Authorization and authentication method, device, readable medium and product for IoT device

Abstract

The present invention provides an authorization and authentication method, device, readable medium and product for an Internet of Things device, including: in the authorization stage: an authorization server generates a unique authentication code, the authentication code includes the factory code of the Internet of Things device and the device data threshold, and then sets parameters for the device data; then the device identity information ID is obtained based on the authentication code and the device data; in the authentication stage: the authentication server disassembles, authenticates and authenticates the identity information ID, and determines whether the authentication code exists in the authorization server and whether the device data is within the set device data threshold range; if the authentication code exists and the device data is within the set device data threshold range, then the authentication result of the device is confirmed to be credible. The present invention can solve the problem that the number of Internet of Things devices in real life is large and widely distributed, resulting in complex authorization and authentication and greater difficulty in protection, and further improve the flexibility, reliability and security of authorization and authentication.

Description

Technical Field

[0001] The present invention relates to the field of information security technology for Internet of Things devices, and more specifically, to an authorization and authentication method, device, readable medium and product for Internet of Things devices. Background Art

[0002] In the symmetric encryption authentication scheme, IoT devices and servers share a key. This scheme has fast encryption and decryption speeds and is suitable for devices with limited computing power. However, it has low security. Once the key is leaked, anyone can forge an identity to access the system, so key management and protection are difficult. Typical symmetric encryption algorithms include AES.

[0003] Asymmetric encryption schemes use public and private keys for identity authentication, which is highly secure. The public key can be made public, while the private key is held by the device alone. However, asymmetric encryption requires large amounts of computation, which increases the power consumption and resource consumption of IoT devices. Common asymmetric encryption algorithms include RSA and ECC. In addition, asymmetric encryption schemes usually only verify the matching of key pairs, and lack dynamic verification of device status and operating environment.

[0004] Both the hardware root of trust solution and the blockchain authentication solution can provide high security. The hardware root of trust solution uses a specific hardware module for identity authentication, and the key is stored in the hardware, which is difficult to be tampered with or stolen, but the hardware cost is high and it is difficult to popularize in small or low-cost devices. The blockchain authentication solution ensures the reliability and security of data by storing the identity and authorization information of the device on the blockchain, but the consensus process is time-consuming, the storage and bandwidth overhead is large, it is difficult to meet the real-time requirements, and the operation and maintenance cost is high, and it is difficult to run for a long time on resource-constrained devices. Summary of the invention

[0005] The present invention provides an authorization and authentication method, device, readable medium and product for an Internet of Things device, aiming to solve the problem that the number of devices in real life is huge and they are widely distributed, resulting in complex authorization and authentication and greater difficulty in protection, and to improve the flexibility, reliability and security of identity authentication for Internet of Things devices.

[0006] To achieve the above object, the present invention provides an authorization and authentication method for an Internet of Things device, comprising:

[0007] When entering the authorization phase:

[0008] During the authorization phase:

[0009] Step S101, the authorization server generates an authentication code and stores it in the authorization server, the authentication code includes the factory code of the IoT device and the device data threshold, and the authorization server sets parameters for the device data of the IoT device;

[0010] Step S102, based on the authentication code and device data, obtain the device identity information ID through a custom encryption method;

[0011] During the authentication phase:

[0012] Step S201, the IoT device sends an authentication request and the device's identity information ID to an authentication server;

[0013] Step S202: The authentication server receives the authentication request sent by the IoT device, and disassembles, authenticates and authorizes the identity information ID according to a custom decryption method, and determines whether the authentication code obtained by disassembly exists in the authorization server, and whether the device data obtained by disassembly is within the set device data threshold range;

[0014] Step S203: If the authentication code exists in the authorization server and the device data is within the set device data threshold, the authentication result of the device is confirmed to be credible and the device is allowed to continue operating.

[0015] In one embodiment, the device data of the IoT device includes system authorization data, device status data, call data, and spatiotemporal data;

[0016] The device data threshold includes a system authorization data threshold, a device status data threshold, a call data threshold and a spatiotemporal data threshold of the IoT device.

[0017] In one embodiment, when setting parameters for device data of an IoT device, the parameters are set for the device data of the IoT device within a set device data threshold range, and the parameters are encoded and combined, and the encoded and combined device data and the authentication code are encrypted in a custom manner to generate an identity information ID.

[0018] In one embodiment, during the disassembly process, a custom decryption method for the device's identity information ID is set according to the custom encryption method, the custom encryption method matches the custom decryption method, and the identity information ID is disassembled according to the custom decryption method to obtain the authentication code, system authorization data, device status data, call data, and time and space data.

[0019] In one embodiment, the authentication includes authentication code authentication and device data authentication;

[0020] During the authentication code authentication process, the decompressed authentication code is compared with the authentication code saved by the authorization server to confirm whether the authentication code exists;

[0021] During the device data authentication process, the device data threshold of the IoT device in the authentication code is called, and the device data legality authentication is performed with the disassembled system authorization data, device status data, call data, and time and space data to determine whether the device data is within the device data threshold set by the authentication code.

[0022] In one embodiment, the authorization and authentication method for the Internet of Things device further includes an update phase. In the update phase:

[0023] The authentication code and device data of the IoT device are updated periodically, and the update records are saved in the authorization server for authentication by the authentication server.

[0024] In one embodiment, during the update phase of a periodic update:

[0025] By customizing the configuration on the authorization server, the device data thresholds of the system authorization data, device status data, call data, and spatiotemporal data of the IoT device are reset to generate a new authentication code;

[0026] Update and replace the parameters set for device data based on the real device data detected by IoT devices;

[0027] The newly generated authentication code and device data are stored in the secure storage area of ​​the IoT device for use in subsequent authentication stages.

[0028] In one embodiment, during the authorization phase, the authentication phase, and the periodic update phase, the authorization record, the authentication record, and the periodic update record are saved;

[0029] When the authentication code is updated, the authentication code update record of the IoT device is stored on the blockchain.

[0030] An authorization and authentication device for an Internet of Things device, used to implement an authorization and authentication method for the Internet of Things device, comprising:

[0031] The authorization server includes an acquisition unit and an encryption unit. The acquisition unit is connected through an IoT device to generate an authentication code including a factory code of the IoT device and a device data threshold, and sets parameters for the device data of the IoT device. The encryption unit generates an identity information ID of the IoT device by using a custom encryption method using the authentication code and the device data;

[0032] An authentication server, wherein the authentication server includes a disassembly unit, an authentication unit and an authentication unit, wherein the disassembly unit disassembles the identity information ID of the received IoT device, the authentication unit authenticates the authentication code and device data obtained after the disassembly, and the authentication unit authenticates the authentication result to determine whether the IoT device can continue to operate;

[0033] When an authentication code is generated for an IoT device, the generated authentication code is stored in an authorization server for authentication and authorization of the authentication code by the authentication server.

[0034] In one embodiment, the disassembling unit sets a custom decryption method for the identity information ID according to a custom encryption method, and the custom encryption method matches the custom decryption method of the encryption unit.

[0035] In one embodiment, the authentication unit includes authentication code authentication and device data authentication;

[0036] The authentication code authentication specifically includes: the authentication unit compares the disassembled authentication code with the authentication code stored in the authorization server to confirm whether the authentication code exists;

[0037] Device data authentication specifically includes, the authentication unit calls the device data threshold of the IoT device in the authentication code, and performs device data legality authentication with the disassembled system authorization data, device status data, call data, and time-space data to determine whether the device data is within the device data threshold set by the authentication code.

[0038] In one embodiment, the authorization and authentication device of the Internet of Things device further includes an update module, which periodically updates and stores the authentication code of the device and the parameters of the device data for authentication by the authentication server.

[0039] A computer-readable medium stores a computer program, and when the computer program is executed by a processor, the authorization and authentication method of the Internet of Things device is implemented.

[0040] A computer program product comprises a computer program, wherein when the computer program is executed by a processor, the authorization and authentication method of the Internet of Things device is implemented.

[0041] The present invention has the following beneficial effects:

[0042] 1. Reliability. The present invention can generate unique authentication codes and device identity information IDs for different IoT devices, realize unique identification and trusted authentication of each IoT device, and ensure that the device can be effectively identified and trusted when interacting with the platform.

[0043] 2. Security: By specifying the legal change range of system authorization data, device status data, call data and spatiotemporal data, verify whether the current status data of the device meets the preset conditions, thereby preventing security risks caused by data anomalies or tampering. In addition, by recording each authentication code update operation through the blockchain, the authorization and authentication process is traceable and cannot be tampered with, further enhancing the transparency and security of the system and ensuring that the authentication process of each device is recorded and traceable.

[0044] 3. Flexibility: The update mechanism of the present invention enables the authentication code to be updated periodically and flexibly as needed, and each update is recorded on the blockchain to ensure the dynamic security of the device. It can also resist security threats such as replay attacks and hijacking attacks, ensuring the long-term security and stability of the system. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] Figure 1 A schematic diagram of a flow chart of an authorization and authentication method for an Internet of Things device according to an embodiment of the present invention;

[0046] Figure 2 A schematic diagram of a module of an authorization and authentication device for an Internet of Things device according to an embodiment of the present invention.

[0047] Among them, 100 is an authorization server; 110 is an acquisition unit; 120 is an encryption unit; 200 is an authentication server; 210 is a disassembly unit; 220 is a certification unit; 230 is an authentication unit; and 300 is an update module. DETAILED DESCRIPTION

[0048] In order to make the purpose, technical scheme and advantages of the implementation of this application clearer, the technical scheme in the embodiment of this application will be described in more detail below in conjunction with the drawings in the embodiment of this application. In the drawings, the same or similar reference numerals represent the same or similar elements or elements with the same or similar functions. The described embodiments are part of the embodiments of this application, not all of them. The embodiments described below with reference to the drawings are exemplary and are intended to be used to explain this application, and should not be construed as limitations on this application. Based on the embodiments in this application, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of this application.

[0049] Figure 1 The present invention is a flowchart of an authorization and authentication method for an Internet of Things device according to an embodiment of the present invention. The authorization and authentication method for an Internet of Things device includes:

[0050] During the authorization phase:

[0051] Step S101, the authorization server generates an authentication code and stores it in the authorization server, the authentication code includes the factory code of the IoT device and the device data threshold, and the authorization server sets parameters for the device data of the IoT device;

[0052] Specifically, when an IoT device leaves the factory, the IoT device manufacturer will assign a factory code to the IoT device based on the factory time + factory batch, or other factory information.

[0053] For example, if the device is manufactured at 12:12:12 on December 12, 2024, and the manufacturing batch is the 13th item in the 13th box of the 13th batch, then the manufacturer can choose to assign the factory code to it as: 202412121212131313, and the coding order is not fixed.

[0054] Next, when the IoT device is initially registered with the authorization server, the authorization server sets and edits the data threshold of the device. The device data of the IoT device includes system authorization data, device status data, call data, spatiotemporal data, etc.; the device data threshold includes the system authorization data threshold, device status data threshold, call data threshold, spatiotemporal data threshold, etc. of the IoT device, wherein the authorization server includes an Internet platform, which generates authentication codes and device data parameters for the IoT device.

[0055] For example, the system authorization data, device status data, call data, and spatiotemporal data of an IoT device are as follows:

[0056] System authorization data: This device is dedicated to machine tool No. 05 in the production department of the factory. In the IoT platform, the factory is numbered 15, its production department is 1501, and the system authorization time is December 13, 2024. The system authorization data can be 1515010520241213. Other sorting methods can also be selected. The sorting method is not unique, but once the sorting method is determined, it will remain unchanged thereafter.

[0057] Equipment status data: This device is specially used to monitor the energy consumption data of machine tool processing equipment. The working voltage of the machine tool is 380V, and the voltage fluctuation is ±10%. The threshold value of the equipment status data is edited as "342 (Min) ~ 418 (Max)". The voltage fluctuation range can also be selected from other intervals. The voltage fluctuation range is not unique.

[0058] Calling data: The device collects data once every 300 seconds, and the allowable deviation range is ±10%. The call data threshold is edited to "270 (Min) ~ 330 (Max)", and the allowable deviation range can also be selected from other ranges. The allowable deviation range is not unique.

[0059] Spatiotemporal data: The device's working location is longitude 118.3487384°, latitude 29.2707676°, and the working hours are 24 hours a day. The spatiotemporal data thresholds are edited to keep the longitude and latitude fixed and the working hours fixed.

[0060] Based on the above data, the authentication code is obtained through a custom combination calculation encryption method. The custom combination calculation method can be string addition, and the encryption method can be a Hash encryption algorithm, or an English code corresponding method, or a combination of multiple encryption algorithms, etc. Exemplarily, the authentication code of the above device can be set to: Hash (202412121212131313-1515010520241213-342-418-270-330-118.3487384-29.2707676-24). After obtaining the authentication code, save the authentication code on the Internet of Things platform.

[0061] Specifically, after obtaining the authentication code, the initial parameters are set for the system authorization data, device status data, call data, spatiotemporal data, etc. of the IoT device. The parameters need to be within the data threshold requirement interval set previously, so that when the IoT device first connects to the IoT platform, the data threshold of the IoT device meets the set threshold requirement, so that it has preliminary credibility. Different authentication codes are generated for different IoT devices, and one IoT device generates a unique authentication code.

[0062] Furthermore, in actual applications after the device is connected to the platform, the parameters of the device data will be updated later, and the real data monitored by the device will be used to replace it during the update to complete the subsequent authentication in actual applications.

[0063] Exemplarily, the parameters of the device data setting are as follows:

[0064] System authorization data: 1515010520241213;

[0065] Device status data: 380, which is within the threshold range;

[0066] Call data: 300, which meets the threshold range;

[0067] Spatial-temporal data: longitude 118.3487384°, latitude 29.2707676°, working hours are 24 hours a day.

[0068] Encode and combine the parameters to facilitate the subsequent use of the encoded and combined device data and the authentication code to generate an identity information ID in a custom encryption method.

[0069] Step S102: In step S101, the authentication code (X for short) and device data are obtained, and the device identity information ID is obtained through a custom encryption method:

[0070] The custom combination calculation method can be string addition, and the order of addition is not fixed. For example, different data can be separated by "-". When the encryption method uses the English code corresponding encryption method, 0 can correspond to A, 1 to B, 2 to C..., 9 to J, etc.

[0071] As shown above, the authentication code and the character string of the device data parameter are added and combined in a certain order to obtain: X-1515010520241213-380-300-118.3487384-29.2707676-24.

[0072] The identity information ID may be: X'-BFBFABAFCACEBCBD-DIA-DAA-BBI.DEIHDIE-CJ.CHAHGHG-CE, where X' is the encrypted English code corresponding to the authentication code.

[0073] The above combination sequence is not unique, and the corresponding method of the encrypted English code is not unique.

[0074] During the authentication phase:

[0075] Step S201, the IoT device sends an authentication request and the device's identity information ID to an authentication server;

[0076] The identity information ID is obtained in step S102. In this example, the identity information ID of the IoT device is: X'-BFBFABAFCACEBCBD-DIA-DAA-BBI.DEIHDIE-CJ.CHAHGHG-CE.

[0077] Step S202: The authentication server receives the authentication request sent by the IoT device, and disassembles, authenticates and authorizes the identity information ID according to a custom decryption method, and determines whether the authentication code obtained by disassembly exists in the authorization server, and whether the device data obtained by disassembly is within the set device data threshold range;

[0078] During the disassembly process, a custom decryption method for the device's identity information ID is set according to the custom encryption method, the custom encryption method matches the custom decryption method, and the identity information ID is disassembled according to the custom decryption method to obtain the authentication code, system authorization data, device status data, call data and time and space data.

[0079] According to the above example, the custom decryption method here should be the decryption method corresponding to the English code, A corresponds to 0, B corresponds to 1, C corresponds to 2..., to J corresponds to 9 and so on.

[0080] After decryption in this step, X-1515010520241213-380-300-118.3487384-29.2707676-24 is obtained. X is the authentication code and is separated from the device data by "-".

[0081] The authentication process includes authentication code authentication and device data authentication:

[0082] During the authentication code authentication process, the disassembled authentication code is compared with the authentication code saved by the IoT platform to confirm whether the authentication code exists;

[0083] During the device data authentication process, the device data threshold of the IoT device in the authentication code is called, and the device data legality authentication is performed with the disassembled system authorization data, device status data, call data, and time and space data to determine whether the device data is within the device data threshold set by the authentication code.

[0084] When the device first determines whether the device data is within the set device data threshold, it determines the rule by the initial parameters assigned to the device data. The parameters of the device data are updated periodically. When the device data is updated, the updated parameters of the device data are used for authentication and judgment.

[0085] Step S203: If the authentication code exists in the authorization server and the device data is within the set device data threshold, the authentication result of the device is confirmed to be credible and the device is allowed to continue operating.

[0086] When entering the periodic update phase, the authentication code and device data of the IoT device are periodically updated, and the update record is saved in the authorization server for authentication by the authentication server.

[0087] The authorization and authentication method for the Internet of Things device also includes an update phase, during which:

[0088] By customizing the configuration on the IoT platform, the device data thresholds of the system authorization data, device status data, call data, and spatiotemporal data of the IoT device are reset to generate a new authentication code;

[0089] According to the real device data detected by the IoT device, the parameters set for the device data are updated and replaced. The update of the parameters of the device data is based on the actual monitoring data of the IoT device in actual applications.

[0090] The newly generated authentication code and device data are stored in the secure storage area of ​​the IoT device for use in subsequent authentication stages.

[0091] In this step, when the authentication code is in the periodic update stage, in this embodiment, if other monitoring conditions remain unchanged, the system authorization time in the system authorization data editing rule can be updated. For example, if it is stipulated that the authentication code is updated once a month, then the authentication code after the next update should be: Hash (202412121212131313-1515010520250113-342-418-270-330-118.3487384-29.2707676-24).

[0092] In the above authorization phase, authentication phase and periodic update phase, the authorization record, authentication record and periodic update record are saved;

[0093] When the authentication code is updated, the authentication code update record of the IoT device is stored on the blockchain.

[0094] Specifically, blockchain is a special distributed database that uses a series of data blocks (i.e. blocks) arranged in chronological order to record information, and uses cryptographic technology to ensure the security and non-tamperability of this information during transmission and storage.

[0095] Figure 2 The module diagram of the authorization and authentication device of an Internet of Things device according to an embodiment of the present invention is used to implement the authorization and authentication method of the Internet of Things device, including:

[0096] The authorization server 100 includes an acquisition unit 110 and an encryption unit 120. The acquisition unit 110 is connected through an IoT device to generate an authentication code including a factory code of the IoT device and a device data threshold, and sets parameters for the device data of the IoT device. The encryption unit 120 generates an identity information ID of the IoT device by using a custom encryption method using the authentication code and the device data;

[0097] The authentication server 200 includes a disassembly unit 210, an authentication unit 220 and an authentication unit 230. The disassembly unit 210 disassembles the identity information ID of the received IoT device, the authentication unit 220 authenticates the authentication code and device data obtained after the disassembly, and the authentication unit 230 authenticates the authentication result to determine whether the IoT device can continue to operate;

[0098] When an authentication code is generated for an IoT device, the generated authentication code is stored in an authorization server for the authentication server to authenticate and authorize the IoT device authentication code.

[0099] The authorization and authentication device of the Internet of Things device also includes an update module 300, which periodically updates the authentication code of the device and the parameters of the device data for use by the authentication server 200.

[0100] In one embodiment, the disassembly unit sets a custom decryption method for the identity information ID according to a custom encryption method, and the custom encryption method matches the custom decryption method. The identity information ID is disassembled according to the custom decryption method to obtain an authentication code, system authorization data, device status data, call data, and time and space data.

[0101] In one embodiment, the authentication unit includes authentication code authentication and device data authentication;

[0102] The authentication code authentication specifically includes: the authentication unit compares the disassembled authentication code with the authentication code stored in the authorization server to confirm whether the authentication code exists;

[0103] Device data authentication specifically includes, the authentication unit calls the device data threshold of the IoT device in the authentication code, and performs device data legality authentication with the disassembled system authorization data, device status data, call data, and time-space data to determine whether the device data is within the device data threshold set by the authentication code.

[0104] A computer-readable medium stores a computer program, and when the computer program is executed by a processor, the authorization and authentication method of the Internet of Things device is implemented.

[0105] A computer program product comprises a computer program, wherein when the computer program is executed by a processor, the authorization and authentication method of the Internet of Things device is implemented.

[0106] The present invention has the following beneficial effects:

[0107] 1. Reliability. The present invention can generate unique authentication codes and device identity information IDs for different IoT devices, realize unique identification and trusted authentication of each IoT device, and ensure that the device can be effectively identified and trusted when interacting with the platform.

[0108] 2. Security: By specifying the legal change range of system authorization data, device status data, call data and spatiotemporal data, verify whether the current status data of the device meets the preset conditions, thereby preventing security risks caused by data anomalies or tampering. In addition, by recording each authentication code update operation through the blockchain, the authorization and authentication process is traceable and cannot be tampered with, further enhancing the transparency and security of the system and ensuring that the authentication process of each device is recorded and traceable.

[0109] 3. Flexibility: The update mechanism of the present invention enables the authentication code to be updated periodically and flexibly as needed, and each update is recorded on the blockchain to ensure the dynamic security of the device. It can also resist security threats such as replay attacks and hijacking attacks, ensuring the long-term security and stability of the system.

[0110] In the description of the present application, it should be noted that the terms used herein are only for describing specific embodiments, and are not intended to limit the exemplary embodiments according to the present application. For ease of description, the sizes of the various parts shown in the drawings are not drawn according to the actual proportional relationship. The technology, methods and equipment known to ordinary technicians in the relevant field may not be discussed in detail, but in appropriate cases, the technology, methods and equipment should be regarded as part of the authorization specification. In all examples shown and discussed here, any specific value should be interpreted as merely exemplary, rather than as a limitation. Therefore, other examples of the exemplary embodiments may have different values. It should be noted that similar numbers and letters represent similar items in the following drawings, so once an item is defined in one drawing, it does not need to be further discussed in subsequent drawings.

[0111] It should be noted that, in the present application, the terms "comprises", "includes" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. It should also be pointed out that the scope of the methods and devices in the embodiments of the present application is not limited to performing functions in the order shown or discussed, and may also include performing functions in a substantially simultaneous manner or in reverse order according to the functions involved. For example, the described method may be performed in an order different from that described, and various steps may be added, omitted, or combined. In addition, the features described with reference to certain examples may be combined in other examples.

[0112] The above embodiments are provided for persons familiar with the art to implement or use the present application. Personnel familiar with the art can make various modifications or changes to the above embodiments without departing from the application concept of the present application. Therefore, the protection scope of the present application is not limited to the above embodiments, but should be the maximum scope of the innovative features mentioned in the claims.

Claims

1. A method for authorization and authentication of an Internet of Things device, characterized in that: include: During the authorization phase: Step S101, the authorization server generates an authentication code and stores it in the authorization server, the authentication code includes the factory code of the IoT device and the device data threshold, and the authorization server sets parameters for the device data of the IoT device; Step S102, based on the authentication code and device data, obtain the device identity information ID through a custom encryption method; During the authentication phase: Step S201, the IoT device sends an authentication request and the device's identity information ID to an authentication server; Step S202: The authentication server receives the authentication request sent by the IoT device, and disassembles, authenticates and authorizes the identity information ID according to a custom decryption method, and determines whether the authentication code obtained by disassembly exists in the authorization server, and whether the device data obtained by disassembly is within the set device data threshold range; Step S203: If the authentication code exists in the authorization server and the device data is within the set device data threshold, the authentication result of the device is confirmed to be credible and the device is allowed to continue operating.

2. The authorization and authentication method for an Internet of Things device according to claim 1, characterized in that: The device data of the IoT device includes system authorization data, device status data, call data and spatiotemporal data; The device data threshold includes a system authorization data threshold, a device status data threshold, a call data threshold and a spatiotemporal data threshold of the IoT device.

3. The authorization and authentication method for an Internet of Things device according to claim 1, characterized in that: When setting parameters for device data of an IoT device, the parameters are set for the device data of the IoT device within a set device data threshold range, and the parameters are encoded and combined, and the encoded and combined device data and the authentication code are encrypted in a custom manner to generate an identity information ID.

4. The authorization and authentication method for an Internet of Things device according to claim 2, characterized in that: During the disassembly process, a custom decryption method for the device's identity information ID is set according to the custom encryption method, the custom encryption method matches the custom decryption method, and the identity information ID is disassembled according to the custom decryption method to obtain the authentication code, system authorization data, device status data, call data and time and space data.

5. The authorization and authentication method for an Internet of Things device according to claim 4, characterized in that: Authentication includes authentication code authentication and device data authentication; During the authentication code authentication process, the decompressed authentication code is compared with the authentication code saved by the authorization server to confirm whether the authentication code exists; During the device data authentication process, the device data threshold of the IoT device in the authentication code is called, and the device data legality authentication is performed with the disassembled system authorization data, device status data, call data, and time and space data to determine whether the device data is within the device data threshold set by the authentication code.

6. The authorization and authentication method for an Internet of Things device according to claim 2, characterized in that: The authorization and authentication method for the Internet of Things device also includes an update phase. In the update phase: The authentication code and device data of the IoT device are updated periodically, and the update records are saved in the authorization server for authentication and authorization by the authentication server.

7. The authorization and authentication method for an Internet of Things device according to claim 6, characterized in that: During the update phase of a periodic update: By customizing the configuration on the authorization server, the device data thresholds of the system authorization data, device status data, call data, and spatiotemporal data of the IoT device are reset to generate a new authentication code; Update and replace the parameters set for device data based on the real device data detected by IoT devices; The newly generated authentication code and device data are stored in the secure storage area of ​​the IoT device for use in subsequent authentication stages.

8. The authorization and authentication method for an Internet of Things device according to claim 6, characterized in that: During the authorization phase, authentication phase and periodic update phase, the authorization record, authentication record and periodic update record are saved; When the authentication code is updated, the authentication code update record of the IoT device is stored on the blockchain.

9. An authorization and authentication device for an Internet of Things device, characterized in that: A method for implementing the authorization and authentication of an Internet of Things device according to any one of claims 1 to 8, comprising: The authorization server includes an acquisition unit and an encryption unit. The acquisition unit is connected through an IoT device to generate an authentication code including a factory code of the IoT device and a device data threshold, and sets parameters for the device data of the IoT device. The encryption unit generates an identity information ID of the IoT device by using a custom encryption method using the authentication code and the device data; An authentication server, wherein the authentication server includes a disassembly unit, an authentication unit and an authentication unit, wherein the disassembly unit disassembles the identity information ID of the received IoT device, the authentication unit authenticates the authentication code and device data obtained after the disassembly, and the authentication unit authenticates the authentication result to determine whether the IoT device can continue to operate; When an authentication code is generated for an IoT device, the generated authentication code is stored in an authorization server for authentication and authorization of the authentication code by the authentication server.

10. The authorization and authentication device for an Internet of Things device according to claim 9, characterized in that: The disassembling unit sets a custom decryption method for the identity information ID according to the custom encryption method, and the custom encryption method matches the custom decryption method in the encryption unit.

11. The authorization and authentication device for an Internet of Things device according to claim 9, characterized in that: The authentication unit includes authentication code authentication and device data authentication; The authentication code authentication specifically includes: the authentication unit compares the disassembled authentication code with the authentication code stored in the authorization server to confirm whether the authentication code exists; Device data authentication specifically includes, the authentication unit calls the device data threshold of the IoT device in the authentication code, and performs device data legality authentication with the disassembled system authorization data, device status data, call data, and time-space data to determine whether the device data is within the device data threshold set by the authentication code.

12. The authorization and authentication device for an Internet of Things device according to claim 9, characterized in that: The authorization and authentication device of the Internet of Things device also includes an update module, which periodically updates and stores the authentication code of the device and the parameters of the device data for authentication by the authentication server.

13. A computer readable medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the authorization and authentication method for an Internet of Things device as described in any one of claims 1 to 8 is implemented.

14. A computer program product comprising a computer program, characterized in that When the computer program is executed by a processor, the authorization and authentication method for an Internet of Things device as described in any one of claims 1 to 8 is implemented.

Images