A method and system for secure data transmission based on the Internet of Things

Abstract

This invention provides a method and system for secure data transmission based on the Internet of Things (IoT). The method includes: receiving a data transmission request from a target IoT device and authenticating the target IoT device; authenticating a student's identity in response to successful authentication of the target IoT device; and sending IoT device detection data to a server in response to successful student identity authentication. The server decrypts the IoT device detection data using the private key in the target public-private key pair and stores the decrypted IoT device detection data in a target database. This invention ensures the authenticity of IoT device detection data by authenticating both the IoT device and the student's identity. It also reduces the risk of data leakage by using public-private key pairs for data encryption and decryption, thereby improving the security and privacy of data transmission and achieving secure management of IoT data transmission.

Description

Technical Field

[0001] This invention relates to the field of data transmission management technology, and in particular to a data security transmission method and system based on the Internet of Things. Background Technology

[0002] With the development of IoT technology, it has been widely applied to all aspects of life, including smart cities, smart campuses, and smart homes. Taking smart campuses as an example, in traditional physical education tests, teachers often manually measure and count students' scores. However, with the construction of smart campuses, more and more schools are applying IoT technology. Students can take physical education tests using various types of IoT devices, which can automatically collect and upload student test information, providing convenience for teachers.

[0003] However, the increasing number of IoT devices has also brought certain security risks. During the data transmission process of IoT devices, there are risks such as data tampering and data leakage. In order to ensure the authenticity and privacy of students' test information, it is necessary to strengthen the security management of IoT data transmission and promote the construction of smart campuses. Summary of the Invention

[0004] This application provides a data security transmission method and system based on the Internet of Things, aiming to solve at least one technical problem existing in the above-mentioned background art.

[0005] As one aspect of this application, a data security transmission method based on the Internet of Things is provided, comprising:

[0006] Receive a data transmission request from a target IoT device, the data transmission request including student identity information and target IoT device information, and authenticate the target IoT device based on the data transmission request;

[0007] In response to successful authentication of the target IoT device, the student's identity is authenticated based on the data transmission request;

[0008] In response to successful authentication of the student's identity, the system receives IoT device detection data encrypted with the public key of the target public-private key pair from the target IoT device, sends the IoT device detection data to the server, and the server decrypts the IoT device detection data based on the private key of the target public-private key pair and stores the decrypted IoT device detection data in the target database.

[0009] Before authenticating the target IoT device based on the data transmission request, the method further includes:

[0010] Receive a device allocation list sent by the server, the device allocation list recording the identity information of multiple students and the target device assigned to each student.

[0011] Furthermore, the authentication of the target IoT device based on the data transmission request includes:

[0012] The target IoT device is authenticated based on the target IoT device information in the data transmission request and the device allocation list. It is determined whether the target IoT device that issued the data transmission request exists among the multiple target devices recorded in the device allocation list. If it exists, the authentication of the target IoT device is successful; otherwise, the authentication of the target IoT device is unsuccessful.

[0013] Furthermore, the authentication of the student's identity based on the data transmission request includes:

[0014] Based on the target IoT device information in the data transmission request and the device allocation list, the target student identity corresponding to the target IoT device is queried. The student identity information in the data transmission request is authenticated according to the target student identity. If the student identity information in the data transmission request and the target student identity both belong to the same student, the student identity authentication is successful; otherwise, the student identity authentication fails.

[0015] Furthermore, the device allocation list also includes:

[0016] The equipment allocation list also records the usage time range of the target equipment assigned to each student;

[0017] Before sending the IoT device detection data to the server, the method further includes:

[0018] The system queries the device allocation list to determine the usage time range of the target device corresponding to the target student's identity in the data transmission request. It then determines whether the request initiation time of the target IoT device issuing the data transmission request falls within the usage time range. If so, the IoT device detection data is sent to the server; otherwise, the operation of sending the IoT device detection data to the server is not performed.

[0019] Furthermore, for the target IoT device, before sending the IoT device detection data, the following steps are also included:

[0020] Obtain the authentication information of the server, which includes the target IoT device information and the corresponding student's identity information recorded in the device allocation list, and generate it after encryption with the private key in the target public-private key pair;

[0021] The target IoT device decrypts the authentication information using the public key in the target public-private key pair, authenticates the server based on the authentication information, and in response to successful authentication of the server, the target IoT device encrypts the IoT device detection data using the public key in the target public-private key pair, and sends the encrypted IoT device detection data to the server.

[0022] As another aspect of this application, an Internet of Things (IoT)-based secure data transmission system is provided, the system being applied to any of the above-described IoT-based secure data transmission methods, including a target IoT device, a transmission management terminal, and a server;

[0023] The transmission management terminal includes:

[0024] The first communication module is used to communicate with the target IoT device and the server;

[0025] The first identity authentication module is used to authenticate the target IoT device and the student's identity;

[0026] The target IoT device includes:

[0027] The second communication module is used to communicate with the transmission management terminal;

[0028] The first data encryption and decryption module is used to encrypt the detection data of IoT devices and decrypt the authentication information of the server.

[0029] The second identity authentication module is used to authenticate the server based on the identity authentication information;

[0030] The server includes:

[0031] The third communication module is used to communicate with the transmission management terminal;

[0032] The second data encryption and decryption module is used to decrypt the detection data of the IoT device and encrypt the target IoT device information and the corresponding student's identity information.

[0033] The data storage module is used to store the detection data of the IoT devices and the device allocation list.

[0034] Furthermore, the first data encryption / decryption module and the second data encryption / decryption module also include:

[0035] The first data encryption / decryption module is configured with the public key of the target public-private key pair, and the second data encryption / decryption module is configured with the private key of the target public-private key pair.

[0036] The present invention has the following advantages:

[0037] 1. This invention authenticates IoT devices and student identities to ensure the authenticity of IoT device detection data. It uses public and private keys to encrypt and decrypt data, reducing the risk of data leakage and improving the security and privacy of data transmission, thus achieving secure management of IoT data transmission.

[0038] 2. This invention reduces the risk of data tampering and leakage by authenticating the initiation time of the data transmission request and the identity of the data receiver, thereby further improving the privacy and security of data transmission. Attached Figure Description

[0039] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on the structures shown in these drawings without creative effort.

[0040] Figure 1 This is a flowchart illustrating a data security transmission method based on the Internet of Things provided in an embodiment of the present invention.

[0041] Figure 2 This is a schematic diagram of the structure of a data security transmission system based on the Internet of Things provided in an embodiment of the present invention. Detailed Implementation

[0042] To make the objectives, technical solutions, and advantages of this application clearer, some embodiments of this application will be further described in detail below with reference to the accompanying drawings and examples. It should be understood that the specific embodiments described herein are merely illustrative of this application and are not intended to limit it. However, those skilled in the art will understand that many technical details have been provided in the various embodiments of this application to facilitate a better understanding of the application. However, the technical solutions claimed in this application can be implemented even without these technical details and various variations and modifications based on the following embodiments.

[0043] Example 1: See Figure 1 Embodiment 1 of the present invention provides a data security transmission method based on the Internet of Things (IoT), applied to a data security transmission system based on the IoT consisting of a target IoT device, a transmission management terminal, and a server. Described from the perspective of the transmission management terminal, the data transmission process specifically includes:

[0044] S1. Receive a data transmission request from the target IoT device and authenticate the target IoT device based on the data transmission request;

[0045] Specifically, this application provides a data security transmission method based on the Internet of Things (IoT), applicable to the management of data transmission from multiple IoT devices. The target IoT device is one of many IoT devices, such as one IoT device detecting a student's push-ups. The data transmission request includes at least student identity information and target IoT device information. The student identity information can be an identification code uniquely representing the student, such as a student ID number. The target IoT device information can be a unique identifier for the IoT device, such as a device number. After obtaining the user's IoT device detection data, the target IoT device sends a data transmission request before transmitting the data to ensure its authenticity. The transmission management terminal authenticates the target IoT device based on the data transmission request, verifying its authenticity.

[0046] It is worth noting that the transmission management terminal authenticates the target IoT device mainly based on the device allocation list issued by the server. The device allocation list records the identity information of multiple students and the target device assigned to each student. The transmission management terminal first obtains the device allocation list stored on the server and then authenticates the target IoT device.

[0047] S2. In response to successful authentication of the target IoT device, authenticate the student's identity based on the data transmission request;

[0048] Specifically, the authentication of the target IoT device is performed by indicating that the target IoT device is one of several devices provided by the school for student physical education tests. In this case, the student's identity is then authenticated based on the data transmission request to verify the identity of the user of the target IoT device.

[0049] S3. In response to successful authentication of the student's identity, receive the IoT device detection data sent by the target IoT device and send the IoT device detection data to the server.

[0050] Specifically, the IoT device detection data received by the transmission management terminal is data encrypted by the target IoT device using the public key in the target public-private key pair. To ensure the privacy of data transmission, the data is encrypted and decrypted using the target public-private key pair. The private key is stored on the server side, while the public key is distributed to the device side. Each IoT device is issued a public key that can be combined with the private key on the server side to form the target public-private key pair. After the transmission management terminal successfully authenticates the target IoT device and the student's identity, it will receive the encrypted data sent by the target IoT device, i.e., the IoT device detection data, and send the data to the server.

[0051] S4. The server decrypts the IoT device detection data and stores the decrypted IoT device detection data in the target database.

[0052] Specifically, after receiving the IoT device detection data, the server decrypts the encrypted IoT device detection data using the private key in the target public-private key pair, stores the decrypted IoT device detection data in the target database, and completes the recording of the student's physical test data.

[0053] This application provides a data security transmission method based on the Internet of Things (IoT). By authenticating IoT devices and student identities, the authenticity of students' physical education test data is ensured. By encrypting and decrypting students' physical education test data using a target public-private key pair, data security is guaranteed and the risk of student privacy leakage is reduced.

[0054] As a further implementation scheme, for step S1, the authentication of the target IoT device by the transmission management terminal based on the data transmission request specifically includes:

[0055] The target IoT device is authenticated based on the target IoT device information and device allocation list in the data transmission request, and it is determined whether the target IoT device that issued the data transmission request exists among the multiple target devices recorded in the device allocation list.

[0056] Specifically, the target IoT device that sends the data transmission request is matched with multiple target devices recorded in the device allocation list. If the match is successful, it means that the target IoT device belongs to one of the multiple IoT devices provided by the school for students to conduct physical education tests, and the authentication of the target IoT device is passed. If the match fails, it means that the target IoT device does not belong to any of the IoT devices provided by the school for students to conduct physical education tests, and the authentication of the target IoT device fails, thereby ensuring the authenticity of the data.

[0057] As a further implementation, authenticating student identity based on data transmission requests includes:

[0058] Based on the target IoT device information and device allocation list in the data transmission request, query the target student identity corresponding to the target IoT device, and authenticate the student identity information in the data transmission request based on the target student identity.

[0059] Specifically, after the target IoT device is authenticated, the target student identity corresponding to the target IoT device can be queried based on the target device matched in the device allocation list. After determining the target student identity corresponding to the target device, the student identity information recorded in the data transmission request is compared with the target student identity corresponding to the target device. If the student identity information in the data transmission request and the target student identity both belong to the same student, it means that the student identity authentication is successful; otherwise, it means that the student identity authentication is unsuccessful. Authentication of the student identity can further ensure the authenticity of the data.

[0060] As a further implementation plan, the equipment allocation list also includes:

[0061] The equipment allocation list also records the usage time range of the target equipment assigned to each student;

[0062] Specifically, during physical education tests, if there are a large number of students but a limited number of IoT devices available, multiple students may use the same IoT device. In such cases, to avoid data corruption and ensure data authenticity, the time each student spends using the IoT device will be limited.

[0063] Before sending the IoT device detection data to the server, the process also includes:

[0064] By querying the device allocation list, we can determine whether the time of the data transmission request initiated by the target IoT device is within the usage time range corresponding to the target student's identity.

[0065] Specifically, after students take physical tests using IoT devices, they need to upload the test data within an appropriate time to ensure data security and prevent data tampering. Before sending the IoT device detection data to the server, the transmission management terminal will also review the data transmission time. If the time when the target IoT device sends the data transmission request is within the usage time range, the IoT device detection data will be sent to the server; otherwise, the operation of sending the IoT device detection data to the server will not be performed to reduce the risk of students' physical test data being tampered with.

[0066] As a further implementation, for the target IoT device, before sending the IoT device detection data, the following is also included:

[0067] Obtain the server's authentication information, which includes the target IoT device information recorded in the device allocation list and the corresponding student's identity information, and generate it after being encrypted with the private key in the target public-private key pair;

[0068] Specifically, after authenticating the target IoT device and the student's identity through the transmission management terminal, the authenticity of the student's physical test data can be guaranteed. In order to reduce the risk of leakage of the student's physical test data, the target IoT device also authenticates the server based on the authentication information generated by the server. The server encrypts the authentication information using the private key in the target public-private key pair. It is worth noting that the authentication information generated by the server is first sent to the transmission management terminal, and the target IoT device obtains the server's authentication information from the management terminal.

[0069] The target IoT device decrypts the authentication information using the public key in the target public-private key pair, and authenticates the server based on the authentication information. In response to successful authentication of the server, the target IoT device encrypts the IoT device detection data using the public key in the target public-private key pair, and sends the encrypted IoT device detection data to the server.

[0070] Specifically, after obtaining the server's authentication information, the target IoT device decrypts the authentication information using the public key in the target public-private key pair and uses it in conjunction with the device allocation list to authenticate the server. If the target IoT device information and the corresponding student's identity information recorded in the authentication information are also associated in the device allocation list, it means that the authentication of the server is successful. In this case, the target IoT device then sends the encrypted IoT device detection data to the transmission management terminal, which forwards the encrypted IoT device detection data to the server, reducing the risk of privacy leakage of students' physical test data during transmission.

[0071] Example 2: See Figure 2 Based on Embodiment 1, Embodiment 2 of the present invention further provides a data security transmission system based on the Internet of Things, including a target Internet of Things device, a transmission management terminal, and a server, wherein the transmission management terminal includes:

[0072] The first communication module is used to communicate with the target IoT device and server;

[0073] The first identity authentication module is used to authenticate the target IoT device and the student's identity;

[0074] Target IoT devices include:

[0075] The second communication module is used to communicate with the transmission management terminal;

[0076] The first data encryption and decryption module is configured with the public key of the target public-private key pair, which is used to encrypt the detection data of IoT devices and decrypt the authentication information of the server.

[0077] The second identity authentication module is used to authenticate the server's identity based on the identity authentication information;

[0078] The servers include:

[0079] The third communication module is used to communicate with the transmission management terminal;

[0080] The second data encryption and decryption module is configured with the private key in the target public-private key pair, which is used to decrypt the detection data of IoT devices and encrypt the target IoT device information and the corresponding student's identity information.

[0081] The data storage module is configured with a target database for storing IoT device detection data and device allocation lists.

[0082] It should be understood that those skilled in the art can make improvements or modifications based on the above description, and all such improvements and modifications should fall within the protection scope of the appended claims. Parts not described in detail in this specification are prior art known to those skilled in the art.

Claims

1. A data security transmission method based on the Internet of Things, characterized in that, include: Receive a data transmission request from a target IoT device, the data transmission request including student identity information and target IoT device information, and authenticate the target IoT device based on the data transmission request; In response to successful authentication of the target IoT device, the student's identity is authenticated based on the data transmission request; In response to successful authentication of the student's identity, the system receives IoT device detection data encrypted with the public key of the target public-private key pair from the target IoT device, sends the IoT device detection data to the server, and the server decrypts the IoT device detection data based on the private key of the target public-private key pair and stores the decrypted IoT device detection data in the target database. Before authenticating the target IoT device based on the data transmission request, the method further includes: Receive a device allocation list sent by the server, the device allocation list recording the identity information of multiple students and the target device assigned to each student; The authentication of the target IoT device based on the data transmission request includes: The target IoT device is authenticated based on the target IoT device information in the data transmission request and the device allocation list. It is determined whether the target IoT device that issued the data transmission request exists in the multiple target devices recorded in the device allocation list. If it exists, the authentication of the target IoT device is successful; otherwise, the authentication of the target IoT device is unsuccessful. The authentication of student identity based on the data transmission request includes: Based on the target IoT device information in the data transmission request and the device allocation list, the target student identity corresponding to the target IoT device is queried. The student identity information in the data transmission request is authenticated according to the target student identity. If the student identity information in the data transmission request and the target student identity belong to the same student, the student identity authentication is successful; otherwise, the student identity authentication is unsuccessful. The device allocation list also includes: The equipment allocation list also records the usage time range of the target equipment assigned to each student; Before sending the IoT device detection data to the server, the method further includes: The system queries the device allocation list to determine the usage time range of the target device corresponding to the target student's identity in the data transmission request. It then determines whether the request initiation time of the target IoT device sending the data transmission request falls within the usage time range. If so, the IoT device detection data is sent to the server; otherwise, the operation of sending the IoT device detection data to the server is not performed. For the target IoT device, before sending the IoT device detection data, the method further includes: Obtain the authentication information of the server, which includes the target IoT device information and the corresponding student's identity information recorded in the device allocation list, and generate it after encryption with the private key in the target public-private key pair; The target IoT device decrypts the authentication information using the public key in the target public-private key pair, authenticates the server based on the authentication information, and in response to successful authentication of the server, the target IoT device encrypts the IoT device detection data using the public key in the target public-private key pair, and sends the encrypted IoT device detection data to the server.

2. A data security transmission system based on the Internet of Things, characterized in that, The system is applied to the data security transmission method based on the Internet of Things as described in claim 1 above, and includes a target Internet of Things device, a transmission management terminal, and a server; The transmission management terminal includes: The first communication module is used to communicate with the target IoT device and the server; The first identity authentication module is used to authenticate the target IoT device and the student's identity; The target IoT device includes: The second communication module is used to communicate with the transmission management terminal; The first data encryption and decryption module is used to encrypt the detection data of IoT devices and decrypt the authentication information of the server. The second identity authentication module is used to authenticate the server based on the identity authentication information; The server includes: The third communication module is used to communicate with the transmission management terminal; The second data encryption and decryption module is used to decrypt the detection data of the IoT device and encrypt the target IoT device information and the corresponding student's identity information. The data storage module is used to store the detection data of the IoT devices and the device allocation list.

3. The system as described in claim 2, characterized in that, The first data encryption / decryption module and the second data encryption / decryption module also include: The first data encryption / decryption module is configured with the public key of the target public-private key pair, and the second data encryption / decryption module is configured with the private key of the target public-private key pair.

Images