Identity authentication method, device, electronic device and storage medium for networking equipment

Abstract

The present application discloses an identity authentication method, apparatus, electronic device, and storage medium for a networking device, and relates to the field of Internet of Things communication technology, including: registering the networking device according to a registration request sent by the networking device, and storing the registration information corresponding to the registration request in the device network space; after completing registration in the networking device and the device network space, authenticating the authentication request sent by the networking device according to the registration information, obtaining an authentication result of the networking device, and storing the authentication information of the networking device in the device network space; verifying the authentication information according to historical authentication records in the device network space, and storing the verified verification result in the device network space. The present application adopts distributed network storage, which enhances the historical traceability and tamper-proofness of the authentication process, and ensures the security of the relevant authentication data of the networking device during the identity authentication process.

Description

Technical Field

[0001] The present application relates to the field of Internet of Things communication technology, and in particular to an identity authentication method, device, electronic device and storage medium for networking devices. Background Art

[0002] With the widespread adoption of the Internet of Things (IoT) and smart devices, device identity authentication and management have always been key security issues. Existing authentication methods for networked devices are mostly based on centralized servers or certificate management systems. This involves storing the device's identity information and related authentication history in a centralized server or certificate management system. This approach suffers from the vulnerability of centralized storage to attacks such as man-in-the-middle attacks, tampering, and replay attacks. Consequently, centralized storage architectures struggle to ensure the integrity and security of device identity information.

[0003] Therefore, how to improve the security of relevant authentication data of networking devices during the identity authentication process is a problem that needs to be solved urgently. Summary of the Invention

[0004] The main purpose of this application is to provide an identity authentication method, device, electronic device and storage medium for networking devices, aiming to solve the technical problem of how to improve the security of relevant authentication data during the identity authentication process of networking devices.

[0005] To achieve the above objectives, the present application proposes an identity authentication method for a networking device, the identity authentication method for a networking device comprising:

[0006] Registering the networking device according to the registration request sent by the networking device, and storing registration information corresponding to the registration request in a device network space, wherein the device network space is composed of the networking devices that have completed networking;

[0007] After the networking device completes registration in the device network space, authenticating the authentication request sent by the networking device according to the registration information, obtaining an authentication result of the networking device, and storing the authentication information of the networking device in the device network space, wherein the authentication information includes the authentication request and the authentication result;

[0008] The authentication information is verified according to the historical authentication records in the device network space, and the verified authentication result is stored in the device network space.

[0009] In one embodiment, the registration request includes a device ID, a device public key, a device type, and a registration timestamp of the networking device. The step of registering the networking device according to the registration request sent by the networking device includes:

[0010] Generate a unique identifier for the networking device based on the device ID, the device public key, the device type, and the registration timestamp to complete the registration of the networking device;

[0011] The unique identifier is returned to the networking device, wherein the unique identifier is used to generate the authentication request in the networking device.

[0012] In one embodiment, the authentication request includes at least signature information of the networking device, wherein the signature information is composed of a device private key, a unique identifier, and a random challenge value received by the networking device. The step of authenticating the authentication request sent by the networking device according to the registration information and obtaining an authentication result of the networking device includes:

[0013] Extracting a device public key of the networking device from the registration information, and verifying the unique identifier and the random challenge value in the signature information using the device public key, wherein the unique identifier and the random challenge value are encrypted by the device private key;

[0014] If the verification is successful, the authentication result is obtained as authentication success;

[0015] In the case where the verification fails, the authentication result is obtained as authentication failure.

[0016] In one embodiment, the step of verifying the authentication information based on historical authentication records in the device network space includes:

[0017] Determining a target historical authentication record in the historical authentication records according to the device ID of the networking device, and extracting a historical authentication timestamp and a historical authentication result in the target historical authentication record;

[0018] Verifying the authentication request in the authentication information based on the historical authentication timestamp to obtain an authentication request verification result;

[0019] Verifying the authentication result in the authentication information based on the historical authentication result to obtain an authentication result verification result;

[0020] If both the authentication request verification result and the authentication result verification result are verified as passed, the verification result is obtained as verified passed;

[0021] In the case that any one of the authentication request verification result and the authentication result verification result is verification failure, the verification result is obtained as verification failure.

[0022] In one embodiment, the step of verifying the authentication request in the authentication information based on the historical authentication timestamp to obtain the authentication request verification result includes:

[0023] Obtaining an authentication timestamp in the authentication request, and calculating a difference between the authentication timestamp and the historical authentication timestamp;

[0024] If the difference is less than or equal to the preset time interval, the authentication request verification result is obtained as verification passed;

[0025] When the difference is greater than the preset time interval, the authentication request verification result is obtained as verification failure.

[0026] In one embodiment, the step of verifying the authentication result in the authentication information based on the historical authentication result to obtain the authentication result verification result includes:

[0027] Comparing the historical authentication result with the authentication result;

[0028] If the historical authentication result is consistent with the authentication result, the authentication result verification result is obtained as verification passed;

[0029] In the case that the historical authentication result is inconsistent with the authentication result, the authentication result verification result is that the authentication result fails.

[0030] In one embodiment, during the registration process of the networking device, a registration tracing record of the networking device is generated, wherein the registration tracing record includes at least a unique identifier of the networking device and a registration timestamp; during the authentication process of the networking device, an authentication tracing record of the networking device is generated, wherein the authentication tracing record includes at least a unique identifier of the networking device and an authentication timestamp; during the verification process of the authentication information of the networking device, a verification tracing record of the networking device is generated, wherein the verification tracing record includes at least a unique identifier of the networking device and an authentication timestamp;

[0031] The identity authentication method of the networking device further includes:

[0032] In response to a query request for verifying the identity authentication process of the networking device, obtaining a target device ID and a query time range of the query request;

[0033] The registration tracing record, the authentication tracing record, and the verification tracing record are determined from each registration tracing record, each authentication tracing record, and each verification tracing record in the device network space according to the target device ID and the query time range, wherein the target device ID corresponds to a unique identifier in the registration tracing record, the authentication tracing record, and the verification tracing record, and the query time range includes the registration timestamp and the authentication timestamp.

[0034] In addition, to achieve the above-mentioned purpose, the present application also proposes an identity authentication device for a networking device, the identity authentication device for the networking device comprising:

[0035] a registration module, configured to register the networking device according to a registration request sent by the networking device, and save registration information corresponding to the registration request in a device network space, wherein the device network space is composed of networked devices that have completed networking;

[0036] an authentication module, configured to, after the networking device completes registration in the device network space, authenticate an authentication request sent by the networking device according to the registration information, obtain an authentication result of the networking device, and store the authentication information of the networking device in the device network space, wherein the authentication information includes the authentication request and the authentication result;

[0037] The verification module is used to verify the authentication information according to the historical authentication records in the device network space, and save the verified verification results in the device network space.

[0038] In addition, to achieve the above-mentioned purpose, the present application also proposes an electronic device, which includes: a memory, a processor, and a computer program stored on the memory and runnable on the processor, and the computer program is configured to implement the steps of the identity authentication method of the networking device as described above.

[0039] In addition, to achieve the above-mentioned purpose, the present application also proposes a storage medium, which is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by the processor, the steps of the identity authentication method of the networking device as described above are implemented.

[0040] In addition, to achieve the above-mentioned purpose, the present application also provides a computer program product, which includes a computer program, and when the computer program is executed by a processor, it implements the steps of the identity authentication method of the networking device as described above.

[0041] One or more technical solutions proposed in this application have at least the following technical effects:

[0042] This application first registers the networking device according to the registration request sent by the networking device, and saves the registration information corresponding to the registration request in the device network space. By adopting a distributed storage method, the registration information is saved in the device network space composed of each networking device, which improves the security and reliability of the registration information and reduces the risk of attack. After the networking device is registered, the authentication request sent by the networking device is authenticated according to the registration information in the device network space, and the authentication result of the networking device is obtained. The authentication information of the networking device is saved in the device network space, so that the authentication request is authenticated within the device network space based on the registration information saved in the device network space. Authentication reduces dependence on external authentication servers and reduces potential security risks in the authentication process; the authentication information is verified according to the historical authentication records in the device network space, and the verified verification results are stored in the device network space. By querying the historical authentication records in the device network space, the current authentication information is verified, which enhances the security of the authentication process. By comparing the historical authentication records, replay attacks and tampering behaviors are effectively prevented, and the overall security of identity authentication is improved. The verification results are stored in the device network space, which improves the transparency and traceability of the entire authentication process and further enhances the security of the system.

[0043] In summary, this application adopts distributed network storage, and avoids the single point failure risk, centralized attack surface, and privacy leakage and tampering risk caused by relying on centralized servers for network device registration, authentication and verification and other related data processing by storing registration information, authentication requests, authentication results, verification results and historical authentication records and other authentication-related data in the device network space composed of each networking device participating in the network. At the same time, it enhances the historical traceability and tamper-proofness of the authentication process, and ensures the security of relevant authentication data of networking devices during the identity authentication process. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0045] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0046] Figure 1 A flowchart of the first embodiment of the identity authentication method for networking devices of this application is provided;

[0047] Figure 2 A flowchart of the second embodiment of the identity authentication method for networking devices of this application is provided;

[0048] Figure 3 A schematic diagram of a simplified flow chart of an identity authentication method for a networking device provided in Example 2 of the present application;

[0049] Figure 4 This is a schematic diagram of the module structure of the identity authentication device of the networking device according to the embodiment of the present application;

[0050] Figure 5 This is a schematic diagram of the device structure of the hardware operating environment involved in the identity authentication method of the networking device in the embodiment of the present application.

[0051] The purpose, features and advantages of this application will be further explained in conjunction with the embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0052] It should be understood that the specific embodiments described herein are merely used to explain the technical solutions of the present application and are not intended to limit the present application.

[0053] In order to better understand the technical solution of the present application, a detailed description will be given below in conjunction with the accompanying drawings and specific implementation methods.

[0054] The main solution of the embodiment of the present application is: register the networking device according to the registration request sent by the networking device, and save the registration information corresponding to the registration request in the device network space, wherein the device network space is composed of the networking devices participating in the networking; after the networking device is registered, authenticate the authentication request sent by the networking device according to the registration information in the device network space, obtain the authentication result of the networking device, and save the authentication information of the networking device in the device network space, wherein the authentication information includes the authentication request and the authentication result; verify the authentication information according to the historical authentication record in the device network space, and save the verified verification result in the device network space.

[0055] Existing authentication methods for networking devices are mostly based on centralized servers or certificate management systems. This means that the device's authentication information and authentication history are typically stored in a centralized server or certificate management system. This approach suffers from being vulnerable to attacks such as man-in-the-middle attacks, tampering, and replay attacks. Therefore, centralized storage architectures struggle to ensure the integrity and security of device identity information. Therefore, improving the security of authentication data during the authentication process is a pressing issue.

[0056] This application provides a solution that uses distributed network storage to save authentication-related data such as registration information, authentication requests, authentication results, verification results, and historical authentication records in the device network space composed of each networking device participating in the network. This avoids the single point failure risk, centralized attack surface, and privacy leakage and tampering risks caused by relying on a centralized server for networking device registration, authentication, and verification and other related data processing. At the same time, it enhances the historical traceability and tamper-proofness of the authentication process, and ensures the security of relevant authentication data of networking devices during the identity authentication process.

[0057] It should be noted that the execution subject of this embodiment can be a computing service device with data processing, network communication, and program execution functions, such as a tablet computer, personal computer, mobile phone, etc., or an electronic device capable of performing the above functions. The following uses electronic devices as an example to illustrate this embodiment and the following embodiments.

[0058] Based on this, the embodiment of the present application provides an identity authentication method for a networking device, referring to Figure 1 , Figure 1 This is a flow chart of the first embodiment of the identity authentication method for networking devices of this application.

[0059] In this embodiment, the identity authentication method of the networking device includes steps S10 to S30:

[0060] Step S10: registering the networking device according to the registration request sent by the networking device, and saving the registration information corresponding to the registration request in the device network space, wherein the device network space is composed of the networking devices that have completed the networking;

[0061] It should be noted that a registration request refers to a formal request initiated by a networking device to the network to join the network. The request includes the device ID (Identity document), device public key, device type and registration timestamp of the networking device; registration information refers to the relevant information involved in the registration process of the networking device, including device ID, device public key, device type, registration timestamp, and the returned unique identifier and other information; device network space refers to a super device space, that is, a virtualized device network space, which can virtualize multiple physical networking devices into an overall network, similar to a virtual machine cluster in the cloud, which can provide a more efficient management method for devices, unify the management of identity authentication and traceability processes, ensure the integrity and security of device identity information, and prevent information from being tampered with or forged.

[0062] It is understandable that, since in the networking process of IoT devices, the devices need to be formally identified and accepted by the network, performing step S10 can prevent unauthorized devices from joining the current network at will, thereby realizing the formal registration of the device identity, thereby ensuring the reasonable allocation of network resources. At the same time, by adopting a distributed storage method, the registration information is stored in the device network space composed of various networking devices, which improves the security and reliability of the registration information and reduces the risk of attack.

[0063] In a feasible implementation, the registration request includes the device ID, device public key, device type, and registration timestamp of the networking device. The step of registering the networking device according to the registration request sent by the networking device in step S10 may include steps S11 to S12:

[0064] Step S11, generating a unique identifier of the networking device according to the device ID, the device public key, the device type and the registration timestamp to complete the registration of the networking device;

[0065] It should be noted that the device public key refers to the public key generated by the networking device, which is used for identity authentication and data encryption; the device type refers to the specific type information of the networking device, such as sensor, gateway, etc.; the registration timestamp refers to the time when the networking device submits the registration request; the unique identifier refers to a string generated by processing the device ID, device public key, device type and registration timestamp based on a hash algorithm, which is used to uniquely identify the device among the networking devices. The hash algorithm can be SHA-256 or SHA-3, etc., which can ensure that the generated unique identifier is unpredictable and unique.

[0066] It is understandable that since there are usually situations where device identities are confused or forged, step S11 is performed. By creating an unalterable and globally unique identity for each device, that is, a unique identifier, the problems of device identity confusion and forgery can be avoided, the uniqueness of the device in the network is achieved, and an effective traceability basis is provided for achieving the traceability of the device authentication process.

[0067] Step S12: Return the unique identifier to the networking device, wherein the unique identifier is used to generate the authentication request in the networking device.

[0068] It is understandable that since the networking device needs to use this unique identifier to generate an authentication request in order to authenticate the identity in the network, performing step S12 can avoid the problem that the device lacks a valid identity when generating an authentication request, which may lead to authentication failure or reduced security, thereby ensuring the security and effectiveness of the authentication process and improving the overall security of the network.

[0069] In this embodiment, a unique identifier for the networking device is generated by combining the device ID, device public key, device type and registration timestamp, and the unique identifier is returned to the networking device for generating an authentication request. This avoids the problem of the authentication process being blocked due to the inability to accurately identify the device identity, realizes the unique identity identification of the device in the network, and ensures the integrity and reliability of the authentication request.

[0070] Step S20: After the networking device completes registration in the device network space, authenticate the authentication request sent by the networking device according to the registration information, obtain an authentication result of the networking device, and save the authentication information of the networking device in the device network space, wherein the authentication information includes the authentication request and the authentication result;

[0071] It should be noted that an authentication request refers to a request sent by a networking device to obtain network access rights, which includes the device's unique identifier, signature information, and authentication timestamp; authentication information refers to the relevant information involved in the authentication process of the networking device, including the networking device's unique identifier, authentication timestamp, random challenge value, and authentication results.

[0072] It can be understood that since the device needs to perform identity authentication when accessing network resources, performing step S20 can prevent unauthenticated devices from accessing network resources, thereby achieving control over device access and improving security. At the same time, by performing authentication within the device network space, the dependence on external authentication servers is reduced, and the potential security risks in the authentication process are reduced.

[0073] In a feasible implementation, the authentication request includes at least signature information of the networking device, wherein the signature information is composed of a device private key, a unique identifier, and a random challenge value received by the networking device. The step of authenticating the authentication request sent by the networking device according to the registration information in step S20 may include steps S21 to S23:

[0074] Step S21, extracting the device public key of the networking device from the registration information, and verifying the unique identifier and the random challenge value in the signature information using the device public key, wherein the unique identifier and the random challenge value are encrypted by the device private key;

[0075] It should be noted that the device private key in the signature information refers to the private key held by the networking device, which is used to sign the authentication request; the random challenge value in the signature information is generated and returned by the authentication server in the device network space to prevent replay attacks. The authentication server ensures that each authentication request is unique by issuing a random challenge value to the device, preventing attackers from forging requests or reusing previous authentication information.

[0076] It can be understood that since it is necessary to ensure that the authentication request is issued by a networking device that holds the corresponding private key, that is, to verify the authenticity of the device and the integrity of the request, step S21 is performed to avoid malicious devices or unauthorized devices from forging authentication requests, as well as the problem of authentication requests being tampered with during transmission. By verifying the signature with the public key, the reliability of the source of the authentication request and the fact that the data has not been tampered with are ensured, thereby enhancing the security of device authentication.

[0077] Step S22: If the verification is successful, the authentication result is obtained as authentication success;

[0078] It can be understood that after the public key verification signature information is successfully completed, it is necessary to determine the legitimacy of the device identity and allow the device to access network resources. Therefore, step S22 can be performed to avoid legitimate devices being mistakenly denied access to network resources due to authentication failure. By correctly identifying and allowing legitimate devices to access the network, the availability of the network and the normal operation of the device are guaranteed.

[0079] In step S23, if the verification fails, the authentication result is obtained as authentication failure.

[0080] It is understandable that since the device's authentication request needs to be rejected after the public key verification signature information fails to prevent illegal devices from accessing the network, step S23 is performed to avoid illegal devices or tampered requests from successfully passing the authentication, leading to potential security threats and resource abuse problems. By preventing illegal devices from accessing the network, network resources are protected from unauthorized access, thereby improving the overall security of the network.

[0081] In this implementation, by extracting the device's public key from the device's network space and using it to verify the signature, we avoid device identity forgery and authentication request tampering, ensuring the legitimacy of the device identity and the integrity of the authentication request. If verification succeeds, a successful authentication result is obtained, guaranteeing network access for legitimate devices. If verification fails, an authentication failure result is obtained, preventing unauthorized devices from accessing the network, thereby improving the security and reliability of the IoT.

[0082] Step S30: verifying the authentication information according to the historical authentication records in the device network space, and saving the verified verification result in the device network space.

[0083] It should be noted that historical authentication records refer to the records of authentication performed by the authentication server in the device network space over the past period of time, including historical authentication requests and historical authentication results.

[0084] It is understandable that in order to ensure the continuity and tamper-proofness of the authentication process, step S30 is performed. By comparing historical authentication records, replay attacks and tampering behaviors are effectively prevented, the overall security of identity authentication is improved, and the verification results are saved in the device network space, which improves the transparency and traceability of the entire authentication process and further enhances the security of the system.

[0085] In a feasible implementation, the step of verifying the authentication information according to the historical authentication records in the device network space in step S30 may include steps S31 to S35:

[0086] Step S31, determining a target historical authentication record in the historical authentication records according to the device ID of the networking device, and extracting a historical authentication timestamp and a historical authentication result in the target historical authentication record;

[0087] It should be noted that the target historical authentication record refers to the authentication record saved by the networking device during the previous authentication process; the historical authentication timestamp refers to the time stamp recorded when the networking device performed authentication at a certain point in the past (the moment of the previous authentication), which is used to identify the moment when the authentication occurred; the historical authentication result refers to the result after the authentication request of the networking device was authenticated in a certain authentication process in the past (the previous authentication process), that is, the status of authentication success or authentication failure.

[0088] It is understandable that in order to ensure that multiple authentication requests of the device within a certain period of time are reasonable, step S31 is performed to provide a reliable identification basis for identifying replay attacks by extracting historical authentication timestamps and historical authentication results in the target historical authentication records.

[0089] Step S32: verifying the authentication request in the authentication information based on the historical authentication timestamp to obtain an authentication request verification result;

[0090] It is understandable that since it is necessary to check whether the current authentication request is legal in time to prevent replay attacks, step S32 is performed to avoid using outdated authentication requests and ensure the timeliness of the authentication request.

[0091] Step S33, verifying the authentication result in the authentication information based on the historical authentication result to obtain an authentication result verification result;

[0092] It is understandable that, since it is necessary to ensure that the current authentication result is consistent with the historical record and prevent the authentication result from being tampered with, step S33 is performed to avoid the acceptance of an erroneous authentication result and ensure the accuracy of the authentication result.

[0093] Step S34: if both the authentication request verification result and the authentication result verification result are verified as passed, obtaining the verification result as verified passed;

[0094] It is understandable that in order to confirm that the current authentication request and authentication result are both legal, step S34 is performed, which can achieve legal authentication of the device, thereby ensuring normal access rights of the device.

[0095] Step S35: If any one of the authentication request verification result and the authentication result verification result is verification failure, the verification result is obtained as verification failure.

[0096] It is understandable that in order to ensure that there is no abnormality in the entire authentication process, step S35 is performed to prevent any illegal or tampered authentication requests and results from being accepted, thereby improving the security of the system.

[0097] In this embodiment, the authentication information of the networking device is doubly verified by performing timestamp verification and historical record comparison, thereby ensuring the timeliness of the authentication request and the correctness of the authentication result, thereby confirming the legal identity of the device when both the authentication request and the result are verified. If any verification fails, illegal or abnormal authentication is rejected, avoiding the problems of replay attacks and tampering of authentication results, ensuring the safe operation of the Internet of Things and the data security of the device, and achieving the effect of ensuring the security and reliability of the device authentication process.

[0098] This embodiment provides an identity authentication method for networking devices, which adopts distributed network storage. By storing authentication-related data such as registration information, authentication requests, authentication results, verification results, and historical authentication records in the device network space composed of each networking device participating in the network, it avoids the single point failure risk, centralized attack surface, and privacy leakage and tampering risks caused by relying on a centralized server for related data processing such as networking device registration, authentication, and verification, and centralized storage. At the same time, it enhances the historical traceability and tamper-proofness of the authentication process, and ensures the security of relevant authentication data of the networking device during the identity authentication process.

[0099] In a feasible implementation, step S32 may include steps S321 to S323:

[0100] Step S321, obtaining the authentication timestamp in the authentication request, and calculating the difference between the authentication timestamp and the historical authentication timestamp;

[0101] It should be noted that the authentication server does not directly rely on its own current time to verify the timestamp of the authentication request, but instead implements protection through the record of the device's historical authentication time, namely the historical authentication timestamp. Therefore, even if there is a certain time asynchrony between the networking device and the authentication server, the authentication server can still ensure the legitimacy and timeliness of the authentication request based on the historical authentication records of the networking device, thereby improving the authentication security of the distributed authentication system.

[0102] It is understandable that since it is necessary to determine the time validity of the current authentication request to prevent outdated or duplicate authentication requests from being accepted, step S321 is performed to avoid the inability to correctly identify replay attacks, that is, attackers reuse old authentication information to deceive the system, thereby ensuring that the authentication request is issued within a reasonable time range, and enhancing the time sensitivity and security of the authentication process.

[0103] Step S322: If the difference is less than or equal to the preset time interval, the authentication request verification result is obtained as verification passed;

[0104] It is understandable that since a time window needs to be set, and authentication requests issued within this window are considered valid, performing step S322 can avoid rejecting legitimate real-time authentication requests, because these requests may arrive slightly later than the expected time due to network delays or other reasons. By allowing authentication requests within the preset time interval to pass verification, the user experience and system availability are guaranteed.

[0105] In step S323, when the difference is greater than the preset time interval, the authentication request verification result is obtained as verification failure.

[0106] It is understandable that since it is necessary to reject authentication requests that exceed the time window to prevent potential attacks or outdated requests, step S323 is performed to avoid accepting authentication requests that may have expired or been tampered with. By rejecting outdated authentication requests, security vulnerabilities and potential security threats are reduced, thereby improving the security of the system.

[0107] In this embodiment, by calculating the difference between the timestamp in the authentication request and the historical authentication timestamp, and passing the verification when the difference is less than or equal to the preset time interval, and failing the verification when the difference is greater than the preset time interval, it is ensured that only authentication requests issued within the most recent period will be accepted, avoiding replay attacks, i.e., outdated authentication requests, and ensuring the timeliness of authentication requests, thereby improving the security of device authentication in the Internet of Things environment.

[0108] In a feasible implementation, step S33 may include steps S331 to S333:

[0109] Step S331, comparing the historical authentication result with the authentication result;

[0110] It can be understood that since it is necessary to verify the correctness of the current authentication result and ensure the continuity and consistency of the authentication result, step S331 is performed to avoid the authentication result from being tampered with or misjudged, and prevent security risks caused by incorrect authentication results, thereby ensuring the accuracy and reliability of the authentication result, and thus enhancing the security of the entire authentication process.

[0111] Step S332: If the historical authentication result is consistent with the authentication result, the authentication result verification result is obtained as passed.

[0112] It is understandable that since it is necessary to confirm the legitimacy of the authentication result and ensure that the historical authentication status of the device is consistent with the current status, step S332 is performed to avoid erroneously rejecting the authentication request of a legitimate device, thereby improving the availability of the system and ensuring that only legitimate authentication results are accepted.

[0113] Step S333: When the historical authentication result is inconsistent with the authentication result, the authentication result verification result is obtained as failed.

[0114] It is understandable that since it is necessary to identify any abnormal situations that are inconsistent with historical records in order to prevent potential attacks or errors, step S333 is performed. By rejecting inconsistent authentication results, it is possible to avoid accepting authentication results that may be tampered with or forged, reduce security vulnerabilities, improve the security of the system, and prevent unauthorized access and potential security threats.

[0115] In this implementation, by comparing historical authentication results with current authentication results, verification is passed only when the results are consistent, and verification fails when they are inconsistent. This avoids the problem of authentication results being tampered with or forged, thereby ensuring the integrity of the authentication process and the authenticity of the device identity, and improving the security of device authentication in the Internet of Things networking environment.

[0116] Based on the first embodiment of the present application, in the second embodiment of the present application, the same or similar contents as those in the above embodiment 1 can be referred to the above introduction and will not be described in detail later. Figure 2 , Figure 2 This is a flowchart of the steps of the second embodiment of the identity authentication method for the networking device of this application.

[0117] During the registration process of the networking device, a registration tracing record of the networking device is generated, wherein the registration tracing record includes at least a unique identifier of the networking device and a registration timestamp; during the authentication process of the networking device, an authentication tracing record of the networking device is generated, wherein the authentication tracing record includes at least a unique identifier of the networking device and an authentication timestamp; during the verification process of the authentication information, a verification tracing record of the networking device is generated, wherein the verification tracing record includes at least a unique identifier of the networking device and an authentication timestamp;

[0118] The identity authentication method of the networking device further includes steps S100 to S200:

[0119] Step S100, in response to a query request for verifying the identity authentication process of the networking device, obtaining the target device ID and query time range of the query request;

[0120] It should be noted that a query request refers to a request from an operator or other person to verify the identity authentication process of a networking device; the target device ID refers to the identifier of the networking device that needs to be queried and verified; and the query time range refers to the time interval used to screen and locate traceable records of registration, authentication, and verification within a specific time period.

[0121] It is understandable that when the operator needs to verify the identity authentication process of the networking device, it is necessary to locate the specific device and its related records, so step S100 is performed. By obtaining the device ID and time interval used to determine the verification scope, it can avoid the inability to effectively verify specific devices or time periods, thereby improving the transparency and traceability of the networking device identity authentication process, facilitating subsequent security verification and problem troubleshooting, and thereby improving the security of device identity authentication.

[0122] Step S200: Determine, based on the target device ID and the query time range, the registration tracing record, the authentication tracing record, and the verification tracing record from among the registration tracing records, the authentication tracing records, and the verification tracing records in the device network space, wherein the target device ID corresponds to a unique identifier in the registration tracing record, the authentication tracing record, and the verification tracing record, and the query time range includes the registration timestamp and the authentication timestamp.

[0123] It should be noted that registration traceability records refer to recording all relevant information of the networking device registration process, including the networking device's unique identifier, operation type, registration timestamp, and detailed registration information; authentication traceability records refer to recording all relevant information of the networking device authentication process, including the networking device's unique identifier, operation type, authentication timestamp, authentication results, and detailed authentication information (such as signature information, random challenge value, etc.); verification traceability records refer to recording all relevant information of the networking device verification process, including the networking device's unique identifier, operation type, authentication timestamp, verification results, and detailed verification process information.

[0124] It can be understood that since it is necessary to filter out specific records that match the target device ID and query time range from a large number of records, step S200 can avoid the inability to efficiently retrieve relevant authentication and registration history records from massive data, ensuring that the authentication and registration history of specific networking devices can be retrieved quickly and accurately, thereby improving the efficiency and accuracy of the authentication verification process.

[0125] In this embodiment, by performing database queries and record matching, the problem of being unable to efficiently retrieve and locate the specific device identity authentication process is avoided, and the registration, authentication, and verification traceability records related to the specific device ID and time range are quickly and accurately extracted, ensuring the transparency and traceability of the device identity authentication process, while improving the efficiency and accuracy of security verification of the authentication process.

[0126] In a feasible implementation manner, step S200 may further include steps S300 to S500:

[0127] Step S300: verifying the registration traceability record, the authentication traceability record, and the verification traceability record based on a preset template;

[0128] It is understandable that, since the traceability records may often be missing during the verification process, step S300 is performed to perform integrity verification on the traceability records of each stage of identity authentication through preset targets, so that the missing traceability records can be discovered in time, thereby ensuring that a corresponding traceability record is generated for each operation, thereby ensuring the integrity of the traceability records.

[0129] Step S400: If the verification passes, the registration tracing record, the authentication tracing record, and the verification tracing record are returned;

[0130] Step S500: If the verification fails, output a warning of missing traceability records.

[0131] In this embodiment, by verifying the integrity of registration traceability records, authentication traceability records, and verification traceability records, it is ensured that the missing traceability records can be discovered in a timely manner, thereby ensuring that corresponding traceability records are generated at each stage of identity authentication for user query, thereby further improving the security of device identity authentication.

[0132] For example, in order to help understand the implementation process of the identity authentication method of the networking device obtained by combining this embodiment with the above embodiment 1, please refer to Figure 3 , Figure 3 A simplified flowchart of a method for authenticating a networked device is provided. Specifically:

[0133] During the registration process of a networking device, that is, when a networking device first accesses the super device space (device network space), it submits a device registration request R_i to the authentication server in the device network space: Ri = {Di, PKi, Ti, TS_{reg}}, where Di is the device ID, PKi is the device public key, Ti is the device type, and TS_{reg} is the registration timestamp. After receiving the registration request, the authentication server generates a unique identifier UID_i for the networking device based on the device ID, device public key, device type, and registration timestamp: UIDi = H(Di||PKi||Ti||TS{reg}), where H() is a hash function used to generate the unique identifier. At this point, the authentication server stores the device's registration information {UID_i, D_i, PK_i, T_i, TS_{reg}} in the super device space and generates a registration trace record for the networking device, Trace_{reg}: Trace{reg} = {UIDi,"Register", TS_{reg}, \text{RegDetails}}, which records the device's initial registration information. "Register" is the operation type, and RegDetails contains detailed registration information. The authentication server then returns the networking device's unique identifier, UID_i, to the device for subsequent authentication.

[0134] During device authentication, a networking device initiates an authentication request AR_i to the authentication server: ARi = {UIDi, Sign(SKi, UIDi||Ci), TS{auth}}, where Sign(SK_i,...) is the signature information generated using the device's private key, and C_i is a random challenge value generated by the authentication server. The authentication server then extracts UID_i from the authentication request, searches the super device space for the registration information corresponding to UID_i, including PK_i, and verifies the validity of the signature information using the device's public key: Verify(PKi, Sign(SKi, UIDi||Ci))\rightarrow\text{True / False}, indicating a successful authentication (True) or a failed authentication (False), respectively. Success indicates a legitimate device identity, while failure indicates an invalid device identity. The authentication server then stores the device's authentication information {UID_i, TS_{auth}, C_i, Result_i} in the super device space and generates a device authentication traceback record, Trace_{auth}: Trace{auth} = {UIDi,"Authenticate", TS{auth}, Resulti, \text{AuthDetails}}, which records the authentication request and result. "Authenticate" is the operation type, and AuthDetails contains detailed authentication request information, such as the signature and random challenge value. If authentication succeeds, the device is allowed to access the network; otherwise, the device's access request is denied, and detailed information about the authentication failure is recorded in the super device space.

[0135] During the verification process for a networked device, the authentication server searches the super device space for historical authentication records associated with D_i and extracts matching authentication requests and results. The authentication server then compares the authentication timestamp TS_{auth} of the current authentication request with the timestamp TS_{prev} of the historical record: |TS{auth}-TS{prev}|\leq\Delta T to ensure time consistency, where TS_{prev} is the timestamp of the previous successful authentication, or the historical timestamp; |TS{auth}-TS{prev}| represents the difference between the authentication timestamp and the historical timestamp; Delta T is the allowed time interval, or the preset time interval. The server also checks whether the current device's authentication result, Result_i, is consistent with the historical authentication result in the historical authentication record to ensure the device's authentication information is legitimate. If all conditions are met, the authentication passes and the verification result Verification_i = True is generated; otherwise, Verification_i = False is generated, and the verification result is recorded in the super device space, and a verification trace record Trace_{verify} is generated: Trace{verify} = {UIDi,"Verify",TS{auth},Verificationi,\text{VerifyDetails}}, where "Verify" is the operation type and VerifyDetails contains detailed verification process information.

[0136] During the query process for networked device identity authentication, the administrator uses the query module to initiate a query request Q_i to the Super Device Space: Qi = {Di, T{start}, T{end}}, where Di is the target device ID, and T_{start} and T_{end} are the start and end times of the query range. Upon receiving this query request, the Super Device Space node returns all authentication records and traceability information for the specified device within the time range T_{range}, including UID_i, TS_{auth}, Result_i, Trace_{auth}, and Trace_{verify}. The administrator can then use these traceability records to verify whether there were any anomalies or inconsistencies in the device's authentication process during the specified time period. The system also performs integrity checks on the trace information in the traceability records to ensure that each operation has a corresponding traceability record. The system then generates a historical traceability result, History_i, which includes the device's authentication history details, traceability records for each authentication, and verification records.

[0137] It should be noted that the above examples are only used to understand this application and do not constitute a limitation on the identity authentication method of the networking device of this application. More simple transformations based on this technical concept are all within the scope of protection of this application.

[0138] This application also provides an identity authentication device for networking equipment, please refer to Figure 4 , the identity authentication device of the networking device includes:

[0139] A registration module 10 is configured to register a networking device according to a registration request sent by the networking device, and store registration information corresponding to the registration request in a device network space, wherein the device network space is composed of networked devices that have completed networking;

[0140] an authentication module 20, configured to, after the networking device completes registration in the device network space, authenticate an authentication request sent by the networking device according to the registration information, obtain an authentication result of the networking device, and store the authentication information of the networking device in the device network space, wherein the authentication information includes the authentication request and the authentication result;

[0141] The verification module 30 is used to verify the authentication information according to the historical authentication records in the device network space, and save the verified verification results in the device network space.

[0142] Optionally, the registration request includes the device ID, device public key, device type, and registration timestamp of the networking device, and the registration module 10 is further configured to:

[0143] Generate a unique identifier for the networking device based on the device ID, the device public key, the device type, and the registration timestamp to complete the registration of the networking device;

[0144] The unique identifier is returned to the networking device, wherein the unique identifier is used to generate the authentication request in the networking device.

[0145] Optionally, the authentication request includes at least signature information of the networking device, wherein the signature information is composed of a device private key, a unique identifier, and a random challenge value received by the networking device. The authentication module 20 is further configured to:

[0146] Extracting a device public key of the networking device from the registration information, and verifying the unique identifier and the random challenge value in the signature information using the device public key, wherein the unique identifier and the random challenge value are encrypted by the device private key;

[0147] If the verification is successful, the authentication result is obtained as authentication success;

[0148] In the case where the verification fails, the authentication result is obtained as authentication failure.

[0149] Optionally, the verification module 30 is further configured to:

[0150] Determining a target historical authentication record in the historical authentication records according to the device ID of the networking device, and extracting a historical authentication timestamp and a historical authentication result in the target historical authentication record;

[0151] Verifying the authentication request in the authentication information based on the historical authentication timestamp to obtain an authentication request verification result;

[0152] Verifying the authentication result in the authentication information based on the historical authentication result to obtain an authentication result verification result;

[0153] If both the authentication request verification result and the authentication result verification result are verified as passed, the verification result is obtained as verified passed;

[0154] In the case that any one of the authentication request verification result and the authentication result verification result is verification failure, the verification result is obtained as verification failure.

[0155] Optionally, the verification module 30 is further configured to:

[0156] Obtaining an authentication timestamp in the authentication request, and calculating a difference between the authentication timestamp and the historical authentication timestamp;

[0157] If the difference is less than or equal to the preset time interval, the authentication request verification result is obtained as verification passed;

[0158] When the difference is greater than the preset time interval, the authentication request verification result is obtained as verification failure.

[0159] Optionally, the verification module 30 is further configured to:

[0160] Comparing the historical authentication result with the authentication result;

[0161] If the historical authentication result is consistent with the authentication result, the authentication result verification result is obtained as verification passed;

[0162] In the case that the historical authentication result is inconsistent with the authentication result, the authentication result verification result is that the authentication result fails.

[0163] Optionally, during the registration process of the networking device, a registration tracing record of the networking device is generated, wherein the registration tracing record includes at least a unique identifier of the networking device and a registration timestamp; during the authentication process of the networking device, an authentication tracing record of the networking device is generated, wherein the authentication tracing record includes at least a unique identifier of the networking device and an authentication timestamp; during the verification process of the authentication information, a verification tracing record of the networking device is generated, wherein the verification tracing record includes at least a unique identifier of the networking device and an authentication timestamp;

[0164] The query module 40 in the identity authentication device of the networking device is used to:

[0165] In response to a query request for verifying the identity authentication process of the networking device, obtaining a target device ID and a query time range of the query request;

[0166] The registration tracing record, the authentication tracing record, and the verification tracing record are determined from each registration tracing record, each authentication tracing record, and each verification tracing record in the device network space according to the target device ID and the query time range, wherein the target device ID corresponds to a unique identifier in the registration tracing record, the authentication tracing record, and the verification tracing record, and the query time range includes the registration timestamp and the authentication timestamp.

[0167] Optionally, the query module is further configured to:

[0168] Verifying the registration traceability record, the certification traceability record, and the verification traceability record based on a preset template;

[0169] If the verification is passed, the registration tracing record, the authentication tracing record and the verification tracing record are returned;

[0170] If the verification fails, an alert indicating missing traceability records will be output.

[0171] The identity authentication device for a networking device provided in this application, employing the identity authentication method for a networking device in the aforementioned embodiments, can address the technical problem of improving the security of authentication data related to the identity authentication process of a networking device. Compared to the prior art, the beneficial effects of the identity authentication device provided in this application are the same as those of the identity authentication method for a networking device provided in the aforementioned embodiments. Other technical features of the identity authentication device for a networking device are the same as those disclosed in the aforementioned embodiments and are not further elaborated upon here.

[0172] The present application provides an electronic device, which includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the identity authentication method of the networking device in the above-mentioned embodiment one.

[0173] Reference below Figure 5 , which shows a schematic diagram of the structure of an electronic device suitable for implementing the embodiments of the present application. The electronic devices in the embodiments of the present application may include, but are not limited to, mobile terminals such as mobile phones, laptop computers, digital broadcast receivers, PDAs (Personal Digital Assistants), PADs (Portable Application Descriptions), PMPs (Portable Media Players), in-vehicle terminals (such as in-vehicle navigation terminals), and fixed terminals such as digital TVs and desktop computers. Figure 5 The electronic device shown is merely an example and should not limit the functions and scope of use of the embodiments of the present application.

[0174] like Figure 5 As shown, the electronic device may include a processing device 1001 (e.g., a central processing unit, a graphics processing unit, etc.), which can perform various appropriate actions and processes based on programs stored in a read-only memory (ROM) 1002 or programs loaded from a storage device 1003 into a random access memory (RAM) 1004. Various programs and data required for the operation of the electronic device are also stored in RAM 1004. The processing device 1001, ROM 1002, and RAM 1004 are connected to each other via a bus 1005. An input / output (I / O) interface 1006 is also connected to the bus. Typically, the following systems can be connected to the I / O interface 1006: an input device 1007 including, for example, a touch screen, a touchpad, a keyboard, a mouse, an image sensor, a microphone, an accelerometer, a gyroscope, etc.; an output device 1008 including, for example, a liquid crystal display (LCD), a speaker, a vibrator, etc.; a storage device 1003 including, for example, a magnetic tape, a hard disk, etc.; and a communication device 1009. The communication device 1009 can allow the electronic device to communicate with other devices wirelessly or by wire to exchange data. Although the figure shows an electronic device with various systems, it should be understood that it is not required to implement or have all the systems shown. More or fewer systems can be implemented or have instead.

[0175] In particular, according to the embodiments disclosed in the present application, the processes described above with reference to the flowcharts can be implemented as computer software programs. For example, the embodiments disclosed in the present application include a computer program product comprising a computer program carried on a computer-readable medium, the computer program comprising program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network via a communication device, or installed from a storage device 1003, or installed from a ROM 1002. When the computer program is executed by the processing device 1001, the above-mentioned functions defined in the method of the embodiment disclosed in the present application are executed.

[0176] The electronic device provided in this application utilizes the identity authentication method for networking devices described in the aforementioned embodiments, thereby resolving the technical problem of improving the security of authentication data related to the identity authentication process of networking devices. Compared to the prior art, the beneficial effects of the electronic device provided in this application are the same as those of the identity authentication method for networking devices described in the aforementioned embodiments. The other technical features of this electronic device are the same as those disclosed in the aforementioned embodiments and are not further elaborated upon here.

[0177] It should be understood that the various parts disclosed in this application can be implemented using hardware, software, firmware, or a combination thereof. In the description of the above embodiments, specific features, structures, materials, or characteristics can be combined in any one or more embodiments or examples in a suitable manner.

[0178] The above description is merely a specific embodiment of the present application, but the scope of protection of the present application is not limited thereto. Any changes or substitutions that can be easily conceived by a person skilled in the art within the technical scope disclosed in this application should be included in the scope of protection of this application. Therefore, the scope of protection of this application should be based on the scope of protection of the claims.

[0179] The present application provides a computer-readable storage medium having computer-readable program instructions (ie, a computer program) stored thereon, and the computer-readable program instructions are used to execute the identity authentication method of the networking device in the above embodiment.

[0180] The computer-readable storage medium provided in this application may be, for example, a USB flash drive, but is not limited to electrical, magnetic, optical, electromagnetic, infrared, or semiconductor systems or devices, or any combination thereof. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In this embodiment, the computer-readable storage medium may be any tangible medium that contains or stores a program that can be used by or in conjunction with an instruction execution system or device. The program code contained on the computer-readable storage medium may be transmitted using any appropriate medium, including but not limited to: wires, optical cables, RF (Radio Frequency), etc., or any suitable combination thereof.

[0181] The computer-readable storage medium may be included in the electronic device, or may exist independently without being incorporated into the electronic device.

[0182] The above-mentioned computer-readable storage medium carries one or more programs. When the above-mentioned one or more programs are executed by an electronic device, the electronic device: registers the networking device according to the registration request sent by the networking device, and saves the registration information corresponding to the registration request in the device network space, wherein the device network space is composed of networked devices that have completed networking; after the networking device completes registration in the device network space, authenticates the authentication request sent by the networking device according to the registration information, obtains the authentication result of the networking device, and saves the authentication information of the networking device in the device network space, wherein the authentication information includes the authentication request and the authentication result; verifies the authentication information according to the historical authentication records in the device network space, and saves the verified verification result in the device network space.

[0183] Computer program code for performing the operations of the present application may be written in one or more programming languages, or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a stand-alone software package, partially on the user's computer and partially on a remote computer, or entirely on the remote computer or server. In cases involving a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., through the Internet using an Internet service provider).

[0184] The flow charts and block diagrams in the accompanying drawings illustrate the possible architecture, functions and operations of the systems, methods and computer program products according to various embodiments of the present application. In this regard, each box in the flow chart or block diagram can represent a module, program segment or a part of code, and the module, program segment or a part of code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order than that marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flow chart, and the combination of the boxes in the block diagram and / or flow chart can be implemented by a dedicated hardware-based system that performs the specified function or operation, or can be implemented by a combination of dedicated hardware and computer instructions.

[0185] The modules described in the embodiments of the present application may be implemented in software or hardware, wherein the name of a module does not necessarily limit the unit itself.

[0186] The computer-readable storage medium provided in this application is a computer-readable storage medium that stores computer-readable program instructions (i.e., a computer program) for executing the aforementioned method for authenticating a networking device. This computer-readable storage medium can address the technical problem of improving the security of authentication data related to the identity authentication process of a networking device. Compared to the prior art, the beneficial effects of the computer-readable storage medium provided in this application are the same as those of the method for authenticating a networking device provided in the aforementioned embodiment, and are not further elaborated here.

[0187] The present application also provides a computer program product, including a computer program, which implements the steps of the above-mentioned identity authentication method for networking devices when executed by a processor.

[0188] The computer program product provided in this application can solve the technical problem of how to improve the security of authentication data related to the identity authentication process of networking devices. Compared with the prior art, the beneficial effects of the computer program product provided in this application are the same as the beneficial effects of the identity authentication method for networking devices provided in the above-mentioned embodiments, and will not be repeated here.

[0189] The above description is only part of the embodiments of the present application and does not limit the patent scope of the present application. All equivalent structural transformations made by using the contents of the present application specification and drawings under the technical concept of the present application, or direct / indirect application in other related technical fields are included in the patent protection scope of the present application.

Claims

1. A method for authenticating the identity of a networking device, characterized in that: The identity authentication method of the networking device includes: Registering the networking device according to the registration request sent by the networking device, and storing registration information corresponding to the registration request in a device network space, wherein the device network space is composed of the networking devices that have completed networking; After the networking device completes registration in the device network space, authenticating the authentication request sent by the networking device according to the registration information, obtaining an authentication result of the networking device, and storing the authentication information of the networking device in the device network space, wherein the authentication information includes the authentication request and the authentication result; The authentication information is verified according to the historical authentication records in the device network space, and the verified authentication result is stored in the device network space.

2. The identity authentication method of a networking device according to claim 1, wherein: The registration request includes the device ID, device public key, device type, and registration timestamp of the networking device. The step of registering the networking device according to the registration request sent by the networking device includes: Generate a unique identifier for the networking device based on the device ID, the device public key, the device type, and the registration timestamp to complete the registration of the networking device; The unique identifier is returned to the networking device, wherein the unique identifier is used to generate the authentication request in the networking device.

3. The identity authentication method of a networking device according to claim 1, wherein: The authentication request includes at least signature information of the networking device, wherein the signature information is composed of a device private key, a unique identifier, and a random challenge value received by the networking device. The step of authenticating the authentication request sent by the networking device according to the registration information and obtaining an authentication result of the networking device includes: Extracting a device public key of the networking device from the registration information, and verifying the unique identifier and the random challenge value in the signature information using the device public key, wherein the unique identifier and the random challenge value are encrypted by the device private key; If the verification is successful, the authentication result is obtained as authentication success; In the case where the verification fails, the authentication result is obtained as authentication failure.

4. The identity authentication method of a networking device according to claim 1, wherein: The step of verifying the authentication information according to the historical authentication records in the device network space includes: Determining a target historical authentication record in the historical authentication records according to the device ID of the networking device, and extracting a historical authentication timestamp and a historical authentication result in the target historical authentication record; Verifying the authentication request in the authentication information based on the historical authentication timestamp to obtain an authentication request verification result; Verifying the authentication result in the authentication information based on the historical authentication result to obtain an authentication result verification result; If both the authentication request verification result and the authentication result verification result are verified as passed, the verification result is obtained as verified passed; In the case that any one of the authentication request verification result and the authentication result verification result is verification failure, the verification result is obtained as verification failure.

5. The identity authentication method of a networking device according to claim 4, wherein: The step of verifying the authentication request in the authentication information based on the historical authentication timestamp to obtain the authentication request verification result includes: Obtaining an authentication timestamp in the authentication request, and calculating a difference between the authentication timestamp and the historical authentication timestamp; If the difference is less than or equal to the preset time interval, the authentication request verification result is obtained as verification passed; When the difference is greater than the preset time interval, the authentication request verification result is obtained as verification failure.

6. The identity authentication method of a networking device according to claim 4, wherein: The step of verifying the authentication result in the authentication information based on the historical authentication result to obtain the authentication result verification result includes: Comparing the historical authentication result with the authentication result; If the historical authentication result is consistent with the authentication result, the authentication result verification result is obtained as verification passed; In the case that the historical authentication result is inconsistent with the authentication result, the authentication result verification result is that the authentication result fails.

7. The identity authentication method of a networking device according to claim 1, wherein: During the registration process of the networking device, a registration tracing record of the networking device is generated, wherein the registration tracing record includes at least a unique identifier of the networking device and a registration timestamp; during the authentication process of the networking device, an authentication tracing record of the networking device is generated, wherein the authentication tracing record includes at least a unique identifier of the networking device and an authentication timestamp; during the verification process of the authentication information, a verification tracing record of the networking device is generated, wherein the verification tracing record includes at least a unique identifier of the networking device and an authentication timestamp; The identity authentication method of the networking device further includes: In response to a query request for verifying the identity authentication process of the networking device, obtaining a target device ID and a query time range of the query request; The registration tracing record, the authentication tracing record, and the verification tracing record are determined from each registration tracing record, each authentication tracing record, and each verification tracing record in the device network space according to the target device ID and the query time range, wherein the target device ID corresponds to a unique identifier in the registration tracing record, the authentication tracing record, and the verification tracing record, and the query time range includes the registration timestamp and the authentication timestamp.

8. An identity authentication device for a networking device, characterized in that: The identity authentication device of the networking device includes: a registration module, configured to register the networking device according to a registration request sent by the networking device, and save registration information corresponding to the registration request in a device network space, wherein the device network space is composed of networked devices that have completed networking; an authentication module, configured to, after the networking device completes registration in the device network space, authenticate an authentication request sent by the networking device according to the registration information, obtain an authentication result of the networking device, and store the authentication information of the networking device in the device network space, wherein the authentication information includes the authentication request and the authentication result; The verification module is used to verify the authentication information according to the historical authentication records in the device network space, and save the verified verification results in the device network space.

9. An electronic device, characterized in that: The device includes: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the identity authentication method for a networking device according to any one of claims 1 to 7.

10. A storage medium, characterized in that: The storage medium is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by a processor, the steps of the identity authentication method for a networking device according to any one of claims 1 to 7 are implemented.

Images