A method and system for secure communication of internet of things

Abstract

The application discloses an Internet of Things secure communication method, comprising the following steps: identity authentication of a communication node added to an Internet of Things system based on a block chain; identity authentication before access between communication nodes in the Internet of Things system; RIS assisted communication of trusted communication nodes, and optimization of connection relationship and performance of RIS with the amount of secret communication data between communication nodes as the target. The application also contains a system and device for implementing the method. The application solves the problem of threats from Internet of Things eavesdropping nodes when communication between Internet of Things nodes.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of computer and communication technology, in particular to a 6G Internet of Things security communication method and system with blockchain identity authentication function and RIS assistance. BACKGROUND

[0002] As a highly intelligent physical device network, the Internet of Things relies on Internet technology to achieve extensive collection of information data, and can provide information perception, information transmission, information processing and other services. Due to its many advantages, the Internet of Things is widely used in smart grids, industrial manufacturing, transportation logistics and other scenarios, greatly improving the transmission and processing capacity of massive data. With the rapid development of 6G communication technology, the potential of the Internet of Things has been further improved. 6G provides ultra-high speed, low latency and large-scale connectivity, which will greatly promote the application of the Internet of Things in more complex and extensive scenarios. However, due to the involvement of many sensing devices in the Internet of Things, the amount of data in the communication network has increased dramatically, bringing serious data security and availability challenges. If the security of these data cannot be guaranteed, a large amount of transmission information in the Internet of Things will face the risk of leakage, destruction and tampering. In addition, the large number of nodes in the Internet of Things system and their wide distribution make privacy security risks more prominent. The Internet of Things not only needs to deal with threats from the outside, such as flooding attacks, but also needs to solve internal security problems such as fake user access and false nodes. Therefore, in order to protect the long-term interests of users, it is necessary to combine 6G technology and innovative security mechanisms to take practical and effective technical means to ensure the secure transmission and protection of data.

[0003] In existing inventions and research, many researchers have studied the security of Internet of Things communication from different angles and using different methods, and have made a series of progress and achievements, but there are still some problems. 1. There is a lack of identification of false nodes in the Internet of Things, which cannot effectively deal with internal security problems. 2. Data is still at risk of leakage during transmission, and physical layer security technology needs to be used to enhance system security.

[0004] However, most algorithms for 6G Internet of Things communication security stay in the physical layer security field, only considering threats from noise or eavesdroppers, and do not specifically study the Internet of Things scenario, nor do they consider threats from Internet of Things nodes. This aspect of research still needs to be supplemented. SUMMARY

[0005] The present application proposes an Internet of Things security communication method and device, which solves the problem of threats from Internet of Things eavesdropping nodes when communicating between Internet of Things nodes.

[0006] In one aspect, the present application embodiment proposes an Internet of Things security communication method, comprising the following steps:

[0007] Identity authentication is performed on a communication node added to an Internet of Things system based on a blockchain;

[0008] Identity authentication is performed before access between communication nodes in the Internet of Things system;

[0009] RIS-assisted communication is performed on a trusted communication node, and the connection relationship and performance of the RIS are optimized to target the amount of secret communication data between the communication nodes.

[0010] In an embodiment of the present application, identity authentication is performed on a communication node added to an Internet of Things system based on a blockchain, including the following steps:

[0011] The communication node sends a registration request, receives a public-private key pair and a digital certificate from a certificate authority, obtains a endorsement message from a verification node, determines a blockchain structure according to the time sequence of the endorsement message, and stores it in the blockchain; and queries the blockchain to determine a malicious communication node.

[0012] In an embodiment of the present application, identity authentication is performed before access between communication nodes, including the following steps:

[0013] The communication node initiates an access request, and returns the received verification information encrypted by a private key; and

[0014] The communication node receives an access request, sends verification information, receives encrypted verification information, obtains a public key from the blockchain, decrypts the ciphertext, and determines that the verification information is consistent.

[0015] In an embodiment of the present application, the following steps are further included:

[0016] A malicious communication node is determined, an RIS is set in the Internet of Things system, and the total rate is the sum of the secret rate and the eavesdropper rate in the communication link of each node pair.

[0017] The RIS node association and the RIS phase are optimized to maximize the overall secret data rate of multiple node pairs.

[0018] In an embodiment of the present application, the RIS is optimized according to the set conditions, including: each RIS serves 1 node pair, the secret rate between each node pair is not less than a set threshold, and the amplitude of the RIS reflection coefficient and the adjustment range of the RIS phase are set.

[0019] In an embodiment of the present application, the connection relationship and performance of the RIS are optimized, including the following steps: the association relationship of the RIS nodes is optimized by discrete action prediction through a PPO algorithm, and the phase of the RIS nodes is optimized by continuous action prediction.

[0020] In an embodiment of the present application, the following steps are included:

[0021] According to the antenna beam characteristics between the node pairs, and the RIS only serves the nodes whose antenna main lobe is aligned with the RIS, the noise of any node pair interfered by other links is determined, and the total transmission rate between the node pairs is determined through noise analysis;

[0022] Through noise analysis, when a malicious communication node eavesdrops on the node pair, the transmission rate of the eavesdropper is determined.

[0023] According to the difference between the total transmission rate and the transmission rate of the eavesdropper, the amount of secure communication data within a set time is determined.

[0024] In a second aspect, the present application also proposes a secure communication system for Internet of Things, which is used to implement the method of any one of the embodiments of the first aspect of the present application, and comprises:

[0025] A blockchain authentication module is configured to perform identity authentication on the communication nodes added by the Internet of Things system based on a blockchain.

[0026] A communication authentication module is configured to perform identity authentication before access between the communication nodes in the Internet of Things system.

[0027] An optimization module is configured to perform RIS-assisted communication on the trusted communication nodes, and optimize the connection relationship and performance of the RIS with the amount of secure communication data between the communication nodes as the target.

[0028] In a third aspect, the embodiments of the present application also propose a computer-readable storage medium having a computer program stored thereon, and the program is executed by a processor to implement the method of any one of the embodiments of the first aspect of the present application.

[0029] In a fourth aspect, the embodiments of the present application also propose an electronic device comprising a memory, a processor, and a computer program stored on the memory and executable by the processor, and the processor implements the method as described in any one of the embodiments of the first aspect of the present application when executing the computer program.

[0030] The above-mentioned at least one technical solution adopted by the embodiments of the present application can achieve the following beneficial effects:

[0031] The present application establishes a decentralized identity authentication mechanism to verify the credibility of Internet of Things nodes by combining blockchain technology, effectively prevents unauthorized access, and enhances the wireless channel by RIS to help Internet of Things communication, realizes the secure transmission between Internet of Things nodes, and significantly improves the security and reliability of 6G Internet of Things communication.

[0032] Specifically, the application studies the problem of secure communication in the 6G Internet of Things scene, proposes a secure communication method based on blockchain identity and RIS assistance by combining the identity authentication method based on blockchain and the communication method assisted by reconfigurable intelligent surface (RIS) based on deep reinforcement learning (DRL), and the advantage of the application is that the identity authentication method based on blockchain is used to verify the credibility of Internet of Things nodes, effectively prevent unauthorized access, and a resource allocation strategy and RIS configuration are designed to optimize the overall secure data throughput, thereby improving the security and reliability of 6G Internet of Things communication. BRIEF DESCRIPTION OF DRAWINGS

[0033] The drawings described herein are used to provide further understanding of the present application, and form a part of the present application, the illustrative embodiments of the present application and the description thereof are used to explain the present application, and do not constitute improper limitation on the present application. In the drawings:

[0034] Figure 1 It is a 6G Internet of Things communication environment schematic diagram of the application;

[0035] Figure 2 It is a blockchain identity authentication design flowchart of the application;

[0036] Figure 3 It is an Internet of Things node on-chain authentication flowchart of the application;

[0037] Figure 4 It is a schematic diagram of the convergence speed of the first PPO network in the Double-PPO algorithm in the application;

[0038] Figure 5 It is a schematic diagram of the convergence speed of the second PPO network in the Double-PPO algorithm in the application;

[0039] Figure 6 It is a comparison diagram of secure data transmission data volume of different schemes in one service period provided by the application. DETAILED DESCRIPTION

[0040] In order to make the purpose, technical scheme and advantages of the present application clearer, the technical scheme of the present application will be described clearly and completely in combination with the specific embodiments of the present application and the corresponding drawings. Obviously, the described embodiments are only part of the embodiments of the present application, not all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative labor fall within the scope of protection of the present application.

[0041] The present application establishes a blockchain-based Internet of Things distributed identity authentication system, namely the first and second steps below.

[0042] The present application designs a RIS-assisted wireless communication strategy for trusted 6G Internet of Things nodes and uses DRL and PPO modules to solve the optimization problem, namely the third and fourth steps below.

[0043] Most algorithms for researching Internet of Things security only consider the physical layer, ignoring threats from within the node. At the same time, the security problem of wireless transmission at a long distance and in the presence of eavesdroppers has not been effectively solved. Therefore, there is currently no alternative that can completely achieve the purpose of the present application.

[0044] The technical solutions provided by the embodiments of the present application are described in detail below with reference to the accompanying drawings.

[0045] The overall architecture of the method of the present application is as follows. Consider a 6G Internet of Things communication scenario, such as Figure 1 As shown in the figure, there are false nodes or hacker impersonated users in the Internet of Things nodes, and there are eavesdroppers in the physical layer transmission process. First, verify the security of the law node through the blockchain-based identity authentication system, and only the legal nodes that pass the verification can access the system for communication. Second, through resource allocation strategy and RIS configuration, optimize the overall secret data throughput while minimizing the secret outage probability. Finally, solve the optimization problem through a DRL and proximal policy optimization (PPO) module. Overall, the blockchain-based identity authentication and RIS-assisted 6G Internet of Things secure communication method includes the following steps:

[0046] The first step (step 11) is to establish a blockchain-based distributed identity authentication system to verify the trustworthiness of Internet of Things nodes. In this step, the blockchain-based identity authentication is added to the communication nodes of the Internet of Things system.

[0047] The second step (step 12) is to perform identity authentication before accessing between Internet of Things nodes to prevent unauthorized access. In the present application, the Internet of Things node refers to the communication node in the Internet of Things system.

[0048] The third step (step 13) is to design a RIS-assisted wireless communication strategy for trusted 6G Internet of Things nodes for RIS-assisted communication of trusted communication nodes.

[0049] The fourth step (step 14) is to optimize the connection relationship and performance of RIS with the secret communication data volume between communication nodes as the target. In the optimal embodiment of the present application, DRL is used to solve the optimization problem.

[0050] Further, the process of the first step (step 11) is as follows:

[0051] In the blockchain-based Internet of Things identity authentication system proposed in the application, the legal digital identity certificates of all nodes accessing the system are stored on the blockchain, and the permissions of these nodes are managed by smart contracts. When a new Internet of Things node requests to join the network, it must go through a series of strict authentication processes.

[0052] As shown in Figure 2 When adding a new communication node to the 6G Internet of Things system, the specific process of uploading the certificate is as follows:

[0053] Step 21, the communication node sends a registration request and receives a public-private key pair and a digital certificate from the certificate authority center.

[0054] The new node of the Internet of Things initiates a registration request to the certificate authority center (CA) and receives the corresponding public-private key pair. The CA generates a digital certificate for the public key of the new node, which contains the identity information of the new node, the public key, the private key signature, and the validity period.

[0055] Step 22, the communication node obtains a backing message from the verification node.

[0056] The verification node checks the legality and validity of the digital certificate. After the audit is passed, the successful backing message is returned to the new node.

[0057] Step 23, determine the blockchain structure according to the time sequence of the backing message and store it in the blockchain.

[0058] The new node packs the digital certificate and a certain number of backing messages and sends them to the ordering node. These nodes will form a blockchain structure according to the time sequence of the backing message and broadcast it to other nodes that maintain the blockchain.

[0059] When the submitting node receives the message from the ordering node, it will verify the accuracy of the structure, put it into the block, and calculate the hash value of the next block.

[0060] Step 24, query the blockchain to determine the malicious communication node.

[0061] In addition, when a malicious node that has been on the chain is found in the Internet of Things system, a revocation proposal can be initiated. Revocation can be completed by simply adding revocation information to the blockchain, and other Internet of Things nodes can query the message.

[0062] Further, as shown in Figure 3 The process of the second step (step 12) is as follows:

[0063] After the node B uploads the digital certificate to the blockchain, if it needs to access the node A, the identity authentication process is as follows:

[0064] Step 31, the Internet of Things node B initiates an access request to the node A, and A returns a random string as verification.

[0065] Step 32, the node B returns the identity information and the string encrypted by the private key to A.

[0066] In steps 31-32 described above, any communication node can receive an access request and send verification information; at the same time, any communication node can initiate an access request and return the received verification information encrypted by a private key.

[0067] Step 33, the node A queries the identity of B in the blockchain. If the digital certificate of B has been revoked or has expired, the access is denied. If the identity information is normal, the access is allowed. In this step, any communication node receiving an access request can query the blockchain to determine whether the opposite communication node is a malicious communication node.

[0068] Step 34, the node A obtains the public key of B from the blockchain and decrypts the received ciphertext using the public key. If the decrypted string is consistent with the original random string, the node A confirms that the authentication of the node B is passed. It should be noted that in step 34, any communication node receiving encrypted verification information, i.e. the ciphertext, can obtain the public key from the blockchain to decrypt the ciphertext and determine whether the verification information is consistent.

[0069] Further, the third step (step 13) is as follows:

[0070] In the present application, the Internet of Things nodes use multi-antenna arrays to facilitate high directional beamforming. A sector model is used to accurately represent the actual millimeter wave antenna array pattern. Specifically, the coverage of the beam signal is approximately a sector with an angle ω. The antenna gain of the node is represented as G n (ω), which can be approximated as

[0071]

[0072] where ω i is the main lobe beam width of the IoT node. M i and S i are the main lobe gain and side lobe gain of the i-th Internet of Things node antenna array. In this application, to determine a malicious communication node, it is assumed that the eavesdropper is equipped with an omnidirectional antenna, and its antenna gain can be represented as E e .

[0073] A number of RISs are set up in the IoT system. The secrecy rate and the eavesdropper rate between IoT communication nodes are determined by the following analysis of the gain and noise of the RIS cascaded link.

[0074] The RIS-enabled link is located in an elevated position, and due to its cascaded nature, it can maintain an unobstructed path, while the direct link can be permanently obstructed by buildings. We determine the blockage coefficient of each link. i,i′ and b i,e denotes the blockage penetration coefficient of the transmitter of the ith pair of nodes and the ith pair of nodes to the eavesdropper.

[0075] 1) Path loss model: The channel gain of the RIS cascaded channel link can be represented as

[0076]

[0077] where F n denotes the radiation function of the nth element on the RIS. The carrier wavelength is denoted by λ. The gain of the nth element is denoted by G, which is determined by the radiation function. We assume that the reflection coefficient of the nth element of the RIS is denoted by Given this, we define the RIS reflection coefficient matrix as Θ = diag([θ1, θ2, …, θ N ]). Similarly, the path loss of the eavesdropper's RIS cascaded channel is denoted by L i,e . With the effectiveness of the phase shift design based on subarrays of RIS, we divide each RIS into multiple subarrays with uniform reflection coefficients. This helps to control the phase of more elements while maintaining a manageable day-to-day driving light action space.

[0078] The reflective elements are divided into sets, Q sub denotes the number of elements in each subarray. The reflection coefficient vector of the st subarray can be represented as where

[0079] The channel gain of the direct link can be represented as where p is the path loss intercept, d i,i′ is the distance from the transmitter to the receiver, and a is the corresponding path loss exponent. Similarly, the channel gain of the eavesdropper link can be represented as g i,e .

[0080] Since IoT nodes have highly directional antenna beams, RIS can only act as a relay for a single user. RIS only serves nodes whose antenna main lobe is aligned with the RIS. The RIS-Node pairing set ζ is a binary indicator set, ζ i= 1 or 0 indicates whether the RIS serves the ith node pair or not.

[0081] According to the antenna beam characteristics between the node pairs, and the RIS only serves the node whose antenna main lobe is aligned with the RIS, the noise that any node pair is interfered by other links is determined. Specifically, the Internet of Things node will be interfered by other link transmissions. The interference of other direct links can be expressed as

[0082]

[0083] and the interference from other relay links can be expressed as

[0084]

[0085] where P i′ is the transmit power of the receiver of the ith node pair.

[0086] The effective signal of the ith node pair is

[0087] V i = P i M T,i M R,i [(1-ζ i )g i,i + ζ i g i,i ].

[0088] Then the signal-to-interference-plus-noise ratio (SINR) of the ith node pair is

[0089]

[0090] where σ 2 is the noise power. The total transmission rate between the node pairs is determined by the noise analysis, and the transmission rate of the ith node pair can be obtained by , where B is the bandwidth.

[0091] Similarly, when the malicious communication node eavesdrops on the node pair, the transmission rate of the eavesdropper is determined by the noise analysis, and the rate of the eavesdropper when eavesdropping on the ith node pair can be obtained by . In the communication link of each node pair, the total rate is the sum of the secret rate and the eavesdropper rate, so we can set the secret rate of the kth link as

[0092] The optimization goal of the present application is to maximize the overall secret data amount of multiple node pairs by optimizing the RIS node association and the RIS phase. The length of each time slot t is represented as Δt. The optimization problem can be modeled as:

[0093]

[0094] Equation C1 specifies that each RIS can only support one node pair. Constraint C2 describes the minimum secrecy rate required for each node pair and sets it as a threshold for this secrecy rate. Meanwhile, equation C3 imposes a limit on the amplitude of the RIS reflection coefficient, and C4 limits the adjustable range of the RIS phase.

[0095] Further, the fourth step (step 14) is as follows:

[0096] In the optimization problem, RIS node association involves discrete action prediction, while RIS phase optimization requires continuous action prediction. The present application proposes a DRL algorithm called Double PPO, which includes PPO for predicting RIS node pairing and PPO for predicting RIS phase.

[0097] PPO is an optimization algorithm for DRL that learns the optimal policy by iteratively updating the policy to maximize the expected cumulative reward. The agent's policy is parameterized and represented by two networks, namely the behavior network and the evaluation network The core idea of PPO is to constrain policy updates using an agent objective function and a clipping mechanism. The objective function in PPO is given by

[0098]

[0099] where denotes the importance sampling weight between the policy and the policy . denotes the advantage function corresponding to , where γ denotes the discount factor. The clipping mechanism limits the policy within a predefined range, where clip() denotes the clipping function, ∈ is a hyperparameter used to eliminate the reward outside the interval [1-∈, 1+∈] for t (θ A ).

[0100] In the training phase, we use a batch of I experiences interacting with the environment to update the networks. For the action network, the parameter update is as follows

[0101]

[0102] The mean square error function is used as the loss function to update θ C

[0103] ​

[0104] where a c denotes the learning rate, denotes the target state value function derived in a time-difference manner. The algorithm proposed by the present application designs state information and reward functions for different types of agents.

[0105] 1) State space: In time slot t, the state of the first PPO is the position of all nodes. The state input of the second PPO is a one-dimensional array containing user position information in a specific order. Specifically, the user information of the RIS service is located at the front of the vector, and the other users are behind. This order arrangement maintains effective user differentiation without increasing the dimension of the state space.

[0106] 2) Action space: The action of the first PPO is the pairing of RIS and node pairs, which can be represented as The role of the second PPO is its phase shift design.

[0107] 3) Reward design: The main reward component includes the secrecy rate U t,i of time slot t, plus the penalty for link secrecy interruption to ensure the quality of all node pairs. The reward function of the first PPO summarizes the cumulative reward of all pairs, which can be represented as where O t,i i = 1 indicates the i-th link secrecy interruption at time slot t, otherwise O t,i = 0. X is a negative fixed value. The reward function of the second PPO contains the reward of the RIS service link and the total reward of all links at time slot t. It can be represented as

[0108] It should be noted that the execution subject of each step of the method provided by the embodiments of the present application can be the same device, or the method can also be executed by different devices as the execution subject. For example, the execution subject of step 21 and step 22 can be device 1, and the execution subject of step 23 can be device 2; for example, the execution subject of step 21 can be device 1, and the execution subject of step 22 and step 23 can be device 2; and the like.

[0109] The present application also proposes an Internet of Things secure communication system for implementing the method described in any one of the embodiments of the first aspect of the present application, comprising the following modules connected to each other.

[0110] A blockchain authentication module for identity authentication of communication nodes added to the Internet of Things system based on a blockchain. The blockchain authentication module implements the functions of steps 21-24 of the embodiments of the present application.

[0111] The communication authentication module is configured to perform identity authentication before access between the communication nodes in the Internet of Things system. The communication authentication module is configured to implement the functions of steps 31-34 of the embodiments of the present application.

[0112] The optimization module is configured to perform RIS-assisted communication for the trusted communication nodes, and optimize the connection relationship and performance of the RIS with the target of the secret communication data volume between the communication nodes. The optimization module is configured to implement the functions of steps 13-14 of the embodiments of the present application.

[0113] Those skilled in the art should understand that the embodiments of the present application can be provided as a method, a system, or a computer program product. Therefore, the present application can be in the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Moreover, the present application can be in the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0114] Therefore, the present application also provides a computer-readable storage medium having a computer program stored thereon, and the computer program is executed by a processor to implement the method according to any one of the embodiments of the present application.

[0115] The present application is described with reference to flowcharts and / or block diagrams of the method, device (system), and computer program product according to the embodiments of the present application. It should be understood that each flow and / or block in the flowcharts and / or block diagrams, and the combination of the flows and / or blocks in the flowcharts and / or block diagrams can be implemented by computer program instructions. These computer program instructions can be provided to a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing devices to produce a machine, so that the instructions executed by the computer or other programmable data processing devices produce a device implemented in the flowcharts and / or block diagrams. Figure 1 one or more flows and / or blocks Figure 1 an apparatus that implements the functions specified in the flow(s) or block(s).

[0116] These computer program instructions can also be stored in a computer-readable memory that can direct the computer or other programmable data processing devices to work in a specific manner, so that the instructions stored in the computer-readable memory produce a manufactured product including instruction apparatus, which implements the flowcharts and / or block diagrams. Figure 1 one or more flows and / or blocks Figure 1 an apparatus that implements the functions specified in the flow(s) or block(s).

[0117] These computer program instructions can also be loaded into a computer or other programmable data processing devices, so that a series of operational steps are performed on the computer or other programmable devices to generate a computer-implemented process, so that the instructions executed on the computer or other programmable devices provide a process for implementing the flowchart Figure 1 one flow or multiple flows and / or blocks Figure 1 one block or multiple blocks.

[0118] Further, the present application also proposes an electronic device (or a computing device), comprising a memory, a processor and a computer program stored in the memory and executable by the processor, wherein the processor executes the computer program to implement the method according to any one of the embodiments of the present application.

[0119] In a typical configuration, a computing device includes one or more processors (CPUs), input / output interfaces, network interfaces, and memory. The memory can include non-persistent memory in the form of various computer-readable media, random access memory (RAM), and / or non-volatile memory such as read only memory (ROM) or flash memory. The memory is an example of computer-readable media. Computer-readable media includes persistent and non-persistent, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disc read-only memory (CD-ROM), digital versatile discs (DVDs) or other optical storage, magnetic cassettes, magnetic tapes, magnetic disk storage or other magnetic storage devices, or any other non-transmission medium that can be used to store information accessible to a computing device. According to the definition herein, computer-readable media does not include transitory media such as modulated data signals and carrier waves.

[0120] In summary, the present application establishes a decentralized identity authentication mechanism to verify the credibility of Internet of Things nodes by combining blockchain technology, effectively prevents unauthorized access, and enhances wireless channels through RIS to facilitate Internet of Things communication, realizing secure transmission between Internet of Things nodes. In addition, a deep reinforcement learning algorithm is designed to effectively coordinate the pairing between Internet of Things devices and RIS, and optimize the RIS phase configuration, significantly improving the security and reliability of 6G Internet of Things communication. Figure 6A comparison chart of secret data transmission data amounts of different schemes in a service cycle provided by the scheme of the application is given, and the secret data amount is significantly improved by the optimization method of the application.

[0121] It should also be noted that the terms "comprising", "including", or any other variant thereof are intended to cover a non-exclusive inclusion, such that processes, methods, articles, or apparatuses that comprise a list of elements are not limited to those elements, but can also include other elements not expressly listed or inherent to such processes, methods, articles, or apparatuses. Unless otherwise defined, the elements defined by the statement "comprise" do not exclude the presence or addition of other identical elements in the process, method, article, or apparatus comprising the elements.

[0122] Those skilled in the art can understand that, unless specifically stated, the singular forms "a", "an" and "the" also include the plural forms. It should be further understood that the use of the phrase "comprise" in the specification of the application means that the stated features, integers, steps, operations, elements, and / or components are present, but does not exclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and / or groups thereof. It should be understood that when an element is "connected" or "coupled" to another element, it can be directly connected or coupled to the other element, or there can be an intermediate element. In addition, "connected" or "coupled" as used herein can include wireless connection or wireless coupling. The phrase "and / or" as used herein includes all or any one of the associated listed items, and all combinations thereof.

[0123] Those skilled in the art can understand that, unless otherwise defined, all terms (including technical, technical and scientific terms) used herein have the same meaning as that generally understood by those skilled in the art to which the application belongs.

[0124] The above only describes the embodiments of the application and is not intended to limit the application. Those skilled in the art can make various modifications and changes to the application. Any modification, equivalent replacement, improvement, etc. made within the spirit and principles of the application shall be included in the scope of the claims of the application.

Claims

1. A secure communication method for the Internet of Things, characterized in that, Includes the following steps: Identify malicious communication nodes and set up a RIS (Resource Identifier) ​​in the IoT system. In the communication link of each node pair, the total rate is the sum of the confidential rate and the eavesdropping rate. Optimize RIS node association and RIS phase to maximize the overall confidential data rate of multiple node pairs; Each RIS serves one node pair, and the confidentiality rate between each node pair is no less than a set threshold. The amplitude of the RIS reflection coefficient and the adjustment range of the RIS phase are set. The PPO algorithm is used to predict discrete actions for the correlation optimization of RIS nodes and to predict continuous actions for the phase optimization of RIS nodes.

2. The IoT secure communication method as described in claim 1, characterized in that, It also includes the following steps: Blockchain is used to authenticate the identities of communication nodes added to an IoT system.

3. The IoT secure communication method as described in claim 2, characterized in that, The process of authenticating the identity of communication nodes added to the IoT system based on blockchain includes the following steps: The communication node sends a registration request, receives a public-private key pair and a digital certificate from the certificate authority; obtains endorsement messages from the verification node, determines the blockchain structure based on the time sequence of the endorsement messages, and stores them in the blockchain; and queries the blockchain to identify malicious communication nodes.

4. The IoT secure communication method as described in claim 2, characterized in that, In the aforementioned IoT system, authentication is performed before communication nodes access each other, including the following steps: The communication node initiates an access request, encrypts the received verification information using its private key, and returns it; and, The communication node receives the access request and sends the verification information; it receives the encrypted verification information; it obtains the public key from the blockchain, decrypts the ciphertext, and confirms that it matches the verification information.

5. The IoT secure communication method as described in claim 1, characterized in that, Further steps include: The Double-PPO algorithm is used to predict discrete actions of RIS node pairings using the first PPO network and to predict continuous actions of RIS phases using the second PPO network. The state space of the first PPO network is the location of all nodes, and the state space of the second PPO network is a one-dimensional array of user location information arranged in a specific order. The reward function for the first PPO network is the sum of the cumulative security rate and security interruption penalty for all node pairs, while the reward function for the second PPO network is the sum of the security rate and security interruption penalty for the RIS service link.

6. The IoT secure communication method as described in claim 1, characterized in that, Includes the following steps: Based on the antenna beam characteristics between node pairs, and the fact that the RIS only serves nodes whose antenna main lobe is aligned with the RIS, the noise interference between any node pair caused by other links is determined, and the total transmission rate between node pairs is determined through noise analysis. The transmission rate of the eavesdropper was determined by noise analysis when a malicious communication node was eavesdropping on the node pair. The amount of secure communication data to be transmitted within a set time period is determined based on the difference between the total transmission rate and the eavesdropper's transmission rate.

7. An Internet of Things (IoT) secure communication system, used to implement the method according to any one of claims 1 to 6, characterized in that, include: The blockchain authentication module is used to authenticate the identity of communication nodes added to the Internet of Things system based on blockchain. A communication authentication module is used in the IoT system to perform identity authentication before communication nodes access each other; The optimization module is used to perform RIS-assisted communication on trusted communication nodes, aiming to optimize the connection relationship and performance of the RIS with the target amount of confidential communication data between communication nodes.

8. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the program is executed by the processor, it implements the method as described in any one of claims 1 to 6.

9. An electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the computer program, it implements the method as described in any one of claims 1 to 6.

Images