Device cloud platform user authentication and authorization system and method

Abstract

The application provides a device cloud platform user authentication and authorization system and method, comprising: a device access module, used for connecting the cloud platform and each Internet of Things device in distributed communication; a management module, used for managing each Internet of Things device and user information corresponding to each Internet of Things device after the communication connection is completed, constructing authentication and authorization business logic, and configuring in the cloud platform to obtain a user authentication and authorization mechanism; and an authentication and authorization module, used for receiving a user login request of the Internet of Things device based on the cloud platform in real time, performing full-process authentication and authorization on the user login authorization request according to the user authentication and authorization mechanism, and logging in the cloud platform when the authentication and authorization pass. The effective identity verification and authorization operation of the user are realized, and the security and reliability of the user logging in the cloud platform are ensured.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of computer, in particular to a device cloud platform user authentication and authorization system and method. BACKGROUND

[0002] At present, with the rapid development of Internet of Things technology, a large number of devices access the cloud platform, and the device cloud platform faces complex user management, security authentication and authorization access requirements;

[0003] The traditional user authentication and authorization method often has problems such as complex development, high maintenance cost, and difficult security guarantee when facing massive device connection, diversified user roles and frequent permission changes;

[0004] Therefore, in order to overcome the above technical problems, the present application provides a device cloud platform user authentication and authorization system and method, which introduces Spring Boot to simplify configuration and rapid development, providing an efficient way to build cloud platform backend services; Apache Shiro framework has powerful identity verification, authorization and access control functions, and can accurately control user access permissions to cloud platform resources and associated devices. SUMMARY

[0005] The present application provides a device cloud platform user authentication and authorization system and method, which is connected with the cloud platform through distributed communication of each Internet of Things device, so as to facilitate the management of user information of each Internet of Things device through the cloud platform. Secondly, the authentication and authorization business logic is constructed and configured in the cloud platform, which realizes the accurate and reliable construction of user authentication and authorization mechanism, provides convenience for cloud platform user authentication and authorization, and finally realizes effective identity verification and authorization operation of users through receiving user login request of Internet of Things devices and full-process authentication and authorization operation of the cloud platform, which ensures the security and reliability of user login to the cloud platform.

[0006] The present application provides a device cloud platform user authentication and authorization system, comprising:

[0007] The device access module is used for connecting the cloud platform with each Internet of Things device through distributed communication;

[0008] The management module is used for managing each Internet of Things device and the user information corresponding to each Internet of Things device after communication connection, constructing authentication and authorization business logic, and configuring in the cloud platform to obtain user authentication and authorization mechanism;

[0009] The authentication authorization module is configured to receive a user login request of the Internet of Things device in real time based on the cloud platform, perform full-process authentication and authorization on the user login authorization request according to a user authentication authorization mechanism, and log in the cloud platform when the authentication authorization is passed.

[0010] Preferably, the device cloud platform user authentication and authorization system comprises a device access module.

[0011] The communication protocol construction unit is configured to collect communication information of each Internet of Things device and the cloud platform, and construct a communication protocol of each Internet of Things device and the cloud platform according to the communication information of each Internet of Things device and the cloud platform.

[0012] The distributed communication network acquisition unit is configured to acquire a distributed communication network of the cloud platform and each Internet of Things device.

[0013] The distributed communication connection unit is configured to perform distributed communication connection between each Internet of Things device and the cloud platform in the distributed communication network according to the communication protocol of each Internet of Things device and the cloud platform.

[0014] Preferably, the mechanism acquisition module of the device cloud platform user authentication and authorization system comprises an authentication authorization business logic, which is constructed by integrating a Spring Boot framework to carry a Web service and embedding an Apache Shiro framework to construct a management and control authentication authorization process.

[0015] Preferably, the communication protocol construction unit of the device cloud platform user authentication and authorization system comprises:

[0016] The information acquisition subunit is configured to acquire a device name of each Internet of Things device, and read device address information of each Internet of Things device.

[0017] The first protocol element determination subunit is configured to generate a first protocol element corresponding to each Internet of Things device according to the device name and the corresponding device address information of each Internet of Things device.

[0018] The second protocol element determination subunit is configured to read platform address information of the cloud platform and a platform name of the cloud platform, and generate a second protocol element corresponding to the cloud platform according to the platform address information of the cloud platform and the platform name of the cloud platform.

[0019] The communication protocol generation subunit is configured to acquire a communication mode of the cloud platform and each Internet of Things device, and perform element fusion on each first protocol element and second protocol element according to the communication mode of the cloud platform and each Internet of Things device, to generate a communication protocol of each Internet of Things device and the cloud platform.

[0020] Preferably, the management module of the device cloud platform user authentication and authorization system comprises:

[0021] The business logic obtaining unit is configured to:

[0022] obtain an authentication mode for authenticating a user and an authentication dimension for authenticating the user, and determine authentication business logic for the user according to the authentication mode and the authentication dimension;

[0023] invoke a user management table, determine access rights of each user according to the user management table, and determine authorized business logic according to the access rights of each user;

[0024] The association unit is configured to add a first verification serial number to the authentication business logic, add a second verification serial number to the authorized business logic, and associate the authentication business logic and the authorized business logic according to the first verification serial number and the second verification serial number to obtain authentication and authorization business logic;

[0025] The configuration unit is configured to create an authentication and authorization management interval in the cloud platform, and configure the authentication and authorization business logic in the authentication and authorization management interval to obtain a user authentication and authorization mechanism.

[0026] Preferably, a device cloud platform user authentication and authorization system, a management module, comprising:

[0027] The device management interval construction unit is configured to:

[0028] obtain device names of each Internet of Things device, and construct a plurality of device management intervals in the cloud platform according to the device names of each Internet of Things device;

[0029] manage device information of the corresponding Internet of Things device according to the device management interval, wherein the device information includes a device number of the Internet of Things device and a plurality of user accounts corresponding to the Internet of Things device;

[0030] The user management interval construction unit is configured to:

[0031] construct a user management interval according to the plurality of user accounts corresponding to each device management interval, and construct a sub-user management interval consistent with the device management interval in the user management interval;

[0032] obtain a user management table of each Internet of Things device, and read the user management table of each Internet of Things device to determine an accessible range of each user of each Internet of Things device for information access to the cloud platform;

[0033] sort the user access rights according to an order from large to small of the accessible range of each user of each Internet of Things device for information access to the cloud platform, and determine an access right level of each user of each Internet of Things device for the cloud platform;

[0034] store user information of the corresponding Internet of Things device and the access right level of each user in the sub-user management interval;

[0035] The management interval packaging unit is used for:

[0036] Corresponding connection between the sub-user management interval and the device management interval, and first packaging of the device management interval and the user management interval according to the connection result to obtain a device-user management interval;

[0037] Construction of an authorization authentication management interval, and second packaging of the device-user management interval and the authorization authentication management interval;

[0038] The verification analysis unit is used for:

[0039] Creating a data receiving interface for the authorization authentication management interval, and receiving real-time user login information according to the data receiving interface;

[0040] Based on the authorization authentication management interval and calling the device-user management interval to analyze the real-time login information of the user.

[0041] Preferably, a device cloud platform user authentication and authorization system, an authentication authorization module, comprising:

[0042] The request receiving unit is used for receiving a user login request of an Internet of Things device based on a cloud platform in real time;

[0043] The authentication unit is used for authenticating a user account based on the user login request;

[0044] The authorization unit is used for determining the access permission level of the user according to the user account when the user authentication is passed, and calling accessible information in the cloud platform according to the access permission level, and authorizing the user account according to the accessible information.

[0045] Preferably, a device cloud platform user authentication and authorization system, an authentication unit, comprising:

[0046] The request reading subunit is used for reading the user login request of the Internet of Things device based on the cloud platform, determining the login code and the user account of the user login request;

[0047] The authentication subunit is used for:

[0048] Calling a reference login code and judging whether the reference login code is consistent with the login code of the user login request;

[0049] If the reference login code is consistent with the login code of the user login request, reading the reference user account corresponding to the reference login code;

[0050] If the reference login code is not consistent with the login code of the user login request, it is determined that the user authentication is not passed;

[0051] Judge whether the reference user account is consistent with the user account of the user login request or not;

[0052] When the reference user account is consistent with the user account of the user login request, it is determined that the user authentication is passed; otherwise, it is determined that the user authentication is not passed.

[0053] The application provides a device cloud platform user authentication and authorization method, comprising:

[0054] Step 1: distributed communication connection between the cloud platform and each Internet of Things device;

[0055] Step 2: after completing the communication connection, the user information of each Internet of Things device and the user information corresponding to each Internet of Things device are managed, at the same time, the authentication and authorization business logic is constructed, and the cloud platform is configured to obtain the user authentication and authorization mechanism;

[0056] Step 3: based on the cloud platform, the user login request of the Internet of Things device is received in real time, and the user login authorization request is authenticated and authorized in the whole process according to the user authentication and authorization mechanism, and when the authentication and authorization are passed, the cloud platform is logged in.

[0057] Preferably, in step 1, the distributed communication connection between the cloud platform and each Internet of Things device comprises:

[0058] The communication information of each Internet of Things device and the cloud platform is collected, and the communication protocol of each Internet of Things device and the cloud platform is constructed according to the communication information of each Internet of Things device and the cloud platform;

[0059] The distributed communication network of the cloud platform and each Internet of Things device is obtained;

[0060] According to the communication protocol of each Internet of Things device and the cloud platform, the distributed communication connection between each Internet of Things device and the cloud platform in the distributed communication network is realized.

[0061] Compared with the prior art, the application has the following beneficial effects:

[0062] By connecting each Internet of Things device and the cloud platform in distributed communication, the user information of each Internet of Things device is managed through the cloud platform, secondly, the authentication and authorization business logic is constructed and configured in the cloud platform to accurately and reliably construct the user authentication and authorization mechanism, which provides convenience for cloud platform user authentication and authorization, finally, the user login request of the Internet of Things device is received and authenticated and authorized in the whole process through the cloud platform, which realizes effective identity verification and authorization operation of the user, and ensures the security and reliability of the user logging into the cloud platform.

[0063] Other features and advantages of the present application will be set forth in the description that follows, and in part will be apparent from the description, or can be learned by practice of the application. The purposes and other advantages of the present application will be realized and attained by the structure particularly pointed out in the written description and claims hereof.

[0064] The technical solutions of the present application are described in further detail below with the aid of the accompanying drawings and examples. BRIEF DESCRIPTION OF DRAWINGS

[0065] The accompanying drawings are included to provide a further understanding of the present application, and constitute a part of the specification, illustrate embodiments of the present application and are used to explain the present application, and do not constitute a limitation of the present application. In the drawings:

[0066] Figure 1 is a structural diagram of a device cloud platform user authentication and authorization system in an embodiment of the present application;

[0067] Figure 2 is a structural diagram of a device access module in a device cloud platform user authentication and authorization system in an embodiment of the present application;

[0068] Figure 3 is a flowchart of a device cloud platform user authentication and authorization method in an embodiment of the present application. DETAILED DESCRIPTION

[0069] The preferred embodiments of the present application are described below with reference to the accompanying drawings, and it should be understood that the preferred embodiments described herein are only used to illustrate and explain the present application, and do not limit the present application.

[0070] Embodiment 1:

[0071] The present embodiment provides a device cloud platform user authentication and authorization system, as shown in Figure 1 , comprising:

[0072] A device access module is used to connect the cloud platform and each Internet of Things device in distributed communication;

[0073] A management module is used to manage each Internet of Things device and the user information corresponding to each Internet of Things device after the communication connection is completed, and at the same time, construct authentication and authorization business logic and configure it in the cloud platform to obtain a user authentication and authorization mechanism;

[0074] An authentication and authorization module is used to receive the user login request of the Internet of Things device based on the cloud platform in real time, and perform full-process authentication and authorization on the user login authorization request according to the user authentication and authorization mechanism, and when the authentication and authorization is passed, log in to the cloud platform.

[0075] In this embodiment, the distributed communication connection refers to connecting each Internet of Things device to the cloud platform respectively, and the communication between each Internet of Things device and the cloud platform does not affect each other.

[0076] In this embodiment, the authentication and authorization business logic is used to represent the execution order between the corresponding processes or authentication steps when performing the authentication and authorization business.

[0077] In this embodiment, the user authentication and authorization mechanism refers to the scheme or strategy of user authentication and authorization.

[0078] In this embodiment, the full-process authentication and authorization refers to verifying and authorizing the user login authorization request step by step according to the authentication process.

[0079] The working principle and beneficial effects of the above technical solution are: by connecting each Internet of Things device to the cloud platform in a distributed communication connection, it is convenient to manage the user information of each Internet of Things device through the cloud platform, secondly, the authentication and authorization business logic is constructed and configured on the cloud platform, which realizes the accurate and reliable construction of the user authentication and authorization mechanism, and provides convenience for the cloud platform user authentication and authorization, finally, the user login request of the Internet of Things device is received and full-process authentication and authorization operation through the cloud platform, which realizes effective identity verification and authorization operation for the user, and ensures the security and reliability of the user logging into the cloud platform.

[0080] Embodiment 2:

[0081] On the basis of embodiment 1, this embodiment provides a device cloud platform user authentication and authorization system, as shown in Figure 2 The device access module comprises:

[0082] The communication protocol construction unit is used to collect the communication information of each Internet of Things device and the cloud platform, and construct the communication protocol of each Internet of Things device and the cloud platform according to the communication information of each Internet of Things device and the cloud platform.

[0083] The distributed communication network acquisition unit is used to acquire the distributed communication network of the cloud platform and each Internet of Things device.

[0084] The distributed communication connection unit is used to connect each Internet of Things device and the cloud platform in a distributed communication connection in the distributed communication network according to the communication protocol of each Internet of Things device and the cloud platform.

[0085] In this embodiment, the communication information refers to the conditions and communication requirements followed when each Internet of Things device communicates with the cloud platform.

[0086] In this embodiment, the communication protocol is used to represent the requirements and conditions to be achieved when each Internet of Things device communicates with the cloud platform.

[0087] The working principle and beneficial effects of the technical solution are: by obtaining the communication information of each Internet of Things device and the cloud platform, the communication protocol of each Internet of Things device and the cloud platform is accurately and effectively determined, then the distributed communication network of the cloud platform and each Internet of Things device is obtained, and finally the distributed communication connection of the cloud platform and each Internet of Things device is realized according to the communication protocol and the distributed communication network, which provides convenience for cloud platform user authentication and authorization management.

[0088] Embodiment 3

[0089] Based on embodiment 1, the embodiment provides a device cloud platform user authentication and authorization system, and the mechanism acquisition module comprises: the authentication and authorization business logic is built by embedding the Apache Shiro framework based on the integrated Spring Boot framework to carry the Web service and build the management and control authentication and authorization process.

[0090] Embodiment 4

[0091] Based on embodiment 2, the embodiment provides a device cloud platform user authentication and authorization system, and the communication protocol construction unit comprises:

[0092] The information acquisition subunit is configured to acquire the device name of each Internet of Things device, and read the device address information of each Internet of Things device;

[0093] The first protocol element determination subunit is configured to generate the first protocol element corresponding to each Internet of Things device according to the device name and the corresponding device address information of each Internet of Things device;

[0094] The second protocol element determination subunit is configured to read the platform address information of the cloud platform and the platform name of the cloud platform, and generate the second protocol element corresponding to the cloud platform according to the platform address information of the cloud platform and the platform name of the cloud platform;

[0095] The communication protocol generation subunit is configured to acquire the communication mode of the cloud platform and each Internet of Things device, and perform element fusion on each first protocol element and second protocol element according to the communication mode of the cloud platform and each Internet of Things device, to generate the communication protocol of each Internet of Things device and the cloud platform.

[0096] In this embodiment, the first protocol element is generated according to the device name and the corresponding device address information of each Internet of Things device, and is a group of parameters in the communication protocol.

[0097] In this embodiment, the second protocol element is generated according to the platform address information of the platform and the platform name of the cloud platform, and is another group of parameters in the communication protocol.

[0098] The working principle and beneficial effects of the technical solution are as follows: by obtaining the device name and the corresponding device address information of each Internet of Things device as the first protocol element, a set of communication protocol parameters between the Internet of Things device and the cloud platform is determined, then, the platform address information and the platform name of the cloud platform are used to generate the second protocol element corresponding to the cloud platform, another set of communication protocol parameters between the Internet of Things device and the cloud platform is effectively determined, finally, the first protocol element and the second protocol element are fused to accurately and effectively construct the communication protocol of each Internet of Things device and the cloud platform, which provides convenience and protection for user information management.

[0099] Embodiment 5:

[0100] Based on the embodiment 1, the embodiment provides a device cloud platform user authentication and authorization system, a management module, comprising:

[0101] A business logic acquisition unit is configured to:

[0102] acquire an authentication mode for authenticating a user and an authentication dimension for authenticating the user, and determine authentication business logic for the user according to the authentication mode and the authentication dimension;

[0103] acquire the user management table, determine the access rights of each user according to the user management table, and determine authorization business logic according to the access rights of each user;

[0104] An association unit is configured to add a first verification serial number to the authentication business logic, add a second verification serial number to the authorization business logic, and associate the authentication business logic and the authorization business logic according to the first verification serial number and the second verification serial number to obtain authentication and authorization business logic;

[0105] A configuration unit is configured to create an authentication and authorization management interval in the cloud platform, and configure the authentication and authorization business logic in the authentication and authorization management interval to obtain a user authentication and authorization mechanism.

[0106] In the embodiment, the authentication dimension refers to the corresponding authentication item category when authenticating the user.

[0107] In the embodiment, the first verification serial number refers to the serial number marking of the authentication business logic.

[0108] In the embodiment, the second verification serial number refers to the serial number marking of the authorization business logic.

[0109] In the embodiment, the authentication and authorization management interval refers to a limited range for limiting the authentication and authorization of user information, for example, the authentication and authorization of the basic information of the user.

[0110] The working principle and beneficial effects of the technical solution are as follows: by determining the authentication dimension for authenticating the user, the authentication business logic and the authorization business logic of the user, and associating and summarizing the authentication business logic and the authorization business logic, the authentication and authorization business logic is accurately and effectively determined, and finally, the authentication and authorization management interval is created in the cloud platform, and the authentication and authorization business logic is configured in the authentication and authorization management interval, which accurately and effectively formulates the user authentication and authorization mechanism, and provides protection for user information.

[0111] Embodiment 6:

[0112] On the basis of embodiment 1, the embodiment provides a device cloud platform user authentication and authorization system, a management module, comprising:

[0113] A device management interval construction unit is configured to:

[0114] Obtain the device names of each Internet of Things device, and construct a plurality of device management intervals in the cloud platform according to the device names of each Internet of Things device;

[0115] According to the device management interval, the device information of the corresponding Internet of Things device is managed, wherein the device information includes the device number of the Internet of Things device and the multi-user account corresponding to the Internet of Things device;

[0116] A user management interval construction unit is configured to:

[0117] According to the multi-user account corresponding to each device management interval, a user management interval is constructed, and a sub-user management interval consistent with the device management interval is constructed in the user management interval;

[0118] Obtain the user management table of each Internet of Things device, and read the user management table of each Internet of Things device to determine the accessible range of each user of each Internet of Things device for information access to the cloud platform;

[0119] According to the order from large to small of the accessible range of each user of each Internet of Things device for information access to the cloud platform, the user access right is sorted, and the access right level of each user of each Internet of Things device to the cloud platform is determined;

[0120] The user information of the corresponding Internet of Things device and the access right level of each user are stored in the sub-user management interval;

[0121] A management interval packaging unit is configured to:

[0122] The sub-user management interval is connected with the device management interval, and the device management interval and the user management interval are first packaged according to the connection result to obtain a device-user management interval;

[0123] The authorization authentication management interval is constructed, and the device-user management interval is secondly encapsulated with the authorization authentication management interval;

[0124] The verification analysis unit is configured to:

[0125] A data receiving interface is created for the authorization authentication management interval, and real-time user login information is received according to the data receiving interface;

[0126] The real-time login information of the user is analyzed based on the authorization authentication management interval and the device-user management interval.

[0127] In this embodiment, the device management interval refers to all devices corresponding to the management of the Internet of Things devices in the cloud platform.

[0128] In this embodiment, the user management interval refers to a specific user object corresponding to the management of different device management.

[0129] In this embodiment, the sub-user management interval refers to the corresponding relationship between the user and the device.

[0130] In this embodiment, the user management table refers to a data table recording the user allowed to access each Internet of Things device and the data content that can be accessed by different users when accessing the Internet of Things device.

[0131] In this embodiment, the access permission level is determined according to the accessible range of different users. The larger the accessible range, the greater the access permission of the user.

[0132] In this embodiment, the corresponding connection between the sub-user management interval and the device management interval refers to determining the access relationship between the user and the device.

[0133] In this embodiment, the authorization authentication management interval refers to the permission range when the user's permission is configured according to the user's access permission level.

[0134] The working principle and beneficial effects of the above technical solution are: by constructing multiple device management intervals, device information management of corresponding Internet of Things devices is realized according to the device management interval, at the same time, the user management interval and the sub-user management interval are constructed, and the accessible range of information access of each user to the cloud platform is effectively determined in combination with the user management table of each Internet of Things device, secondly, the access permission level of each user to the cloud platform is determined according to the determined accessible range, thereby facilitating effective limitation of the access management process of different users to user information, and also ensuring the security of user information, finally, the sub-user management interval and the device management interval are encapsulated, and the device-user management interval and the authorization authentication management interval are encapsulated, and a data receiving interface is constructed according to the encapsulation result, realizing timely and effective analysis and processing of user login information received by the data receiving interface, ensuring the reliability of the authentication and authorization management of the user.

[0135] Embodiment 7:

[0136] On the basis of Embodiment 1, the present embodiment provides a device cloud platform user authentication and authorization system, an authentication and authorization module, comprising:

[0137] A request receiving unit is configured to receive a user login request of an Internet of Things device based on the cloud platform in real time.

[0138] An authentication unit is configured to authenticate a user account based on the user login request.

[0139] An authorization unit is configured to, when the user is authenticated, determine the access permission level of the user according to the user account, and retrieve accessible information in the cloud platform according to the access permission level, and at the same time, authorize the user account according to the accessible information.

[0140] In this embodiment, the user login request can be request information used to indicate login to the cloud platform, including a login code and a user account.

[0141] In this embodiment, the access permission level refers to the level of information accessible to the user in the cloud platform, and the higher the level, the more information accessible to the cloud platform.

[0142] The working principle and beneficial effects of the above technical solution are: by receiving a user login request and performing authentication, the security of the cloud platform is effectively ensured, when the authentication is passed, the accessible information is effectively retrieved based on the access permission level of the user, and a large number of users can be more flexibly managed, and the access permission of different user roles and business needs can be easily adjusted.

[0143] Embodiment 8:

[0144] Based on Embodiment 7, the present embodiment provides a device cloud platform user authentication and authorization system, an authentication unit, comprising:

[0145] A request reading subunit is configured to read a user login request of the cloud platform to the IoT device, determine a login code and a user account of the user login request;

[0146] An authentication subunit is configured to:

[0147] retrieve the reference login code and determine whether the reference login code is consistent with the login code of the user login request;

[0148] if the reference login code is consistent with the login code of the user login request, read a reference user account corresponding to the reference login code;

[0149] if the reference login code is not consistent with the login code of the user login request, determine that the user authentication is not passed;

[0150] determine whether the reference user account is consistent with the user account of the user login request;

[0151] if the reference user account is consistent with the user account of the user login request, determine that the user authentication is passed; otherwise, determine that the user authentication is not passed.

[0152] In the present embodiment, the login code refers to a hash value of a password.

[0153] In the present embodiment, the user account refers to a username of the user or an ID of the user.

[0154] In the present embodiment, the reference login code refers to a login code stored in advance in the cloud platform and used as a measurement standard for matching and verifying the login code in the user login request.

[0155] In the present embodiment, the reference user account is account information determined according to the reference login code and used as a measurement standard for determining whether the user account of the user login request is consistent.

[0156] The working principle and beneficial effects of the above technical solution are as follows: by reading and analyzing the user login request, the login code and the user account of the user login request are effectively obtained, and then double verification is effectively performed based on the reference user account and the reference login code stored in the cloud platform, the security of the cloud platform is effectively guaranteed, the drawbacks of illegal access are avoided, and the access of the user to the cloud platform resources is effectively managed.

[0157] Embodiment 9

[0158] The present embodiment provides a device cloud platform user authentication and authorization method, as shown in Figure 3 The present embodiment provides a device cloud platform user authentication and authorization method, as shown in

[0159] Step 1: distribute communication connection between the cloud platform and each Internet of Things device;

[0160] Step 2: after completing the communication connection, manage each Internet of Things device and the user information corresponding to each Internet of Things device, meanwhile, construct the authentication and authorization business logic and configure in the cloud platform to obtain the user authentication and authorization mechanism;

[0161] Step 3: based on the cloud platform, receive the user login request of the Internet of Things device in real time, and according to the user authentication and authorization mechanism, perform full-process authentication and authorization on the user login authorization request, and when the authentication and authorization pass, log in the cloud platform.

[0162] The working principle and beneficial effects of the above technical solution are: by distributing communication connection between each Internet of Things device and the cloud platform, it is convenient to manage the user information of each Internet of Things device through the cloud platform, secondly, construct the authentication and authorization business logic and configure in the cloud platform to realize accurate and reliable construction of the user authentication and authorization mechanism, which provides convenience for cloud platform user authentication and authorization, finally, through the cloud platform, receive the user login request of the Internet of Things device and perform full-process authentication and authorization operation, realize effective identity verification and authorization operation of the user, and ensure the security and reliability of the user logging into the cloud platform.

[0163] Embodiment 10:

[0164] Based on embodiment 9, the embodiment provides a device cloud platform user authentication and authorization method, in step 1, distribute communication connection between the cloud platform and each Internet of Things device, including:

[0165] Collect the communication information of each Internet of Things device and the cloud platform, and construct the communication protocol of each Internet of Things device and the cloud platform according to the communication information of each Internet of Things device and the cloud platform;

[0166] Obtain the distributed communication network of the cloud platform and each Internet of Things device;

[0167] According to the communication protocol of each Internet of Things device and the cloud platform, distribute communication connection between each Internet of Things device and the cloud platform in the distributed communication network.

[0168] The working principle and beneficial effects of the above technical solution are: by obtaining the communication information of each Internet of Things device and the cloud platform, accurate and effective determination of the communication protocol of each Internet of Things device and the cloud platform is realized, secondly, the distributed communication network of the cloud platform and each Internet of Things device is obtained, and finally, according to the communication protocol and the distributed communication network, the distributed communication connection between the cloud platform and each Internet of Things device is realized, which provides convenience for cloud platform user authentication and authorization management.

[0169] Obviously, many modifications and variations of the present application are possible in light of the above teachings. It is, therefore, to be understood that within the scope of the appended claims and their equivalents, the application can be practiced otherwise than as specifically described.

Claims

1. A device cloud platform user authentication and authorization system, characterized in that, include: The device access module is used to establish distributed communication connections between the cloud platform and various IoT devices; The management module is used to manage each IoT device and the user information corresponding to each IoT device after the communication connection is completed. At the same time, it builds the authentication and authorization business logic, configures it in the cloud platform, and obtains the user authentication and authorization mechanism. The authentication and authorization module is used to receive user login requests from IoT devices in real time based on the cloud platform, and to perform full-process authentication and authorization of user login authorization requests according to the user authentication and authorization mechanism. When the authentication and authorization are successful, the user logs into the cloud platform. The management module includes: Business logic acquisition unit, used for: Obtain the authentication method and authentication dimensions for users, and determine the authentication business logic for users based on the authentication method and authentication dimensions. Retrieve the user management table, determine the access permissions for each user based on the user management table, and determine the authorization business logic based on the access permissions for each user; The association unit is used to add a first verification sequence number to the authentication business logic and a second verification sequence number to the authorization business logic. At the same time, the authentication business logic and the authorization business logic are associated based on the first verification sequence number and the second verification sequence number to obtain the authentication and authorization business logic. The configuration unit is used to create an authentication and authorization management area in the cloud platform, and to configure the authentication and authorization business logic in the authentication and authorization management area to obtain the user authentication and authorization mechanism; The management module includes: Equipment management area construction unit, used for: Obtain the device name of each IoT device, and build multiple device management areas in the cloud platform based on the device name of each IoT device; The device information of the corresponding IoT devices is managed according to the device management area. The device information includes: the device number of the IoT device and the multi-user account corresponding to the IoT device. User management interval construction unit, used for: Each device management zone is used to construct a user management zone based on the multiple user accounts corresponding to each device management zone. At the same time, a sub-user management zone that is consistent with the device management zone is constructed within the user management zone. Obtain the user management table for each IoT device, and read the user management table for each IoT device to determine the access scope of each user of each IoT device to access information on the cloud platform; The user access permissions are sorted in descending order of the accessible range of information access to the cloud platform for each user in each IoT device, and the access permission level of each user in each IoT device to the cloud platform is determined. The sub-user management area stores user information for the corresponding IoT devices and the access permission levels for each user. Management interval encapsulation unit, used for: Connect the sub-user management area to the device management area accordingly. At the same time, based on the connection result, encapsulate the device management area and the user management area to obtain the device-user management area. Construct an authorization and authentication management zone, and simultaneously encapsulate the device-user management zone and the authorization and authentication management zone in a second way; The verification and analysis unit is used for: Create a data receiving interface for the authorization and authentication management area, and receive real-time user login information according to the data receiving interface; Based on the authorization and authentication management area, and by calling the device-user management area, the user's real-time login information is analyzed.

2. The device cloud platform user authentication and authorization system according to claim 1, characterized in that, The device access module includes: The communication protocol construction unit is used to collect communication information between each IoT device and the cloud platform, and to construct the communication protocol between each IoT device and the cloud platform based on the communication information between each IoT device and the cloud platform. Distributed communication network acquisition unit, used to acquire the distributed communication network between the cloud platform and various IoT devices; The distributed communication connection unit is used to establish distributed communication connections between each IoT device and the cloud platform in a distributed communication network according to the communication protocols between each IoT device and the cloud platform.

3. The device cloud platform user authentication and authorization system according to claim 1, characterized in that, The mechanism acquisition module includes: the authentication and authorization business logic is a management authentication and authorization process built based on the integration of the Spring Boot framework to host web services and the embedding of the Apache Shiro framework.

4. The device cloud platform user authentication and authorization system according to claim 2, characterized in that, Communication protocol construction unit, including: The information acquisition subunit is used to acquire the device name of each IoT device and read the device address information of each IoT device. The first protocol element determination subunit is used to generate the first protocol element corresponding to each IoT device based on the device name and corresponding device address information of each IoT device. The second protocol element determination subunit is used to read the platform address information and platform name of the cloud platform, and generate the second protocol element corresponding to the cloud platform based on the platform address information and platform name of the cloud platform. The communication protocol generation subunit is used to obtain the communication methods between the cloud platform and each IoT device, and to fuse each first protocol element and second protocol element according to the communication methods between the cloud platform and each IoT device to generate the communication protocol between each IoT device and the cloud platform.

5. The device cloud platform user authentication and authorization system according to claim 1, characterized in that, The authentication and authorization module includes: The request receiving unit is used to receive user login requests from IoT devices in real time based on the cloud platform. The authentication unit is used to authenticate user accounts based on user login requests; The authorization unit is used to determine the user's access permission level based on the user account when the user authentication is successful, retrieve the access information in the cloud platform according to the access permission level, and authorize the user account according to the access information.

6. The device cloud platform user authentication and authorization system according to claim 5, characterized in that, The authentication unit includes: The request read sub-unit is used to read user login requests from IoT devices based on the cloud platform, and to determine the login code and user account of the user login request; The authentication subunit is used for: Retrieve the baseline login code and determine whether the baseline login code matches the login code requested by the user. If the base login code matches the login code requested by the user, read the base user account corresponding to the base login code; If the base login code does not match the login code requested by the user, then the user authentication is deemed unsuccessful. Determine whether the base user account matches the user account requested in the login request. If the base user account matches the user account requested by the user login, the user authentication is considered successful; otherwise, the user authentication is considered unsuccessful.

7. A method for user authentication and authorization on a device cloud platform, characterized in that, include: Step 1: Establish distributed communication connections between the cloud platform and various IoT devices; Step 2: After establishing the communication connection, manage each IoT device and the user information corresponding to each IoT device. At the same time, build the authentication and authorization business logic and configure it in the cloud platform to obtain the user authentication and authorization mechanism. Step 3: Receive user login requests from IoT devices in real time based on the cloud platform, and perform full-process authentication and authorization of user login authorization requests according to the user authentication and authorization mechanism. When the authentication and authorization are successful, log in to the cloud platform. Step 2 includes: Obtain the authentication method and authentication dimensions for users, and determine the authentication business logic for users based on the authentication method and authentication dimensions. Retrieve the user management table, determine the access permissions for each user based on the user management table, and determine the authorization business logic based on the access permissions for each user; Add a first verification sequence number to the authentication business logic and a second verification sequence number to the authorization business logic. At the same time, associate the authentication business logic and the authorization business logic based on the first verification sequence number and the second verification sequence number to obtain the authentication and authorization business logic. Create an authentication and authorization management zone in the cloud platform, and configure the authentication and authorization business logic in the authentication and authorization management zone to obtain the user authentication and authorization mechanism; Obtain the device name of each IoT device, and build multiple device management areas in the cloud platform based on the device name of each IoT device; The device information of the corresponding IoT devices is managed according to the device management area. The device information includes: the device number of the IoT device and the multi-user account corresponding to the IoT device. Each device management zone is used to construct a user management zone based on the multiple user accounts corresponding to each device management zone. At the same time, a sub-user management zone that is consistent with the device management zone is constructed within the user management zone. Obtain the user management table for each IoT device, and read the user management table for each IoT device to determine the access scope of each user of each IoT device to access information on the cloud platform; The user access permissions are sorted in descending order of the accessible range of information access to the cloud platform for each user in each IoT device, and the access permission level of each user in each IoT device to the cloud platform is determined. The sub-user management area stores user information for the corresponding IoT devices and the access permission levels for each user. Connect the sub-user management area to the device management area accordingly. At the same time, based on the connection result, encapsulate the device management area and the user management area to obtain the device-user management area. Construct an authorization and authentication management zone, and simultaneously encapsulate the device-user management zone and the authorization and authentication management zone in a second way; Create a data receiving interface for the authorization and authentication management area, and receive real-time user login information according to the data receiving interface; Based on the authorization and authentication management area, and by calling the device-user management area, the user's real-time login information is analyzed.

8. The device cloud platform user authentication and authorization method according to claim 7, characterized in that, Step 1 involves establishing distributed communication connections between the cloud platform and various IoT devices, including: Collect communication information between each IoT device and the cloud platform, and construct communication protocols between each IoT device and the cloud platform based on the communication information between each IoT device and the cloud platform. Obtain the distributed communication network between the cloud platform and various IoT devices; Based on the communication protocols between each IoT device and the cloud platform, distributed communication connections are established between each IoT device and the cloud platform in a distributed communication network.

Images