A data transmission method based on the digital twin model of smart city

Abstract

The present application provides a data transmission method based on a digital twin model of a smart city, which belongs to the field of digital twin technology and is used to improve the security of data transmission through identity authentication at the granularity of digital twin entities. The method includes: a receiving device receives data of a digital twin model transmitted by a sending device, and the data of the digital twin model includes data of digital twin entities at different levels; the receiving device authenticates the identity information of digital twin entities at some levels based on the data of digital twin entities at some levels in the digital twin model, and the digital twin entities at some levels are digital twin entities associated with upper and lower levels in the digital twin model; when the identity information of the digital twin entity is determined to be credible through authentication, the receiving device sends the data of the digital twin model to the back-end device in the BIM / CIM platform.

Description

Technical Field

[0001] The present application relates to the field of digital twin technology, and in particular to a data transmission method based on a smart city digital twin biological model. Background Art

[0002] Digital twin technology simulates and analyzes physical entities and their environments through digital models. It encompasses technologies in multiple fields, including the Internet of Things (IoT), big data analytics, and cloud computing. Digital twin models can reflect the state of physical entities in real time and can be updated and optimized through data transmission. This technology has broad application prospects in manufacturing, urban planning, healthcare, and other fields.

[0003] A digital twin model is an abstract form of digital description of entities in the physical world (such as devices, sensors, etc.). It has the following characteristics: Real-time data acquisition: Digital twin models need to collect data from physical entities in real time. This usually involves sensor technology, Internet of Things devices, etc. The frequency and accuracy of data collection directly affect the accuracy and real-time performance of the digital twin model. Data transmission network: The choice of data transmission network is crucial to the performance of the digital twin model. It needs to support high-speed, low-latency data transmission while ensuring data security and reliability. Technologies such as 5G networks and fiber optic networks are widely used in this field. Data processing and analysis: The collected data needs to be processed through data processing and analysis technologies. Data synchronization and update: The digital twin model needs to be synchronized and updated based on real-time data.

[0004] However, among the above features, a significant problem is insufficient security considerations. Although IoT devices usually have certain security measures (such as data encryption and authentication), they still face the risk of data leakage and unauthorized access when exchanging data with the platform. Summary of the Invention

[0005] An embodiment of the present application provides a data transmission method based on a smart city digital twin biological model to improve the security of data transmission through identity authentication at the digital twin entity granularity.

[0006] To achieve the above objectives, this application adopts the following technical solutions:

[0007] In the first aspect, a data transmission method based on a smart city digital twin model is provided, which is applied to a receiving device, where the receiving device is an interface gateway in a BIM / CIM platform. The method includes: the receiving device receives data of a digital twin model transmitted by a sending device, where the sending device is a physical model, and the data of the digital twin model includes data of digital twin entities at different levels; the receiving device authenticates the identity information of digital twin entities at some levels according to the data of digital twin entities at some levels in the digital twin model, where digital twin entities at some levels are digital twin entities associated with upper and lower levels in the digital twin model; when the identity information of the digital twin entity is determined to be credible through authentication, the receiving device sends the data of the digital twin model to a back-end device in the BIM / CIM platform.

[0008] Optionally, digital twin entities at different levels include digital twin element entities at the first level, digital twin component entities at the second level, and digital twin system entities at the third level, wherein the digital twin element entities represent the digital twin monomer object model, the digital twin component entities are constructed based on the digital twin element entities, the digital twin component entities represent the digital twin scenario-based object model, the digital twin system entities are constructed based on the digital twin component entities, and the digital twin system entities represent the digital twin city-level object model.

[0009] Optionally, the data of digital twin element entities includes basic information, attributes, behaviors, and events; the data of digital twin component entities includes the capabilities of the digital twin scenario-based object model; and the data of digital twin system entities includes sensor system data, decision system data, and notification system data. Optionally, the data of digital twin system entities also includes data of the location perception system.

[0010] Optionally, the receiving device authenticates the identity information of digital twin entities at some levels based on the data of digital twin entities at some levels in the digital twin biological model, including: the receiving device authenticates the identity information of the digital twin component entity based on the data of the digital twin component entity and the key of the sending device.

[0011] Optionally, the digital twin component entity is M digital twin component entities, M is an integer greater than 2, and the receiving device authenticates the identity information of the digital twin component entity based on the data of the digital twin component entity and the key of the sending device, including: for the i-th digital twin component entity among the M digital twin component entities, i traverses an odd number from 1 to M: the receiving device obtains a preset identity token in the data of the i-th digital twin component entity; the receiving device generates identity authentication information based on the capability description field in the data of the i-th digital twin component entity and the key of the sending device; the receiving device determines whether the identity authentication information is consistent with the preset identity token. If the identity authentication information is consistent with the preset identity token, it means that the identity information of the i-th digital twin component entity is credible through authentication; otherwise, the identity information of the i-th digital twin component entity is not credible.

[0012] Optionally, the capability description field in the data of the i-th digital twin component entity, the key of the sending device, and the preset identity token satisfy the following relationship:

[0013] AUTN=[(capability description⊕f5(K))||RAND||f1(K,capabilitydescription, RAND) =MAC1]

[0014] The preset identity token is AUTN, the capability description field is capability description, ⊕ represents exclusive OR, K is a temporary key derived from the sending device's key and RAND, f5 represents algorithm f5, RAND is a random number, and f1 represents algorithm f1. The sending device's key is the long-term key in the sending device's USIM, and the receiving device's long-term key is preset by the operator of the USIM.

[0015] The identity authentication information is MAC2, MAC2 = f1(K, capability description, RAND);

[0016] Determining whether the identity authentication information is consistent with the preset identity token refers to determining whether MAC1 and MAC2 are consistent. MAC1 refers to message authentication code 1; MAC2 refers to message authentication code 2.

[0017] Optionally, the receiving device authenticates the identity information of digital twin entities at some levels based on the data of digital twin entities at some levels in the digital twin biological model, including: the receiving device authenticates the identity information of the digital twin element entity based on the data of the digital twin element entity and the key of the sending device; and the receiving device authenticates the identity information of the digital twin system entity based on the data of the digital twin system entity and the key of the sending device.

[0018] Optionally, the digital twin element entity is N digital twin element entities, N is an integer greater than 2, and the receiving device authenticates the identity information of the digital twin element entity based on the data of the digital twin element entity and the key of the sending device, including: for the j-th digital twin element entity among the N digital twin element entities, j traverses an odd number from 1 to N: the receiving device obtains a preset identity token in the data of the j-th digital twin element entity; the receiving device generates identity authentication information based on the event in the data of the j-th digital twin element entity and the key of the sending device; the receiving device determines whether the identity authentication information is consistent with the preset identity token. If the identity authentication information is consistent with the preset identity token, it means that the identity information of the j-th digital twin element entity is credible through authentication; otherwise, the identity information of the j-th digital twin element entity is not credible.

[0019] Optionally, the following relationship is satisfied between the events in the data of the j-th digital twin element entity, the key of the sending device, and the preset identity token:

[0020] AUTN=[Events⊕f5(K))||RAND||f1(K,Events,RAND) =MAC1]

[0021] Wherein, the preset identity token is AUTN, the event is Events, ⊕ represents XOR, K is a temporary key derived from the sending device's key and RAND, f5 represents algorithm f5, RAND is a random number, and f1 represents algorithm f1. The sending device's key is the long-term key in the sending device's USIM, and the receiving device's long-term key is preset by the operator of the USIM.

[0022] The identity authentication information is MAC2, MAC2 = f1(K, Events, RAND);

[0023] Determining whether the identity authentication information is consistent with the preset identity token refers to determining whether MAC1 is consistent with MAC2.

[0024] Optionally, the receiving device authenticates the identity information of the digital twin system entity based on the data of the digital twin system entity and the key of the sending device. The receiving device obtains the description field of the decision system in the data of the digital twin system entity; the receiving device generates identity authentication information based on the description field of the decision system and the key of the sending device; the receiving device determines whether the identity authentication information is consistent with the preset identity token. If the identity authentication information is consistent with the preset identity token, it means that the identity information of the digital twin system entity determined through authentication is credible, otherwise, the identity information of the digital twin system entity is not credible.

[0025] Optionally, the following relationship is satisfied between the description field of the decision system in the data, the key of the sending device, and the preset identity token:

[0026] AUTN=[Decision description⊕f5(K))||RAND||f1(K,Decision description,RAND) =MAC1]

[0027] The preset identity token is AUTN, the description field of the decision system is Decision description, ⊕ represents XOR, K is a temporary key derived from the key of the sending device and RAND, f5 represents algorithm f5, RAND is a random number, and f1 represents algorithm f1. The key of the sending device is the long-term key in the USIM of the sending device, and the long-term key of the receiving device is preset by the operator of the USIM.

[0028] The identity authentication information is MAC2, MAC2 = f1(K, Decision description, RAND);

[0029] Determining whether the identity authentication information is consistent with the preset identity token refers to determining whether MAC1 is consistent with MAC2.

[0030] The second aspect provides a receiving device, which is an interface gateway in the BIM / CIM platform, and the receiving device is configured as follows: the receiving device receives the data of the digital twin model transmitted by the sending device, the sending device is a physical model, and the data of the digital twin model includes data of digital twin entities at different levels; the receiving device authenticates the identity information of the digital twin entities at some levels based on the data of the digital twin entities at some levels in the digital twin model, and the digital twin entities at some levels are digital twin entities that are associated with the upper and lower levels in the digital twin model; when the identity information of the digital twin entity is determined to be credible through authentication, the receiving device sends the data of the digital twin model to the back-end device in the BIM / CIM platform.

[0031] Optionally, digital twin entities at different levels include digital twin element entities at the first level, digital twin component entities at the second level, and digital twin system entities at the third level, wherein the digital twin element entities represent the digital twin monomer object model, the digital twin component entities are constructed based on the digital twin element entities, the digital twin component entities represent the digital twin scenario-based object model, the digital twin system entities are constructed based on the digital twin component entities, and the digital twin system entities represent the digital twin city-level object model.

[0032] Optionally, the data of the digital twin element entity includes basic information, attributes, behaviors and events, the data of the digital twin component entity includes the capabilities of the digital twin scenario-based object model, and the data of the digital twin system entity includes sensing system data, decision system data and notification system data.

[0033] Optionally, the receiving device authenticates the identity information of digital twin entities at some levels based on the data of digital twin entities at some levels in the digital twin biological model, including: the receiving device authenticates the identity information of the digital twin component entity based on the data of the digital twin component entity and the key of the sending device.

[0034] Optionally, the digital twin component entity is M digital twin component entities, M is an integer greater than 2, and the receiving device authenticates the identity information of the digital twin component entity based on the data of the digital twin component entity and the key of the sending device, including: for the i-th digital twin component entity among the M digital twin component entities, i traverses an odd number from 1 to M: the receiving device obtains a preset identity token in the data of the i-th digital twin component entity; the receiving device generates identity authentication information based on the capability description field in the data of the i-th digital twin component entity and the key of the sending device; the receiving device determines whether the identity authentication information is consistent with the preset identity token. If the identity authentication information is consistent with the preset identity token, it means that the identity information of the i-th digital twin component entity is credible through authentication; otherwise, the identity information of the i-th digital twin component entity is not credible.

[0035] Optionally, the capability description field in the data of the i-th digital twin component entity, the key of the sending device, and the preset identity token satisfy the following relationship:

[0036] AUTN=[(capability description⊕f5(K))||RAND||f1(K,capabilitydescription, RAND) =MAC1]

[0037] The preset identity token is AUTN, the capability description field is capability description, ⊕ represents exclusive OR, K is a temporary key derived from the sending device's key and RAND, f5 represents algorithm f5, RAND is a random number, and f1 represents algorithm f1. The sending device's key is the long-term key in the sending device's USIM, and the receiving device's long-term key is preset by the operator of the USIM.

[0038] The identity authentication information is MAC2, MAC2 = f1(K, capability description, RAND);

[0039] Determining whether the identity authentication information is consistent with the preset identity token refers to determining whether MAC1 is consistent with MAC2.

[0040] Optionally, the receiving device authenticates the identity information of digital twin entities at some levels based on the data of digital twin entities at some levels in the digital twin biological model, including: the receiving device authenticates the identity information of the digital twin element entity based on the data of the digital twin element entity and the key of the sending device; and the receiving device authenticates the identity information of the digital twin system entity based on the data of the digital twin system entity and the key of the sending device.

[0041] Optionally, the digital twin element entity is N digital twin element entities, N is an integer greater than 2, and the receiving device authenticates the identity information of the digital twin element entity based on the data of the digital twin element entity and the key of the sending device, including: for the j-th digital twin element entity among the N digital twin element entities, j traverses an odd number from 1 to N: the receiving device obtains a preset identity token in the data of the j-th digital twin element entity; the receiving device generates identity authentication information based on the event in the data of the j-th digital twin element entity and the key of the sending device; the receiving device determines whether the identity authentication information is consistent with the preset identity token. If the identity authentication information is consistent with the preset identity token, it means that the identity information of the j-th digital twin element entity is credible through authentication; otherwise, the identity information of the j-th digital twin element entity is not credible.

[0042] Optionally, the following relationship is satisfied between the events in the data of the j-th digital twin element entity, the key of the sending device, and the preset identity token:

[0043] AUTN=[Events⊕f5(K))||RAND||f1(K,Events,RAND) =MAC1]

[0044] Wherein, the preset identity token is AUTN, the event is Events, ⊕ represents XOR, K is a temporary key derived from the sending device's key and RAND, f5 represents algorithm f5, RAND is a random number, and f1 represents algorithm f1. The sending device's key is the long-term key in the sending device's USIM, and the receiving device's long-term key is preset by the operator of the USIM.

[0045] The identity authentication information is MAC2, MAC2 = f1(K, Events, RAND);

[0046] Determining whether the identity authentication information is consistent with the preset identity token refers to determining whether MAC1 is consistent with MAC2.

[0047] Optionally, the receiving device authenticates the identity information of the digital twin system entity based on the data of the digital twin system entity and the key of the sending device. The receiving device obtains the description field of the decision system in the data of the digital twin system entity; the receiving device generates identity authentication information based on the description field of the decision system and the key of the sending device; the receiving device determines whether the identity authentication information is consistent with the preset identity token. If the identity authentication information is consistent with the preset identity token, it means that the identity information of the digital twin system entity determined through authentication is credible, otherwise, the identity information of the digital twin system entity is not credible.

[0048] Optionally, the following relationship is satisfied between the description field of the decision system in the data, the key of the sending device, and the preset identity token:

[0049] AUTN=[Decision description⊕f5(K))||RAND||f1(K,Decision description,RAND) =MAC1]

[0050] The preset identity token is AUTN, the description field of the decision system is Decision description, ⊕ represents XOR, K is a temporary key derived from the key of the sending device and RAND, f5 represents algorithm f5, RAND is a random number, and f1 represents algorithm f1. The key of the sending device is the long-term key in the USIM of the sending device, and the long-term key of the receiving device is preset by the operator of the USIM.

[0051] The identity authentication information is MAC2, MAC2 = f1(K, Decision description, RAND);

[0052] Determining whether the identity authentication information is consistent with the preset identity token refers to determining whether MAC1 is consistent with MAC2.

[0053] In a third aspect, a computer-readable storage medium is provided, comprising: a computer program or instructions; when the computer program or instructions are executed on a computer, the computer is caused to execute the data transmission method as described in the first aspect.

[0054] In a fourth aspect, a computer program product is provided, comprising: a computer program or instructions, which, when executed on a computer, causes the computer to execute the data transmission method as described in the first aspect.

[0055] In summary, when the receiving device receives the data of the digital twin model transmitted by the sending device, the receiving device authenticates the identity information of the digital twin entities at some levels based on the data of the digital twin entities at some levels in the digital twin model. The digital twin entities at some levels are the digital twin entities of the upper and lower levels associated in the digital twin model, that is, a more fine-grained security authentication is achieved; when the identity information of the digital twin entity is determined to be credible through authentication, the receiving device sends the data of the digital twin model to the back-end device in the BIM / CIM platform, which can ensure that the data received by the back-end device is safe and credible, thereby further improving the security of data transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0056] Figure 1 A schematic diagram of the framework of a data transmission system based on a smart city digital twin model provided in an embodiment of the present application;

[0057] Figure 2 A flowchart of a data transmission method based on a smart city digital twin model provided in an embodiment of the present application;

[0058] Figure 3 A schematic diagram of the architecture of the model in the data transmission method based on the smart city digital twin model provided in an embodiment of the present application. DETAILED DESCRIPTION

[0059] The following first introduces the technical terms involved in this application.

[0060] Thing Model: An abstract digital representation of physical entities (such as devices and sensors). It includes attributes (e.g., temperature, switch status), behaviors (e.g., start and stop operations), and events (e.g., fault alarms). Thing Models enable state monitoring, control, and data analysis of physical entities.

[0061] Digital Twin: A digital twin uses digital technology to create a virtual replica of a physical object. This replica not only reflects the object's current state and behavior but also, through simulation, predicts future behavior trends. In smart cities, digital twin technology is used to optimize urban planning, management, and service delivery by creating accurate digital models of various city components, such as buildings and transportation systems.

[0062] Building Information Modeling (BIM): A digital representation method used to design, construct, and manage buildings and infrastructure projects. It encompasses not only geometric form information but also a wealth of non-geometric attributes, such as material properties and cost estimates. BIM enables project teams to effectively share information throughout the project lifecycle, improving efficiency, reducing costs, and minimizing errors.

[0063] City Information Modeling (CIM): CIM is an extension of BIM concepts at the urban scale, aiming to build an integrated city-wide information model. CIM integrates data from various sources (including Geographic Information System (GIS) and BIM) to support a broader range of analysis and decision-making processes. Through CIM, city managers can better understand urban development dynamics, optimize resource allocation, and promote sustainable development.

[0064] The technical solution in this application will be described below with reference to the accompanying drawings.

[0065] In the embodiment of the present application, "indication" may include direct indication and indirect indication, and may also include explicit indication and implicit indication. The information indicated by a certain information (such as the first indication information, the second indication information, or the third indication information below) is called information to be indicated. In the specific implementation process, there are many ways to indicate the information to be indicated, such as but not limited to, the information to be indicated can be directly indicated, such as the information to be indicated itself or the index of the information to be indicated. The information to be indicated can also be indirectly indicated by indicating other information, wherein the other information and the information to be indicated have an association relationship. It is also possible to indicate only a part of the information to be indicated, while the other parts of the information to be indicated are known or agreed in advance. For example, the indication of specific information can be achieved by means of the arrangement order of each information agreed in advance (such as specified in the protocol), thereby reducing the indication overhead to a certain extent. At the same time, the common parts of each information can be identified and indicated uniformly to reduce the indication overhead caused by indicating the same information separately.

[0066] In addition, the specific indication method can also be various existing indication methods, such as but not limited to the above-mentioned indication methods and various combinations thereof. The specific details of the various indication methods can be referred to the prior art and will not be repeated herein. As can be seen from the above, for example, when it is necessary to indicate multiple information of the same type, there may be a situation where the indication methods for different information are different. In the specific implementation process, the required indication method can be selected according to specific needs. The embodiment of the present application does not limit the selected indication method. In this way, the indication method involved in the embodiment of the present application should be understood to cover various methods that can enable the party to be indicated to obtain the information to be indicated.

[0067] It should be understood that the information to be indicated can be sent as a whole or divided into multiple sub-information and sent separately, and the sending period and / or sending time of these sub-information can be the same or different. The specific sending method is not limited in the embodiments of this application. The sending period and / or sending time of these sub-information can be predefined, for example, predefined according to a protocol, or can be configured by the transmitting device by sending configuration information to the receiving device.

[0068] "Pre-definition" or "pre-configuration" can be implemented by pre-saving corresponding codes, tables or other methods that can be used to indicate relevant information in the device, and the embodiments of the present application do not limit the specific implementation method. Among them, "saving" can mean saving in one or more memories. The one or more memories can be set separately or integrated in an encoder or decoder, a processor, or a communication device. The one or more memories can also be partially set separately and partially integrated in a decoder, a processor, or a communication device. The type of memory can be any form of storage medium, and the embodiments of the present application do not limit this.

[0069] The "protocol" involved in the embodiments of the present application may refer to a protocol family in the communication field, a standard protocol with a similar protocol family frame structure, or a related protocol used in future communication systems. The embodiments of the present application do not make specific limitations on this.

[0070] In the embodiments of the present application, descriptions such as "when...", "in the case of...", "if" and "if" all mean that the device will perform corresponding processing under certain objective circumstances. It does not limit the time, nor does it require the device to perform judgment actions when implemented, nor does it mean that there are other limitations.

[0071] In the description of the embodiments of this application, unless otherwise specified, " / " indicates that the associated objects are in an "or" relationship. For example, A / B can mean A or B. "And / or" in the embodiments of this application is merely a description of the associated relationship between the associated objects, indicating that three relationships can exist. For example, "A and / or B" can mean: A alone, A and B together, or B alone. A and B can be singular or plural. Furthermore, in the description of the embodiments of this application, unless otherwise specified, "multiple" means two or more. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, "at least one of a, b, or c" can mean: a, b, c, ab, ac, bc, or abc, where a, b, and c can be single or plural. Furthermore, to facilitate the clear description of the technical solutions of the embodiments of this application, the terms "first" and "second" are used in the embodiments of this application to distinguish between identical or similar items with substantially the same function or effect. Those skilled in the art will understand that words such as "first" and "second" do not limit the quantity and execution order, and words such as "first" and "second" do not necessarily limit differences. At the same time, in the embodiments of the present application, words such as "exemplary" or "for example" are used to indicate examples, illustrations or explanations. Any embodiment or design described as "exemplary" or "for example" in the embodiments of the present application should not be interpreted as being more preferred or more advantageous than other embodiments or design. Specifically, the use of words such as "exemplary" or "for example" is intended to present related concepts in a concrete way for easy understanding.

[0072] To facilitate understanding of the embodiments of the present application, first Figure 1 The data transmission system based on the digital twin model of the smart city shown in the figure is used as an example to describe in detail the system applicable to the embodiment of the present application. Figure 1 A schematic diagram of the architecture of a data transmission system based on a smart city digital twin model applicable to the method provided in an embodiment of the present application.

[0073] like Figure 1 As shown, the data transmission system includes: a sending end device and a receiving end device.

[0074] The sending device can be a terminal that has the function of collecting data of the digital twin model.

[0075] For example, a terminal may also be referred to as user equipment (UE), access terminal, subscriber unit, user station, mobile station (MS), mobile station, remote station, remote terminal, mobile device, user terminal, terminal, wireless communication device, user agent, or user device. The terminal in the embodiments of the present application may be a mobile phone, a cellular phone, a smart phone, a tablet computer, a wireless data card, a personal digital assistant (PDA), a wireless modem, a handheld device, a laptop computer, a machine type communication (MTC) terminal, a computer with wireless transceiver functions, a virtual reality (VR) terminal, an augmented reality (AR) terminal, or a wireless terminal in industrial control. It should be noted that the transmitting device being a terminal is only an example. For example, the transmitting device may also be an Internet of Things platform, such as a physical model in the Internet of Things platform.

[0076] The receiving device can be an interface gateway in the BIM / CIM platform. In other words, the receiving device is an interface exposed to the sending device. The sending device cannot further perceive other devices in the BIM / CIM platform, such as back-end devices, and cannot directly access these devices to ensure data security.

[0077] See also Figure 2 The present application provides a data transmission method based on a smart city digital twin model. The method can be executed by a receiving device. The method process includes:

[0078] S201, receiving data of the digital twin model transmitted by the sending device.

[0079] The data of the digital twin model contains data of digital twin entities at different levels.

[0080] For example, Figure 3 The following is a schematic diagram of the architecture of the model in the data transmission method based on the digital twin model of the smart city. Figure 3 ,Digital twin entities at different levels include the first-level digital twin element entities, the second-level digital twin component entities, and the third-level digital twin system entities.

[0081] The digital twin element entity corresponds to an element, the basic functional unit of an IoT device, consisting of properties, actions, and events. Properties describe the static or dynamic state of a device (e.g., the "temperature value" property of a temperature and humidity sensor). Behaviors define the operations a device can perform (e.g., the "start" and "stop" actions of an air conditioner). Events represent state changes or anomalies proactively reported by a device (e.g., the "concentration exceeds standard" event of a smoke sensor). As the smallest granularity of the object model, elements directly map the functions and states of physical devices. For example, the "temperature" property of a temperature and humidity sensor records real-time data, the "switch" action controls the device's start and stop, and the "threshold alarm" event triggers an anomaly notification. Digital twin element entities represent the digital twin entity model, or entity model. A entity model is a digital representation of a physical IoT device. As the fundamental unit of the entire system, it consists of multiple sets of properties, actions, and events, comprehensively describing the device's functional characteristics and operating status. Attributes describe static or dynamic information about a device, such as the temperature and humidity sensor's temperature, the meter's power usage, or the camera's online status. Behaviors represent executable instructions for a device, such as turning the air conditioner on and off, adjusting curtains, or remotely unlocking a door lock. Events are state changes or anomalies proactively reported by a device, such as smoke level alarms, power outage notifications, and device offline reminders. These different types of attributes, behaviors, and events form the data foundation and functional source for subsequent higher-level models, serving as the core basis for device access, management, and linkage.

[0082] Digital twin component entities are built based on digital twin element entities. These entities correspond to element components, which are functional modules composed of multiple related elements and describe a device's subsystem or business unit. For example, the "lighting module" of a smart streetlight integrates elements such as "brightness attributes," "dimming behavior," and "fault events" to form a complete lighting control unit. The "motor module" of industrial equipment aggregates elements such as "speed attributes," "start / stop behavior," and "overload events" to enable motor status monitoring and control. By encapsulating common logic, components support functional reuse (for example, multiple streetlights can share the same lighting module template) and simplify the modeling process for complex devices. Digital twin component entities represent the digital twin scenario-based object model, or scenario-based subclass object model. This is a scenario-based object model constructed on top of the single object model. It is primarily targeted at narrow application scenarios such as rooms, homes, and buildings. By combining multiple single object models, functional collaboration and business linkage between devices are achieved. For example, in a home energy-saving scenario, device models such as temperature and humidity sensors, air conditioners, and curtains are integrated to automatically adjust device operating status based on environmental data to achieve energy savings. Another example is office lighting scenarios, where light sensors and occupancy sensors are combined to enable intelligent lighting on / off and brightness adjustment. In a corporate firefighting scenario, smoke detectors, alarms, and exhaust systems are integrated to form a unified emergency response mechanism. This level emphasizes the abstraction and encapsulation of specific scenario requirements. Through rule engines or logical orchestration, data and capabilities from different entity models are organized into complete scenario solutions.

[0083] Digital twin system entities are constructed based on digital twin component entities. A digital twin system entity corresponds to a system, which is a holistic model of a group or multiple devices. A system enables cross-device collaboration by leveraging component capabilities. For example, a smart park's "energy management system" integrates "lighting components," "air conditioning components," and "electricity meter components," coordinating multiple devices to optimize energy consumption. An industrial production line's "automation system" achieves closed-loop control of the production process through collaboration among "robotic arm components," "sensor components," and "control components." The system constructs complex business logic through inter-component relationships, such as automatically adjusting air conditioning power based on temperature and humidity sensor data or dynamically allocating equipment load based on electricity meter readings. A digital twin system entity represents the digital twin city-level object model, or the city-level system object model. This highest-level city-level object model integrates and expands upon the single entity and scenario models, targeting a wider range of complex, cross-spatial applications and serving the overall operational management of smart cities. This layer can integrate device and scenario sub-class object models from different buildings, communities, and transportation nodes, forming a larger-scale digital twin system. For example, the urban traffic physical model can integrate traffic lights, cameras, and traffic monitoring equipment across intersections and road sections to achieve dynamic optimization of traffic signals and congestion prediction. The urban fire protection physical model improves overall emergency response capabilities by connecting resources such as fire alarm systems, drone inspections, and emergency command centers across regions. The urban energy physical model can be used to coordinate various power, gas, and renewable energy facilities to optimize energy scheduling and distribution. This layer not only possesses powerful data aggregation and analysis capabilities, but also supports intelligent decision-making and coordinated control across regions and systems.

[0084] As can be seen, elements, components, and systems form a hierarchical structure: elements are the basic units responsible for raw data collection; components aggregate elements to achieve modular functionality; and systems integrate components to support cross-device collaboration. Data and control flows are passed through these layers step by step: elements provide underlying data, components process logic, and systems coordinate the overall situation. Through standardized interfaces (such as the TSL language) and dynamic binding mechanisms (such as on-demand component loading), the object model supports unified access, flexible expansion, and efficient operation of heterogeneous devices, ultimately achieving seamless modeling and management from single devices to complex systems. Accordingly, the three layers of digital twin object models—monolithic object models, scenario-based object models, and city-level object models—form a complete system from micro to macro, from local to global. Monolithic object models provide basic data support, scenario-based models implement local functional closed-loops, and city-level models are responsible for global coordination and optimization. Data exchange and command transmission between these three layers occur through standardized interfaces, forming a unified operational mechanism from device perception to scenario linkage and urban governance. This hierarchical, progressive, and step-by-step abstraction structure not only improves the scalability and flexibility of the digital twin system, but also provides a solid technical foundation for the evolution of IoT applications from single-point intelligence to system intelligence.

[0085] On this basis, the data of digital twin element entities includes basic information (such as static information of physical devices (e.g., device ID, model), dynamic status (e.g., temperature, power consumption), and geometric and spatial information of physical devices (e.g., coordinates, orientation), etc.), attributes, behaviors, and events. The data of digital twin component entities includes the capabilities of the digital twin scenario-based object model, which describes the functions of the scenario-based object model, such as the ability to adjust the device's operating status or generate alarms. Specifically, this may include a capability description field (describes the type or category of capability) and capability content (describes the specific capabilities). Furthermore, the data of digital twin system entities includes sensor system data (specifically, a sensor system description field, indicating that it is a sensor system, and a description of the sensor system's content, i.e., the specific functions implemented by the sensor system); decision system data (specifically, a decision system description field, indicating that it is a decision system, and a description of the decision system's content, i.e., the specific functions implemented by the decision system); and notification system data (specifically, a notification system description field, indicating that it is a notification system, and a description of the notification system's content, i.e., the specific functions implemented by the notification system).

[0086] S202: The receiving device authenticates the identity information of the digital twin entities at some levels according to the data of the digital twin entities at some levels in the digital twin model.

[0087] The digital twin entities at this level are the digital twin entities that are associated with the upper and lower levels in the digital twin model.

[0088] For example, the receiving device authenticates the identity information of the digital twin component entity based on the data of the digital twin component entity and the key of the sending device, which is described in detail below.

[0089] In one possible approach, the digital twin component entity is M digital twin component entities, where M is an integer greater than 2.

[0090] On this basis, for the i-th digital twin component entity among the M digital twin component entities, i traverses the odd numbers from 1 to M:

[0091] The receiving device obtains the pre-set identity token in the data of the i-th digital twin component entity. It should be understood that the data of the digital twin biological model is transmitted encrypted, such as using the TLS 1.3 protocol for end-to-end encryption during data transmission. However, the identity authentication information used for identity information authentication is transmitted unencrypted. However, the authentication information itself is integrity-protected, such as by including the following message authentication code (MAC) 1, to prevent tampering.

[0092] The receiving device then generates identity authentication information based on the capability description field in the data of the i-th digital twin component entity (specifically, a pre-set identity token) and the key of the sending device. The receiving device then determines whether the identity authentication information is consistent with the pre-set identity token. If so, the authentication confirms that the identity information of the i-th digital twin component entity is trustworthy. Otherwise, the identity information of the i-th digital twin component entity is untrustworthy. For example, the following relationship is satisfied between the capability description field in the data of the i-th digital twin component entity, the key of the sending device, and the pre-set identity token.

[0093] AUTN=[(capability description⊕f5(K))||RAND||f1(K,capabilitydescription, RAND) =MAC1]

[0094] Among them, the preset identity token is AUTN, the capability description field is capability description, ⊕ represents exclusive OR, K is a temporary key derived from the key of the sending device and RAND, f5 represents algorithm f5 (i.e., a key algorithm), RAND is a random number, an 8-bit random number randomly generated by the sending device, and f1 represents algorithm f1 (i.e., a key algorithm); the key of the sending device is the long-term key in the USIM of the sending device, and the long-term key of the receiving device is preset by the operator of the USIM.

[0095] It should be understood that capability description ⊕ f5(K) indicates that it is a hidden capability description, avoiding the direct transmission of the plaintext capability description in the preset identity token. For the receiving device, the receiving device can use the hidden capability description to perform an XOR operation with f5(K) to obtain the plaintext capability description. In this way, the receiving device can generate identity authentication information. For example, if the identity authentication information is MAC2, MAC2=f1(K, capability description, RAND).

[0096] In this way, determining whether the identity authentication information is consistent with the preset identity token means determining whether MAC1 is consistent with MAC2.

[0097] It should also be understood that K is derived from a long-term key that does not leave the USIM, thus avoiding the risk of long-term key exposure. Furthermore, using a long-term key to derive K is to reuse the current security mechanisms on the terminal side. This simplifies the security design logic while improving security, avoiding the introduction of new security mechanisms that would be detrimental to terminal implementation.

[0098] It should also be understood that since the digital twin component entity is at the second layer, it is associated with the first and third layers. If a security risk occurs, such as information being tampered with or forged, the overall model cannot be implemented. Therefore, the second layer can be the key layer and the data most likely to be attacked. At this time, authenticating the identity information of the second layer can avoid this security risk.

[0099] In another possible manner, the receiving device authenticates the identity information of the digital twin element entity based on the data of the digital twin element entity and the key of the sending device; and the receiving device authenticates the identity information of the digital twin system entity based on the data of the digital twin system entity and the key of the sending device.

[0100] For example, the digital twin element entity is N digital twin element entities, N is an integer greater than 2, and for the j-th digital twin element entity among the N digital twin element entities, j traverses an odd number from 1 to N:

[0101] The receiving device obtains the preset identity token in the data of the j-th digital twin element entity;

[0102] The receiving device generates identity authentication information based on the events in the data of the j-th digital twin element entity and the key of the sending device;

[0103] The receiving device determines whether the identity authentication information is consistent with the preset identity token. If the identity authentication information is consistent with the preset identity token, it means that the identity information of the j-th digital twin element entity is credible through authentication. Otherwise, the identity information of the j-th digital twin element entity is not credible. Among them, the events in the data of the j-th digital twin element entity, the key of the sending device and the preset identity token satisfy the following relationship:

[0104] AUTN=[Events⊕f5(K))||RAND||f1(K,Events,RAND) =MAC1]

[0105] Wherein, the preset identity token is AUTN, the event is Events, ⊕ represents XOR, K is a temporary key derived from the sending device's key and RAND, f5 represents algorithm f5, RAND is a random number, and f1 represents algorithm f1. The sending device's key is the long-term key in the sending device's USIM, and the receiving device's long-term key is preset by the operator of the USIM.

[0106] The identity authentication information is MAC2, MAC2 = f1(K, Events, RAND);

[0107] In this way, determining whether the identity authentication information is consistent with the preset identity token means determining whether MAC1 is consistent with MAC2.

[0108] In addition, the receiving device obtains the description field of the decision system (it should be understood that it is a decision system as an example, but not limited to it, it can also be a sensing system or notification system) in the data of the digital twin system entity.

[0109] The receiving device generates identity authentication information based on the description field of the decision system and the key of the sending device. The receiving device determines whether the identity authentication information is consistent with the preset identity token. If the identity authentication information is consistent with the preset identity token, it means that the identity information of the digital twin system entity is credible through authentication. Otherwise, the identity information of the digital twin system entity is not credible. Among them, the description field of the decision system in the data, the key of the sending device, and the preset identity token satisfy the following relationship:

[0110] AUTN=[Decision description⊕f5(K))||RAND||f1(K,Decision description,RAND) =MAC1]

[0111] The preset identity token is AUTN, the description field of the decision system is Decision description, ⊕ represents XOR, K is a temporary key derived from the key of the sending device and RAND, f5 represents algorithm f5, RAND is a random number, and f1 represents algorithm f1. The key of the sending device is the long-term key in the USIM of the sending device, and the long-term key of the receiving device is preset by the operator of the USIM.

[0112] The identity authentication information is MAC2, MAC2 = f1(K, Decision description, RAND);

[0113] Determining whether the identity authentication information is consistent with the preset identity token refers to determining whether MAC1 is consistent with MAC2.

[0114] It should be understood that the specific principles of another possible embodiment can also refer to the relevant introduction of the above-mentioned possible embodiment, and will not be repeated here.

[0115] It should also be understood that since the digital twin element entity and the digital twin system entity are at the first and third layers respectively, if only the data of the first layer is tampered with or forged, it may not affect the overall function of the model, but if the data of the third layer is tampered with or forged, it will affect the overall function of the model. Considering security, the identity information of the first and third layers as a whole can be authenticated.

[0116] It should also be understood that the aforementioned generation of identity authentication information and pre-setting of identity tokens typically utilizes the description field. This is because the description field's information content is sufficiently private, yet it does not involve specific content and is not very informative, making it suitable for authentication. Of course, for events where the information content is private and limited, authentication can also be used.

[0117] S203, when it is determined through authentication that the identity information of the digital twin entity is credible, the receiving device sends the data of the digital twin biological model to the back-end device in the BIM / CIM platform.

[0118] The back-end equipment can import the data of the digital twin model into BIM / CIM for modeling to realize the functions of the digital twin model.

[0119] In summary, when the receiving device receives the data of the digital twin model transmitted by the sending device, the receiving device authenticates the identity information of the digital twin entities at some levels based on the data of the digital twin entities at some levels in the digital twin model. The digital twin entities at some levels are the digital twin entities of the upper and lower levels associated in the digital twin model, that is, a more fine-grained security authentication is achieved; when the identity information of the digital twin entity is determined to be credible through authentication, the receiving device sends the data of the digital twin model to the back-end device in the BIM / CIM platform, which can ensure that the data received by the back-end device is safe and credible, thereby further improving the security of data transmission.

[0120] In this embodiment, a receiving device is also provided. The receiving device is an interface gateway in the BIM / CIM platform. The receiving device is configured as follows: the receiving device receives the data of the digital twin model transmitted by the sending device, and the data of the digital twin model includes data of digital twin entities at different levels; the receiving device authenticates the identity information of the digital twin entities at some levels based on the data of the digital twin entities at some levels in the digital twin model, and the digital twin entities at some levels are digital twin entities that are associated with the upper and lower levels in the digital twin model; when the identity information of the digital twin entity is determined to be credible through authentication, the receiving device sends the data of the digital twin model to the back-end device in the BIM / CIM platform.

[0121] Optionally, digital twin entities at different levels include digital twin element entities at the first level, digital twin component entities at the second level, and digital twin system entities at the third level, wherein the digital twin element entities represent the digital twin monomer object model, the digital twin component entities are constructed based on the digital twin element entities, the digital twin component entities represent the digital twin scenario-based object model, the digital twin system entities are constructed based on the digital twin component entities, and the digital twin system entities represent the digital twin city-level object model.

[0122] Optionally, the data of the digital twin element entity includes basic information, attributes, behaviors and events, the data of the digital twin component entity includes the capabilities of the digital twin scenario-based object model, and the data of the digital twin system entity includes sensing system data, decision system data and notification system data.

[0123] Optionally, the receiving device authenticates the identity information of digital twin entities at some levels based on the data of digital twin entities at some levels in the digital twin biological model, including: the receiving device authenticates the identity information of the digital twin component entity based on the data of the digital twin component entity and the key of the sending device.

[0124] Optionally, the digital twin component entity is M digital twin component entities, M is an integer greater than 2, and the receiving device authenticates the identity information of the digital twin component entity based on the data of the digital twin component entity and the key of the sending device, including: for the i-th digital twin component entity among the M digital twin component entities, i traverses an odd number from 1 to M: the receiving device obtains a preset identity token in the data of the i-th digital twin component entity; the receiving device generates identity authentication information based on the capability description field in the data of the i-th digital twin component entity and the key of the sending device; the receiving device determines whether the identity authentication information is consistent with the preset identity token. If the identity authentication information is consistent with the preset identity token, it means that the identity information of the i-th digital twin component entity is credible through authentication; otherwise, the identity information of the i-th digital twin component entity is not credible.

[0125] Optionally, the capability description field in the data of the i-th digital twin component entity, the key of the sending device, and the preset identity token satisfy the following relationship:

[0126] AUTN=[(capability description⊕f5(K))||RAND||f1(K,capabilitydescription, RAND) =MAC1]

[0127] The preset identity token is AUTN, the capability description field is capability description, ⊕ represents exclusive OR, K is a temporary key derived from the sending device's key and RAND, f5 represents algorithm f5, RAND is a random number, and f1 represents algorithm f1. The sending device's key is the long-term key in the sending device's USIM, and the receiving device's long-term key is preset by the operator of the USIM.

[0128] The identity authentication information is MAC2, MAC2 = f1(K, capability description, RAND);

[0129] Determining whether the identity authentication information is consistent with the preset identity token refers to determining whether MAC1 is consistent with MAC2.

[0130] Optionally, the receiving device authenticates the identity information of digital twin entities at some levels based on the data of digital twin entities at some levels in the digital twin biological model, including: the receiving device authenticates the identity information of the digital twin element entity based on the data of the digital twin element entity and the key of the sending device; and the receiving device authenticates the identity information of the digital twin system entity based on the data of the digital twin system entity and the key of the sending device.

[0131] Optionally, the digital twin element entity is N digital twin element entities, N is an integer greater than 2, and the receiving device authenticates the identity information of the digital twin element entity based on the data of the digital twin element entity and the key of the sending device, including: for the j-th digital twin element entity among the N digital twin element entities, j traverses an odd number from 1 to N: the receiving device obtains a preset identity token in the data of the j-th digital twin element entity; the receiving device generates identity authentication information based on the event in the data of the j-th digital twin element entity and the key of the sending device; the receiving device determines whether the identity authentication information is consistent with the preset identity token. If the identity authentication information is consistent with the preset identity token, it means that the identity information of the j-th digital twin element entity is credible through authentication; otherwise, the identity information of the j-th digital twin element entity is not credible.

[0132] Optionally, the following relationship is satisfied between the events in the data of the j-th digital twin element entity, the key of the sending device, and the preset identity token:

[0133] AUTN=[Events⊕f5(K))||RAND||f1(K,Events,RAND) =MAC1]

[0134] Wherein, the preset identity token is AUTN, the event is Events, ⊕ represents XOR, K is a temporary key derived from the sending device's key and RAND, f5 represents algorithm f5, RAND is a random number, and f1 represents algorithm f1. The sending device's key is the long-term key in the sending device's USIM, and the receiving device's long-term key is preset by the operator of the USIM.

[0135] The identity authentication information is MAC2, MAC2 = f1(K, Events, RAND);

[0136] Determining whether the identity authentication information is consistent with the preset identity token refers to determining whether MAC1 is consistent with MAC2.

[0137] Optionally, the receiving device authenticates the identity information of the digital twin system entity based on the data of the digital twin system entity and the key of the sending device. The receiving device obtains the description field of the decision system in the data of the digital twin system entity; the receiving device generates identity authentication information based on the description field of the decision system and the key of the sending device; the receiving device determines whether the identity authentication information is consistent with the preset identity token. If the identity authentication information is consistent with the preset identity token, it means that the identity information of the digital twin system entity determined through authentication is credible, otherwise, the identity information of the digital twin system entity is not credible.

[0138] Optionally, the following relationship is satisfied between the description field of the decision system in the data, the key of the sending device, and the preset identity token:

[0139] AUTN=[Decision description⊕f5(K))||RAND||f1(K,Decision description,RAND) =MAC1]

[0140] The preset identity token is AUTN, the description field of the decision system is Decision description, ⊕ represents XOR, K is a temporary key derived from the key of the sending device and RAND, f5 represents algorithm f5, RAND is a random number, and f1 represents algorithm f1. The key of the sending device is the long-term key in the USIM of the sending device, and the long-term key of the receiving device is preset by the operator of the USIM.

[0141] The identity authentication information is MAC2, MAC2 = f1(K, Decision description, RAND);

[0142] Determining whether the identity authentication information is consistent with the preset identity token refers to determining whether MAC1 is consistent with MAC2.

[0143] The above embodiments can be implemented in whole or in part via software, hardware (e.g., circuits), firmware, or any other combination thereof. When implemented using software, the above embodiments can be implemented in whole or in part in the form of a computer program product. The computer program product comprises one or more computer instructions or computer programs. When loaded or executed on a computer, the processes or functions described in the embodiments of this application are fully or partially performed. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer program or instructions can be stored in a computer-readable storage medium or transferred from one computer-readable storage medium to another. For example, the computer program or instructions can be transferred from one website, computer, server, or data center to another website, computer, server, or data center via wired means (e.g., infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium accessible by a computer or a data storage device such as a server or data center that contains a collection of one or more available media. The available medium can be magnetic media (e.g., floppy disks, hard disks, magnetic tapes), optical media (e.g., DVDs), or semiconductor media. The semiconductor media can be a solid-state drive.

[0144] It should be understood that in the various embodiments of the present application, the size of the serial numbers of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0145] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0146] Those skilled in the art will clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0147] In the several embodiments provided in this application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are merely schematic. For example, the division of the units is merely a logical function division. In actual implementation, there may be other division methods, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0148] The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple network units. Some or all of these units may be selected to achieve the purpose of this embodiment according to actual needs.

[0149] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0150] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions for enabling a computer device (which can be a personal computer, server, or network device, etc.) to execute all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes various media that can store program code, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk.

[0151] The above description is merely a specific embodiment of the present application, but the scope of protection of the present application is not limited thereto. Any changes or substitutions that can be easily conceived by a person skilled in the art within the technical scope disclosed in this application should be included in the scope of protection of this application. Therefore, the scope of protection of this application should be based on the scope of protection of the claims.

Claims

1. A data transmission method based on a smart city digital twin model, characterized in that: Applied to a receiving device, the receiving device being an interface gateway in a BIM / CIM platform, the method includes: The receiving device receives data of a digital twin model transmitted by a sending device, where the sending device is a physical model, and the data of the digital twin model includes data of digital twin entities at different levels; The receiving device authenticates the identity information of the digital twin entities at some levels in the digital twin model based on the data of the digital twin entities at some levels, where the digital twin entities at some levels are digital twin entities at upper and lower levels associated with the digital twin model; When the identity information of the digital twin entity is determined to be credible through authentication, the receiving device sends the data of the digital twin model to the back-end device in the BIM / CIM platform; Among them, the digital twin entities at different levels include digital twin element entities at the first level, digital twin component entities at the second level and digital twin system entities at the third level. The digital twin element entity represents the digital twin monomer object model, the digital twin component entity is constructed based on the digital twin element entity, the digital twin component entity represents the digital twin scenario object model, the digital twin system entity is constructed based on the digital twin component entity, the digital twin system entity represents the digital twin city-level object model, the digital twin entities at some levels include the digital twin component entity, or the digital twin entities at some levels include the digital twin element entity and the digital twin system entity.

2. The data transmission method according to claim 1, wherein: The data of the digital twin component entity includes the capabilities of the digital twin scenario-based object model, and the data of the digital twin system entity includes sensing system data, decision system data, and notification system data.

3. The data transmission method according to claim 1 or 2, characterized in that: The receiving end device authenticates the identity information of the digital twin entities at some levels according to the data of the digital twin entities at some levels in the digital twin model, including: The receiving device authenticates the identity information of the digital twin component entity based on the data of the digital twin component entity and the key of the sending device.

4. The data transmission method according to claim 3, wherein: The digital twin component entities are M digital twin component entities, where M is an integer greater than 2. The receiving end device authenticates the identity information of the digital twin component entities according to the data of the digital twin component entities and the key of the sending end device, including: For the i-th digital twin component entity among the M digital twin component entities, i traverses the odd numbers from 1 to M: The receiving device obtains a preset identity token in the data of the i-th digital twin component entity; The receiving device generates identity authentication information based on the capability description field in the data of the i-th digital twin component entity and the key of the sending device; The receiving device determines whether the identity authentication information is consistent with the preset identity token. If the identity authentication information is consistent with the preset identity token, it means that the identity information of the i-th digital twin component entity is credible through authentication; otherwise, the identity information of the i-th digital twin component entity is not credible.

5. The data transmission method according to claim 4, wherein: The capability description field in the data of the i-th digital twin component entity, the key of the sending end device, and the preset identity token satisfy the following relationship: AUTN=[(capability description⊕f5(K))||RAND||f1(K,capability description,RAND) =MAC1] The preset identity token is AUTN, the capability description field is capability description, ⊕ represents exclusive OR, K is a temporary key derived based on the key of the sending device and RAND, f5 represents algorithm f5, RAND is a random number, and f1 represents algorithm f1; the key of the sending device is the long-term key in the USIM of the sending device, and the long-term key of the receiving device is preset by the operator of the USIM; The identity authentication information is MAC2, MAC2=f1(K, capability description, RAND); Determining whether the identity authentication information is consistent with the preset identity token refers to determining whether MAC1 is consistent with MAC2.

6. The data transmission method according to claim 1 or 2, characterized in that: The receiving end device authenticates the identity information of the digital twin entities at some levels according to the data of the digital twin entities at some levels in the digital twin model, including: The receiving device authenticates the identity information of the digital twin element entity based on the data of the digital twin element entity and the key of the sending device; Furthermore, the receiving device authenticates the identity information of the digital twin system entity based on the data of the digital twin system entity and the key of the sending device.

7. The data transmission method according to claim 6, characterized in that: The digital twin element entities are N digital twin element entities, where N is an integer greater than 2. The receiving device authenticates the identity information of the digital twin element entities according to the data of the digital twin element entities and the key of the sending device, including: For the j-th digital twin element entity among the N digital twin element entities, j traverses an odd number from 1 to N: The receiving end device obtains the preset identity token in the data of the j-th digital twin element entity; The receiving device generates identity authentication information based on the event in the data of the j-th digital twin element entity and the key of the sending device; The receiving device determines whether the identity authentication information is consistent with the preset identity token. If the identity authentication information is consistent with the preset identity token, it means that the identity information of the j-th digital twin element entity is credible through authentication; otherwise, the identity information of the j-th digital twin element entity is not credible.

8. The data transmission method according to claim 7, wherein: The events in the data of the j-th digital twin element entity, the key of the sending end device and the preset identity token satisfy the following relationship: AUTN=[Events⊕f5(K))||RAND||f1(K,Events,RAND) =MAC1] The preset identity token is AUTN, the event is Events, ⊕ represents XOR, K is a temporary key derived based on the key of the sending device and RAND, f5 represents algorithm f5, RAND is a random number, and f1 represents algorithm f1; the key of the sending device is the long-term key in the USIM of the sending device, and the long-term key of the receiving device is preset by the operator of the USIM; The identity authentication information is MAC2, MAC2=f1(K, Events, RAND); Determining whether the identity authentication information is consistent with the preset identity token refers to determining whether MAC1 is consistent with MAC2.

9. The data transmission method according to claim 6, characterized in that: The receiving device authenticates the identity information of the digital twin system entity according to the data of the digital twin system entity and the key of the sending device, including: The receiving end device obtains a description field of the decision system in the data of the digital twin system entity; The receiving device generates identity authentication information according to the description field of the decision system and the key of the sending device; The receiving device determines whether the identity authentication information is consistent with the preset identity token. If the identity authentication information is consistent with the preset identity token, it means that the identity information of the digital twin system entity is credible through authentication. Otherwise, the identity information of the digital twin system entity is not credible.

Images