Component verification method and device of Internet of Things device, and readable storage medium

Abstract

The invention provides a component verification method and device for an Internet of Things device and a readable storage medium, and the specific implementation scheme comprises the steps: reading device component information of an OTP storage area after the power-on of a device component is completed, and carrying out the self-verification based on the device component information, and obtaining a component self-verification result; sending a corresponding equipment component starting state to a verification platform according to a component self-verification result; receiving an identification random number generated by the verification platform in response to the equipment component starting normal state, and calling an internal private key to perform digital signature on the identification random number to obtain a signature value; and sending the signature value and a built-in digital certificate to a verification platform, so that the verification platform verifies whether the component of the Internet of Things equipment is a trusted component or not. According to the scheme of the invention, a part credibility verification mechanism of the Internet of Things equipment is provided, the part credibility of the Internet of Things equipment is improved, in addition, the part self-verification is carried out by the Internet of Things equipment, the second verification is carried out by the verification platform, and the safety intensity of equipment part verification is improved.

Description

Technical Field

[0001] The present application relates to the field of information security technology, and in particular to a component verification method, device and readable storage medium for an Internet of Things device. Background Art

[0002] With the continuous development of IoT technology, IoT devices have been applied in more and more fields such as smart home and smart driving. At present, IoT devices are more intelligent, and the components of IoT devices are often replaced. If IoT devices are replaced with illegal components, it is easy to cause instability or safety hazards in the operation of the equipment. For example, if the illegal lithium battery components of autonomous driving equipment (such as drones, unmanned ships, unmanned cars, robots, etc.) are replaced, they may spontaneously combust, or illegal radars, cameras and other illegal environmental perception components may be replaced, which may bring safety hazards to autonomous driving.

[0003] It is worth noting that the techniques described in this section are not necessarily techniques that have been previously conceived or employed. Unless otherwise indicated, it should not be assumed that any technique described in this section is considered to be prior art simply because it is included in this section. Similarly, unless otherwise indicated, the issues mentioned in this section should not be considered to have been recognized in any prior art. Summary of the invention

[0004] The embodiments of the present application provide a component verification method, device and readable storage medium for an Internet of Things device, aiming to solve one of the problems in the related art at least to a certain extent.

[0005] A first aspect of an embodiment of the present application provides a component verification method for an Internet of Things device, which is applied to the Internet of Things device, including:

[0006] After the device component is powered on, the device component information in the OTP storage area is read, and a self-check is performed based on the device component information to obtain a component self-check result;

[0007] Sending the corresponding device component startup status to the verification platform according to the component self-check result; wherein the device component startup status includes a normal device component startup status and a device component startup failure status;

[0008] Receiving the authentication random number generated by the verification platform in response to the normal state of the device component starting up, calling the internal private key to digitally sign the authentication random number to obtain a signature value;

[0009] The signature value and the built-in digital certificate are sent to the verification platform so that the verification platform can verify whether the components of the Internet of Things device are credible components.

[0010] Optionally, the reading of the device component information in the OTP storage area after the device component is powered on, performing self-verification based on the device component information, and obtaining a component self-verification result includes:

[0011] Obtaining a component to be verified of the IoT device;

[0012] After the device component is powered on, read the device component information corresponding to the component to be verified in the OTP storage area;

[0013] A self-check is performed based on the equipment component information to obtain a component self-check result.

[0014] Optionally, obtaining the component to be verified of the IoT device includes:

[0015] Determine a corresponding component to be verified from all device components of the IoT device according to the device type information;

[0016] Or, when a component replacement event is detected in the IoT device, the replaced device component in the IoT device is determined as a component to be verified.

[0017] Optionally, before sending the corresponding device component startup status to the verification platform according to the component self-check result, the method further includes:

[0018] Obtaining component verification requirement information; wherein the component verification requirement information includes at least one of the following: the type of component required to be verified for the IoT device, and the security level required for component verification;

[0019] Determine the verification platform of the corresponding type according to the component verification requirement information; wherein the types of the verification platform include a host controller and a cloud platform server.

[0020] Optionally, after sending the signature value and the built-in digital certificate to the verification platform so that the verification platform can verify whether the component of the IoT device is a trusted component, the method further includes:

[0021] Receiving the component verification result sent by the verification platform;

[0022] If the component verification result indicates that the components of the Internet of Things device include untrusted components, the untrusted components are controlled to enter a power-off state.

[0023] A second aspect of the embodiment of the present application provides a component verification method for an Internet of Things device, which is applied to a cloud platform server, including:

[0024] Receiving the startup status of the device components sent by the IoT device after self-checking based on the device component information;

[0025] If the device component startup state is a normal device component startup state, generating an authentication random number and sending it to the Internet of Things device;

[0026] Receive a digital certificate and a signature value corresponding to the component to be verified sent by the IoT device; wherein the signature value is obtained by the IoT device calling an internal private key to digitally sign the authentication random number;

[0027] The digital certificate and the signature value are verified to obtain a component verification result of the Internet of Things device; wherein the component verification result is used to indicate whether the component of the Internet of Things device is a trusted component.

[0028] Optionally, the verifying the digital certificate and the signature value includes:

[0029] Authenticating the digital certificate using preset digital certificate authentication information;

[0030] If the authentication is successful, the device public key is parsed from the digital certificate;

[0031] Decrypting the signature value using the device public key to obtain a random number to be verified;

[0032] The authentication random number to be verified is verified using the authentication random number generated by itself.

[0033] Optionally, generating an authentication random number and sending it to the IoT device includes:

[0034] Call the corresponding random number seed according to the component verification requirement information;

[0035] Calling an internal random number generator to generate an authentication random number according to the random number seed;

[0036] The authentication random number is sent to the Internet of Things device.

[0037] A third aspect of an embodiment of the present application provides an electronic device, comprising: a memory and a processor, wherein the processor is used to execute a computer program stored in the memory, and when the processor executes the computer program, it implements each step of the component verification method of the Internet of Things device provided in the first aspect or the second aspect of the embodiment of the present application.

[0038] The fourth aspect of the embodiments of the present application provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, each step of the component verification method of the Internet of Things device provided in the first aspect or the second aspect of the embodiments of the present application is implemented.

[0039] As can be seen from the above, according to the component verification method, device and readable storage medium of the Internet of Things device provided by the present application scheme, after the device component is powered on, the device component information in the OTP storage area is read, and self-verification is performed based on the device component information to obtain the component self-verification result; the corresponding device component startup status is sent to the verification platform according to the component self-verification result; wherein the device component startup status includes the normal startup status of the device component and the failed startup status of the device component; the authentication random number generated by the verification platform in response to the normal startup status of the device component is received, and the internal private key is called to digitally sign the authentication random number to obtain the signature value; the signature value and the built-in digital certificate are sent to the verification platform for the verification platform to verify whether the component of the Internet of Things device is a trusted component. The present application scheme provides a trusted verification mechanism for components of an Internet of Things device, which improves the component credibility of the Internet of Things device. In addition, the component self-verification performed by the Internet of Things device and the second verification performed by the verification platform improve the security strength of the device component verification, which is conducive to improving the product security and stability of the Internet of Things device.

[0040] It should be understood that the content described in this section is not intended to identify the key or important features of the present application, nor is it intended to limit the scope of the present application. Other features of the present application will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] The accompanying drawings exemplarily illustrate the embodiments and constitute a part of the specification, and together with the text description of the specification, are used to explain the exemplary implementation of the embodiments. The drawings shown are for illustrative purposes only and do not limit the scope of the claims. In all drawings, the same reference numerals refer to similar but not necessarily identical elements.

[0042] Figure 1 A schematic diagram of a basic flow chart of a component verification method for an Internet of Things device applied to an Internet of Things device provided in an embodiment of the present application;

[0043] Figure 2 A basic flow chart of a component verification method for an Internet of Things device applied to a cloud platform server provided in one embodiment of the present application;

[0044] Figure 3 A schematic diagram of signaling interaction of a component verification method for an Internet of Things device provided in one embodiment of the present application;

[0045] Figure 4 A schematic diagram of the structure of an electronic device provided in one embodiment of the present application. DETAILED DESCRIPTION

[0046] In order to make the purpose, features, and advantages of the invention of this application more obvious and easy to understand, the technical solutions in the embodiments of this application will be clearly and completely described below in conjunction with the drawings in the embodiments of this application. Obviously, the described embodiments are only part of the embodiments of this application, not all of them. Based on the embodiments in this application, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of this application.

[0047] In the description of the embodiments of the present application, the terms "first" and "second" are used for descriptive purposes only and cannot be understood as indicating or implying relative importance or implicitly indicating the number of technical features indicated. Thus, the features defined as "first" and "second" may explicitly or implicitly include one or more of the features. In the description of the embodiments of the present application, the meaning of "multiple" is two or more, unless otherwise clearly and specifically defined. In addition, the term "comprising" indicates the presence of the described features, wholes, steps, operations, elements and / or components, but does not exclude the presence or addition of one or more other features, wholes, steps, operations, elements, components and / or their collections.

[0048] In order to solve the problem in the related art that the replacement of illegal components in IoT devices may easily cause unstable operation or safety hazards of the device, an embodiment of the present application provides a component verification method for IoT devices applied to IoT devices. The types of IoT devices may include perception layer devices, network layer devices, and application layer devices. Furthermore, the component verification method can be directly applied to IoT device components. Figure 1 The figure is a basic flow chart of a component verification method for an IoT device provided by this embodiment and applied to an IoT device. The component verification method includes the following steps:

[0049] Step 101: After the device component is powered on, the device component information in the OTP storage area is read, and a self-check is performed based on the device component information to obtain a component self-check result.

[0050] Specifically, the device component information of the IoT device components is stored in the OTP storage area, and the self-checking function of the device component information can be completed when powered on. The OTP (One Time Program) storage area of ​​this embodiment can be understood as a one-time burning storage area. The OTP storage area of ​​the chip can only write data once, and it cannot be changed after writing. The data in the OTP storage area is generally read by the internal application program and cannot be known to the outside. Therefore, this embodiment uses the OTP storage area as the writing area of ​​the device component information to ensure the authenticity of the data. It should be noted that the device component information of this embodiment includes a checksum value.

[0051] In an optional implementation manner of the present embodiment, the above-mentioned reading of the device component information in the OTP storage area after the device component is powered on, performing self-verification based on the device component information, and obtaining a component self-verification result includes: obtaining a component to be verified of the Internet of Things device; reading the device component information corresponding to the component to be verified in the OTP storage area after the device component is powered on; performing self-verification based on the device component information, and obtaining a component self-verification result.

[0052] Specifically, an IoT device is assembled with multiple components. In actual applications, the components to be verified can be purposefully selected to perform device self-verification according to the application scenario. The components to be verified can be all components or some specific components among all components.

[0053] In the optional implementation manner of this embodiment, the specific implementation manners of obtaining the to-be-verified component of the IoT device include the following two:

[0054] Method 1: Determine the corresponding component to be verified from all components of the IoT device according to the device type information.

[0055] This implementation is applicable regardless of whether a component replacement event occurs currently. In actual applications, component configurations of different types of IoT devices are different, and core components or key components are different. This embodiment can adaptively select components to be verified based on device type information to ensure the rationality and accuracy of device self-verification.

[0056] Method 2: When a component replacement event of an IoT device is detected, the replaced component in the IoT device is determined as a component to be verified.

[0057] In actual applications, when a component replacement event occurs in an IoT device, there is usually a risk of replacing an illegal component. Therefore, this embodiment determines the component replaced in the IoT device as a component to be verified when a component replacement event is detected. The component replacement event may be a battery disassembly event, etc. It should also be noted that in actual applications, after the target component of the IoT device is replaced, the stability and / or security of the associated components may be affected. Therefore, after the component replacement event is detected, this embodiment may also determine the associated components of the replaced component in the IoT device as components to be verified.

[0058] Step 102: Send the corresponding device component startup status to the verification platform according to the component self-check result.

[0059] Specifically, the device component startup status of this embodiment includes a normal device component startup status and a device component startup failure status. In this embodiment, if the component self-check passes, the normal device component startup status is sent to the verification platform, otherwise, if the component self-check fails, the device component startup failure status is sent to the verification platform.

[0060] In an optional implementation of the present embodiment, before sending the corresponding device component startup status to the verification platform based on the component self-verification result, it also includes: obtaining component verification requirement information; determining the corresponding type of verification platform based on the component verification requirement information; wherein the types of verification platforms include host controllers and cloud platform servers.

[0061] Specifically, the component verification requirement information of this embodiment includes at least one of the following: the type of component that needs to be verified for the IoT device, and the security level required for component verification. In this embodiment, the verification platform is used to perform a second level of verification on the IoT device components. The type of verification platform may include at least one of a host controller and a cloud platform server. In actual applications, the identity authentication of the IoT device may be verified using only a single verification platform, or multiple verification platforms may be used in combination for multiple verifications. This embodiment takes into account that different verification platforms provide different verification performances, as well as different types of components that need to be verified and the required verification security for different IoT devices. Therefore, this embodiment will determine the verification platform based on the adaptability of the actual component verification requirements of the IoT device to improve the identity authentication security of the IoT device.

[0062] It is worth mentioning that the host controller of this embodiment can be understood as the host controller of the Internet of Things device. Taking the drone device as an example, it includes multiple components such as the host controller, remote control, battery, memory card, camera, etc. If the host controller is used as the verification platform, the verification of the remote control, battery, memory card, camera and other components can be realized. If the cloud platform server is used as the verification platform, the verification of the host controller, remote control, battery, memory card, camera and other components can be realized; in addition, in the smart car system, it includes the host controller (also called the central controller), domain controller, camera, radar, tire pressure monitoring sensor, audio and other components. If the central controller is used as the verification platform, the verification of other domain controllers, cameras, radars, tire pressure monitoring sensors, audio and other components can be realized. If the cloud platform server is used as the verification platform, the verification of the host controller, domain controller, camera, radar, tire pressure monitoring sensor, audio and other components can be realized.

[0063] Step 103: Receive the authentication random number generated by the verification platform in response to the normal startup state of the device component, call the internal private key to digitally sign the authentication random number, and obtain the signature value.

[0064] In this embodiment, the verification platform can call the internal random number generator to generate an authentication random number Nonce, and then send the authentication random number to the IoT device, otherwise the verification platform reports that the device fails to start. Next, the IoT device calls the device private key stored in the secure storage area to digitally sign the authentication random number Nonce, and obtains the signature value SigKey[Nonce] of the device component.

[0065] Step 104: Send the signature value and the built-in digital certificate to the verification platform so that the verification platform can verify whether the component of the IoT device is a trusted component.

[0066] Specifically, after calling the device private key in the secure storage area to obtain the signature value, this embodiment sends the obtained signature value and the digital certificate retrieved from the secure storage area to the verification platform, so that the verification platform can perform a second verification on the component to be verified after the component self-verification, which can improve the security strength of the component verification result.

[0067] In an optional implementation of the present embodiment, after sending the signature value and the built-in digital certificate to the verification platform for the verification platform to verify whether the components of the Internet of Things device are trusted components, the method further includes: receiving the component verification results sent by the verification platform; if the component verification results indicate that the components of the Internet of Things device include untrusted components, controlling the untrusted components to enter a power-off state.

[0068] Specifically, after the verification platform completes the second level of component self-verification, the verification platform will feedback the component verification result to the IoT device. If the verification result indicates that the component to be verified is an untrusted component, it means that the component will affect the operation stability and / or security of the device. In this case, the untrusted component will be controlled to lose power to improve the stability and / or security of the IoT device.

[0069] Next, adapted to the aforementioned component verification method for an IoT device applied to an IoT device, an embodiment of the present application further provides a component verification method for an IoT device applied to a cloud platform server, such as Figure 2 The figure shows a basic flow chart of a component verification method for an Internet of Things device applied to a cloud platform server provided in this embodiment. The component verification method includes the following steps:

[0070] Step 201: Receive the device component startup status sent by the IoT device after self-checking based on the device component information.

[0071] It should be noted that in this embodiment, the cloud platform server can be connected to the unified communication module of the IoT device, or can be connected to the various components of the IoT device, and the communication connection mode can be a wired connection mode or a wireless connection mode. If the opposite execution subject of the cloud platform server is an IoT device, then the device component startup status can be received based on the communication connection with the unified communication module of the IoT device. If the opposite execution subject of the cloud platform server is a component of the IoT device, then the component startup status is received based on the communication connection with each component.

[0072] Step 202: If the device component startup state is a normal device component startup state, an authentication random number is generated and sent to the IoT device.

[0073] Step 203: Receive the digital certificate and signature value corresponding to the component to be verified sent by the IoT device.

[0074] The signature value is obtained by the IoT device calling the internal private key to digitally sign the identification random number.

[0075] Step 204: Verify the digital certificate and the signature value to obtain a component verification result of the IoT device.

[0076] Among them, the component verification result is used to indicate whether the component of the IoT device is a trusted component.

[0077] In an optional implementation of the present embodiment, the above-mentioned verification of the digital certificate and the signature value includes: using preset digital certificate authentication information to authenticate the digital certificate; if the authentication passes, parsing the device public key from the digital certificate; using the device public key to decrypt the signature value to obtain the authentication random number to be verified; and using the authentication random number generated by itself to verify the authentication random number to be verified.

[0078] Specifically, in this embodiment, if the IoT device components are started normally, the cloud platform server generates an identification random number Nonce using a random number generator and sends it to the IoT device. The random number has good randomness and high security.

[0079] In this embodiment, the cloud platform server receives the signature value and digital certificate from the IoT device, first uses the authentication information of the digital certificate to verify the legitimacy of the digital certificate, then parses the digital certificate to obtain the device public key, uses the device public key to decrypt the signature value SigKey[Nonce], obtains the authentication random number to be verified, and finally uses the authentication random number initially generated by the cloud platform server to verify the authentication random number to be verified, thereby realizing the verification of device components.

[0080] In an optional implementation of the present embodiment, the above-mentioned generation of an identification random number and sending it to the Internet of Things device includes: calling a corresponding random number seed according to component verification requirement information; calling an internal random number generator to generate an identification random number according to the random number seed; and sending the identification random number to the Internet of Things device.

[0081] Specifically, different random number seeds can generate random numbers with different security performance. This embodiment flexibly adapts to the component verification requirements in actual application scenarios and calls corresponding random number seeds. The random numbers generated in this way can be more in line with actual application requirements and ensure verification security.

[0082] In order to better illustrate the embodiments of the present application, an embodiment of the present application also provides a detailed component verification method for an IoT device, which is applied to a component verification system including IoT device components and a cloud platform server, such as Figure 3 The figure shows a signaling interaction diagram of a component verification method for an IoT device provided by an embodiment of the present application, which specifically includes the following process:

[0083] Step 301: After the IoT device components are powered on, the device component information in the OTP storage area is read, and a self-check is performed based on the device component information to obtain a component self-check result;

[0084] Step 302: The IoT device component sends the corresponding device component startup status to the cloud platform server according to the component self-check result;

[0085] Step 303: The cloud platform server generates an authentication random number in response to the normal startup state of the device component;

[0086] Step 304: The cloud platform server sends an authentication random number to the IoT device component;

[0087] Step 305: The IoT device component uses the internal private key to digitally sign the authentication random number to obtain a signature value;

[0088] Step 306: The IoT device component sends the signature value and the built-in digital certificate to the cloud platform server;

[0089] Step 307: The cloud platform server uses the preset digital certificate authentication information to authenticate the digital certificate;

[0090] Step 308: The cloud platform server parses the device public key from the authenticated digital certificate, decrypts the signature value using the device public key, and then verifies the decrypted authentication random number to be verified;

[0091] Step 309: The cloud platform server sends the component verification result to the IoT device component;

[0092] Step 310: The IoT device component enters a power-off state when the component verification result indicates that the component is untrustworthy.

[0093] It should be understood that the size of the serial number of each step in this embodiment does not mean the order of execution of the steps. The execution order of each step should be determined by its function and internal logic, and should not constitute a sole limitation on the implementation process of the embodiment of this application.

[0094] Based on the technical solution of the embodiment of the present application, after the device components are powered on, the device component information of the OTP storage area is read, and self-verification is performed based on the device component information to obtain the component self-verification result; the corresponding device component startup status is sent to the verification platform according to the component self-verification result; wherein the device component startup status includes the normal startup status of the device component and the failed startup status of the device component; the authentication random number generated by the verification platform in response to the normal startup status of the device component is received, and the internal private key is called to digitally sign the authentication random number to obtain the signature value; the signature value and the built-in digital certificate are sent to the verification platform for the verification platform to verify whether the component of the Internet of Things device is a trusted component. The present application solution provides a trusted verification mechanism for components of an Internet of Things device, which improves the credibility of the components of the Internet of Things device. In addition, the component self-verification performed by the Internet of Things device and the second verification performed by the verification platform improve the security strength of the device component verification, which is beneficial to improve the product security and stability of the Internet of Things device.

[0095] Figure 4 An electronic device is provided in one embodiment of the present application. The electronic device can be used to implement the component verification method of the Internet of Things device in the aforementioned embodiment, and mainly includes: a memory 401 and a processor 402. The memory 401 stores a computer program 403 that can be run on the processor 402. The memory 401 and the processor 402 are in communication connection. When the processor 402 executes the computer program 403, the component verification method of the Internet of Things device in the aforementioned embodiment is implemented. The number of processors 402 can be one or more.

[0096] The memory 401 may be a high-speed random access memory (RAM) memory, or a non-volatile memory, such as a disk memory. The memory 401 is used to store executable program codes, and the processor 402 is coupled to the memory 401 .

[0097] Furthermore, the present application also provides a computer-readable storage medium, which may be provided in the electronic device in the above embodiments. Figure 4 Memory in the illustrated embodiment.

[0098] The computer readable storage medium stores a computer program, and when the computer program is executed by the processor, the component verification method of the IoT device in the aforementioned embodiment is implemented. Furthermore, the computer storable medium can also be a U disk, a mobile hard disk, a read-only memory (ROM), a RAM, a magnetic disk or an optical disk, and other media that can store program codes.

[0099] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of modules is only a logical function division. There may be other division methods in actual implementation, such as multiple modules or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or modules, which can be electrical, mechanical or other forms.

[0100] The modules described as separate components may or may not be physically separated, and the components shown as modules may or may not be physical modules, that is, they may be located in one place or distributed on multiple network modules. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0101] In addition, each functional module in each embodiment of the present application can be integrated into a processing module, or each module can exist physically separately, or two or more modules can be integrated into one module. The above integrated modules can be implemented in the form of hardware or software functional modules.

[0102] If the integrated module is implemented in the form of a software function module and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, which is stored in a readable storage medium, including several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the various embodiments of the present application. The aforementioned readable storage medium includes: various media that can store program codes, such as USB flash drives, mobile hard drives, ROM, RAM, magnetic disks, or optical disks.

[0103] It should be noted that, for the convenience of description, the aforementioned method embodiments are all described as a series of action combinations, but those skilled in the art should be aware that the present application is not limited by the described action sequence, because according to the present application, certain steps can be performed in other sequences or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily required by the present application.

[0104] In the above embodiments, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0105] The above is a description of the component verification method, device and readable storage medium of the Internet of Things device provided by this application. For technicians in this field, according to the ideas of the embodiments of this application, there will be changes in the specific implementation methods and application scopes. In summary, the content of this specification should not be understood as a limitation on this application.

Claims

1. A component verification method for an Internet of Things device, applied to an Internet of Things device, characterized in that: include: After the device component is powered on, the device component information in the OTP storage area is read, and a self-check is performed based on the device component information to obtain a component self-check result; Sending the corresponding device component startup status to the verification platform according to the component self-check result; wherein the device component startup status includes a normal device component startup status and a device component startup failure status; Receiving the authentication random number generated by the verification platform in response to the normal state of the device component starting up, calling the internal private key to digitally sign the authentication random number to obtain a signature value; The signature value and the built-in digital certificate are sent to the verification platform so that the verification platform can verify whether the components of the Internet of Things device are credible components.

2. The component verification method according to claim 1, characterized in that: The step of reading the device component information in the OTP storage area after the device component is powered on, performing self-checking based on the device component information, and obtaining a component self-checking result includes: Obtaining a component to be verified of the IoT device; After the device component is powered on, read the device component information corresponding to the component to be verified in the OTP storage area; A self-check is performed based on the equipment component information to obtain a component self-check result.

3. The component verification method according to claim 2, characterized in that: The obtaining of the to-be-verified component of the IoT device comprises: Determine a corresponding component to be verified from all device components of the IoT device according to the device type information; Or, when a component replacement event is detected in the IoT device, the replaced device component in the IoT device is determined as a component to be verified.

4. The component verification method according to claim 1, characterized in that: Before sending the corresponding device component startup status to the verification platform according to the component self-check result, the method further includes: Obtaining component verification requirement information; wherein the component verification requirement information includes at least one of the following: the type of component required to be verified for the IoT device, and the security level required for component verification; Determine the verification platform of the corresponding type according to the component verification requirement information; wherein the types of the verification platform include a host controller and a cloud platform server.

5. The component verification method according to any one of claims 1 to 4, characterized in that: After sending the signature value and the built-in digital certificate to the verification platform so that the verification platform can verify whether the component of the Internet of Things device is a trusted component, the method further includes: Receiving the component verification result sent by the verification platform; If the component verification result indicates that the components of the Internet of Things device include untrusted components, the untrusted components are controlled to enter a power-off state.

6. A component verification method for an Internet of Things device, applied to a cloud platform server, characterized in that: include: Receiving the startup status of the device components sent by the IoT device after self-checking based on the device component information; If the device component startup state is a normal device component startup state, generating an authentication random number and sending it to the Internet of Things device; Receive a digital certificate and a signature value corresponding to the component to be verified sent by the IoT device; wherein the signature value is obtained by the IoT device calling an internal private key to digitally sign the authentication random number; The digital certificate and the signature value are verified to obtain a component verification result of the Internet of Things device; wherein the component verification result is used to indicate whether the component of the Internet of Things device is a trusted component.

7. The component verification method according to claim 6, characterized in that: The verifying of the digital certificate and the signature value includes: Authenticating the digital certificate using preset digital certificate authentication information; If the authentication is successful, the device public key is parsed from the digital certificate; Decrypting the signature value using the device public key to obtain a random number to be verified; The authentication random number to be verified is verified using the authentication random number generated by itself.

8. The component verification method according to claim 6, characterized in that: The generating and sending of the authentication random number to the IoT device includes: Call the corresponding random number seed according to the component verification requirement information; Calling an internal random number generator to generate an authentication random number according to the random number seed; The authentication random number is sent to the Internet of Things device.

9. An electronic device, characterized in that: The device comprises a memory and a processor, wherein: The processor is used to execute the computer program stored in the memory; When the processor executes the computer program, the steps in the component verification method of the Internet of Things device described in any one of claims 1 to 5 or 6 to 8 are implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps in the component verification method of an Internet of Things device described in any one of claims 1 to 5 or 6 to 8 are implemented.

Images