Safety verification method and device for communication between equipment and platform and computer equipment

Abstract

The invention discloses a security verification method and device for communication between equipment and a platform, a terminal and a medium, and the method comprises the steps: configuring an equipment access protocol packet, compiling an encryption algorithm, and encrypting a login password of the equipment based on the encryption algorithm; the control platform verifies the encrypted login password, feeds back verification information to the equipment, and adds the verification information into an uplink message and a downlink message when the equipment communicates with the platform; and verifying the verification information in the uplink message and the downlink message. According to the invention, security verification can be added to login, uplink messages and downlink messages of the platform by the equipment, so that the security and reliability of the system can be improved.

Description

Technical Field

[0001] The present invention relates to the field of communication security technology, and in particular to a method and device for verifying the security of communication between a device and a platform, and a computer device. Background Art

[0002] The existing security verification method of the platform system only includes MD5 encryption verification during login. However, in the face of commercial scenarios with high security requirements, the security mechanism provided by the platform cannot meet commercial needs. This makes it easy for the login information and communication information between the device and the platform to be stolen, affecting the security of information interaction.

[0003] Therefore, the prior art still needs to be improved and enhanced. Summary of the invention

[0004] The technical problem to be solved by the present invention is that, in view of the above-mentioned defects of the prior art, a security verification method, device and computer equipment for communication between a device and a platform are provided, aiming to solve the problems that the security mechanism provided by the platform in the prior art cannot meet commercial needs, which easily leads to the login information and communication information between the device and the platform being easily stolen, affecting the security of information interaction.

[0005] In order to solve the above technical problems, the technical solution adopted by the present invention is as follows:

[0006] In a first aspect, the present invention provides a method for verifying the security of communication between a device and a platform, wherein the method comprises:

[0007] Configure a device access protocol package, write an encryption algorithm, and encrypt the login password of the device based on the encryption algorithm;

[0008] The control platform verifies the encrypted login password, feeds back verification information to the device, and adds the verification information to the uplink message and the downlink message when the device communicates with the platform;

[0009] The verification information in the uplink message and the downlink message is verified.

[0010] In one implementation, the configuration device access protocol package includes:

[0011] If the platform is a websocket, http, mqtt, https, or mqtts service, the access protocol package includes any one or more of the six encryption algorithms: SHA256, SHA512, AES128, AES256, RSA512, and RSA2048;

[0012] If the platform provides UDP and TCP services, the accessed protocol packet includes any one or more of the three encryption algorithms: CCITT, CRC16, and CRC32.

[0013] In one implementation, the control platform verifies the encrypted login password and feeds back verification information to the device, including:

[0014] After the encrypted login password is verified by the platform, token information is generated;

[0015] The token information is stored in the log information and fed back to the device, where the token information is the verification information.

[0016] In one implementation, adding the verification information to an uplink message and a downlink message when the device communicates with the platform includes:

[0017] When the device sends an uplink message to the platform, the token information is added to the header file of the uplink message;

[0018] When the platform sends a downlink message to the device, the token information is added to the header file of the downlink message.

[0019] In one implementation, adding the verification information to an uplink message and a downlink message when the device communicates with the platform includes:

[0020] When the device sends an uplink message to the platform, the token information is encrypted using an encryption algorithm, and the encrypted token information is added to a header file of the uplink message;

[0021] When the platform sends a downlink message to the device, the token information is encrypted using an encryption algorithm, and the encrypted token information is added to the header file of the downlink message.

[0022] In one implementation, the verifying the verification information in the uplink message and the downlink message includes:

[0023] Get token information from log information;

[0024] Comparing the token information with the token information in the uplink message and the downlink message;

[0025] If the data values ​​are the same, it is determined that the uplink message and the downlink message are verified successfully.

[0026] In one implementation, the verifying the verification information in the uplink message and the downlink message includes:

[0027] Get token information from log information;

[0028] Decrypt the encrypted token information in the uplink message and the downlink message and compare it with the token information in the log information;

[0029] If the data values ​​are the same, it is determined that the uplink message and the downlink message are verified successfully.

[0030] In a second aspect, an embodiment of the present invention further provides a security verification device for communication between a device and a platform, wherein the device comprises:

[0031] A login encryption module, used to configure a device access protocol package and write an encryption algorithm, and encrypt the login password of the device based on the encryption algorithm;

[0032] A communication interaction module, used for the platform to verify the encrypted login password, feed back verification information to the device, and add the verification information to the uplink message and downlink message when the device communicates with the platform;

[0033] The message verification module is used to verify the verification information in the uplink message and the downlink message.

[0034] In one implementation, the login encryption module includes:

[0035] The first protocol access unit is used for, if the platform is a websocket, http, mqtt, https, or mqtts service, the accessed protocol package includes any one or more of the six encryption algorithms of SHA256, SHA512, AES128, AES256, RSA512, and RSA2048;

[0036] The second protocol access unit is used for accessing protocol packets including any one or more of the three encryption algorithms of CCITT, CRC16 and CRC32 if the platform provides UDP and TCP services.

[0037] In one implementation, the communication interaction module includes:

[0038] A token information generating unit, used to generate token information after the encrypted login password is verified by the platform;

[0039] The token information feedback unit is used to store the token information into log information and feed back the token information to the device, wherein the token information is the verification information.

[0040] In one implementation, the communication interaction module further includes:

[0041] A first uplink message processing unit, configured to add the token information to a header file of the uplink message when the device sends the uplink message to the platform;

[0042] The first downlink message processing unit is configured to add the token information to a header file of the downlink message when the platform sends the downlink message to the device.

[0043] In one implementation, the communication interaction module further includes:

[0044] a second uplink message processing unit, configured to encrypt the token information by using an encryption algorithm when the device sends an uplink message to the platform, and add the encrypted token information to a header file of the uplink message;

[0045] The second uplink message processing unit is used to encrypt the token information by using an encryption algorithm when the platform sends a downlink message to the device, and add the encrypted token information to the header file of the downlink message.

[0046] In one implementation, the message verification module includes:

[0047] A first token information acquisition unit, used to acquire token information from log information;

[0048] A first token information comparison unit, configured to compare the token information with the token information in the uplink message and the downlink message;

[0049] The first verification pass determination unit is used to determine that the uplink message and the downlink message have passed verification if the data values ​​are the same.

[0050] In one implementation, the message verification module further includes:

[0051] A second token information acquisition unit, used to acquire token information from log information;

[0052] a second token information comparison unit, configured to decrypt the encrypted token information in the uplink message and the downlink message and compare the decrypted token information with the token information in the log information;

[0053] The second token information comparison unit is used to determine that the uplink message and the downlink message are verified if the data values ​​are the same.

[0054] In a third aspect, an embodiment of the present invention further provides a computer device, wherein the computer device comprises a memory, a processor, and a security verification program for communication between a device and a platform that is stored in the memory and can be run on the processor, and when the processor executes the security verification program for communication between a device and a platform, the steps of the security verification method for communication between a device and a platform in any one of the above-mentioned schemes are implemented.

[0055] In a fourth aspect, an embodiment of the present invention further provides a computer-readable storage medium, wherein a security verification program for communication between a device and a platform is stored on the computer-readable storage medium, and when the security verification program for communication between a device and a platform is executed by a processor, the steps of the security verification method for communication between a device and a platform described in any one of the above-mentioned schemes are implemented.

[0056] Beneficial effect: Compared with the prior art, the present invention provides a security verification method for communication between a device and a platform. The present invention first configures a device access protocol package, writes an encryption algorithm, and encrypts the login password of the device based on the encryption algorithm. Then, the control platform verifies the encrypted login password, feeds back the verification information to the device, and adds the verification information to the uplink message and the downlink message when the device communicates with the platform. Finally, the verification information in the uplink message and the downlink message is verified. The present invention can add a security verification mechanism to the platform login, uplink message and downlink message of the device, which can ensure that the interaction between the device and the platform is encrypted, so as to improve the security and reliability of the system. BRIEF DESCRIPTION OF THE DRAWINGS

[0057] Figure 1 A schematic diagram of an application scenario of the security verification method for device-platform communication provided by an embodiment of the present invention.

[0058] Figure 2 A flowchart of a preferred embodiment of a security verification method for communication between a device and a platform provided in an embodiment of the present invention.

[0059] Figure 3 An architectural diagram of a system to which the method for verifying the security of device-platform communication provided in an embodiment of the present invention is applied.

[0060] Figure 4 An interactive schematic diagram of a method for verifying the security of communications between a device and a platform provided in an embodiment of the present invention.

[0061] Figure 5 A schematic diagram of the architecture of a security verification device for communication between a device and a platform provided in an embodiment of the present invention.

[0062] Figure 6 A functional block diagram of a computer device provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0063] In order to make the purpose, technical solution and effect of the present invention clearer and more specific, the present invention is further described in detail with reference to the accompanying drawings and examples. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.

[0064] The flowcharts shown in the accompanying drawings are only examples and do not necessarily include all the contents and operations or steps, nor must they be executed in the order described. For example, some operations or steps may also be decomposed, combined or partially merged, so the actual execution order may change according to actual conditions.

[0065] It should be understood that the terms used in this specification of the present invention are only for the purpose of describing specific embodiments and are not intended to limit the present invention. As used in the specification of the present invention and the appended claims, unless the context clearly indicates otherwise, the singular forms "a", "an" and "the" are intended to include plural forms.

[0066] It should be understood that, in order to clearly describe the technical solutions of the embodiments of the present invention, in the embodiments of the present invention, words such as "first" and "second" are used to distinguish between identical or similar items with substantially identical functions and effects. For example, the first control information and the second control information are only used to distinguish different control information, and their order is not limited.

[0067] Those skilled in the art can understand that the words "first", "second", etc. do not limit the quantity and execution order, and the words "first", "second", etc. do not necessarily limit the differences.

[0068] It should be further understood that the term “and / or” used in the present specification and the appended claims refers to any and all possible combinations of one or more of the associated listed items, and includes these combinations.

[0069] In order to solve the problems of the prior art, the present embodiment provides a security verification method for communication between a device and a platform. In specific application, the present embodiment first configures the device access protocol package, writes an encryption algorithm, and encrypts the login password of the device based on the encryption algorithm. Then, the control platform verifies the encrypted login password, feeds back the verification information to the device, and adds the verification information to the uplink message and the downlink message when the device communicates with the platform. Finally, the verification information in the uplink message and the downlink message is verified. The present embodiment can add a security verification mechanism to the platform login, uplink message, and downlink message of the device, which can ensure that the interaction between the device and the platform is encrypted, so as to improve the security and reliability of the system.

[0070] The security verification method for communication between a device and a platform of this embodiment can be applied to Figure 1 In the application environment shown. Among them, the terminal 102 communicates with the server 104 through the network. The data storage system can store the data that the server 104 needs to process. The data storage system can be integrated on the server 104, or it can be placed on the cloud or other network servers; the security verification method for communication between the device and the platform can be executed by the terminal 102 or the server 104, or it can be executed by the terminal 102 and the server 104 in collaboration.

[0071] The terminal 102 may be a smart phone, a tablet computer, a laptop computer, a desktop computer, a smart speaker, a smart watch, an IoT device, and a portable wearable device. The IoT device may be a smart speaker, a smart TV, a smart air conditioner, and a smart vehicle-mounted device, etc. The portable wearable device may be a smart watch, a smart bracelet, a head-mounted device, etc.

[0072] The server 104 may be an independent physical server or a service node in a blockchain system, where each service node in the blockchain system forms a peer-to-peer network.

[0073] In addition, server 104 can also be a server cluster composed of multiple physical servers, and can be a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, content distribution networks (Content Delivery Network, CDN), as well as big data and artificial intelligence platforms.

[0074] The terminal 102 and the server 104 may be connected via Bluetooth, USB (Universal Serial Bus) or a network or other communication connection method, and this application does not impose any limitation thereto.

[0075] In some embodiments, Figure 2 As shown, a method for verifying the security of communication between a device and a platform is provided. Figure 1 The server or terminal in the Figure 1 The server and terminal in the method are executed in cooperation with each other. Figure 1 The server execution in is taken as an example to illustrate, including the following steps:

[0076] Step S100: configure a device access protocol package, write an encryption algorithm, and encrypt the login password of the device based on the encryption algorithm.

[0077] The architecture of this embodiment is as follows Figure 3 The equipment of this embodiment includes a computer, a monitoring device, etc. In practical application, Figure 4 As shown, in this embodiment, kh links-officia l-protocol configures an encryption algorithm, compiles a protocol package, and configures the protocol package to the platform. If the platform is a websocket, http, mqtt, https, or mqtts service, the accessed protocol package includes any one or more of the six encryption algorithms of SHA256, SHA512, AES128, AES256, RSA512, and RSA2048. Among them, AES128 and AES256 are symmetric encryption algorithms, and RSA512 and RSA204 are asymmetric encryption algorithms. If the platform is a UDP and TCP service, and the message format transmitted by the UDP and TCP services is hexadecimal, the accessed protocol package includes any one or more of the three encryption algorithms of CCITT, CRC16, and CRC32. This embodiment is based on encrypting the login password of the device on the platform based on the encryption algorithm after accessing the corresponding protocol package with the encryption algorithm, so that the access between the device and the platform is securely guaranteed.

[0078] Step S200: The control platform verifies the encrypted login password, feeds back verification information to the device, and adds the verification information to the uplink message and the downlink message when the device communicates with the platform.

[0079] After the device logs in, the platform of this embodiment can verify the login password encrypted by the device. The verification method can use the key of the encryption algorithm to verify the encrypted login password. After the platform successfully verifies, it feeds back the verification information and transmits the verification information to the device. When the device and the platform communicate and interact, the verification information can be added to the uplink message and downlink message when the device and the platform communicate.

[0080] In one implementation, when feeding back verification information to a device, this embodiment includes the following steps:

[0081] Step S201: after the encrypted login password is verified by the platform, token information is generated;

[0082] Step S202: store the token information into log information, and feed back the token information to the device, where the token information is the verification information.

[0083] Specifically, in this embodiment, after the encrypted login password is verified by the platform, token information is generated, and the token information can be used as a verification credential for subsequent information reporting. In this embodiment, the token information is the verification information. The token information can be stored in the log information redis.

[0084] Furthermore, in specific applications, this embodiment may adopt the method of adding a static token or a dynamic token. Specifically, when a static token is adopted, this embodiment may add the token information (i.e., the auth info information) to the header file of the uplink message when the device sends an uplink message to the platform; when the platform sends a downlink message to the device, the token information is added to the header file of the downlink message. When a dynamic token is adopted, when the device sends an uplink message to the platform, an encryption algorithm is used to encrypt the token information, and the encrypted token information is added to the header file of the uplink message; when the platform sends a downlink message to the device, an encryption algorithm is used to encrypt the token information, and the encrypted token information is added to the header file of the downlink message. The message communication protocols of this embodiment only support seven types: http, https, websocket, mqtt, mqtts, tcp, and udp.

[0085] Step S300: verify the verification information in the uplink message and the downlink message.

[0086] Furthermore, the present embodiment also verifies the verification information in the uplink message and the downlink message, thereby ensuring the security of the uplink message and the downlink message between the device and the platform. Since the present embodiment processes the uplink message and the downlink message by adding a static token or a dynamic token, the present embodiment can verify the static token or the dynamic token respectively.

[0087] Specifically, when a static token is added to an uplink message or a downlink message, the present embodiment can obtain the token information from the log information. Then, the token information is compared with the token information in the uplink message and the downlink message. If the data values ​​are the same, it is determined that the uplink message and the downlink message are verified. When a dynamic token is added to an uplink message or a downlink message, the present embodiment can obtain the token information from the log information; the encrypted token information in the uplink message and the downlink message is decrypted and compared with the token information in the log information. If the data values ​​are the same, it is determined that the uplink message and the downlink message are verified. In addition, the present embodiment also verifies the validity of the timestamp to further determine whether the verification of the uplink message and the downlink message is passed, thereby further ensuring the security of the communication interaction between the device and the platform.

[0088] In summary, in this embodiment, the device access protocol package can be first configured, and an encryption algorithm can be written to encrypt the login password of the device based on the encryption algorithm. Then, the control platform verifies the encrypted login password, feeds back the verification information to the device, and adds the verification information to the uplink message and the downlink message when the device communicates with the platform. Finally, the verification information in the uplink message and the downlink message is verified. In this embodiment, the device can add a security verification mechanism to the platform login, uplink message and downlink message, which can ensure that the interaction between the device and the platform is encrypted, so as to improve the security and reliability of the system.

[0089] Based on the above embodiments, the present invention also provides a security verification device for communication between a device and a platform, such as Figure 5 As shown in , the device includes: a login encryption module 10, a communication interaction module 20 and a message verification module 30. Specifically, the login encryption module 10 is used to configure the device access protocol package, and write an encryption algorithm, and encrypt the login password of the device based on the encryption algorithm. The communication interaction module 20 is used for the platform to verify the encrypted login password, feedback the verification information to the device, and add the verification information to the uplink message and the downlink message when the device communicates with the platform. The message verification module 30 is used to verify the verification information in the uplink message and the downlink message.

[0090] In one implementation, the login encryption module includes:

[0091] The first protocol access unit is used for, if the platform is a websocket, http, mqtt, https, or mqtts service, the accessed protocol package includes any one or more of the six encryption algorithms of SHA256, SHA512, AES128, AES256, RSA512, and RSA2048;

[0092] The second protocol access unit is used for accessing protocol packets including any one or more of the three encryption algorithms of CCITT, CRC16 and CRC32 if the platform provides UDP and TCP services.

[0093] In one implementation, the communication interaction module includes:

[0094] A token information generating unit, used to generate token information after the encrypted login password is verified by the platform;

[0095] The token information feedback unit is used to store the token information into log information and feed back the token information to the device, wherein the token information is the verification information.

[0096] In one implementation, the communication interaction module further includes:

[0097] A first uplink message processing unit, configured to add the token information to a header file of the uplink message when the device sends the uplink message to the platform;

[0098] The first downlink message processing unit is configured to add the token information to a header file of the downlink message when the platform sends the downlink message to the device.

[0099] In one implementation, the communication interaction module further includes:

[0100] a second uplink message processing unit, configured to encrypt the token information by using an encryption algorithm when the device sends an uplink message to the platform, and add the encrypted token information to a header file of the uplink message;

[0101] The second uplink message processing unit is used to encrypt the token information by using an encryption algorithm when the platform sends a downlink message to the device, and add the encrypted token information to the header file of the downlink message.

[0102] In one implementation, the message verification module includes:

[0103] A first token information acquisition unit, used to acquire token information from log information;

[0104] A first token information comparison unit, configured to compare the token information with the token information in the uplink message and the downlink message;

[0105] The first verification pass determination unit is used to determine that the uplink message and the downlink message have passed verification if the data values ​​are the same.

[0106] In one implementation, the message verification module further includes:

[0107] A second token information acquisition unit, used to acquire token information from log information;

[0108] a second token information comparison unit, configured to decrypt the encrypted token information in the uplink message and the downlink message and compare the decrypted token information with the token information in the log information;

[0109] The second token information comparison unit is used to determine that the uplink message and the downlink message are verified if the data values ​​are the same.

[0110] The working principles of each module in the security verification device for device-platform communication in this embodiment are the same as the principles of each step in the above method embodiment, and will not be repeated here.

[0111] Each module in the security verification device for communication between the above-mentioned device and the platform can be implemented in whole or in part by software, hardware, or a combination thereof. Each of the above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory in the computer device in the form of software, so that the processor can call and execute the corresponding operations of each of the above modules.

[0112] In some embodiments, a computer device is provided. The computer device may be a terminal, and its internal structure diagram may be as follows: Figure 6As shown. The computer device includes a processor, a memory, an input / output interface, a communication interface, a display unit and an input device. Among them, the processor, the memory and the input / output interface are connected through a system bus, and the communication interface, the display unit and the input device are connected to the system bus through the input / output interface. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal in a wired or wireless manner, and the wireless manner can be implemented through WIFI, a mobile cellular network, NFC (near field communication) or other technologies. When the computer program is executed by the processor, a security verification method for communication between a device and a platform is implemented. The display unit of the computer device is used to form a visually visible image, and can be a display screen, a projection device or a virtual reality imaging device. The display screen can be a liquid crystal display screen or an electronic ink display screen. The input device of the computer device can be a touch layer covered on the display screen, or a button, trackball or touchpad set on the computer device casing, or an external keyboard, touchpad or mouse, etc.

[0113] Those skilled in the art will understand that Figure 6 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0114] In some embodiments, a computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and when the processor executes the computer program, the following steps are implemented:

[0115] Configure a device access protocol package, write an encryption algorithm, and encrypt the login password of the device based on the encryption algorithm;

[0116] The control platform verifies the encrypted login password, feeds back verification information to the device, and adds the verification information to the uplink message and the downlink message when the device communicates with the platform;

[0117] The verification information in the uplink message and the downlink message is verified.

[0118] It should be noted that the user information (including but not limited to user device function information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant regulations.

[0119] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., but are not limited to this.

[0120] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0121] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A security verification method for communication between a device and a platform, characterized in that: The method comprises: Configure a device access protocol package, write an encryption algorithm, and encrypt the login password of the device based on the encryption algorithm; The control platform verifies the encrypted login password, feeds back verification information to the device, and adds the verification information to the uplink message and the downlink message when the device communicates with the platform; The verification information in the uplink message and the downlink message is verified.

2. The method for verifying the security of communication between a device and a platform according to claim 1, characterized in that: The configuration device access protocol package includes: If the platform is a websocket, http, mqtt, https, or mqtts service, the access protocol package includes any one or more of the six encryption algorithms: SHA256, SHA512, AES128, AES256, RSA512, and RSA2048; If the platform provides UDP and TCP services, the accessed protocol packet includes any one or more of the three encryption algorithms: CCITT, CRC16, and CRC32.

3. The method for verifying the security of communication between a device and a platform according to claim 1, characterized in that: The control platform verifies the encrypted login password and feeds back verification information to the device, including: After the encrypted login password is verified by the platform, token information is generated; The token information is stored in the log information and fed back to the device, where the token information is the verification information.

4. The method for verifying the security of communication between a device and a platform according to claim 3, characterized in that: The adding the verification information into the uplink message and the downlink message when the device communicates with the platform includes: When the device sends an uplink message to the platform, the token information is added to the header file of the uplink message; When the platform sends a downlink message to the device, the token information is added to the header file of the downlink message.

5. The method for verifying the security of communication between a device and a platform according to claim 3, characterized in that: The adding the verification information into the uplink message and the downlink message when the device communicates with the platform includes: When the device sends an uplink message to the platform, the token information is encrypted using an encryption algorithm, and the encrypted token information is added to a header file of the uplink message; When the platform sends a downlink message to the device, the token information is encrypted using an encryption algorithm, and the encrypted token information is added to the header file of the downlink message.

6. The method for verifying the security of communication between a device and a platform according to claim 4, characterized in that: The verifying the verification information in the uplink message and the downlink message includes: Get token information from log information; Comparing the token information with the token information in the uplink message and the downlink message; If the data values ​​are the same, it is determined that the uplink message and the downlink message are verified successfully.

7. The method for verifying the security of communication between a device and a platform according to claim 5, characterized in that: The verifying the verification information in the uplink message and the downlink message includes: Get token information from log information; Decrypt the encrypted token information in the uplink message and the downlink message and compare it with the token information in the log information; If the data values ​​are the same, it is determined that the uplink message and the downlink message are verified successfully.

8. A security verification device for communication between a device and a platform, characterized in that: The device comprises: A login encryption module, used to configure a device access protocol package and write an encryption algorithm, and encrypt the login password of the device based on the encryption algorithm; A communication interaction module, used for the platform to verify the encrypted login password, feed back verification information to the device, and add the verification information to the uplink message and downlink message when the device communicates with the platform; The message verification module is used to verify the verification information in the uplink message and the downlink message.

9. A computer device, characterized in that: The computer device includes a memory, a processor, and a security verification program for device-platform communication stored in the memory and executable on the processor. When the processor executes the security verification program for device-platform communication, the steps of the device-platform communication security verification method as described in any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a security verification program for communication between the device and the platform. When the security verification program for communication between the device and the platform is executed by the processor, the steps of the security verification method for communication between the device and the platform as described in any one of claims 1-7 are implemented.

Images