Resource interaction method, data platform and resource interaction system

Abstract

The invention provides a resource interaction method, a data platform and a resource interaction system, and relates to the technical field of Internet of Things, the method is executed by the data platform, the data platform stores resources of a plurality of products, the plurality of products comprise hardware products and software products, and the method comprises the following steps: receiving a connection request of a first product, the first product is any one of the plurality of products; verifying the connection request according to a certificate issued for the first product; establishing connection with the first product under the condition that the verification is passed; and under the condition that the first product needs the first resource, providing information for acquiring the first resource for the first product.

Description

Technical Field

[0001] The present disclosure relates to the technical field of Internet of Things, and in particular to a resource interaction method, a data platform, and a resource interaction system. Background Art

[0002] At present, IoT technology has been widely used in fields such as smart home and smart industry. Summary of the invention

[0003] In the related art, the management efficiency of resources of products in the Internet of Things is low. Here, the data platform is used to manage the resources of software products or hardware products connected to the Internet of Things.

[0004] After analysis, it is found that there are many software products and hardware products in the Internet of Things. Each software product and each hardware product usually has its own dedicated data platform. Each data platform has its own resource management method. Resource management methods include resource upload methods and resource provision methods.

[0005] In this case, different data platforms have different resource management methods, that is, a corresponding resource management method needs to be formulated for each data platform. Overall, the various resource management methods in the Internet of Things are too redundant, resulting in low resource management efficiency of products in the Internet of Things.

[0006] In order to solve the above problems, the embodiments of the present disclosure propose the following solutions.

[0007] According to one aspect of an embodiment of the present disclosure, a resource interaction method is provided, which is executed by a data platform, wherein the data platform stores resources of multiple products, and the multiple products include hardware products and software products. The method comprises: receiving a connection request from a first product, where the first product is any one of the multiple products; verifying the connection request based on a certificate issued for the first product; establishing a connection with the first product if the verification passes; and providing the first product with information for obtaining the first resource if the first product needs the first resource.

[0008] In some embodiments, the hardware product comprises a first hardware product, and the software product comprises a first software product for controlling the first hardware product.

[0009] In some embodiments, in response to a registration request from the manufacturer of each product, a certificate for each product is generated based on product information of each product, wherein the registration request carries the product information; the certificate for each product is issued to the manufacturer of each product so that each product is embedded with its own certificate.

[0010] In some embodiments, the resources of each product are received; the resources of each product are verified, the verification comprising a first verification, the first verification comprising at least one of determining whether the resource is a preset type, determining whether the size of the resource is within a preset range, and determining whether the resource is safe; and if the verification passes, the resources of each product are stored.

[0011] In some embodiments, the verification further includes a second verification after the first verification, and the second verification includes manual review of the result of the first verification.

[0012] In some embodiments, in response to establishing the connection with the first product, a private key for decryption of the first product is generated; the private key of the first product is issued to the first product; in response to a resource access request issued by the first product based on the information, the first resource is encrypted using a public key, and the encrypted first resource is provided to the first product.

[0013] In some embodiments, the information is a temporary link.

[0014] In some embodiments, the temporary link only allows access by the IP address corresponding to the first product.

[0015] In some embodiments, in response to establishing a connection with the first product, it is actively determined whether the first product needs to be upgraded; and if the first product needs to be upgraded, it is determined that the first product needs the first resource; and / or in response to a resource request for obtaining the first resource sent by the first product, it is determined that the first product needs the first resource.

[0016] In some embodiments, the hardware product is hardware within a building.

[0017] According to another aspect of an embodiment of the present disclosure, a data platform is provided, including: a module configured to execute the method described in any one of the above embodiments.

[0018] According to another aspect of an embodiment of the present disclosure, a data platform is provided, including: a memory; and a processor coupled to the memory, configured to execute the method described in any one of the above embodiments based on instructions stored in the memory.

[0019] According to another aspect of the embodiments of the present disclosure, there is provided a resource interaction system, comprising: the data platform described in any one of the above embodiments; and the multiple products.

[0020] According to another aspect of an embodiment of the present disclosure, a computer-readable storage medium is provided, comprising computer program instructions, wherein when the computer program instructions are executed by a processor, the steps of the method described in any one of the above embodiments are implemented.

[0021] According to another aspect of the embodiments of the present disclosure, a computer program product is provided, including a computer program, wherein when the computer program is executed by a processor, the steps of the method described in any one of the above embodiments are implemented.

[0022] In the disclosed embodiment, the data platform stores resources of hardware products and software products. When the connection request of any one of the multiple products passes the certificate verification, the data platform can connect to the product, and when the product needs resources, provide the product with information for obtaining resources, so that both the hardware products and the software products can interact with the data platform using a unified resource interaction method, thereby improving resource management efficiency.

[0023] The technical solution of the present disclosure is further described in detail below through the accompanying drawings and embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] In order to more clearly illustrate the embodiments of the present disclosure or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0025] Figure 1 is a flowchart of a resource interaction method according to some embodiments of the present disclosure

[0026] Figure 2 It is a structural diagram of a data platform according to some embodiments of the present disclosure.

[0027] Figure 3 It is a structural diagram of a data platform according to other embodiments of the present disclosure. DETAILED DESCRIPTION

[0028] The following will be combined with the drawings in the embodiments of the present disclosure to clearly and completely describe the technical solutions in the embodiments of the present disclosure. Obviously, the described embodiments are only part of the embodiments of the present disclosure, rather than all the embodiments. Based on the embodiments in the present disclosure, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present disclosure.

[0029] Unless specifically stated otherwise, the relative arrangement of components and steps, the numerical expressions and numerical values ​​set forth in these embodiments do not limit the scope of the present disclosure.

[0030] At the same time, it should be understood that for the convenience of description, the sizes of the various parts shown in the drawings are not necessarily drawn according to the actual proportional relationship.

[0031] Technologies, methods, and equipment known to ordinary technicians in the relevant art may not be discussed in detail, but where appropriate, the technologies, methods, and equipment should be considered part of the specification.

[0032] In all examples shown and discussed herein, any specific values ​​should be interpreted as merely exemplary and not as limiting. Therefore, other examples of the exemplary embodiments may have different values.

[0033] It should be noted that like reference numerals and letters refer to similar items in the following figures, and therefore, once an item is defined in one figure, it need not be further discussed in subsequent figures.

[0034] In addition, in the description of the present disclosure, the terms "first", "second", "third", etc. are used for descriptive purposes only and should not be understood as indicating or implying relative importance and order. Similarly, although operations are depicted in a particular order in the accompanying drawings, this should not be understood as requiring that such operations be performed in the particular order shown or in a sequential order, or requiring that all illustrated operations be performed to achieve the desired results. In some cases, multitasking and parallel processing can be advantageous.

[0035] Figure 1 1 is a flowchart of a resource interaction method according to some embodiments of the present disclosure. Here, the resource interaction method of the present disclosure is executed by a data platform, and the data platform stores resources of multiple products, and the multiple products include hardware products and software products. For example, among the multiple products, the software product is physically independent of the hardware product, that is, the software product is not mounted on any hardware product.

[0036] In step 102, a connection request of a first product is received. Here, the first product is any one of the above-mentioned multiple products.

[0037] In some embodiments, the hardware product is hardware in a building. For example, the building is an office building. It should be understood that the data platform of the present disclosure can be used to manage hardware in one or more buildings, without limitation. In this way, the resource interaction method of the present disclosure can be applied to a building management system, which helps to improve the efficiency of building management.

[0038] As some implementations, the hardware product is an intelligent hardware device. For example, the intelligent hardware device includes at least one of a gateway and a sensor.

[0039] At step 104, the connection request is authenticated based on the certificate issued for the first product.

[0040] As some embodiments, the certificate of the first product includes an identification of the product.

[0041] As some implementations, the certificate of the first product further includes at least one of information of the manufacturer of the first product and a validity period of the certificate of the first product. The manufacturer information includes, for example, the name of the manufacturer.

[0042] As some implementation methods, the connection request carries a certificate of the first product. When the certificate carried in the connection request is the same as the certificate issued for the first product, the connection request verification passes. When the certificate carried in the connection request is different from the certificate issued for the first product, the connection request verification fails, that is, the connection is not allowed to be established.

[0043] In step 106, if the verification is successful, a connection is established with the first product.

[0044] As some implementation modes, the connection method includes a wireless connection.

[0045] In step 108 , when the first product requires the first resource, information for acquiring the first resource is provided to the first product.

[0046] In some implementations, the first resource may be a resource used to upgrade the first product; in other implementations, the first resource may be an application plug-in required by the first product. This will be described in conjunction with some embodiments later.

[0047] As some implementation modes, the information used to obtain the first resource includes a network link. The first resource is obtained through the network link.

[0048] In the above embodiment, the data platform stores resources of hardware products and software products. When the connection request of any one of the multiple products passes the certificate verification, the data platform can connect to the product and provide the product with information for obtaining resources when the product needs resources, so that both hardware products and software products can interact with the data platform using a unified resource interaction method, thereby improving resource management efficiency.

[0049] In some embodiments, the hardware products among the multiple products corresponding to the resources of the multiple products stored in the data platform include a first hardware product, and the software products among the multiple products include a first software product for controlling the first hardware product. In other words, the first hardware product and the first software product are matching products. For example, the first hardware product is an air conditioner, and the first software product is an application (APP) for controlling the air conditioner.

[0050] In this way, storing the resources of hardware products and the resources of supporting software products on the same data platform will help manage the resources of the entire set of products as a whole and improve resource management efficiency.

[0051] In some embodiments, at least two of the multiple products are manufactured by different manufacturers. In this way, the extensibility and openness of the data platform can be improved.

[0052] In some embodiments, the manufacturers of multiple products are the same. That is, the resources of multiple products stored in the data platform are resources uploaded by the same manufacturer. In this way, the security of the data platform can be improved.

[0053] Next, the resource interaction method of the present disclosure will be introduced in the order of product registration, resource storage, resource determination and resource provision. It should be understood that this order is not a limitation on the execution order of the method of the present disclosure.

[0054] First, how to implement product registration is introduced in conjunction with some embodiments. Here, product registration includes issuing a certificate to each product.

[0055] In some embodiments, in response to the registration request of the manufacturer of each product, the data platform generates a certificate for each product based on the product information of each product, and issues the certificate of each product to the manufacturer of each product so that each product is embedded with its own certificate. Here, the registration request of the manufacturer carries the product information of the product. For example, after issuing the certificate to the manufacturer, the manufacturer can embed the certificate into the product.

[0056] As some implementations, the product information of the product may include information of the manufacturer of the product. The manufacturer information may include, for example, one or more of the manufacturer's name and business license.

[0057] As some implementation modes, when the product is a software product, the product information of the product may further include a functional description of the product.

[0058] As some implementations, when the product is a hardware product, the product information of the product may further include the model of the product, the identification code of the product, and the communication protocol type of the product. The identification code may be, for example, a hardware identification code (Hardware ID).

[0059] Next, how to register hardware products and software products is introduced in conjunction with some embodiments of the present disclosure.

[0060] As some implementation methods, assume that software A (named "Air Conditioner Smart Management System") is an APP for remotely managing air conditioners. When the manufacturer of software A registers with the data platform, the manufacturer's business license and the functional description of software A are submitted.

[0061] After the manual review and / or machine review is passed, the manufacturer obtains the certificate of software A and embeds the certificate into software A. That is, the registration of software A is completed.

[0062] When software A sends a connection request to the data platform, the data platform will verify the certificate of software A. For example, software A may send a connection request to the data platform every time it is started; or, for another example, software A may send a connection request to the data platform in response to a user's instruction.

[0063] As some implementation methods, assuming that hardware B is an "IOT Internet of Things Gateway", when the manufacturer of hardware B registers with the data platform, the model of hardware B, the identification code of hardware B, the communication protocol type of hardware B and the manufacturer information of hardware B are submitted.

[0064] After the manual review and / or machine review is passed, the manufacturer of hardware B obtains the certificate of hardware B and embeds the certificate into the firmware of hardware B. That is, the registration of hardware B is completed.

[0065] When hardware B sends a connection request to the data platform, the data platform will verify the certificate of hardware B. For example, hardware B may send a connection request to the data platform every time it is powered on; for another example, hardware B may send a connection request to the data platform in response to a user's instruction.

[0066] In the above embodiment, a corresponding certificate is generated for each product based on the product information carried in the registration request of the manufacturer of each product, so that each product can be embedded with its own certificate before leaving the factory. Before each product subsequently obtains resources, the data platform verifies the connection request of each product based on the certificate of each product, thereby improving the security of the interaction between the product and the data platform.

[0067] Next, how a data platform stores resources of multiple products is introduced in conjunction with some embodiments of the present disclosure.

[0068] In some embodiments, the data platform receives the resources of each product, verifies the resources of each product, and stores the resources of each product if the verification passes. For the resources of a certain product, if the verification passes, the data platform stores the resources of the product; if the verification fails, the data platform does not store the resources of the product. In this way, the resources of multiple products stored by the data platform are all verified resources. For example, the data platform can be a server, and the data platform can store resources locally or in the cloud outside the data platform.

[0069] Here, the verification includes a first verification, and the first verification includes at least one of determining whether the resource is of a preset type, determining whether the size of the resource is within a preset range, and determining whether the resource is safe. For example, the first verification includes any one, any two, or all of determining whether the resource is of a preset type, determining whether the size of the resource is within a preset range, and determining whether the resource is safe.

[0070] For example, a security scan may be performed on a resource to determine whether the resource is safe. The security scan may be, for example, a virus and / or Trojan horse scan.

[0071] As some implementation modes, the first check passes when at least one of the resource is of a preset type, the size of the resource is within a preset range, and the resource security is satisfied. As other implementation modes, the first check passes only when each of the resource is of a preset type, the size of the resource is within a preset range, and the resource security is satisfied.

[0072] As some implementations, when the product is a hardware product, the resources of the product are received through an interface corresponding to the hardware product; when the product is a software product, the resources of the product are received through an interface corresponding to the software product. For example, the interface is an application programming interface (API).

[0073] As some implementation modes, resources of different hardware products among the multiple products correspond to the same data format; and / or resources of different software products among the multiple products correspond to the same data format.

[0074] In the above embodiment, before storing resources, the resources of each product are verified by at least one of a plurality of automated verification methods to determine whether to store the resources of each product, which helps to improve the standardization of resources stored in the data platform.

[0075] In some embodiments, metadata of the resources of the product from the manufacturer of the product may also be received. For example, the metadata includes at least one of the version number of the resource, the release date of the resource, and the product to which the resource is adapted. In this way, it is convenient for the data platform to manage the resources of the product, which helps to improve the efficiency of the data platform in managing resources.

[0076] In some embodiments, the first check may also include determining whether the resource is valid. For example, if the resource is an executable file, determining whether the resource can be executed normally. This helps to further improve the standardization of the resources stored in the data platform.

[0077] In some embodiments, the verification of the resources of each product also includes a second verification after the first verification. Here, the second verification includes manually reviewing the results of the first verification. For example, the manual review is a sign-and-review process. For example, the sign-and-review process includes signing and confirming that the second verification has been passed in the sign-and-review process interface when the result of the first verification is manually confirmed to be correct; and marking the second verification as not passed in the sign-and-review process interface when the result of the first verification is manually confirmed to be incorrect.

[0078] In the above embodiment, the verification also includes a second verification after the first verification, which helps to further improve the standardization of resources stored in the data platform.

[0079] Next, how to determine whether a first product requires a first resource is described in conjunction with some embodiments.

[0080] In some embodiments, in response to establishing a connection with the first product, the data platform actively determines whether the first product needs to be upgraded; if the first product needs to be upgraded, the data platform determines that the first product needs the first resource; if the first product does not need to be upgraded, the data platform determines that the first product does not need the first resource. For example, the form of the upgrade includes incremental update and / or full update.

[0081] As some implementations, when the first product is a hardware product and the first product is connected to a data platform, the data platform may determine whether the firmware of the first product needs to be upgraded based on the version of the firmware of the first product and the latest version of the firmware.

[0082] When the version of the firmware of the first product is inconsistent with the latest version of the firmware, it is determined that the firmware of the first product needs to be upgraded, and it is determined that the first product needs a first resource for upgrading. Here, the first resource is, for example, an upgrade package for upgrading the firmware of the first product.

[0083] When the version of the firmware of the first product is consistent with the latest version of the firmware, it is determined that the firmware of the first product does not need to be upgraded and the first resource is not needed.

[0084] As some implementations, when the first product is a software product and the first product is connected to the data platform, the data platform can determine whether the first product needs to be upgraded based on the version of the first product itself and the latest version of the first product. When the version of the first product itself and the latest version of the first product are inconsistent, it is determined that the first product needs to be upgraded and that the first product needs the first resource. Here, the first resource is, for example, an upgrade package for upgrading the first product.

[0085] When the version of the first product itself is consistent with the latest version of the first product, it is determined that the first product does not need to be upgraded and does not need the first resource.

[0086] In the above embodiment, after the data platform establishes a connection with the first product, the data platform actively determines whether the first product needs to be upgraded, and then determines that the first product needs the first resource when the first product needs to be upgraded, thereby improving the efficiency of upgrading the first product.

[0087] In some other embodiments, in response to a resource request for obtaining a first resource sent by the first product, it is determined that the first product needs the first resource. In other words, the first resource may be a resource specified and required by the first product.

[0088] As some implementation modes, the resource request sent by the first product may be a request for obtaining an application plug-in, that is, the first resource is an application plug-in.

[0089] In the above embodiment, in response to the resource request for obtaining the first resource sent by the first product, the data platform determines that the first product needs the first resource, which can help the first product to obtain various resources it needs in a timely manner, thereby further improving the efficiency of obtaining resources for the first product.

[0090] In some embodiments, resources of multiple products may be classified, so that it is easier for the data platform to manage and search for resources.

[0091] For example, a firmware upgrade package can be classified as a "system resource"; for another example, an application plug-in can be classified as an "application resource"; for another example, a resource configuration file can be classified as a "system resource".

[0092] In some embodiments, different types of resources are set with different permissions.

[0093] As some implementations, only products logged into a designated account can obtain the first type of resources. For example, the designated account is an administrator account. For another example, the first type of resources are resources with high security requirements (such as "system resources").

[0094] As some implementations, all products may acquire the second type of resources. For example, the second type of resources are resources with lower security requirements than the first type of resources (such as "application resources").

[0095] In the above embodiments, different types of resources are set with different permissions, which helps to improve the security of the data platform.

[0096] In some embodiments, information related to the use of resources can be recorded and an audit report can be generated. For example, the information related to the use of resources includes at least one of the time when the product obtains the resource, the number of times the resource is obtained, and the identification of the product that obtains the resource. In this way, it is convenient for staff to track and analyze the use of resources.

[0097] In some embodiments, the resource may be version managed. For example, a change log of the resource version may be recorded. This makes it easier for staff to monitor the resource version changes.

[0098] Next, how a data platform provides resources to products is introduced in conjunction with some embodiments of the present disclosure.

[0099] In some embodiments, in response to establishing a connection with a first product, a private key for decryption by the first product is generated and issued to the first product; in response to a resource access request issued by the first product based on information for obtaining a first resource, the first resource is encrypted using a public key and the encrypted first resource is provided to the first product.

[0100] It should be understood that the private key of the first product can decrypt the first resource encrypted by the public key of the data platform.

[0101] In the above embodiment, the first resource encrypted with a public key is provided to the first product, and the first product has a private key for decryption, thereby helping to improve security during resource transmission.

[0102] In some embodiments, when establishing a connection with the first product, the data platform may use an identifier in the certificate of the product to generate a private key for decryption by the first product.

[0103] In this way, the private key of each product is related to the identifier in the product certificate, that is, each product has a unique private key. In this way, even if the private key of a product is leaked, the private keys of other products are still safe, which helps to further improve the security of resource transmission.

[0104] In some embodiments, the data platform can generate a private key for the first product to decrypt and issue it to the first product when the data platform establishes a connection with the first product for the first time. In this way, the private key can be generated in a timely manner, so that the first product can subsequently use the private key to decrypt the encrypted first resource, thereby achieving both resource acquisition efficiency and security.

[0105] In some embodiments, the information provided to the first product for obtaining the first resource is a temporary link. For example, the temporary link includes a uniform resource locator (URL) link. In this way, the use of a temporary link can further improve the security of the resource transmission process.

[0106] In some embodiments, the temporary link has a valid time and / or a limited number of accesses. For example, the valid time is 10 minutes or 15 minutes. For another example, the limited number of accesses is 1 time, that is, the temporary link becomes invalid after being accessed.

[0107] In this way, the validity time and / or limited number of accesses can improve the security of the temporary link, thereby helping to further improve the security during resource transmission.

[0108] In some embodiments, the temporary link is only accessible to the IP address corresponding to the first product that has established a connection with the data platform, so that other IP addresses can be prevented from accessing the temporary link, thereby helping to further improve the security of the resource transmission process.

[0109] The combination of the above-mentioned embodiments regarding temporary links can effectively prevent resource hotlinking, adjacent speculation theft, illegal tampering and brute force attacks, and help to further improve the security of resource transmission.

[0110] Each embodiment in this specification is described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the embodiments can be referred to each other. For the device embodiment, since it basically corresponds to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0111] In some embodiments, the data platform includes a module for executing the resource interaction method of any one of the above embodiments.

[0112] Figure 2 1 is a schematic diagram of a data platform according to some embodiments of the present disclosure. Here, the data platform stores resources of multiple products, including hardware products and software products.

[0113] like Figure 2 As shown, the data platform includes a receiving module 201 , a verification module 202 , a connection module 203 and an information providing module 204 .

[0114] The receiving module 201 is configured to receive a connection request of a first product. Here, the first product is any one of a plurality of products.

[0115] The verification module 202 is configured to verify the connection request according to the certificate issued for the first product.

[0116] The connection module 203 is configured to establish a connection with the first product if the verification is successful. The receiving module 201, the verification module 202 and the connection module 203 may be collectively referred to as an authentication module (not shown).

[0117] The information providing module 204 is configured to provide the first product with information for acquiring the first resource when the first product needs the first resource.

[0118] As some implementations, the information providing module 204 includes a link generating module 2041. The link generating module 2041 is configured to generate a temporary link for acquiring the first resource. Here, the information for acquiring the first resource is a temporary link.

[0119] In some embodiments, the data platform further includes a service module 205. The service module 205 is configured to receive resources of each product and, in response to a resource request for obtaining a first resource sent by a first product, determine that the first product needs a first resource.

[0120] In some embodiments, the data platform further includes an information management module 206. The information management module 206 is configured to record information related to the use of resources, generate audit reports, and perform version management on resources.

[0121] In some embodiments, the data platform further includes a verification module 207. The verification module 207 is configured to verify the resources of each product received by the service module 205. Here, the implementation method of the verification is referred to the implementation method of the verification above, and will not be repeated here.

[0122] In some embodiments, the data platform further includes an encryption module 208. The encryption module 208 is configured to generate a private key for decryption by the first product in response to establishing a connection with the first product, and issue the private key of the first product to the first product; in response to a resource access request issued by the first product based on information provided to the first product for obtaining the first resource, encrypt the first resource using the public key.

[0123] In some embodiments, the data platform further includes a resource storage module 209. The resource storage module 209 is configured to store the resources of each product if the verification by the verification module 207 passes, and provide the first resource encrypted by the encryption module 208 to the first product.

[0124] In some embodiments, the data platform further includes a certificate generation module 210. The certificate generation module 210 is configured to generate a certificate for each product according to the product information of each product in response to a registration request from the manufacturer of each product, and issue the certificate for each product to the manufacturer of each product so that each product is embedded with its own certificate. Here, the registration request carries product information.

[0125] In some embodiments, the data platform may further include other modules to execute the resource interaction method of any of the above embodiments.

[0126] Figure 3 It is a structural diagram of a data platform according to other embodiments of the present disclosure.

[0127] like Figure 3 As shown, the data platform 300 includes a memory 301 and a processor 302 coupled to the memory 301 , and the processor 302 is configured to execute the method of any one of the aforementioned embodiments based on the instructions stored in the memory 301 .

[0128] The memory 301 may include, for example, a system memory, a fixed non-volatile storage medium, etc. The system memory may store, for example, an operating system, an application program, a boot loader, and other programs.

[0129] In some embodiments, the data platform 300 may also include an input / output interface 303, a network interface 304, a storage interface 305, etc. The input / output interface 303, the network interface 304, the storage interface 305, and the memory 301 and the processor 302 may be connected, for example, via a bus 306. The input / output interface 303 provides a connection interface for input / output devices such as a display, a mouse, a keyboard, and a touch screen. The network interface 304 provides a connection interface for various networked devices. The storage interface 305 provides a connection interface for external storage devices such as an SD card and a USB flash drive.

[0130] The disclosed embodiments further provide a resource interaction system, including the data platform of any one of the above embodiments and a plurality of products.

[0131] The embodiment of the present disclosure further provides a computer-readable storage medium, including computer program instructions, which implement the steps of the method of any one of the above embodiments when executed by a processor.

[0132] The embodiments of the present disclosure further provide a computer program product, including a computer program, which implements the steps of the method of any one of the above embodiments when executed by a processor.

[0133] So far, various embodiments of the present disclosure have been described in detail. In order to avoid obscuring the concept of the present disclosure, some details known in the art are not described. Based on the above description, those skilled in the art can fully understand how to implement the technical solution disclosed here.

[0134] Those skilled in the art will appreciate that the embodiments of the present disclosure may be provided as methods, systems, or computer program products. Therefore, the present disclosure may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Furthermore, the present disclosure may take the form of a computer program product implemented on one or more computer-usable non-transient storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0135] The present disclosure is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present disclosure. It should be understood that the functions specified in one or more processes in the flowchart and / or one or more blocks in the block diagram can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the functions specified in the flowchart. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0136] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0137] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process in the computer or other programmable device. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0138] Although some specific embodiments of the present disclosure have been described in detail by way of examples, it should be understood by those skilled in the art that the above examples are for illustration only and are not intended to limit the scope of the present disclosure. It should be understood by those skilled in the art that the above embodiments may be modified or some technical features may be replaced by equivalents without departing from the scope and spirit of the present disclosure. The scope of the present disclosure is defined by the appended claims.

Claims

1. A resource interaction method, executed by a data platform, wherein the data platform stores resources of multiple products, wherein the multiple products include hardware products and software products, and the method comprises: receiving a connection request of a first product, where the first product is any one of the multiple products; verifying the connection request according to the certificate issued for the first product; If the verification is successful, establishing a connection with the first product; In a case where the first product requires a first resource, information for acquiring the first resource is provided to the first product.

2. The method according to claim 1, wherein: The hardware product comprises a first hardware product, and the software product comprises a first software product for controlling the first hardware product.

3. The method according to claim 1, further comprising: generating a certificate for each product based on product information of each product in response to a registration request from a manufacturer of each product, the registration request carrying the product information; The certificate for each product is issued to the manufacturer of each product so that each product is embedded with its own certificate.

4. The method according to claim 3, further comprising: Receive resources for each product; Verifying the resources of each product, the verification comprising a first verification, the first verification comprising at least one of determining whether the resource is of a preset type, determining whether the size of the resource is within a preset range, and determining whether the resource is safe; as well as When the verification passes, the resource of each product is stored.

5. The method according to claim 4, wherein: The verification also includes a second verification after the first verification, and the second verification includes manual review of the result of the first verification.

6. The method according to any one of claims 1 to 5, further comprising: In response to establishing the connection with the first product, generating a private key used by the first product for decryption; issuing the private key of the first product to the first product; In response to a resource access request issued by the first product based on the information, the first resource is encrypted using a public key, and the encrypted first resource is provided to the first product.

7. The method according to any one of claims 1 to 5, wherein: The information described is a temporary link.

8. The method according to claim 7, wherein: The temporary link only allows the IP address corresponding to the first product to access.

9. The method according to claims 1-5, further comprising: In response to establishing a connection with the first product, actively determining whether the first product needs to be upgraded; and, if the first product needs to be upgraded, determining that the first product needs the first resource; and / or In response to a resource request sent by the first product to obtain the first resource, it is determined that the first product needs the first resource.

10. The method according to any one of claims 1 to 5, wherein: The hardware products described are the hardware within the building.

11. A data platform, comprising: A module configured to execute the method according to any one of claims 1 to 10.

12. A data platform, comprising: Memory; as well as A processor coupled to the memory, configured to execute the method according to any one of claims 1 to 10 based on instructions stored in the memory.

13. A resource interaction system, comprising: The data platform according to claim 11 or 12; and the plurality of products.

14. A computer-readable storage medium comprising a computer program, wherein: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 10 are implemented.

15. A computer program product comprising a computer program, wherein: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 10 are implemented.

Images