Data transmission method and device, electronic equipment, storage medium and program product

Abstract

The invention discloses a data transmission method, electronic equipment, a storage medium and a program product, belongs to the technical field of communication, and is used for realizing the efficiency of cross-domain data transmission and identity authentication. The method comprises the following steps: when a first Internet of Things device requests to transmit data to a second Internet of Things device of the same system and identity authentication of the first Internet of Things device is passed, sending a notification message to the first Internet of Things device, so that the first Internet of Things device transmits data to the second Internet of Things device, the first Internet of Things equipment and the second Internet of Things equipment are connected with the first edge server; and under the condition that the first Internet of Things equipment requests to transmit data to third Internet of Things equipment of different systems and identity authentication of the first Internet of Things equipment is passed, establishing connection between the first Internet of Things equipment and the third Internet of Things equipment through a block chain network, so that the first Internet of Things equipment transmits data to the third Internet of Things equipment, and the third Internet of Things equipment is connected with the second edge server.

Description

Technical Field

[0001] The present application belongs to the field of communication technology, and specifically relates to a data transmission method, device, electronic device, storage medium and program product. Background Art

[0002] With the rapid increase in the number of IoT devices, a large amount of sensitive IoT data is also being generated and transmitted through the Internet. Although the IoT is increasingly being used in various fields, IoT security still faces challenges.

[0003] When large amounts of sensitive IoT data are usually transmitted over the Internet, expensive cryptographic primitives are first used, or centralized authentication methods based on blockchain are used to authenticate the data recipient to ensure the security of large amounts of sensitive data. On the one hand, this incurs high overhead in terms of IoT computing, storage, and energy consumption. On the other hand, centralized authentication methods have been proven to be unsuitable for cross-domain authentication. When a large number of IoT authentication requests are transmitted to the blockchain, in addition to the high computational cost of the blockchain caused by the consensus mechanism, additional time delays are generated, which makes it impossible for current IoT data transmission to achieve efficient cross-domain data transmission. Summary of the invention

[0004] The embodiments of the present application provide a data transmission method, device, electronic device, storage medium and program product, which can solve the problem that current Internet of Things data transmission cannot achieve efficient cross-domain data transmission.

[0005] In a first aspect, an embodiment of the present application provides a data transmission method, which includes: when a first Internet of Things device requests to transmit data to a second Internet of Things device of the same system and the identity authentication of the first Internet of Things device is passed, a notification message is sent to the first Internet of Things device, so that the first Internet of Things device transmits data to the second Internet of Things device, and the first Internet of Things device and the second Internet of Things device are connected to the same first edge server; when the first Internet of Things device requests to transmit data to a third Internet of Things device of a different system and the identity authentication of the first Internet of Things device is passed, a connection is established between the first Internet of Things device and the third Internet of Things device through a blockchain network, so that the first Internet of Things device transmits data to the third Internet of Things device, wherein the first Internet of Things device is connected to the first edge server, and the third Internet of Things device is connected to the second edge server.

[0006] In the second aspect, an embodiment of the present application provides a data transmission method, the method comprising: when receiving a notification message or connecting to a third Internet of Things device, generating an encryption key according to a central password of a first edge server, first identity identification hidden information and first identity authentication process parameters, the notification message is sent by the first edge server when the first Internet of Things device requests the data to be transmitted to a second Internet of Things device of the same system and the identity authentication of the first Internet of Things device is passed, and the first Internet of Things device and the second Internet of Things device are connected to the same first edge server; the connection between the first Internet of Things device and the third Internet of Things device is established through a blockchain network when the first Internet of Things device requests the data to be transmitted to a third Internet of Things device of a different system and the identity authentication of the third Internet of Things device is passed, wherein the first Internet of Things device is connected to the first edge server and the third Internet of Things device is connected to the second edge server; the encrypted data is transmitted to the second Internet of Things device or the third Internet of Things device, and the encrypted data is obtained by encrypting the data to be transmitted by the encryption key.

[0007] In a third aspect, an embodiment of the present application provides a data transmission device, which includes: a first transmission module, which is used to send a notification message to the first Internet of Things device when the first Internet of Things device requests to transmit data to a second Internet of Things device of the same system and the identity authentication of the first Internet of Things device is passed, so that the first Internet of Things device transmits data to the second Internet of Things device, and the first Internet of Things device and the second Internet of Things device are connected to the same first edge server; a second transmission module, which is used to establish a connection between the first Internet of Things device and the third Internet of Things device through a blockchain network when the first Internet of Things device requests to transmit data to a third Internet of Things device of a different system and the identity authentication of the first Internet of Things device is passed, so that the first Internet of Things device transmits data to the third Internet of Things device, wherein the first Internet of Things device is connected to the first edge server, and the third Internet of Things device is connected to the second edge server.

[0008] In a fourth aspect, an embodiment of the present application provides a data transmission device, which includes: a processing module, which is used to generate an encryption key according to the central password of the first edge server, the first identity identification hidden information and the first identity authentication process parameter when receiving a notification message or connecting to a third Internet of Things device, wherein the notification message is sent by the first edge server when the first Internet of Things device requests to transmit data to the second Internet of Things device of the same system and the identity authentication of the first Internet of Things device is passed, and the first Internet of Things device and the second Internet of Things device are connected to the same first edge server; the connection between the first Internet of Things device and the third Internet of Things device is established through a blockchain network when the first Internet of Things device requests to transmit data to a third Internet of Things device of a different system and the identity authentication of the third Internet of Things device is passed, wherein the first Internet of Things device is connected to the first edge server and the third Internet of Things device is connected to the second edge server; an encryption module, which is used to transmit encrypted data to the second Internet of Things device or the third Internet of Things device, and the encrypted data is obtained by encrypting the data to be transmitted by the encryption key.

[0009] In a fifth aspect, an embodiment of the present application provides an electronic device, comprising a processor, a memory, and a program or instruction stored in the memory and executable on the processor, wherein the program or instruction, when executed by the processor, implements the steps of the method described in the first aspect or implements the steps of the method described in the second aspect.

[0010] In a sixth aspect, an embodiment of the present application provides a readable storage medium, on which a program or instruction is stored. When the program or instruction is executed by a processor, the steps of the method described in the first aspect or the steps of the method described in the second aspect are implemented.

[0011] In the seventh aspect, an embodiment of the present application provides a computer program product, which includes a computer program stored on a non-transitory computer-readable storage medium, and the computer program includes program instructions. When the program instructions are executed by a computer, the computer executes the steps of the method described in the first aspect or implements the steps of the method described in the second aspect.

[0012] In an embodiment of the present application, when the first IoT device requests to transmit data to a second IoT device of the same system and the first IoT device is authenticated, a notification message is sent to the first IoT device so that the first IoT device transmits data to the second IoT device, and the first IoT device and the second IoT device are connected to the same first edge server; when the first IoT device requests to transmit data to a third IoT device of a different system and the first IoT device is authenticated, a connection is established between the first IoT device and the third IoT device through a blockchain network so that the first IoT device transmits data to the third IoT device, wherein the first IoT device is connected to the first edge server and the third IoT device is connected to the second edge server, which can reduce data transmission overhead, improve practicality, reduce time delay, and improve data transmission efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0013] Figure 1 It is a flowchart of a data transmission method provided by an embodiment of the present application; Figure 2 This is a schematic diagram of a data transmission architecture provided by an embodiment of the present application; Figure 3 is a flowchart of another data transmission method provided in an embodiment of the present application; Figure 4 It is a structural schematic diagram of a data transmission device provided in an embodiment of the present application; Figure 5 is a schematic diagram of the structure of another data transmission device provided in an embodiment of the present application; Figure 6 It is a structural schematic diagram of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0014] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0015] The terms "first", "second", etc. in the specification and claims of the present application are used to distinguish similar objects, and are not used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable under appropriate circumstances, so that the embodiments of the present application can be implemented in an order other than those illustrated or described here, and the objects distinguished by "first", "second", etc. are generally of one type, and the number of objects is not limited. For example, the first object can be one or more. In addition, "and / or" in the specification and claims represents at least one of the connected objects, and the character " / " generally indicates that the objects associated with each other are in an "or" relationship.

[0016] The data transmission method, device, electronic device, storage medium and program product provided in the embodiments of the present application are described in detail below with reference to the accompanying drawings through specific embodiments and their application scenarios.

[0017] Figure 1 A data transmission method provided by an embodiment of the present application is shown, and the method can be executed by a first edge server. In other words, the method can be executed by software or hardware installed on the first edge server, and the method includes the following steps: Step 102: When the first IoT device requests to transmit data to a second IoT device in the same system and the identity authentication of the first IoT device is passed, a notification message is sent to the first IoT device.

[0018] Specifically, when the first IoT device requests to transmit data to the second IoT device of the same system and the identity authentication of the first IoT device is passed, a notification message is sent to the first IoT device to enable the first IoT device to transmit data to the second IoT device, and the first IoT device and the second IoT device are connected to the same first edge server.

[0019] Figure 2 The overall architecture of the data transmission and authentication model for IoT devices. The core idea of ​​this application is to apply the edge authentication layer to IoT devices that communicate with the edge of the network to transmit and store sensitive data generated by IoT devices. Then, a link is established between the edge network and the blockchain architecture (that is, the authentication layer of the distributed blockchain in the figure) to ensure decentralized authentication, so that verified IoT devices and edge networks can connect and transmit data securely. Through the model proposed in this solution, secure data transmission between IoT devices belonging to the same system or secure data transmission between devices of different systems can be achieved, thereby providing secure scalability for heterogeneous IoT systems.

[0020] like Figure 2As shown, the architecture includes two authentication layers: an edge-based authentication layer and a distributed blockchain-based authentication layer.

[0021] Among them, IoT devices under different systems (such as smart city systems, smart home systems, etc.) can continuously sense and generate data and send these data to edge servers or other IoT devices. The edge server can manage all requests from IoT devices and authenticate them.

[0022] Secondly, IoT devices can be grouped according to system types, such as smart city, smart home, healthcare, and industrial transportation. In the edge-based authentication layer, each IoT system and its devices are associated with the nearest edge server, and only allow data transmission with other devices registered and authenticated by the same edge server. For example, assuming that in a smart home system, the nearest edge server to the IoT devices in the system is edge server A, then IoT device 1 registered under edge server A is only allowed to transmit data with other IoT devices registered under edge server A.

[0023] In addition, considering that in some cases, it may be necessary to enable devices belonging to different systems to communicate with each other to provide various services and share information. For example, IoT device 1 registered under edge server A wants to transmit data with IoT device 2 registered under edge server B. Therefore, this solution also establishes a blockchain-based layer to achieve secure communication between devices from other systems in different edge networks.

[0024] Step 104: When the first IoT device requests to transmit data to a third IoT device of a different system and the identity authentication of the first IoT device is passed, a connection between the first IoT device and the third IoT device is established through the blockchain network.

[0025] Specifically, when the first IoT device requests to transmit data to a third IoT device of a different system and the identity authentication of the first IoT device is passed, a connection between the first IoT device and the third IoT device can be established through the blockchain network to enable the first IoT device to transmit data to the third IoT device, wherein the first IoT device is connected to the first edge server and the third IoT device is connected to the second edge server.

[0026] In an embodiment of the present application, when the first IoT device requests to transmit data to a second IoT device of the same system and the first IoT device is authenticated, a notification message is sent to the first IoT device so that the first IoT device transmits data to the second IoT device, and the first IoT device and the second IoT device are connected to the same first edge server; when the first IoT device requests to transmit data to a third IoT device of a different system and the first IoT device is authenticated, a connection is established between the first IoT device and the third IoT device through a blockchain network so that the first IoT device transmits data to the third IoT device, wherein the first IoT device is connected to the first edge server and the third IoT device is connected to the second edge server, which can reduce data transmission overhead, improve practicality, reduce time delay, and achieve efficient cross-domain data transmission.

[0027] In one implementation, before sending the first notification message to the first IoT device, it also includes: determining the first registration information and the first data transmission password of the first IoT device based on the first identity hidden information and the first public key hidden information sent by the first IoT device; sending the first registration information and the first data transmission password to the first IoT device, so that the first IoT device is registered on the first edge server according to the first registration information and the first data transmission password.

[0028] When the first IoT device wants to transmit data, it can send a data transmission request to the nearest first edge server. The nearest first edge server here refers to the first edge server that the first IoT device has pre-registered and is closest to the first IoT device. The data transmission request includes the data recipient information, the first IoT device information of the data to be transmitted, and the identification information of the data to be transmitted.

[0029] For example, taking the first IoT device in the smart home system as an example, assuming that the first IoT device in the system needs to transmit data, these first IoT devices can send a data transmission request to the first edge server 1 (the first edge server 1 is the first edge server closest to the first IoT device in the smart home system). Before sending data transmission to the first edge server, the IoT system and the first IoT device in the IoT system need to register with the first edge server closest to them. The registration process is as follows: (1) The first IoT device determines the identity and the public key , and then randomly generate a random number a, and according to the identity , public key and the random number a, and calculate the registration parameters of the first IoT device (including the first identity hidden information and the first public key hidden information) in the following manner:

[0030]

[0031] in, First identity hidden information identifying the first IoT device; The first public key hiding information identifies the first IoT device.

[0032] (2) The first IoT device sends the calculated first identity hidden information and first public key hidden information to the first edge server closest to it.

[0033] (3) After the first edge server receives the first identity hidden information and the first public key hidden information sent by the first IoT device, it will simultaneously calculate the identity authentication credentials for the first IoT device, including the first registration information of the first IoT device issued by the first edge server to the first IoT device and the first data transmission password of the first IoT device.

[0034] The first registration information issued by the first edge server to the first IoT device can be calculated as follows:

[0035] In the above calculation formula, Indicates the first registration information issued by the first edge server to the first IoT device i; represents a preset deterministic function; Indicates the first registration parameter selected by the first edge server, and its preset range is .

[0036] Secondly, the first data transmission password of the first IoT device can be calculated as follows:

[0037] Wherein, V represents the first data transmission password of the first IoT device; A central key representing the first edge server; represents a bitwise XOR operation; c represents the second registration parameter selected by the first edge server for the first IoT device i.

[0038] (4) After calculating the first registration information and the first data transmission password of the first IoT device i, the first edge server may store the first registration information and the first data transmission password, and simultaneously send the first registration information and the first data transmission password to the first IoT device i. (5) After the first IoT device receives the first registration information and the first data transmission password returned by the first edge server, it can , public key The data transmission value of the first Internet of Things device is calculated according to the following calculation method, and the data transmission value, the first registration information, the first data transmission password and other information are stored in the storage space of the first Internet of Things device.

[0039]

[0040] in, Indicates the data transmission value of the first IoT device.

[0041] (6) The first IoT device calculates the data transmission value of the first IoT device After that, you can transfer the data value , a first data transmission password V of the first IoT device, and a first registration information issued by the first edge server to the first IoT device i , the first registration parameter selected by the first edge server , preset deterministic function Store it in the storage space, thereby realizing the registration of the first IoT device.

[0042] In one implementation, after sending the first registration information and the first data transmission password to the first Internet of Things device, the method further includes: determining second registration information based on second identity identification hidden information and second public key hidden information sent by the first Internet of Things device; and allowing the first Internet of Things device to log in to the first edge server when the second registration information is the same as the first registration information.

[0043] After the first IoT device is registered in the first edge server, if it wants to transmit data, it can first execute the following first edge server login process to log in to the first edge server, and then send a data transmission request to the first edge server: (1) The first IoT device uses the pre-stored identity information , public key , calculate the random number a and the second identity hidden information respectively according to the following calculation method , the second public key hides information , and sends a login request to the first edge server based on the calculated information:

[0044]

[0045]

[0046] (2) After receiving the login request sent by the first IoT device, the first edge server obtains the second identity hidden information from the login request , the second public key hides information , and hide the information according to the obtained second identity , the second public key hides information The second registration information of the first IoT device is calculated as follows :

[0047] (3) The first edge server calculates the second registration information With the pre-stored second registration information To compare, to judge Is it equal to If they are equal, the first IoT device is allowed to log in to the first edge server; otherwise, the first edge server rejects the login request of the first IoT device.

[0048] In one implementation, after allowing the first IoT device to log in to the first edge server, it also includes: obtaining a first identity authentication parameter and an identity identifier sent by the first IoT device; when the first timestamp sent by the first IoT device is valid, determining a second identity authentication parameter based on the identity identifier and a preset dynamic parameter; and when the first identity authentication parameter is the same as the second identity authentication parameter, performing identity authentication on the first IoT device.

[0049] If the first edge server allows the first IoT device to log in, the first edge server may send a login permission message to the first IoT device. After the first IoT device receives the login permission message, it may further calculate the identity authentication process parameters as follows:

[0050]

[0051]

[0052]

[0053] in, , , , All represent identity authentication test parameters, and P represents a preset prime number; Indicates preset dynamic parameters. No first identity authentication parameters.

[0054] The first IoT device sends a data transmission request to the first edge server, and carries in the data transmission request , , , identity identifier MID and timestamp T 1 .

[0055] The first edge server determines, according to the data transmission request of the first Internet of Things device, whether the first Internet of Things device is to transmit data to other first Internet of Things devices under other systems, or to transmit data to other first Internet of Things devices under the same system, or to only store data to the first edge server.

[0056] In the embodiment of the present application, it is assumed that the first IoT device i belongs to a device under the smart city system, and the first edge server closest to the first IoT device i is edge server 1. At this time, if the first IoT device i wants to transmit data with the second IoT device under the smart city system, it is considered that the first IoT device wants to transmit data with the second IoT device under the same system.

[0057] Alternatively, continuing with the above example, assuming that the first IoT device i under the smart city system wants to transmit data with the third IoT device j under the smart home system, at this time, it is considered that the first IoT device wants to transmit data with the third IoT device under the other system.

[0058] When it is determined that the first IoT device is transmitting data with the second IoT device under the same system, the first edge server may perform the following steps to determine whether to allow the first IoT device to transmit data: (1) Check the validity of timestamp T1; The edge server can obtain the first timestamp T1 and the current timestamp T2 sent by the first IoT device, and then determine Is it true? If so, timestamp T1 is considered valid.

[0059] (2) When the timestamp T1 is valid, the second identity authentication parameter of the first IoT device can be calculated according to the preset dynamic parameters in the following manner: :

[0060] (3) According to the calculation , determine the second identity authentication parameter The first authentication parameter carried in the transmission request Are they the same? If they are the same, the transfer is approved. Otherwise, the transfer request is rejected.

[0061] In the present application embodiment, according to the above recorded content , we can deduce that:

[0062] Therefore, the above step (2) calculates It can also be expressed as the following calculation formula:

[0063] Secondly, due to , therefore, based on the above content, x can also be expressed as follows:

[0064] Based on the above, if the identity information of the first IoT device is correct, it can be deduced that: , that is .

[0065] It can be seen that in the embodiment of the present application, the The same as the one carried in the transfer request After the first edge server agrees that the IoT device can transmit data, it further determines the identity information of the second IoT device and sends a data transmission message to the second IoT device. After the second IoT device receives the data transmission message, it can send an identity authentication request to the first edge server for identity authentication. After the identity authentication is passed, the data sent by the first IoT device is received.

[0066] In the embodiment of the present application, since the first IoT device and the second IoT device are devices under the same system and the nearest edge server they are connected to is the same, the identity authentication method is the same as the authentication method of the aforementioned IoT device and will not be repeated here.

[0067] In one implementation, after the identity authentication of the first IoT device is passed, it also includes: when the first IoT device requests to transmit the data to the first edge server for storage, receiving the data sent by the first IoT device for storage.

[0068] When it is determined that the first IoT device only stores data to the first edge server, the first edge server can send a notification message to the first IoT device agreeing to transmit the data. After receiving the notification message, the first IoT device can transmit a large amount of sensitive data perceived and generated to the first edge server for storage.

[0069] In one implementation, establishing a connection between the first IoT device and the third IoT device through a blockchain network includes: when it is determined through the blockchain network that the third IoT device and the second edge server are on the blockchain, authenticating the second edge server; and when the identity authentication of the second edge server is successful, establishing a connection between the first IoT device and the third IoT device so that the first IoT device transmits data to the third IoT device.

[0070] Specifically, when it is determined that the first IoT device is to transmit data to a third IoT device under another system, the IoT device can be authenticated in a decentralized manner through the blockchain network to determine whether the IoT device is allowed to transmit data.

[0071] When two IoT devices from different systems in different edge servers perform data transmission, the two IoT devices are first authenticated by the blockchain-based network. When the blockchain network determines that the third IoT device and the second edge server are on the blockchain, the second edge server is authenticated; when the second edge server is authenticated, a connection is established between the first IoT device and the third IoT device, so that the first IoT device transmits data to the third IoT device.

[0072] In one implementation, the authenticating the second edge server includes: receiving a third authentication parameter and a second timestamp sent by the second edge server; calculating a fourth authentication parameter according to the second timestamp; and verifying the third timestamp of the second edge server when the third authentication parameter and the fourth authentication parameter are the same, and when the third timestamp is successfully verified, authenticating the second edge server.

[0073] like Figure 2 As shown, assuming that the first IoT device to send data belongs to the smart home system and is under the first edge server 1, and wants to transmit data with the third IoT device (i.e., the receiver), wherein the third IoT device 3 belongs to the healthcare system under the second edge server 3 (here is just an example to illustrate that the first IoT device and the third IoT device are not in the same system), then the following steps can be performed: (1) The first IoT device to send data first sends an association request to the first edge server and connects to the first edge server.

[0074] (2) After the first edge server receives the connection request of the first IoT device to send data, it can perform identity authentication on the first IoT device. When the identity authentication is successful, the first edge server can send the transaction of the IoT device to the transaction chain of the blockchain based on the authentication certificate of the first IoT device, the identity identification information of the third IoT device, and the identification information of the second edge server to which the third IoT device belongs.

[0075] (3) The transaction chain of the blockchain verifies the identity information of the third IoT device and the identification information of the second edge server to which the third IoT device belongs, and determines whether these two pieces of information are on the chain. If so, proceed to the next step; otherwise, it ends with an error.

[0076] (4) The blockchain network node sends an authentication request to the second edge server to authenticate the edge server.

[0077] In an embodiment of the present application, before the blockchain node performs identity authentication on the second edge server, the second edge server needs to be registered on the blockchain first.

[0078] The second edge server sends a registration request to the blockchain network node through a secure channel to obtain a legal identity. The blockchain network node then returns To the second edge server. The second edge server receives the blockchain node's return After that, select calculate Finally, the second edge server stores HC, , and In its local database. Among them, Indicates the password of the second edge server.

[0079] Second edge server computing , then sends an authentication request message , , MID, second timestamp To the node of the blockchain network. Where Q represents the preset verification parameter.

[0080] After the blockchain node receives the authentication request from the second edge server, it uses the fourth authentication parameter As a parameter, enable authentication of the edge server that attempts to establish a secure encrypted connection with the blockchain node. Once an authentication request is received from the second edge server, check Whether it is established, the specific steps are as follows: In the present application embodiment, due to , therefore, when the following conditions are met:

[0081]

[0082] Then, it can be deduced that .

[0083] At this time, if , we can get .

[0084] if If established, the blockchain node further verifies the third timestamp of the second edge server Is it effective?

[0085] In one implementation, the authenticating the second edge server includes: when it is determined through the blockchain network that the third timestamp sent by the second edge server is valid, calculating a fifth authentication parameter according to the third timestamp and a server password of the second edge server; calculating a sixth authentication parameter according to a central password of the second edge server, the server password, and the third timestamp; when the fifth authentication parameter is the same as the sixth authentication parameter, authenticating the second edge server.

[0086] Specifically, the third timestamp of the second edge server may be , construct and verify the fifth identity authentication parameter according to the following calculation method :

[0087] If the information provided by the edge server is correct, and Therefore, we can get:

[0088]

[0089]

[0090] in, Indicates the sixth identity authentication parameter. If the blockchain node determines After it is equal to L3, the authentication is passed and the message can be sent to the second edge server, and the message will be synchronized to the first edge server. Then, the second edge server and the first edge server assist in establishing a connection between the first IoT device and the third IoT device. After the connection between the first IoT device and the third IoT device is established, the third IoT device sends a session message to the first IoT device.

[0091] After the first IoT device receives the response message from the third IoT device, the first IoT device checks the timestamp of the session message sent by the third IoT device. , then the first IoT device constructs the verification parameters , and check If they are not equal, the data transfer is aborted.

[0092]

[0093] when and , we can get:

[0094]

[0095]

[0096] In one implementation, after sending the first registration information and the first data transmission password to the first Internet of Things device, it also includes: calculating update parameters based on the public key and identity identifier sent by the first Internet of Things device, and sending the update parameters to the first Internet of Things device, so that the first Internet of Things device calculates third identity identifier hidden information and third public key hidden information based on the new public key, the identity identifier and the update parameters; and receives the third identity identifier hidden information and the third public key hidden information sent by the first Internet of Things device; and updates the first data transmission password and the first registration information based on the third identity identifier hidden information and the third public key hidden information.

[0097] Considering that IoT devices under different systems cannot be managed by the same edge server, the security risk problem is greater. Therefore, in order to avoid this problem, in the embodiment of the present application, after the first IoT device transmits data to the second IoT device or the third IoT device, the password can also be updated. The detailed method is as follows: First, the first IoT device sends the current identity ID, public key Pw and new password to the nearest first edge server ; Afterwards, the first edge server returns the updated parameters to the first IoT device , The calculation method is as follows:

[0098] The first IoT device receives Afterwards, you can Calculate the following third identity hidden information and the third public key to hide the information , and sends the calculated parameters to the first edge server:

[0099]

[0100] After receiving the above information, the first edge server updates the first data transmission password V of the first IoT device and the first registration information of the IoT device issued by the first edge server to the first IoT device in the following manner: :

[0101]

[0102] in, and They respectively represent the updated first data transmission password and the first registration information.

[0103] The embodiment of the present application applies the edge authentication layer to IoT devices that communicate with the edge of the network, authenticates the IoT devices, and transmits and stores sensitive data generated by the IoT devices. The authentication layer based on the distributed blockchain provides a decentralized authentication method, which enables verified IoT devices and edge networks to securely connect to other IoT devices under different IoT systems and securely transmit data, which can realize cross-domain authentication and data transmission.

[0104] Figure 3 Another data transmission method provided in an embodiment of the present application can be performed by a first IoT device. The method includes the following steps: Step 302: When a notification message is received or a third IoT device is connected, an encryption key is generated according to the central password of the first edge server, the first identity hidden information and the first identity authentication process parameters.

[0105] Specifically, when the first IoT device requests to transmit data to the second IoT device of the same system and the identity authentication of the first IoT device is passed, the first edge server will send a notification message to the first IoT device. The connection between the first IoT device and the third IoT device is established through the blockchain network when the first IoT device requests to transmit data to the third IoT device of a different system and the identity authentication of the third IoT device is passed. The first IoT device is connected to the first edge server, and the third IoT device is connected to the second edge server. The first IoT device will generate an encryption key according to the central password of the first edge server, the first identity identification hidden information and the first identity authentication process parameters.

[0106] Step 304: Transmit the encrypted data to the second IoT device or the third IoT device.

[0107] Specifically, after obtaining the encryption key, the data to be transmitted can be encrypted by using the encryption key, and then the obtained encrypted data can be sent to the second IoT device or the third IoT device to ensure the security of data transmission.

[0108] In one implementation, before generating an encryption key according to the central password of the first edge server, the first identity hidden information and the first identity authentication process parameter, it also includes: calculating the first identity hidden information and the first public key hidden information according to the identity and public key of the first Internet of Things and sending them to the first edge server; receiving the first registration information and the first data transmission password of the first Internet of Things device sent by the first edge server, the first registration information and the first data transmission password are generated by the first edge server according to the first identity hidden information and the first public key hidden information; registering on the first edge server through the data transmission value, the first registration information and the first data transmission password, the data transmission value being generated according to the identity and the public key.

[0109] Before sending data transmission to the first edge server, the IoT system and the first IoT device under the IoT system need to register with the first edge server closest to them. The registration process is as follows: (1) The first IoT device determines the identity and the public key , and then randomly generate a random number a, and according to the identity , public key and the random number a, and calculate the registration parameters of the first IoT device (including the first identity hidden information and the first public key hidden information) in the following manner:

[0110]

[0111] in, First identity hidden information identifying the first IoT device; The first public key hiding information identifies the first IoT device.

[0112] (2) The first IoT device sends the calculated first identity hidden information and first public key hidden information to the first edge server closest to it.

[0113] (3) After the first edge server receives the first identity hidden information and the first public key hidden information sent by the first IoT device, it will simultaneously calculate the identity authentication credentials for the first IoT device, including the first registration information of the first IoT device issued by the first edge server to the first IoT device and the first data transmission password of the first IoT device.

[0114] The first registration information issued by the first edge server to the first IoT device can be calculated as follows:

[0115] In the above calculation formula, Indicates the first registration information issued by the first edge server to the first IoT device i; represents a preset deterministic function; Indicates the first registration parameter selected by the first edge server, and its preset range is .

[0116] Secondly, the first data transmission password of the first IoT device can be calculated as follows:

[0117] Wherein, V represents the first data transmission password of the first IoT device; A central key representing the first edge server; represents a bitwise XOR operation; c represents the second registration parameter selected by the first edge server for the first IoT device i.

[0118] (4) After calculating the first registration information and the first data transmission password of the first IoT device i, the first edge server may store the first registration information and the first data transmission password, and simultaneously send the first registration information and the first data transmission password to the first IoT device i. (5) After the first IoT device receives the first registration information and the first data transmission password returned by the first edge server, it can , public key The data transmission value of the first Internet of Things device is calculated according to the following calculation method, and the data transmission value, the first registration information, the first data transmission password and other information are stored in the storage space of the first Internet of Things device.

[0119]

[0120] in, Indicates the data transmission value of the first IoT device.

[0121] (6) The first IoT device calculates the data transmission value of the first IoT device After that, you can transfer the data value , a first data transmission password V of the first IoT device, and a first registration information issued by the first edge server to the first IoT device i , the first registration parameter selected by the first edge server , preset deterministic function Store it in the storage space, thereby realizing the registration of the first IoT device.

[0122] In one implementation, after transmitting the encrypted data to the second IoT device or the third IoT device, it also includes: receiving an update parameter sent by the first edge server, where the update parameter is calculated by the first edge server based on the public key and identity sent by the first IoT device; calculating third identity hidden information and third public key hidden information based on the new public key, the identity and the update parameter; and sending the third identity hidden information and the third public key hidden information to the first edge server, so that the first edge server updates the first data transmission password and the first registration information based on the third identity hidden information and the third public key hidden information.

[0123] Specifically, considering that IoT devices under different systems cannot be managed by the same edge server, the security risk problem is greater. Therefore, in order to avoid this problem, in the embodiment of the present application, after the first IoT device transmits data to the second IoT device or the third IoT device, the password can also be updated. The detailed method is as follows: First, the first IoT device sends the current identity ID, public key Pw and new password to the nearest first edge server ; Afterwards, the first edge server returns the updated parameters to the first IoT device , The calculation method is as follows:

[0124] The first IoT device receives Afterwards, you can Calculate the following third identity hidden information and the third public key to hide the information , and sends the calculated parameters to the first edge server:

[0125]

[0126] After receiving the above information, the first edge server updates the first data transmission password V of the first IoT device and the first registration information of the IoT device issued by the first edge server to the first IoT device in the following manner: :

[0127]

[0128] in, and They respectively represent the updated first data transmission password and the first registration information.

[0129] The embodiment of the present application applies the edge authentication layer to IoT devices that communicate with the edge of the network, authenticates the IoT devices, and transmits and stores sensitive data generated by the IoT devices. The authentication layer based on the distributed blockchain provides a decentralized authentication method, which enables verified IoT devices and edge networks to securely connect to other IoT devices under different IoT systems and securely transmit data, which can realize cross-domain authentication and data transmission.

[0130] It should be noted that the data transmission method provided in the embodiment of the present application can be executed by a data transmission device or a control module in the data transmission device for executing the data transmission method. In the embodiment of the present application, the data transmission device provided in the embodiment of the present application is described by taking the data transmission method executed by the data transmission device as an example.

[0131] Figure 4 is a schematic diagram of the structure of a data transmission device according to an embodiment of the present application. Figure 4 As shown, the data transmission device 400 includes: a first transmission module 410 and a second transmission module 420 .

[0132] The first transmission module 410 is used to send a notification message to the first IoT device when the first IoT device requests to transmit data to the second IoT device of the same system and the identity authentication of the first IoT device is passed, so that the first IoT device transmits data to the second IoT device, and the first IoT device and the second IoT device are connected to the same first edge server; the second transmission module 420 is used to establish a connection between the first IoT device and the third IoT device through a blockchain network when the first IoT device requests to transmit data to a third IoT device of a different system and the identity authentication of the first IoT device is passed, so that the first IoT device transmits data to the third IoT device, wherein the first IoT device is connected to the first edge server, and the third IoT device is connected to the second edge server.

[0133] In one implementation, the first transmission module 410 is used to determine the first registration information and the first data transmission password of the first Internet of Things device based on the first identity hidden information and the first public key hidden information sent by the first Internet of Things device; and send the first registration information and the first data transmission password to the first Internet of Things device, so that the first Internet of Things device is registered on the first edge server according to the first registration information and the first data transmission password.

[0134] In one implementation, the first transmission module 410 is used to determine second registration information based on the second identity hidden information and the second public key hidden information sent by the first Internet of Things device; when the second registration information is the same as the first registration information, the first Internet of Things device is allowed to log in to the first edge server.

[0135] In one implementation, the first transmission module 410 is used to obtain a first identity authentication parameter and an identity identifier sent by the first IoT device; when the first timestamp sent by the first IoT device is valid, determine a second identity authentication parameter based on the identity identifier and a preset dynamic parameter; and when the first identity authentication parameter is the same as the second identity authentication parameter, authenticate the first IoT device.

[0136] In one implementation, the first transmission module 410 is configured to receive and store data sent by the first IoT device when the first IoT device requests to transmit the data to the first edge server for storage.

[0137] In one implementation, the second transmission module 420 is used to authenticate the second edge server when it is determined through the blockchain network that the third IoT device and the second edge server are on the blockchain; and when the identity authentication of the second edge server is successful, establish a connection between the first IoT device and the third IoT device so that the first IoT device transmits data to the third IoT device.

[0138] In one implementation, the second transmission module 420 is used to receive the third identity authentication parameter and the second timestamp sent by the second edge server; calculate the fourth identity authentication parameter according to the second timestamp; and verify the third timestamp of the second edge server when the third identity authentication parameter and the fourth identity authentication parameter are the same.

[0139] In one implementation, the second transmission module 410 is used to calculate a fifth identity authentication parameter according to the third timestamp and the server password of the second edge server when it is determined through the blockchain network that the third timestamp sent by the second edge server is valid; calculate a sixth identity authentication parameter according to the central password of the second edge server, the server password, and the third timestamp; and authenticate the second edge server when the fifth identity authentication parameter is the same as the sixth identity authentication parameter.

[0140] In one implementation, the second input module 42 is used to calculate update parameters based on the public key and identity identifier sent by the first Internet of Things device, and send the update parameters to the first Internet of Things device, so that the first Internet of Things device calculates the third identity identifier hidden information and the third public key hidden information based on the new public key, the identity identifier and the update parameters; receives the third identity identifier hidden information and the third public key hidden information sent by the first Internet of Things device; and updates the first data transmission password and the first registration information according to the third identity identifier hidden information and the third public key hidden information.

[0141] The data transmission device in the embodiment of the present application can be a device, or a component, integrated circuit, or chip in a terminal. The device can be a mobile electronic device or a non-mobile electronic device. For example, the mobile electronic device can be a mobile phone, a tablet computer, a laptop computer, a PDA, an in-vehicle electronic device, a wearable device, an ultra-mobile personal computer (UMPC), a netbook, or a personal digital assistant (PDA), etc. The non-mobile electronic device can be a server, a network attached storage (NAS), a personal computer (PC), a television (TV), a teller machine or a self-service machine, etc., which is not specifically limited in the embodiment of the present application.

[0142] The data transmission device in the embodiment of the present application may be a device having an operating system. The operating system may be an Android operating system, an iOS operating system, or other possible operating systems, which are not specifically limited in the embodiment of the present application.

[0143] The data transmission device provided in the embodiment of the present application can achieve Figure 1 to Figure 2 To avoid repetition, the various processes implemented by the method embodiment are not described here.

[0144] Figure 5 is a schematic diagram of the structure of a data transmission device according to an embodiment of the present application. Figure 5 As shown, the data transmission device 500 includes: a processing module 510 and an encryption module 520 .

[0145] The processing module 510 is used to generate an encryption key according to the central password of the first edge server, the first identity identification hidden information and the first identity authentication process parameter when receiving a notification message or connecting to a third IoT device, wherein the notification message is sent by the first edge server when the first IoT device requests to transmit data to the second IoT device of the same system and the identity authentication of the first IoT device is passed, and the first IoT device and the second IoT device are connected to the same first edge server; the connection between the first IoT device and the third IoT device is established through the blockchain network when the first IoT device requests to transmit data to the third IoT device of a different system and the identity authentication of the third IoT device is passed, wherein the first IoT device is connected to the first edge server and the third IoT device is connected to the second edge server; The encryption module 520 is used to transmit encrypted data to the second IoT device or the third IoT device, where the encrypted data is obtained by encrypting the data to be transmitted using the encryption key.

[0146] In one implementation, the generation module 510 is further used to calculate the first identity hidden information and the first public key hidden information based on the identity and public key of the first Internet of Things and send them to the first edge server; receive the first registration information and the first data transmission password of the first Internet of Things device sent by the first edge server, the first registration information and the first data transmission password are generated by the first edge server based on the first identity hidden information and the first public key hidden information; register on the first edge server using the data transmission value, the first registration information and the first data transmission password, the data transmission value being generated based on the identity and the public key.

[0147] In one implementation, the processing module 510 is also used to receive an update parameter sent by the first edge server, where the update parameter is calculated by the first edge server based on the public key and identity sent by the first IoT device; calculate third identity hidden information and third public key hidden information based on the new public key, the identity and the update parameter; and send the third identity hidden information and the third public key hidden information to the first edge server, so that the first edge server updates the first data transmission password and the first registration information based on the third identity hidden information and the third public key hidden information.

[0148] The data transmission device in the embodiment of the present application can be a device, or a component, integrated circuit, or chip in a terminal. The device can be a mobile electronic device or a non-mobile electronic device. For example, the mobile electronic device can be a mobile phone, a tablet computer, a laptop computer, a PDA, an in-vehicle electronic device, a wearable device, an ultra-mobile personal computer (UMPC), a netbook, or a personal digital assistant (PDA), etc. The non-mobile electronic device can be a server, a network attached storage (NAS), a personal computer (PC), a television (TV), a teller machine or a self-service machine, etc., which is not specifically limited in the embodiment of the present application.

[0149] The data transmission device in the embodiment of the present application may be a device having an operating system. The operating system may be an Android operating system, an iOS operating system, or other possible operating systems, which are not specifically limited in the embodiment of the present application.

[0150] The data transmission device provided in the embodiment of the present application can achieve Figure 3 To avoid repetition, the various processes implemented by the method embodiment are not described here.

[0151] like Figure 6 As shown, an embodiment of the present application further provides an electronic device 600, including a processor 601 and a memory 602, on which a program or instruction that can be run on the processor 601 is stored, and when the program or instruction is executed by the processor 601, the following is achieved: when a first Internet of Things device requests to transmit data to a second Internet of Things device of the same system and the identity authentication of the first Internet of Things device is passed, a notification message is sent to the first Internet of Things device, so that the first Internet of Things device transmits data to the second Internet of Things device, and the first Internet of Things device and the second Internet of Things device are connected to the same first edge server; when the first Internet of Things device requests to transmit data to a third Internet of Things device of a different system and the identity authentication of the first Internet of Things device is passed, a connection between the first Internet of Things device and the third Internet of Things device is established through a blockchain network, so that the first Internet of Things device transmits data to the third Internet of Things device, wherein the first Internet of Things device is connected to the first edge server, and the third Internet of Things device is connected to the second edge server.

[0152] In one implementation, before sending the first notification message to the first IoT device, first registration information and a first data transmission password of the first IoT device are determined based on first identity hidden information and first public key hidden information sent by the first IoT device; the first registration information and the first data transmission password are sent to the first IoT device, so that the first IoT device is registered on the first edge server according to the first registration information and the first data transmission password.

[0153] In one implementation, after the first registration information and the first data transmission password are sent to the first Internet of Things device, the second registration information is determined based on the second identity identification hidden information and the second public key hidden information sent by the first Internet of Things device; when the second registration information is the same as the first registration information, the first Internet of Things device is allowed to log in to the first edge server.

[0154] In one implementation, after allowing the first IoT device to log in to the first edge server, obtain the first identity authentication parameter and identity identifier sent by the first IoT device; when the first timestamp sent by the first IoT device is valid, determine the second identity authentication parameter according to the identity identifier and the preset dynamic parameter; when the first identity authentication parameter is the same as the second identity authentication parameter, authenticate the first IoT device.

[0155] In one implementation, after the identity authentication of the first IoT device is passed, when the first IoT device requests to transmit data to the first edge server for storage, the data sent by the first IoT device is received for storage.

[0156] In one implementation, when it is determined through the blockchain network that the third IoT device and the second edge server are on the blockchain, the second edge server is authenticated; when the identity authentication of the second edge server is passed, a connection between the first IoT device and the third IoT device is established so that the first IoT device transmits data to the third IoT device.

[0157] In one implementation, a third identity authentication parameter and a second timestamp sent by the second edge server are received; a fourth identity authentication parameter is calculated according to the second timestamp; and when the third identity authentication parameter and the fourth identity authentication parameter are the same, the third timestamp of the second edge server is verified.

[0158] In one implementation, when it is determined through the blockchain network that the third timestamp sent by the second edge server is valid, a fifth identity authentication parameter is calculated based on the third timestamp and the server password of the second edge server; a sixth identity authentication parameter is calculated based on the central password of the second edge server, the server password, and the third timestamp; when the fifth identity authentication parameter is the same as the sixth identity authentication parameter, the second edge server is authenticated.

[0159] In one implementation, after sending the first registration information and the first data transmission password to the first Internet of Things device, update parameters are calculated based on the public key and identity sent by the first Internet of Things device, and the update parameters are sent to the first Internet of Things device, so that the first Internet of Things device calculates third identity hidden information and third public key hidden information based on the new public key, the identity and the update parameters; receives the third identity hidden information and the third public key hidden information sent by the first Internet of Things device; and updates the first data transmission password and the first registration information based on the third identity hidden information and the third public key hidden information.

[0160] Alternatively, when the program or instruction is executed by the processor 601, it is implemented as follows: when a notification message is received or a third Internet of Things device is connected, an encryption key is generated according to the central password of the first edge server, the first identity identification hidden information and the first identity authentication process parameter, the notification message is sent by the first edge server when the first Internet of Things device requests to transmit data to the second Internet of Things device of the same system and the identity authentication of the first Internet of Things device is passed, and the first Internet of Things device and the second Internet of Things device are connected to the same first edge server; the connection between the first Internet of Things device and the third Internet of Things device is established through the blockchain network when the first Internet of Things device requests to transmit data to a third Internet of Things device of a different system and the identity authentication of the third Internet of Things device is passed, wherein the first Internet of Things device is connected to the first edge server and the third Internet of Things device is connected to the second edge server; the encrypted data is transmitted to the second Internet of Things device or the third Internet of Things device, and the encrypted data is obtained by encrypting the data to be transmitted using the encryption key.

[0161] In one implementation, before generating an encryption key according to the central password of the first edge server, the first identity hidden information and the first identity authentication process parameter, the first identity hidden information and the first public key hidden information are calculated according to the identity and public key of the first Internet of Things and sent to the first edge server to receive the first registration information and the first data transmission password of the first Internet of Things device sent by the first edge server, the first registration information and the first data transmission password are generated by the first edge server according to the first identity hidden information and the first public key hidden information; registration is performed on the first edge server using the data transmission value, the first registration information and the first data transmission password, and the data transmission value is generated according to the identity and the public key.

[0162] In one implementation, after transmitting the encrypted data to the second IoT device or the third IoT device, an update parameter sent by the first edge server is received, where the update parameter is calculated by the first edge server based on the public key and identity sent by the first IoT device; third identity hidden information and third public key hidden information are calculated based on the new public key, the identity and the update parameter; and the third identity hidden information and the third public key hidden information are sent to the first edge server, so that the first edge server updates the first data transmission password and the first registration information based on the third identity hidden information and the third public key hidden information.

[0163] The specific execution steps can refer to the various steps of the above-mentioned data transmission method embodiment, and can achieve the same technical effect. To avoid repetition, they will not be repeated here.

[0164] It should be noted that the electronic devices in the embodiments of the present application include: servers, terminals, or other devices except terminals.

[0165] The above electronic device structure does not constitute a limitation on the electronic device. The electronic device may include more or fewer components than shown in the figure, or combine certain components, or arrange the components differently. For example, the input unit may include a graphics processing unit (GPU) and a microphone, and the display unit may be configured with a display panel in the form of a liquid crystal display, an organic light-emitting diode, etc. The user input unit includes a touch panel and at least one of other input devices. The touch panel is also called a touch screen. Other input devices may include, but are not limited to, a physical keyboard, function keys (such as volume control keys, switch keys, etc.), a trackball, a mouse, and a joystick, which will not be repeated here.

[0166] The memory can be used to store software programs and various data. The memory may mainly include a first storage area for storing programs or instructions and a second storage area for storing data, wherein the first storage area may store an operating system, an application program or instructions required for at least one function (such as a sound playback function, an image playback function, etc.), etc. In addition, the memory may include a volatile memory or a non-volatile memory, or the memory may include both volatile and non-volatile memories. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. Volatile memory can be random access memory (RAM), static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDRSDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM) and direct memory bus random access memory (DRRAM).

[0167] The processor may include one or more processing units; optionally, the processor integrates an application processor and a modem processor, wherein the application processor mainly processes operations related to the operating system, user interface, and application programs, and the modem processor mainly processes wireless communication signals, such as a baseband processor. It is understandable that the modem processor may not be integrated into the processor.

[0168] An embodiment of the present application also provides a readable storage medium, on which a program or instruction is stored. When the program or instruction is executed by a processor, the various processes of the above-mentioned data transmission method embodiment are implemented and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0169] The processor is the processor in the electronic device described in the above embodiment. The readable storage medium includes a computer readable storage medium, such as ROM, RAM, magnetic disk or optical disk.

[0170] An embodiment of the present application also provides a computer program product, which includes a computer program stored on a non-transitory computer-readable storage medium, and the computer program includes program instructions. When the program instructions are executed by a computer, the computer executes the various processes of the embodiment of the above-mentioned data transmission method and can achieve the same technical effect. To avoid repetition, they are not repeated here.

[0171] It should be noted that, in this article, the terms "comprise", "include" or any other variant thereof are intended to cover non-exclusive inclusion, so that the process, method, article or device including a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise one..." do not exclude the presence of other identical elements in the process, method, article or device including the element. In addition, it should be pointed out that the scope of the methods and devices in the embodiments of the present application is not limited to performing functions in the order shown or discussed, and may also include performing functions in a substantially simultaneous manner or in reverse order according to the functions involved, for example, the described method may be performed in an order different from that described, and various steps may also be added, omitted, or combined. In addition, the features described with reference to certain examples may be combined in other examples.

[0172] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present application, or the part that contributes to the prior art, can be embodied in the form of a computer software product, which is stored in a storage medium (such as ROM / RAM, a magnetic disk, or an optical disk), and includes a number of instructions for enabling a terminal (which can be a mobile phone, a computer, a server, or a network device, etc.) to execute the methods described in each embodiment of the present application.

[0173] The embodiments of the present application are described above in conjunction with the accompanying drawings, but the present application is not limited to the above-mentioned specific implementation methods. The above-mentioned specific implementation methods are merely illustrative and not restrictive. Under the guidance of the present application, ordinary technicians in this field can also make many forms without departing from the purpose of the present application and the scope of protection of the claims, all of which are within the protection of the present application.

Claims

1. A data transmission method, characterized in that: Applied to the first edge server, including: When a first IoT device requests to transmit data to a second IoT device in the same system and the identity authentication of the first IoT device is passed, a notification message is sent to the first IoT device so that the first IoT device transmits data to the second IoT device, and the first IoT device and the second IoT device are connected to the same first edge server; When the first IoT device requests to transmit data to a third IoT device of a different system and the identity authentication of the first IoT device is passed, a connection is established between the first IoT device and the third IoT device through a blockchain network so that the first IoT device transmits data to the third IoT device, wherein the first IoT device is connected to the first edge server, and the third IoT device is connected to the second edge server.

2. The method according to claim 1, characterized in that Before sending the first notification message to the first IoT device, the method further includes: Determine first registration information and a first data transmission password of the first Internet of Things device according to the first identity identification hidden information and the first public key hidden information sent by the first Internet of Things device; The first registration information and the first data transmission password are sent to the first Internet of Things device, so that the first Internet of Things device is registered on the first edge server according to the first registration information and the first data transmission password.

3. The method according to claim 2, characterized in that After sending the first registration information and the first data transmission password to the first Internet of Things device, the method further includes: Determine second registration information according to the second identity hidden information and the second public key hidden information sent by the first IoT device; When the second registration information is the same as the first registration information, the first Internet of Things device is allowed to log in to the first edge server.

4. The method according to claim 3, characterized in that After allowing the first IoT device to log in to the first edge server, the method further includes: Obtaining a first identity authentication parameter and an identity identifier sent by the first IoT device; When the first timestamp sent by the first IoT device is valid, determining a second identity authentication parameter according to the identity identifier and the preset dynamic parameter; When the first identity authentication parameter is the same as the second identity authentication parameter, the identity authentication of the first Internet of Things device is successful.

5. The method according to claim 4, characterized in that After the identity authentication of the first IoT device is passed, the method further includes: In a case where the first IoT device requests to transmit data to the first edge server for storage, the data sent by the first IoT device is received for storage.

6. The method according to claim 1, characterized in that The establishing a connection between the first IoT device and the third IoT device through the blockchain network includes: When it is determined through the blockchain network that the third IoT device and the second edge server are on the blockchain, authenticating the second edge server; When the identity authentication of the second edge server is passed, a connection between the first IoT device and the third IoT device is established so that the first IoT device transmits data to the third IoT device.

7. The method according to claim 1, characterized in that The performing identity authentication on the second edge server includes: Receiving a third identity authentication parameter and a second timestamp sent by the second edge server; Calculating a fourth identity authentication parameter according to the second timestamp; When the third identity authentication parameter and the fourth identity authentication parameter are the same, verifying the third timestamp of the second edge server; In the case where the third timestamp is successfully verified, the identity authentication of the second edge server is successful.

8. The method according to claim 6, characterized in that The performing identity authentication on the second edge server includes: When it is determined through the blockchain network that the third timestamp sent by the second edge server is valid, calculating a fifth identity authentication parameter according to the third timestamp and a server password of the second edge server; Calculating a sixth identity authentication parameter according to the central password of the second edge server, the server password, and the third timestamp; When the fifth identity authentication parameter is the same as the sixth identity authentication parameter, the identity authentication of the second edge server is successful.

9. The method according to claim 2, characterized in that: After sending the first registration information and the first data transmission password to the first Internet of Things device, the method further includes: Calculate update parameters according to the public key and identity sent by the first IoT device, and send the update parameters to the first IoT device, so that the first IoT device calculates third identity hidden information and third public key hidden information according to the new public key, the identity and the update parameters.

10. The method according to claim 9, characterized in that After sending the update parameter to the first IoT device, the method further includes: Receiving the third identity hidden information and the third public key hidden information sent by the first Internet of Things device; The first data transmission password and the first registration information are updated according to the third identity identification hidden information and the third public key hidden information.

11. A data transmission method, characterized in that: Applied to a first IoT device, characterized by comprising: In the case of receiving a notification message or connecting to a third IoT device, generating an encryption key according to the central password of the first edge server, the first identity identification hidden information and the first identity authentication process parameter, wherein the notification message is sent by the first edge server when the first IoT device requests to transmit data to a second IoT device of the same system and the identity authentication of the first IoT device is passed, and the first IoT device and the second IoT device are connected to the same first edge server; The connection between the first IoT device and the third IoT device is established through a blockchain network when the first IoT device requests to transmit data to a third IoT device of a different system and the identity authentication of the third IoT device is passed, wherein the first IoT device is connected to the first edge server and the third IoT device is connected to the second edge server; The encrypted data is transmitted to the second IoT device or the third IoT device, wherein the encrypted data is obtained by encrypting the data to be transmitted using the encryption key.

12. The method according to claim 11, characterized in that Before generating the encryption key according to the central password of the first edge server, the first identity identification hidden information and the first identity authentication process parameter, the method further includes: Calculate first identity hidden information and first public key hidden information according to the identity and public key of the first Internet of Things and send them to the first edge server; Receive first registration information and a first data transmission password of a first Internet of Things device sent by the first edge server, where the first registration information and the first data transmission password are generated by the first edge server according to the first identity hidden information and the first public key hidden information; Registration is performed on the first edge server using the data transmission value, the first registration information and the first data transmission password, wherein the data transmission value is generated according to the identity identifier and the public key.

13. The method according to claim 12, characterized in that After transmitting the encrypted data to the second IoT device or the third IoT device, the method further includes: Receiving an update parameter sent by the first edge server, where the update parameter is calculated by the first edge server according to the public key and identity identifier sent by the first Internet of Things device; Calculate third identity identifier hidden information and third public key hidden information according to the new public key, the identity identifier and the update parameter; The third identity hidden information and the third public key hidden information are sent to the first edge server, so that the first edge server updates the first data transmission password and the first registration information according to the third identity hidden information and the third public key hidden information.

14. A data transmission device, characterized in that: Applied to the first edge server, including: A first transmission module is used to send a notification message to the first IoT device when the first IoT device requests to transmit data to the second IoT device of the same system and the identity authentication of the first IoT device is passed, so that the first IoT device transmits data to the second IoT device, and the first IoT device and the second IoT device are connected to the same first edge server; The second transmission module is used to establish a connection between the first IoT device and the third IoT device through a blockchain network when the first IoT device requests to transmit data to a third IoT device of a different system and the identity authentication of the first IoT device is passed, so that the first IoT device transmits data to the third IoT device, wherein the first IoT device is connected to the first edge server, and the third IoT device is connected to the second edge server.

15. A data transmission device, characterized in that: Applied to the first IoT devices, including: A processing module, configured to generate an encryption key according to a central password of a first edge server, first identity identification hidden information and first identity authentication process parameters when a notification message is received or a third Internet of Things device is connected, wherein the notification message is sent by the first edge server when the first Internet of Things device requests to transmit data to a second Internet of Things device of the same system and the identity authentication of the first Internet of Things device is passed, and the first Internet of Things device and the second Internet of Things device are connected to the same first edge server; the connection between the first Internet of Things device and the third Internet of Things device is established through a blockchain network when the first Internet of Things device requests to transmit data to a third Internet of Things device of a different system and the identity authentication of the third Internet of Things device is passed, wherein the first Internet of Things device is connected to the first edge server, and the third Internet of Things device is connected to the second edge server; An encryption module is used to transmit encrypted data to the second IoT device or the third IoT device, where the encrypted data is obtained by encrypting the data to be transmitted using the encryption key.

16. An electronic device, characterized in that: It includes a processor, a memory, and a program or instruction stored in the memory and executable on the processor, wherein when the program or instruction is executed by the processor, the steps of the data transmission method according to any one of claims 1 to 10 are implemented or the steps of the data transmission method according to any one of claims 11 to 13 are implemented.

17. A readable storage medium, characterized in that: The readable storage medium stores a program or instruction, and when the program or instruction is executed by the processor, the steps of the data transmission method according to any one of claims 1 to 10 or the steps of the data transmission method according to any one of claims 11 to 13 are implemented.

18. A computer program product, comprising a computer program stored on a non-transitory computer-readable storage medium, wherein the computer program comprises program instructions, and when the program instructions are executed by a computer, the computer executes the steps of the data transmission method as described in any one of claims 1 to 10 or implements the steps of the data transmission method as described in any one of claims 11 to 13.

Images