Multi-protocol self-adaptive gateway access method and device and electronic equipment

Abstract

The invention relates to the field of Internet of Things, in particular to a multi-protocol adaptive access gateway method and device and electronic equipment. The invention discloses a multi-protocol adaptive access gateway method, which comprises the following steps of: converting external multi-protocol equipment data into uniform format data; asynchronously caching the data in the unified format and uploading the data; and SM4 encryption and signature authentication are carried out on the transmitted data. Through adaptive access of multiple protocols, the cost and complexity of configuring multiple gateways by a user are reduced; the master-slave gateway mode enhances the flexibility and expandability of the system, so that the equipment can freely walk among different gateways; the software hierarchical design improves the processing efficiency and expandability of the system, so that the system can easily meet the access requirements of a large number of devices.

Description

Technical Field

[0001] This application relates to the field of Internet of Things, and particularly to a multi-protocol adaptive access gateway method, apparatus, and electronic device. Background Art

[0002] Existing Internet of Things gateway technologies have the following limitations: protocol singularity, traditional gateways only support a single communication protocol (such as Zigbee, WiFi), and users need to deploy multiple gateways to access devices with different protocols; strong dependence on the cloud, most gateways need to be connected to the cloud in real time to implement functions such as voice control and intelligent scenario linkage, and once the cloud terminal system fails, it will be paralyzed; performance bottleneck, the computing and storage capabilities of the gateway are limited, it is difficult to support large-scale device access, and it lacks local processing capabilities. Summary of the Invention

[0003] Based on this, it is necessary to provide a multi-protocol adaptive access method, apparatus, and electronic device for the above technical problems, aiming to solve the problems of poor protocol compatibility, strong dependence on the cloud, and insufficient security of existing Internet of Things gateways.

[0004] In a first aspect, an embodiment of the present application provides a multi-protocol adaptive access gateway method, including: Converting external multi-protocol device data into unified format data; Asynchronously caching the unified format data and uploading it; Performing SM4 encryption and signature authentication on the transmitted data.

[0005] In a second aspect, an embodiment of the present application further provides a multi-protocol adaptive access gateway apparatus, including: a main gateway, or at least one slave gateway, the main gateway further includes a multi-protocol support module, a software architecture module, and a hardware security module; the main gateway communicates with a cloud server, the slave gateway is connected to peripheral Internet of Things devices, and the apparatus is used to implement the method described in the first aspect.

[0006] In some embodiments, the multi-protocol support module includes Zigbee, Z-Wave, and Thread protocol parsing libraries, and supports dynamic extension of new protocols through the SDK.

[0007] In some embodiments, the software architecture module includes a southbound layer and a northbound layer, the southbound layer converts device protocol data into a unified internal format, and the northbound layer adapts the internal format data into platform protocol messages.

[0008] In some of these embodiments, the southbound layer converts the message content sent by the peripheral device according to the device protocol into northbound message information and sends it to the northbound layer, and converts the message content sent by the northbound layer into the southbound layer device protocol message and sends it to the peripheral device. The northbound layer is responsible for converting the message content sent by the southbound layer into platform message information according to the platform protocol and reporting it to the platform, and forwarding the content sent by the platform to the southbound layer.

[0009] In some of these embodiments, the hardware security module includes a TPM chip for storing and verifying keys.

[0010] In some of these embodiments, the security protocols supported by the hardware security module include TLS / SSL.

[0011] In a third aspect, an embodiment of the present application further provides an electronic device, including: At least one processor; and, A memory communicatively connected to the at least one processor; wherein, The memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the method described in the first aspect.

[0012] Compared with the prior art, the beneficial effects of the present application are as follows: Different from the prior art, the embodiments of the present application reduce the cost and complexity of users configuring multiple gateways through multi-protocol adaptive access; the master-slave gateway mode enhances the flexibility and scalability of the system, enabling devices to freely roam between different gateways; the adoption of domestic hardware and software platforms improves the autonomy, controllability and security of the system, meeting the strict requirements of industries such as banks for network security; the software hierarchical design improves the processing efficiency and scalability of the system, enabling the system to easily handle the access requirements of a large number of devices, and the protocol devices are connected to the gateway in the form of modules, which can reduce costs. BRIEF DESCRIPTION OF THE DRAWINGS

[0013] One or more embodiments are exemplarily illustrated by pictures in the corresponding drawings. These exemplary illustrations do not constitute limitations on the embodiments. Elements with the same reference numerals in the drawings are represented as similar elements, unless otherwise stated, and the drawings in the figures do not constitute a scale limitation.

[0014] Figure 1 is a schematic flowchart of a multi-protocol automatic access gateway method provided by an embodiment of the present application; Figure 2 is a schematic structural diagram of a multi-protocol automatic access gateway device provided by an embodiment of the present application; Figure 3It is a schematic diagram of the hardware structure of an electronic device provided by an embodiment of the present application. Detailed implementation manners

[0015] To make the objectives, technical solutions, and advantages of the embodiments of the present application clearer, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present application. Apparently, the described embodiments are some but not all of the embodiments of the present application. All other embodiments obtained by those of ordinary skill in the art based on the embodiments of the present application without creative efforts shall fall within the protection scope of the present application.

[0016] It should be noted that if there is no conflict, the various features in the embodiments of the present application can be combined with each other, and all are within the protection scope of the present application. In addition, although functional module division is performed in the device schematic diagram and the logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in a different order from the module division in the device or the flowchart. Furthermore, the terms "first", "second", "third", etc. adopted in the present application do not limit the data and execution order, but are only used to distinguish the same items or similar items with basically the same functions and effects.

[0017] Please refer to Figure 1 , Figure 1 An embodiment of the present application provides a multi-protocol adaptive access gateway method, including: Step S110: Convert external multi-protocol device data into unified format data; Step S120: Asynchronously cache the unified format data and upload it; Step S130: Perform SM4 encryption and signature authentication on the transmitted data.

[0018] Please refer to Figure 2 , Figure 2 An embodiment of the present application further provides a multi-protocol adaptive access gateway device, including: a main gateway 210, or at least one slave gateway 220, which can also be in a tree shape. The main gateway 210 further includes a multi-protocol support module 211, a software architecture module 212, and a hardware security module 213; the main gateway 210 communicates with a cloud server, and the slave gateway 220 is connected to peripheral Internet of Things devices. The device is used to implement the above multi-protocol adaptive access gateway method.

[0019] Specifically, the multi-protocol support module includes Z-Wave, Thread, BlueTooth, ZigBee, and LoraWan protocol parsing libraries, and supports dynamic extension of new protocols through the SDK. The software architecture module includes a southbound layer and a northbound layer. The southbound layer converts device protocol data into a unified internal format, and the northbound layer adapts the internal format data into platform protocol messages. Among them, the southbound layer converts the message content sent by the peripheral device according to the device protocol into a northbound message and sends it to the northbound layer, and converts the message content sent by the northbound layer into a southbound layer device protocol message and sends it to the peripheral device. The northbound layer is responsible for converting the message content sent by the southbound layer into a platform message according to the platform protocol and reporting it to the platform, and forwarding the content sent by the platform to the southbound layer. This design improves the processing efficiency and scalability of the system.

[0020] In some of the embodiments, the hardware security module includes a TPM chip for storing and verifying keys. The security protocols supported by the hardware security module include TLS / SSL.

[0021] The device includes a core processor: a high-performance multi-core processor such as the ARM Cortex-A series is adopted to provide strong computing power and multi-task processing ability. The processor main frequency reaches 2.4 GHz and has a cache to ensure the efficiency of data processing. Memory configuration: It is equipped with DDR4 or a higher version of memory with a capacity of at least 16 GB to meet the needs of a large amount of data caching and program running. And it supports memory expansion and can be upgraded according to actual needs. Network interface: It integrates multiple Ethernet interfaces, supports gigabit or 10-gigabit network speeds, and ensures stable communication with the cloud or the control center. It is equipped with Wi-Fi and Bluetooth modules to support the access and communication of wireless devices. Auxiliary interfaces such as USB and serial ports are provided for connecting other types of peripheral devices. Multi-protocol support: Through an expansion module or a built-in multi-protocol support chip (such as Z-Wave, Thread, BlueTooth, ZigBee, and LoraWan, etc.), physical layer access of multiple communication protocols is realized. The modular design enables flexible addition of new protocol support in the future. Security: It is equipped with a hardware encryption module that supports security protocols such as TLS / SSL to ensure the security of data transmission. A physical security interface such as a TPM (Trusted Platform Module) chip is provided for storing and verifying keys.

[0022] Figure 3 is a schematic diagram of the hardware structure of the electronic device provided by the embodiment of the present application, as Figure 3 shown, the electronic device 300 includes: one or more processors 301 and a memory 302, Figure 3Take a processor as an example.

[0023] The processor 301 and the memory 302 can be connected through a bus or other means. Figure 3 Take the connection through the bus as an example.

[0024] The memory 302, as a non-volatile computer-readable storage medium, can be used to store non-volatile software programs, non-volatile computer-executable programs, and modules, such as the program instructions / modules corresponding to the multi-protocol adaptive access gateway method in the embodiments of the present application. The processor 301 executes various functional applications and data processing of the electronic device by running the non-volatile software programs, instructions, and modules stored in the memory 302, that is, implements the multi-protocol adaptive access gateway method in the above method embodiments.

[0025] The memory 302 can include a program storage area and a data storage area. Among them, the program storage area can store an operating system and application programs required for at least one function; the data storage area can store data created according to the use of the multi-protocol adaptive access gateway device, etc. In addition, the memory 302 can include high-speed random access memory, and can also include non-volatile memory, such as at least one magnetic disk storage device, a flash memory device, or other non-volatile solid-state storage devices. In some embodiments, the memory 302 may optionally include a memory remotely set relative to the processor 301, and these remote memories can be connected to the multi-protocol adaptive access gateway device through a network. Examples of the above network include but are not limited to the Internet, an enterprise intranet, a local area network, a mobile communication network, and combinations thereof.

[0026] The embodiments of the present application also provide a non-volatile computer-readable storage medium, and the computer-readable storage medium stores computer-executable instructions. When the computer-executable instructions are executed by one or more processors, the one or more processors can execute the multi-protocol adaptive access gateway method in any of the above method embodiments.

[0027] The embodiments of this application include support libraries for multiple communication protocols, enabling seamless access to devices with different protocols; the SDK provides a unified interface, allowing developers to easily add support for new protocols. The master-slave gateway architecture is introduced, where the master gateway is responsible for communicating with the cloud or control center, and the slave gateway is responsible for connecting and managing peripheral devices. Devices can freely move between gateways, enhancing the flexibility and scalability of the system. A fully domestic hardware platform and the Uos domestic operating system can be adopted to ensure the autonomy, controllability, and security of the system. At the same time, it supports the installation of security software to meet the strict requirements of the banking and other industries for network security. The software is divided into two major layers: "southbound" and "northbound". The "southbound" layer is responsible for converting the message content sent by peripheral devices according to the device protocol into northbound message information and sending it to the "northbound" layer, and converting the message content sent by the "northbound" layer into southbound device protocol messages and sending them to peripheral devices. The "northbound" layer is responsible for converting the message content sent by the "southbound" layer into platform message information according to the platform protocol and reporting it to the platform, and forwarding the content sent by the platform to the "southbound" layer. This design improves the processing efficiency and scalability of the system.

[0028] The device embodiments described above are merely illustrative. The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed to multiple network units. Some or all of the modules can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0029] Through the description of the above embodiments, those of ordinary skill in the art can clearly understand that each embodiment can be implemented by means of software plus a general hardware platform, and of course, it can also be implemented by hardware. Those of ordinary skill in the art can understand that all or part of the processes of implementing the above method embodiments can be completed by instructing relevant hardware through a computer program. The program can be stored in a computer-readable storage medium. When the program is executed, it can include the processes of the above method embodiments. Among them, the storage medium can be a magnetic disk, an optical disc, a read-only memory (Read-Only Memory, ROM), or a random access memory (Random Access Memory, RAM), etc.

[0030] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them; under the idea of the present application, the technical features in the above embodiments or different embodiments can also be combined, and the steps can be implemented in any order, and there are many other changes in different aspects of the present application as described above. For the sake of brevity, they are not provided in detail; although the present application has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that they can still modify the technical solutions recorded in the foregoing embodiments, or perform equivalent replacements on some of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the scope of the technical solutions of the embodiments of the present application.

Claims

1. A multi - protocol adaptive access gateway method, characterized in that, It includes: Convert external multi-protocol device data into unified format data; Asynchronously cache the unified format data and upload it; Perform SM4 encryption and signature authentication on the transmitted data.

2. A multi - protocol adaptive access gateway device, characterized in that, It includes: A main gateway, or and at least one slave gateway, the main gateway further includes a multi-protocol support module, a software architecture module and a hardware security module; The main gateway communicates with the cloud server, the slave gateway is connected to the peripheral Internet of Things devices, and the device is used to implement the method described in claim 1.

3. The multi-protocol adaptive access gateway device according to claim 2, characterized in that, The multi-protocol support module includes Z-Wave, Thread, BlueTooth, ZigBee and LoraWan protocol parsing libraries, and supports dynamic extension of new protocols through the SDK.

4. The multi-protocol adaptive access gateway device according to claim 2, characterized in that, The software architecture module includes a southbound layer and a northbound layer. The southbound layer converts device protocol data into a unified internal format, and the northbound layer adapts the internal format data into platform protocol messages.

5. The multi-protocol adaptive access gateway device according to claim 4, wherein The southbound layer converts the message content sent by the peripheral device according to the device protocol into a northbound message and sends it to the northbound layer, and converts the message content sent by the northbound layer into a southbound layer device protocol message and sends it to the peripheral device. The northbound layer is responsible for converting the message content sent by the southbound layer into a platform message according to the platform protocol and reporting it to the platform, and forwarding the content sent by the platform to the southbound layer.

6. The multi-protocol adaptive access gateway device according to claim 3, wherein The hardware security module includes a TPM chip for storing and verifying keys.

7. The gateway device for multi - protocol adaptive access according to claim 5, characterized in that, The security protocols supported by software encryption in the hardware security module include TLS / SSL.

8. An electronic device, characterized in that, It includes: At least one processor; And, A memory communicatively connected to the at least one processor; wherein, The memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the method described in claim 1.

Images