Equipment access method and device based on Internet of Things security, and terminal equipment

Abstract

The invention provides an equipment access method and device based on Internet of Things security and terminal equipment, and is suitable for the technical field of Internet of Things, and the method comprises the steps: obtaining node container information and to-be-accessed equipment information; creating a plurality of node container management sequences according to the node container information; determining traffic use information of each node container management sequence according to each node container management sequence; and according to the traffic use information of the plurality of node container management sequences and the information of the to-be-accessed device, determining a target node container for the to-be-accessed device to access. Before the to-be-accessed device is accessed to the Internet of Things, the proper node container is selected for the to-be-accessed device for access according to the traffic usage information of each node container, so that the situation that a device newly accessed to the Internet of Things occupies the traffic of a normal service already running in the Internet of Things is avoided, malicious access of the device can be avoided, and the access efficiency of the device is improved. Therefore, the security protection of the Internet of Things is realized.

Description

Technical Field

[0001] The present application belongs to the technical field of Internet of Things, and in particular, relates to a device access method, apparatus and terminal device based on Internet of Things security. Background Art

[0002] With the widespread application of IoT technology, IoT devices have penetrated into all aspects of people's lives, such as smart homes, smart cities, industrial automation, etc. However, with the popularization of IoT devices, network security issues have become increasingly prominent. Due to the diversity and complexity of IoT devices, traditional network security protection technologies are often unable to effectively cope with them. Therefore, how to effectively manage devices connected to the network and improve the network security protection capabilities of the IoT system has become an urgent problem to be solved.

[0003] In the prior art, the purpose of network security protection is achieved by collecting traffic packets from access devices, identifying features of the traffic packets, analyzing and judging network data traffic, identifying normal traffic and potential attack traffic.

[0004] However, packet capture tools and traffic feature matching and identification based on specific rules have limitations when dealing with new and complex network attacks. They are prone to misjudgment of traffic with attack characteristics, making it difficult to avoid malicious access to IoT devices. Summary of the invention

[0005] In view of this, the embodiments of the present application provide a device access method, apparatus and terminal device based on IoT security, which can solve the problem of avoiding malicious access to IoT devices, thereby ensuring that the normal business of the IoT devices that have been connected is not maliciously occupied or maliciously attacked, so as to improve the effectiveness of network protection and ensure the normal operation of IoT business.

[0006] A first aspect of an embodiment of the present application provides a device access method based on Internet of Things security, including:

[0007] Get node container information and device information to be connected;

[0008] Creating multiple node container management sequences according to the node container information;

[0009] Determining flow usage information of each of the node container management sequences according to each of the node container management sequences;

[0010] According to the traffic usage information of the plurality of node container management sequences and the information of the device to be connected, a target node container is determined for access by the device to be connected.

[0011] A second aspect of an embodiment of the present application provides a device access apparatus based on Internet of Things security, including:

[0012] An information acquisition module is used to obtain node container information and information of devices to be connected;

[0013] A node container management sequence creation module, used to create multiple node container management sequences according to the node container information;

[0014] a traffic usage information statistics module, configured to collect statistics on traffic usage information of each of the node container management sequences according to each of the node container management sequences; and

[0015] The target node container determination module is used to determine the target node container according to the traffic usage information of the plurality of node container management sequences and the information of the device to be connected.

[0016] A third aspect of an embodiment of the present application provides a terminal device, which includes a memory and a processor, wherein the memory stores a computer program that can be run on the processor, and when the processor executes the computer program, the steps of the device access method based on Internet of Things security as described in any one of the first aspects above are implemented.

[0017] The fourth aspect of an embodiment of the present application provides a computer-readable storage medium, comprising: storing a computer program, characterized in that when the computer program is executed by a processor, the steps of the device access method based on Internet of Things security as described in any one of the above-mentioned first aspects are implemented.

[0018] Compared with the prior art, the embodiments of the present application have the following beneficial effects: before the device to be connected is connected to the Internet of Things, the node containers in the Internet of Things are managed, the traffic data occupied by each node container is counted, and a suitable node container is selected for the device to be connected according to the traffic usage of each node container, so as to avoid the new device connected to the Internet of Things from occupying the traffic of normal services already running in the Internet of Things, and there is no need to collect and analyze the traffic data flowing through the Internet of Things after the device is connected, so as to avoid packet capture and deep analysis of the traffic, and malicious access of devices can be avoided while saving the computing resources of the Internet of Things system, thereby ensuring that user services can run normally after the new device is connected, thereby achieving security protection for the Internet of Things. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0020] Figure 1 This is a schematic diagram of the implementation process of the device access method based on Internet of Things security provided in Example 1 of the present application;

[0021] Figure 2 This is a schematic diagram of the implementation process of the device access method based on Internet of Things security provided in Example 2 of the present application;

[0022] Figure 3 This is a schematic diagram of the implementation process of the device access method based on Internet of Things security provided in Example 3 of the present application;

[0023] Figure 4 This is a schematic diagram of the implementation process of the device access method based on Internet of Things security provided in the fourth embodiment of the present application;

[0024] Figure 5 This is a schematic diagram of the implementation process of the device access method based on Internet of Things security provided in Example 5 of the present application;

[0025] Figure 6 This is a schematic diagram of the implementation process of the device access method based on Internet of Things security provided in Example 6 of the present application;

[0026] Figure 7 It is a structural diagram of a device access device based on Internet of Things security provided by an embodiment of the present application;

[0027] Figure 8 It is a schematic diagram of a terminal device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0028] In the following description, specific details such as specific system structures, technologies, etc. are provided for the purpose of illustration rather than limitation, so as to provide a thorough understanding of the embodiments of the present application. However, it should be clear to those skilled in the art that the present application may also be implemented in other embodiments without these specific details. In other cases, detailed descriptions of well-known systems, devices, circuits, and methods are omitted to prevent unnecessary details from obstructing the description of the present application.

[0029] In order to illustrate the technical solution described in this application, a specific embodiment is provided below for illustration.

[0030] Figure 1The following is a flowchart of the implementation of the device access method based on IoT security provided in the first embodiment of the present application, which is described in detail as follows:

[0031] Step S101, obtaining node container information and information of devices to be connected.

[0032] In this embodiment, an Internet of Things system has multiple nodes, each node corresponds to an Internet of Things device, and the node container is used for node operation. The physical network system controls and manages the nodes through the node container agent. The node container information may include the information of the nodes managed under a single node container, and may also include the number of nodes that the node container can manage, and may also include the identification information of the node container in the physical network system and other usage status information. The node container information can be obtained from the management party or agent of the Internet of Things system, or from the management data in the memory of the Internet of Things system. The information of the device to be accessed refers to the information about the device to be accessed, which may include the type information and model information of the device to be accessed, and may also include the traffic usage information of the device to be accessed. The traffic usage information may include daily traffic demand and traffic usage demand in emergency situations. The information of the device to be accessed can be obtained from the access request sent by the device to be accessed to the physical network system.

[0033] Step S102: creating multiple node container management sequences according to the node container information.

[0034] In this embodiment, there are multiple node containers in the IoT system, wherein one node container manages the operation of multiple nodes. All node container information currently existing in the IoT system can be extracted from the management information in the IoT memory, and then all node container information is arranged according to specific rules, so that the sequence formed by the arrangement containing multiple node container information is used as the node container management sequence. For example, there are 1,000 node containers in an IoT system, and 100 node containers can be arranged in each node container management sequence, so 10 node container management sequences can be formed.

[0035] In an embodiment, optionally, the number of nodes in a node container is not fixed, and the number of node containers in a plurality of node container management sequences is not fixed.

[0036] Step S103: determining the flow usage information of each of the node container management sequences according to each of the node container management sequences.

[0037] In this embodiment, traffic usage information of all nodes in each node container management sequence is counted to quantify the traffic usage of each node container management sequence. The traffic used by all nodes in each node container management sequence may be added together, and the result of the addition is then divided by the traffic usage threshold of each node container management sequence to obtain the traffic usage ratio. Alternatively, the traffic usage ratio of all nodes in each node container management sequence may be summed to obtain the traffic usage ratio of each node container management sequence.

[0038] Step S104: determining a target node container for access by the device to be connected according to the traffic usage information of the plurality of node container management sequences and the information of the device to be connected.

[0039] In this embodiment, according to the traffic usage of each node container management sequence and the traffic usage status and traffic usage of the device to be connected, the most suitable node container in the IoT system under the current traffic usage status is determined, so that the node container is provided for access by the device to be connected. For example, if the device to be connected is currently in a high traffic usage status, it is necessary to select a node container with sufficient remaining traffic for access; if the device to be connected is currently in a low traffic usage status, it is necessary to select a node container with a small remaining traffic for access, so as to reserve the node container with sufficient remaining traffic for other devices to be connected with high traffic requirements that need to be connected later.

[0040] The device access method based on the security of the Internet of Things provided in the embodiment of the present application manages the node containers in the Internet of Things before the device to be accessed is accessed to the Internet of Things, collects statistics on the traffic data occupied by each node container, and selects a suitable node container for the device to be accessed according to the traffic usage of each node container, so as to avoid the new device accessing the Internet of Things from occupying the traffic of normal services already running in the Internet of Things. There is no need to collect and analyze the traffic data flowing through the Internet of Things after the device is accessed, and packet capture and deep analysis of the traffic are avoided. Malicious access of devices can be avoided while saving the computing resources of the Internet of Things system, thereby ensuring that user services can run normally after the new device is connected, thereby achieving security protection for the Internet of Things.

[0041] Figure 2 The implementation flow chart of the device access method based on IoT security provided in the second embodiment of the present application is shown. The difference between the second embodiment and the first embodiment is that: the node container information includes node container identification information, node quantity information and transmission bandwidth information of a single node; wherein the node quantity information includes information on the number of connected nodes and information on the number of accessible nodes;

[0042] The step S102 specifically includes:

[0043] Step S201, calculating the bandwidth used by the node container according to the information on the number of connected nodes and the transmission bandwidth information of the single node.

[0044] In this embodiment, the node container information may include node container identification information, node quantity information, and transmission bandwidth information of a single node. The node container identification information is used to indicate the unique identification of the node container in the IoT system; the node quantity information refers to the number of nodes contained in a single node container, including the number of nodes that have been connected to the node container and the maximum number of nodes that the node container can accommodate; the transmission bandwidth information of a single node is used to indicate the maximum amount of bandwidth that a node connected to the node container can use. Under the same node container, the amount of bandwidth currently being used by the node container, that is, the bandwidth used by the node container, can be obtained by multiplying the value of the number of connected nodes by the value of the transmission bandwidth of a single node.

[0045] Step S202: Calculate a node container usage bandwidth threshold according to the accessible node quantity information and the transmission bandwidth information of the single node.

[0046] In this embodiment, under the same node container, the node container bandwidth threshold, that is, the maximum bandwidth that can be used by the current node container, can be obtained by multiplying the value of the number of accessible nodes by the value of the transmission bandwidth of a single node.

[0047] Step S203: Calculate the traffic ratio of the node container according to the node container usage bandwidth and the node container usage bandwidth threshold.

[0048] In this embodiment, the node container usage bandwidth can be divided by the node container usage bandwidth threshold to calculate the proportion of the currently used bandwidth in the maximum bandwidth usage of the entire node container, and the node container traffic ratio can be obtained to characterize the current node container traffic usage, whether it is a saturated usage state or an unsaturated usage state, and to subsequently determine whether a new device can be connected as a node of the node container.

[0049] Step S204: Arrange the node container identification information according to the flow ratio of the node container, the preset number of sequence elements and the preset arrangement rule to obtain a plurality of node container management sequences.

[0050] In this embodiment, the preset number of sequence elements is used to indicate how many node containers can be accommodated in a single node container management sequence. The preset arrangement rule can be arranged from small to large according to the flow ratio, or arranged from large to small according to the flow ratio, or can be arranged randomly. In the multiple node container management sequences formed, the node container identification information is used as the unique identification of each node container in the node container management sequence.

[0051] The device access method based on IoT security provided in the embodiment of the present application provides an effective reference for global judgment of the current usage status of each node container by counting the bandwidth usage of each node container, and manages the node containers by creating a node container management sequence, which is convenient for subsequent narrowing of the query and matching scope of the node containers for the devices to be accessed, thereby improving the effectiveness and efficiency of matching the devices to be accessed with the node containers.

[0052] Figure 3 A flowchart of the implementation of the device access method based on IoT security provided in Example 3 of the present application is shown, which differs from the above-mentioned Example 2 in that the traffic usage information includes the used traffic and the traffic usage ratio.

[0053] The step S103 specifically includes:

[0054] Step S301 : summing up the bandwidth used by the node containers in each node container management sequence to obtain the used traffic of each node container management sequence.

[0055] In this embodiment, by summing up the amounts of bandwidth currently being used by all node containers in a single node container management sequence, the amount of currently used bandwidth of the single node container management sequence, that is, the used traffic of the node container management sequence, is obtained, which is used to quantify the access service status of the current node container management sequence and provide effective data support for the matching of subsequent devices to be accessed.

[0056] Step S302 : summing up the flow ratios of the node containers in the node container management sequences to obtain the flow usage ratios of the node container management sequences.

[0057] In this embodiment, by summing up the usage ratios of the bandwidth currently being run by all node containers in a single node container management sequence, the usage ratio of the currently used bandwidth of the single node container management sequence, that is, the traffic usage ratio of the node container management sequence, is obtained, which is used to quantify the operation status of the connected services of the current node container management sequence and provide effective data reference for the matching of subsequent devices to be connected.

[0058] The device access method based on IoT security provided in the embodiment of the present application calculates the used traffic and traffic usage ratio of each current node container management sequence, evaluates the usage of the connected services of each current node container, and provides effective data support for matching appropriate node containers for subsequent devices to be connected, which is beneficial to avoid that subsequent devices connected to the IoT occupy the traffic used by user services running in the current node container.

[0059] Figure 4The flowchart of the implementation of the device access method based on Internet of Things security provided by the fourth embodiment of the present application is shown. The difference between the fourth embodiment and the third embodiment is that: the information of the device to be connected includes the traffic demand information of the device to be connected;

[0060] The step S104 specifically includes:

[0061] Step S401, determining whether a first traffic usage ratio of a first node container management sequence is less than a preset traffic usage ratio threshold, if so, proceeding to step S402, if not, proceeding to step S403.

[0062] In this embodiment, the first node container management sequence is one of the node container management sequences of multiple node container management sequences in the Internet of Things system. The preset traffic usage ratio threshold refers to the maximum traffic load value that a single node container management sequence can allow in the current state. It can be the default value of the network parameter, or it can be set and adjusted by the operation and maintenance personnel in the background according to the current network service situation; usually the specific value of the traffic usage ratio threshold can be set according to the following aspects: ① based on the user usage scenario; ② based on the number of Internet of Things devices, the transmission bandwidth required by the device, the transmission bandwidth of the data transmission node and other factors; ③ generally the transmission bandwidth ratio used by the maximum number of legal Internet of Things devices online at the same time. The traffic usage ratio corresponding to a single node container management sequence is used to characterize the current service operation status of the node container management sequence, and to judge the relationship between the traffic usage ratio of the node container management sequence and the preset traffic usage ratio threshold, which is used to evaluate whether the node container management sequence has a traffic saturation situation. When the node container management sequence is in a traffic saturation state, it is not allowed to access new devices. When the node container management sequence is not in a traffic saturation state, it means that the node container management sequence has available bandwidth remaining in addition to the node services that are already running, and new devices can be connected.

[0063] Step S402: According to the traffic demand information of the device to be connected, the node containers in the first node container management sequence are matched to determine the target node container.

[0064] In this embodiment, when the first traffic usage ratio of the first node container management sequence is less than the preset traffic usage ratio, it means that the traffic of some node containers in the first node container management sequence has not been fully utilized, that is, the node container management sequence can be accessed by new devices without hindering the operation of existing services. In this way, suitable node containers are matched in the node container management sequence for access by the devices to be connected.

[0065] Step S403, determining whether the second traffic usage ratio of the second node container management sequence is less than a preset traffic usage ratio threshold, if so, proceeding to step S404, if not, proceeding to step S405.

[0066] In this embodiment, when the first traffic usage ratio of the first node container management sequence is greater than or equal to the preset traffic usage ratio, it means that the traffic of the node containers in the first node container management sequence is fully used, that is, the node container management sequence cannot be accessed by new devices, otherwise it will occupy the traffic of the normal business that is running, so the access device to be connected will be prohibited from accessing the first node container management sequence. Therefore, it is necessary to determine whether other node container management sequences except the first node container management sequence in the Internet of Things system can be accessed by the device to be connected, and it is necessary to determine the relationship between the traffic usage ratio of other node container management sequences and the preset traffic usage ratio threshold, which is used to evaluate whether other node container management sequences have saturated traffic usage, and whether there is remaining traffic for new devices to access and run when the already connected business is running normally. Among them, other node container management sequences except the first node container management sequence in the Internet of Things system can be represented by the second node container management sequence.

[0067] Step S404: According to the traffic demand information of the device to be connected, the node containers in the second node container management sequence are matched to determine the target node container.

[0068] In this embodiment, when the first traffic usage ratio of the second node container management sequence is less than the preset traffic usage ratio, it means that the traffic of some node containers in the second node container management sequence has not been fully utilized, that is, the node container management sequence can be accessed by new devices without hindering the normal operation of existing services in the node container. In this way, suitable node containers are matched in the node container management sequence for access by the devices to be connected.

[0069] Step S405: Do not match the node container in the second node container management sequence, and prohibit the device to be connected from accessing.

[0070] In this embodiment, when the second traffic usage ratio of the second node container management sequence is greater than or equal to the preset traffic usage ratio, it means that the traffic of the node containers in the second node container management sequence is fully utilized, that is to say, the node container management sequence cannot be accessed by new devices, otherwise it will occupy the traffic of the normal business that is originally running. Therefore, the device to be accessed is prohibited from accessing the second node container management sequence, and the device to be accessed is also prohibited from accessing the Internet of Things system.

[0071] In this embodiment, an example is taken in which there are only two node container management sequences in an Internet of Things. However, when the number of node container management sequences in an Internet of Things system is greater than 2, when the second traffic usage ratio of the second node container management sequence is greater than or equal to the preset traffic usage ratio, it is also necessary to determine whether the traffic usage ratios of other node container management sequences in the Internet of Things are less than the preset traffic usage ratio threshold. For example, after determining that the second node container management sequence cannot be accessed by a new device, it is also necessary to determine whether the third traffic usage ratio of the third node container management sequence is less than the preset traffic usage ratio threshold, and then determine whether the device to be accessed can access the third node container management sequence, and so on, until a node container management sequence that can be accessed by the device to be accessed is matched in the Internet of Things, and then a suitable node container is matched in the node container management sequence for the device to be accessed to access, or until it is determined that the last node container management sequence in the Internet of Things cannot provide access, the device to be accessed is prohibited from accessing the Internet of Things.

[0072] The device access method based on Internet of Things security provided in the embodiment of the present application determines the traffic usage of multiple node container management sequences in the Internet of Things system, and selects a node container management sequence in the Internet of Things system that can be accessed by the device to be accessed, thereby avoiding the device to be accessed from accessing a node container management sequence with tight business traffic usage, ensuring that the originally running business is not affected by the newly accessed device. In order to maintain normal operation, while avoiding the device to be accessed from squeezing out the normal business originally running in the node container, the matching range for the node container is narrowed, which facilitates the subsequent rapid matching of the node container for the device to be accessed.

[0073] Figure 5 The flowchart of the implementation of the device access method based on IoT security provided in the fifth embodiment of the present application is shown. The difference between the fifth embodiment and the fourth embodiment is that the step S402 specifically includes:

[0074] Step S501: Calculate the remaining bandwidth of each node container in the first node container management sequence according to the node container usage bandwidth of each node in the first node container management sequence and the bandwidth usage threshold of each node container in the first node container management sequence.

[0075] In this embodiment, the bandwidth threshold of each node container in the first node container management sequence is subtracted from the node container bandwidth used by each node in the first node container management sequence to calculate the amount of bandwidth remaining in each node container in the first node container management sequence in addition to the traffic currently used by the connected device, that is, the remaining bandwidth of each node container. This facilitates matching a suitable node container for the device to be connected according to the remaining bandwidth of each node container.

[0076] Step S502: Calculate multiple bandwidth differences according to the traffic demand information of the device to be connected and the remaining bandwidth of each node container.

[0077] In this embodiment, the absolute value of the difference obtained by subtracting the traffic demand of the device to be connected from the remaining bandwidth of each node container, that is, the bandwidth difference, can be used to determine the compatibility of each node container with the device to be connected.

[0078] Step S503: determine a minimum value among the multiple bandwidth differences, and use a node container corresponding to the minimum value as a target node container.

[0079] In this embodiment, the minimum value among multiple bandwidth differences is screened out, and the node container corresponding to the minimum value is used as the target node container for the device to be connected to access the Internet of Things system. The reason why the node container corresponding to the minimum value among the bandwidth differences is used as the target node container is that while avoiding the crowding out of the normal business that is already running after the device to be connected is connected, considering that there are still other devices with different traffic usage requirements that need to access the Internet of Things system in the future, it is necessary to provide the node container with more remaining bandwidth to the device with larger loan demand for access, so as to ensure that the traffic services that can be provided by all node containers are fully utilized.

[0080] The device access method based on Internet of Things security provided in the embodiment of the present application calculates the remaining bandwidth of each node container in the node container management sequence, thereby providing the most suitable node container for the device to be accessed to access the Internet of Things. By selecting the node container whose remaining bandwidth is closest to the traffic demand of the device to be accessed, it is avoided that the device to be accessed squeezes out the business that is originally running normally in the node container and generates malicious access, while ensuring the traffic utilization rate of all node containers and avoiding the waste of precious bandwidth resources when network services are running.

[0081] Figure 6 The flowchart of the implementation of the device access method based on Internet of Things security provided by the sixth embodiment of the present application is shown. The difference between the sixth embodiment and the first embodiment is that after the step S104, the method further includes:

[0082] Step S601, obtaining the number of node containers of a plurality of the node container management sequences.

[0083] In this embodiment, a node container management sequence may include multiple node containers. The operation and maintenance personnel of the Internet of Things system need to count the number of node containers in each node container management sequence on a daily basis and monitor each node container to understand the access and exit status of the node. Therefore, the number of node containers can be obtained from the background through the operation of the operation and maintenance personnel.

[0084] Step S602: according to the plurality of node container quantities and a preset node container quantity threshold, the number of node container management sequences whose node container quantity is less than the node container quantity threshold is counted to obtain the number of unsaturated node container management sequences.

[0085] In this embodiment, the preset node container quantity threshold refers to the number of node containers that a single node container management sequence can access, which directly determines how much business traffic service the node container management sequence can provide, and can be set by the operation and maintenance personnel in the background. By judging the size relationship between the number of node containers and the preset node container quantity threshold, it is evaluated whether the traffic that the node container management sequence can provide is fully utilized by the nodes connected to the Internet of Things. By counting the number of node container management sequences whose number of node containers is less than the node container quantity threshold, the number of node container management sequences that are not fully used in the Internet of Things system, that is, the number of unsaturated node container management sequences, is obtained, thereby providing effective data support for subsequent operation and maintenance work.

[0086] Step S603, determining whether the number of unsaturated node container management sequences is not less than a preset unsaturated use sequence number threshold, if so, reducing the node container number threshold, if not, maintaining the node container number threshold unchanged.

[0087] In this embodiment, the preset unsaturated use sequence number threshold refers to the maximum allowable number of node container management sequences that are not fully used in the current Internet of Things system, which can be set and adjusted by the operation and maintenance personnel in the background. When the number of unsaturated node container management sequences is equal to or greater than the preset unsaturated use sequence number threshold, it means that most of the node container management sequences in the current Internet of Things system are not fully used. In addition to the services that have been running in the Internet of Things system, there are still a large number of bandwidth resources that are not used, and there is a lot of bandwidth resource waste. The operation and maintenance personnel can operate in the background to reduce the node container number threshold to reduce the service traffic value that the Internet of Things system can provide, thereby reducing the waste of bandwidth resources while meeting the normal operation of the current business, so as to reduce the operating cost of the Internet of Things. When the number of unsaturated node container management sequences is less than the preset unsaturated use sequence number threshold, it means that most of the node container management sequences in the current Internet of Things system are saturated, and the traffic load of the Internet of Things system is large. At this time, the node container number threshold can be kept unchanged, or the node container number threshold can be increased by the operation and maintenance personnel in the background according to the current business growth.

[0088] The device access method based on Internet of Things security provided in the embodiment of the present application evaluates the utilization rate of the business traffic provided by the current Internet of Things by counting the number of node container management sequences in which bandwidth resources are not fully utilized in the current Internet of Things. When the utilization rate of the business traffic used by the devices that have been connected to the Internet of Things is not high, the number of node containers that can be connected to the Internet of Things is reduced to reduce the amount of bandwidth services provided. While ensuring the normal operation of the current business, the waste of bandwidth resources is reduced, thereby reducing the operating cost of the Internet of Things.

[0089] Corresponding to the method of the above embodiment, Figure 7 A structural block diagram of a device access apparatus based on IoT security provided in an embodiment of the present application is shown. For ease of explanation, only the parts related to the embodiment of the present application are shown. Figure 7 The exemplary device access apparatus based on Internet of Things security may be the execution subject of the device access method based on Internet of Things security provided in the aforementioned first embodiment.

[0090] Reference Figure 7 , the device access device based on Internet of Things security includes:

[0091] The information acquisition module 710 is used to acquire node container information and information of a device to be connected;

[0092] A node container management sequence creation module 720, configured to create a plurality of node container management sequences according to the node container information;

[0093] A traffic usage information statistics module 730, configured to collect statistics on traffic usage information of each of the node container management sequences according to each of the node container management sequences; and

[0094] The target node container determination module 740 is used to determine the target node container according to the traffic usage information of the plurality of node container management sequences and the information of the device to be connected.

[0095] The process of each module in the device access device based on IoT security provided in the embodiment of the present application realizing its own function can be specifically referred to the aforementioned Figure 1 The description of the first embodiment is not repeated here.

[0096] The target node container determination module 740 includes:

[0097] The remaining bandwidth calculation unit 741 is used to calculate the remaining bandwidth of each node container in the first node container management sequence according to the node container usage bandwidth of each node in the first node container management sequence and the bandwidth usage threshold of each node container in the first node container management sequence;

[0098] The bandwidth difference calculation unit 742 is used to calculate multiple bandwidth differences according to the traffic demand information of the device to be connected and the remaining bandwidth of each node container; and

[0099] The target node container determining unit 743 is configured to determine a minimum value among the multiple bandwidth differences, and use a node container corresponding to the minimum value as a target node container.

[0100] The process of each unit in the target node container determination module 740 provided in the embodiment of the present application realizing its own function can be specifically referred to the aforementioned Figure 5 The description of the fifth embodiment is not repeated here.

[0101] It should be understood that the size of the serial numbers of the steps in the above embodiments does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0102] It should be understood that when used in the present specification and the appended claims, the term "comprising" indicates the presence of described features, wholes, steps, operations, elements and / or components, but does not exclude the presence or addition of one or more other features, wholes, steps, operations, elements, components and / or combinations thereof.

[0103] It should also be understood that the term “and / or” used in the specification and appended claims refers to any and all possible combinations of one or more of the associated listed items, and includes these combinations.

[0104] As used in the specification and appended claims of this application, the term "if" can be interpreted as "when" or "uponce" or "in response to determining" or "in response to detecting", depending on the context. Similarly, the phrase "if it is determined" or "if [described condition or event] is detected" can be interpreted as meaning "uponce it is determined" or "in response to determining" or "uponce [described condition or event] is detected" or "in response to detecting [described condition or event]", depending on the context.

[0105] In addition, in the description of the present specification and the appended claims, the terms "first", "second", "third", etc. are only used to distinguish descriptions, and cannot be understood as indicating or suggesting relative importance. It should also be understood that although the terms "first", "second", etc. are used to describe various elements in some embodiments of the present application in the text, these elements should not be limited by these terms. These terms are only used to distinguish one element from another element. For example, the first table can be named as the second table, and similarly, the second table can be named as the first table without departing from the scope of the various described embodiments. The first table and the second table are both tables, but they are not the same table.

[0106] References to "one embodiment" or "some embodiments" etc. described in the specification of this application mean that one or more embodiments of the present application include specific features, structures or characteristics described in conjunction with the embodiment. Therefore, the statements "in one embodiment", "in some embodiments", "in some other embodiments", "in some other embodiments", etc. that appear in different places in this specification do not necessarily refer to the same embodiment, but mean "one or more but not all embodiments", unless otherwise specifically emphasized in other ways. The terms "including", "comprising", "having" and their variations all mean "including but not limited to", unless otherwise specifically emphasized in other ways.

[0107] The device access method based on IoT security provided in the embodiments of the present application can be applied to terminal devices such as mobile phones, tablet computers, wearable devices, vehicle-mounted devices, augmented reality (AR) / virtual reality (VR) devices, laptops, ultra-mobile personal computers (UMPC), netbooks, personal digital assistants (PDA), etc. The embodiments of the present application do not impose any restrictions on the specific types of terminal devices.

[0108] For example, the terminal device can be a station (STAION, ST) in a WLAN, a cellular phone, a cordless phone, a Session Initiation Protocol (SIP) phone, a Wireless Local Loop (WLL) station, a Personal Digital Assistant (PDA) device, a handheld device with wireless communication function, a computing device or other processing device connected to a wireless modem, a vehicle-mounted device, a vehicle networking terminal, a computer, a laptop computer, a handheld communication device, a handheld computing device, a satellite wireless device, a wireless modem card, a TV set-top box (settop box, STB), customer premises equipment (customer premises equipment, CPE) and / or other devices for communicating on a wireless system and a next-generation communication system, such as a mobile terminal in a 5G network or a mobile terminal in a future evolved Public Land Mobile Network (PLMN) network, etc.

[0109] As an example but not limitation, when the terminal device is a wearable device, the wearable device can also be a general term for wearable devices that are intelligently designed and developed using wearable technology for daily wear, such as glasses, gloves, watches, clothing and shoes. A wearable device is a portable device that is worn directly on the body or integrated into the user's clothes or accessories. Wearable devices are not just hardware devices, but also achieve powerful functions through software support, data interaction, and cloud interaction. Broadly speaking, wearable smart devices include those that are fully functional, large in size, and can achieve complete or partial functions without relying on smartphones, such as smart watches or smart glasses, as well as those that only focus on a certain type of application function and need to be used in conjunction with other devices such as smartphones, such as various smart bracelets and smart jewelry for vital sign monitoring.

[0110] Figure 8 Schematic diagram of the structure of a terminal device provided by an embodiment of the present application. Figure 8 As shown, the terminal device 8 of this embodiment includes: at least one processor 800 ( Figure 8 Only one is shown in the figure), a memory 810, wherein the memory 810 stores a computer program 820 that can be run on the processor 800. When the processor 800 executes the computer program 820, the steps in the above-mentioned embodiments of the device access method based on IoT security are implemented, such as Figure 1 Alternatively, when the processor 800 executes the computer program 820, the functions of each module / unit in the above-mentioned device embodiments are implemented, for example Figure 7 Functions of modules 710 to 740 are shown.

[0111] The terminal device 8 may be a computing device such as a desktop computer, a notebook, a PDA, or a cloud server. The terminal device may include, but is not limited to, a processor 800 and a memory 810. Those skilled in the art will appreciate that Figure 8 It is only an example of the terminal device 8 and does not constitute a limitation of the terminal device 8. It may include more or fewer components than shown in the figure, or a combination of certain components, or different components. For example, the terminal device may also include an input sending device, a network access device, a bus, etc.

[0112] The processor 800 may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or any conventional processor, etc.

[0113] In some embodiments, the memory 810 may be an internal storage unit of the terminal device 8, such as a hard disk or memory of the terminal device 8. The memory 810 may also be an external storage device of the terminal device 8, such as a plug-in hard disk, a smart memory card (Smart Media Card, SMC), a secure digital (Secure Digital, SD) card, a flash card (Flash Card), etc. equipped on the terminal device 8. Further, the memory 810 may also include both an internal storage unit of the terminal device 8 and an external storage device. The memory 810 is used to store an operating system, an application program, a boot loader (BootLoader), data, and other programs, such as the program code of the computer program, etc. The memory 810 may also be used to temporarily store data that has been sent or is to be sent.

[0114] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0115] An embodiment of the present application also provides a terminal device, which includes at least one memory, at least one processor, and a computer program stored in the at least one memory and executable on the at least one processor, wherein when the processor executes the computer program, the terminal device implements the steps in any of the above-mentioned method embodiments.

[0116] An embodiment of the present application further provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps in the above-mentioned method embodiments can be implemented.

[0117] In the above embodiments, the description of each embodiment has its own emphasis. For parts that are not described or recorded in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0118] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0119] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0120] The embodiments described above are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, a person skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features may be replaced by equivalents. Such modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application, and should all be included in the protection scope of the present application.

Claims

1. A device access method based on Internet of Things security, characterized in that: include: Get node container information and device information to be connected; Creating multiple node container management sequences according to the node container information; Determining flow usage information of each of the node container management sequences according to each of the node container management sequences; According to the traffic usage information of the plurality of node container management sequences and the information of the device to be connected, a target node container is determined for access by the device to be connected.

2. The device access method based on Internet of Things security as claimed in claim 1, characterized in that: The node container information includes node container identification information, node quantity information, and transmission bandwidth information of a single node; wherein the node quantity information includes information on the number of connected nodes and information on the number of accessible nodes; The step of creating multiple node container management sequences according to the node container information specifically includes: Calculate the bandwidth used by the node container according to the information about the number of connected nodes and the transmission bandwidth information of the single node; Calculate the bandwidth threshold of the node container according to the information about the number of accessible nodes and the transmission bandwidth information of the single node; Calculating a traffic ratio of a node container according to the node container usage bandwidth and the node container usage bandwidth threshold; The node container identification information is arranged according to the flow ratio of the node container, the preset number of sequence elements and the preset arrangement rule to obtain a plurality of node container management sequences.

3. The device access method based on Internet of Things security as claimed in claim 2 is characterized in that: The traffic usage information includes used traffic and traffic usage ratio; The step of determining the traffic usage information of each of the node container management sequences according to each of the node container management sequences specifically includes: Summing the bandwidth used by the node containers in each node container management sequence to obtain the used traffic of each node container management sequence; The flow ratios of the node containers in each of the node container management sequences are summed to obtain the flow usage ratio of each of the node container management sequences.

4. The device access method based on Internet of Things security as claimed in claim 3 is characterized in that: The information of the device to be connected includes traffic demand information of the device to be connected; The step of determining the target node container according to the traffic usage information of the plurality of node container management sequences and the information of the device to be connected specifically includes: Determine whether a first traffic usage ratio of the first node container management sequence is less than a preset traffic usage ratio threshold; If yes, then according to the traffic demand information of the device to be connected, match the node container in the first node container management sequence to determine the target node container; If not, when the second traffic usage ratio of the second node container management sequence is less than the preset traffic usage ratio threshold, the node containers in the second node container management sequence are matched according to the traffic demand information of the device to be connected, and the target node container is determined.

5. The device access method based on Internet of Things security as claimed in claim 4 is characterized in that: The step of matching the node containers in the first node container management sequence according to the traffic demand information of the device to be connected and determining the target node container specifically includes: Calculate the remaining bandwidth of each node container in the first node container management sequence according to the node container usage bandwidth of each node in the first node container management sequence and the bandwidth usage threshold of each node container in the first node container management sequence; Calculate multiple bandwidth differences according to the traffic demand information of the device to be connected and the remaining bandwidth of each node container; A minimum value among the plurality of bandwidth differences is determined, and a node container corresponding to the minimum value is used as a target node container.

6. The device access method based on Internet of Things security as claimed in claim 1, characterized in that: After the step of determining the target node container according to the traffic usage information of the plurality of node container management sequences and the information of the device to be connected, the method further includes: Obtaining the number of node containers of the plurality of node container management sequences; According to the plurality of node container quantities and a preset node container quantity threshold, counting the number of node container management sequences whose node container quantity is less than the node container quantity threshold, to obtain the number of unsaturated node container management sequences; When the number of the unsaturated node container management sequences is not less than the preset unsaturated use sequence number threshold, the node container number threshold is reduced.

7. A device access device based on Internet of Things security, characterized in that: include: An information acquisition module is used to obtain node container information and information of devices to be connected; A node container management sequence creation module, used to create multiple node container management sequences according to the node container information; A traffic usage information statistics module, used to count traffic usage information of each of the node container management sequences according to each of the node container management sequences; as well as The target node container determination module is used to determine the target node container according to the traffic usage information of the plurality of node container management sequences and the information of the device to be connected.

8. The device access device based on Internet of Things security according to claim 7 is characterized in that: The target node container determination module includes: a remaining bandwidth calculation unit, configured to calculate the remaining bandwidth of each node container in the first node container management sequence according to the node container usage bandwidth of each node in the first node container management sequence and the bandwidth usage threshold of each node container in the first node container management sequence; a bandwidth difference calculation unit, configured to calculate a plurality of bandwidth differences according to the traffic demand information of the device to be connected and the remaining bandwidth of each node container; and The target node container determining unit is used to determine a minimum value among the multiple bandwidth differences, and use the node container corresponding to the minimum value as the target node container.

9. A terminal device, characterized in that: The terminal device includes a memory and a processor, wherein the memory stores a computer program that can be run on the processor, and when the processor executes the computer program, the steps of the method according to any one of claims 1 to 6 are implemented.

10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

Images