Equipment trusted connection method and device based on OpenHarmony system, equipment and storage medium

Abstract

The embodiment of the invention discloses an equipment trusted connection method and device based on an OpenHarmony system, equipment and a storage medium. The method comprises the following steps: under the condition of starting to carry out local area network networking on a plurality of devices, carrying out distribution of star flash master and slave nodes on the plurality of devices according to a distributed soft bus protocol to obtain a star flash master node and at least one star flash slave node; for any satellite flash slave node, sending the equipment credible proof of the satellite flash slave node to the satellite flash master node; the satellite flash master node performs credible authentication on the satellite flash slave nodes according to the equipment credible proof, and if the authentication is passed, the satellite flash master node allocates credible identity labels to the satellite flash slave nodes and broadcasts the credible identity labels to other satellite flash slave nodes; and after networking is completed, passive credible authentication of the satellite flash slave node and active credible authentication of the satellite flash master node are periodically carried out. A master-slave node architecture is utilized to carry out credible authentication on slave nodes, and a credible effect is achieved between the connected slave nodes through a mode of distributing credible identity labels.

Description

Technical Field

[0001] The embodiments of the present application relate to the technical field of trusted device connection, and in particular, to a trusted device connection method, apparatus, device and storage medium based on an OpenHarmony system. Background Art

[0002] With the development of science and technology, system security has received more and more attention. Among them, the trusted connection of devices is the cornerstone of system security, and the requirements for the trustworthiness of its connection are getting higher and higher.

[0003] Currently, in the scenario of trusted connection computing, the security configuration of the system is usually tested, which usually involves the device side and the intervention platform, but it is impossible to make a trusted security judgment on the connection between devices. Summary of the invention

[0004] The embodiments of the present application provide a method, apparatus, device and storage medium for trusted connection of devices based on the OpenHarmony system to achieve trusted security judgment between interconnected devices.

[0005] In a first aspect, an embodiment of the present application provides a device trusted connection method based on the OpenHarmony system, the method comprising:

[0006] When multiple devices are started to be networked into a local area network, multiple devices are allocated as star flash master and slave nodes according to the distributed soft bus protocol to obtain a star flash master node and at least one star flash slave node;

[0007] For any StarShine slave node, send the device trust certificate of the StarShine slave node to the StarShine master node;

[0008] The Star Flash master node performs trust authentication on the Star Flash slave node based on the device trust certificate. If the authentication is successful, a trusted identity is assigned to the Star Flash slave node and the trusted identity is broadcast to other Star Flash slave nodes.

[0009] After the networking is completed, passive trusted authentication of the Star Flash slave node and active trusted authentication of the Star Flash master node are performed periodically.

[0010] In a second aspect, an embodiment of the present application provides a device trusted connection apparatus based on the OpenHarmony system, including:

[0011] The node allocation module is used to allocate the multiple devices to the Star Flash master and slave nodes according to the distributed soft bus protocol when the multiple devices are started to be networked into a local area network, so as to obtain a Star Flash master node and at least one Star Flash slave node;

[0012] A sending module, used for sending the device trustworthiness certificate of any StarShine slave node to the StarShine master node;

[0013] Trusted authentication module, used by the Star Flash master node to authenticate the Star Flash slave node based on the device trust certificate. If the authentication is successful, a trusted identity is assigned to the Star Flash slave node and the trusted identity is broadcast to other Star Flash slave nodes;

[0014] The periodic authentication module is used to periodically perform passive trusted authentication of the Star Flash slave nodes and active trusted authentication of the Star Flash master nodes after the networking is completed.

[0015] In a third aspect, an embodiment of the present application further provides a device trusted connection device based on the OpenHarmony system, and the device trusted connection device based on the OpenHarmony system includes:

[0016] one or more processors;

[0017] a storage device for storing one or more programs,

[0018] When one or more programs are executed by one or more processors, the one or more processors implement a device trusted connection method based on the OpenHarmony system as provided in any embodiment of the present application.

[0019] In a fourth aspect, an embodiment of the present application further provides a computer-readable storage medium on which a computer program is stored, characterized in that when the program is executed by a processor, a device trusted connection method based on the OpenHarmony system as provided in any embodiment of the present application is implemented.

[0020] The technical solution of the embodiment of the present application is that when multiple devices are started to be networked into a local area network, multiple devices are allocated to Star Flash master-slave nodes according to the distributed soft bus protocol to obtain a Star Flash master node and at least one Star Flash slave node; for any Star Flash slave node, the device trust certificate of the Star Flash slave node is sent to the Star Flash master node; the Star Flash master node performs trust authentication on the Star Flash slave node according to the device trust certificate, and if the authentication passes, a trusted identity is assigned to the Star Flash slave node and the trusted identity is broadcast to other Star Flash slave nodes; after the networking is completed, passive trusted authentication of the Star Flash slave node and active trusted authentication of the Star Flash master node are periodically performed. Based on this, the present embodiment utilizes the master-slave node architecture to perform trust authentication on the slave nodes, and by allocating trusted identities, a trusted effect is achieved between the connected slave nodes, thereby realizing fast and reliable trusted authentication between the connected devices. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Figure 1A flowchart of a method for trusted connection of devices based on the OpenHarmony system provided in Example 1 of the present application;

[0022] Figure 2 A schematic diagram of the structure of a device-side security module provided in Embodiment 1 of the present application;

[0023] Figure 3 A schematic diagram of the structure of a device trusted connection apparatus based on the OpenHarmony system provided in Example 2 of the present application;

[0024] Figure 4 A schematic diagram of the structure of a trusted connection device based on the OpenHarmony system provided in Example 3 of the present application. DETAILED DESCRIPTION

[0025] The present application will be further described in detail below in conjunction with the accompanying drawings and embodiments. It is to be understood that the specific embodiments described herein are only used to explain the present application, rather than to limit the present application. It should also be noted that, for ease of description, only the parts related to the present application, rather than all structures, are shown in the accompanying drawings.

[0026] Embodiment 1

[0027] Figure 1 A flow chart of a method for connecting a device to a trusted state based on the OpenHarmony system provided in the first embodiment of the present application is shown in FIG. Figure 1 As shown, the device trusted connection method based on the OpenHarmony system provided in this embodiment can be implemented based on a device trusted connection apparatus based on the OpenHarmony system equipped with a video acquisition terminal, and specifically may include the following steps:

[0028] Step 101, when starting to form a local area network for multiple devices, the multiple devices are allocated to Star Flash master and slave nodes according to the distributed soft bus protocol to obtain a Star Flash master node and at least one Star Flash slave node.

[0029] In this embodiment, it is possible but not limited to the scenario of LAN networking of multiple embedded devices. The OpenHarmony system will involve a new wireless connection method called Star Flash, which follows the distributed soft bus protocol and divides multiple embedded devices into Star Flash master nodes (also called Star Flash G nodes) and Star Flash slave nodes (also called Star Flash T nodes).

[0030] Therefore, in this embodiment, multiple devices can be allocated as Star Flash master and slave nodes according to the distributed soft bus protocol to obtain a Star Flash master node and at least one Star Flash slave node.

[0031] Among them, the distributed soft bus is an important capability of OpenHarmony, which realizes the communication mode between multiple devices and provides a device discovery, networking and transmission capability that does not distinguish between links. It solves the problem of data communication between devices with different protocols. It enables multiple Hongmeng devices to automatically build a logical fully connected network.

[0032] Star Flash is a new generation of short-range wireless connection technology that integrates the advantages of traditional wireless connection technologies such as Bluetooth and Wi-Fi. Its two modes, basic access technology (SLB) benchmarks Wi-Fi, and low-power access technology (SLE) benchmarks Bluetooth. The former copes with high-speed, large-transmission, and high-quality connection scenarios, while the latter meets the needs of low-power and lightweight connections. Among them, the Star Flash G node is an authorized node with the ability to manage a certain number of T nodes. The Star Flash T node is a managed node, and together with the G node, it forms a communication domain.

[0033] In order to further illustrate the solution of this embodiment, the embedded device can take an IPC network camera device as an example to illustrate the security module possessed by the device side, and the security module can execute the solution of this application.

[0034] For details, please refer to Figure 2 , Figure 2 A schematic diagram of the structure of a device-side security module provided in Example 1 of the present application.

[0035] like Figure 2 As shown, the device-side security module includes the Star Flash physical module, the trusted security chip SE, SwanLinkOS, and the distributed soft bus.

[0036] Among them, the Star Flash physical module takes NearLink_DK_WS63 as an example, with integrated 2.4GHz SoC Wi-Fi, completing the Star Flash access layer BLE (basic access) and SLE (low power access).

[0037] The trusted security chip SE uses a security chip with National Core Trust National Secret Level 2 certification, and has passed the GM / T 0013-2021 Trusted Computing-Trusted Cryptographic Module Conformity Testing Specification and the GM / T 0008-2012 Security Chip Password Testing Criteria. It is used to cooperate with SwanLinkOS to provide trusted security algorithms and trusted verification functions.

[0038] SwanLinkOS integrates the Star Flash data transmission adaptation layer, device discovery, real-time flow control basic service layer, and distributed soft bus service softbus_server at the system layer, and provides a TEE trusted execution environment for algorithm calculation and data processing to run in an isolated, secure and trusted execution environment.

[0039] The distributed soft bus of SwanLinkOS based on OpenHarmony is a virtual, "invisible" bus that can connect all OpenHarmony devices in the same LAN and has the capabilities of self-discovery, self-organizing, high bandwidth and low latency.

[0040] The distributed soft bus can usually have the capabilities of device discovery, device authentication, connection and data transmission, self-test, etc. Among them, device discovery provides a device discovery mechanism based on the COAP RFC7252 protocol, supports lightweight reliable transmission, supports IoT embedded devices with smaller RAM and ROM, and can expand the scope of networking.

[0041] The device authentication function provides device authentication mechanism and knowledge base management functions. Devices establish trust relationships with each other through encryption and decryption, ensuring that user data flows between the right devices in interconnected scenarios and realizing encrypted transmission of user data.

[0042] The connection and data transmission functions provide identity authentication and data transmission channels, and the self-test function detects the performance of the running equipment.

[0043] Based on the above architecture, this step can follow a certain allocation strategy when allocating the Star Flash master node and the Star Flash slave node. Specifically, the strategy can be set based on the type of trusted identity identifier pre-set by the system.

[0044] In a specific example, the types of trusted identity identification may include trusted computing management nodes, trusted computing terminal nodes, trusted computing collection nodes, and trusted computing wireless terminal nodes.

[0045] Trusted computing management nodes are usually required to have good performance, high configuration, large storage space, and abundant computing resources. For example, a dome camera. Devices that meet these requirements can be marked as Star Flash master nodes.

[0046] The trusted computing acquisition node is marked as a Star Flash slave node, which only supports video and audio acquisition functions, has low performance and low configuration. It is usually a UFO camera.

[0047] The trusted computing terminal node is marked as a Xingshan slave node, which has complete functions and has basic functions such as data collection, intercom, and video storage. It is generally a standard-configured conch camera or a gun camera.

[0048] The trusted computing wireless terminal node is marked as a Star Flash slave node, which has a WiFi module and basic functions such as data collection, intercom, and video storage. It is generally a wireless camera.

[0049] That is to say, when allocating the Star Flash master and slave nodes in this step, one device can be selected from multiple devices as the Star Flash master node according to the pre-set required functions, and the other devices can be used as Star Flash slave nodes.

[0050] Step 102: For any StarShine slave node, send the device trustworthiness certificate of the StarShine slave node to the StarShine master node.

[0051] In order to further improve the reliability of secure and trusted authentication and speed up the trusted authentication, after the master and slave nodes are allocated, the signature verification and authentication can be performed through the identity certificate in the SE chip. After the verification is passed, it will be included in the scope of networking devices. The identity certificate is an SM2 X509 format certificate, and the identity is authenticated through the signature verification of SM2. This process is the standard national secret certificate signature verification process, which will not be repeated here.

[0052] After the signature verification and authentication, the failed devices can be directly eliminated without the need for subsequent trusted authentication, which can speed up the trusted authentication during networking.

[0053] For devices that have passed the signature verification authentication, the method of this step will be executed. The Star Flash slave node will send its device trustworthiness certificate to the Star Flash master node. The device trustworthiness certificate includes the hardware specification measurement value, model, IP and MAC. The hardware specification measurement value is the value obtained by hashing the hardware specification parameters when the device leaves the factory.

[0054] Specifically, when determining the hardware specification measurement value, a message may be generated according to the hardware specification parameters. The message may be in, but not limited to, JSON format. In a specific example, the message body may be as follows:

[0055] {"body":

[0056] {"SOCType":"SOC-TYPE-001",

[0057] "DRAM":"128MB",

[0058] "SensorType":"Sensor-TYPE-002",

[0059] "PrimeLensType":"PrimeLens-TYPE-001",

[0060] "ZoomLensType":"ZoomLens-TYPE-001",

[0061] "TFCard":"512GB",

[0062] "RSkey":0,

[0063] "4GModelType":"4GModel-TYPE-001",

[0064] "WiFiModelType":"WiFiModel-TYPE-001",

[0065] "BluetoothModelType":"BluetoothModel-TYPE-001",

[0066] },

[0067] "IPCType":"IPC-TYPE-001",

[0068] }

[0069] The message involves a variety of hardware types and their corresponding hardware specifications. It should be noted that the hardware types and their corresponding hardware specifications are usually stored in the cloud or on a host with rich storage resources according to the device model.

[0070] By performing hash calculation on the message, a hardware specification parameter measurement value is obtained. In a specific example, the measurement value may be the calculated SM3_HMAC.

[0071] Step 103: The Star Flash master node performs trust authentication on the Star Flash slave node based on the device trust certificate. If the authentication passes, a trusted identity is assigned to the Star Flash slave node and the trusted identity is broadcast to other Star Flash slave nodes.

[0072] In this step, the trusted authentication process may include: the Star Flash master node performs hardware trusted authentication on the Star Flash slave node based on the device trusted certificate; the Star Flash master node performs software trusted authentication on the Star Flash slave node based on the device trusted certificate.

[0073] That is to say, in this embodiment, the trusted authentication includes hardware trusted authentication and software trusted authentication, wherein the hardware trusted authentication mainly compares the aforementioned hardware specification parameter measurement values.

[0074] Specifically, after receiving the device trust certificate of any Star Flash slave node, the Star Flash master node detects the hardware specification parameters of the Star Flash slave node according to the model in the device trust certificate, and determines the corresponding hardware specification measurement comparison value based on the detected hardware specification parameters; the hardware specification measurement comparison value is compared with the hardware specification measurement value in the device trust certificate. If they are consistent and the IP and MAC in the device trust certificate are within the permitted scope of network control, the hardware trust certification is passed.

[0075] Since the device trustworthiness certificate includes the model, the corresponding hardware detection strategy can be determined based on the model. The hardware detection strategy is used to detect the hardware installed in the device. The hardware information of different models is reflected in different locations and methods. Therefore, the corresponding hardware detection strategy can be obtained by the model, and then the hardware specification parameters can be detected based on the signal detection strategy.

[0076] Specifically, the hardware detection strategy corresponding to the model can be obtained according to the model in the device trustworthy certificate, and the initial hardware specification parameters of the Star Flash slave node can be obtained based on the hardware detection strategy; then, a hardware specification message is generated based on the initial hardware parameters according to the preset message format; the hardware specification message is subjected to a preset encrypted hash calculation to obtain a hardware specification measurement comparison value.

[0077] Among them, the preset message format is the message mentioned above. This process is the same as the process of generating the hardware specification measurement value mentioned above, and will not be repeated here.

[0078] Since the same hash calculation method is used, if the hardware specifications have not changed, the obtained value should also be the same. Therefore, as long as the hardware specification measurement comparison value is the same as the hardware specification measurement value, it can be considered consistent.

[0079] In addition, the IP and MAC in the device trustworthiness certificate are within the permitted scope of network control, that is, to ensure that the device belongs to the local area network of this networking. The judgment process can refer to the relevant network control technology and will not be repeated here.

[0080] It should be noted that after the hardware trusted authentication, if it fails, it can be processed according to the pre-set failed processing strategy, such as the IPC network camera cannot be powered on; hardware specification trusted verification failed: the IPC network camera can be powered on, but a security alarm log is generated and the camera is restarted every half an hour. Security control measures can be set according to business scenarios and security requirements, and this is only described as an example.

[0081] When performing software trusted authentication, you can first obtain the initial software functions of the Star Flash slave node based on the model in the device trusted certificate; then perform software trusted authentication on the services in the Star Flash slave node based on the initial software functions.

[0082] It should be noted that the initial software functions can be stored in the device storage space at the factory, or can be stored in the cloud with the corresponding model mapping for easy access here.

[0083] In a specific example, the software function module can be trusted when the SA service management module loads the IPC network camera function initialization interface in the TEE computing environment of SwanLinkOS. For example, the function list supported by the corresponding model includes the following functions: PTZ pan-tilt service, GA / T1400 protocol, GB 35114 protocol, recording service, playback service, AI module, so the processes of PTZ pan-tilt service, GA / T 1400 protocol, GB 35114 protocol, recording service, playback service, and AI module can be measured: according to the service and process names set in the development, PS acquisition search is performed to confirm that the corresponding service has been started; services that are not in the corresponding model function list are not started.

[0084] It should be noted that after the software trust authentication, if it fails, it can be processed according to the pre-set failure processing strategy, such as disabling the media function of the IPC network camera, and issuing a security alarm prompt on the IPC network camera control page on the WEB side. Security control measures can be set according to business scenarios and security requirements. This is only an example description.

[0085] In addition, the specifications of the trusted identity have certain regularity. When allocating, the trusted identity can be allocated to the Star Flash slave node according to the identity generation specification. The generation specification can be "IP-MAC-N".

[0086] For example, the four types of nodes mentioned above, trusted computing management node, trusted computing terminal node, trusted computing collection node, and trusted computing wireless terminal node, their corresponding addresses N can be management 100, collection 001, terminal 002, and wireless 003 respectively.

[0087] Step 104: After the networking is completed, passive trusted authentication of the Star Flash slave node and active trusted authentication of the Star Flash master node are performed periodically.

[0088] In this step, for any Star Flash slave node, according to the first cycle, the device trustworthy certificate, trusted identity and timestamp of the Star Flash slave node are periodically synchronized to the Star Flash master node; according to the second cycle, the Star Flash master node sends a trusted authentication request to all Star Flash slave nodes in the local area network; the Star Flash slave node periodically feeds back the device trustworthy certificate, trusted identity and timestamp of the Star Flash slave node to the Star Flash master node according to the trusted authentication request; the Star Flash master node performs trusted authentication on the Star Flash slave node based on the device trustworthy certificate, trusted identity and timestamp.

[0089] In a specific example, the T node sends a normal heartbeat every 15 seconds to notify the G node and other T nodes that they are currently online; passive trusted authentication: a trusted proof heartbeat is sent to the G node every 15 minutes to synchronize the trusted identity proof, trusted identity identifier and timestamp to the G node. The G node determines whether the T node is still trusted and synchronizes its status to other T nodes.

[0090] Active trusted authentication: G node will periodically detect whether T node is trustworthy for all nodes in the local area network in real time every hour, requiring T node to send trusted identity proof, trusted identity identifier and timestamp for verification by G node.

[0091] After the T node is passively synchronized and the G node actively initiates trusted identity authentication, if the trusted authentication fails, its IP, MAC, trusted identity, and untrusted status will be synchronized to other T nodes. The connection between untrusted T nodes in the local area network is untrustworthy, and the communication and response requests are directly interrupted. The G node generates a security alarm log and synchronizes it to the platform for display.

[0092] In this embodiment, when multiple devices are started to be networked into a local area network, multiple devices are assigned to Star Flash master-slave nodes according to the distributed soft bus protocol to obtain a Star Flash master node and at least one Star Flash slave node; for any Star Flash slave node, the device trust certificate of the Star Flash slave node is sent to the Star Flash master node; the Star Flash master node performs trust authentication on the Star Flash slave node according to the device trust certificate, and if the authentication passes, a trusted identity is assigned to the Star Flash slave node and the trusted identity is broadcast to other Star Flash slave nodes; after the networking is completed, passive trusted authentication of the Star Flash slave node and active trusted authentication of the Star Flash master node are periodically performed. Based on this, this embodiment utilizes the master-slave node architecture to perform trust authentication on the slave nodes, and by assigning trusted identities, a trusted effect is achieved between the connected slave nodes, thereby realizing fast and reliable trusted authentication between the connected devices.

[0093] Embodiment 2

[0094] Figure 3 This is a schematic diagram of the structure of a device trusted connection device based on the OpenHarmony system provided in the second embodiment of the present application. The device trusted connection device based on the OpenHarmony system provided in the embodiment of the present application can execute the device trusted connection method based on the OpenHarmony system provided in any embodiment of the present application, and has the corresponding functional modules and beneficial effects of the execution method. The device can be implemented in software and / or hardware, such as Figure 3 As shown, the device comprises:

[0095] The node allocation module 301 is used to allocate the multiple devices to the star flash master and slave nodes according to the distributed soft bus protocol when the multiple devices are started to be networked into a local area network, so as to obtain a star flash master node and at least one star flash slave node;

[0096] A sending module 302 is used to send the device trustworthiness certificate of any StarShine slave node to the StarShine master node;

[0097] Trusted authentication module 303, used for the Star Flash master node to perform trusted authentication on the Star Flash slave node according to the device trusted certificate. If the authentication is successful, a trusted identity is assigned to the Star Flash slave node and the trusted identity is broadcast to other Star Flash slave nodes;

[0098] The periodic authentication module 304 is used to periodically perform passive trusted authentication of the Star Flash slave node and active trusted authentication of the Star Flash master node after the networking is completed.

[0099] Furthermore, the trusted authentication module is specifically used for:

[0100] The Star Flash master node performs hardware trust authentication on the Star Flash slave node according to the device trust certificate;

[0101] The Star Flash master node performs software trustworthiness authentication on the Star Flash slave node based on the device trustworthiness certificate.

[0102] Furthermore, the device trustworthiness certificate includes hardware specification measurement value, model, IP and MAC, and the hardware specification measurement value is a value obtained by hashing the hardware specification parameters of the device when it leaves the factory;

[0103] The trusted authentication module is specifically used for:

[0104] After receiving the device trust certificate of any Star Flash slave node, the Star Flash master node detects the hardware specification parameters of the Star Flash slave node according to the model in the device trust certificate, and determines the corresponding hardware specification measurement comparison value according to the detected hardware specification parameters;

[0105] The hardware specification measurement comparison value is compared with the hardware specification measurement value in the device trustworthy certificate. If they are consistent and the IP and MAC in the device trustworthy certificate are within the permitted range of network control, the hardware trustworthy authentication is passed.

[0106] Furthermore, the trusted authentication module is specifically used for:

[0107] Obtain a hardware detection strategy corresponding to the model according to the model in the device trustworthy certificate, and obtain initial hardware specification parameters of the Star Flash slave node based on the hardware detection strategy;

[0108] Generating a hardware specification message based on the initial hardware parameters in accordance with a preset message format;

[0109] A preset encrypted hash calculation is performed on the hardware specification message to obtain a hardware specification measurement comparison value.

[0110] Furthermore, the trusted authentication module is specifically used for:

[0111] Obtaining the initial software function of the Star Flash slave node according to the model in the device trust certificate;

[0112] Based on the initial software function, software trustworthiness authentication is performed on the service in the Star Flash slave node.

[0113] Furthermore, the trusted authentication module is specifically used for:

[0114] A trusted identity is assigned to the Star Flash slave node according to the identity generation specification.

[0115] Furthermore, the periodic authentication module is specifically used for:

[0116] For any of the Star Flash slave nodes, according to the first cycle, the device trust certificate, trusted identity and timestamp of the Star Flash slave node are periodically synchronized to the Star Flash master node;

[0117] According to the second cycle, the Star Flash master node sends a trusted authentication request to all the Star Flash slave nodes in the local area network;

[0118] The Star Flash slave node periodically feeds back the device trustworthiness certificate, trusted identity and timestamp of the Star Flash slave node to the Star Flash master node according to the trusted authentication request;

[0119] The Star Flash master node performs trustworthy authentication on the Star Flash slave node based on the device trustworthy certificate, trusted identity and timestamp.

[0120] Embodiment 3

[0121] Figure 4 A schematic diagram of a device trusted connection device based on the OpenHarmony system provided in the fourth embodiment of the present application is shown in FIG. Figure 4 As shown, the device trusted connection device based on the OpenHarmony system also includes a processor 410, a memory 420, an input device 430 and an output device 440; the number of processors 410 in the device trusted connection device based on the OpenHarmony system can be one or more. Figure 4A processor 410 is taken as an example; the processor 410, memory 420, input device 430 and output device 440 in the device trusted connection based on the OpenHarmony system can be connected through a bus or other means. Figure 4 The example of connecting through bus is taken in the following.

[0122] The memory 420, as a computer-readable storage medium, can be used to store software programs, computer executable programs and modules, such as program instructions / modules corresponding to the device trusted connection method based on the OpenHarmony system in the embodiment of the present invention. The processor 410 executes various functional applications and data processing of the device trusted connection device based on the OpenHarmony system by running the software programs, instructions and modules stored in the memory 420, that is, to implement the above-mentioned device trusted connection method based on the OpenHarmony system:

[0123] When multiple devices are started to be networked into a local area network, multiple devices are allocated as star flash master and slave nodes according to the distributed soft bus protocol to obtain a star flash master node and at least one star flash slave node;

[0124] For any StarShine slave node, send the device trust certificate of the StarShine slave node to the StarShine master node;

[0125] The Star Flash master node performs trust authentication on the Star Flash slave node based on the device trust certificate. If the authentication is successful, a trusted identity is assigned to the Star Flash slave node and the trusted identity is broadcast to other Star Flash slave nodes.

[0126] After the networking is completed, passive trusted authentication of the Star Flash slave node and active trusted authentication of the Star Flash master node are performed periodically.

[0127] The memory 420 may mainly include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function; the data storage area may store data created according to the use of the terminal, etc. In addition, the memory 420 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one disk storage device, a flash memory device, or other non-volatile solid-state storage device. In some instances, the memory 420 may further include a memory remotely arranged relative to the processor 410, and these remote memories may be connected to a trusted connection device of a device based on the OpenHarmony system via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0128] Embodiment 4

[0129] Embodiment 4 of the present application further provides a storage medium including computer executable instructions, which are used to execute a device trusted connection method based on the OpenHarmony system when executed by a computer processor, the method comprising:

[0130] When multiple devices are started to be networked into a local area network, multiple devices are allocated as star flash master and slave nodes according to the distributed soft bus protocol to obtain a star flash master node and at least one star flash slave node;

[0131] For any StarShine slave node, send the device trust certificate of the StarShine slave node to the StarShine master node;

[0132] The Star Flash master node performs trust authentication on the Star Flash slave node based on the device trust certificate. If the authentication is successful, a trusted identity is assigned to the Star Flash slave node and the trusted identity is broadcast to other Star Flash slave nodes.

[0133] After the networking is completed, passive trusted authentication of the Star Flash slave node and active trusted authentication of the Star Flash master node are performed periodically.

[0134] Its computer executable instructions are not limited to the above method operations, and can also execute related operations in the device trusted connection method based on the OpenHarmony system provided in any embodiment of the present application.

[0135] Through the above description of the implementation method, the technicians in the relevant field can clearly understand that the present application can be implemented with the help of software and necessary general hardware, and of course it can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of the present application can be essentially or the part that contributes to the prior art can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as a computer floppy disk, read-only memory (ROM), random access memory (RAM), flash memory (FLASH), hard disk or optical disk, etc., including a number of instructions to enable a computer device (which can be a personal computer, server, or network device, etc.) to execute the methods of each embodiment of the present application.

[0136] It is worth noting that in the embodiment of the above-mentioned search device, the various units and modules included are only divided according to functional logic, but are not limited to the above-mentioned division, as long as the corresponding functions can be achieved; in addition, the specific names of the functional units are only for the convenience of distinguishing each other, and are not used to limit the scope of protection of this application.

[0137] Note that the above are only preferred embodiments of the present application and the technical principles used. Those skilled in the art will understand that the present application is not limited to the specific embodiments herein, and that various obvious changes, readjustments and substitutions can be made by those skilled in the art without departing from the scope of protection of the present application. Therefore, although the present application is described in more detail through the above embodiments, the present application is not limited to the above embodiments, and may include more other equivalent embodiments without departing from the concept of the present application, and the scope of the present application is determined by the scope of the appended claims.

Claims

1. A device trusted connection method based on the OpenHarmony system, characterized in that: The method comprises: When a plurality of devices are started to be networked into a local area network, the plurality of devices are allocated as star flash master and slave nodes according to a distributed soft bus protocol to obtain a star flash master node and at least one star flash slave node; For any StarShine slave node, send the device trustworthiness certificate of the StarShine slave node to the StarShine master node; The Star Flash master node performs trust authentication on the Star Flash slave node according to the device trust certificate. If the authentication is successful, a trusted identity is assigned to the Star Flash slave node and the trusted identity is broadcast to other Star Flash slave nodes; After the networking is completed, passive trusted authentication of the Star Flash slave node and active trusted authentication of the Star Flash master node are performed periodically.

2. The method according to claim 1, characterized in that The Star Flash master node performs trustworthy authentication on the Star Flash slave node according to the device trustworthy certificate, including: The Star Flash master node performs hardware trust authentication on the Star Flash slave node according to the device trust certificate; The Star Flash master node performs software trustworthiness authentication on the Star Flash slave node based on the device trustworthiness certificate.

3. The method according to claim 2, characterized in that The device trustworthiness certificate includes hardware specification measurement value, model, IP and MAC, and the hardware specification measurement value is the value obtained by hashing the hardware specification parameters of the device when it leaves the factory; The Star Flash master node performs hardware trust authentication on the Star Flash slave node according to the device trust certificate, including: After receiving the device trust certificate of any Star Flash slave node, the Star Flash master node detects the hardware specification parameters of the Star Flash slave node according to the model in the device trust certificate, and determines the corresponding hardware specification measurement comparison value according to the detected hardware specification parameters; The hardware specification measurement comparison value is compared with the hardware specification measurement value in the device trustworthy certificate. If they are consistent and the IP and MAC in the device trustworthy certificate are within the permitted range of network control, the hardware trustworthy authentication is passed.

4. The method according to claim 3, characterized in that: The detecting the hardware specification parameters of the Star Flash slave node according to the model in the device trusted certificate, and determining the corresponding hardware specification metric comparison value according to the detected hardware specification parameters, includes: Obtain a hardware detection strategy corresponding to the model according to the model in the device trustworthy certificate, and obtain initial hardware specification parameters of the Star Flash slave node based on the hardware detection strategy; Generating a hardware specification message based on the initial hardware parameters in accordance with a preset message format; A preset encrypted hash calculation is performed on the hardware specification message to obtain a hardware specification measurement comparison value.

5. The method according to claim 2, characterized in that: The Star Flash master node performs software trustworthiness authentication on the Star Flash slave node according to the device trustworthiness certificate, including: Obtaining the initial software function of the Star Flash slave node according to the model in the device trust certificate; Based on the initial software function, software trustworthiness authentication is performed on the service in the Star Flash slave node.

6. The method according to claim 1, characterized in that The step of allocating a trusted identity to the Star Flash slave node includes: A trusted identity is assigned to the Star Flash slave node according to the identity generation specification.

7. The method according to claim 1, characterized in that The periodic passive trusted authentication of the Star Flash slave node and the active trusted authentication of the Star Flash master node include: For any of the Star Flash slave nodes, according to the first cycle, the device trust certificate, trusted identity and timestamp of the Star Flash slave node are periodically synchronized to the Star Flash master node; According to the second cycle, the Star Flash master node sends a trusted authentication request to all the Star Flash slave nodes in the local area network; The Star Flash slave node periodically feeds back the device trustworthiness certificate, trusted identity and timestamp of the Star Flash slave node to the Star Flash master node according to the trusted authentication request; The Star Flash master node performs trustworthy authentication on the Star Flash slave node based on the device trustworthy certificate, trusted identity and timestamp.

8. A trusted connection device for devices based on the OpenHarmony system, characterized in that: include: A node allocation module is used to allocate the multiple devices to Star Flash master and slave nodes according to the distributed soft bus protocol when starting to network the multiple devices into a local area network, so as to obtain a Star Flash master node and at least one Star Flash slave node; A sending module, used for sending the device trustworthiness certificate of any StarShine slave node to the StarShine master node; A trusted authentication module is used for the Star Flash master node to perform trusted authentication on the Star Flash slave node according to the device trusted certificate. If the authentication is successful, a trusted identity is assigned to the Star Flash slave node and the trusted identity is broadcast to other Star Flash slave nodes; The periodic authentication module is used to periodically perform passive trusted authentication of the Star Flash slave nodes and active trusted authentication of the Star Flash master nodes after the networking is completed.

9. A device trusted connection device based on the OpenHarmony system, characterized in that: include: one or more processors; a storage device for storing one or more programs, When the one or more programs are executed by the one or more processors, the one or more processors implement the device trusted connection method based on the OpenHarmony system as described in any one of claims 1-7.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the device trusted connection method based on the OpenHarmony system as described in any one of claims 1 to 7 is implemented.

Images