encryption method and system of a centralized edge internet-of-things agent based on MQTT

Abstract

The application provides a communication encryption method and system of a centralized edge Internet of Things agent based on MQTT, and relates to the technical field of communication security. The method comprises the following steps: a comprehensive digital processing gateway sends a first connection request data packet to a corresponding soft edge Internet of Things agent; the soft edge Internet of Things agent matches a corresponding shared symmetric key according to an identity authentication code of the comprehensive digital processing gateway; the soft edge Internet of Things agent generates a second random number and calculates a comprehensive key; the soft edge Internet of Things agent sends a second connection request data packet to the corresponding comprehensive digital processing gateway; the comprehensive digital processing gateway calculates the comprehensive key after receiving the second connection request data packet, encrypts and verifies the data packet by using the comprehensive key, and sends the verification data packet to the soft edge Internet of Things agent; the soft edge Internet of Things agent decrypts by using the comprehensive key after receiving the verification data packet, verifies whether the identity authentication code is correct, and stores the verification data if the identity authentication code is verified.

Description

Technical Field

[0001] This application relates to the field of communication security technology, specifically to a communication encryption method and system based on MQTT centralized edge IoT agent. Background Technology

[0002] With the advancement of science and technology, the Internet of Things (IoT) has been fully integrated into the production and daily lives of people in my country. Since IoT terminal devices are generally sensing terminals with varying performance and limited network bandwidth, the MQTT protocol, characterized by its lightweight, simplicity, openness, and ease of implementation, is widely used in IoT data transmission. MQTT (Message Queuing Telemetry Transport) is a message protocol based on the publish / subscribe paradigm under ISO.

[0003] However, when using the MQTT protocol to transmit IoT-related data, the security of data transmission cannot be guaranteed because MQTT itself does not encrypt data or have corresponding security mechanisms.

[0004] Currently, common methods to improve the security of IoT data transmission include the following:

[0005] The first method involves authentication (username and password), authorization (server-side classification and grading of clients), and data encryption (encryption at the transport layer and data link layer). However, not all IoT terminal devices can operate in environments with secure transport and data link layers.

[0006] The second method is to transmit data based on the TLS / SSL protocol. However, this sacrifices transmission performance for data security, and it also places certain performance requirements on the IoT terminal devices, making it unsuitable for all current IoT applications. Summary of the Invention

[0007] To address the technical issues in related technologies, this application provides a communication encryption method and system for a centralized edge IoT agent based on MQTT.

[0008] To achieve the above objectives, the technical solution adopted in this application includes:

[0009] According to a first aspect of this application, a communication encryption method for a centralized edge IoT agent based on MQTT is provided for communication encryption between several soft edge IoT agents and several integrated digital processing gateways, wherein the soft edge IoT agents and the integrated digital processing gateways communicate via the MQTT protocol. The method includes the following steps:

[0010] Step S1-1: The integrated digital processing gateway sends a first connection request data packet to the corresponding soft edge IoT agent. The first connection request data packet includes the identity authentication code of the integrated digital processing gateway and a first random number R1, wherein the first random number R1 is a random number generated by the integrated digital processing gateway.

[0011] Step S1-2: The soft edge IoT agent matches the corresponding shared symmetric key k based on the identity authentication code of the integrated digital processing gateway. n n = 1, 2, 3, ..., m, where k n Symmetric keys are pre-embedded in soft edge IoT agents and integrated digital processing gateways;

[0012] Steps S1-3: The soft edge IoT agent generates a second random number R2, and according to... Calculate the integrated key K; the soft edge IoT agent sends a second connection request data packet to the corresponding integrated digital processing gateway, the second connection request data packet including a second random number R2;

[0013] Step S1-4: After receiving the second connection request data packet, the integrated digital processing gateway... Calculate the integrated key K, use the integrated key to encrypt the verification data packet, and send the verification data packet to the soft edge IoT agent. The verification data packet includes the identity authentication code and verification data of the integrated digital processing gateway.

[0014] Step S1-5: After receiving the verification data packet, the soft edge IoT agent decrypts it using the comprehensive key K and verifies whether the identity authentication code is correct. If the identity authentication code is verified, the verification data is stored.

[0015] Optionally, the communication encryption method for the centralized edge IoT agent based on MQTT further includes:

[0016] Step S0-1: Set up a centralized edge IoT agent platform and configure several soft edge IoT agents in the centralized edge IoT agent platform.

[0017] Optionally, the communication encryption method for the centralized edge IoT agent based on MQTT further includes:

[0018] Step S0-2: Set up several integrated digital processing gateways in a preset area. Each integrated digital processing gateway is connected to a centralized edge IoT agent platform. Configure several aggregation nodes under the integrated digital processing gateways. Each aggregation node is connected to several online monitoring devices so that the monitoring data of the online monitoring devices can be concentrated at the aggregation nodes.

[0019] Optionally, in steps S1-2, the symmetric key k pre-embedded in several soft edge IoT agents and several integrated digital processing gateways n satisfy:

[0020]

[0021] In the formula, k1 and k2 are the pre-set symmetric keys of the first and second integrated digital processing gateways, respectively, H1(·) is the hash function, and id n This is the identification code for the integrated digital processing gateway.

[0022] Optionally, in steps S1-4, the verification data includes the geographic coordinates of the integrated digital processing gateway.

[0023] Optionally, the communication encryption method for the centralized edge IoT agent based on MQTT further includes:

[0024] Step S1-6: After completing steps S1-1 to S1-5, the data transmission between the soft edge IoT agent and the integrated digital processing gateway is directly encrypted using the integrated key K calculated in step S1-3, and the data transmitted by the integrated digital processing gateway to the soft edge IoT agent does not contain the identity authentication code of the integrated digital processing gateway.

[0025] Optionally, in steps S1-6, the data transmitted by the integrated digital processing gateway to the soft edge IoT agent includes the geographic location coordinates of the integrated digital processing gateway.

[0026] According to a second aspect of this application, a communication encryption system based on MQTT centralized edge IoT agent is also provided for executing the communication encryption method based on MQTT centralized edge IoT agent as described in any one of the first aspects of this application. The system includes several soft edge IoT agents and several integrated digital processing gateways.

[0027] in,

[0028] The integrated digital processing gateway is used to send the first connection request data packet to the corresponding soft edge IoT agent; and is used to... Calculate the integrated key K, use the integrated key to encrypt the verification data packet, and send the verification data packet to the soft edge IoT agent;

[0029] The soft edge IoT agent is used to match the corresponding shared symmetric key k based on the authentication code of the integrated digital processing gateway. n ; and used to generate a second random number R2, and according to Calculate the integrated key K; and use it to send a second connection request data packet to the corresponding integrated digital processing gateway; and after receiving the verification data packet, use the integrated key K to decrypt it and verify whether the identity authentication code is correct. If the identity authentication code is verified, store the verification data.

[0030] According to a third aspect of this application, a computer device is also provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, it is able to implement the steps of the communication encryption method for a centralized edge IoT agent based on MQTT as described in any of the technical solutions of the first aspect of this application.

[0031] According to a fourth aspect of this application, a computer-readable storage medium is also provided, on which a computer program is stored, characterized in that, when the computer program is executed by a processor, it is able to implement the steps of the communication encryption method for a centralized edge IoT agent based on MQTT as described in any of the technical solutions of the first aspect of this application.

[0032] Beneficial effects:

[0033] 1. Through the above technical solution, since each session key (i.e., the integrated key K) between the soft edge IoT agent and the integrated digital processing gateway depends on a first random number R1 and a second random number R2, and the first random number R1 is a random number generated by the integrated digital processing gateway, while the second random number is a random number generated by the soft edge IoT agent, this ensures that the session key for each connection is different. This significantly increases the attack cost for attackers to intercept the key, thereby effectively improving the security of data transmission. Simultaneously, since the soft edge IoT agent and the integrated digital processing gateway share the symmetric key k... n It is pre-installed (i.e., embedded in the device before leaving the factory) and is not transmitted during data transfer. This effectively avoids the transmission of the symmetric key k. n Leakage during data transmission further enhances data transmission security.

[0034] Furthermore, since the integrated digital processing gateway configured in this application is used to receive (aggregate) data from IoT terminal devices (e.g., online monitoring devices or equipment), and communicates with the soft edge IoT agent via the MQTT protocol, and this integrated digital processing gateway is generally located within a management area (e.g., in the case of a substation, the integrated digital processing gateway would be located within the substation's management area), the IoT terminal devices do not need to perform any data encryption operations (they only need to transmit their relevant data to the integrated digital processing gateway), thus there is no minimum performance requirement for the IoT terminal devices, making the method of this application applicable to the vast majority of existing IoT systems.

[0035] 2. Other beneficial effects or advantages of this application will be described in detail in the specific embodiments. Attached Figure Description

[0036] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0037] in:

[0038] Figure 1 This is a flowchart illustrating the steps of a communication encryption method for a centralized edge IoT agent based on MQTT, provided in an exemplary embodiment of this application.

[0039] Figure 2 This is a schematic diagram of the layout of a centralized edge IoT agent communication encryption system based on MQTT, provided in an exemplary embodiment of this application;

[0040] Figure 3 This is a screenshot of the software interface for a communication encryption method based on MQTT-based centralized edge IoT agent provided in an exemplary embodiment of this application. Detailed Implementation

[0041] To make the objectives, technical solutions, and advantages of the embodiments of this application clearer, the technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are some embodiments of this application, but not all embodiments.

[0042] Therefore, the following detailed description of the embodiments of this application provided in the accompanying drawings is not intended to limit the scope of the claimed application, but merely to illustrate selected embodiments of the application. All other embodiments obtained by those skilled in the art based on the embodiments of this application without inventive effort are within the scope of protection of this application.

[0043] Furthermore, the terms "comprising" and "having," and any variations thereof, used in the description of this application are intended to cover non-exclusive inclusion. For example, a process, method, system, product, or device that includes a series of steps or units is not limited to the listed steps or units, but may optionally include other steps or units not listed, or may optionally include other steps or units inherent to these processes, methods, products, or devices. It should also be noted that in the embodiments of this application, words such as "exemplary" or "for example" are used to indicate examples, illustrations, or descriptions. Any embodiment or design described as "exemplary" or "for example" in the embodiments of this application should not be construed as preferred or advantageous over other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present the relevant concepts in a specific manner.

[0044] The technical solution of this application will be described in detail below with reference to the accompanying drawings.

[0045] Example 1

[0046] like Figure 1 As shown, according to a first aspect of this application, this embodiment provides a communication encryption method for a centralized edge IoT agent based on MQTT, used for communication encryption between several soft edge IoT agents and several integrated digital processing gateways, wherein the soft edge IoT agents and the integrated digital processing gateways communicate via the MQTT protocol. The method includes the following steps:

[0047] Step S1-1: The integrated digital processing gateway sends a first connection request data packet to the corresponding soft edge IoT agent. The first connection request data packet includes the identity authentication code of the integrated digital processing gateway and a first random number R1, wherein the first random number R1 is a random number generated by the integrated digital processing gateway.

[0048] Step S1-2: The soft edge IoT agent matches the corresponding shared symmetric key k based on the identity authentication code of the integrated digital processing gateway. n n = 1, 2, 3, ..., m, where k n Symmetric keys are pre-embedded in soft edge IoT agents and integrated digital processing gateways;

[0049] Steps S1-3: The soft edge IoT agent generates a second random number R2, and according to... Calculate the integrated key K; the soft edge IoT agent sends a second connection request data packet to the corresponding integrated digital processing gateway, the second connection request data packet including a second random number R2;

[0050] Step S1-4: After receiving the second connection request data packet, the integrated digital processing gateway... Calculate the integrated key K, use the integrated key to encrypt the verification data packet, and send the verification data packet to the soft edge IoT agent. The verification data packet includes the identity authentication code and verification data of the integrated digital processing gateway.

[0051] Step S1-5: After receiving the verification data packet, the soft edge IoT agent decrypts it using the comprehensive key K and verifies whether the identity authentication code is correct. If the identity authentication code is verified, the verification data is stored.

[0052] Through the above technical solution, since each session key (i.e., the integrated key K) between the soft edge IoT agent and the integrated digital processing gateway depends on a first random number R1 and a second random number R2, and the first random number R1 is a random number generated by the integrated digital processing gateway, while the second random number is a random number generated by the soft edge IoT agent, the session key for each connection is different. This significantly increases the attack cost for attackers to intercept the key, thereby effectively improving the security of data transmission. Simultaneously, since the soft edge IoT agent and the integrated digital processing gateway share a symmetric key k... n It is pre-installed (i.e., embedded in the device before leaving the factory) and is not transmitted during data transfer. This effectively avoids the transmission of the symmetric key k. n Leakage during data transmission further enhances data transmission security.

[0053] Furthermore, since the integrated digital processing gateway configured in this application is used to receive (aggregate) data from IoT terminal devices (e.g., online monitoring devices or equipment), and communicates with the soft edge IoT agent via the MQTT protocol, and this integrated digital processing gateway is generally located within a management area (e.g., in the case of a substation, the integrated digital processing gateway would be located within the substation's management area), the IoT terminal devices do not need to perform any data encryption operations (they only need to transmit their relevant data to the integrated digital processing gateway), thus there is no minimum performance requirement for the IoT terminal devices, making the method of this application applicable to the vast majority of existing IoT systems.

[0054] In this embodiment, it is understood that, compared with existing related technologies, firstly, since the data encryption of this application is implemented based on the MQTT protocol between the soft edge IoT agent and the integrated digital processing gateway, it does not require the IoT terminal device to be in an environment with secure transport layer and link layer protection, nor does it require sacrificing transmission performance to ensure transmission security, and it does not impose a minimum performance limit on the IoT terminal device.

[0055] Second, due to the symmetric key k n It is pre-embedded in the soft edge IoT agent and integrated digital processing gateway, so customers can be required to purchase soft edge IoT agents and integrated digital processing gateways from the same manufacturer at the same time. This can not only effectively reduce the difficulty of deployment for customers during implementation, but also improve the compatibility of related devices.

[0056] Third, after steps S1-5 are completed, if the identity authentication code is verified successfully, the verification data can be stored as the basis for secure verification of subsequent communications, which helps to further improve the security of communications. If the identity authentication code fails, the connection can be directly terminated and data transmission is not allowed. At the same time, subsequent encryption can also use other suitable encryption algorithms, such as AES or the Chinese national standard SM4, depending on the device performance or network environment. This application does not make specific limitations in this regard.

[0057] In one embodiment of this application, the communication encryption method of the centralized edge IoT agent based on MQTT may further include: step S0-1: setting up a centralized edge IoT agent platform and configuring several soft edge IoT agents in the centralized edge IoT agent platform.

[0058] Thus, through the above technical solution, several soft edge IoT agents can be configured and managed within a centralized edge IoT agent platform, directly replacing the physical edge IoT agent devices in existing related technologies. Furthermore, since the several soft edge IoT agents configured on the same centralized edge IoT agent platform have a unified object model, the access methods for IoT terminal devices can be more unified. Data deployment at the access station end can be quickly achieved through simple configuration (see reference...). Figure 3 ).

[0059] Furthermore, this centralized edge IoT agent platform allows for direct management of relevant models on the platform itself, avoiding frequent on-site maintenance and improving management and maintenance efficiency. It also enables unified OTA upgrades on the platform, effectively avoiding the inconsistency in upgrade packages among manufacturers of distributed edge IoT agents.

[0060] In one embodiment of this application, the communication encryption method of the centralized edge IoT agent based on MQTT may further include: step S0-2: setting up a plurality of integrated digital processing gateways in a preset area, the plurality of integrated digital processing gateways being connected to the centralized edge IoT agent platform, and configuring a plurality of aggregation nodes under the plurality of integrated digital processing gateways, the plurality of aggregation nodes being connected to a plurality of online monitoring devices, so that the monitoring data of the online monitoring devices can be concentrated at the aggregation nodes.

[0061] In this way, the integrated digital processing gateway only needs to be responsible for establishing the data transmission channel and transmitting the relevant data to the centralized edge IoT agent platform, without the need for complex functional design.

[0062] It is understood that the integrated digital processing gateway of this application can be configured to support data access methods such as Modbus RTU, Modbus TCP, IEC104, IEC61850, MQTT, and HTTP, and supports low-power networking protocols. It also supports wireless access for aggregation nodes, access nodes, and sensors, and can be expanded to support protocols such as LoRaWAN. To adapt to the data transmission needs of different IoT applications, this application does not impose specific limitations in this regard.

[0063] In one embodiment of this application, in steps S1-2, a symmetric key k is pre-embedded in several soft edge IoT agents and several integrated digital processing gateways. n satisfy: In the formula, k1 and k2 are the pre-set symmetric keys of the first and second integrated digital processing gateways, respectively, H1(·) is the hash function, and id n This is the identification code for the integrated digital processing gateway.

[0064] In this way, the symmetric key of the third integrated digital processing gateway will be associated with the symmetric keys of the first and second integrated digital processing gateways. The symmetric keys of all integrated digital processing gateways after the fourth will be associated with the pre-embedded symmetric keys of the first and second integrated digital processing gateways, as well as the symmetric keys of the integrated digital processing gateway preceding it. This effectively realizes the sequential setting of each symmetric key and can play a certain auxiliary verification role, thereby further improving the security of data transmission and the regularity and convenience of symmetric key setting.

[0065] In one embodiment of this application, in steps S1-4, the verification data may include the geographic coordinates of the integrated digital processing gateway. Thus, during the initial session verification, the soft edge IoT agent will save the corresponding geographic coordinates of the integrated digital processing gateway. This allows for secondary verification of the verification data during subsequent data transmission, either randomly or at any time, to ensure the geographic coordinates of the integrated digital processing gateway are accurate. This effectively avoids data transmission risks caused by the loss or relocation of the integrated digital processing gateway.

[0066] For example, a malicious attacker could steal the integrated digital processing gateway located in a specific area (e.g., within a substation) and use it to attack the soft edge IoT agent. In the above implementation, the geographic location coordinates of the integrated digital processing gateway are saved during the first session verification process. This allows for secondary verification at any time during subsequent data transmission. If the integrated digital processing gateway is stolen, its geographic location coordinates will change, and subsequent secondary verifications will fail, thus further enhancing the security of data transmission.

[0067] In one embodiment of this application, the communication encryption method of the centralized edge IoT agent based on MQTT may further include: Step S1-6: After completing steps S1-1 to S1-5, the data transmission between the soft edge IoT agent and the integrated digital processing gateway is directly encrypted using the integrated key K calculated in step S1-3, and the data transmitted by the integrated digital processing gateway to the soft edge IoT agent does not contain the identity authentication code of the integrated digital processing gateway.

[0068] In this way, subsequent data transmission can be encrypted using only the comprehensive key K, without transmitting the authentication code. This helps prevent attackers from stealing the authentication code, thereby further improving the security of data transmission.

[0069] In one embodiment of this application, in steps S1-6, the data transmitted from the integrated digital processing gateway to the soft edge IoT agent includes the geographic location coordinates of the integrated digital processing gateway. This allows for secondary verification of the geographic location coordinates at any time during subsequent data transmission. If the integrated digital processing gateway is compromised, its geographic location coordinates will be altered, causing subsequent secondary verification to fail, thus further enhancing data transmission security.

[0070] According to the second aspect of this application, please refer to Figure 2Furthermore, a communication encryption system based on MQTT centralized edge IoT agent is provided for implementing the communication encryption method based on MQTT centralized edge IoT agent as described in any of the first aspects of this application. The system includes several soft edge IoT agents and several integrated digital processing gateways.

[0071] The integrated digital processing gateway is used to send the first connection request data packet to the corresponding soft edge IoT agent; and is used to... Calculate the integrated key K, use the integrated key to encrypt the verification data packet, and send the verification data packet to the soft edge IoT agent;

[0072] The soft edge IoT agent is used to match the corresponding shared symmetric key k based on the authentication code of the integrated digital processing gateway. n ; and used to generate a second random number R2, and according to Calculate the integrated key K; and use it to send a second connection request data packet to the corresponding integrated digital processing gateway; and after receiving the verification data packet, use the integrated key K to decrypt it and verify whether the identity authentication code is correct. If the identity authentication code is verified, store the verification data.

[0073] Understandable Figure 2 This is an exemplary illustration of a centralized edge IoT agent communication encryption system based on MQTT, using a substation as an example. It also shows a power transmission and transformation equipment status monitoring system, a unified network management platform, and an IoT management platform.

[0074] According to a third aspect of this application, a computer device is also provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, it is able to implement the steps of the communication encryption method based on MQTT centralized edge IoT agent in any of the technical solutions of the first aspect of this application.

[0075] It is understood that in this embodiment, the memory may include volatile memory, such as random access memory; the memory may also include non-volatile memory, such as read-only memory, flash memory, hard disk or solid-state drive; furthermore, the memory may include combinations of the above types of memory. This application does not specifically limit it in this regard.

[0076] Similarly, the processor can implement or execute the various exemplary logical steps described in conjunction with the disclosure of this application. The processor can be a central processing unit, a general-purpose processor, a digital signal processor, an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA), or other programmable logic devices, transistor logic devices, hardware components, or any combination thereof. It can implement or execute the various exemplary logical steps described in conjunction with the disclosure of this application. The processor can also be a combination that implements computational functions, such as a combination of one or more microprocessors, a combination of a DSP and a microprocessor, etc.

[0077] According to a fourth aspect of this application, a computer-readable storage medium is also provided, on which a computer program is stored, characterized in that, when executed by a processor, the computer program is capable of implementing the steps of the MQTT-based centralized edge IoT agent communication encryption method in any of the technical solutions of the first aspect of this application.

[0078] In this embodiment, the computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination thereof. More specific examples of computer-readable storage media (a non-exhaustive list) include: an electrical connection having one or more wires, a portable computer disk, a hard disk, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM), a register, a hard disk, an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof, or any other form of computer-readable storage medium known in the art. An exemplary storage medium is coupled to a processor, enabling the processor to read information from and write information to the storage medium. Of course, the storage medium may also be a component of the processor. The processor and storage medium may reside within an application-specific integrated circuit (ASIC). In embodiments of this application, the computer-readable storage medium may be any tangible medium containing or storing a program that may be used by or in conjunction with an instruction execution system, apparatus, or device.

[0079] The above are merely specific embodiments of this application, but the scope of protection of this application is not limited thereto. Any variations or substitutions within the technical scope disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

Claims

1. A communication encryption method for a centralized edge IoT agent based on MQTT, characterized in that, Encryption for communication between several soft edge IoT agents and several integrated digital processing gateways, wherein the soft edge IoT agents and integrated digital processing gateways communicate via the MQTT protocol, the method includes the following steps: Step S1-1: The integrated digital processing gateway sends a first connection request data packet to the corresponding soft edge IoT agent. The first connection request data packet includes the identity authentication code of the integrated digital processing gateway and a first random number R1, wherein the first random number R1 is a random number generated by the integrated digital processing gateway. Step S1-2: The soft edge IoT agent matches the corresponding shared symmetric key k based on the identity authentication code of the integrated digital processing gateway. n n = 1, 2, 3, ..., m, where k n Symmetric keys are pre-embedded in soft edge IoT agents and integrated digital processing gateways; Steps S1-3: The soft edge IoT agent generates a second random number R2, and according to... Calculate the integrated key K; the soft edge IoT agent sends a second connection request data packet to the corresponding integrated digital processing gateway, the second connection request data packet including a second random number R2; Step S1-4: After receiving the second connection request data packet, the integrated digital processing gateway... Calculate the integrated key K, use the integrated key to encrypt the verification data packet, and send the verification data packet to the soft edge IoT agent. The verification data packet includes the identity authentication code and verification data of the integrated digital processing gateway. Step S1-5: After receiving the verification data packet, the soft edge IoT agent decrypts it using the comprehensive key K and verifies whether the identity authentication code is correct. If the identity authentication code is verified, the verification data is stored.

2. The communication encryption method for a centralized edge IoT agent based on MQTT according to claim 1, characterized in that, The MQTT-based centralized edge IoT agent communication encryption method also includes: Step S0-1: Set up a centralized edge IoT agent platform and configure several soft edge IoT agents in the centralized edge IoT agent platform.

3. The communication encryption method for a centralized edge IoT agent based on MQTT according to claim 2, characterized in that, The MQTT-based centralized edge IoT agent communication encryption method also includes: Step S0-2: Set up several integrated digital processing gateways in a preset area. Each integrated digital processing gateway is connected to a centralized edge IoT agent platform. Configure several aggregation nodes under the integrated digital processing gateways. Each aggregation node is connected to several online monitoring devices so that the monitoring data of the online monitoring devices can be concentrated at the aggregation nodes.

4. The communication encryption method for a centralized edge IoT agent based on MQTT according to claim 1, characterized in that, In steps S1-2, the symmetric key k pre-embedded in several soft edge IoT agents and several integrated digital processing gateways n satisfy: In the formula, k1 and k2 are the pre-set symmetric keys of the first and second integrated digital processing gateways, respectively, H1(·) is the hash function, and id n This is the identification code for the integrated digital processing gateway.

5. The communication encryption method for a centralized edge IoT agent based on MQTT according to claim 1, characterized in that, In steps S1-4, the verification data includes the geographic coordinates of the integrated digital processing gateway.

6. The communication encryption method for a centralized edge IoT agent based on MQTT according to claim 1, characterized in that, The MQTT-based centralized edge IoT agent communication encryption method also includes: Step S1-6: After completing steps S1-1 to S1-5, the data transmission between the soft edge IoT agent and the integrated digital processing gateway is directly encrypted using the integrated key K calculated in step S1-3, and the data transmitted by the integrated digital processing gateway to the soft edge IoT agent does not contain the identity authentication code of the integrated digital processing gateway.

7. The communication encryption method for a centralized edge IoT agent based on MQTT according to claim 6, characterized in that, In steps S1-6, the data transmitted by the integrated digital processing gateway to the soft edge IoT agent includes the geographic location coordinates of the integrated digital processing gateway.

8. A communication encryption system based on MQTT centralized edge IoT agent, characterized in that, The communication encryption method for implementing the MQTT-based centralized edge IoT agent as described in any one of claims 1-7, the system comprising a plurality of soft edge IoT agents and a plurality of integrated digital processing gateways; in, The integrated digital processing gateway is used to send the first connection request data packet to the corresponding soft edge IoT agent; and is used to... Calculate the integrated key K, use the integrated key to encrypt the verification data packet, and send the verification data packet to the soft edge IoT agent; The soft edge IoT agent is used to match the corresponding shared symmetric key k based on the authentication code of the integrated digital processing gateway. n ; and used to generate a second random number R2, and according to Calculate the integrated key K; and use it to send a second connection request data packet to the corresponding integrated digital processing gateway; and after receiving the verification data packet, use the integrated key K to decrypt it and verify whether the identity authentication code is correct. If the identity authentication code is verified, store the verification data.

9. A computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the computer program, it is able to implement the steps of the communication encryption method of the centralized edge IoT agent based on MQTT as described in any one of claims 1-7.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it can implement the steps of the communication encryption method of the centralized edge IoT agent based on MQTT as described in any one of claims 1-7.

Images