Data transmission system and method based on Internet of Things, electronic equipment and storage medium

Abstract

The invention discloses a data transmission system and method based on the Internet of Things, electronic equipment and a storage medium. The system comprises a data processing module and a data transmission module. The data processing module is arranged at a request end, and the data transmission module is arranged at a resource server; the data processing module is used for sending an authorization request to the client, acquiring the access token from the authorization server under the condition that the authorization verification of the client is passed, constructing a data transmission request based on the access token, and sending the data transmission request to the data transmission module; the data transmission module is used for receiving the data transmission request, performing validity verification on an access token in the data transmission request, determining to-be-transmitted data in a resource server based on request information in the data transmission request under the condition that the access token is valid, and performing encryption processing on the to-be-transmitted data based on a preset encryption algorithm, and the encrypted data is transmitted to a data processing module. The security of data transmission can be improved.

Description

Technical Field

[0001] The present invention relates to the technical field of data transmission, and in particular to a data transmission system, method, electronic device and storage medium based on the Internet of Things. Background Art

[0002] At present, the Internet of Things industry has already penetrated into the field of smart homes. By collecting and utilizing data such as temperature, humidity, light or smoke in the home environment, it will play an immeasurable role in the research and production of related industry personnel. The support of data enables people's life behaviors and living environments to be better understood and analyzed, thus providing more possibilities for a better lifestyle.

[0003] However, data transmission is often accompanied by the risk of information leakage. Summary of the invention

[0004] The present invention provides a data transmission system, method, electronic device and storage medium based on the Internet of Things to improve the security of data transmission.

[0005] According to one aspect of the present invention, there is provided a data transmission system based on the Internet of Things, comprising: a data processing module and a data transmission module; the data processing module is arranged at the request end, and the data transmission module is arranged at the resource server;

[0006] The data processing module is used to send an authorization request to the client, obtain an access token from the authorization server when the client authorization verification is passed, and construct a data transmission request based on the access token, and send the data transmission request to the data transmission module;

[0007] The data transmission module is used to receive the data transmission request, verify the validity of the access token in the data transmission request, and if the access token is valid, determine the data to be transmitted on the resource server based on the request information in the data transmission request, encrypt the data to be transmitted based on a preset encryption algorithm to obtain encrypted data, and transmit the encrypted data to the data processing module.

[0008] According to another aspect of the present invention, there is provided a data transmission method based on the Internet of Things, which is performed by a data transmission system based on the Internet of Things, comprising:

[0009] The client performs authorization interaction with the authorization server in the authorization interface to obtain an access token, and constructs a data transmission request based on the access token, and sends the data transmission request to the data transmission module;

[0010] The data transmission request is received through the data transmission module, and the validity of the access token in the data transmission request is verified. If the access token is valid, the data to be transmitted is determined based on the request information in the data transmission request, and the data to be transmitted is encrypted to obtain encrypted data, and the encrypted data is transmitted between the client and the cloud server.

[0011] According to another aspect of the present invention, an electronic device is provided, the electronic device comprising:

[0012] at least one processor; and

[0013] a memory communicatively connected to the at least one processor; wherein,

[0014] The memory stores a computer program that can be executed by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the data transmission method based on the Internet of Things described in any embodiment of the present invention.

[0015] According to another aspect of the present invention, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the data transmission method based on the Internet of Things described in any embodiment of the present invention when executed.

[0016] The technical solution of the embodiment of the present invention is to send an authorization request to the client through the data processing module, obtain an access token from the authorization server when the client authorization verification is passed, and construct a data transmission request based on the access token, and send the data transmission request to the data transmission module; the data transmission module receives the data transmission request, verifies the validity of the access token in the data transmission request, and determines the data to be transmitted on the resource server based on the request information in the data transmission request when the access token is valid, and encrypts the data to be transmitted based on a preset encryption algorithm to obtain encrypted data, and transmits the encrypted data to the data processing module. Encrypted data transmission is realized, and the security of data transmission is improved.

[0017] It should be understood that the contents described in this section are not intended to identify the key or important features of the embodiments of the present invention, nor are they intended to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0019] Figure 1 It is a structural diagram of a data transmission system based on the Internet of Things provided by Embodiment 1 of the present invention;

[0020] Figure 2 is a flow chart of a data transmission method based on the Internet of Things provided by Embodiment 2 of the present invention;

[0021] Figure 3 It is a structural schematic diagram of an electronic device provided in Embodiment 3 of the present invention. DETAILED DESCRIPTION

[0022] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0023] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0024] Embodiment 1

[0025] Figure 1 1 is a schematic diagram of a data transmission system based on the Internet of Things provided by the first embodiment of the present invention. This embodiment is applicable to data transmission between the Internet of Things. The data transmission system based on the Internet of Things can be implemented in the form of hardware and / or software. Figure 1As shown, the system includes: a data processing module 110 and a data transmission module 120; the data processing module 110 is arranged at the request end, and the data transmission module 120 is arranged at the resource server; it can be understood that the request end can be a terminal of a smart home device that issues a transmission request to obtain data from the resource server. In some embodiments, optionally, the client can serve as the request end, for example, using the application software or web page corresponding to the smart home device on a user terminal such as a mobile phone or a computer, in which case the data processing module 110 is deployed on the client. The resource server is used to store smart home data collected by smart home devices. For example, indoor environment data, including but not limited to temperature, humidity, air quality, etc.

[0026] The data processing module 110 is used to send an authorization request to the client, obtain an access token from the authorization server when the client authorization verification is passed, and construct a data transmission request based on the access token, and send the data transmission request to the data transmission module 120;

[0027] The data transmission module 120 is used to receive the data transmission request, verify the validity of the access token in the data transmission request, and if the access token is valid, determine the data to be transmitted on the resource server based on the request information in the data transmission request, encrypt the data to be transmitted based on a preset encryption algorithm to obtain encrypted data, and transmit the encrypted data to the data processing module 110.

[0028] In an embodiment of the present invention, the data processing module 110 deployed at the request end sends an authorization request to the client to allow the user to confirm whether to allow the data processing module 110 to access the data stored in the resource server. When the client authorization verification is passed, the data processing module 110 obtains an access token from the authorization server, and constructs a data transmission request based on the access token, and sends the data transmission request to the data transmission module 120. Specifically, the access token can be placed in the HTTP request header to obtain a data transmission request, and the data transmission request is sent to the data transmission module 120 through a secure communication channel. Exemplarily, the communication channel can be HTTPS. It should be noted that the data transmission request also includes request information such as the data identifier of the data to be transmitted, the data size, and the target transmission module address.

[0029] The data transmission module 120 monitors the data transmission request from the data processing module 110. When receiving the data transmission request, the access token in the data transmission request is verified for validity. If the access token is valid, the data to be transmitted is determined on the resource server based on the request information in the data transmission request, and the data to be transmitted is encrypted based on a preset encryption algorithm to obtain encrypted data, and the encrypted data is transmitted to the data processing module 110. The validity verification includes checking the signature of the token, verifying the issuer of the token, checking whether the token is within the validity period, and confirming that the token has the authority to access the required resources, etc., to verify the security of the request and ensure that the request has not been tampered with or forged.

[0030] Among them, the preset encryption algorithm includes but is not limited to the Advanced Encryption Standard (AES), Data Encryption Standard (DES) and other encryption algorithms. In an embodiment of the present invention, the data transmission module 120 can encrypt the data packets of the data to be transmitted based on the preset key and initialization vector. The encryption process includes multiple rounds. For each encryption round, the data to be transmitted is byte replaced, row shifted, column mixed and round key added to obtain encrypted data, and the encrypted data is encapsulated into a network data packet. Through the established encrypted communication session, the data transmission module sends the encapsulated data packet to the authorized data processing module 110. Exemplarily, the data packet size can be 128 bits, 192 bits or 256 bits.

[0031] It should be noted that byte replacement means replacing each byte with the corresponding byte in the S-box (Substitution Box). The S-box is a non-linear substitution table used to provide non-linear transformation in the encryption process.

[0032] Row shift: Perform a circular shift operation on the rows of the state matrix to increase the chaos of the data.

[0033] Column confusion: Mix the columns of the state matrix with a fixed polynomial to further confuse the data.

[0034] Round key addition: Perform an XOR operation on the expanded round key and the state matrix to achieve mixing of the key and data.

[0035] On the basis of the above embodiment, optionally, the client is used to receive the authorization request, perform authorization interaction with the authorization server on the authorization page, obtain an authorization code, and send the authorization code to the data processing module 110 .

[0036] The authorization request includes resource information requested by the user information and identity information of the requesting end. Exemplarily, the user information includes a user name, password or other identity authentication credentials. In an embodiment of the present invention, the client receives the authorization request, and the client guides the user to navigate to the authorization page provided by the authorization server. On the authorization page, the user will see detailed information about the requested permissions and have the opportunity to confirm or reject the request. If the user agrees to the authorization, the authorization server will generate an authorization code and associate it with the client and the user session. The client can receive the authorization code through the callback URL and send the authorization code to the data processing module 110.

[0037] Based on the above embodiment, optionally, the data processing module 110 is used to receive the authorization code, construct an access token request based on the authorization code and the credential information of the requesting end, send the access token request to the authorization server, and obtain the access token if the authorization server verifies it.

[0038] Among them, the credential information is the ID and key of the requesting end. In an embodiment of the present invention, the data processing module 110 receives the authorization code from the client, and constructs an access token request based on the authorization code and the credential information of the requesting end. Among them, the access token request is usually an HTTP POST request, which contains necessary parameters such as the authorization code, the requesting end ID, the requesting end key, the redirection URI, and the scope of the request. Further, the data processing module 110 sends the constructed access token request to the authorization server. After the authorization server receives the access token request, the other party verifies the information in the token request. Among them, the verification content includes verifying the validity of the authorization code, the correctness of the client credentials, the consistency of the redirection URI, and whether the scope of the request complies with the authorization policy. Further, if all verifications are passed, the authorization server will generate an access token, associate the access token with the requesting end and the authorized resources, and return the access token to the data processing module 110 as part of the response.

[0039] It is understandable that an access token is usually a string that represents the requester's access rights to a specific resource. The requester can use this token to prove its identity and permissions in subsequent requests.

[0040] On the basis of the above embodiment, optionally, the data processing module 110 is further used to receive the encrypted data, and decrypt the encrypted data based on a decryption mechanism corresponding to the encrypted data to obtain transmission data.

[0041] The decryption mechanism includes a key and an initialization vector. In an embodiment of the present invention, the data processing module 110 receives the encrypted data transmitted by the data transmission module 120, and uses the key and initialization vector used in encryption to decrypt the encrypted data packets to obtain the transmission data. The transmission data is the original data before encryption. Specifically, the decryption process includes reverse round key addition, reverse column mixing, reverse row shifting, and reverse byte replacement.

[0042] It should be noted that, since the encryption process includes multiple encryption rounds, multiple decryption rounds are also required in the decryption process, and the number of encryption rounds is the same as the number of decryption rounds.

[0043] On the basis of the above embodiment, optionally, the data transmission module 110 is also used to mark the request end corresponding to the access token as an intrusion when the access token is invalid, and send notification information to the request end corresponding to the data processing module.

[0044] The data transmission module 110 verifies the validity of the access token before using it to access protected resources. If the access token is invalid, the data transmission module 110 marks the request end as an intrusion and stores it in the marking disk. In addition, the data transmission module 110 sends a notification message to the request end corresponding to the data processing module to inform it that the access token is invalid.

[0045] It should be noted that the notification information can be sent through a secure channel to ensure the security of the notification information during transmission.

[0046] On the basis of the above embodiment, optionally, the data transmission module 120 includes an exception handling unit for generating an error response based on the exception type of the exception when any exception is detected, and sending the error response to the data processing module.

[0047] Among them, the exceptions include but are not limited to network errors, unavailable authentication services, etc., which are not limited here. In an embodiment of the present invention, the data transmission module 120 includes an exception handling unit to monitor various abnormal situations in the data transmission process. When verifying the access token or processing the data transmission request, the data transmission module 120 detects various types of exceptions. When any exception is detected, a corresponding error response is generated according to the detected exception type, and the error response is sent to the data processing module 110. After receiving the error response, the data processing module 110 will execute the corresponding error handling process according to the exception information contained in the error response. Specifically, the error handling process includes recording an error log, attempting to retransmit data, displaying an error message to the user, or triggering other error recovery mechanisms. Among them, the error response includes information such as the exception type, the time when the exception occurred, the cause of the exception, and the exception suggestion.

[0048] Based on the above embodiment, optionally, the data transmission module 120 includes a security audit unit for performing a security audit on the access token verification process, wherein the security audit includes access token generation and distribution, access token storage and management, access token verification and use, and anomaly detection and response.

[0049] In an embodiment of the present invention, during the access token generation and distribution stage, the security audit unit is used to check whether the generation of the access token complies with established security policies and standards, and supervise the token distribution process to ensure that only authorized systems or users can receive the token.

[0050] During the access token storage and management phase, the security audit unit is used to evaluate the security of the storage environment, including physical security and network security measures to prevent unauthorized access or leakage of tokens. In addition, the audit unit monitors token management activities such as renewal, revocation, and redistribution to ensure that these operations follow established processes and regulations.

[0051] During the verification and use of access tokens, the security audit unit is used to record and verify the use of access tokens to ensure that only users or systems holding valid tokens can access restricted resources. This step helps to promptly detect and prevent any potential unauthorized access attempts.

[0052] During the anomaly detection and response phase, the security audit unit is used to continuously monitor the use of access tokens. When an anomaly is detected, the security audit unit triggers the corresponding response mechanism, such as locking the account, notifying the administrator, or initiating further investigation procedures.

[0053] The technical solution of this embodiment is to send an authorization request to the client through the data processing module. If the client authorization verification is passed, the access token is obtained from the authorization server, and a data transmission request is constructed based on the access token, and the data transmission request is sent to the data transmission module; the data transmission module receives the data transmission request, verifies the validity of the access token in the data transmission request, and if the access token is valid, determines the data to be transmitted on the resource server based on the request information in the data transmission request, and encrypts the data to be transmitted based on a preset encryption algorithm to obtain encrypted data, and transmits the encrypted data to the data processing module. Encrypted data transmission is realized to improve the security of data transmission.

[0054] Embodiment 2

[0055] Figure 2 1 is a flow chart of a data transmission method based on the Internet of Things provided by Embodiment 2 of the present invention. Figure 2 As shown, the method is performed by a data transmission system based on the Internet of Things, including:

[0056] S210: Send an authorization request to the client based on the data processing module, obtain an access token from the authorization server if the client authorization verification passes, construct a data transmission request based on the access token, and send the data transmission request to the data transmission module;

[0057] S220: Based on the data transmission module, the data transmission request is received, and the validity of the access token in the data transmission request is verified. If the access token is valid, the data to be transmitted is determined on the resource server based on the request information in the data transmission request, and the data to be transmitted is encrypted based on a preset encryption algorithm to obtain encrypted data, and the encrypted data is transmitted to the data processing module.

[0058] Based on the above embodiment, optionally, the method includes: based on the client receiving the authorization request, performing authorization interaction with the authorization server on the authorization page to obtain an authorization code, and sending the authorization code to the data processing module.

[0059] Based on the above embodiment, optionally, the data processing module sends an authorization request to the client, obtains an access token from the authorization server when the client authorization verification passes, and constructs a data transmission request based on the access token, and sends the data transmission request to the data transmission module, including:

[0060] The authorization code is received based on the data processing module, an access token request is constructed based on the authorization code and the credential information of the requesting end, the access token request is sent to the authorization server, and an access token is obtained if the authorization server verifies it.

[0061] On the basis of the above embodiment, optionally, the method further includes: receiving the encrypted data based on the data processing module, and decrypting the encrypted data based on a decryption mechanism corresponding to the encrypted data to obtain transmission data.

[0062] Based on the above embodiment, optionally, the method further includes: based on the data transmission module, when the access token is invalid, marking the request end corresponding to the access token for intrusion, and sending notification information to the request end corresponding to the data processing module.

[0063] Based on the above embodiment, optionally, the method further includes: when the exception handling unit of the data transmission module detects any exception, generating an error response based on the exception type of the exception, and sending the error response to the data processing module.

[0064] Based on the above embodiment, optionally, the method also includes: performing a security audit on the access token verification process based on the security audit unit of the data transmission module, and the security audit includes access token generation and distribution, access token storage and management, access token verification and use, and anomaly detection and response.

[0065] The technical solution of this embodiment is to send an authorization request to the client through the data processing module. If the client authorization verification is passed, the access token is obtained from the authorization server, and a data transmission request is constructed based on the access token, and the data transmission request is sent to the data transmission module; the data transmission module receives the data transmission request, verifies the validity of the access token in the data transmission request, and if the access token is valid, determines the data to be transmitted on the resource server based on the request information in the data transmission request, and encrypts the data to be transmitted based on a preset encryption algorithm to obtain encrypted data, and transmits the encrypted data to the data processing module. Encrypted data transmission is realized to improve the security of data transmission.

[0066] Embodiment 3

[0067] Figure 3 1 is a schematic diagram of the structure of an electronic device provided in Embodiment 3 of the present invention. The electronic device 10 is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device may also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present invention described and / or required herein.

[0068] like Figure 3 As shown, the electronic device 10 includes at least one processor 11, and a memory connected to the at least one processor 11, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc., wherein the memory stores a computer program that can be executed by at least one processor, and the processor 11 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 12 or the computer program loaded from the storage unit 18 to the random access memory (RAM) 13. In the RAM 13, various programs and data required for the operation of the electronic device 10 can also be stored. The processor 11, the ROM 12, and the RAM 13 are connected to each other through a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0069] A number of components in the electronic device 10 are connected to the I / O interface 15, including: an input unit 16, such as a keyboard, a mouse, etc.; an output unit 17, such as various types of displays, speakers, etc.; a storage unit 18, such as a disk, an optical disk, etc.; and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0070] The processor 11 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any appropriate processor, controller, microcontroller, etc. The processor 11 executes the various methods and processes described above, such as a data transmission method based on the Internet of Things.

[0071] In some embodiments, the data transmission method based on the Internet of Things may be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as a storage unit 18. In some embodiments, part or all of the computer program may be loaded and / or installed on the electronic device 10 via the ROM 12 and / or the communication unit 19. When the computer program is loaded into the RAM 13 and executed by the processor 11, one or more steps of the data transmission method based on the Internet of Things described above may be performed. Alternatively, in other embodiments, the processor 11 may be configured to perform the data transmission method based on the Internet of Things in any other appropriate manner (e.g., by means of firmware).

[0072] Various implementations of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various implementations can include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0073] The computer program for implementing the data transmission method based on the Internet of Things of the present invention can be written in any combination of one or more programming languages. These computer programs can be provided to a processor of a general-purpose computer, a special-purpose computer or other programmable data processing device, so that when the computer program is executed by the processor, the functions / operations specified in the flow chart and / or block diagram are implemented. The computer program can be executed entirely on the machine, partially on the machine, partially on the machine as an independent software package and partially on a remote machine, or completely on a remote machine or server.

[0074] Embodiment 4

[0075] Embodiment 4 of the present invention further provides a computer-readable storage medium, wherein the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to execute a data transmission method based on the Internet of Things, which is executed by a data transmission system based on the Internet of Things, and the method includes:

[0076] Sending an authorization request to the client based on the data processing module, obtaining an access token from the authorization server if the client authorization verification passes, and constructing a data transmission request based on the access token, and sending the data transmission request to the data transmission module;

[0077] The data transmission module receives the data transmission request, verifies the validity of the access token in the data transmission request, and if the access token is valid, determines the data to be transmitted on the resource server based on the request information in the data transmission request, encrypts the data to be transmitted based on a preset encryption algorithm to obtain encrypted data, and transmits the encrypted data to the data processing module.

[0078] In the context of the present invention, a computer-readable storage medium may be a tangible medium that may contain or store a computer program for use by or in combination with an instruction execution system, device or equipment. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices or equipment, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0079] To provide interaction with a user, the systems and techniques described herein may be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or trackball) through which the user can provide input to the electronic device. Other types of devices may also be used to provide interaction with the user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form (including acoustic input, voice input, or tactile input).

[0080] The systems and techniques described herein may be implemented in a computing system that includes backend components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes frontend components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such backend components, middleware components, or frontend components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.

[0081] A computing system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The client and server relationship is generated by computer programs running on the corresponding computers and having a client-server relationship with each other. The server may be a cloud server, also known as a cloud computing server or cloud host, which is a host product in the cloud computing service system to solve the defects of difficult management and weak business scalability in traditional physical hosts and VPS services.

[0082] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps described in the present invention can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solution of the present invention can be achieved, and this document does not limit this.

[0083] The above specific implementations do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A data transmission system based on the Internet of Things, characterized in that: include: A data processing module and a data transmission module; the data processing module is arranged at the request end, and the data transmission module is arranged at the resource server; The data processing module is used to send an authorization request to the client, obtain an access token from the authorization server when the client authorization verification is passed, and construct a data transmission request based on the access token, and send the data transmission request to the data transmission module; The data transmission module is used to receive the data transmission request, verify the validity of the access token in the data transmission request, and if the access token is valid, determine the data to be transmitted on the resource server based on the request information in the data transmission request, encrypt the data to be transmitted based on a preset encryption algorithm to obtain encrypted data, and transmit the encrypted data to the data processing module.

2. The system according to claim 1, characterized in that The client is used to receive the authorization request, perform authorization interaction with the authorization server on the authorization page, obtain an authorization code, and send the authorization code to the data processing module.

3. The system according to claim 2, characterized in that The data processing module is used to receive the authorization code, construct an access token request based on the authorization code and the credential information of the requesting end, send the access token request to the authorization server, and obtain an access token if the authorization server verifies it.

4. The system according to claim 1, characterized in that The data processing module is further used to receive the encrypted data, and decrypt the encrypted data based on a decryption mechanism corresponding to the encrypted data to obtain transmission data.

5. The system according to claim 1, characterized in that The data transmission module is also used to, when the access token is invalid, mark the request end corresponding to the access token as an intrusion, and send notification information to the request end corresponding to the data processing module.

6. The system according to claim 1, characterized in that The data transmission module comprises an exception handling unit, which is used for generating an error response based on the exception type of the exception when any exception is detected, and sending the error response to the data processing module.

7. The system according to claim 1, characterized in that The data transmission module includes a security audit unit for performing a security audit on the access token verification process, wherein the security audit includes access token generation and distribution, access token storage and management, access token verification and use, and anomaly detection and response.

8. A data transmission method based on the Internet of Things, characterized in that: Performed by IoT-based data transmission systems, including: Sending an authorization request to the client based on the data processing module, obtaining an access token from the authorization server if the client authorization verification passes, and constructing a data transmission request based on the access token, and sending the data transmission request to the data transmission module; The data transmission module receives the data transmission request, verifies the validity of the access token in the data transmission request, and if the access token is valid, determines the data to be transmitted on the resource server based on the request information in the data transmission request, encrypts the data to be transmitted based on a preset encryption algorithm to obtain encrypted data, and transmits the encrypted data to the data processing module.

9. An electronic device, characterized in that: The electronic device comprises: at least one processor; and a memory communicatively connected to the at least one processor; wherein, The memory stores a computer program that can be executed by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the Internet of Things-based data transmission method according to any one of claim 8.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement any one of the Internet of Things-based data transmission methods described in claim 8 when executed.

Images