Identity authentication method and device of networking equipment, electronic equipment and storage medium

Abstract

The invention discloses an identity authentication method and device of networking equipment, electronic equipment and a storage medium, and relates to the technical field of Internet of Things communication, and the method comprises the steps: registering the networking equipment according to a registration request sent by the networking equipment, and storing registration information corresponding to the registration request in an equipment network space; after registration in the networking device and the device network space is completed, an authentication request sent by the networking device is authenticated according to registration information, an authentication result of the networking device is obtained, and authentication information of the networking device is stored in the device network space; and verifying the authentication information according to the historical authentication record in the equipment network space, and storing a verification result in the equipment network space after verification. According to the method, distributed network storage is adopted, so that the historical traceability and tamper-proofing performance of the authentication process are enhanced, and the security of related authentication data of the networking equipment in the identity authentication process is ensured.

Description

Technical Field

[0001] The present application relates to the field of Internet of Things communication technology, and in particular to an identity authentication method, device, electronic device and storage medium for networking equipment. Background Art

[0002] In the widespread application of the Internet of Things (IoT) and smart devices, device authentication and management have always been key issues in the security field. Most of the existing authentication methods for networking devices are based on centralized servers or certificate management systems, that is, the authentication information and authentication-related historical records of networking devices are usually stored in centralized servers or certificate management systems. The disadvantage of this method is that centralized storage is vulnerable to attacks, such as man-in-the-middle attacks, tampering, replay attacks, etc. Therefore, it is difficult for the centralized storage architecture to ensure the integrity and security of device identity information.

[0003] Therefore, how to improve the security of relevant authentication data of networking devices during the identity authentication process is a problem that urgently needs to be solved. Summary of the invention

[0004] The main purpose of this application is to provide an identity authentication method, device, electronic device and storage medium for a networking device, aiming to solve the technical problem of how to improve the security of relevant authentication data during the identity authentication process of the networking device.

[0005] To achieve the above purpose, the present application proposes an identity authentication method for a networking device, the identity authentication method for the networking device comprising:

[0006] Registering the networking device according to the registration request sent by the networking device, and saving the registration information corresponding to the registration request in the device network space, wherein the device network space is composed of the networking devices that have completed the networking;

[0007] After the networking device completes registration in the device network space, the authentication request sent by the networking device is authenticated according to the registration information, an authentication result of the networking device is obtained, and the authentication information of the networking device is stored in the device network space, wherein the authentication information includes the authentication request and the authentication result;

[0008] The authentication information is verified according to the historical authentication records in the device network space, and the verified authentication results are stored in the device network space.

[0009] In one embodiment, the registration request includes a device ID, a device public key, a device type, and a registration timestamp of the networking device, and the step of registering the networking device according to the registration request sent by the networking device includes:

[0010] Generate a unique identifier for the networking device according to the device ID, the device public key, the device type and the registration timestamp to complete the registration of the networking device;

[0011] The unique identifier is returned to the networking device, wherein the unique identifier is used to generate the authentication request in the networking device.

[0012] In one embodiment, the authentication request includes at least signature information of the networking device, wherein the signature information is composed of a device private key, a unique identifier, and a random challenge value received by the networking device, and the step of authenticating the authentication request sent by the networking device according to the registration information to obtain the authentication result of the networking device includes:

[0013] Extracting a device public key of the networking device from the registration information, and verifying the unique identifier and the random challenge value in the signature information by using the device public key, wherein the unique identifier and the random challenge value are encrypted by the device private key;

[0014] If the verification is successful, the authentication result is obtained as authentication success;

[0015] In the case where the verification fails, the authentication result is obtained as authentication failure.

[0016] In one embodiment, the step of verifying the authentication information according to the historical authentication records in the device network space includes:

[0017] Determine a target historical authentication record in the historical authentication record according to the device ID of the networking device, and extract a historical authentication timestamp and a historical authentication result in the target historical authentication record;

[0018] Verifying the authentication request in the authentication information based on the historical authentication timestamp to obtain an authentication request verification result;

[0019] Verifying the authentication result in the authentication information based on the historical authentication result to obtain an authentication result verification result;

[0020] In the case that both the authentication request verification result and the authentication result verification result are verification passed, the verification result is obtained as verification passed;

[0021] In the case that any one of the authentication request verification result and the authentication result verification result is verification failure, the verification result is obtained as verification failure.

[0022] In one embodiment, the step of verifying the authentication request in the authentication information based on the historical authentication timestamp to obtain the authentication request verification result includes:

[0023] Obtaining an authentication timestamp in the authentication request, and calculating a difference between the authentication timestamp and the historical authentication timestamp;

[0024] When the difference is less than or equal to the preset time interval, the authentication request verification result is obtained as verification passed;

[0025] When the difference is greater than the preset time interval, the authentication request verification result is obtained as verification failure.

[0026] In one embodiment, the step of verifying the authentication result in the authentication information based on the historical authentication result to obtain the authentication result verification result includes:

[0027] Comparing the historical authentication result with the authentication result;

[0028] When the historical authentication result is consistent with the authentication result, the authentication result verification result is obtained as verification passed;

[0029] In the case where the historical authentication result is inconsistent with the authentication result, the authentication result verification result is obtained as verification failure.

[0030] In one embodiment, during the registration process of the networking device, a registration tracing record of the networking device is generated, wherein the registration tracing record at least includes a unique identifier and a registration timestamp of the networking device; during the authentication process of the networking device, an authentication tracing record of the networking device is generated, wherein the authentication tracing record at least includes a unique identifier and an authentication timestamp of the networking device; during the verification process of the authentication information of the networking device, a verification tracing record of the networking device is generated, wherein the verification tracing record at least includes a unique identifier and an authentication timestamp of the networking device;

[0031] The identity authentication method of the networking device also includes:

[0032] In response to a query request for verifying the identity authentication process of the networking device, obtaining a target device ID and a query time range of the query request;

[0033] According to the target device ID and the query time range, the registration tracing record, the authentication tracing record and the verification tracing record are determined in each registration tracing record, each authentication tracing record and each verification tracing record in the device network space, wherein the target device ID corresponds to a unique identifier in the registration tracing record, the authentication tracing record and the verification tracing record, and the query time range includes the registration timestamp and the authentication timestamp.

[0034] In addition, to achieve the above purpose, the present application also proposes an identity authentication device for a networking device, the identity authentication device for the networking device comprising:

[0035] A registration module, used to register the networking device according to the registration request sent by the networking device, and save the registration information corresponding to the registration request in the device network space, wherein the device network space is composed of the networking devices that have completed the networking;

[0036] an authentication module, configured to authenticate the authentication request sent by the networking device according to the registration information after the networking device completes registration in the device network space, obtain the authentication result of the networking device, and save the authentication information of the networking device in the device network space, wherein the authentication information includes the authentication request and the authentication result;

[0037] The verification module is used to verify the authentication information according to the historical authentication records in the device network space, and save the verified verification results in the device network space.

[0038] In addition, to achieve the above-mentioned purpose, the present application also proposes an electronic device, which includes: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the identity authentication method of the networking device as described above.

[0039] In addition, to achieve the above-mentioned purpose, the present application also proposes a storage medium, which is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by the processor, the steps of the identity authentication method of the networking device as described above are implemented.

[0040] In addition, to achieve the above-mentioned purpose, the present application also provides a computer program product, which includes a computer program, and when the computer program is executed by a processor, it implements the steps of the identity authentication method of the networking device as described above.

[0041] One or more technical solutions proposed in this application have at least the following technical effects:

[0042] The present application first registers the networking device according to the registration request sent by the networking device, and stores the registration information corresponding to the registration request in the device network space. By adopting a distributed storage method, the registration information is stored in the device network space composed of each networking device, which improves the security and reliability of the registration information and reduces the risk of being attacked. After the networking device is registered, the authentication request sent by the networking device is authenticated according to the registration information in the device network space to obtain the authentication result of the networking device, and the authentication information of the networking device is stored in the device network space, so as to authenticate the authentication request within the device network space based on the registration information stored in the device network space. Authentication reduces dependence on external authentication servers and reduces potential security risks in the authentication process; the authentication information is verified according to the historical authentication records in the device network space, and the verified verification results are stored in the device network space. By querying the historical authentication records in the device network space, the current authentication information is verified, which enhances the security of the authentication process. By comparing the historical authentication records, replay attacks and tampering behaviors are effectively prevented, which improves the overall security of identity authentication. The verification results are stored in the device network space, which improves the transparency and traceability of the entire authentication process and further enhances the security of the system.

[0043] In summary, the present application adopts distributed network storage, and saves authentication-related data such as registration information, authentication requests, authentication results, verification results, and historical authentication records in the device network space composed of each networking device participating in the networking. It avoids the single point failure risk, centralized attack surface, and privacy leakage and tampering risks caused by relying on centralized servers for networking device registration, authentication, and verification and other related data processing. At the same time, it enhances the historical traceability and tamper-proofness of the authentication process, and ensures the security of relevant authentication data of networking devices during the identity authentication process. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0045] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0046] Figure 1 A flowchart of the first embodiment of the identity authentication method for the networking device of the present application;

[0047] Figure 2 A flowchart of the second embodiment of the identity authentication method for the networking device of the present application is provided;

[0048] Figure 3 A brief flowchart of the identity authentication method for a networking device provided in Example 2 of the present application;

[0049] Figure 4 This is a schematic diagram of the module structure of the identity authentication device of the networking device of the embodiment of the present application;

[0050] Figure 5 A schematic diagram of the device structure of the hardware operating environment involved in the identity authentication method of the networking device in the embodiment of the present application.

[0051] The purpose, features and advantages of this application will be further described in conjunction with the embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0052] It should be understood that the specific embodiments described herein are only used to explain the technical solutions of the present application and are not used to limit the present application.

[0053] In order to better understand the technical solution of the present application, a detailed description will be given below in conjunction with the accompanying drawings and specific implementation methods.

[0054] The main solution of the embodiment of the present application is: according to the registration request sent by the networking device, register the networking device, and save the registration information corresponding to the registration request in the device network space, wherein the device network space is composed of various networking devices participating in the networking; after the networking device is registered, authenticate the authentication request sent by the networking device according to the registration information in the device network space, obtain the authentication result of the networking device, and save the authentication information of the networking device in the device network space, wherein the authentication information includes the authentication request and the authentication result; verify the authentication information according to the historical authentication record in the device network space, and save the verified verification result in the device network space.

[0055] Since the existing authentication methods for networking devices are mostly based on centralized servers or certificate management systems, that is, the authentication information and authentication-related historical records of networking devices are usually stored in centralized servers or certificate management systems, the disadvantage of this method is that it is vulnerable to attacks after centralized storage, such as man-in-the-middle attacks, tampering, replay attacks, etc. Therefore, it is difficult for the centralized storage architecture to ensure the integrity and security of device identity information. Therefore, how to improve the security of related authentication data of networking devices during the identity authentication process is a problem that needs to be solved urgently.

[0056] The present application provides a solution, which adopts distributed network storage and saves authentication-related data such as registration information, authentication requests, authentication results, verification results, and historical authentication records in a device network space composed of each networking device participating in the networking. It avoids the single point failure risk, centralized attack surface, and privacy leakage and tampering risks caused by relying on a centralized server for related data processing such as networking device registration, authentication, and verification, while enhancing the historical traceability and tamper-proofness of the authentication process, and ensuring the security of relevant authentication data of networking devices during the identity authentication process.

[0057] It should be noted that the execution subject of this embodiment can be a computing service device with data processing, network communication and program running functions, such as a tablet computer, a personal computer, a mobile phone, etc., or an electronic device that can realize the above functions. The following takes an electronic device as an example to illustrate this embodiment and the following embodiments.

[0058] Based on this, the present application embodiment provides an identity authentication method for a networking device, referring to Figure 1 , Figure 1 This is a flow chart of the first embodiment of the identity authentication method for the networking device of the present application.

[0059] In this embodiment, the identity authentication method of the networking device includes steps S10 to S30:

[0060] Step S10, registering the networking device according to the registration request sent by the networking device, and saving the registration information corresponding to the registration request in the device network space, wherein the device network space is composed of the networking devices that have completed the networking;

[0061] It should be noted that a registration request refers to a formal request initiated by a networking device to the network to join the network. The request includes the device ID (Identity document), device public key, device type and registration timestamp of the networking device; registration information refers to the relevant information involved in the registration process of the networking device, including device ID, device public key, device type, registration timestamp, and returned unique identifier and other information; device network space refers to a super device space, that is, a virtualized device network space, which can virtualize multiple physical networking devices into an overall network, similar to a virtual machine cluster in the cloud, and can provide a more efficient management method for devices, unify the management of identity authentication and traceability processes, ensure the integrity and security of device identity information, and prevent information from being tampered with or forged.

[0062] It is understandable that, since in the networking process of IoT devices, the devices need to be formally identified and accepted by the network, performing step S10 can prevent unauthorized devices from joining the current network at will, thereby realizing the formal registration of the device identity, thereby ensuring the reasonable allocation of network resources. At the same time, by adopting a distributed storage method, the registration information is stored in the device network space composed of various networking devices, thereby improving the security and reliability of the registration information and reducing the risk of attacks.

[0063] In a feasible implementation manner, the registration request includes the device ID, device public key, device type and registration timestamp of the networking device. The step of registering the networking device according to the registration request sent by the networking device in step S10 may include steps S11 to S12:

[0064] Step S11, generating a unique identifier of the networking device according to the device ID, the device public key, the device type and the registration timestamp to complete the registration of the networking device;

[0065] It should be noted that the device public key refers to the public key generated by the networking device, which is used for identity authentication and data encryption; the device type refers to the specific type information of the networking device, such as sensor, gateway, etc.; the registration timestamp refers to the time when the networking device submits the registration request; the unique identifier refers to a string generated by processing the device ID, device public key, device type and registration timestamp based on the hash algorithm, which is used to uniquely identify the device in the networking device. The hash algorithm can be SHA-256 or SHA-3, etc., which can ensure that the generated unique identifier is unpredictable and unique.

[0066] It is understandable that since there are usually situations where device identities are confused or forged, step S11 is performed to create an unalterable and globally unique identity for each device, i.e., a unique identifier, which can avoid the problems of device identity confusion and forgery of device identities, thereby achieving the uniqueness of the device in the network and providing an effective traceability basis for achieving the traceability of the device authentication process.

[0067] Step S12: Return the unique identifier to the networking device, wherein the unique identifier is used to generate the authentication request in the networking device.

[0068] It is understandable that since the networking device needs to use this unique identifier to generate an authentication request in order to perform identity authentication in the network, performing step S12 can avoid the problem that the device lacks a valid identity when generating an authentication request, which may lead to authentication failure or reduced security, thereby ensuring the security and effectiveness of the authentication process, and further improving the overall security of the network.

[0069] In this implementation, a unique identifier for the networking device is generated by combining the device ID, device public key, device type and registration timestamp, and the unique identifier is returned to the networking device for generating an authentication request. This avoids the problem of the authentication process being obstructed due to the inability to accurately identify the device identity, achieves unique identity identification of the device in the network, and ensures the integrity and reliability of the authentication request.

[0070] Step S20, after the networking device completes registration in the device network space, authenticate the authentication request sent by the networking device according to the registration information, obtain the authentication result of the networking device, and save the authentication information of the networking device in the device network space, wherein the authentication information includes the authentication request and the authentication result;

[0071] It should be noted that an authentication request refers to a request sent by a networking device to obtain network access rights, which contains the device's unique identifier, signature information and authentication timestamp; authentication information refers to relevant information involved in the authentication process of the networking device, including the networking device's unique identifier, authentication timestamp, random challenge value and authentication results.

[0072] It can be understood that since the device needs to perform identity authentication when accessing network resources, performing step S20 can prevent unauthenticated devices from accessing network resources, thereby achieving control over device access and improving security. At the same time, by performing authentication within the device network space, it reduces dependence on external authentication servers and reduces potential security risks in the authentication process.

[0073] In a feasible implementation manner, the authentication request includes at least signature information of the networking device, wherein the signature information is composed of a device private key, a unique identifier, and a random challenge value received by the networking device. The step of authenticating the authentication request sent by the networking device according to the registration information in step S20 may include steps S21 to S23:

[0074] Step S21, extracting the device public key of the networking device from the registration information, and verifying the unique identifier and the random challenge value in the signature information by using the device public key, wherein the unique identifier and the random challenge value are encrypted by the device private key;

[0075] It should be noted that the device private key in the signature information refers to the private key held by the networking device, which is used to sign the authentication request; the random challenge value in the signature information is generated and returned in the authentication server in the device network space to prevent replay attacks. The authentication server ensures that each authentication request is unique by issuing a random challenge value to the device to prevent attackers from forging requests or reusing previous authentication information.

[0076] It can be understood that since it is necessary to ensure that the authentication request is issued by a networking device that holds the corresponding private key, that is, to verify the authenticity of the device and the integrity of the request, step S21 is performed to avoid malicious devices or unauthorized devices from forging authentication requests, as well as the problem of authentication requests being tampered with during transmission. By verifying the signature with the public key, the reliability of the source of the authentication request and the fact that the data has not been tampered with are ensured, thereby enhancing the security of device authentication.

[0077] Step S22, if the verification is successful, the authentication result is obtained as authentication success;

[0078] It can be understood that after the public key verification signature information is successful, it is necessary to determine the legitimacy of the device identity and allow the device to access network resources, so step S22 is performed to avoid legitimate devices being erroneously denied access to network resources due to authentication failure. By correctly identifying and allowing legitimate devices to access the network, the network availability and normal operation of the equipment are guaranteed.

[0079] Step S23: If the verification fails, the authentication result is obtained as authentication failure.

[0080] It is understandable that since it is necessary to reject the device's authentication request after the public key verification signature information fails to prevent illegal devices from accessing the network, performing step S23 can avoid illegal devices or tampered requests from successfully passing the authentication, leading to potential security threats and resource abuse problems. By preventing illegal devices from accessing the network, network resources are protected from unauthorized access, thereby improving the overall security of the network.

[0081] In this implementation, by extracting the device public key in the device network space and using the public key to verify the signature information, the problem of device identity forgery and authentication request tampering is avoided, and the legitimacy of the device identity and the integrity of the authentication request are ensured. If the verification is successful, the result of authentication success is obtained, and the network access rights of the legitimate device are guaranteed; if the verification is not successful, the result of authentication failure is obtained, and the network access rights of the illegal device are prevented, thereby improving the security and reliability of the Internet of Things.

[0082] Step S30, verifying the authentication information according to the historical authentication records in the device network space, and storing the verified verification results in the device network space.

[0083] It should be noted that historical authentication records refer to the records of authentication performed by the authentication server in the device network space over a period of time in the past, including historical authentication requests and historical authentication results.

[0084] It is understandable that in order to ensure the continuity and tamper-proofness of the authentication process, step S30 is performed. By comparing historical authentication records, replay attacks and tampering behaviors are effectively prevented, the overall security of identity authentication is improved, and the verification results are saved in the device network space, which improves the transparency and traceability of the entire authentication process and further enhances the security of the system.

[0085] In a feasible implementation manner, the step of verifying the authentication information according to the historical authentication records in the device network space in step S30 may include steps S31 to S35:

[0086] Step S31, determining a target historical authentication record in the historical authentication record according to the device ID of the networking device, and extracting a historical authentication timestamp and a historical authentication result in the target historical authentication record;

[0087] It should be noted that the target historical authentication record refers to the authentication record saved by the networking device during the previous authentication process; the historical authentication timestamp refers to the time stamp recorded when the networking device performed authentication at a certain point in the past (the moment of the previous authentication), which is used to identify the moment when the authentication occurred; the historical authentication result refers to the result after the authentication request of the networking device was authenticated in a certain authentication process in the past (the previous authentication process), that is, the status of authentication success or authentication failure.

[0088] It is understandable that in order to ensure that multiple authentication requests by the device within a certain period of time are reasonable, step S31 is performed to extract the historical authentication timestamp and historical authentication results in the target historical authentication record, thereby providing a reliable identification basis for identifying replay attacks.

[0089] Step S32, verifying the authentication request in the authentication information based on the historical authentication timestamp to obtain an authentication request verification result;

[0090] It is understandable that, since it is necessary to check whether the current authentication request is legal in time to prevent replay attacks, step S32 is performed to avoid using outdated authentication requests and ensure the timeliness of the authentication request.

[0091] Step S33, verifying the authentication result in the authentication information based on the historical authentication result to obtain an authentication result verification result;

[0092] It is understandable that since it is necessary to ensure that the current authentication result is consistent with the historical record and prevent the authentication result from being tampered with, step S33 is performed to avoid the acceptance of an erroneous authentication result and ensure the accuracy of the authentication result.

[0093] Step S34, when both the authentication request verification result and the authentication result verification result are verification passed, obtaining the verification result as verification passed;

[0094] It is understandable that in order to confirm that the current authentication request and authentication result are both legal, step S34 is performed, which can achieve legal authentication of the device, thereby ensuring normal access rights of the device.

[0095] Step S35, when any one of the authentication request verification result and the authentication result verification result is verification failure, the verification result is obtained as verification failure.

[0096] It is understandable that in order to ensure that there is no abnormality in the entire authentication process, step S35 is performed to avoid any illegal or tampered authentication requests and results from being accepted, thereby improving the security of the system.

[0097] In this implementation, the authentication information of the networking device is doubly verified by performing timestamp verification and historical record comparison, thereby ensuring the timeliness of the authentication request and the correctness of the authentication result, thereby confirming the legal identity of the device when both the authentication request and the result are verified; if any verification fails, illegal or abnormal authentication is rejected, avoiding the problems of replay attacks and tampering of authentication results, ensuring the safe operation of the Internet of Things and the data security of the equipment, and achieving the effect of ensuring the security and reliability of the device authentication process.

[0098] This embodiment provides an identity authentication method for a networking device, which adopts distributed network storage and saves authentication-related data such as registration information, authentication requests, authentication results, verification results, and historical authentication records in a device network space composed of each networking device participating in the networking. This avoids the single point failure risk and centralized attack surface brought about by relying on a centralized server for related data processing such as networking device registration, authentication, and verification, as well as the risk of privacy leakage and tampering caused by centralized storage. At the same time, it enhances the historical traceability and tamper-proofness of the authentication process, and ensures the security of related authentication data of the networking device during the identity authentication process.

[0099] In a feasible implementation, step S32 may include steps S321 to S323:

[0100] Step S321, obtaining the authentication timestamp in the authentication request, and calculating the difference between the authentication timestamp and the historical authentication timestamp;

[0101] It should be noted that the authentication server does not directly rely on its own current time to verify the timestamp of the authentication request, but implements protection through the record of the historical authentication time of the device, namely the historical authentication timestamp. Therefore, even if there is a certain time asynchrony between the networking device and the authentication server, the authentication server can still ensure the legitimacy and timeliness of the authentication request based on the historical authentication records of the networking device, thereby improving the authentication security of the distributed authentication system.

[0102] It is understandable that since it is necessary to determine the time validity of the current authentication request to prevent outdated or repeated authentication requests from being accepted, step S321 is performed to avoid the inability to correctly identify replay attacks, that is, attackers reuse old authentication information to deceive the system, thereby ensuring that the authentication request is issued within a reasonable time frame, enhancing the time sensitivity and security of the authentication process.

[0103] Step S322, when the difference is less than or equal to the preset time interval, obtaining the authentication request verification result as verification passed;

[0104] It is understandable that since a time window needs to be set, and the authentication requests issued within this window are considered valid, performing step S322 can avoid rejecting legitimate real-time authentication requests, because these requests may arrive slightly later than the expected time due to network delays or other reasons. By allowing authentication requests within the preset time interval to pass verification, the user experience and system availability are guaranteed.

[0105] Step S323: When the difference is greater than a preset time interval, the authentication request verification result is obtained as verification failure.

[0106] It is understandable that since it is necessary to reject authentication requests that exceed the time window to prevent potential attacks or outdated requests, step S323 is performed to avoid accepting authentication requests that may have expired or been tampered with. By rejecting outdated authentication requests, security vulnerabilities and potential security threats are reduced, thereby improving the security of the system.

[0107] In this implementation, by calculating the difference between the timestamp in the authentication request and the historical authentication timestamp, and verifying that the difference is less than or equal to the preset time interval, and failing the verification when the difference is greater than the preset time interval, it is ensured that only authentication requests issued within the most recent period of time will be accepted, avoiding replay attacks, i.e., outdated authentication requests, and ensuring the timeliness of authentication requests, thereby improving the security of device authentication in the Internet of Things environment.

[0108] In a feasible implementation manner, step S33 may include steps S331 to S333:

[0109] Step S331, comparing the historical authentication result with the authentication result;

[0110] It is understandable that since it is necessary to verify the correctness of the current authentication result and ensure the continuity and consistency of the authentication result, step S331 is performed to avoid tampering or misjudgment of the authentication result and prevent security risks caused by erroneous authentication results, thereby ensuring the accuracy and reliability of the authentication result and enhancing the security of the entire authentication process.

[0111] Step S332, when the historical authentication result is consistent with the authentication result, obtaining the authentication result verification result as verification passed;

[0112] It is understandable that since it is necessary to confirm the legitimacy of the authentication result and ensure that the historical authentication status of the device is consistent with the current status, step S332 is performed to avoid erroneously rejecting authentication requests from legitimate devices, improve the availability of the system, and ensure that only legitimate authentication results are accepted.

[0113] Step S333: when the historical authentication result is inconsistent with the authentication result, the authentication result verification result is obtained as verification failure.

[0114] It is understandable that since it is necessary to identify any abnormal situations that are inconsistent with historical records in order to prevent potential attacks or errors, step S333 is performed. By rejecting inconsistent authentication results, it is possible to avoid accepting authentication results that may have been tampered with or forged, thereby reducing security vulnerabilities, improving the security of the system, and preventing unauthorized access and potential security threats.

[0115] In this implementation, by comparing historical authentication results with current authentication results, verification is passed only when the results are consistent, and verification fails when they are inconsistent. This avoids the problem of authentication results being tampered with or forged, thereby ensuring the integrity of the authentication process and the authenticity of the device identity, and improving the security of device authentication in the Internet of Things networking environment.

[0116] Based on the first embodiment of the present application, in the second embodiment of the present application, the same or similar contents as those in the above-mentioned embodiment 1 can be referred to the above introduction, and will not be repeated in the following. Figure 2 , Figure 2 This is a flowchart of the steps of the second embodiment of the identity authentication method for the networking device of the present application.

[0117] During the registration process of the networking device, a registration tracing record of the networking device is generated, wherein the registration tracing record at least includes a unique identifier of the networking device and a registration timestamp; during the authentication process of the networking device, an authentication tracing record of the networking device is generated, wherein the authentication tracing record at least includes a unique identifier of the networking device and an authentication timestamp; during the verification process of the authentication information, a verification tracing record of the networking device is generated, wherein the verification tracing record at least includes a unique identifier of the networking device and an authentication timestamp;

[0118] The identity authentication method of the networking device further includes steps S100 to S200:

[0119] Step S100, in response to a query request for verifying the identity authentication process of the networking device, obtaining a target device ID and a query time range of the query request;

[0120] It should be noted that a query request refers to a request from an operator to verify the identity authentication process of a networking device; the target device ID refers to the identifier of the networking device that needs to be queried and verified; and the query time range refers to the time interval used to screen and locate traceability records of registration, authentication, and verification within a specific time period.

[0121] It is understandable that when the operator needs to verify the identity authentication process of the networking device, it is necessary to locate the specific device and its related records, so step S100 is performed. By obtaining the device ID and time interval used to determine the verification scope, it can avoid the inability to effectively verify specific devices or time periods, thereby improving the transparency and traceability of the networking device identity authentication process, facilitating subsequent security verification and troubleshooting, and thereby improving the security of device identity authentication.

[0122] Step S200: determining the registration tracing record, the authentication tracing record, and the verification tracing record in each registration tracing record, each authentication tracing record, and each verification tracing record in the device network space according to the target device ID and the query time range, wherein the target device ID corresponds to a unique identifier in the registration tracing record, the authentication tracing record, and the verification tracing record, and the query time range includes the registration timestamp and the authentication timestamp.

[0123] It should be noted that registration traceability records refer to recording all relevant information of the registration process of networking devices, including the unique identifier of the networking device, operation type, registration timestamp and detailed registration information; authentication traceability records refer to recording all relevant information of the authentication process of networking devices, including the unique identifier of the networking device, operation type, authentication timestamp, authentication results and detailed authentication information (such as signature information, random challenge value, etc.); verification traceability records refer to recording all relevant information of the verification process of networking devices, including the unique identifier of the networking device, operation type, authentication timestamp, verification results and detailed verification process information.

[0124] It can be understood that since it is necessary to filter out specific records that match the target device ID and query time range from a large number of records, performing step S200 can avoid the inability to efficiently retrieve relevant authentication and registration history records from massive data, ensuring that the authentication and registration history of specific networking devices can be retrieved quickly and accurately, thereby improving the efficiency and accuracy of the authentication verification process.

[0125] In this embodiment, by performing database query and record matching, the problem of being unable to efficiently retrieve and locate the specific device identity authentication process is avoided, and the registration, authentication and verification traceability records related to the specific device ID and time range are quickly and accurately extracted, ensuring the transparency and traceability of the device identity authentication process, while improving the efficiency and accuracy of security verification of the authentication process.

[0126] In a feasible implementation manner, step S200 may further include steps S300 to S500:

[0127] Step S300, verifying the registration traceability record, the authentication traceability record and the verification traceability record based on a preset template;

[0128] It is understandable that, since the traceability records may often be missing during the verification process, step S300 is performed to perform integrity verification on the traceability records of each stage of identity authentication through preset targets, so that the missing traceability records can be discovered in time, thereby ensuring that each operation will generate a corresponding traceability record, thereby ensuring the integrity of the traceability record.

[0129] Step S400, when the verification is passed, returning the registration tracing record, the authentication tracing record and the verification tracing record;

[0130] Step S500: if the verification fails, output a warning of missing traceability records.

[0131] In this implementation, by verifying the integrity of the registration traceability record, the authentication traceability record, and the verification traceability record, it is ensured that the missing traceability record can be discovered in a timely manner, thereby ensuring that corresponding traceability records are generated at each stage of identity authentication for user query, thereby further improving the security of device identity authentication.

[0132] For example, in order to help understand the implementation process of the identity authentication method of the networking device obtained by combining this embodiment with the above-mentioned embodiment 1, please refer to Figure 3 , Figure 3 A brief flow chart of an identity authentication method for a networking device is provided, specifically:

[0133] During the registration process of the networking device, that is, when the networking device first accesses the super device space (device network space), it raises a device registration request R_i to the authentication server in the device network space: Ri = {Di, PKi, Ti, TS_{reg}}, where Di is the device ID, PKi is the device public key, Ti is the device type, and TS_{reg} is the registration timestamp. After receiving the registration request, the authentication server will generate a unique identifier UID_i for the networking device based on the device ID, device public key, device type and registration timestamp: UIDi = H (Di||PKi||Ti||TS{reg}), where H() is a hash function used to generate a unique identifier. At this time, the authentication server stores the device's registration information {UID_i, D_i, PK_i, T_i, TS_{reg}} in the super device space, and generates a registration trace record Trace_{reg} for the networking device: Trace{reg}={UIDi,"Register", TS_{reg},\text{RegDetails}}, which is used to record the device's initial registration information, where "Register" is the operation type and RegDetails contains detailed registration information. After that, the authentication server returns the networking device's unique identifier UID_i to the device for subsequent authentication processes.

[0134] During the authentication process of the networking device, the networking device initiates an authentication request AR_i to the authentication server: ARi = {UIDi, Sign(SKi, UIDi||Ci), TS{auth}}, where Sign(SK_i,...) is the signature information of the signature operation using the device private key, and C_i is the random challenge value generated by the authentication server. Then, the authentication server extracts UID_i from the authentication request, searches for the registration information corresponding to the UID_i in the super device space, including PK_i, and uses the device public key to verify the validity of the signature information: Verify(PKi, Sign(SKi, UIDi||Ci))\rightarrow\text{True / False}, indicating that the authentication results are respectively True for successful authentication and False for failed authentication. Successful authentication indicates that the device identity is legal, and failed authentication indicates that the device identity is illegal. After that, the authentication server stores the device's authentication information {UID_i, TS_{auth}, C_i, Result_i} in the super device space, and generates the device's authentication traceability record Trace_{auth}: Trace{auth}={UIDi,"Authenticate", TS{auth}, Resulti, \text{AuthDetails}}, which is used to record the authentication request and authentication result, where "Authenticate" is the operation type, and AuthDetails contains detailed authentication request information, such as signature information, random challenge value, etc. If the authentication is successful, the device is allowed to access the network; otherwise, the device access request is rejected, and the detailed information of the authentication failure is recorded in the super device space.

[0135] During the verification process of networking devices, the authentication server searches for historical authentication records related to D_i in the super device space and extracts matching authentication requests and authentication results. The authentication server then compares the authentication timestamp TS_{auth} of the current authentication request with the timestamp TS_{prev} of the historical record: |TS{auth}-TS{prev}|\leq\Delta T to ensure time consistency, where TS_{prev} is the timestamp of the previous successful authentication, i.e., the historical timestamp, |TS{auth}-TS{prev}| represents the difference between the authentication timestamp and the historical timestamp, and Delta T is the allowed time interval, i.e., the preset time interval. At the same time, check whether the authentication result Result_i of the current device is consistent with the historical authentication result in the historical authentication record to ensure that the authentication information of the device is legal. If all conditions are met, the authentication is successful and a verification result Verification_i=True is generated; otherwise, Verification_i=False is generated, and the verification result is recorded in the super device space, and a verification trace record Trace_{verify} is generated: Trace{verify}={UIDi,"Verify",TS{auth},Verificationi,\text{VerifyDetails}}, where "Verify" is the operation type and VerifyDetails contains detailed verification process information.

[0136] During the query process of the networking device identity authentication process, the administrator initiates a query request Q_i to the super device space through the query module: Qi={Di, T{start}, T{end}}, where Di is the target device ID, T_{start} and T_{end} are the start and end times of the time range, that is, the query time range. After receiving the query request, the super device space node returns all authentication records and traceability information of the specified device within the time range T_{range}, including UID_i, TS_{auth}, Result_i, Trace_{auth}, Trace_{verify}, etc. Therefore, the administrator can verify whether there are any abnormalities or inconsistencies in the authentication process of the device within the specified time period based on the returned traceability records. At the same time, the system will perform integrity verification on the Trace information in the traceability records to ensure that each operation has a corresponding traceability record, and generate a historical traceability result History_i, including the device's authentication history details, traceability records of each authentication, verification records, etc.

[0137] It should be noted that the above examples are only used to understand the present application and do not constitute a limitation on the identity authentication method of the networking device of the present application. More simple transformations based on this technical concept are all within the scope of protection of the present application.

[0138] This application also provides an identity authentication device for a networking device, please refer to Figure 4 , the identity authentication device of the networking device comprises:

[0139] A registration module 10, configured to register the networking device according to a registration request sent by the networking device, and save registration information corresponding to the registration request in a device network space, wherein the device network space is composed of networked devices that have completed networking;

[0140] an authentication module 20, configured to authenticate the authentication request sent by the networking device according to the registration information after the networking device completes registration in the device network space, obtain the authentication result of the networking device, and save the authentication information of the networking device in the device network space, wherein the authentication information includes the authentication request and the authentication result;

[0141] The verification module 30 is used to verify the authentication information according to the historical authentication records in the device network space, and save the verified verification results in the device network space.

[0142] Optionally, the registration request includes a device ID, a device public key, a device type, and a registration timestamp of the networking device, and the registration module 10 is further used to:

[0143] Generate a unique identifier for the networking device according to the device ID, the device public key, the device type and the registration timestamp to complete the registration of the networking device;

[0144] The unique identifier is returned to the networking device, wherein the unique identifier is used to generate the authentication request in the networking device.

[0145] Optionally, the authentication request includes at least signature information of the networking device, wherein the signature information is composed of a device private key, a unique identifier, and a random challenge value received by the networking device, and the authentication module 20 is further used to:

[0146] Extracting a device public key of the networking device from the registration information, and verifying the unique identifier and the random challenge value in the signature information by using the device public key, wherein the unique identifier and the random challenge value are encrypted by the device private key;

[0147] If the verification is successful, the authentication result is obtained as authentication success;

[0148] In the case where the verification fails, the authentication result is obtained as authentication failure.

[0149] Optionally, the verification module 30 is further used for:

[0150] Determine a target historical authentication record in the historical authentication record according to the device ID of the networking device, and extract a historical authentication timestamp and a historical authentication result in the target historical authentication record;

[0151] Verifying the authentication request in the authentication information based on the historical authentication timestamp to obtain an authentication request verification result;

[0152] Verifying the authentication result in the authentication information based on the historical authentication result to obtain an authentication result verification result;

[0153] In the case that both the authentication request verification result and the authentication result verification result are verification passed, the verification result is obtained as verification passed;

[0154] In the case that any one of the authentication request verification result and the authentication result verification result is verification failure, the verification result is obtained as verification failure.

[0155] Optionally, the verification module 30 is further used for:

[0156] Obtaining an authentication timestamp in the authentication request, and calculating a difference between the authentication timestamp and the historical authentication timestamp;

[0157] When the difference is less than or equal to the preset time interval, the authentication request verification result is obtained as verification passed;

[0158] When the difference is greater than the preset time interval, the authentication request verification result is obtained as verification failure.

[0159] Optionally, the verification module 30 is further used for:

[0160] Comparing the historical authentication result with the authentication result;

[0161] When the historical authentication result is consistent with the authentication result, the authentication result verification result is obtained as verification passed;

[0162] In the case where the historical authentication result is inconsistent with the authentication result, the authentication result verification result is obtained as verification failure.

[0163] Optionally, during the registration process of the networking device, a registration tracing record of the networking device is generated, wherein the registration tracing record at least includes a unique identifier and a registration timestamp of the networking device; during the authentication process of the networking device, an authentication tracing record of the networking device is generated, wherein the authentication tracing record at least includes a unique identifier and an authentication timestamp of the networking device; during the verification process of the authentication information, a verification tracing record of the networking device is generated, wherein the verification tracing record at least includes a unique identifier and an authentication timestamp of the networking device;

[0164] The query module 40 in the identity authentication device of the networking device is used to:

[0165] In response to a query request for verifying the identity authentication process of the networking device, obtaining a target device ID and a query time range of the query request;

[0166] According to the target device ID and the query time range, the registration tracing record, the authentication tracing record and the verification tracing record are determined in each registration tracing record, each authentication tracing record and each verification tracing record in the device network space, wherein the target device ID corresponds to a unique identifier in the registration tracing record, the authentication tracing record and the verification tracing record, and the query time range includes the registration timestamp and the authentication timestamp.

[0167] Optionally, the query module is further used to:

[0168] Verifying the registration traceability record, the certification traceability record, and the verification traceability record based on a preset template;

[0169] If the verification is passed, the registration traceability record, the authentication traceability record and the verification traceability record are returned;

[0170] If the verification fails, an alert indicating missing traceability records will be output.

[0171] The identity authentication device of the networking device provided by the present application adopts the identity authentication method of the networking device in the above embodiment, which can solve the technical problem of how to improve the security of the relevant authentication data of the networking device during the identity authentication process. Compared with the prior art, the beneficial effects of the identity authentication device of the networking device provided by the present application are the same as the beneficial effects of the identity authentication method of the networking device provided by the above embodiment, and the other technical features of the identity authentication device of the networking device are the same as the features disclosed in the above embodiment method, which will not be repeated here.

[0172] The present application provides an electronic device, which includes: at least one processor; and a memory that is communicatively connected to the at least one processor; wherein the memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the identity authentication method of the networking device in the above-mentioned embodiment one.

[0173] Reference below Figure 5 , which shows a schematic diagram of the structure of an electronic device suitable for implementing the embodiments of the present application. The electronic devices in the embodiments of the present application may include but are not limited to mobile terminals such as mobile phones, laptop computers, digital broadcast receivers, PDAs (Personal Digital Assistants), PADs (Portable Application Descriptions), PMPs (Portable Media Players), vehicle-mounted terminals (such as vehicle-mounted navigation terminals), etc., and fixed terminals such as digital TVs, desktop computers, etc. Figure 5 The electronic device shown is merely an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0174] like Figure 5 As shown, the electronic device may include a processing device 1001 (e.g., a central processing unit, a graphics processor, etc.), which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM: Read Only Memory) 1002 or a program loaded from a storage device 1003 to a random access memory (RAM: Random Access Memory) 1004. In RAM1004, various programs and data required for the operation of the electronic device are also stored. The processing device 1001, ROM1002, and RAM1004 are connected to each other through a bus 1005. An input / output (I / O) interface 1006 is also connected to the bus. Generally, the following systems can be connected to the I / O interface 1006: an input device 1007 including, for example, a touch screen, a touch pad, a keyboard, a mouse, an image sensor, a microphone, an accelerometer, a gyroscope, etc.; an output device 1008 including, for example, a liquid crystal display (LCD: Liquid Crystal Display), a speaker, a vibrator, etc.; a storage device 1003 including, for example, a magnetic tape, a hard disk, etc.; and a communication device 1009. The communication device 1009 can allow the electronic device to communicate with other devices wirelessly or by wire to exchange data. Although the figure shows an electronic device with various systems, it should be understood that it is not required to implement or have all the systems shown. More or fewer systems can be implemented or have alternatively.

[0175] In particular, according to the embodiments disclosed in the present application, the process described above with reference to the flowchart can be implemented as a computer software program. For example, the embodiments disclosed in the present application include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication device, or installed from a storage device 1003, or installed from a ROM 1002. When the computer program is executed by the processing device 1001, the above-mentioned functions defined in the method of the embodiment disclosed in the present application are executed.

[0176] The electronic device provided by the present application adopts the identity authentication method of the networking device in the above embodiment, which can solve the technical problem of how to improve the security of the relevant authentication data of the networking device during the identity authentication process. Compared with the prior art, the beneficial effects of the electronic device provided by the present application are the same as the beneficial effects of the identity authentication method of the networking device provided by the above embodiment, and the other technical features in the electronic device are the same as the features disclosed in the method of the previous embodiment, which will not be repeated here.

[0177] It should be understood that the various parts disclosed in this application can be implemented by hardware, software, firmware or a combination thereof. In the description of the above embodiments, specific features, structures, materials or characteristics can be combined in any one or more embodiments or examples in a suitable manner.

[0178] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

[0179] The present application provides a computer-readable storage medium having computer-readable program instructions (ie, computer programs) stored thereon, and the computer-readable program instructions are used to execute the identity authentication method of the networking device in the above-mentioned embodiment.

[0180] The computer-readable storage medium provided in the present application may be, for example, a USB flash drive, but is not limited to electrical, magnetic, optical, electromagnetic, infrared, or semiconductor systems or devices, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM: Random Access Memory), a read-only memory (ROM: Read Only Memory), an erasable programmable read-only memory (EPROM: Erasable Programmable Read Only Memory or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM: CD-Read Only Memory), an optical storage device, a magnetic storage device, or any suitable combination of the above. In this embodiment, the computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system or device. The program code contained on the computer-readable storage medium may be transmitted using any appropriate medium, including but not limited to: wires, optical cables, RF (Radio Frequency: Radio Frequency), etc., or any suitable combination of the above.

[0181] The computer-readable storage medium may be included in the electronic device, or may exist independently without being installed in the electronic device.

[0182] The above-mentioned computer-readable storage medium carries one or more programs. When the above-mentioned one or more programs are executed by an electronic device, the electronic device: registers the networking device according to the registration request sent by the networking device, and saves the registration information corresponding to the registration request in the device network space, wherein the device network space is composed of networked devices that have completed networking; after the networking device completes registration in the device network space, authenticates the authentication request sent by the networking device according to the registration information, obtains the authentication result of the networking device, and saves the authentication information of the networking device in the device network space, wherein the authentication information includes the authentication request and the authentication result; verifies the authentication information according to the historical authentication record in the device network space, and saves the verified verification result in the device network space.

[0183] Computer program code for performing the operations of the present application may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0184] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present application. In this regard, each square box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two square boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0185] The modules involved in the embodiments described in this application may be implemented by software or hardware, wherein the name of the module does not constitute a limitation on the unit itself in some cases.

[0186] The readable storage medium provided by the present application is a computer-readable storage medium, which stores computer-readable program instructions (i.e., computer programs) for executing the above-mentioned identity authentication method of the networking device, and can solve the technical problem of how to improve the security of the relevant authentication data of the networking device during the identity authentication process. Compared with the prior art, the beneficial effects of the computer-readable storage medium provided by the present application are the same as the beneficial effects of the identity authentication method of the networking device provided by the above-mentioned embodiment, and will not be repeated here.

[0187] The present application also provides a computer program product, including a computer program, which implements the steps of the above-mentioned identity authentication method for networking devices when executed by a processor.

[0188] The computer program product provided by the present application can solve the technical problem of how to improve the security of the authentication data related to the identity authentication process of the networking device. Compared with the prior art, the beneficial effects of the computer program product provided by the present application are the same as the beneficial effects of the identity authentication method of the networking device provided by the above embodiment, which will not be repeated here.

[0189] The above descriptions are only some embodiments of the present application, and are not intended to limit the patent scope of the present application. All equivalent structural changes made using the contents of the present application specification and drawings under the technical concept of the present application, or direct / indirect applications in other related technical fields are included in the patent protection scope of the present application.

Claims

1. A method for authenticating a networking device, characterized in that: The identity authentication method of the networking device includes: Registering the networking device according to the registration request sent by the networking device, and saving the registration information corresponding to the registration request in the device network space, wherein the device network space is composed of the networking devices that have completed the networking; After the networking device completes registration in the device network space, the authentication request sent by the networking device is authenticated according to the registration information, an authentication result of the networking device is obtained, and the authentication information of the networking device is stored in the device network space, wherein the authentication information includes the authentication request and the authentication result; The authentication information is verified according to the historical authentication records in the device network space, and the verified authentication results are stored in the device network space.

2. The identity authentication method of a networking device according to claim 1, characterized in that: The registration request includes the device ID, device public key, device type and registration timestamp of the networking device. The step of registering the networking device according to the registration request sent by the networking device includes: Generate a unique identifier for the networking device according to the device ID, the device public key, the device type and the registration timestamp to complete the registration of the networking device; The unique identifier is returned to the networking device, wherein the unique identifier is used to generate the authentication request in the networking device.

3. The identity authentication method of a networking device according to claim 1, characterized in that: The authentication request at least includes signature information of the networking device, wherein the signature information is composed of a device private key, a unique identifier, and a random challenge value received by the networking device, and the step of authenticating the authentication request sent by the networking device according to the registration information to obtain an authentication result of the networking device includes: Extracting a device public key of the networking device from the registration information, and verifying the unique identifier and the random challenge value in the signature information by using the device public key, wherein the unique identifier and the random challenge value are encrypted by the device private key; If the verification is successful, the authentication result is obtained as authentication success; In the case where the verification fails, the authentication result is obtained as authentication failure.

4. The identity authentication method of a networking device according to claim 1, characterized in that: The step of verifying the authentication information according to the historical authentication records in the device network space includes: Determine a target historical authentication record in the historical authentication record according to the device ID of the networking device, and extract a historical authentication timestamp and a historical authentication result in the target historical authentication record; Verifying the authentication request in the authentication information based on the historical authentication timestamp to obtain an authentication request verification result; Verifying the authentication result in the authentication information based on the historical authentication result to obtain an authentication result verification result; In the case that both the authentication request verification result and the authentication result verification result are verification passed, the verification result is obtained as verification passed; In the case that any one of the authentication request verification result and the authentication result verification result is verification failure, the verification result is obtained as verification failure.

5. The identity authentication method of a networking device as claimed in claim 4, characterized in that: The step of verifying the authentication request in the authentication information based on the historical authentication timestamp to obtain the authentication request verification result comprises: Obtaining an authentication timestamp in the authentication request, and calculating a difference between the authentication timestamp and the historical authentication timestamp; When the difference is less than or equal to the preset time interval, the authentication request verification result is obtained as verification passed; When the difference is greater than the preset time interval, the authentication request verification result is obtained as verification failure.

6. The identity authentication method of a networking device as claimed in claim 4, characterized in that: The step of verifying the authentication result in the authentication information based on the historical authentication result to obtain the authentication result verification result comprises: Comparing the historical authentication result with the authentication result; When the historical authentication result is consistent with the authentication result, the authentication result verification result is obtained as verification passed; In the case where the historical authentication result is inconsistent with the authentication result, the authentication result verification result is obtained as verification failure.

7. The identity authentication method of a networking device according to claim 1, characterized in that: During the registration process of the networking device, a registration tracing record of the networking device is generated, wherein the registration tracing record at least includes a unique identifier of the networking device and a registration timestamp; during the authentication process of the networking device, an authentication tracing record of the networking device is generated, wherein the authentication tracing record at least includes a unique identifier of the networking device and an authentication timestamp; during the verification process of the authentication information, a verification tracing record of the networking device is generated, wherein the verification tracing record at least includes a unique identifier of the networking device and an authentication timestamp; The identity authentication method of the networking device also includes: In response to a query request for verifying the identity authentication process of the networking device, obtaining a target device ID and a query time range of the query request; According to the target device ID and the query time range, the registration tracing record, the authentication tracing record and the verification tracing record are determined in each registration tracing record, each authentication tracing record and each verification tracing record in the device network space, wherein the target device ID corresponds to a unique identifier in the registration tracing record, the authentication tracing record and the verification tracing record, and the query time range includes the registration timestamp and the authentication timestamp.

8. An identity authentication device for a networking device, characterized in that: The identity authentication device of the networking device comprises: A registration module, used to register the networking device according to the registration request sent by the networking device, and save the registration information corresponding to the registration request in the device network space, wherein the device network space is composed of the networking devices that have completed the networking; an authentication module, configured to authenticate the authentication request sent by the networking device according to the registration information after the networking device completes registration in the device network space, obtain the authentication result of the networking device, and save the authentication information of the networking device in the device network space, wherein the authentication information includes the authentication request and the authentication result; The verification module is used to verify the authentication information according to the historical authentication records in the device network space, and save the verified verification results in the device network space.

9. An electronic device, characterized in that: The device comprises: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the identity authentication method for a networking device as claimed in any one of claims 1 to 7.

10. A storage medium, characterized in that: The storage medium is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by a processor, the steps of the identity authentication method of the networking device according to any one of claims 1 to 7 are implemented.

Images