Data communication method and device in Internet of Things

Abstract

The invention discloses a data communication method and device in the Internet of Things, and the method comprises the steps: encrypting terminal hardware fingerprint information according to pre-generated first terminal encryption key information, and obtaining encrypted terminal hardware fingerprint information; combining the encrypted terminal hardware fingerprint information and the authorization information of the terminal to obtain a terminal basic authorization file; generating terminal authorization file signature information according to the first terminal encryption key information and a terminal basic authorization file; combining the terminal authorization file signature information and the terminal basic authorization file to obtain a terminal signature authorization file; encrypting the terminal signature authorization file according to the first terminal encryption key information to obtain a terminal target authorization file; and sending the terminal target authorization file to the terminal, and receiving target uploading data sent by the terminal. The data communication method is high in security.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to a data communication method and device in the Internet of Things. Background Art

[0002] As society has a deeper understanding of the value of data, the importance of data communication security has received more and more attention, and the requirements are becoming higher and higher.

[0003] In the past, in terms of data communication security, access password authentication, symmetric encryption authentication, and asymmetric encryption authentication were usually used by both communicating parties, which basically met conventional communication security requirements.

[0004] However, the above data communication process has the problem of encryption key leakage, which causes an unauthorized data sender to send data to a data receiver, resulting in low security of data communication. Summary of the invention

[0005] The present invention provides a data communication method and device in the Internet of Things to solve the technical problem of low security in data communication in related technologies.

[0006] According to one aspect of the present invention, a data communication method in the Internet of Things is provided, which is applied to a server and includes:

[0007] Encrypt the terminal hardware fingerprint information according to the pre-generated first terminal encryption key information to obtain the encrypted terminal hardware fingerprint information;

[0008] Combining the encrypted terminal hardware fingerprint information and the terminal authorization information to obtain a terminal basic authorization file;

[0009] Generate terminal authorization file signature information according to the first terminal encryption key information and the terminal basic authorization file;

[0010] Merging the terminal authorization file signature information and the terminal basic authorization file to obtain a terminal signature authorization file;

[0011] Encrypt the terminal signature authorization file according to the first terminal encryption key information to obtain a terminal target authorization file;

[0012] Send the terminal target authorization file to the terminal, and receive the target uploaded data sent by the terminal; wherein the target uploaded data is data generated by the terminal according to the pre-generated second terminal encryption key information and the original uploaded data collected from the Internet of Things after the terminal verifies the terminal target authorization file.

[0013] According to another aspect of the present invention, a data communication method in the Internet of Things is provided, which is applied to a terminal and includes:

[0014] Decrypt the terminal target authorization file according to the pre-generated first terminal decryption key information to obtain a terminal signature authorization file; wherein the first terminal encryption key information and the first terminal decryption key information are a key pair;

[0015] Splitting the terminal signature authorization file to obtain terminal authorization file signature information and terminal basic authorization file;

[0016] After the signature information of the terminal authorization file is verified, the terminal basic authorization file is split to obtain the authorization information of the terminal and the encrypted terminal hardware fingerprint information;

[0017] Decrypting the encrypted terminal hardware fingerprint information according to the first terminal decryption key information to obtain the terminal hardware fingerprint information;

[0018] After the authorization information of the terminal is verified and the hardware fingerprint information of the terminal is verified, collecting the original uploaded data from the Internet of Things;

[0019] Generate target upload data according to the pre-generated second terminal encryption key information and the original upload data, and send the target upload data to the server.

[0020] According to another aspect of the present invention, an electronic device is provided, the electronic device comprising:

[0021] at least one processor; and

[0022] a memory communicatively connected to the at least one processor; wherein,

[0023] The memory stores a computer program that can be executed by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the data communication method in the Internet of Things described in any embodiment of the present invention.

[0024] According to another aspect of the present invention, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores a computer program, and the computer program is used to enable a processor to implement the data communication method in the Internet of Things described in any embodiment of the present invention when executed.

[0025] According to another aspect of the present invention, a computer program product is provided, including a computer program, wherein when the computer program is executed by a processor, the computer program implements the data communication method in the Internet of Things described in any embodiment of the present invention.

[0026] The technical solution of the embodiment of the present invention, on the one hand, adds the terminal hardware fingerprint information when generating the terminal target authorization file, strengthens the control of the terminal, so that the terminals that can communicate with the server are all controlled terminals, and improves the security of data communication. On the other hand, when generating the terminal target authorization file, the terminal authorization file signature information and the terminal basic authorization file are merged to obtain the terminal signature authorization file, and the terminal signature authorization file is encrypted twice according to the first terminal encryption key information to obtain the terminal target authorization file. The data anti-tampering capability is strengthened by data signature, and the cracking difficulty is increased by secondary encryption, which avoids the communication between the uncontrolled terminal and the server, and further improves the security of data communication. On the other hand, the received target upload data is the data generated by the terminal after the terminal target authorization file is verified, according to the pre-generated second terminal encryption key information and the original upload data collected from the Internet of Things, which avoids the original upload data from being tampered with, and further improves the security of data communication.

[0027] It should be understood that the contents described in this section are not intended to identify the key or important features of the embodiments of the present invention, nor are they intended to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0029] Figure 1 is a flow chart of a data communication method in the Internet of Things provided by an embodiment of the present invention;

[0030] Figure 2 is a flow chart of another data communication method in the Internet of Things provided by an embodiment of the present invention;

[0031] Figure 3 is a flow chart of another data communication method in the Internet of Things provided by an embodiment of the present invention;

[0032] Figure 4 is a flow chart of another data communication method in the Internet of Things provided by an embodiment of the present invention;

[0033] Figure 5 It is a structural schematic diagram of a data communication device in the Internet of Things provided by an embodiment of the present invention;

[0034] Figure 6It is a structural schematic diagram of another data communication device in the Internet of Things provided by an embodiment of the present invention;

[0035] Figure 7 It is a schematic diagram of the structure of an electronic device for implementing the data communication method in the Internet of Things according to an embodiment of the present invention. DETAILED DESCRIPTION

[0036] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0037] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the term "comprising" and any variation thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices. The acquisition, storage, use, processing, etc. of data in the embodiments of the present invention all comply with the relevant provisions of national laws and regulations.

[0038] Figure 1 1 is a flow chart of a data communication method in the Internet of Things provided by an embodiment of the present invention. This embodiment can be applied to scenarios where data communication is performed in the Internet of Things. The method can be performed by a data communication device in the Internet of Things, and the data communication device in the Internet of Things can be implemented in the form of hardware and / or software. The data communication device in the Internet of Things can be configured in a server. Figure 1 As shown, the method includes the following steps.

[0039] Step 101: Encrypt terminal hardware fingerprint information according to pre-generated first terminal encryption key information to obtain encrypted terminal hardware fingerprint information.

[0040] Optionally, in this embodiment, a key generation algorithm with a high security level can be used to generate the first terminal encryption key information. Exemplarily, the key generation algorithm in this implementation can be an asymmetric encryption algorithm (such as RSA), a Data Encryption Standard (DES) algorithm, or an Advanced Encryption Standard (AES) algorithm.

[0041] In this embodiment, there is no restriction on the length of the first terminal encryption key information. Optionally, the length of the first terminal encryption key information can be 512 bytes, or 1024 bytes, etc. The longer the length of the first terminal encryption key information, the higher the security of encryption using the first terminal encryption key information, but correspondingly, the greater the pressure of encryption and decryption.

[0042] The terminal hardware fingerprint information in this embodiment refers to the hardware information that can uniquely identify the terminal. Optionally, the terminal hardware fingerprint information in this embodiment may include at least one of the following information: a central processing unit (CPU) identifier, a serial number, and a media access control address (MAC address). The terminal hardware fingerprint information is information obtained in advance from the terminal.

[0043] Optionally, in order to improve the security of encryption, the encryption process in step 101 can be: encrypting the terminal hardware fingerprint information according to the pre-generated first terminal encryption key information to obtain the encrypted initial terminal hardware fingerprint information; adding randomly generated interference data to the encrypted initial terminal hardware fingerprint information to obtain the encrypted terminal hardware fingerprint information.

[0044] Optionally, in order to further improve security, the server needs to verify its own authorization file before step 101. Before step 101, the data communication method provided in this embodiment further includes the following steps 10a to 10f.

[0045] Step 10a: Receive the first server target authorization file.

[0046] The first server target authorization file may be a file generated by other servers or control devices.

[0047] Optionally, the generation process may be: according to the pre-generated first server encryption key information, encrypt the hardware fingerprint information of the server (for the sake of convenience of description, referred to as the hardware fingerprint information of the first server) to obtain the encrypted first server hardware fingerprint information; merge the encrypted first server hardware fingerprint information and the authorization information of the server (for the sake of convenience of description, referred to as the first server authorization information) to obtain the first server basic authorization file; according to the first server encryption key information and the first server basic authorization file, generate the first server authorization file signature information; merge the first server authorization file signature information and the first server basic authorization file to obtain the first server signed authorization file; encrypt the first server signed authorization file according to the first server encryption key information to obtain the first server target authorization file.

[0048] Step 10b: Decrypt the first server target authorization file according to the pre-generated first server decryption key information to obtain the first server signed authorization file.

[0049] The first server decryption key information and the first server encryption key information are a key pair, which can be generated by RSA, AES algorithm or DES algorithm.

[0050] Step 10c: Split the first server signature authorization file to obtain the first server authorization file signature information and the first server basic authorization file.

[0051] When merging the signature information of the first server authorization file and the first server basic authorization file, a certain merging algorithm can be used for merging. Optionally, the merging algorithm can be: inserting the signature information of the first server authorization file into a specific position in the first server basic authorization file according to a preset cross-merge rule. Alternatively, the merging algorithm can be: splitting the signature information of the first server authorization file into signature fragments, determining the corresponding position of each signature fragment in the first server basic authorization file; and inserting each signature fragment into its corresponding position in the first server basic authorization file.

[0052] When splitting the first server signature authorization file, the first server authorization file signature information and the first server basic authorization file can be split according to the inverse operation of the merging algorithm.

[0053] Step 10d: After the signature information of the first server authorization file is verified, the first server basic authorization file is split to obtain the first server authorization information and the encrypted hardware fingerprint information of the first server.

[0054] In order to ensure the integrity and security of the first server basic authorization file, the signature information of the first server authorization file is first verified. The verification process can be: generating the receiving end signature information according to the first server basic authorization file; comparing the receiving end signature information and the first server authorization file signature information; if the two are consistent, it means that the first server basic authorization file has not been modified, it is a complete and secure file, and the first server authorization file signature information verification has passed; if the two are inconsistent, it means that the first server basic authorization file has been modified during the transmission process, and the first server authorization file signature information verification has failed.

[0055] After the signature information of the first server authorization file is verified, the first server basic authorization file is split to obtain the first server authorization information and the encrypted hardware fingerprint information of the first server.

[0056] Step 10e: decrypt the encrypted first server hardware fingerprint information according to the first server decryption key information to obtain the first server hardware fingerprint information.

[0057] Step 10f: after the hardware fingerprint information of the first server is verified and the authorization information of the first server is verified, determine to execute step 101.

[0058] In order to ensure security, the hardware fingerprint information of the first server and the authorization information of the first server need to be verified.

[0059] Optionally, the verification process of the first server hardware fingerprint information may be: comparing whether the local hardware fingerprint information is consistent with the first server hardware fingerprint information; if they are consistent, determining that the first server hardware fingerprint information verification has passed; if they are inconsistent, determining that the first server hardware fingerprint information verification has failed.

[0060] Optionally, the verification process for the first server authorization information may be: comparing whether the pre-acquired authorization indication information matches the first server authorization information; if they match, determining that the first server authorization information verification has passed; if they do not match, determining that the first server authorization information verification has failed.

[0061] After the hardware fingerprint information of the first server is verified and the authorization information of the first server is verified, it indicates that the server is a controlled and secure server, thereby ensuring the security of the communication process between the server and the terminal.

[0062] Step 102: Merge the encrypted terminal hardware fingerprint information and the terminal authorization information to obtain a terminal basic authorization file.

[0063] In step 102, a merging algorithm may be used to merge the encrypted terminal hardware fingerprint information and the authorization information of the terminal. Optionally, the merging algorithm may be: inserting the encrypted terminal hardware fingerprint information into a specific position in the authorization information of the terminal according to a preset cross-merging rule. Alternatively, the merging algorithm may be: splitting the encrypted terminal hardware fingerprint information into fingerprint information fragments, determining the corresponding position of each fingerprint information fragment in the authorization information of the terminal; and inserting each fingerprint information fragment into its corresponding position in the authorization information of the terminal.

[0064] Optionally, the format of the terminal basic authorization file is generally a readable text format, for example, txt, xml, yaml, json, etc.

[0065] In this embodiment, the corresponding authorization information can be adaptively determined for each terminal according to the different functions or services undertaken by each terminal.

[0066] Step 103: Generate terminal authorization file signature information according to the first terminal encryption key information and the terminal basic authorization file.

[0067] The signature information of the terminal authorization file is very important. During the subsequent signature verification, it can effectively detect whether the terminal basic authorization file has been changed.

[0068] In one implementation, when generating the terminal authorization file signature information, a digest algorithm may be used, for example, MD5 Message-Digest Algorithm (MD5 Message-Digest Algorithm, MD5 for short), Secure Hash Algorithm (SHA for short), Message Authentication Codes (MAC for short) algorithm.

[0069] In another implementation, when generating the terminal authorization file signature information, a digest algorithm can be used to obtain the original signature information. The original signature information is then encrypted according to the first terminal encryption key information to obtain the terminal authorization file signature information. This implementation has a higher security level.

[0070] Step 104: Merge the terminal authorization file signature information and the terminal basic authorization file to obtain a terminal signature authorization file.

[0071] Similar to step 102, a merging algorithm may be used to merge the terminal authorization file signature information and the terminal basic authorization file. Optionally, the merging algorithm may be: inserting the terminal authorization file signature information into a specific position in the terminal basic authorization file according to a preset cross-merging rule. Alternatively, the merging algorithm may be: splitting the terminal authorization file signature information into signature information fragments, determining the corresponding position of each signature information fragment in the terminal basic authorization file; and inserting each signature information fragment into its corresponding position in the terminal basic authorization file.

[0072] Step 105: Encrypt the terminal signature authorization file according to the first terminal encryption key information to obtain a terminal target authorization file.

[0073] In this embodiment, the terminal signature authorization file may be encrypted twice to improve the security of the authorization file and increase the difficulty of cracking.

[0074] Optionally, to further improve security, the implementation process of step 105 may include: encrypting the terminal signature authorization file according to the first terminal encryption key information to obtain a terminal intermediate authorization file; adding randomly generated interference data to the terminal intermediate authorization file to obtain a terminal target authorization file.

[0075] Step 106: Send the terminal target authorization file to the terminal, and receive the target upload data sent by the terminal.

[0076] The target uploaded data is data generated by the terminal after the terminal target authorization file is verified, based on the pre-generated second terminal encryption key information and the original uploaded data collected from the Internet of Things.

[0077] After receiving the terminal target authorization file, the terminal can verify the terminal target authorization file. The specific verification process will be described in detail in the subsequent embodiments. After the terminal verifies the target authorization file, it collects the original upload data from the Internet of Things, encrypts the original upload data according to the pre-generated second terminal encryption key information, obtains the target upload data, and sends the target upload data to the server. The server receives the target upload data sent by the terminal.

[0078] Optionally, the Internet of Things in this embodiment may be an Internet of Things for realizing smart cities, an Internet of Things for realizing smart agriculture, an Internet of Things for realizing smart buildings, or an industrial Internet of Things. Exemplarily, the Internet of Things in this embodiment refers to an Internet of Things in the power industry, and the original uploaded data may be information of power equipment, such as voltage data, current data, etc.

[0079] In one implementation, the terminal generates target upload data according to the following process: encrypting the original upload data according to the second terminal encryption key information to obtain basic upload data; obtaining upload data signature information according to the second terminal encryption key information and the basic upload data; and merging the basic upload data and the upload data signature information to obtain target upload data.

[0080] Based on this implementation, after step 106, the data communication method provided in this embodiment further includes the following steps: splitting the target uploaded data to obtain basic uploaded data and uploaded data signature information; after the uploaded data signature information is verified, decrypting the basic uploaded data according to the pre-generated second terminal decryption key information to obtain the original uploaded data. The second terminal decryption key information and the second terminal encryption key information are a key pair.

[0081] When verifying the signature information of the uploaded data, the receiving end signature information can be generated based on the basic uploaded data; the receiving end signature information and the uploaded data signature information can be compared; if the receiving end signature information is consistent with the uploaded data signature information, it is determined that the uploaded data signature information verification has passed; if the receiving end signature information is inconsistent with the uploaded data signature information, it is determined that the uploaded data signature information verification has failed. After the uploaded data signature information is verified, the basic uploaded data is decrypted according to the pre-generated second terminal decryption key information to obtain the original uploaded data. The server can perform subsequent business operations based on the original uploaded data.

[0082] In this implementation, the original uploaded data is processed through an encryption and a signature process to obtain the target uploaded data, so that the server can verify the integrity of the basic uploaded data according to the uploaded data signature information, and decrypt the basic uploaded data according to the local second terminal decryption key information to obtain the original uploaded data, which not only ensures the integrity of the basic uploaded data, but also increases the difficulty of cracking the basic uploaded data. Therefore, this implementation ensures the security of the original uploaded data and further improves the security of data communications in the Internet of Things.

[0083] In another implementation, the terminal generates the target upload data according to the following process: encrypting the original upload data according to the second terminal encryption key information to obtain the target upload data.

[0084] Based on this implementation, after step 106, the data communication method provided by this embodiment further includes the following steps: decrypting the target uploaded data according to the pre-generated second terminal decryption key information to obtain the original uploaded data.

[0085] Optionally, the target upload data may be transmitted according to the communication protocol and communication link agreed upon by the server and the terminal. If the communication link between the server and the terminal is a low-bandwidth communication link, that is, the bandwidth of the communication link is lower than a certain bandwidth threshold, the terminal may compress the target upload data before sending it. After receiving the compressed target upload data, the server first decompresses the compressed target upload data to obtain the target upload data.

[0086] In order to achieve more sophisticated control over the terminal and further improve the security of data communication, in this embodiment, the authorization information of the terminal includes at least one of the following: terminal function authorization information, terminal data authorization information, and terminal authorization period. Correspondingly, the original uploaded data is the data collected from the Internet of Things by the terminal through the collection function within the terminal authorization period, and the original uploaded data is data that conforms to the authorized data type indicated by the terminal data authorization information. Among them, the collection function is a function that conforms to the authorized function indicated by the terminal function authorization information.

[0087] Optionally, in order to meet the requirements of ultra-large-scale high-concurrency authorization requests in the field of the Internet of Things, a distributed, high-availability architecture is adopted on the server side.

[0088] In the related technology, password authentication is adopted. Regardless of whether the password has been encrypted or not, it can be intercepted relatively easily during the authentication interaction process. Then the intercepted password is used for unauthorized terminals, which has limited improvement on communication security and can only be used in very basic communication scenarios.

[0089] Symmetric encryption is used, and the authorized terminal and the authorized server use the same key for encryption or decryption. Compared with the password authentication method, the security is improved, but because the same key is used, both parties need to negotiate the key. If any party using the key leaks the key, the encrypted information becomes unsafe.

[0090] Asymmetric encryption is used, and data communication encryption is guaranteed by a pair of keys. Generally, the private key is saved by the server and used to decrypt the transmitted data. The public key is saved by the client and used to encrypt the data. Compared with symmetric encryption, the risk of leakage is avoided because the keys are separated, and the security of data communication is improved. However, the key itself is only a pair of data and has nothing to do with the various terminal carriers on which the product runs. That is, the encryption process is independent of the terminal hardware, and the security is still insufficient.

[0091] The data communication method in the Internet of Things provided by this embodiment, on the one hand, adds the terminal hardware fingerprint information when generating the terminal target authorization file, strengthens the control of the terminal, so that the terminals that can communicate with the server are all controlled terminals, and improves the security of data communication. On the other hand, when generating the terminal target authorization file, the terminal authorization file signature information and the terminal basic authorization file are merged to obtain the terminal signature authorization file, and the terminal signature authorization file is encrypted twice according to the first terminal encryption key information to obtain the terminal target authorization file. The data anti-tampering capability is strengthened by the data signature method, and the cracking difficulty is increased by secondary encryption, which avoids the communication between the uncontrolled terminal and the server, and further improves the security of data communication. On the other hand, the received target upload data is the data generated by the terminal after the terminal target authorization file is verified, according to the pre-generated second terminal encryption key information and the original upload data collected from the Internet of Things, which avoids the original upload data from being tampered with, and further improves the security of data communication.

[0092] Figure 2 1 is a flow chart of another data communication method in the Internet of Things provided by an embodiment of the present invention. Figure 1 Based on the illustrated embodiment and various optional implementations, other steps included in the data communication method are described in detail. Figure 2 As shown, the data communication method provided by this embodiment further includes the following steps after sending the terminal target authorization file to the terminal.

[0093] Step 201: receiving a query request sent by a terminal.

[0094] The query request is used to indicate the type of data to be queried.

[0095] Optionally, in order to further improve security, the query request in this embodiment may also be an encrypted query request. For example, the terminal encrypts the original query request according to the second terminal encryption key information to obtain the query request.

[0096] The type of data to be queried in this embodiment may represent the physical meaning of the data to be queried, for example, voltage type data, current type data. Alternatively, the type of data to be queried may represent the form of expression of the data to be queried, for example, text data, picture data, etc.

[0097] Step 202: According to the query request, original query data matching the type of data to be queried is obtained.

[0098] Step 203: Encrypt the original query data according to the first terminal encryption key information to obtain basic query data.

[0099] Step 204: Obtain query data signature information according to the first terminal encryption key information and basic query data.

[0100] Step 205: Merge the basic query data and the query data signature information to obtain the target query data.

[0101] Step 206: Send target query data to the terminal.

[0102] The data communication method provided in this embodiment can enable the terminal to query data from the server. Optionally, this embodiment can also include step 106, that is, to achieve two-way communication between the server and the terminal.

[0103] Optionally, the server of this embodiment can also generate target authorization files of other servers and send them to other servers. The generation process may include: encrypting the hardware fingerprint information of the second server according to the pre-generated second server encryption key information to obtain the encrypted hardware fingerprint information of the first server; merging the encrypted second server hardware fingerprint information and the authorization information of the second server to obtain the second server basic authorization file; generating the second server authorization file signature information according to the second server encryption key information and the second server basic authorization file; merging the second server authorization file signature information and the second server basic authorization file to obtain the second server signature authorization file; encrypting the second server signature authorization file according to the second server encryption key information to obtain the second server target authorization file; sending the second server target authorization file to the server corresponding to the second server hardware fingerprint information.

[0104] The data communication method in the Internet of Things provided by this embodiment processes the original query data through an encryption and a signature process to obtain target query data, ensures the integrity of the basic query data through the signature process, and increases the difficulty of cracking the basic query data through the encryption process. Therefore, this implementation method ensures the security of the original query data and further improves the security of data communication in the Internet of Things.

[0105] Figure 3 1 is a flowchart of another data communication method in the Internet of Things provided by an embodiment of the present invention. This embodiment can be applied to scenarios where data communication is performed in the Internet of Things. The method can be executed by a data communication device in the Internet of Things, and the data communication device in the Internet of Things can be implemented in the form of hardware and / or software. The data communication device in the Internet of Things can be configured in a terminal. Figure 3 As shown, the method includes the following steps.

[0106] Step 301: decrypt the terminal target authorization file according to the pre-generated first terminal decryption key information to obtain the terminal signature authorization file.

[0107] The first terminal encryption key information and the first terminal decryption key information are a key pair.

[0108] This step is the reverse process of step 105 .

[0109] Optionally, the implementation process of step 301 may include: deleting interference data in the terminal target authorization file to obtain a terminal intermediate authorization file; decrypting the terminal intermediate authorization file according to the first terminal decryption key information to obtain a terminal signature authorization file.

[0110] Step 302: Split the terminal signature authorization file to obtain the terminal authorization file signature information and the terminal basic authorization file.

[0111] This step is the reverse process of step 104. The terminal signature authorization file is split using a splitting algorithm corresponding to the merging algorithm to obtain the terminal authorization file signature information and the terminal basic authorization file.

[0112] Optionally, the splitting algorithm may be: according to a preset cross-merge rule, the terminal authorization file signature information is obtained from a specific position of the terminal authorization file, and the terminal authorization file after the terminal authorization file signature information is taken out is the terminal basic authorization file. Alternatively, the splitting algorithm may be: obtaining signature information fragments from each specific position of the terminal authorization file, merging the signature information fragments into the terminal authorization file signature information, and the terminal authorization file after the terminal authorization file signature information is taken out is the terminal basic authorization file.

[0113] Step 303: After the signature information of the terminal authorization file is verified, the terminal basic authorization file is split to obtain the authorization information of the terminal and the encrypted terminal hardware fingerprint information.

[0114] The terminal authorization file signature information verification process can be: the terminal generates the receiving end signature information based on the terminal basic authorization file; compares the receiving end signature information and the terminal authorization file signature information; if the two are consistent, it is determined that the terminal authorization file signature information verification has passed; if the two are inconsistent, it is determined that the terminal authorization file signature information verification has failed.

[0115] The splitting process of step 303 is the reverse process of step 102. The splitting process is similar to the implementation process of step 302, and will not be repeated here.

[0116] Step 304: decrypt the encrypted terminal hardware fingerprint information according to the first terminal decryption key information to obtain the terminal hardware fingerprint information.

[0117] This step is the reverse process of step 101 .

[0118] Step 305: After the authorization information of the terminal is verified and the terminal hardware fingerprint information is verified, the original uploaded data is collected from the Internet of Things.

[0119] Optionally, the verification process of the terminal hardware fingerprint information may be: comparing the local hardware fingerprint information with the received terminal hardware fingerprint information to verify whether they are consistent; if they are consistent, determining that the terminal hardware fingerprint information verification has passed; if they are inconsistent, determining that the terminal hardware fingerprint information verification has failed.

[0120] Optionally, the verification process for the authorization information of the terminal can be: comparing whether the pre-acquired authorization indication information matches the received authorization information of the terminal; if they match, determining that the authorization information verification of the terminal has passed; if they do not match, determining that the authorization information verification of the terminal has failed.

[0121] In one implementation, the authorization information may include an authorization code. After the authorization information of the terminal is verified and the terminal hardware fingerprint information is verified, it means that the terminal can use the authorization code to communicate normally with the server, and then the terminal collects the original upload data from the Internet of Things and prepares to send data to the server.

[0122] In another implementation, the authorization information may include a software license. After the authorization information of the terminal is verified and the terminal hardware fingerprint information is verified, it means that the terminal can use the software license to run the software normally, and based on the software, collect original uploaded data and communicate normally with the server. Then, the terminal collects original uploaded data from the Internet of Things through the software and prepares to send data to the server.

[0123] Optionally, the terminal may save the authorization information locally so that it can operate normally even when disconnected from the server. After the communication between the terminal and the server is restored, the terminal may send a re-authorization request to the server to automatically update the authorization information. After receiving the re-authorization request, the server may perform steps 101 to 106. After receiving the updated permission information, the terminal may integrate it with the locally saved authorization information and operate according to the integrated authorization information.

[0124] Optionally, the terminal may also send a re-authorization request to the server after the authorization period expires to achieve automatic renewal of the authorization information. After receiving the re-authorization request, the server may perform steps 101 to 106.

[0125] Optionally, the terminal may send a heartbeat packet to the server to indicate its online status.

[0126] Optionally, in order to achieve more refined control, the authorization information of the terminal includes at least one of the following: terminal function authorization information, terminal data authorization information, and terminal authorization period. When collecting original uploaded data from the Internet of Things, it is implemented in the following manner: according to the terminal function authorization information, determine the authorized function of the terminal; according to the terminal data authorization information, determine the authorized data type of the terminal; within the terminal authorization period, collect the original uploaded data that conforms to the authorized data type from the Internet of Things through the collection function that conforms to the authorized function. This implementation method can achieve more refined control of the terminal and further improve the security of communication.

[0127] Step 306: Generate target upload data according to the pre-generated second terminal encryption key information and the original upload data, and send the target upload data to the server.

[0128] In one implementation, target upload data is generated in the following manner: original upload data is encrypted according to second terminal encryption key information to obtain basic upload data; upload data signature information is obtained according to the second terminal encryption key information and the basic upload data; and the basic upload data and the upload data signature information are combined to obtain target upload data.

[0129] This implementation method processes the original uploaded data through an encryption and a signature process to obtain the target uploaded data. The integrity of the basic uploaded data is guaranteed through the signature process, and the difficulty of cracking the basic uploaded data is increased through the encryption process. Therefore, this implementation method ensures the security of the original uploaded data and further improves the security of data communication in the Internet of Things.

[0130] When merging the basic uploaded data and the uploaded data signature information, the implementation process of the merging algorithm is similar to that described above and will not be repeated here.

[0131] Optionally, when the original uploaded data is encrypted according to the second terminal encryption key information to obtain the basic uploaded data, the following steps may be included: encrypting the original uploaded data according to the second terminal encryption key information to obtain intermediate uploaded data; adding randomly generated interference data to the intermediate uploaded data to obtain basic uploaded data, so as to further improve the security of data communication.

[0132] In another implementation, the target upload data is generated in the following manner: the original upload data is encrypted according to the second terminal encryption key information to obtain the target upload data.

[0133] The data communication method in the Internet of Things provided by this embodiment, on the one hand, adds the terminal hardware fingerprint information to the terminal target authorization file, strengthens the control of the terminal, so that the terminals that can communicate with the server are all controlled terminals, and improves the security of data communication. On the other hand, when verifying the terminal target authorization file, the integrity of the terminal basic authorization file is verified by the terminal authorization file signature information, and the authorization information of the terminal is obtained after secondary decryption. The terminal target authorization file has strong anti-tampering ability and high cracking difficulty, which avoids the communication between uncontrolled terminals and the server, and further improves the security of data communication. On the other hand, the target uploaded data is the data generated by the terminal after the terminal target authorization file is verified, based on the pre-generated second terminal encryption key information and the original uploaded data collected from the Internet of Things, which avoids the original uploaded data from being tampered with, and further improves the security of data communication.

[0134] Figure 4 1 is a flow chart of another data communication method in the Internet of Things provided by an embodiment of the present invention. Figure 3 Based on the illustrated embodiment and various optional implementations, other steps included in the data communication method are described in detail. Figure 4 As shown, the data communication method provided by this embodiment further includes the following steps after the authorization information of the terminal is verified and the hardware fingerprint information of the terminal is verified.

[0135] Step 401: Send a query request to the server.

[0136] The query request is used to indicate the type of data to be queried.

[0137] Step 401 corresponds to step 201, and the specific implementation process will not be repeated here.

[0138] Step 402: Receive target query data sent by the server.

[0139] Step 402 corresponds to step 206, and the specific implementation process will not be repeated here.

[0140] Step 403: Split the target query data to obtain basic query data and query data signature information.

[0141] Step 403 corresponds to step 205, and the specific implementation process will not be repeated here.

[0142] Step 404: after the query data signature information is verified, the basic query data is decrypted according to the first terminal decryption key information to obtain original query data matching the type of data to be queried.

[0143] The data communication method provided in this embodiment can enable the terminal to query data from the server. Optionally, this embodiment can also include step 305 and step 306, that is, to achieve two-way communication between the server and the terminal.

[0144] The data communication method in the Internet of Things provided by this embodiment processes the original query data through a one-time encryption and one-time signing process to obtain target query data, so that the terminal can verify the integrity of the basic query data according to the query data signature information, and decrypt the basic query data according to the local first terminal decryption key information to obtain the original query data, which not only ensures the integrity of the basic query data, but also increases the difficulty of cracking the basic query data. Therefore, this implementation method ensures the security of the original query data and further improves the security of data communication in the Internet of Things.

[0145] Figure 5 1 is a schematic diagram of the structure of a data communication device in the Internet of Things provided by an embodiment of the present invention. The data communication device is arranged in a server. Figure 5 As shown, the data communication device in the Internet of Things provided by this embodiment includes the following modules: a first encryption module 51, a first merging module 52, a first signature module 53, a second merging module 54, a second encryption module 55 and a sending and receiving module 56.

[0146] The first encryption module 51 is used to encrypt the terminal hardware fingerprint information according to the pre-generated first terminal encryption key information to obtain the encrypted terminal hardware fingerprint information.

[0147] The first merging module 52 is used to merge the encrypted terminal hardware fingerprint information and the terminal authorization information to obtain a terminal basic authorization file.

[0148] The first signature module 53 is used to generate terminal authorization file signature information according to the first terminal encryption key information and the terminal basic authorization file.

[0149] The second merging module 54 is used to merge the terminal authorization file signature information and the terminal basic authorization file to obtain a terminal signature authorization file.

[0150] The second encryption module 55 is used to encrypt the terminal signature authorization file according to the first terminal encryption key information to obtain a terminal target authorization file.

[0151] The sending and receiving module 56 is used to send the terminal target authorization file to the terminal and receive the target upload data sent by the terminal.

[0152] The target uploaded data is data generated by the terminal according to the pre-generated second terminal encryption key information and the original uploaded data collected from the Internet of Things after the terminal has verified the terminal target authorization file.

[0153] In one embodiment, the device further includes: a first splitting module and a first decryption module.

[0154] The first splitting module is used to split the target uploaded data to obtain basic uploaded data and uploaded data signature information.

[0155] The first decryption module is used to decrypt the basic uploaded data according to the pre-generated second terminal decryption key information to obtain the original uploaded data after the uploaded data signature information is verified, wherein the second terminal decryption key information and the second terminal encryption key information form a key pair.

[0156] In one embodiment, the sending and receiving module 56 is further used to receive a query request sent by the terminal. The query request is used to indicate the type of data to be queried. The device also includes an acquisition module, a third encryption module, a second signature module and a third merging module.

[0157] The acquisition module is used to acquire original query data matching the type of data to be queried according to the query request.

[0158] The third encryption module is used to encrypt the original query data according to the first terminal encryption key information to obtain basic query data.

[0159] The second signature module is used to obtain query data signature information according to the first terminal encryption key information and the basic query data.

[0160] The third merging module is used to merge the basic query data and the query data signature information to obtain target query data.

[0161] The sending and receiving module 56 is further used to send the target query data to the terminal.

[0162] In one embodiment, the sending and receiving module 56 is further used to receive the first server target authorization file. The device also includes: a second decryption module, a second splitting module, a third splitting module, a third decryption module and a determination module.

[0163] The second decryption module is used to decrypt the first server target authorization file according to the pre-generated first server decryption key information to obtain the first server signed authorization file.

[0164] The second splitting module is used to split the first server signature authorization file to obtain the first server authorization file signature information and the first server basic authorization file.

[0165] The third splitting module is used to split the first server basic authorization file after the signature information of the first server authorization file is verified, to obtain the first server authorization information and the encrypted first server hardware fingerprint information.

[0166] The third decryption module is used to decrypt the encrypted first server hardware fingerprint information according to the first server decryption key information to obtain the first server hardware fingerprint information.

[0167] The determination module is used to determine the steps to be executed by the first encryption module 51 after the hardware fingerprint information of the first server is verified and the authorization information of the first server is verified.

[0168] In one embodiment, the authorization information of the terminal includes at least one of the following: terminal function authorization information, terminal data authorization information, and terminal authorization period. The original uploaded data is data collected from the Internet of Things by the terminal through a collection function within the terminal authorization period, and the original uploaded data is data that conforms to the type of authorized data indicated by the terminal data authorization information. Among them, the collection function is a function that conforms to the authorized function indicated by the terminal function authorization information.

[0169] The data communication device in the Internet of Things provided by the embodiment of the present invention can execute the data communication method in the Internet of Things provided by any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of the execution method.

[0170] Figure 6 1 is a schematic diagram of the structure of another data communication device in the Internet of Things provided by an embodiment of the present invention. The data communication device is arranged in a terminal. Figure 6 As shown, the data communication device in the Internet of Things provided by this embodiment includes the following modules: a first decryption module 61, a first splitting module 62, a second splitting module 63, a second decryption module 64, a collection module 65 and a generation and sending module 66.

[0171] The first decryption module 61 is used to decrypt the terminal target authorization file according to the pre-generated first terminal decryption key information to obtain the terminal signature authorization file.

[0172] The first terminal encryption key information and the first terminal decryption key information are a key pair.

[0173] The first splitting module 62 is used to split the terminal signature authorization file to obtain the terminal authorization file signature information and the terminal basic authorization file.

[0174] The second splitting module 63 is used to split the terminal basic authorization file after the signature information of the terminal authorization file is verified, to obtain the terminal authorization information and the encrypted terminal hardware fingerprint information.

[0175] The second decryption module 64 is used to decrypt the encrypted terminal hardware fingerprint information according to the first terminal decryption key information to obtain the terminal hardware fingerprint information.

[0176] The collection module 65 is used to collect the original uploaded data from the Internet of Things after the authorization information of the terminal is verified and the hardware fingerprint information of the terminal is verified.

[0177] The generating and sending module 66 is used to generate target upload data according to the pre-generated second terminal encryption key information and the original upload data, and send the target upload data to the server.

[0178] In one embodiment, in terms of generating target uploaded data based on pre-generated second terminal encryption key information and the original uploaded data, the generating and sending module 66 is specifically used to: encrypt the original uploaded data based on the second terminal encryption key information to obtain basic uploaded data; obtain uploaded data signature information based on the second terminal encryption key information and the basic uploaded data; and merge the basic uploaded data and the uploaded data signature information to obtain the target uploaded data.

[0179] In one embodiment, the device further includes: a receiving module, a third splitting module and a third decryption module.

[0180] The generating and sending module 66 is also used to send a query request to the server.

[0181] The query request is used to indicate the type of data to be queried.

[0182] The receiving module is used to receive the target query data sent by the server.

[0183] The third splitting module is used to split the target query data to obtain basic query data and query data signature information.

[0184] The third decryption module is used to decrypt the basic query data according to the first terminal decryption key information after the query data signature information is verified, so as to obtain original query data matching the type of data to be queried.

[0185] In one embodiment, the authorization information of the terminal includes at least one of the following: terminal function authorization information, terminal data authorization information, and terminal authorization period. The acquisition module 65 is specifically used to: determine the authorized function of the terminal according to the terminal function authorization information; determine the authorized data type of the terminal according to the terminal data authorization information; and within the terminal authorization period, collect the original uploaded data that conforms to the authorized data type from the Internet of Things through the acquisition function that conforms to the authorized function.

[0186] The data communication device in the Internet of Things provided by the embodiment of the present invention can execute the data communication method in the Internet of Things provided by any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of the execution method.

[0187] Figure 7 It is a structural schematic diagram of an electronic device that implements the data communication method in the Internet of Things of an embodiment of the present invention. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workbenches, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present invention described and / or required herein.

[0188] like Figure 7 As shown, the electronic device 10 includes at least one processor 11, and a memory connected to the at least one processor 11, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc., wherein the memory stores a computer program that can be executed by at least one processor, and the processor 11 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 12 or the computer program loaded from the storage unit 18 to the random access memory (RAM) 13. In the RAM 13, various programs and data required for the operation of the electronic device 10 can also be stored. The processor 11, the ROM 12, and the RAM 13 are connected to each other through a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0189] A number of components in the electronic device 10 are connected to the I / O interface 15, including: an input unit 16, such as a keyboard, a mouse, etc.; an output unit 17, such as various types of displays, speakers, etc.; a storage unit 18, such as a disk, an optical disk, etc.; and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0190] The processor 11 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various dedicated artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any appropriate processor, controller, microcontroller, etc. The processor 11 performs the various methods and processes described above, such as a data communication method in the Internet of Things.

[0191] In some embodiments, the data communication method in the Internet of Things may be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as a storage unit 18. In some embodiments, part or all of the computer program may be loaded and / or installed on the electronic device 10 via the ROM 12 and / or the communication unit 19. When the computer program is loaded into the RAM 13 and executed by the processor 11, one or more steps of the data communication method in the Internet of Things described above may be performed. Alternatively, in other embodiments, the processor 11 may be configured to perform the data communication method in the Internet of Things in any other appropriate manner (e.g., by means of firmware).

[0192] Various implementations of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various implementations can include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0193] Computer programs for implementing the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other device, so that when the computer program is executed by the processor, the functions / operations specified in the flow chart and / or block diagram are implemented. The computer program may be executed entirely on the machine, partially on the machine, partially on the machine and partially on a remote machine as a stand-alone software package, or entirely on a remote machine or server.

[0194] In the context of the present invention, a computer-readable storage medium may be a tangible medium that may contain or store a computer program for use by or in conjunction with an instruction execution system, device, or equipment. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices, or equipment, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0195] To provide interaction with a user, the systems and techniques described herein may be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or trackball) through which the user can provide input to the electronic device. Other types of devices may also be used to provide interaction with the user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form (including acoustic input, voice input, or tactile input).

[0196] The systems and techniques described herein may be implemented in a computing system that includes backend components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes frontend components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such backend components, middleware components, or frontend components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.

[0197] A computing system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The client and server relationship is generated by computer programs running on the corresponding computers and having a client-server relationship with each other. The server may be a cloud server, also known as a cloud computing server or cloud host, which is a host product in the cloud computing service system to solve the defects of difficult management and weak business scalability in traditional physical hosts and VPS services.

[0198] An embodiment of the present invention further provides a computer program product, including a computer program, which, when executed by a processor, implements the data communication method in the Internet of Things provided by any embodiment of the present invention.

[0199] In the process of implementation, the computer program product can be written in one or more programming languages ​​or a combination thereof to perform the computer program code of the present invention, including object-oriented programming languages, such as Java, Smalltalk, C++, and conventional procedural programming languages, such as "C" language or similar programming languages. The program code can be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer can be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or can be connected to an external computer (for example, using an Internet service provider to connect through the Internet).

[0200] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps described in the present invention can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solution of the present invention can be achieved, and this document does not limit this.

[0201] The above specific implementations do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A data communication method in the Internet of Things, characterized in that: Applicable to servers, including: Encrypt the terminal hardware fingerprint information according to the pre-generated first terminal encryption key information to obtain the encrypted terminal hardware fingerprint information; Combining the encrypted terminal hardware fingerprint information and the terminal authorization information to obtain a terminal basic authorization file; Generate terminal authorization file signature information according to the first terminal encryption key information and the terminal basic authorization file; Merging the terminal authorization file signature information and the terminal basic authorization file to obtain a terminal signature authorization file; Encrypt the terminal signature authorization file according to the first terminal encryption key information to obtain a terminal target authorization file; Send the terminal target authorization file to the terminal, and receive the target uploaded data sent by the terminal; wherein the target uploaded data is data generated by the terminal according to the pre-generated second terminal encryption key information and the original uploaded data collected from the Internet of Things after the terminal verifies the terminal target authorization file.

2. The method according to claim 1, characterized in that The method further comprises: Splitting the target uploaded data to obtain basic uploaded data and uploaded data signature information; After the uploaded data signature information is verified, the basic uploaded data is decrypted according to the pre-generated second terminal decryption key information to obtain the original uploaded data; wherein the second terminal decryption key information and the second terminal encryption key information form a key pair.

3. The method according to claim 1, characterized in that After sending the terminal target authorization file to the terminal, the method further includes: Receiving a query request sent by the terminal; wherein the query request is used to indicate the type of data to be queried; According to the query request, obtaining original query data matching the type of data to be queried; Encrypting the original query data according to the first terminal encryption key information to obtain basic query data; Obtaining query data signature information according to the first terminal encryption key information and the basic query data; Merging the basic query data and the query data signature information to obtain target query data; The target query data is sent to the terminal.

4. The method according to any one of claims 1 to 3, characterized in that: Before encrypting the terminal hardware fingerprint information according to the pre-generated first terminal encryption key information to obtain the encrypted terminal hardware fingerprint information, the method further includes: receiving a first server target authorization file; Decrypt the first server target authorization file according to the pre-generated first server decryption key information to obtain the first server signed authorization file; Splitting the first server signature authorization file to obtain the first server authorization file signature information and the first server basic authorization file; After the signature information of the first server authorization file is verified, the first server basic authorization file is split to obtain the first server authorization information and the encrypted hardware fingerprint information of the first server; Decrypting the encrypted first server hardware fingerprint information according to the first server decryption key information to obtain the first server hardware fingerprint information; After the first server hardware fingerprint information is verified and the first server authorization information is verified, determine to execute the step of "encrypting the terminal hardware fingerprint information according to the pre-generated first terminal encryption key information to obtain the encrypted terminal hardware fingerprint information".

5. The method according to any one of claims 1 to 3, characterized in that: The authorization information of the terminal includes at least one of the following: terminal function authorization information, terminal data authorization information, and terminal authorization period; The original uploaded data is data collected from the Internet of Things by the terminal through the collection function within the terminal authorization period, and the original uploaded data is data that complies with the authorized data type indicated by the terminal data authorization information; wherein the collection function is a function that complies with the authorized function indicated by the terminal function authorization information.

6. A data communication method in the Internet of Things, characterized in that: Applied to terminals, including: Decrypt the terminal target authorization file according to the pre-generated first terminal decryption key information to obtain a terminal signature authorization file; wherein the first terminal encryption key information and the first terminal decryption key information are a key pair; Splitting the terminal signature authorization file to obtain terminal authorization file signature information and terminal basic authorization file; After the signature information of the terminal authorization file is verified, the terminal basic authorization file is split to obtain the authorization information of the terminal and the encrypted terminal hardware fingerprint information; Decrypting the encrypted terminal hardware fingerprint information according to the first terminal decryption key information to obtain the terminal hardware fingerprint information; After the authorization information of the terminal is verified and the hardware fingerprint information of the terminal is verified, collecting the original uploaded data from the Internet of Things; Generate target upload data according to the pre-generated second terminal encryption key information and the original upload data, and send the target upload data to the server.

7. The method according to claim 6, characterized in that The generating target upload data according to the pre-generated second terminal encryption key information and the original upload data includes: Encrypting the original uploaded data according to the second terminal encryption key information to obtain basic uploaded data; Obtaining upload data signature information according to the second terminal encryption key information and the basic upload data; The basic uploaded data and the uploaded data signature information are combined to obtain the target uploaded data.

8. The method according to claim 6 or 7, characterized in that: After the authorization information of the terminal is verified and the hardware fingerprint information of the terminal is verified, the method further includes: Sending a query request to the server; wherein the query request is used to indicate the type of data to be queried; Receiving target query data sent by the server; Splitting the target query data to obtain basic query data and query data signature information; After the query data signature information is verified, the basic query data is decrypted according to the first terminal decryption key information to obtain original query data matching the type of data to be queried.

9. The method according to claim 6 or 7, characterized in that: The authorization information of the terminal includes at least one of the following: terminal function authorization information, terminal data authorization information, and terminal authorization period; The collecting of original uploaded data from the Internet of Things includes: Determining the authorized function of the terminal according to the terminal function authorization information; Determining the authorized data type of the terminal according to the terminal data authorization information; During the authorization period of the terminal, the original uploaded data that conforms to the authorized data type is collected from the Internet of Things through a collection function that conforms to the authorized function.

10. An electronic device, characterized in that: The electronic device comprises: at least one processor; and a memory communicatively connected to the at least one processor; wherein, The memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the data communication method in the Internet of Things according to any one of claims 1 to 9.

Images