Component verification method, device and readable storage medium of internet of things equipment

Abstract

The application provides a component verification method and device of an Internet of Things equipment and a readable storage medium, and the specific implementation scheme is as follows: reading the equipment component information of an OTP storage area after the equipment component is powered on and completed, performing self-checking based on the equipment component information to obtain a component self-checking result; sending the corresponding equipment component start state to a verification platform according to the component self-checking result; receiving a discrimination random number generated by the verification platform in response to the normal start state of the equipment component, calling an internal private key to digitally sign the discrimination random number to obtain a signature value; and sending the signature value and the built-in digital certificate to the verification platform to verify whether the component of the Internet of Things equipment is a trusted component. The application scheme provides a component trusted verification mechanism of the Internet of Things equipment, improves the component trustworthiness of the Internet of Things equipment, and in addition, the component self-checking by the Internet of Things equipment and the second re-verification by the verification platform improve the security strength of the equipment component verification.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of information security, and in particular to a component verification method of an Internet of Things device, a device and a readable storage medium. BACKGROUND

[0002] With the continuous development of Internet of Things technology, Internet of Things devices have been applied in more and more fields such as smart home and intelligent driving. At present, Internet of Things devices are more intelligent, and consequently, the components of Internet of Things devices are often replaced. If an Internet of Things device is replaced with illegal components, it is easy to cause unstable operation of the device or security risks. For example, an automatic driving device (such as a drone, an unmanned ship, a self-driving car, a robot, etc.) may catch fire if it is replaced with illegal lithium battery components, or may bring safety risks to automatic driving if it is replaced with illegal environmental perception components such as radars and cameras.

[0003] It should be noted that the technology described in this section need not have been previously conceived or made. Unless otherwise indicated, it should not be assumed that any of the technology described in this section is considered prior art merely because of its inclusion in this section. Similarly, issues identified with respect to this section should not be assumed to have been admitted to be prior art against anyone. SUMMARY

[0004] The embodiments of the present application provide a component verification method of an Internet of Things device, a device and a readable storage medium, which are intended to at least solve one of the problems in the related art to some extent.

[0005] The first aspect of the embodiments of the present application provides a component verification method of an Internet of Things device, applied to the Internet of Things device, comprising:

[0006] reading device component information of an OTP storage area after power-on completion of a device component, performing self-checking based on the device component information to obtain a component self-checking result;

[0007] sending a corresponding device component startup state to a verification platform according to the component self-checking result; wherein the device component startup state includes a device component startup normal state and a device component startup failure state;

[0008] receiving an authentication random number generated by the verification platform in response to the device component startup normal state, calling an internal private key to digitally sign the authentication random number to obtain a signature value;

[0009] sending the signature value and a built-in digital certificate to the verification platform, so that the verification platform verifies whether the component of the Internet of Things device is a trusted component.

[0010] Optionally, the device component information in the OTP storage area is read after power-on completion of the device component, self-checking is performed based on the device component information, a component self-checking result is obtained, and the component self-checking result includes:

[0011] Obtaining a to-be-verified component of the Internet of Things device;

[0012] Reading device component information corresponding to the to-be-verified component in the OTP storage area after power-on completion of the device component;

[0013] Performing self-checking based on the device component information to obtain a component self-checking result.

[0014] Optionally, the obtaining of the to-be-verified component of the Internet of Things device includes:

[0015] Determining a corresponding to-be-verified component from all device components of the Internet of Things device according to device type information;

[0016] Or, when a component replacement event of the Internet of Things device is detected, determining a replaced device component of the Internet of Things device as a to-be-verified component.

[0017] Optionally, before the sending of the component self-checking result to the verification platform to start a corresponding device component, the method further includes:

[0018] Obtaining component verification requirement information; wherein the component verification requirement information includes at least one of the following: a component type required to be verified by the Internet of Things device, a security level required for component verification;

[0019] Determining a corresponding type of the verification platform according to the component verification requirement information; wherein the type of the verification platform includes a host controller and a cloud platform server.

[0020] Optionally, after the sending of the signature value and the built-in digital certificate to the verification platform to verify whether the component of the Internet of Things device is a trusted component, the method further includes:

[0021] Receiving a component verification result sent by the verification platform;

[0022] If the component verification result indicates that the component of the Internet of Things device includes an untrusted component, controlling the untrusted component to enter a power-off state.

[0023] The second aspect of the embodiment of the application provides a component verification method of an Internet of Things device, applied to a cloud platform server, and including:

[0024] Receiving a device component start state sent by an Internet of Things device after self-checking based on device component information;

[0025] if the device component startup state is a device component startup normal state, generating an authentication random number and sending the authentication random number to the Internet of Things device;

[0026] receiving a digital certificate corresponding to the component to be verified and a signature value sent by the Internet of Things device; wherein the signature value is obtained by performing digital signature on the authentication random number by the Internet of Things device by calling an internal private key;

[0027] verifying the digital certificate and the signature value to obtain a component verification result of the Internet of Things device; wherein the component verification result is used to indicate whether the component of the Internet of Things device is a trusted component.

[0028] Optionally, the verifying the digital certificate and the signature value comprises:

[0029] authenticating the digital certificate by using preset digital certificate authentication information;

[0030] if the authentication is passed, obtaining a device public key from the digital certificate;

[0031] decrypting the signature value by using the device public key to obtain an authentication random number to be verified;

[0032] verifying the authentication random number to be verified by using the authentication random number generated by itself.

[0033] Optionally, the generating the authentication random number and sending the authentication random number to the Internet of Things device comprises:

[0034] calling a corresponding random number seed according to component verification requirement information;

[0035] generating the authentication random number by using an internal random number generator according to the random number seed;

[0036] sending the authentication random number to the Internet of Things device.

[0037] The third aspect of the embodiment of the present application provides an electronic device, comprising a memory and a processor, wherein the processor is used to execute a computer program stored in the memory, and the processor implements each step in the component verification method of the Internet of Things device provided in the first aspect or the second aspect of the embodiment of the present application when executing the computer program.

[0038] The fourth aspect of the embodiment of the present application provides a computer readable storage medium, which stores a computer program, and each step in the component verification method of the Internet of Things device provided in the first aspect or the second aspect of the embodiment of the present application is implemented when the computer program is executed by a processor.

[0039] From the above, according to the component verification method, device and readable storage medium of the Internet of Things device provided by the scheme, the device component information of the OTP storage area is read after the power-on completion of the device component, self-checking is performed based on the device component information, and the component self-checking result is obtained; the corresponding device component startup state is sent to the verification platform according to the component self-checking result; wherein the device component startup state includes a device component startup normal state and a device component startup failure state; the authentication random number generated by the verification platform in response to the device component startup normal state is received, the internal private key is called to digitally sign the authentication random number, and the signature value is obtained; and the signature value and the built-in digital certificate are sent to the verification platform, so that the verification platform verifies whether the component of the Internet of Things device is a trusted component. The scheme provides a component trusted verification mechanism of the Internet of Things device, improves the component trustworthiness of the Internet of Things device, and in addition, the component self-checking by the Internet of Things device and the second re-verification by the verification platform improve the security strength of the device component verification, and thus, the product safety and stability of the Internet of Things device are improved.

[0040] It should be understood that the content described in this part is not intended to identify key or important features of the application, nor is it used to limit the scope of the application. Other features of the application will become apparent from the following description. BRIEF DESCRIPTION OF DRAWINGS

[0041] The accompanying drawings, which are included to provide a further understanding of the application and are incorporated in and constitute a part of this specification, illustrate embodiments and together with the description serve to explain exemplary embodiments of the application. The drawings presented are for exemplary purposes only and do not limit the scope of the claims. In all the drawings, the same reference signs refer to similar but not necessarily identical elements.

[0042] Figure 1 The basic flowchart of the component verification method of the Internet of Things device applied to the Internet of Things device is provided for an embodiment of the application;

[0043] Figure 2 The basic flowchart of the component verification method of the Internet of Things device applied to the cloud platform server is provided for an embodiment of the application;

[0044] Figure 3 The signaling interaction diagram of the component verification method of the Internet of Things device is provided for an embodiment of the application;

[0045] Figure 4 The structural diagram of the electronic device is provided for an embodiment of the application. DETAILED DESCRIPTION

[0046] In order to make the application purposes, features and advantages of the present application more obvious and easy to understand, the technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only some of the embodiments of the present application, but not all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative work fall within the scope of protection of the present application.

[0047] In the description of the embodiments of the present application, the terms "first", "second" are only used for descriptive purposes, and cannot be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined with "first", "second" can explicitly or implicitly include one or more of the features. In the description of the embodiments of the present application, the meaning of "multiple" is two or more, unless otherwise explicitly specified. In addition, the term "comprising" indicates the presence of the described features, whole, steps, operations, elements and / or components, but does not exclude the presence or addition of one or more other features, whole, steps, operations, elements, components and / or sets thereof.

[0048] In order to solve the problem that the Internet of Things device is replaced with illegal components and is easy to cause unstable operation or security risks of the device in the related art, an embodiment of the present application provides a component verification method of an Internet of Things device applied to an Internet of Things device. The type of the Internet of Things device can include a perception layer device, a network layer device and an application layer device, and further, the component verification method can be directly applied to the Internet of Things device component. As shown in the figure, Figure 1 The basic flowchart of the component verification method of the Internet of Things device applied to the Internet of Things device provided by the embodiment is shown in the figure, and the component verification method includes the following steps:

[0049] Step 101, reading the device component information of the OTP storage area after the power-on of the device component is completed, performing self-checking based on the device component information to obtain a component self-checking result.

[0050] Specifically, the device component information of the Internet of Things device component is stored in the OTP storage area, and the power-on can complete the self-checking function of the device component information. The OTP (One Time Program) storage area of the embodiment can be understood as a one-time programming storage area. The OTP storage area of the chip can only write data once, and cannot be changed after writing. The OTP storage area data is generally read by an internal application program, and cannot be known externally. Therefore, the OTP storage area is used as the writing area of the device component information in the embodiment, which can ensure the authenticity of the data. It should be noted that the device component information of the embodiment includes a check value.

[0051] In an optional implementation of the embodiment, the device component information in the OTP storage area is read after the power-on of the device component, the self-checking is performed based on the device component information, and the component self-checking result is obtained, including: obtaining a to-be-verified component of the Internet of Things device; reading the device component information corresponding to the to-be-verified component in the OTP storage area after the power-on of the device component; and performing self-checking based on the device component information to obtain a component self-checking result.

[0052] Specifically, the Internet of Things device is assembled with multiple components, and in actual application, the to-be-verified component can be selected for device self-checking according to the application scenario, and the to-be-verified component can be all components or part of the specific components.

[0053] In the optional implementation of the embodiment, the specific implementation of obtaining the to-be-verified component of the Internet of Things device includes the following two methods:

[0054] Method one: determining the corresponding to-be-verified component from all components of the Internet of Things device according to the device type information.

[0055] This implementation method is applicable regardless of whether the component replacement event occurs or not, and in actual application, the component configuration of different types of Internet of Things devices is different, and the core component or the key component is different, and the embodiment can adaptively select the to-be-verified component according to the device type information to ensure the rationality and accuracy of the device self-checking.

[0056] Method two: when the component replacement event of the Internet of Things device is detected, the replaced component of the Internet of Things device is determined as the to-be-verified component.

[0057] In actual application, when the component replacement event of the Internet of Things device occurs, there is usually a risk of replacing illegal components, so the embodiment determines the component replaced to the Internet of Things device as the to-be-verified component when the component replacement event is detected, and the component replacement event can be a battery disassembly event, etc. It should be noted that in actual application, after the target component of the Internet of Things device is replaced, the stability and / or safety of the associated component can be affected, so the embodiment can also determine the associated component of the replaced component of the Internet of Things device as the to-be-verified component after detecting the component replacement event.

[0058] Step 102: sending the corresponding device component startup state to the verification platform according to the component self-checking result.

[0059] Specifically, the device component startup state of the embodiment includes a device component startup normal state and a device component startup failure state. In the embodiment, if the component self-checking passes, the device component startup normal state is sent to the verification platform, otherwise, if the component self-checking does not pass, the device component startup failure state is sent to the verification platform.

[0060] In an optional implementation of the embodiment, before the sending of the device component start state to the verification platform according to the component self-checking result, the method further comprises: obtaining component verification requirement information; determining a verification platform of a corresponding type according to the component verification requirement information; and wherein the types of the verification platform include at least one of a host controller and a cloud platform server.

[0061] Specifically, the component verification requirement information of the embodiment includes at least one of the following: a component type required to be verified by the Internet of Things device, and a security level required for component verification. In the embodiment, the verification platform is used for second verification of the Internet of Things device component, and the type of the verification platform can include at least one of a host controller and a cloud platform server. In actual application, the identity verification of the Internet of Things device can be verified by using only a single verification platform, or can be verified by using multiple verification platforms for multiple times. The embodiment takes into account that the verification performance provided by different verification platforms is different, and the component type required to be verified by different Internet of Things devices and the required verification security are different, so that the embodiment adaptively determines the verification platform according to the actual component verification requirement of the Internet of Things device, so as to improve the identity verification security of the Internet of Things device.

[0062] It is worth mentioning that the host controller in the above embodiment can be understood as a host controller of the Internet of Things device. Taking a drone device as an example, it includes a host controller, a remote controller, a battery, a memory card, a camera and the like. If the host controller is used as a verification platform, the verification of the remote controller, the battery, the memory card, the camera and the like can be realized. If the cloud platform server is used as a verification platform, the verification of the host controller, the remote controller, the battery, the memory card, the camera and the like can be realized. In addition, in a smart car system, it includes a host controller (also referred to as a central controller), a domain controller, a camera, a radar, a tire pressure monitoring sensor, a sound and the like. If the central controller is used as a verification platform, the verification of the other domain controllers, the camera, the radar, the tire pressure monitoring sensor, the sound and the like can be realized. If the cloud platform server is used as a verification platform, the verification of the host controller, the domain controller, the camera, the radar, the tire pressure monitoring sensor, the sound and the like can be realized.

[0063] In step 103, the verification platform generates a discrimination random number in response to the device component start normal state, and calls an internal private key to digitally sign the discrimination random number to obtain a signature value.

[0064] In the embodiment, the verification platform can call an internal random number generator to generate an authentication random number Nonce, and then send the authentication random number to the IoT device, otherwise the verification platform reports a device startup failure. Next, the IoT device calls the device private key stored in the secure storage to digitally sign the authentication random number Nonce, and obtains a signature value SigKey[Nonce] of the device component.

[0065] Step 104, send the signature value and the built-in digital certificate to the verification platform for the verification platform to verify whether the component of the IoT device is a trusted component.

[0066] Specifically, after obtaining the signature value by calling the device private key of the secure storage, the embodiment sends the obtained signature value and the digital certificate retrieved from the secure storage to the verification platform for the second verification after the component self-checking of the verification platform, which can improve the security strength of the component verification result.

[0067] In an optional implementation of the embodiment, after the above sending the signature value and the built-in digital certificate to the verification platform for the verification platform to verify whether the component of the IoT device is a trusted component, the method further includes: receiving a component verification result sent by the verification platform; and if the component verification result indicates that the component of the IoT device includes an untrusted component, controlling the untrusted component to enter a power-off state.

[0068] Specifically, after the second verification of the component self-checking of the verification platform, the verification platform feeds back a component verification result to the IoT device, and if the verification result indicates that the component to be verified is an untrusted component, it means that the component will affect the stability and / or security of the device operation, and then the untrusted component is powered off to improve the stability and / or security of the IoT device.

[0069] Next, for the above-mentioned component verification method of the IoT device applied to the IoT device, an embodiment of the present application further provides a component verification method of the IoT device applied to a cloud platform server, as shown in Figure 2 The basic flowchart of the component verification method of the IoT device applied to the cloud platform server provided by the embodiment is shown, and the component verification method includes the following steps:

[0070] Step 201, receive a device component startup state sent by an IoT device after self-checking based on device component information.

[0071] It should be noted that in the present embodiment, the cloud platform server can be in communication connection with the unified communication module of the Internet of Things device, or can be in communication connection with each component of the Internet of Things device, and the communication connection mode can be wired connection mode or wireless connection mode. If the opposite end execution subject of the cloud platform server is the Internet of Things device, the device component startup state can be received based on the communication connection with the unified communication module of the Internet of Things device, and if the opposite end execution subject of the cloud platform server is a component of the Internet of Things device, the component startup state can be received based on the communication connection with each component.

[0072] In step 202, if the device component startup state is a device component startup normal state, a discrimination random number is generated and sent to the Internet of Things device.

[0073] In step 203, the digital certificate corresponding to the component to be verified and the signature value sent by the Internet of Things device are received.

[0074] The signature value is obtained by digitally signing the discrimination random number by the internal private key of the Internet of Things device.

[0075] In step 204, the digital certificate and the signature value are verified to obtain a component verification result of the Internet of Things device.

[0076] The component verification result is used to indicate whether the component of the Internet of Things device is a trusted component.

[0077] In an optional embodiment of the present embodiment, the above-mentioned verification of the digital certificate and the signature value includes: using the preset digital certificate discrimination information to discriminate the digital certificate; if the discrimination is passed, the device public key is parsed from the digital certificate; the signature value is decrypted using the device public key to obtain the to-be-verified discrimination random number; and the to-be-verified discrimination random number is verified using the discrimination random number generated by itself.

[0078] Specifically, in the present embodiment, if the component of the Internet of Things device is started normally, the cloud platform server generates a discrimination random number Nonce using a random number generator and sends it to the Internet of Things device. The random number has good randomness and high security.

[0079] In the present embodiment, the cloud platform server receives the signature value and the digital certificate from the Internet of Things device. First, the legality of the digital certificate is verified using the discrimination information of the digital certificate, then the device public key is parsed from the digital certificate, the signature value SigKey[Nonce] is decrypted using the device public key to obtain the to-be-verified discrimination random number, and finally the to-be-verified discrimination random number is verified using the discrimination random number generated by the cloud platform server at the beginning, so that the verification of the device component can be realized.

[0080] In an optional implementation of the embodiment, the generating and sending the authentication random number to the IoT device includes: calling a corresponding random number seed according to the component verification requirement information; calling an internal random number generator to generate the authentication random number according to the random number seed; and sending the authentication random number to the IoT device.

[0081] Specifically, different random number seeds can generate random numbers with different security performance, and the embodiment flexibly adapts to the component verification requirement to call a corresponding random number seed in an actual application scenario, so that the generated random number can better meet the actual application requirement and ensure the verification security.

[0082] In order to better illustrate the embodiments of the application, an embodiment of the application further provides a detailed component verification method of an IoT device, which is applied to a component verification system including an IoT device component and a cloud platform server, as shown in Figure 3 Fig. 3 is a signaling interaction schematic diagram of a component verification method of an IoT device provided by an embodiment of the application, which specifically includes the following processes:

[0083] Step 301: reading the device component information of the OTP storage area after the power-on completion of the IoT device component, performing self-checking based on the device component information, and obtaining a component self-checking result;

[0084] Step 302: sending a corresponding device component startup state to the cloud platform server according to the component self-checking result;

[0085] Step 303: generating an authentication random number by the cloud platform server in response to the normal startup state of the device component;

[0086] Step 304: sending the authentication random number to the IoT device component by the cloud platform server;

[0087] Step 305: calling an internal private key to perform digital signature on the authentication random number by the IoT device component, and obtaining a signature value;

[0088] Step 306: sending the signature value and the built-in digital certificate to the cloud platform server by the IoT device component;

[0089] Step 307: authenticating the digital certificate using the preset digital certificate authentication information by the cloud platform server;

[0090] Step 308: parsing the device public key from the authenticated digital certificate by the cloud platform server, and decrypting the signature value using the device public key, and then verifying the decrypted authentication random number to be verified;

[0091] Step 309: sending a component verification result to the IoT device component by the cloud platform server;

[0092] At step 310, the IoT device component enters a power-off state when the component verification result indicates that the component is untrusted.

[0093] It should be understood that the size of the serial number of each step in the embodiment does not mean the order of the execution of the steps, and the execution order of each step should be determined according to its function and inherent logic, and should not constitute the only limitation on the implementation process of the embodiment of the application.

[0094] Based on the technical solutions of the above embodiments of the application, the device component information of the OTP storage area is read after the power-on of the device component is completed, self-checking is performed based on the device component information, and a component self-checking result is obtained. The corresponding device component startup state is sent to the verification platform according to the component self-checking result, wherein the device component startup state includes a device component startup normal state and a device component startup failure state. The authentication random number generated by the verification platform in response to the device component startup normal state is received, the internal private key is called to digitally sign the authentication random number, and a signature value is obtained. The signature value and the built-in digital certificate are sent to the verification platform to verify whether the component of the IoT device is a trusted component. The application provides a component trusted verification mechanism for an IoT device, improves the component trustworthiness of the IoT device, and additionally, the component self-checking by the IoT device and the second re-verification by the verification platform improve the security strength of the device component verification, and thus, the product safety and stability of the IoT device are improved.

[0095] Figure 4 An electronic device is provided for an embodiment of the application. The electronic device can be used to implement the component verification method of the IoT device in the foregoing embodiments, and mainly includes a memory 401 and a processor 402. The memory 401 stores a computer program 403 that can run on the processor 402. The memory 401 and the processor 402 are communicatively connected. When the processor 402 executes the computer program 403, the component verification method of the IoT device in the foregoing embodiments is implemented. The number of processors 402 can be one or more.

[0096] The memory 401 can be a high-speed random access memory (RAM, Random Access Memory) or a non-volatile memory such as a disk memory. The memory 401 is used to store executable program codes, and the processor 402 is coupled to the memory 401.

[0097] Further, the embodiment of the application further provides a computer readable storage medium, which can be arranged in the electronic device in the above embodiments. The computer readable storage medium can be the memory in the above embodiments. Figure 4 The computer readable storage medium can be the memory in the above embodiments.

[0098] The computer readable storage medium stores a computer program, and the computer program is executed by the processor to implement the component verification method of the Internet of Things device in the foregoing embodiment. Further, the computer readable storage medium can also be a U disk, a mobile hard disk, a read-only memory (ROM), a RAM, a magnetic disk or an optical disk, and various media that can store program codes.

[0099] In several embodiments provided in the present application, it should be understood that the disclosed apparatus and method can be implemented in other manners. For example, the described apparatus embodiments are merely schematic. For example, the division of the modules is merely a logical function division. There can be another division manner for the actual implementation. For example, a plurality of modules or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the displayed or discussed mutual couplings or direct couplings or communication connections can be indirect couplings or communication connections through some interfaces, devices or modules, and can be electrical, mechanical or in other forms.

[0100] The modules illustrated as separated components can or can not be physically separated, and the components illustrated as modules can or can not be physical modules, i.e., can be located in one place, or can be distributed to a plurality of network modules. Some or all of the modules can be selected according to actual needs to achieve the purpose of the embodiment.

[0101] In addition, each functional module in each embodiment of the present application can be integrated into one processing module, or each module can be physically present alone, or two or more modules can be integrated into one module. The integrated module can be realized in the form of hardware or in the form of a software functional module.

[0102] If the integrated module is realized in the form of a software functional module and sold or used as an independent product, it can be stored in a computer readable storage medium. Based on this understanding, the technical solutions of the present application essentially or the part that contributes to the prior art or the whole or part of the technical solutions can be embodied in the form of a software product. The computer software product is stored in a readable storage medium, includes several instructions to make a computer device (which can be a personal computer, a server, or a network device, etc.) execute all or part of the steps of the embodiments of the method of the present application. The aforementioned readable storage medium includes a U disk, a mobile hard disk, a ROM, a RAM, a magnetic disk or an optical disk, and various media that can store program codes.

[0103] It should be noted that, for the foregoing method embodiments, the purposes of brief description, they are all described as a series of action combinations, but those skilled in the art should know that the present application is not limited to the order of the actions described, because according to the present application, certain steps can be performed in other orders or at the same time. Secondly, those skilled in the art should know that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily essential to the present application.

[0104] In the above embodiments, the description of each embodiment has its own focus, and the parts not described in detail in a certain embodiment can be referred to the related description of other embodiments.

[0105] The above is the description of the component verification method, device and readable storage medium of the Internet of Things device provided by the present application. For those skilled in the art, according to the idea of the embodiments of the present application, there will be changes in specific implementation and application range. In summary, the content of the specification should not be understood as a limitation of the present application.

Claims

1. A component verification method for an Internet of Things (IoT) device, applied to an IoT device, characterized in that, The method comprises the following steps: reading device component information in the OTP storage area after the power-on of the device component, performing self-checking based on the device component information, and obtaining a component self-checking result; sending a corresponding device component startup state to a verification platform according to the component self-checking result; wherein the device component startup state comprises a device component startup normal state and a device component startup failure state; receiving a discrimination random number generated by the verification platform in response to the device component startup normal state, calling an internal private key to digitally sign the discrimination random number, and obtaining a signature value; sending the signature value and a built-in digital certificate to the verification platform, so that the verification platform verifies whether the component of the Internet of Things device is a trusted component.

2. The component verification method according to claim 1, characterized by, The method comprises the following steps: obtaining a component to be verified of the Internet of Things device; reading device component information corresponding to the component to be verified in the OTP storage area after the power-on of the device component; performing self-checking based on the device component information, and obtaining a component self-checking result.

3. The component verification method according to claim 2, characterized by, The method comprises the following steps: determining a corresponding component to be verified from all device components of the Internet of Things device according to device type information; or, when a component replacement event of the Internet of Things device is detected, determining a replaced device component of the Internet of Things device as the component to be verified.

4. The component verification method according to claim 1, characterized by, Before the step of sending a corresponding device component startup state to a verification platform according to the component self-checking result, the method further comprises the following steps: obtaining component verification requirement information; wherein the component verification requirement information comprises at least one of the following: a component type required to be verified by the Internet of Things device, and a security level required by component verification; determining a corresponding type of the verification platform according to the component verification requirement information; wherein the type of the verification platform comprises a host controller and a cloud platform server.

5. The component verification method according to any one of claims 1 to 4, characterized by, After the step of sending the signature value and a built-in digital certificate to the verification platform, so that the verification platform verifies whether the component of the Internet of Things device is a trusted component, the method further comprises the following steps: receiving a component verification result sent by the verification platform; if the component verification result indicates that the component of the Internet of Things device comprises an untrusted component, controlling the untrusted component to enter a power-off state. 6.A method for verifying components of an Internet of Things device, applied to a cloud platform server, comprising: The method comprises the following steps: receiving a device component startup state sent by an Internet of Things device after the Internet of Things device performs self-checking based on device component information; if the device component startup state is a device component startup normal state, generating a discrimination random number and sending the discrimination random number to the Internet of Things device; receiving a digital certificate corresponding to a component to be verified and a signature value sent by the Internet of Things device; wherein the signature value is obtained by calling an internal private key of the Internet of Things device to digitally sign the discrimination random number; verifying the digital certificate and the signature value, and obtaining a component verification result of the Internet of Things device; wherein the component verification result is used to indicate whether the component of the Internet of Things device is a trusted component.

7. The component verification method according to claim 6, wherein The verifying the digital certificate and the signature value comprises: identifying the digital certificate using preset digital certificate identification information; if the identification is passed, obtaining a device public key from the digital certificate; decrypting the signature value using the device public key to obtain a to-be-verified identification random number; verifying the to-be-verified identification random number using the identification random number generated by the device.

8. The component verification method according to claim 6, wherein The generating the identification random number and sending the identification random number to the Internet of Things device comprises: calling a corresponding random number seed according to component verification requirement information; calling an internal random number generator to generate an identification random number according to the random number seed; sending the identification random number to the Internet of Things device.

9. An electronic device, comprising: The computer program is executed by the processor to implement the steps in the component verification method of the Internet of Things device in any one of claims 1 to 5 or 6 to 8. The computer program is executed by the processor to implement the steps in the component verification method of the Internet of Things device in any one of claims 1 to 5 or 6 to 8. ​ 10. A computer-readable storage medium having stored thereon a computer program, characterized in that, ​

Images