Multi-device security management method and management system based on Internet of Things

Abstract

The invention relates to the field of the Internet of Things, and discloses a multi-device security management method and management system based on the Internet of Things, and the method comprises the steps: carrying out the grouping of all Internet of Things devices in a management region through a device management module according to the dividing features of Internet of Things device groups, and obtaining a plurality of Internet of Things device groups; the equipment state detection device generates an equipment state management container of the Internet of Things equipment group, obtains information of each piece of Internet of Things equipment in the Internet of Things equipment group, generates an Internet of Things equipment information list, and sends the Internet of Things equipment information list to the equipment state management container of the Internet of Things equipment group; the equipment state management container of the Internet of Things equipment group detects the Internet of Things equipment hardware security and software security of each Internet of Things equipment group according to the Internet of Things equipment information list; and multi-device security management of the Internet of Things is completed. According to the invention, a targeted security management strategy can be realized, and the flexibility and applicability of management are improved.

Description

Technical Field

[0001] The present invention relates to the technical field of the Internet of Things, and specifically to a multi-device security management method and management system based on the Internet of Things. Background Art

[0002] With the rapid development of the Internet of Things technology, more and more devices are connected to the Internet, forming a huge Internet of Things ecosystem. These devices cover multiple fields such as smart home, industrial monitoring, and smart city. However, the security problems of Internet of Things devices are becoming increasingly prominent. On the one hand, there are a wide variety of Internet of Things devices, and the devices of different manufacturers have differences in security mechanisms, communication protocols, etc., making it difficult to achieve unified security management. On the other hand, Internet of Things devices often have limited resources, such as limited processing power and storage space, making it difficult to deploy complex security protection mechanisms. In addition, Internet of Things devices are widely distributed, and the network environments they are in are complex and changeable, making them vulnerable to network attacks, such as device intrusion and data tampering.

[0003] In the existing Internet of Things device security management methods, the grouping method of devices is relatively fixed, usually divided based on simple device types or geographical locations. This grouping method cannot fully meet the requirements of different application scenarios.

[0004] Secondly, for devices distributed in different sub-regions, due to factors such as network bandwidth and device load, using the same update strategy may cause some devices to fail to update or affect normal business operations. At the same time, when generating software update strategies, the impact of software updates on device performance and security risks during the update process are not fully considered.

[0005] In terms of hardware security detection, the existing methods mainly perform isolated security detection on each device, without conducting an overall security assessment from the perspective of the device group. When a hardware failure occurs in a certain device, only troubleshooting is carried out for that device, without considering the impact of the failure on the entire device group and how to use device redundancy to ensure the overall security of the system. In addition, the troubleshooting process lacks an intelligent classification and processing mechanism, resulting in low fault handling efficiency. Summary of the Invention

[0006] The purpose of the present invention is to overcome the deficiencies of the prior art and provide a multi-device security management method based on the Internet of Things, including the following steps: Step 1, according to the division characteristics of the Internet of Things device group, the device management module groups each Internet of Things device within the management area to obtain multiple Internet of Things device groups; Step 2, the device status detection device generates a device status management container for the Internet of Things device group, obtains the information of each Internet of Things device in the Internet of Things device group, generates an Internet of Things device information list, and sends it to the device status management container of the Internet of Things device group; Step 3: The device status management container of the IoT device group obtains the hardware security information of the IoT devices in the cloud data server according to the IoT device information list, detects the hardware security of the IoT devices in each IoT device group. If all IoT device groups are secure, go to Step 4; otherwise, go to Step 6. Step 4: The device status management container of the IoT device group obtains the software security information of each IoT device in the cloud data server according to the IoT device information list, detects whether there is software update information. If there is software update, send the software version data packet and the estimated update duration of the corresponding IoT device to the IoT device software security management container, generate a software update list, and go to Step 5; otherwise, go to Step 7. Step 5: Generate a software security update policy according to the IoT device group division characteristics, perform software update on the IoT devices, and go to Step 7. Step 6: Classify the IoT device failures according to the IoT device hardware security information and troubleshoot the failures, then return to Step 4. Step 7: Complete the multi-device security management of the IoT.

[0007] Furthermore, according to the IoT device group division characteristics, the device management module groups each IoT device to obtain multiple IoT device groups, including: The IoT device group division characteristics are one of sub-region characteristics, device types, and working hours; group each IoT device according to the IoT device group division characteristics to obtain multiple IoT device groups, and respectively obtain the basic device redundancy of each IoT device group.

[0008] Furthermore, the obtaining of the hardware security information of the IoT devices in the cloud data server and the detection of the hardware security of the IoT devices in each IoT device group include: According to each IoT device type included in the management area, obtain the hardware security information of the corresponding device type in the cloud data server, respectively obtain the security status of the IoT devices in each IoT device group, and according to the security status of each IoT device in the IoT group, obtain the device redundancy of the corresponding IoT device group according to the basic device redundancy. If the device redundancy of the corresponding IoT device group is greater than the device redundancy threshold, the IoT device group is secure; otherwise, it is insecure.

[0009] Furthermore, the obtaining of the software security information of each IoT device in the cloud data server and the detection of whether there is software update include: According to each type of Internet of Things device included in the management area, obtain the software version information of the corresponding device type in the cloud data server, and compare it with the software versions of each Internet of Things device in the Internet of Things device group. If there is an inconsistency between the software version of the Internet of Things device in the Internet of Things device group and the software version of the corresponding device type obtained from the cloud data server, there is a software update.

[0010] Further, sending the software version data packet and the estimated update duration of the corresponding Internet of Things device to the Internet of Things device software security management container to generate a software update list, including: According to the type of Internet of Things device with inconsistent software versions, obtain the software version data packet of the corresponding Internet of Things device type in the cloud data server, and obtain the estimated update duration. Send the software version data packet and the estimated update duration of the corresponding Internet of Things device to the Internet of Things device software security management container to generate update information for the corresponding Internet of Things device type; all the update information for the corresponding Internet of Things device types constitutes a software update list.

[0011] Further, generating a software security update policy according to the partitioning characteristics of the Internet of Things device group and performing software updates on the Internet of Things devices, including: According to the partitioning characteristics of the Internet of Things device group, call the update policy corresponding to the partitioning characteristics of the Internet of Things device group in the cloud data server. According to the update policy corresponding to the partitioning characteristics of the Internet of Things device group and in combination with the software update list, perform software updates on the Internet of Things devices.

[0012] Further, classifying and troubleshooting Internet of Things device failures according to the hardware security information of the Internet of Things devices, including: The security information of the Internet of Things device is to set the security characteristics corresponding to the type of Internet of Things device, and the security characteristics include device operating temperature and device output data deviation.

[0013] Further, obtaining the basic device redundancy of each Internet of Things device group respectively, including: According to the sum of the products of the redundancy of each Internet of Things device type in the Internet of Things device group and the security weight of its respective Internet of Things device type, obtain the basic device redundancy of the Internet of Things device group; The redundancy of the Internet of Things device type is the ratio of the number of Internet of Things devices of the same type to the actually used Internet of Things devices.

[0014] A multi-device security management system based on the Internet of Things, applying the multi-device security management method based on the Internet of Things, includes a device management module, a device status detection device, a cloud data server, an edge server, a data processing module, a communication module, and an early warning module; The described device management module, device status detection device, communication module, and warning module are respectively connected to the data processing module; the cloud data server and the edge server are respectively in communication connection with the communication module; wherein the edge server is used for software update.

[0015] The beneficial effects of the present invention are as follows: By introducing various Internet of Things device group division features, the present invention can flexibly adapt to the device management requirements in different application scenarios. Whether grouped based on device type, sub-region characteristics, or working hours, targeted security management strategies can be achieved, improving the flexibility and applicability of management.

[0016] Utilizing the rich data resources in the cloud data server, the present invention can obtain more comprehensive hardware security information and software security information of devices. With the support of cloud data, the security status of devices can be more accurately evaluated, potential security hazards can be detected in a timely manner, and corresponding measures can be taken for prevention and handling.

[0017] Generating a software security update strategy according to the Internet of Things device group division features makes the software update process more intelligent and orderly. By considering the characteristics of the device group, such as network bandwidth and device load, it is possible to avoid updating during high device load or network congestion periods, reducing the impact of updates on normal operations. At the same time, combined with the software update list, devices are updated in an orderly manner, improving the update efficiency.

[0018] The hardware security detection and fault handling method based on device redundancy can more accurately evaluate the security status of the device group. When a device fails, using device redundancy, the tasks of the faulty device can be assigned to redundant devices, thus ensuring the continuous availability of the system. At the same time, the intelligent fault classification and elimination method improves the efficiency and accuracy of fault handling. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] Figure 1 is a schematic flow chart of a multi-device security management method based on the Internet of Things; Figure 2 is a schematic flow chart for detecting the hardware security of Internet of Things devices in each Internet of Things device group. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0020] The technical solution of the present invention will be further described in detail below with reference to the drawings, but the protection scope of the present invention is not limited to the following.

[0021] The features and performance of the present invention will be further described in detail below with reference to the embodiments.

[0022] As Figure 1As shown in the figure, the multi-device security management method based on the Internet of Things includes the following steps: Step 1: According to the characteristics of Internet of Things device group division, the device management module groups each Internet of Things device within the management area to obtain multiple Internet of Things device groups; Step 2: The device status detection device generates a device status management container for the Internet of Things device group, obtains information on each Internet of Things device in the Internet of Things device group, generates a list of Internet of Things device information, and sends it to the device status management container of the Internet of Things device group; Step 3: The device status management container of the Internet of Things device group obtains the hardware security information of the Internet of Things devices in the cloud data server according to the list of Internet of Things device information, detects the hardware security of the Internet of Things devices in each Internet of Things device group. If each Internet of Things device group is secure, go to Step 4; otherwise, go to Step 6; Step 4: The device status management container of the Internet of Things device group obtains the software security information of each Internet of Things device in the cloud data server according to the list of Internet of Things device information, detects whether there is software update information. If there is software update, send the software version data packet and the estimated update duration of the corresponding Internet of Things device to the Internet of Things device software security management container, generate a software update list, and go to Step 5; otherwise, go to Step 7; Step 5: Generate a software security update strategy according to the characteristics of Internet of Things device group division, perform software update on the Internet of Things devices, and go to Step 7; Step 6: Classify the faults of the Internet of Things devices according to the hardware security information of the Internet of Things devices and perform fault troubleshooting, then return to Step 4; Step 7: Complete the multi-device security management of the Internet of Things.

[0023] The step where, according to the characteristics of Internet of Things device group division, the device management module groups each Internet of Things device to obtain multiple Internet of Things device groups includes: The characteristics of Internet of Things device group division are one of sub-region characteristics, device types, and working hours; group each Internet of Things device according to the characteristics of Internet of Things device group division to obtain multiple Internet of Things device groups, and obtain the basic device redundancy of each Internet of Things device group respectively.

[0024] As Figure 2 As shown in the figure, the step of obtaining the hardware security information of the Internet of Things devices in the cloud data server and detecting the hardware security of the Internet of Things devices in each Internet of Things device group includes: According to each type of Internet of Things device included in the management area, obtain the hardware security information of the corresponding device type in the cloud data server, respectively obtain the security status of the Internet of Things devices in each Internet of Things device group, and according to the security status of each Internet of Things device in the Internet of Things group, obtain the device redundancy of the corresponding Internet of Things device group based on the basic device redundancy. If the device redundancy of the corresponding Internet of Things device group is greater than the device redundancy threshold, the Internet of Things device group is secure; otherwise, it is insecure.

[0025] Obtaining the software security information of each Internet of Things device in the cloud data server and detecting whether there is a software update includes: According to each type of Internet of Things device included in the management area, obtain the software version information of the corresponding device type in the cloud data server, and compare it with the software versions of each Internet of Things device in the Internet of Things device group. If there is an Internet of Things device in the Internet of Things device group whose software version is inconsistent with the software version of the corresponding device type obtained in the cloud data server, there is a software update.

[0026] Sending the software version data packet and the estimated update duration of the corresponding Internet of Things device to the Internet of Things device software security management container to generate a software update list includes: According to the type of Internet of Things device with inconsistent software versions, obtain the software version data packet of the corresponding Internet of Things device type in the cloud data server, and obtain the estimated update duration. Send the software version data packet and the estimated update duration of the corresponding Internet of Things device to the Internet of Things device software security management container to generate the update information of the corresponding Internet of Things device type; all the update information of the corresponding Internet of Things device types constitutes the software update list.

[0027] Generating a software security update policy according to the division characteristics of the Internet of Things device group and performing software updates on the Internet of Things devices includes: According to the division characteristics of the Internet of Things device group, call the update policy corresponding to the division characteristics of the Internet of Things device group in the cloud data server. According to the update policy corresponding to the division characteristics of the Internet of Things device group and in combination with the software update list, perform software updates on the Internet of Things devices.

[0028] Classifying and troubleshooting Internet of Things device failures according to the hardware security information of Internet of Things devices includes: The security information of the Internet of Things device is to set the security features corresponding to the type of Internet of Things device, and the security features include device operating temperature and device output data deviation.

[0029] Respectively obtaining the basic device redundancy of each Internet of Things device group includes: The basic device redundancy of the Internet of Things device group is obtained by summing the products of the redundancy of each Internet of Things device type in the Internet of Things device group and the security weight of its respective Internet of Things device type. The redundancy of the Internet of Things device type is the ratio of the number of Internet of Things devices of the same type to the actually used Internet of Things devices.

[0030] A multi-device security management system based on the Internet of Things applies the multi-device security management method based on the Internet of Things, and includes a device management module, a device status detection device, a cloud data server, an edge server, a data processing module, a communication module, and an early warning module; The device management module, the device status detection device, the communication module, and the early warning module are respectively connected to the data processing module; the cloud data server and the edge server are respectively communicatively connected to the communication module; Among them, the edge server is used for software update.

[0031] Specifically, the present invention proposes a device grouping method based on the division characteristics of the Internet of Things device group, and the division characteristics include sub-region characteristics, device type, working period, etc. This grouping mechanism can flexibly divide the device group according to the requirements of the actual application scenario, providing a basis for formulating subsequent security management strategies. For example, in the smart home scenario, devices can be grouped according to device type (such as lighting devices, temperature control devices, security devices, etc.); in the industrial monitoring scenario, devices can be grouped according to the working period (such as production period, maintenance period).

[0032] The present invention makes full use of the rich data resources in the cloud data server. During the device status detection and security assessment process, hardware security information, software version information, etc. of the device are obtained from the cloud. With the support of cloud data, the security status of the device can be evaluated more comprehensively, improving the accuracy and efficiency of status detection. For example, when detecting software updates, not only check whether the current software version of the device is consistent with the latest version in the cloud, but also obtain the security patch information in the cloud to determine whether an emergency update is required.

[0033] The present invention generates a software security update strategy according to the division characteristics of the Internet of Things device group. When performing software updates, the characteristics of the device group, such as network bandwidth, device load, etc., are fully considered. Through intelligent strategy generation, the smooth progress of software updates can be ensured, reducing the impact on normal operations. At the same time, combined with the software update list, the Internet of Things devices are updated in an orderly manner to improve the update efficiency.

[0034] When detecting the security of hardware, the present invention obtains the device redundancy of the corresponding Internet of Things device group according to the security status and basic device redundancy of each Internet of Things device in the Internet of Things group. Through the evaluation of the device redundancy, the security status of the device group can be judged. When the device redundancy is lower than the threshold, troubleshooting measures can be taken in a timely manner. During the troubleshooting process, the hardware security information of the Internet of Things device is used to classify the faults, and corresponding troubleshooting methods are adopted to improve the efficiency of fault handling.

[0035] Specifically, according to the division characteristics such as sub-region characteristics, device types, working hours, etc., each Internet of Things device in the management area is grouped to obtain multiple Internet of Things device groups, and the basic device redundancy of each Internet of Things device group is obtained respectively.

[0036] Generate a device status management container for the Internet of Things device group, obtain the information of each Internet of Things device in the Internet of Things device group, and generate a list of Internet of Things device information. According to the device information list, obtain the hardware security information and software security information of the device in the cloud data server, and detect and evaluate the hardware security and software security of the device.

[0037] Detect whether there is software update information. If so, send the software version data packet and the estimated update duration of the corresponding Internet of Things device to the Internet of Things device software security management container to generate a software update list. Generate a software security update strategy according to the division characteristics of the Internet of Things device group, and perform software update for the Internet of Things device. According to the hardware security information of the Internet of Things device, classify the faults of the Internet of Things device and perform troubleshooting.

[0038] According to the specific application scenario and management requirements, select appropriate division characteristics for the Internet of Things device group. For example, in the smart home scenario, the device type can be selected as the division characteristic, and lighting devices, temperature control devices, security devices, etc. can be divided into different device groups respectively; in the industrial monitoring scenario, the working hours can be selected as the division characteristic, and the devices can be divided into a high-load operation period group during the day and a low-load maintenance period group at night.

[0039] The device management module groups each Internet of Things device in the management area according to the selected division characteristics. For the sub-region characteristics, grouping can be performed according to the geographical location information of the device (such as GPS coordinates, network IP addresses, etc.); for the device type, grouping can be performed according to the type identifier of the device (such as device model, device function description, etc.); for the working hours, grouping can be performed according to the work schedule of the device (such as device operation logs, preset working hour configurations, etc.).

[0040] After obtaining each Internet of Things device group, calculate the basic device redundancy of each device group respectively. The calculation formula is: R base is the redundancy of basic equipment n is the number of types of Internet of Things devices in the device group ri is the i redundancy of the wi is the i security weight of the

[0041] The device status detection device generates a device status management container for each Internet of Things device group. This container is used to store and manage the status information, security information, etc. of each Internet of Things device within the device group.

[0042] The device status detection device obtains the information of each Internet of Things device in the Internet of Things device group, including device identification, device type, device status parameters (such as device operating temperature, device output data, etc.). These information are sorted according to a predetermined format to generate an Internet of Things device information list.

[0043] The device status management container obtains the hardware security information of the corresponding device type in the cloud data server according to the Internet of Things device information list. The cloud data server stores a hardware security feature database of different device types, including the normal range of device operating temperature, the normal fluctuation range of device output data, etc. The device status management container compares the obtained hardware security information with the current hardware status parameters of the device to determine whether there are hardware security hazards in the device.

[0044] According to the security status (secure or having potential hazards) of each Internet of Things device within the Internet of Things group, combined with the redundancy of basic equipment, the device redundancy of the corresponding Internet of Things device group is obtained. If the device redundancy of the corresponding Internet of Things device group is greater than the device redundancy threshold, it is determined that the Internet of Things device group is secure; otherwise, it is determined that the Internet of Things device group is insecure. The device redundancy threshold can be set according to the security requirements of the system. For example, in a critical system, the device redundancy threshold can be set to a higher value to ensure the reliability of the system.

[0045] If the IoT device group is secure, the device status management container continues to obtain the software security information of each IoT device in the cloud data server, including software version information, security patch information, etc. Compare the software version information obtained from the cloud with the software versions of each IoT device in the IoT device group. If there is a mismatch between the software version of an IoT device in the IoT device group and the software version of the corresponding device type obtained from the cloud data server, it is determined that a software update is required.

[0046] When a software update is detected, the device status management container obtains the software version data packet of the corresponding IoT device type in the cloud data server according to the IoT device type with inconsistent software versions, and obtains the estimated update duration. The estimated update duration can be estimated based on factors such as the size of the software version data packet, the processing power of the device, and the network bandwidth. Send the software version data packet and the estimated update duration of the corresponding IoT device to the IoT device software security management container to generate update information for the corresponding IoT device type. All the update information for the corresponding IoT device types constitutes a software update list.

[0047] According to the IoT device group division characteristics, call the update policy corresponding to the IoT device group division characteristics in the cloud data server. For example, for a device group divided according to sub-region characteristics, an update policy for the network environment of that sub-region can be called; for a device group divided according to device type, an update policy for the characteristics of that device type can be called. The update policy includes update order, update time period, update method (such as full update, incremental update), etc.

[0048] Combine the software update list and the generated software security update policy to perform software updates on the IoT devices. During the update process, the update policy can be dynamically adjusted according to factors such as the device load and network bandwidth to ensure the smooth progress of the update. For example, in a device group with low network bandwidth, a phased update method can be adopted to avoid network congestion caused by a large number of devices updating simultaneously.

[0049] When the IoT device group is determined to be insecure, perform fault classification based on the IoT device hardware security information. Fault classification can be carried out according to factors such as the type and severity of the fault. For example, faults can be classified into device overheating faults, data output abnormal faults, etc.

[0050] According to the fault classification results, adopt corresponding troubleshooting methods. For device overheating faults, methods such as reducing the device load and increasing heat dissipation measures can be taken; for data output abnormal faults, operations such as device restart and software reset can be performed. During the troubleshooting process, the device redundancy can be utilized to allocate the tasks of the faulty device to redundant devices of the same type to ensure the normal operation of the system.

[0051] The system includes: a device management module, which is used to communicate with various Internet of Things devices, collect device information, perform device grouping operations, and send control instructions.

[0052] A device status detection device, which is used to generate a device status management container, obtain device information, and perform device status detection and security assessment.

[0053] The cloud data server stores a large amount of device data, security information, software version information, etc., and provides data support for device status detection, software update, etc.

[0054] The edge server is deployed at the network edge, close to the Internet of Things devices, and is used for the distribution and execution of software updates, reducing the burden on the cloud data server and improving the update efficiency.

[0055] The data processing module processes and analyzes the data obtained from the device management module, the device status detection device, etc., and provides a basis for formulating security management strategies.

[0056] The communication module is used for communication between the device management module, the device status detection device, the cloud data server, the edge server, etc., to ensure real-time data transmission.

[0057] The warning module is used to send warning messages when it detects that there are security hazards or faults in the device, so that the management personnel can take measures in time.

Claims

1. A multi-device security management method based on the Internet of Things, characterized in that, Including the following steps: Step 1: According to the grouping characteristics of the Internet of Things device group, the device management module groups each Internet of Things device in the management area to obtain multiple Internet of Things device groups; Step 2: The device status detection device generates a device status management container for the Internet of Things device group, obtains the information of each Internet of Things device in the Internet of Things device group, generates a list of Internet of Things device information, and sends it to the device status management container of the Internet of Things device group; Step 3: The device status management container of the Internet of Things device group obtains the hardware security information of the Internet of Things devices in the cloud data server according to the list of Internet of Things device information, detects the hardware security of the Internet of Things devices in each Internet of Things device group. If each Internet of Things device group is secure, go to Step 4; otherwise, go to Step 6; Step 4: The device status management container of the Internet of Things device group obtains the software security information of each Internet of Things device in the cloud data server according to the list of Internet of Things device information, detects whether there is software update information. If there is software update, send the software version data packet and the estimated update duration of the corresponding Internet of Things device to the software security management container of the Internet of Things device, generate a software update list, and go to Step 5; Otherwise, go to Step 7; Step 5: Generate a software security update strategy according to the grouping characteristics of the Internet of Things device group, perform software update on the Internet of Things device, and go to Step 7; Step 6: Classify the Internet of Things device failures according to the hardware security information of the Internet of Things devices and troubleshoot the failures, then return to Step 4; Step 7: Complete the security management of multiple Internet of Things devices.

2. The multi-device security management method based on the Internet of Things according to claim 1, wherein, The device management module groups each Internet of Things device according to the grouping characteristics of the Internet of Things device group to obtain multiple Internet of Things device groups, including: The grouping characteristics of the Internet of Things device group are one of sub-region characteristics, device types, and working hours; group each Internet of Things device according to the grouping characteristics of the Internet of Things device group to obtain multiple Internet of Things device groups, and respectively obtain the basic device redundancy of each Internet of Things device group.

3. The multi-device security management method based on the Internet of Things according to claim 2, characterized in that, Obtaining the hardware security information of the Internet of Things devices in the cloud data server and detecting the hardware security of the Internet of Things devices in each Internet of Things device group, including: According to each Internet of Things device type included in the management area, obtain the hardware security information of the corresponding device type in the cloud data server, respectively obtain the security status of the Internet of Things devices in each Internet of Things device group, and according to the security status of each Internet of Things device in the Internet of Things group, obtain the device redundancy of the corresponding Internet of Things device group according to the basic device redundancy. If the device redundancy of the corresponding Internet of Things device group is greater than the device redundancy threshold, the Internet of Things device group is secure; otherwise, it is not secure.

4. The multi-device security management method based on the Internet of Things according to claim 1, characterized in that Obtaining the software security information of each Internet of Things device in the cloud data server and detecting whether there is software update, including: According to each type of Internet of Things device included in the management area, obtain the software version information of the corresponding device type in the cloud data server, and compare it with the software versions of each Internet of Things device in the Internet of Things device group. If there is a discrepancy between the software version of the Internet of Things device in the Internet of Things device group and the software version of the corresponding device type obtained from the cloud data server, then there is a software update.

5. The multi-device security management method based on the Internet of Things according to claim 4, characterized in that Sending the software version data packet and the estimated update duration of the corresponding Internet of Things device to the Internet of Things device software security management container to generate a software update list, including: According to the type of Internet of Things device with inconsistent software versions, obtain the software version data packet of the corresponding Internet of Things device type in the cloud data server, and obtain the estimated update duration. Send the software version data packet and the estimated update duration of the corresponding Internet of Things device to the Internet of Things device software security management container to generate the update information of the corresponding Internet of Things device type; all the update information of the corresponding Internet of Things device types constitutes the software update list.

6. The multi-device security management method based on the Internet of Things according to claim 5, wherein Generating a software security update policy according to the division characteristics of the Internet of Things device group and performing software updates on the Internet of Things devices, including: According to the division characteristics of the Internet of Things device group, call the update policy corresponding to the division characteristics of the Internet of Things device group in the cloud data server. According to the update policy corresponding to the division characteristics of the Internet of Things device group, combined with the software update list, perform software updates on the Internet of Things devices.

7. The multi-device security management method based on the Internet of Things according to claim 1, characterized in that, Classifying and troubleshooting Internet of Things device failures according to the hardware security information of the Internet of Things devices, including: The security information of the Internet of Things device is to set the security features corresponding to the type of Internet of Things device, and the security features include device operating temperature and device output data deviation.

8. The multi-device security management method based on the Internet of Things according to claim 2, wherein Respectively obtaining the basic device redundancy of each Internet of Things device group, including: According to the sum of the products of the redundancy of each Internet of Things device type in the Internet of Things device group and the security weight of their respective Internet of Things device types, obtain the basic device redundancy of the Internet of Things device group; The redundancy of the Internet of Things device type is the ratio of the number of the same type of Internet of Things devices to the actually used Internet of Things devices.

9. The multi-device security management system based on the Internet of Things is characterized in that, Applying the multi-device security management method based on the Internet of Things according to any one of claims 1-8, including a device management module, a device status detection device, a cloud data server, an edge server, a data processing module, a communication module, and an early warning module; The device management module, the device status detection device, the communication module, and the early warning module are respectively connected to the data processing module; the cloud data server and the edge server are respectively communicatively connected to the communication module; Wherein the edge server is used for software updates.

Images