Connection method and device of cloud platform, equipment and medium

Abstract

The invention discloses a cloud platform connection method and device, equipment and a medium. The method comprises the following steps: in response to an activation operation of a user, obtaining equipment access information pre-stored in a client through an access suite, and sending the equipment access information to a protocol suite; preprocessing the equipment access information through the protocol suite to obtain target access information, and sending the target access information to a cloud platform end; after receiving target response data sent by the cloud platform end, processing the target response data through the protocol suite to obtain platform access information; obtaining platform access information through the access suite, and obtaining cloud platform information matched with the activation operation according to the platform access information; and sending the cloud platform information to a cloud platform end so as to establish data connection between the client and the cloud platform end. Through the technical scheme of the invention, the data connection between the client and the cloud platform end can be realized, and the data security in the data connection process is improved.

Description

Technical Field

[0001] The present invention relates to the field of communication connection, and in particular to a connection method, device, equipment and medium for a cloud platform. Background Art

[0002] With the rapid development of the transportation digitalization industry, the demand for data monitoring and intelligent collaboration of Luhong equipment in the cloud is growing. In order to promote the development of a new generation of smart transportation products, the end-to-cloud solution continues to evolve and the number of devices continues to increase. However, in this development process, security issues have gradually become prominent.

[0003] Traditional end-to-end communication methods are not secure enough to meet the high requirements of current transportation equipment for data security and stable transmission. In traditional solutions, the MQTT protocol is usually used to build an end-to-end communication system between the device and the cloud. In this traditional model, the device is mainly responsible for data collection, processing and reporting, and receives and executes control commands issued by the cloud; the cloud is responsible for device management, data storage, command issuance and other functions. However, with the expansion of business and the increase in the number of devices, the limitations of traditional end-to-end communication methods have become increasingly obvious. Although encrypted transmission and identity authentication mechanisms are used to ensure communication security, its security is still weak in the face of increasingly complex network environments and diverse attack methods, and it cannot effectively respond to possible security threats.

[0004] In summary, the existing cloud platform connection method for devices has the problem of poor data security during the data connection process. Summary of the invention

[0005] The present invention provides a cloud platform connection method, device, equipment and medium, which can solve the problem of poor data security in the data connection process of the cloud platform connection method of existing equipment.

[0006] In a first aspect, an embodiment of the present invention provides a method for connecting to a cloud platform, which is performed by a client configured with an access suite and a protocol suite, and the method includes:

[0007] In response to the user's activation operation, the access kit obtains the device access information pre-stored in the client and sends it to the protocol kit;

[0008] Preprocessing the device access information through the protocol suite to obtain target access information, and sending the target access information to the cloud platform end, so that the cloud platform end can send target response data to the protocol suite in response to the target access information;

[0009] After receiving the target response data sent by the cloud platform, the target response data is processed through the protocol suite to obtain platform access information;

[0010] Acquiring the platform access information through the access kit, and obtaining cloud platform information matching the activation operation according to the platform access information;

[0011] The cloud platform information is sent to the cloud platform end to establish a data connection between the client and the cloud platform end.

[0012] In a second aspect, an embodiment of the present invention provides a method for connecting to a cloud platform, which is executed by a cloud platform end pre-configured with key information and certificate information, and the method includes:

[0013] After receiving the target access information sent by the client, decrypt it using a preset decryption algorithm to obtain device access information matching the target access information;

[0014] Extracting the target key and the target certificate in the device access information, and determining whether the target key and the target certificate are consistent with the pre-configured key information and certificate information;

[0015] When it is determined that the pre-configured key information and certificate information are consistent, an access result indicating successful access is generated, and response data is generated based on the access result and the pre-configured cloud platform address, target port number, access result, and cloud platform identifier;

[0016] The response data is encrypted by an encryption algorithm that matches the decryption algorithm to obtain target response data, and the target response data is sent to the client.

[0017] In a third aspect, an embodiment of the present invention provides a cloud platform connection device, which is executed by a client configured with an access kit and a protocol kit, and the device includes:

[0018] The device information acquisition module is used to respond to the user's activation operation, obtain the device access information pre-stored in the client through the access suite and send it to the protocol suite;

[0019] a target access information sending module, configured to pre-process the device access information through the protocol suite to obtain target access information, and send the target access information to the cloud platform end, so that the cloud platform end can send target response data to the protocol suite in response to the target access information;

[0020] A response data processing module is used to process the target response data sent by the cloud platform through a protocol suite after receiving the target response data, so as to obtain platform access information;

[0021] A cloud platform information acquisition module, used to acquire the platform access information through the access suite, and obtain cloud platform information matching the activation operation according to the platform access information;

[0022] The cloud platform information sending module is used to send the cloud platform information to the cloud platform end to establish a data connection between the client and the cloud platform end.

[0023] In a fourth aspect, an embodiment of the present invention provides a cloud platform connection device, which is executed by a cloud platform end pre-configured with key information and certificate information, and the device includes:

[0024] A decryption module, configured to, after receiving the target access information sent by the client, decrypt the information using a preset decryption algorithm to obtain device access information matching the target access information;

[0025] A consistency judgment module, used to extract the target key and target certificate in the device access information, and judge whether the target key and target certificate are consistent with the pre-configured key information and certificate information;

[0026] A response data generation module, used to generate an access result indicating successful access when it is determined that the pre-configured key information and certificate information are consistent, and generate response data based on the access result and the pre-configured cloud platform address, target port number, access result, and cloud platform identifier;

[0027] The encryption module is used to perform an encryption operation on the response data by using an encryption algorithm that matches the decryption algorithm to obtain target response data, and send the target response data to the client.

[0028] In a fifth aspect, an embodiment of the present invention provides an electronic device, the electronic device comprising:

[0029] at least one processor; and

[0030] a memory communicatively connected to the at least one processor; wherein,

[0031] The memory stores a computer program that can be executed by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute a cloud platform connection method described in any embodiment of the present invention.

[0032] In a sixth aspect, an embodiment of the present invention provides a computer-readable storage medium, wherein the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement a cloud platform connection method described in any embodiment of the present invention when executed.

[0033] The technical solution of the embodiment of the present invention is that a client configured with an access suite and a protocol suite first responds to a user's activation operation, obtains device access information pre-stored in the client through the access suite and sends it to the protocol suite, then pre-processes the device access information through the protocol suite to obtain target access information, and sends the target access information to the cloud platform end, then, after receiving target response data sent by the cloud platform end, processes the target response data through the protocol suite to obtain platform access information, obtains the platform access information through the access suite, and obtains cloud platform information matching the activation operation according to the platform access information, then sends the cloud platform information to the cloud platform end to establish a data connection between the client and the cloud platform end, and then, the cloud platform end pre-configured with secret key information and certificate information receives the target access information sent by the client. After receiving the target access information, a preset decryption algorithm is used to decrypt it to obtain device access information matching the target access information, the target key and target certificate in the device access information are extracted, and it is determined whether the target key and target certificate are consistent with the pre-configured key information and certificate information. After that, when it is determined that they are consistent with the pre-configured key information and certificate information, an access result of successful access is generated, and response data is generated based on the access result and the pre-configured cloud platform address, target port number, access result, and cloud platform identifier. Finally, the response data is encrypted by an encryption algorithm matching the decryption algorithm to obtain target response data, and the target response data is sent to the client, which solves the problem of poor data security in the data connection process of the existing device cloud platform connection method, realizes the data connection between the client and the cloud platform, and improves the data security in the data connection process.

[0034] It should be understood that the contents described in this section are not intended to identify the key or important features of the embodiments of the present invention, nor are they intended to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0036] Figure 1 is a flow chart of a cloud platform connection method provided according to Embodiment 1 of the present invention;

[0037] Figure 2is a flow chart of a cloud platform connection method provided according to Embodiment 2 of the present invention;

[0038] Figure 3 is a schematic diagram of the structure of a cloud platform connection device provided according to Embodiment 3 of the present invention;

[0039] Figure 4 is a schematic diagram of the structure of a cloud platform connection device provided according to a fourth embodiment of the present invention;

[0040] Figure 5 It is a structural schematic diagram of an electronic device for implementing a cloud platform connection method according to an embodiment of the present invention. DETAILED DESCRIPTION

[0041] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0042] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, any variation of the terms "including" and "having" is intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0043] Embodiment 1

[0044] Figure 1 This is a flow chart of a cloud platform connection method provided in Embodiment 1 of the present invention. This embodiment is applicable to situations where a client establishes a data connection with a cloud platform. The method can be executed by a cloud platform connection device. The cloud platform connection device can be implemented in the form of hardware and / or software. The cloud platform connection device can be configured in a client configured with an access kit and a protocol kit.

[0045] like Figure 1 As shown, the method includes:

[0046] S110. In response to an activation operation by the user, the access suite obtains device access information pre-stored in the client and sends the information to the protocol suite.

[0047] Among them, the device access information includes: a device unique identification code, device information, target key and target certificate pre-configured in the client; further, the information format of the device access information can be a JSON string; further, the JSON string is a lightweight data exchange format that uses an easy-to-read and easy-to-write text form to store and represent data. Its structure is based on the representation method of JS objects and is commonly used for network data transmission and storage.

[0048] Furthermore, the device unique identification code is a code used to uniquely identify a specific device, and the device information may be the model, manufacturer, operating parameters, etc. of the device configured by the client.

[0049] Optionally, relevant personnel in this field should be aware that the access suite can be loaded by an access engine pre-configured on the client; further, the access engine can be started by the service management module of the Hongmeng system, supporting functions such as automatic start-up and automatic restart when crashing, and running independently as a key system process.

[0050] S120. Preprocess the device access information through the protocol suite to obtain target access information, and send the target access information to the cloud platform end, so that the cloud platform end can send target response data to the protocol suite in response to the target access information.

[0051] Among them, the target response data includes: cloud platform address, target port number, access result and cloud platform identifier; further, the access result can be specifically access success or access failure. The access result is automatically generated by the cloud platform according to the target access information. It is a mature existing technology. This embodiment does not elaborate on the method of generating the access result.

[0052] Specifically, preprocessing the device access information through the protocol suite to obtain target access information includes: using a preset encryption algorithm to perform an encryption operation on the device access information to obtain the target access information.

[0053] Exemplarily, in this embodiment, the preset encryption algorithm can be a combination of the SM4 national secret algorithm and base64 encoding; wherein, the SM4 national secret algorithm is a symmetric key block cipher algorithm, formulated by the State Cryptography Administration of my country, and its security has been strictly tested and verified, and can resist various known attack methods such as differential attacks and linear attacks, and is widely used in the fields of data encryption and information security, and the Base64 is a method of using 64 printable characters to represent any binary data. This encoding method is often used in scenarios such as email transmission and web page storage, because it can convert invisible binary data into visible ASCII string form, but it should be noted that the Base64-encoded data is not readable and needs to be decoded to restore to the original data; in a specific implementation scenario of this embodiment, when the protocol suite receives the device access information, it first uses the SM4 national secret algorithm to process the device access information, and then encodes the processed information using Base64 encoding to obtain the target access information.

[0054] Optionally, in this embodiment, the target access information is sent to the cloud platform end, specifically including: the protocol suite sends the target access information to the cloud platform end through the HTTP protocol; wherein, the HTTP (HyperText Transfer Protocol) is the most widely used network protocol on the Internet, used for data communication between clients and servers, and is usually used to request and transmit network resources such as web pages, pictures, and videos.

[0055] S130: After receiving the target response data sent by the cloud platform, the target response data is processed through the protocol suite to obtain platform access information.

[0056] Specifically, after receiving the target response data sent by the cloud platform, the target response data is processed through the protocol suite to obtain platform access information, including: using a decryption algorithm matching a preset encryption algorithm to decrypt the target response data to obtain platform access information.

[0057] Optionally, in this embodiment, the target response data can be the identity authentication information of the MQTT protocol (Message Queuing Telemetry Transport) matching the cloud platform end; further, the MQTT is a lightweight publish / subscribe message transmission protocol designed specifically for the Internet of Things (IoT) and sensor networks, which can efficiently transmit data in low-bandwidth, high-latency or unstable network environments, and is particularly suitable for real-time, two-way communication between devices and cloud platforms.

[0058] S140: Acquire the platform access information through the access suite, and obtain cloud platform information matching the activation operation according to the platform access information.

[0059] Specifically, the platform access information is obtained through the access suite, and cloud platform information matching the activation operation is obtained based on the platform access information, including: parsing the platform access information to determine whether the access result in the platform access information is a successful access; after determining that the access result is a successful access, the cloud platform address, target port number, cloud platform identifier, and device access information in the platform access information are sent as cloud platform information to the protocol suite through the access suite.

[0060] In a specific implementation scenario of this embodiment, the corresponding platform access information is obtained through the access kit, and based on the obtained platform access information, the cloud platform information that is mutually compatible with the activation operation is derived. For example, in a smart home system, the platform access information may include the connection status, network parameters, and other contents of various smart home appliances. Specifically, the platform access information is obtained through the access kit, and the cloud platform information that matches the activation operation is obtained according to the platform access information, which includes the following steps: parsing the platform access information to determine whether the access result in the platform access information is a successful access; when the access result is determined to be a successful access, the cloud platform address in the platform access information, such as the specific IP address "192.168.0.1", the target port number, such as "8080", and the cloud platform identifier, such as the specific identification code "YPT-001", and the device access information are sent to the protocol suite as cloud platform information.

[0061] S150: Send the cloud platform information to the cloud platform end to establish a data connection between the client and the cloud platform end.

[0062] The data connection method may be a connection supporting the MQTT protocol.

[0063] The technical solution of the embodiment of the present invention is that a client configured with an access suite and a protocol suite first responds to the user's activation operation, obtains device access information pre-stored in the client through the access suite and sends it to the protocol suite, then pre-processes the device access information through the protocol suite to obtain target access information, and sends the target access information to the cloud platform end, then, after receiving the target response data sent by the cloud platform end, processes the target response data through the protocol suite to obtain platform access information, obtains the platform access information through the access suite, and obtains the cloud platform information matching the activation operation according to the platform access information, and finally sends the cloud platform information to the cloud platform end to establish a data connection between the client and the cloud platform end, thereby realizing the data connection between the client and the cloud platform end and improving the data security during the data connection process.

[0064] Embodiment 2

[0065] Figure 2 A flow chart of a cloud platform connection method provided in Embodiment 2 of the present invention. This embodiment is applicable to situations where a client establishes a data connection with a cloud platform. The method can be executed by a cloud platform connection device. The cloud platform connection device can be implemented in the form of hardware and / or software. The cloud platform connection device can be configured in a cloud platform end that is pre-configured with key information and certificate information.

[0066] like Figure 2 As shown, the method includes:

[0067] S210: After receiving the target access information sent by the client, decrypt it using a preset decryption algorithm to obtain device access information matching the target access information.

[0068] Among them, the decryption algorithm can be a decryption algorithm that supports the SM4 national encryption algorithm to ensure that the data encrypted by step S120 can be decrypted by the cloud platform.

[0069] S220: Extract the target key and target certificate in the device access information, and determine whether the target key and target certificate are consistent with the pre-configured key information and certificate information.

[0070] It should be noted that in this embodiment, a successful access result can be generated only when the target key and target certificate are consistent with the pre-configured key information and certificate information. If at least one of the two is inconsistent with the pre-configured information, an access failure result is generated to refuse the client from establishing a connection with the cloud platform to ensure the security of the data connection.

[0071] S230. When it is determined that the information is consistent with the pre-configured key information and certificate information, an access result indicating successful access is generated, and response data is generated based on the access result and the pre-configured cloud platform address, target port number, access result, and cloud platform identifier.

[0072] S240: encrypt the response data using an encryption algorithm that matches the decryption algorithm to obtain target response data, and send the target response data to the client.

[0073] Based on the above steps, the encryption algorithm may be the SM4 national encryption algorithm.

[0074] Optionally, based on the above steps, the method also includes: after receiving the cloud platform information sent by the client, extracting the first cloud platform address, the first target port number and the first cloud platform identifier in the cloud platform information, and determining whether the first cloud platform address, the first target port number and the first cloud platform identifier match the cloud platform end; after determining that they match the cloud platform end, extracting the first device identification code and the first device information in the cloud platform information, and determining whether the first device identification code is consistent with the device unique identification code in the device access information, and at the same time determining whether the first device information is consistent with the device information in the device access information; if the first device identification code is consistent with the device unique identification code, and the first device information is consistent with the device access information, then establishing a data transmission channel with the client, so that the client establishes a data connection with the cloud platform end through the data transmission channel.

[0075] The technical solution of the embodiment of the present invention is that after receiving the target access information sent by the client, the cloud platform end pre-configured with key information and certificate information uses a preset decryption algorithm to decrypt, obtains device access information matching the target access information, extracts the target key and target certificate in the device access information, and determines whether the target key and target certificate are consistent with the pre-configured key information and certificate information. After that, when it is determined that they are consistent with the pre-configured key information and certificate information, an access result of successful access is generated, and response data is generated based on the access result and the pre-configured cloud platform address, target port number, access result, and cloud platform identifier. Finally, the response data is encrypted by an encryption algorithm matching the decryption algorithm to obtain target response data, and the target response data is sent to the client, thereby realizing data connection between the client and the cloud platform end and improving data security during the data connection process.

[0076] Embodiment 3

[0077] Figure 3This is a schematic diagram of the structure of a cloud platform connection device provided in Embodiment 3 of the present invention. Figure 3 As shown, the device comprises:

[0078] The device information acquisition module 310 is used to respond to the user's activation operation, obtain the device access information pre-stored in the client through the access suite and send it to the protocol suite;

[0079] A target access information sending module 320 is used to pre-process the device access information through the protocol suite to obtain target access information, and send the target access information to the cloud platform end, so that the cloud platform end can send target response data to the protocol suite in response to the target access information;

[0080] The response data processing module 330 is used to process the target response data sent by the cloud platform through the protocol suite after receiving the target response data to obtain platform access information;

[0081] A cloud platform information acquisition module 340, configured to acquire the platform access information through the access kit, and obtain cloud platform information matching the activation operation according to the platform access information;

[0082] The cloud platform information sending module 350 is used to send the cloud platform information to the cloud platform end to establish a data connection between the client and the cloud platform end.

[0083] The technical solution of the embodiment of the present invention is that a client configured with an access suite and a protocol suite first responds to the user's activation operation, obtains device access information pre-stored in the client through the access suite and sends it to the protocol suite, then pre-processes the device access information through the protocol suite to obtain target access information, and sends the target access information to the cloud platform end, then, after receiving the target response data sent by the cloud platform end, processes the target response data through the protocol suite to obtain platform access information, obtains the platform access information through the access suite, and obtains the cloud platform information matching the activation operation according to the platform access information, and finally sends the cloud platform information to the cloud platform end to establish a data connection between the client and the cloud platform end, thereby realizing the data connection between the client and the cloud platform end and improving the data security during the data connection process.

[0084] On the basis of the above embodiment, the target access information sending module 320 is specifically used to: use a preset encryption algorithm to encrypt the device access information to obtain the target access information;

[0085] On the basis of the above embodiment, the response data processing module 330 is specifically used to: use a decryption algorithm that matches a preset encryption algorithm to perform a decryption operation on the target response data to obtain platform access information.

[0086] Based on the above embodiment, the cloud platform information acquisition module 340 includes:

[0087] An information parsing unit, used to parse the platform access information and determine whether the access result in the platform access information is successful access;

[0088] The cloud platform information acquisition unit is used to send the cloud platform address, target port number, cloud platform identifier and device access information in the platform access information as cloud platform information to the protocol suite through the access suite after determining that the access result is successful access.

[0089] A cloud platform connection device provided in an embodiment of the present invention can execute a cloud platform connection method provided in any embodiment of the present invention, and has functional modules and beneficial effects corresponding to the execution method.

[0090] Embodiment 4

[0091] Figure 4 This is a schematic diagram of the structure of a cloud platform connection device provided by the fourth embodiment of the present invention. Figure 4 As shown, the device comprises:

[0092] The decryption module 410 is used to decrypt the target access information sent by the client using a preset decryption algorithm to obtain device access information matching the target access information;

[0093] The consistency determination module 420 is used to extract the target key and the target certificate in the device access information, and determine whether the target key and the target certificate are consistent with the pre-configured key information and certificate information;

[0094] The response data generation module 430 is used to generate an access result indicating successful access when it is determined that the pre-configured key information and certificate information are consistent, and generate response data based on the access result and the pre-configured cloud platform address, target port number, access result, and cloud platform identifier;

[0095] The encryption module 440 is used to perform an encryption operation on the response data by using an encryption algorithm that matches the decryption algorithm to obtain target response data, and send the target response data to the client.

[0096] The technical solution of the embodiment of the present invention is that after receiving the target access information sent by the client, the cloud platform end pre-configured with key information and certificate information uses a preset decryption algorithm to decrypt, obtains device access information matching the target access information, extracts the target key and target certificate in the device access information, and determines whether the target key and target certificate are consistent with the pre-configured key information and certificate information. After that, when it is determined that they are consistent with the pre-configured key information and certificate information, an access result of successful access is generated, and response data is generated based on the access result and the pre-configured cloud platform address, target port number, access result, and cloud platform identifier. Finally, the response data is encrypted by an encryption algorithm matching the decryption algorithm to obtain target response data, and the target response data is sent to the client, thereby realizing data connection between the client and the cloud platform end and improving data security during the data connection process.

[0097] On the basis of the above embodiments, the device also includes: an information comparison module, which is used to extract the first cloud platform address, the first target port number and the first cloud platform identifier in the cloud platform information after receiving the cloud platform information sent by the client, and determine whether the first cloud platform address, the first target port number and the first cloud platform identifier match the cloud platform end; after determining that it matches the cloud platform end, extract the first device identification code and the first device information in the cloud platform information, determine whether the first device identification code is consistent with the device unique identification code in the device access information, and at the same time determine whether the first device information is consistent with the device information in the device access information; if the first device identification code is consistent with the device unique identification code, and the first device information is consistent with the device access information, then establish a data transmission channel between the client and the client, so that the client can establish a data connection with the cloud platform end through the data transmission channel.

[0098] Embodiment 5

[0099] Figure 5 A schematic diagram of the structure of an electronic device 10 that can be used to implement an embodiment of the present invention is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present invention described and / or required herein.

[0100] like Figure 5As shown, the electronic device 10 includes at least one processor 11, and a memory connected to the at least one processor 11, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc., wherein the memory stores a computer program that can be executed by at least one processor, and the processor 11 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 12 or the computer program loaded from the storage unit 18 to the random access memory (RAM) 13. In the RAM 13, various programs and data required for the operation of the electronic device 10 can also be stored. The processor 11, the ROM 12, and the RAM 13 are connected to each other through a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0101] A number of components in the electronic device 10 are connected to the I / O interface 15, including: an input unit 16, such as a keyboard, a mouse, etc.; an output unit 17, such as various types of displays, speakers, etc.; a storage unit 18, such as a disk, an optical disk, etc.; and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0102] The processor 11 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any appropriate processor, controller, microcontroller, etc. The processor 11 executes the various methods and processes described above, such as a method for connecting to a cloud platform.

[0103] Accordingly, the method performed by a client configured with an access suite and a protocol suite includes:

[0104] In response to the user's activation operation, the access kit obtains the device access information pre-stored in the client and sends it to the protocol kit;

[0105] Preprocessing the device access information through the protocol suite to obtain target access information, and sending the target access information to the cloud platform end, so that the cloud platform end can send target response data to the protocol suite in response to the target access information;

[0106] After receiving the target response data sent by the cloud platform, the target response data is processed through the protocol suite to obtain platform access information;

[0107] Acquiring the platform access information through the access kit, and obtaining cloud platform information matching the activation operation according to the platform access information;

[0108] The cloud platform information is sent to the cloud platform end to establish a data connection between the client and the cloud platform end.

[0109] In some embodiments, a method for connecting to a cloud platform may be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as a storage unit 18. In some embodiments, part or all of the computer program may be loaded and / or installed on the electronic device 10 via the ROM 12 and / or the communication unit 19. When the computer program is loaded into the RAM 13 and executed by the processor 11, one or more steps of the method for connecting to a cloud platform described above may be performed. Alternatively, in other embodiments, the processor 11 may be configured to perform a method for connecting to a cloud platform in any other appropriate manner (e.g., by means of firmware).

[0110] Various implementations of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various implementations can include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0111] Computer programs for implementing the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that when the computer program is executed by the processor, the functions / operations specified in the flow chart and / or block diagram are implemented. The computer program may be executed entirely on the machine, partially on the machine, partially on the machine and partially on a remote machine as a stand-alone software package, or entirely on a remote machine or server.

[0112] In the context of the present invention, a computer-readable storage medium may be a tangible medium that may contain or store a computer program for use by or in combination with an instruction execution system, device or equipment. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices or equipment, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0113] To provide interaction with a user, the systems and techniques described herein may be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or trackball) through which the user can provide input to the electronic device. Other types of devices may also be used to provide interaction with the user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form (including acoustic input, voice input, or tactile input).

[0114] The systems and techniques described herein may be implemented in a computing system that includes backend components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes frontend components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such backend components, middleware components, or frontend components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.

[0115] A computing system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The client and server relationship is generated by computer programs running on the corresponding computers and having a client-server relationship with each other. The server may be a cloud server, also known as a cloud computing server or cloud host, which is a host product in the cloud computing service system to solve the defects of difficult management and weak business scalability in traditional physical hosts and VPS services.

[0116] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps described in the present invention can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solution of the present invention can be achieved, and this document does not limit this.

Claims

1. A method for connecting to a cloud platform, executed by a client configured with an access kit and a protocol kit, characterized in that: include: In response to the user's activation operation, the access kit obtains the device access information pre-stored in the client and sends it to the protocol kit; Preprocessing the device access information through the protocol suite to obtain target access information, and sending the target access information to the cloud platform end, so that the cloud platform end can send target response data to the protocol suite in response to the target access information; After receiving the target response data sent by the cloud platform, the target response data is processed through the protocol suite to obtain platform access information; Acquiring the platform access information through the access kit, and obtaining cloud platform information matching the activation operation according to the platform access information; The cloud platform information is sent to the cloud platform end to establish a data connection between the client and the cloud platform end.

2. The method according to claim 1, characterized in that Preprocessing the device access information through the protocol suite to obtain target access information includes: Using a preset encryption algorithm to encrypt the device access information to obtain target access information; And, after receiving the target response data sent by the cloud platform, the target response data is processed through the protocol suite to obtain platform access information, including: The target response data is decrypted using a decryption algorithm that matches the preset encryption algorithm to obtain platform access information.

3. The method according to claim 1, characterized in that: The device access information includes: a device unique identification code, device information, a target key, and a target certificate pre-configured in the client; The target response data includes: cloud platform address, target port number, access result and cloud platform identifier.

4. The method according to claim 1, characterized in that Acquiring the platform access information through the access kit, and obtaining cloud platform information matching the activation operation according to the platform access information, including: Parsing the platform access information, and determining whether the access result in the platform access information is successful access; After determining that the access result is successful access, the cloud platform address, target port number, cloud platform identifier and device access information in the platform access information are sent to the protocol suite as cloud platform information through the access suite.

5. A cloud platform connection method, executed by a cloud platform end pre-configured with key information and certificate information, characterized in that: include: After receiving the target access information sent by the client, decrypt it using a preset decryption algorithm to obtain device access information matching the target access information; Extracting the target key and the target certificate in the device access information, and determining whether the target key and the target certificate are consistent with the pre-configured key information and certificate information; When it is determined that the pre-configured key information and certificate information are consistent, an access result indicating successful access is generated, and response data is generated based on the access result and the pre-configured cloud platform address, target port number, access result, and cloud platform identifier; The response data is encrypted by an encryption algorithm that matches the decryption algorithm to obtain target response data, and the target response data is sent to the client.

6. The method according to claim 5, characterized in that The method further comprises: After receiving the cloud platform information sent by the client, extract the first cloud platform address, the first target port number and the first cloud platform identifier in the cloud platform information, and determine whether the first cloud platform address, the first target port number and the first cloud platform identifier match the cloud platform end; After determining that the device matches the cloud platform, extract the first device identification code and the first device information in the cloud platform information, determine whether the first device identification code is consistent with the device unique identification code in the device access information, and determine whether the first device information is consistent with the device information in the device access information; If the first device identification code is consistent with the device unique identification code, and the first device information is consistent with the device access information, a data transmission channel is established with the client, so that the client establishes a data connection with the cloud platform through the data transmission channel.

7. A cloud platform connection device, executed by a client configured with an access kit and a protocol kit, characterized in that: include: The device information acquisition module is used to respond to the user's activation operation, obtain the device access information pre-stored in the client through the access suite and send it to the protocol suite; a target access information sending module, configured to pre-process the device access information through the protocol suite to obtain target access information, and send the target access information to the cloud platform end, so that the cloud platform end can send target response data to the protocol suite in response to the target access information; A response data processing module is used to process the target response data sent by the cloud platform through a protocol suite after receiving the target response data, so as to obtain platform access information; A cloud platform information acquisition module, used to acquire the platform access information through the access suite, and obtain cloud platform information matching the activation operation according to the platform access information; The cloud platform information sending module is used to send the cloud platform information to the cloud platform end to establish a data connection between the client and the cloud platform end.

8. A cloud platform connection device, executed by a cloud platform end pre-configured with key information and certificate information, characterized in that: include: A decryption module, configured to, after receiving the target access information sent by the client, decrypt the information using a preset decryption algorithm to obtain device access information matching the target access information; A consistency judgment module, used to extract the target key and target certificate in the device access information, and judge whether the target key and target certificate are consistent with the pre-configured key information and certificate information; A response data generation module, used to generate an access result indicating successful access when it is determined that the pre-configured key information and certificate information are consistent, and generate response data based on the access result and the pre-configured cloud platform address, target port number, access result, and cloud platform identifier; The encryption module is used to perform an encryption operation on the response data by using an encryption algorithm that matches the decryption algorithm to obtain target response data, and send the target response data to the client.

9. An electronic device, characterized in that: The electronic device comprises: at least one processor; and a memory communicatively connected to the at least one processor; wherein, The memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute a cloud platform connection method according to any one of claims 1 to 6.

10. A computer-readable medium, characterized in that The computer-readable medium stores computer instructions, and the computer instructions are used to enable a processor to implement a cloud platform connection method according to any one of claims 1 to 6 when executed.

Images