Password retrieving method and device for Internet of Things equipment, equipment and storage medium

Abstract

The invention provides a password retrieving method, device and equipment for Internet of Things equipment and a storage medium, and the method comprises the steps: obtaining a password retrieving request sent by a password retrieving tool end, and analyzing the password retrieving request to generate an analysis result, the password retrieving request comprises a check code generated by the Internet of Things equipment and administrator information; and when it is judged that the administrator information is legal and has the operation authority for the Internet of Things equipment according to the analysis result, and the fixed character of the check code is consistent with the negotiated character, generating a temporary password and sending the temporary password to the password retrieving tool end. And the password of the Internet of Things equipment is retrieved under the condition that the security is ensured.

Description

Technical Field

[0001] The present invention relates to the field of password retrieval, and in particular to a password retrieval method, device, equipment and storage medium for an Internet of Things device. Background Art

[0002] Nowadays, various regions in the world, especially some regions, have very high requirements for the login management passwords of some smart IoT devices, requiring complex and strong passwords. In this way, after users set a complex WEB management password, there is a possibility that they will forget it. For smart building intercom equipment, it will involve functions such as access control, monitoring, and calls. If the web management password is leaked, it will cause a relatively large impact;

[0003] In the prior art, some devices can be retrieved through email passwords, but some devices do not have an external network and cannot send emails normally, and not everyone will register an email on the device; or for some public devices, the administrator may change at any time, and even if the email is registered, it needs to be changed at any time. Therefore, the email password retrieval solution is not applicable to the scenario of this kind of smart intercom device, and it has great limitations; some devices can be retrieved through security questions, but the security questions may be forgotten. Or different administrators may manage the same device, and this administrator does not know the security questions set by the previous administrator, resulting in the password being unable to be retrieved;

[0004] Some devices are retrieved through password recovery tools. Each device manufacturer releases a password recovery tool. Enter the unique identification code of each device, and then generate a temporary password. The device logs in with the temporary password. This can solve the password recovery problem, but there are great security risks. If the tool is cracked by hackers, hackers can directly access each device.

[0005] In view of this, this application is filed. Summary of the invention

[0006] The present invention discloses a password retrieving method, device, equipment and storage medium for an Internet of Things device, aiming to retrieve the password of the Internet of Things device while ensuring security.

[0007] The first embodiment of the present invention provides a password recovery method for an Internet of Things device, comprising:

[0008] Obtaining a password retrieval request sent by a password retrieval tool, and parsing the password retrieval request to generate a parsing result, wherein the password retrieval request includes a verification code generated by an IoT device and administrator information;

[0009] When it is determined according to the analysis result that the administrator information is legal and has the operation authority for the IoT device, and the fixed characters of the verification code are consistent with the agreement, a temporary password is generated and sent to the password retrieval tool.

[0010] Preferably, the verification code generated by the IoT device is specifically:

[0011] Generate a pair of public and private keys, wherein the public key is imported into the IoT device;

[0012] Generate a verification plaintext, and perform RSA encryption on the verification plaintext through the public key to generate a verification code, wherein the verification plaintext includes the MAC of the Internet of Things device, fixed characters, and random characters.

[0013] Preferably, the generating of a temporary password and sending it to the password retrieval tool end is specifically:

[0014] Decrypt the verification code with the private key to generate the MAC of the IoT device and generate the temporary password plaintext with random characters in a predetermined form;

[0015] Perform MD5 calculation on the temporary password plain text to generate a temporary password and send it to the password retrieval tool end, wherein the temporary password is an irreversible hash string.

[0016] Preferably, the temporary password is used to verify the ciphertext verification code generated by the IoT device, and after successful verification, the password reset interface is entered, and after monitoring that the password is reset, the temporary password becomes invalid;

[0017] The generation process of the ciphertext check code is as follows: a plaintext check code is generated in a predetermined form according to the MAC of the IoT device and random characters, and then the plaintext check code is subjected to MD5 calculation to generate a ciphertext check code.

[0018] A second embodiment of the present invention provides a password retrieval device for an Internet of Things device, comprising:

[0019] A parsing unit, configured to obtain a password retrieval request sent by the password retrieval tool, and parse the password retrieval request to generate a parsing result, wherein the password retrieval request includes a verification code generated by the IoT device and administrator information;

[0020] The temporary password generating unit is used to generate a temporary password and send it to the password retrieval tool end when it is determined according to the analysis result that the administrator information is legal and has the operation authority to the Internet of Things device, and the fixed characters of the verification code are consistent with the agreement.

[0021] Preferably, the verification code generated by the IoT device is specifically:

[0022] Generate a pair of public and private keys, wherein the public key is imported into the IoT device;

[0023] Generate a verification plaintext, and perform RSA encryption on the verification plaintext through the public key to generate a verification code, wherein the verification plaintext includes the MAC of the Internet of Things device, fixed characters, and random characters.

[0024] Preferably, the generating of a temporary password and sending it to the password retrieval tool end is specifically:

[0025] Decrypt the verification code with the private key to generate the MAC of the IoT device and generate the temporary password plaintext with random characters in a predetermined form;

[0026] Perform MD5 calculation on the temporary password plain text to generate a temporary password and send it to the password retrieval tool end, wherein the temporary password is an irreversible hash string.

[0027] Preferably, the temporary password is used to verify the ciphertext verification code generated by the IoT device, and after successful verification, the password reset interface is entered, and after monitoring that the password is reset, the temporary password becomes invalid;

[0028] The generation process of the ciphertext check code is as follows: a plaintext check code is generated in a predetermined form according to the MAC of the IoT device and random characters, and then the plaintext check code is subjected to MD5 calculation to generate a ciphertext check code.

[0029] A third embodiment of the present invention provides a password retrieval device for an Internet of Things device, including a memory and a processor, wherein a computer program is stored in the memory, and the computer program can be executed by the processor to implement a password retrieval method for an Internet of Things device as described in any one of the above.

[0030] A fourth embodiment of the present invention provides a computer-readable storage medium, characterized in that a computer program is stored therein, and the computer program can be executed by a processor of a device where the computer-readable storage medium is located to implement a password recovery method for an Internet of Things device as described in any one of the above items.

[0031] Based on the password retrieval method, device, equipment and storage medium of an Internet of Things device provided by the present invention, a password retrieval request sent by a password retrieval tool end is obtained, and the password retrieval request is parsed to generate a parsing result, wherein the password retrieval request includes a verification code and administrator information generated by the Internet of Things device; after judging from the parsing result that the administrator information is legal and has the operation authority to the Internet of Things device, and the fixed characters of the verification code are consistent with the agreement, a temporary password is generated and sent to the password retrieval tool end. Among them, only the unique private key needs to be protected, and even if all the rules are known, others cannot crack it; it has strong applicability, regardless of whether the device is connected to the Internet, or whether other password retrieval channels are set, it only needs to integrate this solution on the device end to retrieve the password; even if the administrator himself wants to exceed his authority to operate products of the same brand, he will be subject to supervision and restrictions, and the password cannot be retrieved for devices that are not under his management authority. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] Figure 1 It is a flowchart of a password recovery method for an Internet of Things device provided by the first embodiment of the present invention;

[0033] Figure 2 It is a specific flow chart of a password recovery method for an Internet of Things device provided by the present invention;

[0034] Figure 3 It is a schematic diagram of the temporary password generation process provided by the present invention;

[0035] Figure 4 It is a module schematic diagram of a password retrieval device for an Internet of Things device provided by a second embodiment of the present invention. DETAILED DESCRIPTION

[0036] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0037] In order to better understand the technical solution of the present invention, the embodiments of the present invention are described in detail below with reference to the accompanying drawings.

[0038] It should be clear that the described embodiments are only some embodiments of the present invention, not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0039] The terms used in the embodiments of the present invention are only for the purpose of describing specific embodiments, and are not intended to limit the present invention. The singular forms "a", "said" and "the" used in the embodiments of the present invention and the appended claims are also intended to include plural forms, unless the context clearly indicates other meanings.

[0040] It should be understood that the term "and / or" used in this article is only a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship.

[0041] The word "if" as used herein may be interpreted as "at the time of" or "when" or "in response to determining" or "in response to detecting", depending on the context. Similarly, the phrases "if it is determined" or "if (stated condition or event) is detected" may be interpreted as "when it is determined" or "in response to determining" or "when detecting (stated condition or event)" or "in response to detecting (stated condition or event)", depending on the context.

[0042] The "first\second" mentioned in the embodiments is only to distinguish similar objects, and does not represent a specific order for the objects. It is understandable that the "first\second" can be interchanged with the specific order or sequence where permitted. It should be understood that the objects distinguished by "first\second" can be interchanged where appropriate, so that the embodiments described herein can be implemented in an order other than those illustrated or described herein.

[0043] The specific embodiments of the present invention are described in detail below with reference to the accompanying drawings.

[0044] The present invention discloses a password retrieving method, device, equipment and storage medium for an Internet of Things device, aiming to retrieve the password of the Internet of Things device while ensuring security.

[0045] See also Figure 1 and 2 The first embodiment of the present invention provides a password retrieval method for an Internet of Things device, which can be executed by a password retrieval device of the Internet of Things device (hereinafter referred to as the retrieval device), and in particular, executed by one or more processors in the auxiliary device to at least implement the following steps:

[0046] S101, obtaining a password retrieval request sent by a password retrieval tool, and parsing the password retrieval request to generate a parsing result, wherein the password retrieval request includes a verification code generated by an IoT device and administrator information;

[0047] In this embodiment, the retrieval device can be a server or a workstation, which can establish a communication connection with the password retrieval tool end. The auxiliary device can be installed with a corresponding operating system and application software, and the functions required by this embodiment are realized through the combination of the operating system and application software.

[0048] It should be noted that, in order to implement this embodiment, it can call openssl in advance to generate a pair of private key and public key pair, the key length is 1024 bits, which is used for RSA encryption and decryption; the key pair generation process is as follows:

[0049] #Generate private key

[0050] openss l genpkey-a l gor ithm RSA-out pr i vate_key.pem-pkeyopt rsa_keygen_b its:1024

[0051] # Extract the public key from the private key

[0052] openss l rsa-pubout-i n pr i vate_key.pem-out pub li c_key.pem

[0053] Furthermore, in this embodiment, the generated public key (pub li c_key.pem) is imported into the IoT device, and the private key (pr i vate_key.pem) is imported into the retrieval device, i.e., the remote server;

[0054] Next, when retrieving the password of the IoT device, the user can click on the retrieve password on the IoT device, and the IoT device will generate a string of plain text. This plain text requires each device to have a unique identifier. Here, MAC is used as the unique identifier (of course, in other embodiments, SN code can also be used, which is not specifically limited here). Plain text is generated according to "device MAC + fixed characters + random characters". Take an example to illustrate. Assume that the device MAC is 8596AE8569AF, the fixed characters are He l lo, and the random characters are 85854a, then the plain text is 8596AE8569AFHe ll o85854a;

[0055] It should be noted that the "device MAC + fixed characters + random characters" is used to bind the terminal device one by one. The "fixed characters" are used to prevent counterfeiting to a certain extent. If the fixed characters are not found after decryption, it is considered illegal. The "random characters" are used to ensure that they are different each time they are effectively generated to prevent replay attacks.

[0056] By performing RSA encryption on the plain text (8596AE8569AFHell o85854a) using the public key (pub li c_key.pem), a string of 1024-bit binary ciphertext can be obtained. For the convenience of representation, it is directly converted into a 256-byte hexadecimal ciphertext (check code). The value of the check code is as follows:

[0057] "B502A9C9EE4A6B3AEC0A90C6DB2BC0718649EB134A78A775C0EA4F3FE191F2F8E88B7F3824F15E664D3079879AF2C616F5F120A8CD71543B1ABD6040FE 5DBA69536239720FD9FCFAA06542492420DD1 CF508FEBCCB0FBB5975521ABF21 4CCB885DC30143D7BAF8169D5AAE8337903C29CC22DB13DE4B1 DB44D5FF7A4D10729B1”;

[0058] Furthermore, the ciphertext (verification code) is copied and sent to the administrator through some channels (email, instant messaging software, etc.). It should be understood that the platform where the administrator is located is the password retrieval tool end; it does not require some network means, and the verification code can be sent to the password retrieval tool end, which can avoid the situation where the password cannot be retrieved when the IoT device has no network.

[0059] On the retrieval device, that is, on the remote server, an HTTP API interface is designed. The request parameters of this interface include the user name, password, and verification code. The returned value is the temporary password.

[0060] S102, when it is determined based on the analysis result that the administrator information is legal and has the operation authority for the IoT device, and the fixed characters of the verification code are consistent with the agreement, a temporary password is generated and sent to the password retrieval tool.

[0061] See also Figure 3 After receiving the https request initiated by the password retrieval tool, verify whether the username and password are legal. If not, return an error reminder directly. If legal, proceed to the next step.

[0062] Use the previously imported principal_key.pem (public key) to decrypt the verification code, and then parse out MAC+fixed string+random characters, and verify whether the fixed string is consistent with the one negotiated at the beginning of the design. If not, an error reminder is returned. If consistent, proceed to the next step.

[0063] Verify whether the username and password have the operation permission for MAC. If not, an error message will be returned directly. If it has the operation permission, proceed to the next step.

[0064] According to the parsed "random characters" and "device MAC", the temporary original plain text is composed of "random characters + device MAC + random characters". Assuming that the random characters are "85854a" and the device MAC is "0C1105969585", the plain text of the temporary password is: "85854a0C110596958585854a";

[0065] Perform MD5 calculation on the plain text temporary password to obtain an irreversible hash string. For example, perform MD5 calculation on "85854a0C110596958585854a" to obtain the final temporary ciphertext "3095596e74c6060a5b114582e3afdac9". The generated temporary password ciphertext is returned to the password recovery tool.

[0066] In a possible embodiment of the present invention, the temporary password is used to verify the ciphertext verification code generated by the Internet of Things device. After the verification is successful, the password reset interface is entered, and after the password is monitored to be reset, the temporary password becomes invalid; wherein, the generation process of the ciphertext verification code is: a plaintext verification code is generated in a predetermined form according to the Internet of Things device MAC and random characters, and then the plaintext verification code is subjected to MD5 calculation to generate a ciphertext verification code.

[0067] It should be noted that the administrator sends the temporary password received from the password recovery tool to the user; the user can use the temporary password to log in to the IoT device, and the device verifies the temporary password;

[0068] Among them, the IoT device will generate a plaintext verification code according to its own MAC and random code, according to the "random code + MAC + random code" formula and store it in the memory, and then perform MD5 calculation on the plaintext verification code to obtain the ciphertext verification code; the generated ciphertext verification code will be compared with the temporary password entered by the user. If they are different, it will prompt that the password is wrong. If they are correct, the device will enter the password reset page and the user will reset the password.

[0069] See also Figure 4 The second embodiment of the present invention provides a password retrieval device for an Internet of Things device, comprising:

[0070] The parsing unit 201 is used to obtain a password retrieval request sent by the password retrieval tool, and parse the password retrieval request to generate a parsing result, wherein the password retrieval request includes a verification code generated by the IoT device and administrator information;

[0071] The temporary password generating unit 202 is used to generate a temporary password and send it to the password retrieval tool end when it is determined according to the analysis result that the administrator information is legal and has the operation authority to the IoT device, and the fixed characters of the verification code are consistent with the agreement.

[0072] Preferably, the verification code generated by the IoT device is specifically:

[0073] Generate a pair of public and private keys, wherein the public key is imported into the IoT device;

[0074] Generate a verification plaintext, and perform RSA encryption on the verification plaintext through the public key to generate a verification code, wherein the verification plaintext includes the MAC of the Internet of Things device, fixed characters, and random characters.

[0075] Preferably, the generating of a temporary password and sending it to the password retrieval tool end is specifically:

[0076] Decrypt the verification code with the private key to generate the MAC of the IoT device and generate the temporary password plaintext with random characters in a predetermined form;

[0077] Perform MD5 calculation on the temporary password plain text to generate a temporary password and send it to the password retrieval tool end, wherein the temporary password is an irreversible hash string.

[0078] Preferably, the temporary password is used to verify the ciphertext verification code generated by the IoT device, and after successful verification, the password reset interface is entered, and after monitoring that the password is reset, the temporary password becomes invalid;

[0079] The generation process of the ciphertext check code is as follows: a plaintext check code is generated in a predetermined form according to the MAC of the IoT device and random characters, and then the plaintext check code is subjected to MD5 calculation to generate a ciphertext check code.

[0080] A third embodiment of the present invention provides a password retrieval device for an Internet of Things device, including a memory and a processor, wherein a computer program is stored in the memory, and the computer program can be executed by the processor to implement a password retrieval method for an Internet of Things device as described in any one of the above.

[0081] A fourth embodiment of the present invention provides a computer-readable storage medium, characterized in that a computer program is stored therein, and the computer program can be executed by a processor of a device where the computer-readable storage medium is located to implement a password recovery method for an Internet of Things device as described in any one of the above items.

[0082] Based on the password retrieval method, device, equipment and storage medium of an Internet of Things device provided by the present invention, a password retrieval request sent by a password retrieval tool end is obtained, and the password retrieval request is parsed to generate a parsing result, wherein the password retrieval request includes a verification code and administrator information generated by the Internet of Things device; after judging from the parsing result that the administrator information is legal and has the operation authority to the Internet of Things device, and the fixed characters of the verification code are consistent with the agreement, a temporary password is generated and sent to the password retrieval tool end. Among them, only the unique private key needs to be protected, and even if all the rules are known, others cannot crack it; it has strong applicability, regardless of whether the device is connected to the Internet, or whether other password retrieval channels are set, it only needs to integrate this solution on the device end to retrieve the password; even if the administrator himself wants to exceed his authority to operate products of the same brand, he will be subject to supervision and restrictions, and the password cannot be retrieved for devices that are not under his management authority.

[0083] Exemplarily, the computer program described in the third and fourth embodiments of the present invention may be divided into one or more modules, and the one or more modules are stored in the memory and executed by the processor to complete the present invention. The one or more modules may be a series of computer program instruction segments capable of completing specific functions, and the instruction segments are used to describe the execution process of the computer program in the password retrieval device for implementing an Internet of Things device. For example, the device described in the second embodiment of the present invention.

[0084] The processor may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or any conventional processor, etc. The processor is the control center of the password retrieval method for an Internet of Things device, and uses various interfaces and lines to connect the various parts of the entire method for implementing the password retrieval method for an Internet of Things device.

[0085] The memory can be used to store the computer program and / or module, and the processor realizes various functions of a password retrieval method for an Internet of Things device by running or executing the computer program and / or module stored in the memory, and calling the data stored in the memory. The memory can mainly include a program storage area and a data storage area, wherein the program storage area can store an operating system, an application required for at least one function (such as a sound playback function, a text conversion function, etc.), etc.; the data storage area can store data created according to the use of the mobile phone (such as audio data, text message data, etc.), etc. In addition, the memory can include a high-speed random access memory, and can also include a non-volatile memory, such as a hard disk, a memory, a plug-in hard disk, a smart memory card (Smart Med ia Card, SMC), a secure digital (Secure Digital, SD) card, a flash card (Flash Card), at least one disk storage device, a flash memory device, or other volatile solid-state storage devices.

[0086] Wherein, if the implemented module is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on such an understanding, the present invention implements all or part of the processes in the above-mentioned embodiment method, and can also be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a computer-readable storage medium, and the computer program can implement the steps of the above-mentioned various method embodiments when executed by the processor. Wherein, the computer program includes computer program code, and the computer program code can be in source code form, object code form, executable file or some intermediate form. The computer-readable medium may include: any entity or device capable of carrying the computer program code, recording medium, U disk, mobile hard disk, disk, optical disk, computer memory, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), electric carrier signal, telecommunication signal and software distribution medium. It should be noted that the content contained in the computer-readable medium can be appropriately increased or decreased according to the requirements of legislation and patent practice in the jurisdiction. For example, in some jurisdictions, according to legislation and patent practice, computer-readable media do not include electric carrier signals and telecommunication signals.

[0087] It should be noted that the device embodiments described above are merely schematic, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment. In addition, in the accompanying drawings of the device embodiments provided by the present invention, the connection relationship between the modules indicates that there is a communication connection between them, which may be specifically implemented as one or more communication buses or signal lines. A person of ordinary skill in the art may understand and implement it without paying any creative effort.

[0088] The above is only a preferred specific embodiment of the present invention, but the protection scope of the present invention is not limited thereto. Any changes or substitutions that can be easily thought of by a person skilled in the art within the technical scope disclosed by the present invention should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims

1. A password retrieval method for an Internet of Things device, characterized in that: include: Obtaining a password retrieval request sent by a password retrieval tool, and parsing the password retrieval request to generate a parsing result, wherein the password retrieval request includes a verification code generated by an IoT device and administrator information; When it is determined according to the analysis result that the administrator information is legal and has the operation authority for the IoT device, and the fixed characters of the verification code are consistent with the agreement, a temporary password is generated and sent to the password retrieval tool.

2. A password retrieval method for an Internet of Things device according to claim 1, characterized in that: The verification code generated by the IoT device is specifically: Generate a pair of public and private keys, wherein the public key is imported into the IoT device; Generate a verification plaintext, and perform RSA encryption on the verification plaintext through the public key to generate a verification code, wherein the verification plaintext includes the MAC of the Internet of Things device, fixed characters, and random characters.

3. A password retrieval method for an Internet of Things device according to claim 2, characterized in that: The generating of a temporary password and sending it to the password retrieval tool is specifically as follows: Decrypt the verification code with the private key to generate the MAC of the IoT device and generate the temporary password plaintext with random characters in a predetermined form; Perform MD5 calculation on the temporary password plain text to generate a temporary password and send it to the password retrieval tool end, wherein the temporary password is an irreversible hash string.

4. The method for retrieving a password for an Internet of Things device according to claim 1, characterized in that: The temporary password is used to verify the ciphertext verification code generated by the IoT device. After successful verification, the password reset interface is entered, and after monitoring that the password is reset, the temporary password becomes invalid; The generation process of the ciphertext check code is as follows: a plaintext check code is generated in a predetermined form according to the MAC of the IoT device and random characters, and then the plaintext check code is subjected to MD5 calculation to generate a ciphertext check code.

5. A password retrieval device for an Internet of Things device, characterized in that: include: A parsing unit, configured to obtain a password retrieval request sent by the password retrieval tool, and parse the password retrieval request to generate a parsing result, wherein the password retrieval request includes a verification code generated by the IoT device and administrator information; The temporary password generating unit is used to generate a temporary password and send it to the password retrieval tool end when it is determined according to the analysis result that the administrator information is legal and has the operation authority to the Internet of Things device, and the fixed characters of the verification code are consistent with the agreement.

6. The password retrieval device for an Internet of Things device according to claim 5, characterized in that: The verification code generated by the IoT device is specifically: Generate a pair of public and private keys, wherein the public key is imported into the IoT device; Generate a verification plaintext, and perform RSA encryption on the verification plaintext through the public key to generate a verification code, wherein the verification plaintext includes the MAC of the Internet of Things device, fixed characters, and random characters.

7. The password retrieval device for an Internet of Things device according to claim 6, characterized in that: The generating of a temporary password and sending it to the password retrieval tool is specifically as follows: Decrypt the verification code with the private key to generate the MAC of the IoT device and generate the temporary password plaintext with random characters in a predetermined form; Perform MD5 calculation on the temporary password plain text to generate a temporary password and send it to the password retrieval tool end, wherein the temporary password is an irreversible hash string.

8. The password retrieval device for an Internet of Things device according to claim 5, characterized in that: The temporary password is used to verify the ciphertext verification code generated by the IoT device. After successful verification, the password reset interface is entered, and after monitoring that the password is reset, the temporary password becomes invalid; The generation process of the ciphertext check code is as follows: a plaintext check code is generated in a predetermined form according to the MAC of the IoT device and random characters, and then the plaintext check code is subjected to MD5 calculation to generate a ciphertext check code.

9. A password retrieval device for an Internet of Things device, characterized in that: It includes a memory and a processor, wherein the memory stores a computer program, and the computer program can be executed by the processor to implement a password recovery method for an Internet of Things device as described in any one of claims 1 to 4.

10. A computer-readable storage medium, characterized in that: A computer program is stored, and the computer program can be executed by a processor of the device where the computer-readable storage medium is located to implement a password recovery method for an Internet of Things device as described in any one of claims 1 to 4.

Images