Dynamic encryption method for Internet of Things

Abstract

The invention discloses an Internet of Things dynamic encryption method, which relates to the technical field of information, and comprises the following steps: setting preset special codes on an encryption end and a decryption end of Internet of Things equipment; the encryption end and the decryption end set an initial encryption seed through a preset special code; the Internet of Things equipment performs first encryption communication through the initial encryption seed to generate a dynamic encryption seed; the encryption end encrypts the data through the dynamic encryption seed and a preset encryption algorithm to obtain encrypted data; the decryption end restores the encrypted data through the dynamic encryption seed and a preset decryption algorithm of the decryption end to obtain data; the dynamic encryption seed is regenerated through verification of communication data and combination with a preset special code after communication is finished. According to the method, the dynamic encryption seed is generated and managed through the equipment, a key management server is not needed, the independence and reliability of the system are improved, the complexity and high strength of the encryption process are guaranteed by adopting the encryption algorithm combined by multiple logical operations, and the method is suitable for lightweight Internet of Things equipment.

Description

Technical Field

[0001] The present invention relates to the field of information technology, and in particular to a dynamic encryption method for the Internet of Things. Background Art

[0002] With the rapid development of IoT technology, more and more smart devices are connected to the network, forming a huge and complex ecosystem. From smart homes to smart cities, IoT technology is profoundly changing the way people live and work. However, with the popularization of IoT devices, data security and privacy protection issues are becoming increasingly prominent. IoT devices often involve the transmission and processing of a large amount of sensitive information, such as personal identity information, health data, location information, etc. The leakage of this information will pose a serious threat to personal privacy and property security. Therefore, effective encryption protection of IoT data to ensure the security of data transmission and storage has become an indispensable part of the development of IoT technology.

[0003] Traditional static encryption methods, such as those based on fixed keys or encryption algorithms, face huge challenges in the IoT environment. Due to the large number of IoT devices and their wide distribution, the fixed encryption seeds and logic in static encryption methods can be easily obtained by attackers through brute force, man-in-the-middle attacks, or reverse engineering. Once the encryption seed is cracked, the attacker can easily decrypt all data using the encryption seed, which greatly reduces the security of the entire system. In addition, static encryption methods are difficult to cope with the ever-changing network environment and attack methods, and lack sufficient flexibility and adaptability.

[0004] In order to overcome the limitations of static encryption methods, dynamic encryption technology came into being. Dynamic encryption technology uses constantly changing encryption seeds and encryption logic to make the encryption results different each time, which significantly increases the difficulty of cracking and improves the security of the system. This technology can effectively resist common network threats such as brute force cracking and man-in-the-middle attacks, providing more reliable protection for IoT data. However, existing dynamic encryption technologies are often complex and require high computing power and storage space to support high-intensity encryption algorithms. This is undoubtedly a huge challenge for lightweight IoT devices with limited resources. Summary of the invention

[0005] The embodiment of the present invention provides a dynamic encryption method for the Internet of Things, which is used to solve the problem that the dynamic encryption technology in the prior art is often relatively complex and requires higher computing power and storage space to support high-intensity encryption algorithms.

[0006] On the one hand, an embodiment of the present invention provides an Internet of Things dynamic encryption method, including:

[0007] Set a preset special code on the encryption end and decryption end of the IoT device;

[0008] The encryption end and the decryption end set the initial encryption seed through the preset special code;

[0009] The IoT device generates a dynamic encryption seed by performing the first encrypted communication through the initial encryption seed;

[0010] The encryption end encrypts the data using the dynamic encryption seed and a preset encryption algorithm to obtain encrypted data;

[0011] The decryption end restores the encrypted data by using the dynamic encryption seed and a preset decryption algorithm of the decryption end to obtain the data;

[0012] The dynamic encryption seed is regenerated after the communication is completed by checking the communication data and combining it with the preset special code.

[0013] In a possible implementation, the preset special code is stored in a secure storage area of ​​the encryption end and the decryption end.

[0014] In a possible implementation manner, the preset special code is pre-set on the encryption end and the decryption end.

[0015] In a possible implementation, the preset special code is generated and synchronized to the encryption end and the decryption end when the IoT device is used for the first time.

[0016] In a possible implementation, the dynamic encryption seed is regenerated by a predetermined algorithm operation through a checksum of the communication data combined with the preset special code after the communication is completed.

[0017] In a possible implementation, the communication uses an encrypted communication protocol.

[0018] The Internet of Things dynamic encryption method of the present invention has the following advantages:

[0019] (1) No key management server is required. Dynamic encryption seeds are generated and managed by the device itself, which simplifies the system architecture and improves the independence and reliability of the system.

[0020] (2) Ensure that the encryption seed is different each time, which significantly increases the difficulty for attackers to crack the encryption.

[0021] (3) The encryption algorithm adopts a combination of multiple logical operations to ensure the complexity and high strength of the encryption process, which is more suitable for lightweight IoT devices. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0023] Figure 1 A schematic diagram of a flow chart of a dynamic encryption method for the Internet of Things provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0024] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0025] Figure 1 A schematic diagram of a flow chart of a dynamic encryption method for an Internet of Things provided by an embodiment of the present invention; an embodiment of the present invention provides a dynamic encryption method for an Internet of Things, including:

[0026] Set a preset special code on the encryption end and decryption end of the IoT device;

[0027] The encryption end and the decryption end set the initial encryption seed through the preset special code;

[0028] The IoT device generates a dynamic encryption seed by performing the first encrypted communication through the initial encryption seed;

[0029] The encryption end encrypts the data using the dynamic encryption seed and a preset encryption algorithm to obtain encrypted data;

[0030] The decryption end restores the encrypted data by using the dynamic encryption seed and a preset decryption algorithm of the decryption end to obtain the data;

[0031] The dynamic encryption seed is regenerated after the communication is completed by checking the communication data and combining it with the preset special code.

[0032] Exemplarily, when the system is started for the first time, both the encryption end and the decryption end use a preset special code, and use the preset special code as an initial encryption seed, in combination with a preset encryption algorithm to perform data encryption.

[0033] After each communication, the encryption end and the decryption end will generate a checksum (such as MD5) for the communication data. During the next communication, the encryption end and the decryption end generate a new dynamic encryption seed based on the checksum of the last communication data and the preset special code. By performing an XOR operation and a hash operation on the checksum of the last communication data and the special code, the seed is highly unpredictable. After receiving the new dynamic encryption seed, the encryption end uses the seed and the preset encryption algorithm (including XOR operation, shift operation, etc.) to encrypt the data. Ensure the complexity of the encryption process. After receiving the encrypted data, the decryption end uses the same dynamic encryption seed to decrypt and restore the original data.

[0034] The encrypted data is transmitted to the decryption end through the IoT network. The data transmission process uses encrypted communication protocols, such as TLS, to further improve the security of data transmission.

[0035] In a possible embodiment, the preset special code is stored in a secure storage area of ​​the encryption end and the decryption end, the preset special code is pre-set on the encryption end and the decryption end, the preset special code is generated and synchronized to the encryption end and the decryption end when the Internet of Things device is used for the first time, and the dynamic encryption seed is regenerated after the communication is completed by checking the communication data and combining the preset special code through a predetermined algorithm operation, and the communication adopts an encrypted communication protocol.

[0036] Exemplarily, a preset special code is pre-stored in a secure storage area of ​​the encryption end and the decryption end and used as an initial encryption seed. The encryption seed is simultaneously generated and synchronized to the encryption end and the decryption end when in use. A subsequent dynamic encryption seed is regenerated after the communication is completed by verifying the communication data and combining the preset special code through a predetermined algorithm operation, and is also simultaneously generated and synchronized to the encryption end and the decryption end.

[0037] Although the preferred embodiments of the present invention have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the present invention.

[0038] Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.

Claims

1. A dynamic encryption method for the Internet of Things, characterized in that: include: Set a preset special code on the encryption end and decryption end of the IoT device; The encryption end and the decryption end set the initial encryption seed through the preset special code; The IoT device generates a dynamic encryption seed by performing the first encrypted communication through the initial encryption seed; The encryption end encrypts the data using the dynamic encryption seed and a preset encryption algorithm to obtain encrypted data; The decryption end restores the encrypted data by using the dynamic encryption seed and a preset decryption algorithm of the decryption end to obtain the data; The dynamic encryption seed is regenerated after the communication is completed by checking the communication data and combining the preset special code.

2. According to claim 1, a dynamic encryption method for the Internet of Things is characterized in that: The preset special code is stored in the secure storage area of ​​the encryption end and the decryption end.

3. According to claim 1, a dynamic encryption method for the Internet of Things is characterized in that: The preset special code is pre-set on the encryption end and the decryption end.

4. The method for dynamic encryption of the Internet of Things according to claim 1, characterized in that: The preset special code is generated and synchronized to the encryption end and the decryption end when the Internet of Things device is used for the first time.

5. The method for dynamic encryption of the Internet of Things according to claim 1, characterized in that: The dynamic encryption seed is generated by a predetermined algorithm operation after the communication is completed by checking the communication data and combining the preset special code to regenerate the dynamic encryption seed.

6. The method for dynamic encryption of the Internet of Things according to claim 1, characterized in that: The communication adopts an encrypted communication protocol.

Images