A security verification method for Internet of Things based on MQTT

Abstract

The present invention discloses a method for Internet of Things security verification based on MQTT, and the steps include: S1, the access terminal communicates with the cloud platform through the MQTT protocol and matches with the white list; S2, for the first registration, according to the information of the access terminal, a secret key and a device account are generated, a user account and a user password are created, and user habit data is generated by rotating the verification diagram; if there is an existing user account and user password, the secret key and the device account are corresponding to the existing user account; S3, user identity verification is performed by rotating the verification diagram; S4, after successful verification, the connection permission is obtained with the cloud platform, and the local device list is obtained; S5, the cloud platform and the access terminal perform data exchange and command control through the secret key. Based on the MQTT protocol, the present invention uses the user's operating habits to set up multiple verifications, thereby improving the security protection performance.

Description

Technical Field

[0001] The present invention relates to the technical field of Internet of Things, and in particular to an Internet of Things security verification method based on MQTT. Background Art

[0002] With the rapid development of the Internet of Things and the popularization of smart devices, users no longer need to be on site to obtain data from different devices and perform operations. They only need to exchange corresponding data and control instructions from the server through the access terminal. In order to improve the data security of the communication process, the MQTT protocol is often used as the communication protocol. However, if the Internet of Things connects to the server with only a single security protection, the target personnel will infringe on the rights and interests of users through loopholes. Therefore, the requirements for user security and privacy are also higher.

[0003] The target personnel crack the security protection loopholes by simulating the information of the access terminal or the user, pretending to be a user to enter the server or smart device, thereby obtaining the core data and controlling the corresponding device. Since the data of the access terminal is mostly unique, but because it is the default setting of the manufacturer, its data does not change. After the target personnel obtains the key data of the access terminal, they can still successfully pretend to be the user. Different users have different operating habits. Even if the target personnel imitate, there will be deviations. Therefore, it is necessary to design an IoT security verification method based on MQTT, which uses the user's operating habits for multi-pass verification to improve the security protection performance. Summary of the invention

[0004] The purpose of the present invention is to provide an Internet of Things security verification method based on MQTT.

[0005] To achieve the above object, the present invention adopts the following technical solutions:

[0006] An Internet of Things security verification method based on MQTT includes the following steps:

[0007] S1. The access end communicates with the cloud platform through the MQTT protocol. The cloud platform obtains the information of the access end and matches it with the whitelist of the cloud platform. If the match fails, it will enter S2. If the match passes, it will enter S3.

[0008] S2. For users who register for the first time, the cloud platform generates a secret key and its corresponding device account according to the information of the access terminal. The user creates a user account and user password corresponding to the device account, and stores the device account, secret key and access terminal information in the whitelist; a rotation verification map is created on the cloud platform, and the user selects an area on the map. The cloud platform intercepts a block in the area and generates a slide rail and a slider to control the rotation of the block. The cloud platform adjusts the initial angle of the block. The user controls the rotation of the block to the original angle by sliding the slider on the slide rail, and verifies the speed and speed change of the user's slider on the slide rail multiple times, generates user habit data and corresponds it to the user account;

[0009] For existing user accounts and passwords, the cloud platform generates a new key and its corresponding device account based on the information of the access end, and stores the new key and its corresponding device account in the whitelist;

[0010] S3, the cloud platform selects a picture from the picture library to generate a rotation verification picture, and the user clicks an area on the rotation verification picture to generate a picture block with an initial angle in the area, and generates a slide rail and a slider. The user controls the slider to slide and controls the picture block to rotate to the original angle. After releasing the slider, the speed and speed change of the slider are obtained; the selected area is used as the first verification, and the obtained slider speed and speed change are used as the second verification. The two verifications are matched with the user's habit data. If the match is successful, the verification is passed, and if one of the verifications fails, the verification fails;

[0011] S4. When the verification is passed, the cloud platform obtains a list of local devices with operation permissions through the connection permission with the access terminal and according to the device account, selects a local device in the list and displays its operation permissions;

[0012] S5. The cloud platform and the access end perform encrypted communication and data exchange operations through secret keys to obtain and transmit data information uploaded by the local device. After the access end sends an operation instruction to the local device, the cloud platform generates a local instruction and sends it to the local device.

[0013] Furthermore, the cloud platform is provided with an access permission switch for a designated access terminal, and the designated access terminal controls the access permission of the user account to access terminals other than the designated access terminal, thereby limiting the access permission of the access terminal to the MQTT proxy server.

[0014] Furthermore, the image of the rotation verification image in step S2 is extracted from the image library of the cloud platform and divided into at least 6 areas. In the area selected by the user, a grid of at least 5x5 is generated, and a point is extracted as the center point of the block to capture a block.

[0015] Furthermore, the original angle of the block is set to 0 degrees, an angle is selected from 5-350 degrees as the initial angle and the corresponding angle is reversed on the grid point, the rotation of the block is controlled by sliding the slider until the slider is out of control, and the rotation angle of the block controlled by the slider is compared with the reverse angle. If the error is lower than the error threshold, the verification is passed, otherwise it fails.

[0016] Furthermore, the error threshold is between -5 degrees and 5 degrees.

[0017] Furthermore, when the slider slides from left to right, the block corresponding to it rotates clockwise; when the slider slides on the slide rail, the slider sliding time is the time period from when the user starts to control to when the user loses control.

[0018] Furthermore, a plurality of monitoring points at equal distances are arranged on the slide rail, and when the center of the slider moves to the corresponding monitoring point, the time is recorded, and the speed and speed change are obtained according to the sliding length and time of the slider.

[0019] Furthermore, the cloud platform matches the speed and speed change of the second verification with the user habit data of the corresponding user account based on the same rotation angle. When the matching degree is higher than the threshold of 80-98%, it is determined that the current operator is the user himself and the second verification passes, otherwise it fails.

[0020] Furthermore, the cloud platform is provided with a security log for recording operation information, registration information and verification information.

[0021] After adopting the above technical solution, the present invention has the following advantages compared with the background technology:

[0022] 1. The access end of the present invention communicates with the cloud platform through the MQTT protocol as basic protection, and then selects an area on the rotation verification map as another protection, and captures a block. Starting from the initial angle set by the cloud platform, the user rotates the corresponding block to the original angle, obtains the current user's operation data, and matches it with the user habit data corresponding to the user account. Only if the match is successful can the verification be passed. This is another protection. The user's true identity is identified through multiple protections, and security verification is performed. The user habit data is stored on the cloud platform, which is difficult for people other than the user to obtain, thereby ensuring the security of the data.

[0023] 2. The present invention can designate an access terminal to control the access rights of the access terminals under the user account, thereby limiting the rights of the access terminals other than the designated access terminal and improving security. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] Figure 1 The figure is a flow chart of the method of the present invention. DETAILED DESCRIPTION

[0025] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention.

[0026] It should be noted that in the present invention, the terms "up", "down", "left", "right", "vertical", "horizontal", "inside", "outside", etc. are based on the orientation or position relationship shown in the drawings, and are only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element of the present invention must have a specific orientation, and therefore cannot be understood as a limitation on the present invention.

[0027] Example

[0028] refer to Figure 1 As shown, the present invention discloses an Internet of Things security verification method based on MQTT, comprising the following steps:

[0029] S1. The access end communicates with the cloud platform through the MQTT protocol. The cloud platform obtains the information of the access end and matches it with the whitelist of the cloud platform. If the match fails, it will enter S2. If the match passes, it will enter S3.

[0030] S2. For users who register for the first time, the cloud platform generates a secret key and its corresponding device account based on the information of the access terminal. The user creates a user account and user password corresponding to the device account, and stores the device account, secret key and access terminal information in the whitelist; a rotation verification map is created on the cloud platform, and the user selects an area on the map. The cloud platform captures a tile in the area and generates a slide rail and a slider to control the rotation of the tile. The cloud platform adjusts the initial angle of the tile. The user controls the rotation of the tile to the original angle by sliding the slider on the slide rail, and verifies the speed and speed change of the user's slider on the slide rail multiple times, generates user habit data and corresponds it to the user account.

[0031] For existing user accounts and user passwords, the cloud platform generates a new key and its corresponding device account based on the information of the access end, and stores the new key and its corresponding device account in the whitelist.

[0032] S3. The cloud platform selects a picture from the picture library to generate a rotation verification picture. The user clicks on an area on the rotation verification picture to generate a picture block with an initial angle in the area, and generates a slide track and a slider. The user controls the slider to slide and controls the picture block to rotate to the original angle. After releasing the slider, the speed and speed change of the slider are obtained. The selected area is used as the first verification, and the obtained slider speed and speed change are used as the second verification. The two verifications are matched with the user's habit data. If the match is successful, the verification is passed. If one of the verifications fails, the verification fails.

[0033] S4. When the verification is passed, the cloud platform obtains a list of local devices with operation permissions through the connection permission of the access terminal and obtains a list of local devices with operation permissions based on the device account. A local device is selected in the list to display its operation permissions.

[0034] S5. The cloud platform and the access end perform encrypted communication and data exchange operations through secret keys to obtain and transmit data information uploaded by the local device. After the access end sends an operation instruction to the local device, the cloud platform generates a local instruction and sends it to the local device.

[0035] The cloud platform is provided with an access right switch for a designated access terminal, and the designated access terminal controls the access right of the user account to other access terminals except the designated one, thereby limiting the access right of the access terminal to the MQTT proxy server.

[0036] By specifying an access terminal to control the access access rights of the access terminals under the user account, the rights of the access terminals other than the specified access terminal are restricted, thereby improving security.

[0037] The image of the rotation verification image in step S2 is extracted from the image library of the cloud platform and divided into at least 6 areas. In the area selected by the user, a grid of at least 5x5 is generated, and a point is extracted as the center point of the block to capture a block.

[0038] The original angle of the block is set to 0 degrees, an angle is selected from 5-350 degrees as the initial angle and the corresponding angle is reversed on the grid point, the rotation of the block is controlled by sliding the slider until the slider is out of control, and the rotation angle of the block controlled by the slider is compared with the reverse angle. If the error is lower than the error threshold, the verification is passed, otherwise it fails.

[0039] The error threshold is between -5 degrees and 5 degrees, preferably between -3 degrees and 3 degrees.

[0040] The slider slides from left to right, and the corresponding block rotates clockwise; when the slider slides on the slide rail, the slider sliding time is the time period from the user starting to control to the user losing control.

[0041] A plurality of monitoring points of equal distance are arranged on the slide rail, and the time when the center of the slider moves to the corresponding monitoring point is recorded, and the speed and speed change are obtained according to the sliding length and time of the slider.

[0042] The cloud platform matches the speed and speed change of the second verification with the user habit data of the corresponding user account based on the same rotation angle. When the matching degree is higher than the threshold of 80-98%, it is determined that the current operator is the user himself and the second verification passes, otherwise it fails.

[0043] The cloud platform is provided with a security log for recording operation information, registration information and verification information.

[0044] The access end of this embodiment communicates with the cloud platform through the MQTT protocol as basic protection, and then selects an area on the rotation verification map as another layer of protection, and captures a block. Starting from the initial angle set by the cloud platform, the user rotates the corresponding block to the original angle, obtains the current user's operation data, and matches it with the user habit data corresponding to the user account. Only if the match is successful can the verification be passed. This is another layer of protection. The user's true identity is identified through multiple layers of protection for security verification. The user habit data is stored on the cloud platform, which is difficult for people other than the user to obtain, thereby ensuring the security of the data.

[0045] The access terminal information of this example may be an IMEI number or a product serial number, which is not limited in this embodiment.

[0046] The above is only a preferred specific embodiment of the present invention, but the protection scope of the present invention is not limited thereto. Any changes or substitutions that can be easily thought of by a person skilled in the art within the technical scope disclosed by the present invention should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims

1. A method for Internet of Things security verification based on MQTT, characterized in that: The following steps are involved: S1. The access end communicates with the cloud platform through the MQTT protocol. The cloud platform obtains the information of the access end and matches it with the whitelist of the cloud platform. If the match fails, it will enter S2. If the match passes, it will enter S3. S2. For users who register for the first time, the cloud platform generates a secret key and its corresponding device account according to the information of the access terminal. The user creates a user account and user password corresponding to the device account, and stores the device account, secret key and access terminal information in the whitelist; a rotation verification map is created on the cloud platform, and the user selects an area on the map. The cloud platform intercepts a block in the area and generates a slide rail and a slider to control the rotation of the block. The cloud platform adjusts the initial angle of the block. The user controls the rotation of the block to the original angle by sliding the slider on the slide rail, and verifies the speed and speed change of the user's slider on the slide rail multiple times, generates user habit data and corresponds it to the user account; For existing user accounts and passwords, the cloud platform generates a new key and its corresponding device account based on the information of the access end, and stores the new key and its corresponding device account in the whitelist; S3, the cloud platform selects a picture from the picture library to generate a rotation verification picture, and the user clicks an area on the rotation verification picture to generate a picture block with an initial angle in the area, and generates a slide rail and a slider. The user controls the slider to slide and controls the picture block to rotate to the original angle. After releasing the slider, the speed and speed change of the slider are obtained; the selected area is used as the first verification, and the obtained slider speed and speed change are used as the second verification. The two verifications are matched with the user's habit data. If the match is successful, the verification is passed, and if one of the verifications fails, the verification fails; The original angle of the block is set to 0 degrees, an angle is selected from 5-350 degrees as the initial angle and the corresponding angle is reversed on the grid point, the rotation of the block is controlled by sliding the slider until the slider is out of control, and the rotation angle of the block controlled by the slider is compared with the reverse angle. If the error is lower than the error threshold, the verification is passed, otherwise it fails; S4. When the verification is passed, the cloud platform obtains a list of local devices with operation permissions through the connection permission with the access terminal and according to the device account, selects a local device in the list and displays its operation permissions; S5. The cloud platform and the access end perform encrypted communication and data exchange operations through secret keys to obtain data information uploaded by the local device. After the access end sends an operation instruction to the local device, the cloud platform generates a local instruction and sends it to the local device. The cloud platform is provided with an access right switch for a designated access terminal, and the designated access terminal controls the access right of the user account to other access terminals except the designated one, thereby limiting the access right of the access terminal to the MQTT proxy server.

2. The MQTT-based IoT security verification method according to claim 1, characterized in that: The image of the rotation verification image in step S2 is extracted from the image library of the cloud platform and divided into at least 6 areas. In the area selected by the user, a grid of at least 5x5 is generated, and a point is extracted as the center point of the block to capture a block.

3. The MQTT-based IoT security verification method according to claim 2, characterized in that: The error threshold is between -5 degrees and 5 degrees.

4. The MQTT-based IoT security verification method according to claim 3, characterized in that: The slider slides from left to right, and the corresponding block rotates clockwise; when the slider slides on the slide rail, the slider sliding time is the time period from the user starting to control to the user losing control.

5. The MQTT-based IoT security verification method according to claim 4, characterized in that: A plurality of monitoring points of equal distance are arranged on the slide rail, and the time when the center of the slider moves to the corresponding monitoring point is recorded, and the speed and speed change are obtained according to the sliding length and time of the slider.

6. The MQTT-based Internet of Things security verification method according to claim 5, characterized in that: The cloud platform matches the speed and speed change of the second verification with the user habit data of the corresponding user account based on the same rotation angle. When the matching degree is higher than the threshold of 80-98%, it is determined that the current operator is the user himself and the second verification passes, otherwise it fails.

7. The method for Internet of Things security verification based on MQTT as claimed in claim 1, characterized in that: The cloud platform is provided with a security log for recording operation information, registration information and verification information.

Images