Information encryption communication method for Internet of Things security and computer equipment

Abstract

The embodiment of the invention relates to the field of information encryption communication, in particular to an information encryption communication method for Internet of Things security and computer equipment. A specific embodiment of the method comprises the following steps: a target mobile terminal generates transmission key request information, and sends information operation request information and the transmission key request information to a target server; the target server generates to-be-stored information and sends the to-be-stored information to the data access control terminal; the data access control terminal responds to the received to-be-stored information, encrypts and stores the to-be-stored information to obtain encrypted storage result information, and sends the encrypted storage result information to the target server; the target server responds to the received encrypted storage result information and sends the encrypted storage result information to the target mobile terminal; and the target mobile terminal sends the encrypted storage result information to the target user terminal. According to the embodiment, the communication security of the Internet of Things is improved.

Description

Technical Field

[0001] The embodiments of the present application relate to the field of information encryption communication, and specifically to information encryption communication methods and computer equipment for Internet of Things security. Background Art

[0002] In the application scenarios of IoT communication (for example, smart home or smart driving), it is necessary to improve the security of IoT communication to defend against network attacks. At present, when performing information encryption communication for IoT security, the commonly used method is: the communication encryption of some IoT devices (for example, smart door locks) adopts weak authentication, default passwords, etc.

[0003] However, in practice, it is found that when the above method is used for information encryption communication for IoT security, the following technical problems often occur: By using weak authentication and default passwords, the password is less difficult to crack. However, when a network attack occurs, network communication information can be easily stolen, resulting in reduced security of IoT devices and, in turn, reduced security of IoT communications. Summary of the invention

[0004] The content of this application is used to introduce concepts in a brief form, which will be described in detail in the detailed implementation section below. The content of this application is not intended to identify the key features or essential features of the technical solution claimed for protection, nor is it intended to limit the scope of the technical solution claimed for protection.

[0005] Some embodiments of the present application propose information encryption communication methods for IoT security to solve one or more of the technical problems mentioned in the above background technology section.

[0006] In a first aspect, some embodiments of the present application provide an information encryption communication method, a computer device and a computer-readable storage medium for Internet of Things security, the method comprising: the target mobile terminal generates transmission key request information based on the information operation request information in response to receiving information operation request information sent by the target user terminal, and sends the information operation request information and the transmission key request information to the target server; the target server generates information to be stored based on the information operation request information in response to receiving the transmission key request information and determining that the transmission key request information meets a preset storage condition, and sends the information to be stored to a data access control terminal; the data access control terminal performs encryption storage processing on the information to be stored in response to receiving the information to be stored to obtain encrypted storage result information, and sends the encrypted storage result information to the target server; the target server sends the encrypted storage result information to the target mobile terminal in response to receiving the encrypted storage result information; the target mobile terminal sends the encrypted storage result information to the target user terminal in response to receiving the encrypted storage result information.

[0007] In a second aspect, the present application also provides a computer device, comprising a processor, a memory, and a computer program stored in the memory and executable by the processor, wherein when the computer program is executed by the processor, the method described in any implementation of the first aspect is implemented.

[0008] In a third aspect, the present application further provides a computer-readable storage medium, on which a computer program is stored, wherein when the computer program is executed by a processor, the method described in any implementation of the first aspect is implemented.

[0009] The above-mentioned embodiments of the present application have the following beneficial effects: through the information encryption communication method for the security of the Internet of Things of some embodiments of the present application, the security of the Internet of Things communication can be improved. Specifically, the reason for the reduction in the security of the Internet of Things communication is that the password is cracked with a low difficulty by using weak authentication, default passwords, etc. When a network attack occurs, the network communication information is easily stolen, resulting in the reduction of the security of the Internet of Things device. Based on this, the information encryption communication method for the security of the Internet of Things of some embodiments of the present application, first, the target mobile terminal responds to the information operation request information sent by the target user terminal, generates a transmission key request information based on the above information operation request information, and sends the above information operation request information and the above transmission key request information to the target server. Thus, the server can receive the key request information and the communication information that the user terminal wants to encrypt and store. Secondly, the above target server responds to the reception of the above transmission key request information, responds to the determination that the above transmission key request information meets the preset storage condition, generates the information to be stored based on the above information operation request information, and sends the information to be stored to the data access control terminal. Thus, the server can generate or request a key, and encrypt and transmit the communication information based on the key. Then, in response to receiving the information to be stored, the data access control terminal performs encrypted storage processing on the information to be stored, obtains encrypted storage result information, and sends the encrypted storage result information to the target server. Thus, the data access control terminal can encrypt and store the received information. Then, in response to receiving the encrypted storage result information, the target server sends the encrypted storage result information to the target mobile terminal. Finally, in response to receiving the encrypted storage result information, the target mobile terminal sends the encrypted storage result information to the target user terminal. Thus, the Internet of Things encrypted communication and encrypted storage can be completed. Therefore, in some of the information encryption communication methods for Internet of Things security of the present application, the server can apply for a one-time key from the password card for encryption of communication information, and then the data access control terminal can apply for a storage key from the password card for encrypted storage of information, thereby improving the security of information authentication and transmission, reducing the possibility of network communication information being stolen, and thus improving the security of Internet of Things communication. BRIEF DESCRIPTION OF THE DRAWINGS

[0010] The above and other features, advantages and aspects of the embodiments of the present application will become more apparent with reference to the following detailed description in conjunction with the accompanying drawings. Throughout the accompanying drawings, the same or similar reference numerals represent the same or similar elements. It should be understood that the drawings are schematic and that components and elements are not necessarily drawn to scale.

[0011] Figure 1is a flowchart of some embodiments of the information encryption communication method for Internet of Things security according to the present application; Figure 2 It is a schematic diagram of an application scenario of some embodiments of the information encryption communication method for Internet of Things security according to the present application; Figure 3 It is a schematic diagram of the structure of a computer device suitable for implementing some embodiments of the present application. DETAILED DESCRIPTION

[0012] Embodiments of the present application will be described in more detail below with reference to the accompanying drawings. Although certain embodiments of the present application are shown in the accompanying drawings, it should be understood that the present application can be implemented in various forms and should not be construed as being limited to the embodiments set forth herein. On the contrary, these embodiments are provided to provide a more thorough and complete understanding of the present application. It should be understood that the drawings and embodiments of the present application are only for exemplary purposes and are not intended to limit the scope of protection of the present application.

[0013] It should also be noted that, for ease of description, only the parts related to the invention are shown in the drawings. In the absence of conflict, the embodiments and features in the embodiments of the present application can be combined with each other.

[0014] It should be noted that the concepts such as "first" and "second" mentioned in this application are only used to distinguish different devices, modules or units, and are not used to limit the order or interdependence of the functions performed by these devices, modules or units.

[0015] It should be noted that the modifications of "one" and "plurality" mentioned in the present application are illustrative rather than restrictive, and those skilled in the art should understand that unless otherwise clearly indicated in the context, it should be understood as "one or more".

[0016] The names of the messages or information exchanged between multiple devices in the embodiments of the present application are only used for illustrative purposes and are not used to limit the scope of these messages or information.

[0017] The present application will be described in detail below with reference to the accompanying drawings and in combination with embodiments.

[0018] Figure 1 The process 100 of some embodiments of the information encryption communication method for Internet of Things security according to the present application is shown. The information encryption communication method for Internet of Things security includes the following steps: Step 101: In response to receiving information operation request information sent by a target user terminal, the target mobile terminal generates transmission key request information based on the information operation request information, and sends the information operation request information and the transmission key request information to the target server.

[0019] In some embodiments, in response to receiving the information operation request information sent by the target user terminal, the target mobile terminal can generate transmission key request information based on the information operation request information, and send the information operation request information and the transmission key request information to the target server. The target server can include: a memory.

[0020] Specifically, the target mobile terminal may receive information operation request information sent by the target user terminal by wireless connection or wired connection. Based on the above information operation request information, the transmission key request information is generated, which may be: the preset access token information and the preset encryption key request information are determined as the transmission key request information. The above preset access token information may be a pre-generated access token for accessing the target server. The above preset encryption key request information may be pre-generated information for representing the desire to obtain the transmission key. The above target mobile terminal may be a terminal for communicating with the above target server. The above target mobile terminal may include: an encryption and decryption service module. The above encryption and decryption service module may be a chip for running encryption algorithms and decryption algorithms.

[0021] The target user terminal may be a terminal that wants to perform information operations (e.g., storage or query). The information operation request information may include, but is not limited to: user identification and information operation category information. The user identification may uniquely identify a target user terminal. The information operation category information may be information representing "storage" or information representing "query".

[0022] The target server may be a server for communicating with the target mobile terminal and the data access control terminal. The memory included in the target server may be a memory for storing a key.

[0023] As an example, the target user terminal may be an APP (Application) for controlling IoT devices. The target mobile terminal may be a mobile phone or a tablet. The IoT devices may be a car audio system, a car air conditioner or a car TV.

[0024] It should be noted that the above wireless connection methods may include but are not limited to 3G / 4G connection, WiFi connection, Bluetooth connection, WiMAX connection, Zigbee connection, UWB (ultra wideband) connection, and other wireless connection methods currently known or to be developed in the future.

[0025] Step 102, the target server, in response to receiving the transmission key request information and determining that the transmission key request information meets the preset storage condition, generates information to be stored based on the information operation request information, and sends the information to be stored to the data access control terminal.

[0026] In some embodiments, in response to receiving the transmission key request information and determining that the transmission key request information satisfies a preset storage condition, the target server may generate information to be stored based on the information operation request information, and send the information to be stored to the data access control terminal. The preset storage condition may be that the information operation category information included in the transmission key request information is information representing "storage". The information to be stored may be binary coded. The data access control terminal may be a control terminal for accessing a data storage terminal. The data storage terminal may be a terminal for storing IoT data.

[0027] As an example, the IoT data may be at least one of the following but is not limited to: current vehicle speed, current battery power or multimedia information.

[0028] In some optional implementations of some embodiments, the target server generates the information to be stored based on the information operation request information, which may include the following steps: The first step is to generate a storage key pair request information, and send the storage key pair request information to the target security password card. The generation of the storage key pair request information may be: determining the preset request information as the storage key pair request information. The preset request information may be pre-generated information used to represent the key pair that is desired to be obtained. The target security password card may be a password card used to generate public keys and private keys.

[0029] The second step is to receive storage transmission public key information and storage transmission private key information from the target security password card. The storage transmission public key information may be a public key for performing storage information transmission encryption. The storage transmission private key information may be a private key for performing storage information transmission encryption.

[0030] The third step is to store the above-mentioned storage and transmission private key information in the memory included in the above-mentioned target server, and send the above-mentioned storage and transmission public key information to the above-mentioned target mobile terminal.

[0031] The fourth step is to receive the encrypted storage information from the target mobile terminal. The encrypted storage information may be generated by the encryption and decryption service module of the target mobile terminal based on the storage transmission public key information and by encrypting the IoT data (e.g., movies) to be stored using a preset encryption algorithm.

[0032] As an example, the preset encryption algorithm may be, but is not limited to, at least one of the following: a DES (Data Encryption Standard) algorithm or an AES (Advanced Encryption Standard) algorithm.

[0033] The fifth step is to decrypt the encrypted storage information based on the storage transmission private key information to obtain the information to be stored. In particular, based on the storage transmission private key information, the encrypted storage information can be decrypted by a preset decryption algorithm to obtain the information to be stored.

[0034] As an example, the above-mentioned preset decryption algorithm may be but is not limited to at least one of the following: a DES algorithm or an AES algorithm.

[0035] In the sixth step, the storage transmission private key information is deleted from the memory included in the target server. Thus, a one-time encryption algorithm can be implemented, that is, the key is used only once and is not reused, thereby further improving the security of IoT communication.

[0036] Optionally, in response to receiving the storage transmission public key information and the storage transmission private key information sent by the target security password card, before storing the storage transmission private key information in the memory included in the target server, the target server may further perform the following steps: The first step is to obtain a key category table from the target security password card in response to receiving the key negotiation request information sent by the target mobile terminal. The key category table may include: a key category information set. Here, the key negotiation request information may indicate that the target mobile terminal wants to negotiate a key with the target server. The key category information in the key category information set may indicate a key category.

[0037] As an example, the key category may be, but is not limited to, at least one of the following: a pre-shared key, a dynamically allocated key, a hardware key, or a software key.

[0038] The second step is to select target key category information from the key category information set included in the key category table, and send the target key category information to the target mobile terminal. A key category information can be randomly selected from the key category information set included in the key category table as the target key category information.

[0039] The third step is to receive key category response information from the target mobile terminal, wherein the key category response information may be information indicating that "the target mobile terminal supports the key category" or information indicating that "the target mobile terminal does not support the key category".

[0040] In the fourth step, in response to determining that the key category response information satisfies the preset key condition, the password card key request information corresponding to the target key category information is generated, and the password card key request information is sent to the target security password card. The preset key condition may be that the key category response information is information indicating that "the target mobile terminal supports the key category". The generation of the password card key request information corresponding to the target key category information may be to determine the information indicating "requesting the key corresponding to the target key category information" as the password card key request information.

[0041] Optionally, the target server may also select target key category information from each key category information not selected in the key category information set in response to determining that the key category response information does not meet the preset key condition, and send the target key category information to the target mobile terminal to receive the key category response information again. The key category information may be randomly selected from each key category information not selected in the key category information set as the target key category information.

[0042] Optionally, before the data access control terminal performs encrypted storage processing on the information to be stored in response to receiving the information to be stored, obtains encrypted storage result information, and sends the encrypted storage result information to the target server, the information encryption communication for Internet of Things security may further include the following steps: In the first step, the target server obtains the first hash value and the second hash value from the first signature terminal and the second signature terminal respectively. The first signature terminal may be a terminal for digital signature. The second signature terminal may be a terminal for digital signature.

[0043] In the second step, the target server performs a fusion process on the first hash value, the second hash value and the information to be stored to obtain the fused information to be stored. The target server performs a fusion process on the first hash value, the second hash value and the information to be stored to obtain the fused information to be stored, which may be: the target server determines the first hash value, the second hash value and the information to be stored as the first hash value, the second hash value and the information to be stored included in the fused information to be stored.

[0044] In the third step, the target server generates the first blinding factor information and the second blinding factor information. The target server may randomly generate the first blinding factor information and the second blinding factor information. Here, the first blinding factor information may be binary coded. The second blinding factor information may be binary coded.

[0045] In the fourth step, the target server blinds the fused information to be stored based on the first blinding factor information and the second blinding factor information to obtain blinded information to be stored, and sends the blinded information to be stored to the first signature terminal. The target server can blind the fused information to be stored based on the first blinding factor information and the second blinding factor information by using a preset blinding algorithm to obtain blinded information to be stored.

[0046] As an example, the preset blinding algorithm may be SM2 (national secret algorithm).

[0047] In step 5, in response to receiving the blinded information to be stored, the first signing terminal performs unblinding processing on the blinded information to be stored to obtain first unblinding information, and sends the first unblinding information to the second signing terminal. The first signing terminal may perform unblinding processing on the blinded information to be stored by using the preset blinding algorithm to obtain the first unblinding information.

[0048] In step 6, in response to receiving the first unblinding information, the second signing terminal performs unblinding processing on the first unblinding information to obtain second unblinding information, and sends the second unblinding information to the first signing terminal. The second signing terminal may perform unblinding processing on the first unblinding information by using the preset blinding algorithm to obtain second unblinding information.

[0049] In step 7, in response to receiving the second unblinding information, the first signing terminal performs unblinding processing on the second unblinding information to obtain third unblinding information, and sends the third unblinding information to the target server. The second signing terminal may perform unblinding processing on the first unblinding information by using the preset blinding algorithm to obtain second unblinding information.

[0050] In the eighth step, the target server converts the third unblinding information based on the first blinding factor information and the second blinding factor information to obtain target unblinding information. The target server converts the third unblinding information based on the first blinding factor information and the second blinding factor information to obtain target unblinding information, which may be: first, the product of the value represented by the third unblinding information and the value represented by the first blinding factor information is determined as the fourth unblinding information. Then, the difference between the value represented by the fourth unblinding information and the value represented by the second blinding factor information is determined as the target unblinding information.

[0051] In the ninth step, the target server determines the target unblinding information as information to be stored, and sends the information to be stored to the data access control terminal.

[0052] Optionally, before the target server obtains the first hash value and the second hash value from the first signing terminal and the second signing terminal respectively, the information encryption communication for Internet of Things security may further include the following steps: In the first step, the first signature terminal generates a first signature random number. The first signature terminal can generate the first signature random number randomly.

[0053] In the second step, the first signing terminal generates first key request information and sends the first key request information to the target security password card. The first signing terminal may determine the information indicating that the first signing terminal wants to generate a key as the first key request information.

[0054] In the third step, the target security password card generates first key information in response to receiving the first key request information, and sends the first key information to the first signing terminal. The target security password card can generate the first key information randomly.

[0055] In step 4, in response to receiving the first key information, the first signing terminal determines the product of the first signature random number and the first key information as the first signature information, and sends the first signature random number and the first signature information to the second signing terminal. The first signing terminal may determine the product of the first signature random number and the value represented by the first key information as the first signature information.

[0056] Step 5: The second signature terminal generates a second signature random number. The second signature terminal can generate the second signature random number randomly.

[0057] In step 6, the second signing terminal generates second key request information and sends the second key request information to the target security password card. The second signing terminal may determine the information indicating that the second signing terminal wants to generate a key as the second key request information.

[0058] In step 7, the target security password card generates second key information in response to receiving the second key request information, and sends the second key information to the second signing terminal. The target security password card can generate the second key information randomly.

[0059] In the eighth step, in response to receiving the first signature information, the second signature terminal verifies the first signature random number and the first signature information based on the second key information to obtain signature verification result information. In particular, in response to receiving the first signature information, the second signature terminal verifies the first signature random number and the first signature information based on the second key information to obtain signature verification result information, which may be: first, the product of the numerical value represented by the second key information and the first signature random number is determined as the signature verification information. Then, in response to determining that the signature verification information is the same as the first signature information, the first preset verification information is determined as the signature verification result information. In response to determining that the signature verification information is not the same as the first signature information, the second preset verification information is determined as the signature verification result information.

[0060] As an example, the first preset verification information may be information indicating “verification passed”. The second preset verification information may be information indicating “verification failed”.

[0061] In the ninth step, the second signing terminal generates a second hash value in response to determining that the signature verification result information satisfies the preset signature verification condition, and sends the signature verification result information to the first signing terminal. The second signing terminal can generate a second hash value by a preset hash algorithm in response to determining that the signature verification result information satisfies the preset signature verification condition. The preset signature verification condition can be that the signature verification result information is information indicating that "verification passed". Therefore, it can be shown that the second key information stored in the second signing terminal is the same as the first key information stored in the first signing terminal, that is, the second signing terminal and the first signing terminal are in the same communication domain.

[0062] As an example, the above-mentioned preset hash algorithm can be but is not limited to at least one of the following: MD5 (Message-Digest Algorithm 5) algorithm, hash algorithm, SHA-256 (Secure Hash Algorithm 256-bit, 256-bit secure hash algorithm) or SM3 (National Secret 3) algorithm.

[0063] In step 10, the first signing terminal generates a first hash value in response to receiving the signature verification result information. In response to receiving the signature verification result information, the first signing terminal can generate the first hash value by using the preset hash algorithm.

[0064] The relevant content of step 102, as an inventive point of an embodiment of the present application, solves the technical problem of "reduced security of IoT communication". Among them, the factors that lead to reduced security of IoT communication are often as follows: when the server and the data access terminal communicate, the information sent to each other is not authenticated, and the information is easily intercepted or modified during the transmission process. If the above factors are solved, the effect of improving the security of IoT communication can be achieved. In order to achieve this effect, the present application can introduce two signature terminals. After blinding the information to be transmitted, the server sends the blinded information to the two signature terminals respectively to sign the transmitted information together. As a result, the signature terminal can sign the transmitted information without reading the transmitted information, thereby improving the security of information transmission. Then, the server can unblind the signed blinded information. Then, the server can send the unblinded information with two digital signatures to the data access terminal. Therefore, due to the addition of two digital signature authentications, the difficulty of intercepting or modifying the information during the transmission process is increased, thereby improving the security of IoT communication.

[0065] Step 103 , in response to receiving the information to be stored, the data access control terminal performs encrypted storage processing on the information to be stored, obtains encrypted storage result information, and sends the encrypted storage result information to the target server.

[0066] In some embodiments, the data access control terminal may, in response to receiving the information to be stored, perform encrypted storage processing on the information to be stored, obtain encrypted storage result information, and send the encrypted storage result information to the target server.

[0067] In some optional implementations of some embodiments, the data access control terminal performs encrypted storage processing on the information to be stored to obtain encrypted storage result information, which may include the following steps: The first step is to generate storage private key request information and send the storage private key request information to the target security password card. The information representing "wanting to obtain the storage private key" can be determined as the storage private key request information.

[0068] The second step is to receive storage private key information from the target security password card, wherein the storage private key information may be a private key for storage encryption.

[0069] The third step is to encrypt the information to be stored based on the above-mentioned storage private key information to obtain encrypted storage information. Wherein, based on the above-mentioned storage private key information, the information to be stored can be encrypted by the above-mentioned preset encryption algorithm to obtain encrypted storage information.

[0070] The fourth step is to store the encrypted storage information in a data storage terminal, and receive encrypted storage result information from the data storage terminal. The encrypted storage result information may be information indicating "successful storage".

[0071] Step 104: In response to receiving the encrypted storage result information, the target server sends the encrypted storage result information to the target mobile terminal.

[0072] In some embodiments, the target server may send the encrypted storage result information to the target mobile terminal in response to receiving the encrypted storage result information.

[0073] Step 105: In response to receiving the encrypted storage result information, the target mobile terminal sends the encrypted storage result information to the target user terminal.

[0074] In some embodiments, in response to receiving the encrypted storage result information, the target mobile terminal may send the encrypted storage result information to the target user terminal.

[0075] Optionally, the above-mentioned information encryption communication method for IoT security may further include the following steps: In the first step, the target server, in response to receiving the transmission key request information and determining that the transmission key request information satisfies a preset query condition, generates encrypted query request information, query transmission public key information, and query transmission private key information based on the information operation request information, and sends the encrypted query request information to the data access control terminal. The preset query condition may be that the information operation category information included in the transmission key request information is information representing "query".

[0076] In the second step, the data access control terminal queries the terminal query information corresponding to the encrypted query request information in response to receiving the encrypted query request information, and sends the terminal query information to the target server. The data access control terminal can query the terminal query information corresponding to the encrypted query request information from the data storage terminal.

[0077] In the third step, the target server, in response to receiving the terminal query information, encrypts the terminal query information based on the query transmission private key information to obtain encrypted query information, and sends the encrypted query information and the query transmission public key information to the target mobile terminal. The target server may encrypt the terminal query information based on the query transmission private key information using the preset encryption algorithm to obtain encrypted query information.

[0078] In the fourth step, the target mobile terminal, in response to receiving the encrypted query information and the query transmission public key information, decrypts the encrypted query information based on the query transmission public key information to obtain decrypted query information, and sends the decrypted query information to the target user terminal. The target mobile terminal can decrypt the encrypted query information based on the query transmission public key information using the preset decryption algorithm to obtain decrypted query information.

[0079] In some optional implementations of some embodiments, the target server generates encrypted query request information, query transmission public key information, and query transmission private key information based on the information operation request information, which may include the following steps: The first step is to generate a key pair query request information and send the key pair query request information to the target security password card. The key pair query request information may be generated by: determining the pre-generated information used to represent the key pair to be obtained as the key pair query request information.

[0080] The second step is to receive the query transmission public key information and the query transmission private key information from the target security password card. The query transmission public key information may be a public key for executing query information transmission encryption. The query transmission private key information may be a private key for executing query information transmission encryption.

[0081] The third step is to store the query transmission private key information in the memory included in the target server.

[0082] The fourth step is to receive the encrypted query request information from the target mobile terminal, wherein the encrypted query request information may represent the IoT data that the target mobile terminal wants to query.

[0083] As an example, the IoT data may be, but is not limited to, one of: current vehicle speed, current battery level, or multimedia information.

[0084] In some optional implementations of some embodiments, the data access control terminal queries the terminal query information corresponding to the encrypted query request information, which may include the following steps: The first step is to generate a public key query request message and send the public key query request message to the target security password card, wherein the information indicating "wanting to obtain the public key query" can be determined as the public key query request message.

[0085] The second step is to receive the query public key information sent by the target security password card, wherein the query public key information may be a public key used to encrypt the query information.

[0086] The third step is to generate database query request information corresponding to the encrypted query request information, and send the database query request information to the data storage terminal. The above-mentioned generation of the database query request information corresponding to the encrypted query request information may be to determine the representation of "the IoT data represented by the encrypted query request information to be queried" as the database query request information.

[0087] In the fourth step, in response to receiving the encrypted query information sent by the data storage terminal, the encrypted query information is decrypted based on the public query key information to obtain the terminal query information. The encrypted query information can be decrypted based on the public query key information using the preset decryption algorithm to obtain the terminal query information.

[0088] The above-mentioned embodiments of the present application have the following beneficial effects: through the information encryption communication method for the security of the Internet of Things of some embodiments of the present application, the security of the Internet of Things communication can be improved. Specifically, the reason for the reduction in the security of the Internet of Things communication is that the password is cracked with a low difficulty by using weak authentication, default passwords, etc. When a network attack occurs, the network communication information is easily stolen, resulting in the reduction of the security of the Internet of Things device. Based on this, the information encryption communication method for the security of the Internet of Things of some embodiments of the present application, first, the target mobile terminal responds to the information operation request information sent by the target user terminal, generates a transmission key request information based on the above information operation request information, and sends the above information operation request information and the above transmission key request information to the target server. Thus, the server can receive the key request information and the communication information that the user terminal wants to encrypt and store. Secondly, the above target server responds to the reception of the above transmission key request information, responds to the determination that the above transmission key request information meets the preset storage condition, generates the information to be stored based on the above information operation request information, and sends the information to be stored to the data access control terminal. Thus, the server can generate or request a key, and encrypt and transmit the communication information based on the key. Then, in response to receiving the information to be stored, the data access control terminal performs encrypted storage processing on the information to be stored, obtains encrypted storage result information, and sends the encrypted storage result information to the target server. Thus, the data access control terminal can encrypt and store the received information. Then, in response to receiving the encrypted storage result information, the target server sends the encrypted storage result information to the target mobile terminal. Finally, in response to receiving the encrypted storage result information, the target mobile terminal sends the encrypted storage result information to the target user terminal. Thus, the Internet of Things encrypted communication and encrypted storage can be completed. Therefore, in some of the information encryption communication methods for Internet of Things security of the present application, the server can apply for a one-time key from the password card for encryption of communication information, and then the data access control terminal can apply for a storage key from the password card for encrypted storage of information, thereby improving the security of information authentication and transmission, reducing the possibility of network communication information being stolen, and thus improving the security of Internet of Things communication. Figure 2 A schematic diagram of an application scenario of some embodiments of the present application for secure information encryption communication in the Internet of Things is shown.

[0089] like Figure 2As shown, first, in response to receiving the information operation request information sent by the target user terminal 201, the target mobile terminal 202 of the information encryption communication method for the Internet of Things can generate a transmission key request information based on the above information operation request information, and send the above information operation request information and the above transmission key request information to the target server 203. Here, the above target user terminal 201 can display the interactive interface to the target user, and then receive the target user's operation instruction through the interactive interface, generate information operation request information, and then send the information operation request information to the target mobile terminal 202. For example, in this application scenario, the above information operation request information can be: "Store Movie". Secondly, in response to receiving the above transmission key request information, the above target server 203 can perform the following sub-steps: the first sub-step, generating a storage key pair request information, and sending the above storage key pair request information to the target security password card 205. Here, the target security password card 205 can store at least one access public key and at least one access private key. The above at least one access public key and at least one access private key can be stored according to the user identification. The second sub-step is to receive the storage transmission public key information and the storage transmission private key information from the target security password card 205. The third sub-step is to store the storage transmission private key information in the memory included in the target server 203, and send the storage transmission public key information to the target mobile terminal 202. The fourth sub-step is to receive the encrypted storage information from the target mobile terminal 202. The fifth sub-step is to decrypt the encrypted storage information based on the storage transmission private key information to obtain the information to be stored. The sixth sub-step is to delete the storage transmission private key information from the memory included in the target server 203, and send the information to be stored to the data access control terminal 204. Then, in response to receiving the information to be stored, the data access control terminal 204 may perform the following sub-steps: The first sub-step is to generate storage private key request information, and send the storage private key request information to the target security password card 205. The second sub-step is to receive the storage private key information from the target security password card 205. The third sub-step is to encrypt the information to be stored based on the storage private key information to obtain the encrypted storage information. The fourth sub-step is to store the encrypted storage information in the data storage terminal 206, receive the encrypted storage result information from the data storage terminal, and send the encrypted storage result information to the target server 203. Here, the data storage terminal 206 can store at least one data collection body. Each data collection body in the at least one data collection body can correspond to a user identifier. Then, in response to receiving the encrypted storage result information, the target server 203 sends the encrypted storage result information to the target mobile terminal 202.Finally, in response to receiving the encrypted storage result information, the target mobile terminal 202 sends the encrypted storage result information to the target user terminal 201 .

[0090] It should be understood that Figure 2 The number of terminal devices in the figure is only for illustration. Any number of terminal devices may be provided according to implementation requirements. The present application also provides a computer device 300. Figure 3 As shown, the computer device 300 includes: a bus 301, a processor 302, a memory 303 and a communication interface 304. The processor 302, the memory 303 and the communication interface 304 communicate with each other through the bus 301. The computer device 300 can be a server or a terminal device. It should be understood that the present application does not limit the number of processors and memories in the computer device 300.

[0091] The bus 301 may be a peripheral component interconnect (PCI) bus or an extended industry standard architecture (EISA) bus. The bus may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 3 The bus 301 is represented by only one line, but it does not mean that there is only one bus or one type of bus. The bus 301 may include a path for transmitting information between various components of the computer device 300 (for example, the memory 303, the processor 302, and the communication interface 304).

[0092] The processor 302 may include any one or more of a central processing unit (CPU), a graphics processing unit (GPU), a microprocessor (MP), or a digital signal processor (DSP).

[0093] The memory 303 may include a volatile memory, such as a random access memory (RAM). The memory 303 may also include a non-volatile memory, such as a read-only memory (ROM), a flash memory, a hard disk drive (HDD), or a solid state drive (SSD).

[0094] The memory 303 stores executable program codes, and the processor 302 executes the executable program codes to respectively implement the functions of the aforementioned acquisition module, sampling module, determination module, and mixing module, thereby implementing the aforementioned information encryption communication method for Internet of Things security. That is, the memory 303 stores instructions for executing the aforementioned information encryption communication method for Internet of Things security.

[0095] The communication interface 304 uses a transceiver module such as, but not limited to, a network interface card or a transceiver to implement communication between the computer device 300 and other devices or a communication network.

[0096] An embodiment of the present application also provides a chip, which includes a processor and a data interface. The processor reads instructions stored in a memory through the data interface to execute the above-mentioned information encryption communication method for Internet of Things security.

[0097] The embodiment of the present application also provides a computer-readable storage medium. The computer-readable storage medium can be any available medium that can be stored by a computing device or a data storage device such as a data center containing one or more available media. The available medium can be a magnetic medium (e.g., a floppy disk, a hard disk, a tape), an optical medium (e.g., a DVD), or a semiconductor medium (e.g., a solid-state hard disk). The computer-readable storage medium includes instructions that instruct the computing device to execute the above-mentioned information encryption communication method for Internet of Things security.

[0098] The technical features of the above embodiments can be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0099] The above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, a person skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features may be replaced by equivalents. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the protection scope of the technical solutions of the embodiments of the present application.

Claims

1. A method for secure information encryption communication for the Internet of Things, comprising: The target mobile terminal generates transmission key request information based on the information operation request information in response to receiving the information operation request information sent by the target user terminal, and sends the information operation request information and the transmission key request information to the target server; The target server, in response to receiving the transmission key request information and in response to determining that the transmission key request information satisfies a preset storage condition, generates information to be stored based on the information operation request information, and sends the information to be stored to the data access control terminal; In response to receiving the information to be stored, the data access control terminal performs encrypted storage processing on the information to be stored to obtain encrypted storage result information, and sends the encrypted storage result information to the target server; In response to receiving the encrypted storage result information, the target server sends the encrypted storage result information to the target mobile terminal; In response to receiving the encrypted storage result information, the target mobile terminal sends the encrypted storage result information to the target user terminal.

2. The information encryption communication method for Internet of Things security according to claim 1, wherein: The method further comprises: The target server, in response to receiving the transmission key request information and in response to determining that the transmission key request information satisfies a preset query condition, generates encrypted query request information, query transmission public key information, and query transmission private key information based on the information operation request information, and sends the encrypted query request information to the data access control terminal; In response to receiving the encrypted query request information, the data access control terminal queries the terminal query information corresponding to the encrypted query request information, and sends the terminal query information to the target server; In response to receiving the terminal query information, the target server encrypts the terminal query information based on the query transmission private key information to obtain encrypted query information, and sends the encrypted query information and the query transmission public key information to the target mobile terminal; In response to receiving the encrypted query information and the query transmission public key information, the target mobile terminal decrypts the encrypted query information based on the query transmission public key information to obtain decrypted query information, and sends the decrypted query information to the target user terminal.

3. The information encryption communication method for Internet of Things security according to claim 1, wherein: The target server includes: a memory; and the generating of information to be stored based on the information operation request information includes: Generate storage key pair request information, and send the storage key pair request information to the target security password card; Receiving storage transmission public key information and storage transmission private key information from the target security password card; Storing the storage transmission private key information in a memory included in the target server, and sending the storage transmission public key information to the target mobile terminal; receiving encrypted storage information from the target mobile terminal; Based on the storage transmission private key information, the encrypted storage information is decrypted to obtain the information to be stored; The stored transmission private key information is deleted from the memory included in the target server.

4. The information encryption communication method for Internet of Things security according to claim 3, wherein: In response to receiving the storage transmission public key information and storage transmission private key information sent by the target security password card, before storing the storage transmission private key information in the memory included in the target server, and sending the storage transmission public key information to the target mobile terminal, the method further includes: In response to receiving the key negotiation request information sent by the target mobile terminal, obtaining a key category table from the target security password card, wherein the key category table includes: a key category information set; Selecting target key category information from the key category information set included in the key category table, and sending the target key category information to the target mobile terminal; receiving a key category response message from the target mobile terminal; In response to determining that the key category response information satisfies a preset key condition, a password card key request information corresponding to the target key category information is generated, and the password card key request information is sent to the target security password card.

5. The information encryption communication method for Internet of Things security according to claim 4, wherein: The method further comprises: In response to determining that the key category response information does not meet the preset key condition, target key category information is selected from each key category information that has not been selected in the key category information set, and the target key category information is sent to the target mobile terminal to receive key category response information again.

6. A computer device, wherein: The computer device comprises a processor, a memory, and a computer program stored in the memory and executable by the processor, wherein when the computer program is executed by the processor, the steps of the method according to any one of claims 1 to 5 are implemented.

7. A computer-readable storage medium, wherein: The computer-readable storage medium stores a computer program, wherein when the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 5 are implemented.

Images