Internet of Things equipment management method, device, equipment, medium and product

Abstract

The embodiment of the invention discloses an Internet of Things equipment management method and device, equipment, a medium and a product, and the method comprises the steps: obtaining an access request of Internet of Things equipment, and building communication connection with the Internet of Things equipment according to the access request; acquiring device data sent by the Internet of Things device, performing protocol conversion on the device data according to a preset protocol conversion rule, and performing data processing on the device data after protocol conversion to obtain a data processing result corresponding to the device data; and determining a target control instruction of the Internet of Things equipment according to a data processing result corresponding to the equipment data. According to the technical scheme provided by the embodiment of the invention, the problem of unsafe operation of the current Internet of Things operating system is solved, the access security and communication security of the Internet of Things equipment can be improved through access security control and communication security control, and safe operation of the Internet of Things equipment is ensured.

Description

Technical Field

[0001] Embodiments of the present invention relate to the field of computer technology, and in particular, to an Internet of Things device management method, apparatus, equipment, medium and product. Background Art

[0002] Currently, the communication between the IoT operating system and IoT devices, as well as the IoT operating system's control over the operation of IoT devices are threatened. For example, there are illegal access to and visits to devices, and communication data is attacked and tampered with, which hinders the safe operation of the IoT operating system. Summary of the invention

[0003] The embodiments of the present invention provide an Internet of Things device management method, apparatus, equipment, medium and product, which can improve the access security and communication security of Internet of Things devices through access security control and communication security control, and ensure the safe operation of Internet of Things devices.

[0004] In a first aspect, an embodiment of the present invention provides an Internet of Things device management method, the method comprising:

[0005] Obtaining an access request from an IoT device, and establishing a communication connection with the IoT device according to the access request;

[0006] Acquire device data sent by the IoT device, perform protocol conversion on the device data according to a preset protocol conversion rule, perform data processing on the device data after the protocol conversion, and obtain a data processing result corresponding to the device data;

[0007] Determine the target control instruction of the Internet of Things device according to the data processing result corresponding to the device data.

[0008] In a second aspect, an embodiment of the present invention provides an IoT device management device, the device comprising:

[0009] A communication connection establishment module, used to obtain an access request from an IoT device and establish a communication connection with the IoT device according to the access request;

[0010] The protocol conversion module is used to obtain the device data sent by the IoT device, perform protocol conversion on the device data according to the preset protocol conversion rules, perform data processing on the device data after the protocol conversion, and obtain the data processing result corresponding to the device data;

[0011] The target control instruction determination module is used to determine the target control instruction of the Internet of Things device according to the data processing result corresponding to the device data.

[0012] In a third aspect, an embodiment of the present invention further provides a computer device, the computer device comprising:

[0013] one or more processors;

[0014] A memory for storing one or more programs;

[0015] When the above one or more programs are executed by one or more processors, the above one or more processors implement the Internet of Things device management method provided by any embodiment of the present invention.

[0016] In a fourth aspect, an embodiment of the present invention further provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the Internet of Things device management method provided by any embodiment of the present invention.

[0017] In a fifth aspect, an embodiment of the present invention further provides a computer program product, including a computer program, which, when executed by a processor, implements the Internet of Things device management method provided by any embodiment of the present invention.

[0018] The embodiments of the above invention have the following advantages or beneficial effects:

[0019] The embodiment of the present invention obtains the access request of the IoT device and establishes a communication connection with the IoT device according to the access request; obtains the device data sent by the IoT device, performs protocol conversion on the device data according to a preset protocol conversion rule, performs data processing on the device data after the protocol conversion, and obtains the data processing result corresponding to the device data; and determines the target control instruction of the IoT device according to the data processing result corresponding to the device data. The technical solution of the embodiment of the present invention solves the problem of the current unsafe operation of the IoT operating system, and can improve the access security and communication security of the IoT device through access security control and communication security control, thereby ensuring the safe operation of the IoT device. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] Figure 1 It is a flow chart of an Internet of Things device management method provided by an embodiment of the present invention;

[0021] Figure 2 It is a flow chart of an Internet of Things device management method provided by an embodiment of the present invention;

[0022] Figure 3 It is a flow chart of an Internet of Things device management method provided by an embodiment of the present invention;

[0023] Figure 4 It is a structural diagram of an Internet of Things device management device provided by an embodiment of the present invention;

[0024] Figure 5 It is a structural schematic diagram of a computer device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0025] The present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments. It is to be understood that the specific embodiments described herein are only used to explain the present invention, rather than to limit the present invention. It should also be noted that, for ease of description, only parts related to the present invention, rather than all structures, are shown in the accompanying drawings.

[0026] Figure 1 This is a flowchart of an IoT device management method provided by an embodiment of the present invention. This embodiment is applicable to the scenario of IoT device management. The method can be executed by an IoT device management device, which can be implemented by software and / or hardware and integrated into a computer device with application development function.

[0027] like Figure 1 As shown, the IoT device management method of this embodiment includes the following steps:

[0028] S110: Obtain an access request from an IoT device, and establish a communication connection with the IoT device according to the access request.

[0029] The IoT operating system obtains the access request of the IoT device and establishes a communication connection with the IoT device through the communication protocol of the corresponding device network interface according to the access request. The IoT device may include sensor devices and intelligent terminal devices.

[0030] Predetermine the security communication fusion strategies for different types of network interfaces, such as USB, Bluetooth, Wi-Fi, and 5G, and establish a communication connection with the IoT device based on the security communication fusion strategy corresponding to the network interface type of the IoT device in the access request.

[0031] S120: Acquire device data sent by the IoT device, perform protocol conversion on the device data according to a preset protocol conversion rule, perform data processing on the device data after the protocol conversion, and obtain a data processing result corresponding to the device data.

[0032] Device data includes device collection data and device status data. Device collection data includes sensor collection data, and device status data includes device hardware configuration information, power status, and alarm information. Data processing is performed on the device data after protocol conversion, which may include decryption and filtering of the data.

[0033] Protocol conversion can ensure the security of communication between the IoT operating system and IoT devices and prevent intrusion during the communication process.

[0034] S130. Determine a target control instruction for the IoT device according to a data processing result corresponding to the device data.

[0035] For example, based on the alarm information in the data processing results, the target exception handling control instructions of the IoT device are determined.

[0036] The technical solution of this embodiment obtains the access request of the IoT device and establishes a communication connection with the IoT device according to the access request; obtains the device data sent by the IoT device, performs protocol conversion on the device data according to the preset protocol conversion rules, performs data processing on the device data after the protocol conversion, and obtains the data processing result corresponding to the device data; determines the target control instruction of the IoT device according to the data processing result corresponding to the device data. The technical solution of the embodiment of the present invention solves the problem of insecure operation of the current IoT operating system, and can improve the access security and communication security of IoT devices through access security control and communication security control, thereby ensuring the safe operation of IoT devices.

[0037] Figure 2 This is a flowchart of an IoT device management method provided by an embodiment of the present invention. This embodiment and the IoT device management method in the above embodiment belong to the same inventive concept, and further describes the process of establishing a communication connection. The method can be executed by an IoT device management device, which can be implemented by software and / or hardware and integrated into a computer device with application development function.

[0038] like Figure 2 As shown, the IoT device management method of this embodiment includes the following steps:

[0039] S210: Obtain an access request from the IoT device, and determine identity information of the IoT device according to the access request.

[0040] For example, identity authentication can be performed based on the PKI (Public Key Infrastructure) or OAuth 2.0 (Open Authorization 2.0) standards. The identity information of the IoT device is determined based on the access request. Under the PKI standard, the identity information can be a digital certificate and device signature information, etc. Under the OAuth2.0 standard, the identity information can be an authorization code and an access token, etc.

[0041] S220: verify the identity information of the IoT device, and if the IoT device passes the identity authentication, assign access rights to the IoT device and establish a communication connection with the IoT device.

[0042] The identity information is compared with the pre-set trust list information. If the comparison passes, access rights are assigned to the IoT device and a communication connection with the IoT device is established.

[0043] S230: Acquire device data sent by the IoT device, perform protocol conversion on the device data according to a preset protocol conversion rule, perform data processing on the device data after the protocol conversion, and obtain a data processing result corresponding to the device data.

[0044] The preset protocol conversion rules are used to convert at least one communication protocol to a preset IoT security protocol to ensure safe and compatible access of various devices.

[0045] In this embodiment, encryption algorithms such as AES (Advanced Encryption Standard) and RSA (Rivest-Shamir-Adleman), as well as secure communication protocols such as (Transport Layer Security 1.3) can also be used to ensure the confidentiality and integrity of the device data receiving process of the IoT device.

[0046] In an optional implementation, startup information sent by the IoT device is obtained, and an integrity check is performed on the startup information. If the startup information passes the integrity check, it is determined that the startup state of the IoT device is normal startup.

[0047] When the IoT device is started and connected to the IoT operating system, it will send startup information to the IoT operating system. The startup information may include hardware configuration, device status, startup mode, network connection information, etc., to help the operating system understand the startup status of the device. The operating system performs an integrity check on the startup information. If the startup information passes the integrity check, it determines that the startup status of the IoT device is normal.

[0048] In an optional implementation, the startup information includes startup firmware information, and the integrity check of the startup information may be performed by comparing the startup firmware information with pre-stored reference firmware information to obtain an integrity verification result of the startup firmware information of the IoT device.

[0049] The startup firmware information may be the hash value of the firmware started this time, and the pre-stored reference firmware information may be the hash value of the pre-stored reference firmware, which is the correct version of the firmware. The hash value of the firmware started this time is compared with the hash value of the pre-stored reference firmware to obtain the integrity verification result of the startup firmware information of the IoT device, and the startup status of the IoT device is determined based on the integrity verification result to prevent the startup process from being tampered with.

[0050] In an optional implementation, after establishing a communication connection with the IoT device, the kernel access rights of the IoT device are determined, and the access level of the IoT device's process to kernel resources is determined based on the kernel access rights; and kernel access control is performed on the IoT device based on the access level.

[0051] Different types of IoT devices have different kernel access permission setting mechanisms due to their design purposes and application fields. In this embodiment, the kernel access permission of the IoT device can be determined according to the device type of the IoT device and the mapping relationship between the preset device type and the kernel access permission.

[0052] This embodiment can further ensure the security of the IoT operating system through kernel integrity protection, kernel vulnerability mitigation, memory isolation technology, stack overflow protection mechanism, dynamic memory allocation security policy, inter-process communication security mechanism, process permission management, file encryption storage, network protocol stack reinforcement, network traffic monitoring and analysis, security isolation and sandbox, etc. Security isolation and sandbox can be to use virtualization and container technology to isolate access services of different security levels and reduce the spread of potential security risks.

[0053] This embodiment can use hardware trusted root and secure boot technology to build a complete trust chain from BIOS (Basic Input / Output System) to the application, implement integrity verification at all stages of the system, prevent the boot process from being tampered with, and reduce interference during the verification boot process.

[0054] S240: Determine a target control instruction for the IoT device according to a data processing result corresponding to the device data.

[0055] The technical solution of this embodiment obtains the access request of the IoT device, determines the identity information of the IoT device according to the access request; verifies the identity information of the IoT device, and when the IoT device passes the identity authentication, allocates access rights to the IoT device and establishes a communication connection with the IoT device; obtains the device data sent by the IoT device, performs protocol conversion on the device data according to preset protocol conversion rules, performs data processing on the device data after protocol conversion, and obtains the data processing result corresponding to the device data; determines the target control instruction of the IoT device according to the data processing result corresponding to the device data. The technical solution of the embodiment of the present invention solves the problem of unsafe operation of the current IoT operating system, can improve the access security and communication security of IoT devices through access security control and communication security control, avoids illegal device access through identity information verification, and ensures the safe operation of IoT devices.

[0056] Figure 3This is a flowchart of an IoT device management method provided by an embodiment of the present invention. This embodiment and the IoT device management method in the above embodiment belong to the same inventive concept, and further describes the process of determining whether to perform protocol conversion. The method can be executed by an IoT device management device, which can be implemented by software and / or hardware and integrated into a computer device with application development function.

[0057] like Figure 3 As shown, the IoT device management method of this embodiment includes the following steps:

[0058] S310: Obtain an access request from an IoT device, and establish a communication connection with the IoT device according to the access request.

[0059] S320: Obtain device data sent by the IoT device, and determine the security level corresponding to the device data based on a mapping relationship between a preset security level and the device data.

[0060] The mapping relationship between the preset security level and the device data is determined in advance according to the importance of the data. For example, the security level can be divided into a high security level, a medium security level, and a low security level. The higher the security level, the higher the importance of the data.

[0061] S330: Determine whether to perform protocol conversion on device data according to the security level.

[0062] Dynamically adjust security policies according to security levels to achieve refined security control. For example, based on network stability, when the network stability is less than the preset stability threshold, only the protocol conversion is performed on the device data of the high security level; when the network stability is greater than the preset stability threshold, the protocol conversion is performed on the device data of all levels.

[0063] S340: Perform protocol conversion on the device data according to a preset protocol conversion rule, perform data processing on the device data after the protocol conversion, and obtain a data processing result corresponding to the device data.

[0064] S350: Determine a target control instruction for the IoT device according to a data processing result corresponding to the device data.

[0065] The technical solution of this embodiment obtains the access request of the IoT device and establishes a communication connection with the IoT device according to the access request; obtains the device data sent by the IoT device, and determines the security level corresponding to the device data according to the mapping relationship between the preset security level and the device data; determines whether to perform protocol conversion on the device data according to the security level; obtains the device data sent by the IoT device, performs protocol conversion on the device data according to the preset protocol conversion rules, performs data processing on the device data after the protocol conversion, and obtains the data processing result corresponding to the device data; determines the target control instruction of the IoT device according to the data processing result corresponding to the device data. The technical solution of the embodiment of the present invention solves the problem of the current insecure operation of the IoT operating system, and can improve the access security and communication security of IoT devices through access security control and communication security control, and determines whether to perform protocol conversion according to the security level, thereby improving the flexibility of protocol conversion, improving communication efficiency, and ensuring the safe operation of IoT devices.

[0066] Figure 4 This is a schematic diagram of the structure of an IoT device management device provided by an embodiment of the present invention. This embodiment is applicable to the scenario of IoT device management. The IoT device management device can be implemented by software and / or hardware and integrated into a computer terminal device with application development function.

[0067] like Figure 4 As shown, the IoT device management apparatus includes: a communication connection establishing module 410 , a protocol conversion module 420 and a target control instruction determining module 430 .

[0068] Among them, the communication connection establishment module 410 is used to obtain the access request of the Internet of Things device and establish a communication connection with the Internet of Things device according to the access request; the protocol conversion module 420 is used to obtain the device data sent by the Internet of Things device, perform protocol conversion on the device data according to the preset protocol conversion rules, and perform data processing on the device data after the protocol conversion to obtain the data processing result corresponding to the device data; the target control instruction determination module 430 is used to determine the target control instruction of the Internet of Things device according to the data processing result corresponding to the device data.

[0069] The technical solution of this embodiment obtains the access request of the IoT device and establishes a communication connection with the IoT device according to the access request; obtains the device data sent by the IoT device, performs protocol conversion on the device data according to the preset protocol conversion rules, performs data processing on the device data after the protocol conversion, and obtains the data processing result corresponding to the device data; determines the target control instruction of the IoT device according to the data processing result corresponding to the device data. The technical solution of the embodiment of the present invention solves the problem of insecure operation of the current IoT operating system, and can improve the access security and communication security of IoT devices through access security control and communication security control, thereby ensuring the safe operation of IoT devices.

[0070] In an optional implementation, the communication connection establishing module 410 is specifically used to:

[0071] Determine the identity information of the IoT device based on the access request; verify the identity information of the IoT device, and if the IoT device passes the identity authentication, assign access rights to the IoT device and establish a communication connection with the IoT device.

[0072] In an optional embodiment, the device further comprises:

[0073] The conversion determination module is used to determine the security level corresponding to the device data according to the mapping relationship between the preset security level and the device data; and determine whether to perform protocol conversion on the device data according to the security level.

[0074] In an optional embodiment, the device further comprises:

[0075] The startup information verification module is used to obtain the startup information sent by the IoT device and perform integrity verification on the startup information; when the startup information passes the integrity verification, it is determined that the startup state of the IoT device is normal startup.

[0076] In an optional implementation, the startup information includes startup firmware information, and the startup information verification module is specifically used to:

[0077] The startup firmware information is compared with the pre-stored reference firmware information to obtain the integrity verification result of the startup firmware information of the IoT device.

[0078] In an optional embodiment, the device further comprises:

[0079] The kernel control module is used to determine the kernel access rights of the IoT device after establishing a communication connection with the IoT device, and determine the access level of the IoT device's process to kernel resources based on the kernel access rights; and perform kernel access control on the IoT device based on the access level.

[0080] The Internet of Things device management apparatus provided in the embodiment of the present invention can execute the Internet of Things device management method provided in any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of the execution method.

[0081] Figure 5 A schematic diagram of the structure of a computer device provided in an embodiment of the present invention. Figure 5 A block diagram of an exemplary computer device 12 suitable for use in implementing embodiments of the present invention is shown. Figure 5 The computer device 12 shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present invention. The computer device 12 can be any terminal device with computing capabilities, such as an intelligent controller and server, a mobile phone and other terminal devices.

[0082] like Figure 5 As shown, the computer device 12 is in the form of a general-purpose computing device. The components of the computer device 12 may include, but are not limited to: one or more processors or processing units 16, a system memory 28, and a bus 18 that connects various system components (including the system memory 28 and the processing unit 16).

[0083] Bus 18 represents one or more of several types of bus structures, including a memory bus or memory controller, a peripheral bus, an accelerated graphics port, a processor or a local bus using any of a variety of bus architectures. By way of example, these architectures include, but are not limited to, an Industry Standard Architecture (ISA) bus, a Micro Channel Architecture (MAC) bus, an Enhanced ISA bus, a Video Electronics Standards Association (VESA) local bus, and a Peripheral Component Interconnect (PCI) bus.

[0084] The computer device 12 typically includes a variety of computer system readable media. These media can be any available media that can be accessed by the computer device 12, including volatile and non-volatile media, removable and non-removable media.

[0085] The system memory 28 may include computer system readable media in the form of volatile memory, such as random access memory (RAM) 30 and / or cache memory 32. The computer device 12 may further include other removable / non-removable, volatile / non-volatile computer system storage media. By way of example only, the storage system 34 may be used to read and write non-removable, non-volatile magnetic media ( Figure 5 not shown, usually called a "hard drive"). Although Figure 5Not shown in the figure, a disk drive for reading and writing to a removable non-volatile disk (e.g., a "floppy disk"), and an optical disk drive for reading and writing to a removable non-volatile optical disk (e.g., a CD-ROM, a DVD-ROM, or other optical media) may be provided. In these cases, each drive may be connected to the bus 18 via one or more data medium interfaces. The system memory 28 may include at least one program product having a set (e.g., at least one) of program modules that are configured to perform the functions of the various embodiments of the present invention.

[0086] A program / utility 40 having a set (at least one) of program modules 42 may be stored, for example, in system memory 28, such program modules 42 including, but not limited to, an operating system, one or more application programs, other program modules, and program data, each of which or some combination may include an implementation of a network environment. Program modules 42 generally perform the functions and / or methods of the embodiments described herein.

[0087] The computer device 12 may also communicate with one or more external devices 14 (e.g., keyboards, pointing devices, displays 24, etc.), one or more devices that enable a user to interact with the computer device 12, and / or any device that enables the computer device 12 to communicate with one or more other computing devices (e.g., network cards, modems, etc.). Such communication may be performed via an input / output (I / O) interface 22. Furthermore, the computer device 12 may also communicate with one or more networks (e.g., a local area network (LAN), a wide area network (WAN), and / or a public network, such as the Internet) via a network adapter 20. As shown, the network adapter 20 communicates with the other modules of the computer device 12 via the bus 18. It should be understood that although Figure 5 Not shown, other hardware and / or software modules may be used in conjunction with computer device 12, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RFID systems, tape drives, and data backup storage systems.

[0088] The processing unit 16 executes various functional applications and data processing by running the program stored in the system memory 28, for example, implementing the IoT device management method provided in the embodiment of the present invention, the method comprising:

[0089] Obtaining an access request from an IoT device, and establishing a communication connection with the IoT device according to the access request;

[0090] Obtain device data sent by IoT devices, perform protocol conversion on the device data according to preset protocol conversion rules, perform data processing on the device data after protocol conversion, and obtain data processing results corresponding to the device data;

[0091] Determine the target control instructions of the IoT device based on the data processing results corresponding to the device data.

[0092] An embodiment of the present invention further provides a computer-readable storage medium on which a computer program is stored. When the program is executed by a processor, the method for managing an Internet of Things device provided in any embodiment of the present invention is implemented. The method includes:

[0093] Obtaining an access request from an IoT device, and establishing a communication connection with the IoT device according to the access request;

[0094] Obtain device data sent by IoT devices, perform protocol conversion on the device data according to preset protocol conversion rules, perform data processing on the device data after protocol conversion, and obtain data processing results corresponding to the device data;

[0095] Determine the target control instructions of the IoT device based on the data processing results corresponding to the device data.

[0096] The computer storage medium of the embodiment of the present invention can adopt any combination of one or more computer-readable media. The computer-readable medium can be a computer-readable signal medium or a computer-readable storage medium. The computer-readable storage medium can be, for example, but not limited to: an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples (non-exhaustive list) of computer-readable storage media include: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In this document, a computer-readable storage medium can be any tangible medium containing or storing a program, which can be used by an instruction execution system, device or device or used in combination with it.

[0097] Computer-readable signal media may include data signals propagated in baseband or as part of a carrier wave, which carry computer-readable program code. Such propagated data signals may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. Computer-readable signal media may also be any computer-readable medium other than a computer-readable storage medium, which may send, propagate, or transmit a program for use by or in conjunction with an instruction execution system, apparatus, or device.

[0098] The program code embodied on the computer readable medium may be transmitted using any appropriate medium, including but not limited to wireless, wireline, optical fiber cable, RF, etc., or any suitable combination of the foregoing.

[0099] Computer program code for performing the operation of the present invention may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, Python, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0100] An embodiment of the present invention also provides a computer program product, including a computer program, which, when executed by a processor, implements the Internet of Things device management method provided in any embodiment of the present application.

[0101] In the process of implementation, the computer program product can be written in one or more programming languages ​​or a combination thereof to perform the computer program code of the present invention, including object-oriented programming languages, such as Java, Smalltalk, Python, C++, and conventional procedural programming languages, such as "C" language or similar programming languages. The program code can be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer can be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or can be connected to an external computer (for example, using an Internet service provider to connect through the Internet).

[0102] It should be understood by those skilled in the art that the modules or steps of the present invention described above can be implemented by a general-purpose computing device, they can be concentrated on a single computing device, or distributed on a network composed of multiple computing devices, optionally, they can be implemented by a program code executable by a computer device, so that they can be stored in a storage device and executed by the computing device, or they can be made into individual integrated circuit modules, or multiple modules or steps therein can be made into a single integrated circuit module for implementation. Thus, the present invention is not limited to any specific combination of hardware and software.

[0103] Note that the above are only preferred embodiments of the present invention and the technical principles used. Those skilled in the art will understand that the present invention is not limited to the specific embodiments described herein, and that various obvious changes, readjustments and substitutions can be made by those skilled in the art without departing from the scope of protection of the present invention. Therefore, although the present invention has been described in more detail through the above embodiments, the present invention is not limited to the above embodiments, and may include more other equivalent embodiments without departing from the concept of the present invention, and the scope of the present invention is determined by the scope of the appended claims.

Claims

1. A method for managing IoT devices, characterized in that: include: Obtaining an access request from an IoT device, and establishing a communication connection with the IoT device according to the access request; Acquire device data sent by the IoT device, perform protocol conversion on the device data according to a preset protocol conversion rule, perform data processing on the device data after the protocol conversion, and obtain a data processing result corresponding to the device data; Determine the target control instruction of the Internet of Things device according to the data processing result corresponding to the device data.

2. The method according to claim 1, characterized in that: The establishing a communication connection with the IoT device according to the access request includes: Determine the identity information of the IoT device according to the access request; The identity information of the IoT device is verified, and when the IoT device passes the identity authentication, access rights are allocated to the IoT device and a communication connection with the IoT device is established.

3. The method according to claim 1, characterized in that Before performing protocol conversion on the device data according to the preset protocol conversion rule, the method further includes: Determine the security level corresponding to the device data according to the mapping relationship between the preset security level and the device data; Whether to perform protocol conversion on the device data is determined according to the security level.

4. The method according to claim 1, characterized in that: Also includes: Obtaining the startup information sent by the IoT device, and performing integrity check on the startup information; When the startup information passes the integrity check, it is determined that the startup state of the Internet of Things device is normal startup.

5. The method according to claim 4, characterized in that The startup information includes startup firmware information, and the integrity check of the startup information includes: The startup firmware information is compared with the pre-stored reference firmware information to obtain an integrity verification result of the startup firmware information of the Internet of Things device.

6. The method according to claim 1, characterized in that Also includes: After establishing a communication connection with the IoT device, determining the kernel access rights of the IoT device, and determining the access level of the process of the IoT device to the kernel resources according to the kernel access rights; Perform kernel access control on the Internet of Things device according to the access level.

7. An IoT device management device, characterized in that: include: A communication connection establishing module, used to obtain an access request from an IoT device and establish a communication connection with the IoT device according to the access request; A protocol conversion module is used to obtain device data sent by the IoT device, perform protocol conversion on the device data according to a preset protocol conversion rule, perform data processing on the device data after protocol conversion, and obtain a data processing result corresponding to the device data; The target control instruction determination module is used to determine the target control instruction of the Internet of Things device according to the data processing result corresponding to the device data.

8. A computer device, characterized in that: The computer device comprises: one or more processors; A memory for storing one or more programs; When the one or more programs are executed by the one or more processors, the one or more processors implement the Internet of Things device management method as described in any one of claims 1-6.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the method for managing an Internet of Things device as described in any one of claims 1 to 6 is implemented.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the computer program implements the method for managing an Internet of Things device as described in any one of claims 1 to 6.

Images