Multi-Domain Isolation and Control Method and System Applied to Internet of Things Scenarios

Abstract

The present invention provides a multi-domain isolation control method and system applied to the Internet of Things scenario. Based on services, a multi-domain isolation underlying framework that takes into account security, stability, and open efficiency is divided. Each service is regarded as an independent entity to achieve comprehensive isolation between services, prevent the spread of potential threats and failures between different services, and also help prevent the leakage of sensitive information, ensure that data does not transfer across services without proper authorization, enhance privacy protection and overall credibility, accurately conduct responsibility tracing and auditing, and prevent the abuse of connection permissions.

Description

Technical Field

[0001] The present invention relates to the field of the Internet of Things, and in particular to a multi-domain isolation management and control method and system applied to Internet of Things scenarios. Background Art

[0002] In the industrial Internet of Things scenario, in order to achieve digital transformation, it is very common to integrate existing devices into the Internet of Things. However, in the process of establishing connections with existing devices, due to efficiency and cost considerations, the security design of the existing device's built-in system is usually ignored. For example, the system of existing devices can be logged in without a fixed password or administrator account. This will lead to great security risks in the increasingly complex business interactions and device connections. This risk problem is difficult to solve through underlying security mechanisms such as network protocol encryption, and cannot effectively prevent the spread of potential threats and faults within the industrial Internet of Things, reducing the working safety of the industrial Internet of Things. Summary of the invention

[0003] The purpose of the present invention is to provide a multi-domain isolation management and control method and system applied to an Internet of Things scenario, which identifies the operation attribute information of a business in an effective state in an Internet of Things operating system platform, thereby adjusting the open state of the external interface of the business, and based on the operation requirement information of the business, performs access and policy control processing on the business, ensures that different businesses cannot communicate arbitrarily, only opens the minimum external interface and minimizes potential security risks; also based on the connection feature information of the business, performs hardware and software isolation processing on the associated data stream of the business to prevent data from being transmitted across businesses; also matches the external entity connected to the Internet of Things operating system platform with the business, and allocates the control authority of the connection with the external entity to a specific business separately, so that the control of the external entity cannot be shared between different businesses, so that a multi-domain isolation underlying framework that takes into account security, stability, and open efficiency is divided based on the business, each business is regarded as an independent entity, and comprehensive isolation between businesses is achieved, preventing potential threats and faults from spreading between different businesses, and also helps to prevent the leakage of sensitive information, ensure that data will not be transmitted beyond authority between businesses, improve privacy protection and overall credibility, accurately trace responsibility and audit, and prevent the abuse of connection permissions.

[0004] The present invention is achieved through the following technical solutions:

[0005] The multi-domain isolation control method applied to IoT scenarios includes:

[0006] Obtain the business presence status information of the Internet of Things operating system platform, and based on the business presence status information, identify all the services in the effective state; based on the operation attribute information of the services in the effective state, adjust the external interface opening status of the services in the effective state; and based on the operation requirement information of the services in the effective state, perform access and policy control processing on the services in the effective state;

[0007] Perform connection monitoring on the Internet of Things operating system platform to obtain the connection characteristic information of all the services in the effective state; based on the connection characteristic information, perform isolation processing on the associated data streams of the corresponding services at the hardware level and the software level;

[0008] Identify the external entities connected to the Internet of Things operating system platform to obtain the working status information of the external entities; based on the working status information, separately assign the control authority for the connection with the external entities to a specific service; and then based on the execution process information of the specific service, adjust the connection status between the external entity and the Internet of Things operating system platform.

[0009] Optionally, obtain the business presence status information of the Internet of Things operating system platform, and based on the business presence status information, identify all the services in the effective state; based on the operation attribute information of the services in the effective state, adjust the external interface opening status of the services in the effective state; and based on the operation requirement information of the services in the effective state, perform access and policy control processing on the services in the effective state, including:

[0010] Monitor the business operation end of the Internet of Things operating system platform to obtain the business construction or integration progress information of the business operation end; based on the business construction or integration progress information, determine the services that have completed the construction or integration operation under the business operation end as the services in the effective state;

[0011] Perform business operation - related data attribute identification processing on all the services in the effective state respectively to obtain the business processing sub - process attribute information corresponding to each of all the services in the effective state; wherein, the business processing sub - process attribute information includes the information on the types of pending business data and the information on the change in the traffic of pending business data corresponding to each of all the business processing sub - processes under the services in the effective state; based on the information on the types of pending business data of the services in the effective state, determine the external interfaces required for external communication during the execution of the services in the effective state, and adjust the connection lifecycle and the ownership of the connections of the external interfaces;

[0012] Identify all business processing sub - processes under a business in an effective state, and obtain the storage location information of the data required during the execution of all business processing sub - processes of the business in an effective state and the operation type information; based on the storage location information of the required data and the operation type information, adjust the data access scope and the allowed operation policy of the business in an effective state.

[0013] Optionally, monitor the connection of the Internet of Things operating system platform to obtain the connection characteristic information of each business in an effective state; based on the connection characteristic information, perform isolation processing on the associated data streams of the corresponding business at the hardware level and the software level, including:

[0014] Monitor the business operation end of the Internet of Things operating system platform to obtain the connection life cycle and the ownership of the connection during the execution of the corresponding business processing sub - processes by all businesses in an effective state, and use this as the connection characteristic information;

[0015] Based on the connection characteristic information, perform data transmission isolation processing on all hardware ends and all software ends outside the associated connection link during the execution of the business processing sub - processes by the corresponding business.

[0016] Optionally, perform data transmission isolation processing on all hardware ends and all software ends outside the associated connection link during the execution of the business processing sub - processes by the corresponding business, including:

[0017] Step S1, according to the received data, determine the hardware end or software end from which the data comes, and then use the following formula (1) to control whether data transmission isolation processing is required.

[0018]

[0019] In the above formula (1), F represents the control value for whether data transmission isolation processing is required for the received data; A_IP y represents the IP number of the hardware end from which the received data comes, and if the data comes from the software end, this value is 0; B_IP r represents the IP number of the software end from which the received data comes, and if the data comes from the hardware end, this value is 0; WIP y (a) represents the IP number of the a - th hardware end outside the associated connection link during the execution of the business processing sub - processes by the corresponding business; WIP r (b) represents the IP number of the b - th software end outside the associated connection link during the execution of the business processing sub - processes by the corresponding business; n represents the number of all hardware ends outside the associated connection link during the execution of the business processing sub - processes by the corresponding business; m represents the number of all software ends outside the associated connection link during the execution of the business processing sub - processes by the corresponding business.

[0020] If F = 1, it means that data transmission isolation processing needs to be performed on the received data;

[0021] If F = 0, it means that data transmission isolation processing does not need to be performed on the received data;

[0022] Step S2, if data transmission isolation processing is required, then use the following formula (2) to generate the control weight of the corresponding hardware end or software end this time according to the data volume of the data to be isolated processed,

[0023]

[0024] In the above formula (2), G represents the control weight of the corresponding hardware end or software end this time; D represents the data volume of the data to be isolated processed this time; D0 represents the data volume setting threshold; if() means that if the arithmetic expression in the parentheses holds, the overall value is 1, and if the arithmetic expression in the parentheses does not hold, the overall value is 0;

[0025] Step S3, use the following formula (3) to control some hardware ends or software ends to enter the temporarily closed state according to the number of times all hardware ends and all software ends are isolated and the control weight each time,

[0026]

[0027] In the above formula (3), Q[WIP y (a)] represents the temporarily closed state control value of the hardware end corresponding to the a-th hardware end IP number outside the associated connection link during the process of the corresponding service executing the service processing sub-process; Q[WIP r (b)] represents the temporarily closed state control value of the software end corresponding to the b-th software end IP number outside the associated connection link during the process of the corresponding service executing the service processing sub-process; G k1 [WIP y (a)] represents the k1-th control weight of the hardware end corresponding to the a-th hardware end IP number outside the associated connection link during the process of the corresponding service executing the service processing sub-process; K1 represents the total number of control weights of the hardware end corresponding to the a-th hardware end IP number outside the associated connection link during the process of the corresponding service executing the service processing sub-process; G k2 [WIP r (b)] represents the k2-th control weight of the software end corresponding to the b-th software end IP number outside the associated connection link during the process of the corresponding service executing the service processing sub-process; K2 represents the total number of control weights of the software end corresponding to the b-th software end IP number outside the associated connection link during the process of the corresponding service executing the service processing sub-process;

[0028] If Q[WIP y(a)] = 1, the control of the a-th hardware end IP number corresponding to the hardware end outside the associated connection link during the business processing sub-process of the corresponding business enters a temporarily closed state;

[0029] If Q[WIP y (a)] = 0, the control of the hardware end corresponding to the a-th hardware end IP number outside the associated connection link during the business processing sub-process of the corresponding business does not enter a temporarily closed state;

[0030] If Q[WIP r (b)] = 1, the control of the b-th software end IP number corresponding to the software end outside the associated connection link during the business processing sub-process of the corresponding business enters a temporarily closed state;

[0031] If Q[WIP r (b)] = 0, the control of the software end corresponding to the b-th software end IP number outside the associated connection link during the business processing sub-process of the corresponding business does not enter a temporarily closed state.

[0032] Optionally, identify the external entities connected to the Internet of Things operating system platform to obtain the working status information of the external entities; based on the working status information, separately allocate the control authority for the connection with the external entities to specific services; then, based on the execution process information of the specific services, adjust the connection status between the external entities and the Internet of Things operating system platform, including:

[0033] Identify the external entities connected to the Internet of Things operating system platform to obtain the current connection control authority of the external entities, and separately allocate the connection control authority to specific services;

[0034] Obtain the execution process information of each business processing sub-process under the specific service. Based on the execution process information, determine whether the selected service has been in a complete processing state. If so, interrupt the connection between the external entity and the Internet of Things operating system platform; if not, keep the current connection status between the external entity and the Internet of Things operating system platform unchanged.

[0035] A multi-domain isolation and control system applied to the Internet of Things scenario, including:

[0036] A service identification module, used to obtain the service existence status information of the Internet of Things operating system platform, and identify all services in an effective state based on the service existence status information;

[0037] The business outreach status adjustment module is used to adjust the external interface opening status of the services in the valid state based on the operation attribute information of the services in the valid state; and perform access and policy control processing on the services in the valid state based on the operation requirement information of the services in the valid state;

[0038] The connection recognition module is used to monitor the connections of the Internet of Things operating system platform to obtain the connection characteristic information of each service in the valid state;

[0039] The data isolation module is used to perform isolation processing on the associated data streams of the corresponding services at the hardware level and software level based on the connection characteristic information;

[0040] The external entity recognition module is used to recognize the external entities connected to the Internet of Things operating system platform to obtain the working status information of the external entities;

[0041] The external entity status adjustment module is used to separately assign the control authority of the connection with the external entity to a specific service based on the working status information; and then adjust the connection status between the external entity and the Internet of Things operating system platform based on the execution process information of the specific service.

[0042] Optionally, the service recognition module is used to obtain the service existence status information of the Internet of Things operating system platform, and based on the service existence status information, recognize all services in the valid state, including:

[0043] Monitor the service operation end of the Internet of Things operating system platform to obtain the service construction or integration progress information of the service operation end; based on the service construction or integration progress information, determine the services that have completed the construction or integration operations under the service operation end as services in the valid state;

[0044] The business outreach status adjustment module is used to adjust the external interface opening status of the services in the valid state based on the operation attribute information of the services in the valid state; and perform access and policy control processing on the services in the valid state based on the operation requirement information of the services in the valid state, including:

[0045] For all services in the active state, perform business operation - related data attribute recognition processing respectively to obtain the business - processing sub - process attribute information corresponding to each of all services in the active state; wherein, the business - processing sub - process attribute information includes the information on the types of to - be - processed service data and the information on the change of to - be - processed service data traffic corresponding to each of all business - processing sub - processes subordinate to the service in the active state; based on the information on the types of to - be - processed service data of the service in the active state, determine the external interfaces required for external communication during the execution of the service in the active state, and adjust the connection life cycle and the ownership of the connection of the external interfaces.

[0046] Identify all business - processing sub - processes subordinate to the service in the active state to obtain the storage location information of the data required during the execution of all business - processing sub - processes by the service in the active state and the information on the types of arithmetic operations; based on the storage location information of the required data and the information on the types of arithmetic operations, adjust the data access scope and the allowed operation policy of the service in the active state.

[0047] Optionally, the connection identification module is used to monitor the connections of the Internet of Things operating system platform to obtain the connection characteristic information of each of all services in the active state, including:

[0048] Monitor the business operation end of the Internet of Things operating system platform to obtain the connection life cycle and the ownership of the connection during the execution of the corresponding business - processing sub - processes by each of all services in the active state, and use this as the connection characteristic information.

[0049] The data isolation module is used to perform isolation processing on the associated data streams of the corresponding service at the hardware level and the software level based on the connection characteristic information, including:

[0050] Based on the connection characteristic information, perform data transmission isolation processing on all hardware ends and all software ends outside the associated connection link during the execution of the business - processing sub - processes by the corresponding service.

[0051] Optionally, the external entity identification module is used to identify the external entities connected to the Internet of Things operating system platform to obtain the working state information of the external entities; based on the working state information, separately allocate the control rights of the connections to the external entities to a specific service, including:

[0052] Identify the external entities connected to the Internet of Things operating system platform to obtain the current control rights of the connections to the external entities, and separately allocate the control rights of the connections to a specific service.

[0053] The external entity status adjustment module is used to adjust the connection status between the external entity and the Internet of Things operating system platform based on the execution process information of the specific service, including:

[0054] Obtain the execution process information of each business processing sub-process under the specific service. Based on the execution process information, determine whether the selected service has been in a complete processing state. If so, interrupt the connection between the external entity and the Internet of Things operating system platform; if not, keep the current connection status between the external entity and the Internet of Things operating system platform unchanged.

[0055] Compared with the prior art, the present invention has the following beneficial effects:

[0056] The multi-domain isolation control method and system applied to the Internet of Things scenario provided by this application identify the operation attribute information of the services in the effective state in the Internet of Things operating system platform, thereby adjusting the external interface opening state of the services, and based on the operation requirement information of the services, perform access and policy control processing on the services to ensure that different services cannot communicate arbitrarily, only open the minimum degree of external interfaces and minimize potential security risks; also, based on the connection characteristic information of the services, perform isolation processing on the associated data streams of the services at the hardware level and software level to prevent data from being transmitted across services; further, match the external entities connected to the Internet of Things operating system platform with the services, and separately assign the control authority for the connection with the external entities to specific services, so that the control of the external entities cannot be shared among different services. In this way, a multi-domain isolation underlying framework that takes into account security, stability, and opening efficiency is divided based on services. Each service is regarded as an independent entity to achieve comprehensive isolation between services, prevent the spread of potential threats and faults between different services, and also help prevent the leakage of sensitive information, ensure that data will not be transmitted across services without permission, improve privacy protection and overall credibility, accurately conduct responsibility tracing and auditing, and prevent the abuse of connection permissions. Description of the Drawings

[0057] In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings required for use in the description of the embodiments or the prior art. Obviously, the following drawings are only some embodiments of the present invention. For those of ordinary skill in the art, without creative efforts, other drawings can also be obtained based on these drawings. Among them:

[0058] Figure 1 It is a schematic flowchart of the multi-domain isolation control method applied to the Internet of Things scenario provided by the present invention.

[0059] Figure 2 It is a schematic structural diagram of the multi-domain isolation control system applied to the Internet of Things scenario provided by the present invention. DETAILED DESCRIPTION

[0060] In order to make the above-mentioned purposes, features and advantages of the present application more obvious and easy to understand, the specific implementation methods of the present application are described in detail below in conjunction with the accompanying drawings. It is to be understood that the specific embodiments described herein are only used to explain the present application, rather than to limit the present application. It should also be noted that, for ease of description, only some structures related to the present application are shown in the accompanying drawings, rather than all structures. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of this application.

[0061] The terms "including" and "having" and any variations thereof in this application are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device comprising a series of steps or units is not limited to the listed steps or units, but may optionally include steps or units not listed, or may optionally include other steps or units inherent to these processes, methods, products or devices.

[0062] Reference to "embodiments" herein means that a particular feature, structure, or characteristic described in conjunction with the embodiments may be included in at least one embodiment of the present application. The appearance of the phrase in various locations in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment that is mutually exclusive with other embodiments. It is explicitly and implicitly understood by those skilled in the art that the embodiments described herein may be combined with other embodiments.

[0063] See also Figure 1 As shown, an embodiment of the present application provides a multi-domain isolation control method applied to an Internet of Things scenario. The multi-domain isolation control method applied to an Internet of Things scenario includes:

[0064] Obtaining the service existence status information of the IoT operating system platform, and identifying all services in a valid state based on the service existence status information; adjusting the external interface open state of the services in a valid state based on the operation attribute information of the services in a valid state; and performing access and policy control processing on the services in a valid state based on the operation requirement information of the services in a valid state;

[0065] The IoT operating system platform is connected to monitor the connection and obtain the connection characteristic information of all services in a valid state; based on the connection characteristic information, the associated data flow of the corresponding service is isolated at the hardware level and the software level;

[0066] Identify the external entities connected to the Internet of Things operating system platform to obtain the working status information of the external entities; based on the working status information, separately assign the control authority for the connection with the external entities to a specific service; and then adjust the connection status between the external entities and the Internet of Things operating system platform based on the execution process information of the specific service.

[0067] Beneficial effects of the above embodiments: The multi-domain isolation and control method applied to the Internet of Things scenario identifies the operation attribute information of the services in the effective state in the Internet of Things operating system platform, adjusts the external interface opening state of the services accordingly, and performs access and policy control processing on the services based on the operation requirement information of the services, ensuring that different services cannot communicate arbitrarily, only opening the minimum external interfaces and minimizing potential security risks; also, based on the connection characteristic information of the services, isolate the associated data streams of the services at the hardware and software levels to prevent cross-service data transmission; further, match the external entities connected to the Internet of Things operating system platform with the services, and separately assign the control authority for the connection with the external entities to a specific service, so that the control of the external entities cannot be shared among different services. In this way, a multi-domain isolation underlying framework that takes into account security, stability, and opening efficiency is established based on service division, regarding each service as an independent entity, achieving comprehensive isolation between services, preventing the spread of potential threats and failures among different services, helping to prevent the leakage of sensitive information, ensuring that data does not exceed its authority during transmission between services, enhancing privacy protection and overall credibility, accurately conducting responsibility tracing and auditing, and preventing the abuse of connection permissions.

[0068] In another embodiment, obtain the service existence status information of the Internet of Things operating system platform, and based on the service existence status information, identify all services in the effective state; based on the operation attribute information of the services in the effective state, adjust the external interface opening state of the services in the effective state; and based on the operation requirement information of the services in the effective state, perform access and policy control processing on the services in the effective state, including:

[0069] Monitor the service operation end of the Internet of Things operating system platform to obtain the service construction or integration progress information of the service operation end; based on the service construction or integration progress information, determine the services that have completed the construction or integration operations under the service operation end as the services in the effective state.

[0070] For all services in the valid state, perform business operation - related data attribute identification processing respectively to obtain the business - processing sub - process attribute information corresponding to each of all services in the valid state. Among them, the business - processing sub - process attribute information includes the information on the types of to - be - processed business data and the information on the change of to - be - processed business data traffic corresponding to each of all business - processing sub - processes subordinate to the service in the valid state. Based on the information on the types of to - be - processed business data of the service in the valid state, determine the external interfaces required for external communication during the execution of the service in the valid state, and adjust the connection life cycle and the ownership of the connection of the external interface.

[0071] Identify all business - processing sub - processes subordinate to the service in the valid state to obtain the information on the storage location of the data required during the execution of all business - processing sub - processes by the service in the valid state and the information on the types of arithmetic operations. Based on the information on the storage location of the required data and the information on the types of arithmetic operations, adjust the data access scope and the allowed operation policy of the service in the valid state.

[0072] The beneficial effects of the above embodiments are as follows. As the management and control platform of the industrial Internet of Things, the Internet of Things operating system platform can include multiple business operation terminals. Each business operation terminal works independently to build or integrate corresponding services, so that the Internet of Things operating system platform can perform subsequent computing processes on the corresponding services. To ensure the integrity of the services, the business operation terminals are monitored to obtain the service construction or process progress information of the business operation terminals, so as to dynamically monitor the status of the services within the business operation terminals. Then, based on the service construction or integration progress information, the services that have completed the construction or integration operations under the business operation terminals are determined as services in an effective state, which can ensure that only complete services can perform subsequent operations. In addition, for all services in an effective state, the service operation associated data attribute recognition process is performed respectively to obtain the service processing sub-process attribute information corresponding to each of all services in an effective state, which can accurately identify the types of service data to be processed and the changes in the service data flow to be processed for all service processing sub-processes under the service, providing a reliable basis for subsequently selecting an external interface that matches the service and adjusting the switch state of the external interface. In actual work, based on the information on the types of service data to be processed of the services in an effective state, the external interfaces required for external communication during the execution of the services in an effective state are determined, so that the external interfaces can accurately perform external communication on the service data to be processed by the corresponding parties. In addition, all service processing sub-processes under the services in an effective state are identified to obtain the storage location information and operation type information of the data required during the execution of all service processing sub-processes by the services in an effective state; based on the storage location information of the required data and the operation type information, the data access scope and the allowed operation policy of the services in an effective state are adjusted, which can effectively limit the operation behavior and data access scope of the services, minimize potential security risks, and prevent the spread of potential threats and failures among different services.

[0073] In another embodiment, connection monitoring is performed on the Internet of Things operating system platform to obtain the connection characteristic information of each of all services in an effective state; based on the connection characteristic information, isolation processing of the associated data flow of the corresponding service is performed at the hardware level and the software level, including:

[0074] Connection monitoring is performed on the business operation terminals of the Internet of Things operating system platform to obtain the connection life cycle and the ownership of the connection during the execution of the corresponding service processing sub-processes of all services in an effective state, which are used as the connection characteristic information;

[0075] Based on the connection characteristic information, data transmission isolation processing is performed on all hardware terminals and all software terminals outside the associated connection link during the execution of the service processing sub-processes of the corresponding service.

[0076] The beneficial effects of the above embodiments are as follows: By connecting and monitoring the business operation end of the Internet of Things operating system platform, the connection lifecycle and connection ownership of all services in the effective state during the execution of the corresponding business processing sub-processes are obtained. Also, based on this connection feature information, data transmission isolation processing is performed on all hardware ends and all software ends other than the associated connection links during the execution of the corresponding business processing sub-processes. This enables effective and reliable isolation of services at the hardware and software levels, provides effective privacy protection for services, and enhances the overall credibility of the Internet of Things.

[0077] In another embodiment, the data transmission isolation processing for all hardware ends and all software ends other than the associated connection links during the execution of the corresponding business processing sub-processes includes:

[0078] Step S1: According to the received data, determine the hardware end or software end from which the data originated, and then use the following formula (1) to control whether data transmission isolation processing is required.

[0079]

[0080] In the above formula (1), F represents the control value for whether data transmission isolation processing is required for the received data; A_IP y represents the IP number of the hardware end from which the received data originated. If the data is from the software end, this value is 0; B_IP r represents the IP number of the software end from which the received data originated. If the data is from the hardware end, this value is 0; WIP y (a) represents the IP number of the a-th hardware end outside the associated connection link during the execution of the corresponding business processing sub-process; WIP r (b) represents the IP number of the b-th software end outside the associated connection link during the execution of the corresponding business processing sub-process; n represents the total number of all hardware ends outside the associated connection link during the execution of the corresponding business processing sub-process; m represents the total number of all software ends outside the associated connection link during the execution of the corresponding business processing sub-process.

[0081] If F = 1, it means that data transmission isolation processing is required for the received data;

[0082] If F = 0, it means that data transmission isolation processing is not required for the received data;

[0083] Step S2: If data transmission isolation processing is required, then use the following formula (2) to generate the control weight for the corresponding hardware end or software end according to the data volume of the data to be isolated.

[0084]

[0085] In the above formula (2), G represents the control weight corresponding to the hardware side or software side this time; D represents the data volume of the data to be isolated processed this time; D0 represents the data volume setting threshold; if() means that if the arithmetic expression in the brackets holds, the overall value is 1, and if the arithmetic expression in the brackets does not hold, the overall value is 0;

[0086] Step S3, using the following formula (3), according to the number of times all hardware sides and all software sides are isolated and the control weight each time, control some hardware sides or software sides to enter the temporarily closed state,

[0087]

[0088] In the above formula (3), Q[WIP y (a)] represents the temporarily closed state control value of the hardware side corresponding to the a-th hardware side IP number outside the associated connection link during the business processing sub-process of the corresponding business; Q[WIP r (b)] represents the temporarily closed state control value of the software side corresponding to the b-th software side IP number outside the associated connection link during the business processing sub-process of the corresponding business; G k1 [WIP y (a)] represents the k1-th control weight of the hardware side corresponding to the a-th hardware side IP number outside the associated connection link during the business processing sub-process of the corresponding business; K1 represents the total number of control weights of the hardware side corresponding to the a-th hardware side IP number outside the associated connection link during the business processing sub-process of the corresponding business; G k2 [WIP r (b)] represents the k2-th control weight of the software side corresponding to the b-th software side IP number outside the associated connection link during the business processing sub-process of the corresponding business; K2 represents the total number of control weights of the software side corresponding to the b-th software side IP number outside the associated connection link during the business processing sub-process of the corresponding business;

[0089] If Q[WIP y (a)] = 1, then the control of the hardware side corresponding to the a-th hardware side IP number outside the associated connection link during the business processing sub-process of the corresponding business enters the temporarily closed state;

[0090] If Q[WIP y (a)] = 0, then the control of the hardware side corresponding to the a-th hardware side IP number outside the associated connection link during the business processing sub-process of the corresponding business does not enter the temporarily closed state;

[0091] If Q[WIP r(b)] = 1, the software-side control corresponding to the b-th software-side IP number outside the associated connection link during the execution of the corresponding service's business processing sub-process enters a temporarily closed state;

[0092] If Q[WIP r (b)] = 0, the software-side corresponding to the b-th software-side IP number outside the associated connection link during the execution of the corresponding service's business processing sub-process is not controlled to enter a temporarily closed state.

[0093] The beneficial effects of the above embodiments are as follows: By using the above formula (1), it is controlled whether data transmission isolation processing is required, so that the isolation processing can be quantified into calculation and judgment, which can ensure the reliability and accuracy of the isolated data processing; then by using the above formula (2), according to the data volume of the data to be isolated, the control weight corresponding to the current hardware side or software side is generated, and then the isolated data situation is recorded after each data isolation processing for subsequent analysis and control; then by using the above formula (3), according to the number of times all hardware sides and all software sides are isolated and the control weight each time, some hardware sides or software sides are controlled to enter a temporarily closed state, so that some hardware sides or software sides with a large data volume and a large number of interference times enter a temporarily closed state to ensure that the communication of the associated connection link during the execution of the corresponding service's business processing sub-process is not greatly interfered, and the reliability of the system is ensured.

[0094] In another embodiment, the external entities connected to the Internet of Things operating system platform are identified to obtain the working state information of the external entities; based on the working state information, the control authority for the connection with the external entities is separately assigned to a specific service; and then based on the execution process information of the specific service, the connection state between the external entities and the Internet of Things operating system platform is adjusted, including:

[0095] The external entities connected to the Internet of Things operating system platform are identified to obtain the current connection control authority of the external entities, and the connection control authority is separately assigned to a specific service;

[0096] The execution process information of each business processing sub-process under the specific service is obtained. Based on the execution process information, it is judged whether the selected service has been in a complete processing state. If so, the connection between the external entity and the Internet of Things operating system platform is interrupted; if not, the current connection state between the external entity and the Internet of Things operating system platform remains unchanged.

[0097] The beneficial effects of the above embodiments are as follows: identifying external entities connected to the Internet of Things operating system platform, obtaining the control permissions currently connected to the external entity, and separately allocating the control permissions of the connection to specific services. This can ensure that each service can obtain independent control permissions for the matching external entity as an entity, meet the resources required for service processing, and avoid sharing of external entities among different services. It also obtains the execution process information of each service processing subprocess under the selected service, and based on this execution process information, determines whether the selected service is in a complete processing state, and accordingly adjusts the connection state between the external entity and the Internet of Things operating system platform to prevent sensitive information of the Internet of Things operating system platform from leaking to external entities.

[0098] Please refer to Figure 2 As shown in the figure, a multi-domain isolation and control system applied to the Internet of Things scenario provided by an embodiment of the present application. The multi-domain isolation and control system applied to the Internet of Things scenario includes:

[0099] A service identification module, configured to obtain service presence status information of the Internet of Things operating system platform, and identify all services in an effective state based on the service presence status information;

[0100] A service external connection state adjustment module, configured to adjust the open state of the external interface of the services in an effective state based on the operation attribute information of the services in an effective state; and perform access and policy control processing on the services in an effective state based on the operation requirement information of the services in an effective state;

[0101] A connection identification module, configured to monitor the connections of the Internet of Things operating system platform to obtain connection characteristic information of all services in an effective state;

[0102] A data isolation module, configured to perform isolation processing on the associated data streams of the corresponding services at the hardware level and the software level based on the connection characteristic information;

[0103] An external entity identification module, configured to identify external entities connected to the Internet of Things operating system platform to obtain the working state information of the external entity;

[0104] An external entity state adjustment module, configured to separately allocate the control permissions of the connection to the external entity to a specific service based on the working state information; and then adjust the connection state between the external entity and the Internet of Things operating system platform based on the execution process information of the specific service.

[0105] The beneficial effects of the above embodiments are as follows. The multi-domain isolation and control system applied to the Internet of Things scenario identifies the operation attribute information of the services in the effective state in the Internet of Things operating system platform, adjusts the external interface opening state of the services accordingly, and performs access and policy control processing on the services based on the operation requirement information of the services, ensuring that different services cannot communicate arbitrarily, only opening the minimum external interfaces and minimizing potential security risks. It also performs isolation processing on the associated data streams of the services at the hardware and software levels based on the connection characteristic information of the services to prevent cross-service data transmission. It also matches the external entities connected to the Internet of Things operating system platform with the services and separately assigns the control rights for connecting to the external entities to specific services, so that the control of the external entities cannot be shared among different services. In this way, a multi-domain isolation underlying framework that takes into account security, stability, and opening efficiency is divided based on the services, regarding each service as an independent entity, achieving comprehensive isolation among services, preventing the spread of potential threats and failures among different services, helping to prevent the leakage of sensitive information, ensuring that data does not exceed its authority in transmission among services, enhancing privacy protection and overall credibility, accurately tracing and auditing responsibilities, and preventing the abuse of connection permissions.

[0106] In another embodiment, the service identification module is used to obtain the service existence status information of the Internet of Things operating system platform, and based on this service existence status information, identify all services in the effective state, including:

[0107] Monitor the service operation end of the Internet of Things operating system platform to obtain the service construction or integration progress information of this service operation end; based on this service construction or integration progress information, determine the services that have completed the construction or integration operation under this service operation end as the services in the effective state;

[0108] The service external connection state adjustment module is used to adjust the external interface opening state of the services in the effective state based on the operation attribute information of the services in the effective state; and perform access and policy control processing on the services in the effective state based on the operation requirement information of the services in the effective state, including:

[0109] Perform service operation associated data attribute identification processing on all services in the effective state respectively to obtain the service processing sub-process attribute information corresponding to each of all services in the effective state; among them, this service processing sub-process attribute information includes the information on the type of service data to be processed and the change information on the service data traffic corresponding to each service processing sub-process under the services in the effective state; based on the information on the type of service data to be processed of the services in the effective state, determine the external interfaces required for external communication during the execution of the services in the effective state, and adjust the connection lifecycle and ownership of this external interface;

[0110] Identify all business processing sub - processes under the business in the valid state, and obtain the storage location information of the data required during the execution of all business processing sub - processes of the business in the valid state and the operation type information; based on the storage location information of the required data and the operation type information, adjust the data access scope and the allowed operation policy of the business in the valid state.

[0111] The beneficial effects of the above - mentioned embodiments are as follows. As the management and control platform of the industrial Internet of Things, the Internet of Things operating system platform can include multiple business operation terminals, and each business operation terminal works independently to build or integrate corresponding businesses, so that the Internet of Things operating system platform can perform subsequent arithmetic processing on the corresponding businesses. To ensure the integrity of the business, monitor the business operation terminals to obtain the business construction or process progress information of the business operation terminals, so as to dynamically monitor the internal business formation status of the business operation terminals. Then, based on the business construction or integration progress information, determine the business that has completed the construction or integration operation under the business operation terminal as the business in the valid state, which can ensure that only complete businesses can perform subsequent operations. In addition, perform business operation - related data attribute identification processing on all businesses in the valid state respectively, and obtain the business processing sub - process attribute information corresponding to each of all businesses in the valid state, which can accurately identify the types of business data to be processed and the changes in the data flow of the business data to be processed for all business processing sub - processes under the business, providing a reliable basis for subsequent selection of external interfaces matching the business and adjustment of the switch states of the external interfaces. In actual work, based on the information of the types of business data to be processed of the business in the valid state, determine the external interfaces required for external communication during the execution of the business in the valid state, so that the external interfaces can accurately perform external communication on the business data to be processed by the corresponding parties. Also, identify all business processing sub - processes under the business in the valid state, and obtain the storage location information of the data required during the execution of all business processing sub - processes of the business in the valid state and the operation type information; based on the storage location information of the required data and the operation type information, adjust the data access scope and the allowed operation policy of the business in the valid state, which can effectively limit the operation behavior and data access scope of the business, minimize potential security risks, and prevent the spread of potential threats and failures among different businesses.

[0112] In another embodiment, the connection identification module is used to monitor the connection of the Internet of Things operating system platform, and obtain the connection characteristic information of each of all businesses in the valid state, including:

[0113] Monitor the connection of the business operation end of the Internet of Things operating system platform to obtain the connection lifecycle and connection ownership of all effective services during the execution of the corresponding business processing sub-processes, and use this as the connection feature information;

[0114] The data isolation module is used to perform isolation processing on the associated data streams of the corresponding services at the hardware and software levels based on the connection feature information, including:

[0115] Based on the connection feature information, perform data transmission isolation processing on all hardware ends and all software ends outside the associated connection link during the execution of the business processing sub-process of the corresponding service.

[0116] The beneficial effects of the above embodiments are as follows: Monitor the connection of the business operation end of the Internet of Things operating system platform to obtain the connection lifecycle and connection ownership of all effective services during the execution of the corresponding business processing sub-processes. Also, based on the connection feature information, perform data transmission isolation processing on all hardware ends and all software ends outside the associated connection link during the execution of the business processing sub-process of the corresponding service, which can effectively and reliably isolate the service at the hardware and software levels, provide effective privacy protection for the service, and improve the overall credibility of the Internet of Things.

[0117] In another embodiment, the external entity recognition module is used to recognize the external entities connected to the Internet of Things operating system platform to obtain the working status information of the external entities; based on the working status information, separately assign the control authority of the connection with the external entity to a specific service, including:

[0118] Recognize the external entities connected to the Internet of Things operating system platform to obtain the current connection control authority of the external entities, and separately assign the control authority of the connection to a specific service;

[0119] The external entity status adjustment module is used to adjust the connection status between the external entity and the Internet of Things operating system platform based on the execution process information of the specific service, including:

[0120] Obtain the execution process information of each business processing sub-process under the specific service. Based on the execution process information, determine whether the selected service has been in a complete processing state. If so, interrupt the connection between the external entity and the Internet of Things operating system platform; if not, keep the current connection status between the external entity and the Internet of Things operating system platform unchanged.

[0121] The beneficial effects of the above embodiments are as follows: identifying the external entities connected to the Internet of Things operating system platform, obtaining the control permissions currently connected to the external entities, and separately allocating the control permissions of the connection to specific services. This can ensure that each service can obtain independent control permissions for the matching external entities as an entity, meet the resources required for service processing, and avoid the sharing of external entities among different services. It also obtains the execution process information of each business processing sub-process under the selected service. Based on this execution process information, it determines whether the selected service is already in a complete processing state, and adaptively adjusts the connection state between the external entity and the Internet of Things operating system platform to avoid the leakage of sensitive information of the Internet of Things operating system platform to external entities.

[0122] Generally speaking, the multi-domain isolation and control method and system applied to the Internet of Things scenario identify the running attribute information of the services in the effective state in the Internet of Things operating system platform, adjust the external interface opening state of the services accordingly, and perform access and policy control processing on the services based on the running requirement information of the services to ensure that different services cannot communicate arbitrarily, only open the minimum external interfaces and minimize potential security risks; it also isolates the associated data streams of the services at the hardware and software levels based on the connection characteristic information of the services to prevent data from being transmitted across services; it also matches the external entities connected to the Internet of Things operating system platform with the services, and separately allocates the control permissions of the connection to the external entities to specific services, so that the control of the external entities cannot be shared among different services. In this way, a multi-domain isolation underlying framework that takes into account security, stability, and opening efficiency is divided based on services, each service is regarded as an independent entity, comprehensive isolation between services is achieved, potential threats and failures are prevented from spreading among different services, it also helps to prevent the leakage of sensitive information, ensure that data does not exceed its authority during transmission between services, improve privacy protection and overall credibility, accurately conduct responsibility tracing and auditing, and prevent the abuse of connection permissions.

[0123] The above is only a specific embodiment of the present invention. Any improvement made on the premise of the present invention's concept is regarded as the protection scope of the present invention.

Claims

1. A multi-domain isolation control method applied to the Internet of Things scenario, characterized in that: include: Obtaining service existence status information of the IoT operating system platform, and identifying all services in a valid state based on the service existence status information; Adjusting the external interface opening state of the service in the valid state based on the operation attribute information of the service in the valid state; And based on the operation requirement information of the services in the effective state, access and policy control processing is performed on the services in the effective state; Performing connection monitoring on the IoT operating system platform to obtain connection feature information of all services in a valid state; Based on the connection characteristic information, the associated data flow of the corresponding service is isolated at the hardware level and the software level; Identify an external entity connected to the Internet of Things operating system platform and obtain working status information of the external entity; Based on the working status information, the control authority of the connection with the external entity is separately allocated to a specific business; and based on the execution process information of the specific business, the connection status of the external entity and the Internet of Things operating system platform is adjusted; The Internet of Things operating system platform is connected and monitored to obtain connection characteristic information of all services in a valid state; based on the connection characteristic information, the associated data flow of the corresponding service is isolated at the hardware level and the software level, including: Performing connection monitoring on the business operation end of the IoT operating system platform, obtaining the connection lifecycle and connection ownership of all valid businesses in the process of executing corresponding business processing sub-processes, and using this as the connection feature information; Based on the connection characteristic information, data transmission isolation processing is performed on all hardware ends and all software ends other than the associated connection link during the execution of the business processing sub-process of the corresponding business; Among them, data transmission isolation processing is performed on all hardware ends and all software ends other than the associated connection links during the execution of the business processing sub-process of the corresponding business, including: Step S1, based on the received data, determine whether the data corresponds to the hardware end or the software end, and then use the following formula (1) to control whether data transmission isolation processing is required. In the above formula (1), F represents the control value of whether the received data needs to be isolated for data transmission; A_IP y Indicates the IP number of the hardware end from which the received data comes. If the data comes from the software end, the value is 0; B_IP r Indicates the IP number of the software end from which the received data comes. If the data comes from the hardware end, the value is 0; WIP y (a) indicates the ath hardware IP number outside the associated connection link during the corresponding business execution business processing sub-process; WIP r (b) represents the IP number of the bth software end outside the associated connection link during the corresponding business execution business processing sub-process; n represents the number of all hardware ends outside the associated connection link during the corresponding business execution business processing sub-process; m represents the number of all software ends outside the associated connection link during the corresponding business execution business processing sub-process; If F=1, it means that the received data needs to be isolated for data transmission; If F = 0, it means that there is no need to perform data transmission isolation processing on the received data; Step S2: If data transmission isolation processing is required, the following formula (2) is used to generate the control weight of the corresponding hardware end or software end according to the amount of data to be isolated and processed: In the above formula (2), G represents the control weight of the corresponding hardware or software end this time; D represents the amount of data to be isolated and processed this time; D0 represents the data amount setting threshold; if() means that if the formula in the brackets is true, the overall value is 1, and if the formula in the brackets is not true, the overall value is 0; Step S3, using the following formula (3), according to the number of times all hardware terminals and all software terminals are isolated and the control weight of each time, control some hardware terminals or software terminals to enter a temporary shutdown state, In the above formula (3), Q[WIP y (a)] represents the temporary shutdown state control value of the hardware end corresponding to the ath hardware end IP number outside the associated connection link during the corresponding business execution business processing sub-process; Q[WIP r (b)] represents the temporary shutdown state control value of the software end corresponding to the b-th software end IP number outside the associated connection link during the corresponding business execution business processing sub-process; G k1 [WIP y (a)] represents the k1th control weight of the hardware end corresponding to the ath hardware end IP number outside the associated connection link during the corresponding business execution business processing sub-process; K1 represents the total number of hardware end control weights corresponding to the ath hardware end IP number outside the associated connection link during the corresponding business execution business processing sub-process; G k2 [WIP r (b)] represents the k2th control weight of the software end corresponding to the bth software end IP number outside the associated connection link during the corresponding business execution business processing sub-process; K2 represents the total number of software end control weights corresponding to the bth software end IP number outside the associated connection link during the corresponding business execution business processing sub-process; If Q[WIP y (a)] = 1, the hardware end control corresponding to the ath hardware end IP number outside the associated connection link during the corresponding business execution business processing sub-process enters a temporarily closed state; If Q[WIP y (a)]=0, the hardware end corresponding to the ath hardware end IP number outside the associated connection link during the corresponding business execution business processing sub-process is not controlled to enter the temporary closed state; If Q[WIP r (b)]=1, the software end control corresponding to the bth software end IP number outside the associated connection link during the corresponding business execution business processing sub-process enters a temporarily closed state; If Q[WIP r (b)]=0, the software end corresponding to the bth software end IP number outside the associated connection link during the corresponding business execution business processing sub-process is not controlled to enter the temporarily closed state.

2. The multi-domain isolation management and control method applied to the Internet of Things scenario as claimed in claim 1 is characterized in that: Acquire the service existence status information of the Internet of Things operating system platform, and identify all services in a valid state based on the service existence status information; adjust the external interface opening state of the services in a valid state based on the operation attribute information of the services in a valid state; Based on the operational demand information of the services in the effective state, access and policy control processing is performed on the services in the effective state, including: Monitor the business operation end of the Internet of Things operating system platform to obtain business construction or integration progress information of the business operation end; based on the business construction or integration progress information, determine the business that has completed the construction or integration operation under the business operation end as a valid business; Perform business operation-related data attribute identification processing on all businesses in a valid state, and obtain business processing sub-process attribute information corresponding to all businesses in a valid state; wherein the business processing sub-process attribute information includes the data type information of pending business and the change information of pending business data flow corresponding to all business processing sub-processes under the business in a valid state; based on the data type information of pending business of the business in a valid state, determine the external interface required for the business in a valid state to communicate externally during execution, and adjust the connection life cycle and connection ownership of the external interface; Identify all business processing sub-processes under the business in a valid state, and obtain the storage location information and operation type information of the data required for the business in a valid state to execute all business processing sub-processes; based on the storage location information of the required data and the operation type information, adjust the data access scope and the allowed execution operation policy of the business in a valid state.

3. The multi-domain isolation management and control method applied to the Internet of Things scenario as claimed in claim 1 is characterized in that: Identify an external entity connected to the IoT operating system platform to obtain working status information of the external entity; and based on the working status information, separately allocate control authority for connection with the external entity to a specific business; Based on the execution process information of the specific service, adjusting the connection state between the external entity and the Internet of Things operating system platform includes: Identify the external entity connected to the Internet of Things operating system platform, obtain the control authority of the current connection of the external entity, and allocate the control authority of the connection separately to a specific business; obtain the execution process information of all business processing sub-processes under the specific business, and based on the execution process information, determine whether the selected business is already in a complete processing state. If so, interrupt the connection between the external entity and the Internet of Things operating system platform; if not, keep the current connection state between the external entity and the Internet of Things operating system platform unchanged.

4. The multi-domain isolation control system applied to the Internet of Things scenario is characterized by: include: A service identification module is used to obtain service existence status information of the IoT operating system platform, and identify all services in a valid state based on the service existence status information; A business external connection state adjustment module, used to adjust the external interface opening state of the business in the effective state based on the operation attribute information of the business in the effective state; And based on the operation requirement information of the services in the effective state, access and policy control processing is performed on the services in the effective state; A connection identification module is used to monitor the connection of the IoT operating system platform and obtain the connection feature information of all services in a valid state; A data isolation module, used to perform hardware and software isolation processing on the associated data flow of the corresponding business based on the connection characteristic information; An external entity identification module is used to identify the external entity connected to the Internet of Things operating system platform and obtain the working status information of the external entity; An external entity state adjustment module, used to allocate the control authority of the connection with the external entity to a specific service based on the working state information; and then adjust the connection state of the external entity with the Internet of Things operating system platform based on the execution process information of the specific service; The connection identification module is used to monitor the connection of the Internet of Things operating system platform to obtain the connection feature information of all services in a valid state, including: Performing connection monitoring on the business operation end of the IoT operating system platform, obtaining the connection lifecycle and connection ownership of all valid businesses in the process of executing corresponding business processing sub-processes, and using this as the connection feature information; The data isolation module is used to perform hardware-level and software-level isolation processing on the associated data flow of the corresponding service based on the connection feature information, including: Based on the connection characteristic information, data transmission isolation processing is performed on all hardware ends and all software ends other than the associated connection link during the execution of the business processing sub-process of the corresponding business; Among them, data transmission isolation processing is performed on all hardware ends and all software ends other than the associated connection links during the execution of the business processing sub-process of the corresponding business, including: Step S1, based on the received data, determine whether the data corresponds to the hardware end or the software end, and then use the following formula (1) to control whether data transmission isolation processing is required. In the above formula (1), F represents the control value of whether the received data needs to be isolated for data transmission; A_IP y Indicates the IP number of the hardware end from which the received data comes. If the data comes from the software end, the value is 0; B_IP r Indicates the IP number of the software end from which the received data comes. If the data comes from the hardware end, the value is 0; WIP y (a) indicates the ath hardware IP number outside the associated connection link during the corresponding business execution business processing sub-process; WIP r (b) represents the IP number of the bth software end outside the associated connection link during the corresponding business execution business processing sub-process; n represents the number of all hardware ends outside the associated connection link during the corresponding business execution business processing sub-process; m represents the number of all software ends outside the associated connection link during the corresponding business execution business processing sub-process; If F=1, it means that the received data needs to be isolated for data transmission; If F = 0, it means that there is no need to perform data transmission isolation processing on the received data; Step S2: If data transmission isolation processing is required, the following formula (2) is used to generate the control weight of the corresponding hardware end or software end according to the amount of data to be isolated and processed: In the above formula (2), G represents the control weight of the corresponding hardware or software end this time; D represents the amount of data to be isolated and processed this time; D0 represents the data amount setting threshold; if() means that if the formula in the brackets is true, the overall value is 1, and if the formula in the brackets is not true, the overall value is 0; Step S3, using the following formula (3), according to the number of times all hardware terminals and all software terminals are isolated and the control weight of each time, control some hardware terminals or software terminals to enter a temporary shutdown state, In the above formula (3), Q[WIP y (a)] represents the temporary shutdown state control value of the hardware end corresponding to the ath hardware end IP number outside the associated connection link during the corresponding business execution business processing sub-process; Q[WIP r (b)] represents the temporary shutdown state control value of the software end corresponding to the b-th software end IP number outside the associated connection link during the corresponding business execution business processing sub-process; G k1 [WIP y (a)] represents the k1th control weight of the hardware end corresponding to the ath hardware end IP number outside the associated connection link during the corresponding business execution business processing sub-process; K1 represents the total number of hardware end control weights corresponding to the ath hardware end IP number outside the associated connection link during the corresponding business execution business processing sub-process; G k2 [WIP r (b)] represents the k2th control weight of the software end corresponding to the bth software end IP number outside the associated connection link during the corresponding business execution business processing sub-process; K2 represents the total number of software end control weights corresponding to the bth software end IP number outside the associated connection link during the corresponding business execution business processing sub-process; If Q[WIP y (a)] = 1, the hardware end control corresponding to the ath hardware end IP number outside the associated connection link during the corresponding business execution business processing sub-process enters a temporarily closed state; If Q[WIP y (a)]=0, the hardware end corresponding to the ath hardware end IP number outside the associated connection link during the corresponding business execution business processing sub-process is not controlled to enter the temporary closed state; If Q[WIP r (b)]=1, the software end control corresponding to the bth software end IP number outside the associated connection link during the corresponding business execution business processing sub-process enters a temporarily closed state; If Q[WIP r (b)]=0, the software end corresponding to the bth software end IP number outside the associated connection link during the corresponding business execution business processing sub-process is not controlled to enter the temporarily closed state.

5. The multi-domain isolation management and control system applied to the Internet of Things scenario as claimed in claim 4, characterized in that: The service identification module is used to obtain service existence status information of the Internet of Things operating system platform, and based on the service existence status information, identify all services in a valid state, including: Monitor the business operation end of the Internet of Things operating system platform to obtain business construction or integration progress information of the business operation end; based on the business construction or integration progress information, determine the business that has completed the construction or integration operation under the business operation end as a valid business; The service external connection state adjustment module is used to adjust the external interface opening state of the service in the effective state based on the operation attribute information of the service in the effective state; and perform access and policy control processing on the service in the effective state based on the operation requirement information of the service in the effective state, including: Perform business operation-related data attribute identification processing on all businesses in a valid state, and obtain business processing sub-process attribute information corresponding to all businesses in a valid state; wherein the business processing sub-process attribute information includes the data type information of pending business and the change information of pending business data flow corresponding to all business processing sub-processes under the business in a valid state; based on the data type information of pending business of the business in a valid state, determine the external interface required for the business in a valid state to communicate externally during execution, and adjust the connection life cycle and connection ownership of the external interface; Identify all business processing sub-processes under the business in a valid state, and obtain the storage location information and operation type information of the data required for the business in a valid state to execute all business processing sub-processes; based on the storage location information of the required data and the operation type information, adjust the data access scope and the allowed execution operation policy of the business in a valid state.

6. The multi-domain isolation management and control system applied to the Internet of Things scenario as claimed in claim 4 is characterized in that: The external entity identification module is used to identify the external entity connected to the Internet of Things operating system platform and obtain the working status information of the external entity; Based on the working status information, the control authority of the connection with the external entity is individually allocated to a specific service, including: Identify the external entity connected to the IoT operating system platform, obtain the control authority of the current connection of the external entity, and allocate the control authority of the connection to a specific service separately; the external entity state adjustment module is used to adjust the connection state between the external entity and the IoT operating system platform based on the execution process information of the specific service, including: Obtain the execution process information of all business processing sub-processes under the specific business, and based on the execution process information, determine whether the selected business is already in a complete processing state. If so, interrupt the connection between the external entity and the Internet of Things operating system platform; if not, keep the current connection state between the external entity and the Internet of Things operating system platform unchanged.

Images