Data security transmission method and system based on Internet of Things

Abstract

The invention provides a data security transmission method and system based on the Internet of Things. The data security transmission method based on the Internet of Things comprises the following steps: receiving a data transmission request from target Internet of Things equipment, and authenticating the target Internet of Things equipment; in response to the passing of the authentication of the target Internet of Things equipment, authenticating the identity of the student; and in response to passing of the student identity authentication, sending the Internet of Things equipment detection data to a server, decrypting the Internet of Things equipment detection data by the server based on a private key in the target public and private key pair, and storing the decrypted Internet of Things equipment detection data in a target database. According to the invention, the authenticity of the detection data of the Internet of Things equipment is ensured by authenticating the Internet of Things equipment and the student identity, the data is encrypted and decrypted through the public and private keys, the risk of data leakage of the detection data is reduced, the security and privacy of data transmission are improved, and the security management of the data transmission of the Internet of Things is realized.

Description

Technical Field

[0001] The present invention relates to the technical field of data transmission management, and in particular to a data security transmission method and system based on the Internet of Things. Background Art

[0002] With the development of IoT technology, IoT technology has been widely used in all aspects of life, including smart cities, smart campuses, smart homes and other fields. Taking smart campuses as an example, in traditional physical tests, teachers mostly record students' physical test scores by manual measurement and counting. With the construction of smart campuses, more and more efficient IoT technologies are applied to schools. Students can take physical tests through different types of IoT devices. IoT devices can automatically count students' test information and upload the information, which provides convenience for teachers' teaching.

[0003] However, the increase in the number of IoT devices has also brought certain security risks. In the process of IoT device detection data transmission, there is a risk of data tampering and data leakage. In order to ensure the authenticity and privacy of students' test information, it is necessary to strengthen the security management of IoT data transmission and promote the construction of smart campuses. Summary of the invention

[0004] The present application provides a data security transmission method and system based on the Internet of Things, aiming to solve at least one technical problem existing in the above-mentioned background technology.

[0005] As one aspect of the present application, a data security transmission method based on the Internet of Things is provided, comprising: Receiving a data transmission request from a target IoT device, the data transmission request including student identity information and target IoT device information, and authenticating the target IoT device based on the data transmission request; In response to the target IoT device being authenticated successfully, authenticating the student identity based on the data transmission request; In response to the student identity being authenticated, receiving the IoT device detection data encrypted by the public key in the target public-private key pair sent by the target IoT device, sending the IoT device detection data to the server, the server decrypting the IoT device detection data based on the private key in the target public-private key pair, and storing the decrypted IoT device detection data in the target database; Before authenticating the target IoT device based on the data transmission request, the method further includes: A device allocation list sent by the server is received, wherein the device allocation list records identity information of multiple students and a target device allocated to each student.

[0006] Further, authenticating the target IoT device based on the data transmission request includes: The target IoT device is authenticated based on the target IoT device information in the data transmission request and the device allocation list, and it is determined whether the target IoT device that issues the data transmission request exists in the multiple target devices recorded in the device allocation list. If so, it indicates that the authentication of the target IoT device is successful; otherwise, it indicates that the authentication of the target IoT device is failed.

[0007] Further, authenticating the student identity based on the data transmission request includes: Based on the target IoT device information in the data transmission request and the device allocation list, the target student identity corresponding to the target IoT device is queried, and the student identity information in the data transmission request is authenticated according to the target student identity. If the student identity information in the data transmission request and the target student identity belong to the same student, it indicates that the authentication of the student identity is successful. Otherwise, it indicates that the authentication of the student identity is unsuccessful.

[0008] Furthermore, the device allocation list further includes: The equipment allocation list also records the usage time range of the target equipment allocated to each student; Before sending the IoT device detection data to the server, the method further includes: The usage time range of the target device corresponding to the target student identity in the data transmission request is queried through the device allocation list to determine whether the request initiation time of the data transmission request issued by the target Internet of Things device is within the usage time range. If so, the Internet of Things device detection data is sent to the server, otherwise the operation of sending the Internet of Things device detection data to the server is not performed.

[0009] Furthermore, for the target IoT device, before sending the IoT device detection data, it also includes: Obtaining identity authentication information of the server, the identity authentication information including target IoT device information and corresponding student identity information recorded in the device allocation list, and generated by encrypting with a private key in the target public-private key pair; The target IoT device decrypts the identity authentication information by using the public key in the target public-private key pair, authenticates the server based on the identity authentication information, and in response to successful authentication of the server, the target IoT device encrypts the IoT device detection data by using the public key in the target public-private key pair, and sends the encrypted IoT device detection data to the server.

[0010] As another aspect of the present application, a data security transmission system based on the Internet of Things is provided, the system being applied to any of the above-mentioned data security transmission methods based on the Internet of Things, including a target Internet of Things device, a transmission management terminal and a server; The transmission management terminal comprises: A first communication module, used to communicate with the target IoT device and the server; A first identity authentication module, used to authenticate the target IoT device and the student identity; The target IoT devices include: A second communication module, used to communicate with the transmission management terminal; A first data encryption and decryption module, used to encrypt the IoT device detection data and decrypt the identity authentication information of the server; A second identity authentication module, used to authenticate the server based on the identity authentication information; The server comprises: A third communication module, used to communicate with the transmission management terminal; A second data encryption and decryption module is used to decrypt the IoT device detection data and encrypt the target IoT device information and the identity information of the corresponding student; The data storage module is used to store the IoT device detection data and the device allocation list.

[0011] Furthermore, the first data encryption and decryption module and the second data encryption and decryption module further include: The first data encryption / decryption module is configured with a public key in a target public / private key pair, and the second data encryption / decryption module is configured with a private key in the target public / private key pair.

[0012] The present invention has the following advantages: 1. The present invention authenticates the IoT device and the identity of the student to ensure the authenticity of the detection data of the IoT device, encrypts and decrypts the data through a public-private key pair, reduces the risk of data leakage of the detection data, improves the security and privacy of data transmission, and realizes the secure management of IoT data transmission.

[0013] 2. The present invention reduces the risk of data tampering and data leakage by authenticating the initiation time of the data transmission request and the identity of the data receiving end, thereby further improving the privacy and security of data transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the structures shown in these drawings without paying creative work.

[0015] Figure 1 The present invention is a flowchart of a data security transmission method based on the Internet of Things provided in an embodiment of the present invention.

[0016] Figure 2 The present invention provides a structural diagram of a data security transmission system based on the Internet of Things in an embodiment of the present invention. DETAILED DESCRIPTION

[0017] In order to make the purpose, technical scheme and advantages of the present application clearer, some embodiments of the present application are further described in detail below in conjunction with the accompanying drawings and Examples. It should be understood that the specific embodiments described herein are only used to explain the present application and are not intended to limit the present application. However, it will be appreciated by those skilled in the art that in the various embodiments of the present application, many technical details are proposed in order to enable the reader to better understand the present application. However, even without these technical details and various changes and modifications based on the following embodiments, the technical scheme claimed in the present application can also be implemented.

[0018] Example 1: See Figure 1 Embodiment 1 of the present invention provides a data security transmission method based on the Internet of Things, which is applied to a data security transmission system based on the Internet of Things composed of a target Internet of Things device, a transmission management terminal and a server. From the perspective of the transmission management terminal, the data transmission process specifically includes: S1. Receive a data transmission request from a target IoT device, and authenticate the target IoT device based on the data transmission request; Specifically, the present application provides a data security transmission method based on the Internet of Things, which is suitable for managing data transmission of multiple Internet of Things devices. The target Internet of Things device is specifically one of multiple Internet of Things devices, such as one of the Internet of Things devices that detects student push-ups. The data transmission request includes at least student identity information and target Internet of Things device information, wherein the student identity information can be an identity code used to uniquely indicate the student's identity, such as a student number, and the target Internet of Things device information can be a code used to uniquely indicate the Internet of Things, such as a device number. After the target Internet of Things device obtains the user's Internet of Things device detection data, in order to ensure the authenticity of the data, before transmitting the data, it first issues a data transmission request. The transmission management terminal authenticates the target Internet of Things device according to the data transmission request and verifies the authenticity of the target Internet of Things device.

[0019] It is worth mentioning that the transmission management terminal authenticates the target IoT device mainly based on the device allocation list issued by the server. The device allocation list records the identity information of multiple students and the target device assigned to each student. The transmission management terminal first obtains the device allocation list stored on the server, and then authenticates the target IoT device.

[0020] S2, in response to the authentication of the target IoT device being successful, authenticating the student identity based on the data transmission request; Specifically, the authentication of the target IoT device indicates that the target IoT device is one of multiple devices provided by the school for student physical testing. In this case, the student identity is authenticated based on the data transmission request to verify the identity of the user of the target IoT device.

[0021] S3, in response to the student identity being authenticated, receiving the IoT device detection data sent by the target IoT device, and sending the IoT device detection data to the server; Specifically, the IoT device detection data received by the transmission management terminal is the data encrypted by the public key in the target public-private key pair of the target IoT device. In order to ensure the privacy of data transmission, the data is encrypted and decrypted by the target public-private key pair, where the private key is stored on the server side and the public key is distributed on the device side. Each IoT device is issued with a public key that can be combined with the private key on the server side to form a target public-private key pair. After the transmission management terminal passes the authentication of the target IoT device and the student's identity, the transmission management terminal will receive the encrypted data sent by the target IoT device, i.e., the IoT device detection data, and send the data to the server.

[0022] S4. The server decrypts the IoT device detection data and stores the decrypted IoT device detection data in the target database; Specifically, after receiving the IoT device detection data, the server decrypts the encrypted IoT device detection data using the private key in the target public-private key pair, stores the decrypted IoT device detection data in the target database, and completes the recording of the students' physical test data.

[0023] The present application provides a data security transmission method based on the Internet of Things. By authenticating the Internet of Things devices and student identities, the authenticity of students' physical test data is ensured, and the students' physical test data is encrypting and decrypting through target public and private key pairs, thereby ensuring data security and reducing the risk of student privacy leakage.

[0024] As a further implementation scheme, for step S1, the transmission management terminal authenticates the target IoT device based on the data transmission request specifically including: Authenticate the target IoT device based on the target IoT device information and the device allocation list in the data transmission request, and determine whether the target IoT device that issues the data transmission request exists in the multiple target devices recorded in the device allocation list; Specifically, the target IoT device that issues a data transmission request is matched with multiple target devices recorded in the device allocation list. If the match is successful, it means that the target IoT device belongs to one of the multiple IoT devices provided by the school for students to take physical tests, and the authentication of the target IoT device is passed. If the match fails, it means that the target IoT device does not belong to any of the IoT devices provided by the school for students to take physical tests, and the authentication of the target IoT device fails, thereby ensuring the authenticity of the data.

[0025] As a further embodiment, authenticating the student identity based on the data transfer request includes: Based on the target IoT device information and device allocation list in the data transmission request, query the target student identity corresponding to the target IoT device, and authenticate the student identity information in the data transmission request according to the target student identity; Specifically, after the authentication of the target IoT device is passed, the target student identity corresponding to the target device can be queried according to the target device corresponding to the target IoT device matched in the device allocation list. After determining the target student identity corresponding to the target device, the student identity information recorded in the data transmission request and the target student identity corresponding to the target device are compared. If the student identity information in the data transmission request and the target student identity belong to the same student, it means that the authentication of the student identity is passed. Otherwise, it means that the authentication of the student identity is failed. By authenticating the student identity, the authenticity of the data can be further guaranteed.

[0026] As a further implementation, the device allocation list further includes: The equipment allocation list also records the time range for the use of the target equipment assigned to each student; Specifically, when students are taking physical tests, if there are a large number of students and a small number of IoT devices for testing, multiple students may use the same IoT device. In this case, in order to avoid data confusion and ensure the authenticity of the data, the time each student uses the IoT device will be limited.

[0027] Before sending the IoT device detection data to the server, it also includes: Query the usage time range of the target device corresponding to the target student identity in the data transmission request through the device allocation list, and determine whether the request initiation time of the data transmission request issued by the target IoT device is within the usage time range; Specifically, after students take physical tests through IoT devices, in order to ensure data security, they need to upload test data within an appropriate time to avoid data tampering. Before sending the IoT device detection data to the server, the transmission management terminal will also review the data transmission time. If the request initiation time of the target IoT device's data transmission request falls within the usage time range, the IoT device detection data will be sent to the server. Otherwise, the operation of sending the IoT device detection data to the server will not be performed to reduce the risk of students' physical test data being tampered with.

[0028] As a further implementation scheme, for the target IoT device, before sending the IoT device detection data, it also includes: Obtain the authentication information of the server, which includes the target IoT device information and the corresponding student's identity information recorded in the device allocation list, and is generated by encrypting the private key in the target public-private key pair; Specifically, after authenticating the target IoT device and the student's identity through the transmission management terminal, the authenticity of the student's physical test data can be guaranteed. In order to reduce the risk of leakage of the student's physical test data, the target IoT device also authenticates the server based on the identity authentication information generated by the server. The server encrypts the identity authentication information through the private key in the target public-private key pair. It is worth noting that the identity authentication information generated by the server is first sent to the transmission management terminal, and the target IoT device obtains the server's identity authentication information from the management terminal.

[0029] The target IoT device decrypts the identity authentication information using the public key in the target public-private key pair, authenticates the server based on the identity authentication information, and in response to successful authentication of the server, the target IoT device encrypts the IoT device detection data using the public key in the target public-private key pair, and sends the encrypted IoT device detection data to the server.

[0030] Specifically, after obtaining the authentication information of the server, the target IoT device decrypts the authentication information using the public key in the target public-private key pair, and authenticates the server in combination with the device allocation list. If the target IoT device information recorded in the authentication information and the corresponding student's identity information also have an associated relationship in the device allocation list, it means that the authentication of the server is successful. In this case, the target IoT device will then send the encrypted IoT device detection data to the transmission management terminal, and the transmission management terminal will forward the encrypted IoT device detection data to the server, reducing the risk of privacy leakage of students' physical test data during transmission.

[0031] Example 2: See Figure 2 Based on the first embodiment, the second embodiment of the present invention further provides a data security transmission system based on the Internet of Things, including a target Internet of Things device, a transmission management terminal and a server, wherein the transmission management terminal includes: A first communication module, used to communicate with a target IoT device and a server; The first identity authentication module is used to authenticate the target IoT device and the student’s identity; Targeted IoT devices include: A second communication module, used for communicating with the transmission management terminal; A first data encryption and decryption module, configured with a public key in a target public-private key pair, for encrypting IoT device detection data and decrypting server identity authentication information; A second identity authentication module, used to authenticate the server based on the identity authentication information; The server includes: A third communication module, used to communicate with the transmission management terminal; The second data encryption and decryption module is configured with a private key in the target public-private key pair, and is used to decrypt the IoT device detection data and encrypt the target IoT device information and the identity information of the corresponding student; The data storage module is configured with a target database for storing IoT device detection data and device allocation lists.

[0032] It should be understood that those skilled in the art can make improvements or changes based on the above description, and all such improvements and changes should fall within the scope of protection of the appended claims of the present invention. Parts not described in detail in this specification belong to the prior art known to those skilled in the art.

Claims

1. A data security transmission method based on the Internet of Things, characterized in that: include: Receiving a data transmission request from a target IoT device, the data transmission request including student identity information and target IoT device information, and authenticating the target IoT device based on the data transmission request; In response to the target IoT device being authenticated successfully, authenticating the student identity based on the data transmission request; In response to the student identity being authenticated, receiving the IoT device detection data encrypted by the public key in the target public-private key pair sent by the target IoT device, sending the IoT device detection data to the server, the server decrypting the IoT device detection data based on the private key in the target public-private key pair, and storing the decrypted IoT device detection data in the target database; Before authenticating the target IoT device based on the data transmission request, the method further includes: A device allocation list sent by the server is received, wherein the device allocation list records identity information of multiple students and a target device allocated to each student.

2. The method according to claim 1, characterized in that The authenticating the target IoT device based on the data transmission request includes: The target IoT device is authenticated based on the target IoT device information in the data transmission request and the device allocation list, and it is determined whether the target IoT device that issues the data transmission request exists in the multiple target devices recorded in the device allocation list. If so, it indicates that the authentication of the target IoT device is successful; otherwise, it indicates that the authentication of the target IoT device is failed.

3. The method according to claim 1, characterized in that The authenticating the student identity based on the data transmission request includes: Based on the target IoT device information in the data transmission request and the device allocation list, the target student identity corresponding to the target IoT device is queried, and the student identity information in the data transmission request is authenticated according to the target student identity. If the student identity information in the data transmission request and the target student identity belong to the same student, it indicates that the authentication of the student identity is successful. Otherwise, it indicates that the authentication of the student identity is unsuccessful.

4. The method according to claim 1, characterized in that The device allocation list also includes: The equipment allocation list also records the usage time range of the target equipment allocated to each student; Before sending the IoT device detection data to the server, the method further includes: The usage time range of the target device corresponding to the target student identity in the data transmission request is queried through the device allocation list to determine whether the request initiation time of the data transmission request issued by the target Internet of Things device is within the usage time range. If so, the Internet of Things device detection data is sent to the server, otherwise the operation of sending the Internet of Things device detection data to the server is not performed.

5. The method according to claim 1, characterized in that For the target IoT device, before sending the IoT device detection data, it also includes: Obtaining identity authentication information of the server, the identity authentication information including target IoT device information and corresponding student identity information recorded in the device allocation list, and generated after being encrypted by a private key in the target public-private key pair; The target IoT device decrypts the identity authentication information by using the public key in the target public-private key pair, authenticates the server based on the identity authentication information, and in response to successful authentication of the server, the target IoT device encrypts the IoT device detection data by using the public key in the target public-private key pair, and sends the encrypted IoT device detection data to the server.

6. A data security transmission system based on the Internet of Things, characterized in that: The system is applied to a data security transmission method based on the Internet of Things as described in any one of claims 1 to 5 above, including a target Internet of Things device, a transmission management terminal and a server; The transmission management terminal comprises: A first communication module, used to communicate with the target IoT device and the server; A first identity authentication module, used to authenticate the target IoT device and the student identity; The target IoT devices include: A second communication module, used to communicate with the transmission management terminal; A first data encryption and decryption module, used to encrypt the IoT device detection data and decrypt the identity authentication information of the server; A second identity authentication module, used to authenticate the server based on the identity authentication information; The server comprises: A third communication module, used to communicate with the transmission management terminal; A second data encryption and decryption module is used to decrypt the IoT device detection data and encrypt the target IoT device information and the identity information of the corresponding student; The data storage module is used to store the IoT device detection data and the device allocation list.

7. The system according to claim 6, characterized in that The first data encryption and decryption module and the second data encryption and decryption module further include: The first data encryption / decryption module is configured with a public key in a target public / private key pair, and the second data encryption / decryption module is configured with a private key in the target public / private key pair.

Images