Encrypted communication method and system for fire-fighting Internet of Things equipment

Abstract

The invention provides a fire-fighting Internet of Things equipment encryption communication method and system, and relates to the technical field of Internet of Things, and the method comprises the steps: carrying out the identity registration through a built-in PUF circuit, achieving the unique identity authentication of equipment through a challenge-response mechanism, and generating a one-time session key; performing performance detection on the fire-fighting Internet of Things equipment passing the identity authentication through the fire-fighting Internet of Things platform, and performing equipment grade division on the fire-fighting Internet of Things equipment; performing key negotiation and adaptive algorithm selection on the equipment according to the one-time session key and the grading result of the fire-fighting Internet of Things equipment to obtain a communication key of the fire-fighting Internet of Things equipment; encrypting and decrypting communication data by using the communication key, and dynamically adjusting an encryption algorithm according to the real-time change of the performance of the fire-fighting Internet of Things equipment in the communication process to obtain the latest communication key so as to complete the encrypted communication of the fire-fighting Internet of Things equipment; according to the invention, the communication security of the fire-fighting Internet of Things equipment is ensured, and the real-time performance and reliability of the equipment are improved.

Description

Technical Field

[0001] This invention relates to the field of Internet of Things (IoT) technology, and more specifically, to an encrypted communication method and system for fire protection IoT devices. Background Technology

[0002] With the development of smart cities and IoT technologies, fire protection IoT is gradually becoming an important infrastructure for improving fire monitoring, early warning, and emergency response capabilities. Fire protection IoT devices include smoke detectors, temperature sensors, smart sprinkler systems, fire-fighting robots, and fire control terminals. These devices are connected via wired or wireless networks, transmitting sensor data and receiving control commands in real time. Because fire scenarios directly relate to the safety of people and property, the security, integrity, and real-time nature of communication are particularly critical. Encrypted communication methods are a crucial foundation for ensuring the safe operation of the system.

[0003] In the existing technology, the common encrypted communication methods are mainly classified as follows: (1) Communication methods based on symmetric cryptography: Commonly used algorithms include AES, DES, SM4, etc., which have high computational efficiency and are suitable for terminal devices with limited resources. However, symmetric key schemes rely on pre-shared keys between devices. In large-scale deployment and long-term operation scenarios, key distribution, updating and storage are difficult, which can easily lead to key leakage or excessive management overhead; (2) Communication methods based on asymmetric cryptography: such as RSA or elliptic curve cryptography (ECC), which can provide strong security and flexible key negotiation mechanisms and are suitable for dynamic networking environments. However, these methods have large computational and storage overhead. For fire terminals with low power consumption and low computing power, it is difficult to bear high-intensity asymmetric operations, and may lead to response delays in fire emergency scenarios; (3) Lightweight encrypted communication methods for the Internet of Things: For resource-limited scenarios, existing research has proposed lightweight block ciphers, stream ciphers or trimmed versions of ECC to reduce computational and communication burdens. These methods have been applied in smart homes, industrial Internet of Things and other fields. However, due to the special operating environment and higher security and real-time requirements of fire IoT devices, existing methods are difficult to apply directly. In summary, existing encrypted communication methods in fire protection IoT devices suffer from problems such as reliance on storage for identity authentication, difficulty in updating keys, fixed and rigid algorithms, and difficulty in balancing lightweight design and security, making it difficult to meet the comprehensive requirements of fire protection scenarios for security, real-time performance, and reliability. Summary of the Invention

[0004] The purpose of this invention is to provide an encrypted communication method for fire protection IoT devices, which can solve the problems of existing encrypted communication methods in fire protection IoT devices, such as identity authentication relying on storage, difficulty in key updates, fixed and rigid algorithms, and difficulty in balancing lightweight and security.

[0005] The technical solution of this invention is as follows:

[0006] In a first aspect, this application provides an encrypted communication method for fire protection IoT devices, which includes the following steps:

[0007] S1. When the fire protection IoT device leaves the factory, it is registered by the built-in Physically Unclonable Function (PUF) circuit, and the unique identity authentication of the device is achieved through the challenge-response mechanism based on the registration information, while generating a one-time session key;

[0008] S2. Conduct performance testing on fire IoT devices that have passed identity authentication through the fire IoT platform, and classify the fire IoT devices into equipment levels based on the performance test results.

[0009] S3. Based on the one-time session key and the classification results of the fire protection IoT device, perform key negotiation and adaptive algorithm selection on the device to obtain the communication key of the fire protection IoT device;

[0010] S4. Use the communication key to encrypt and decrypt communication data, and dynamically adjust the encryption algorithm according to the real-time changes in the performance of the fire protection IoT device during the communication process to obtain the latest communication key to complete the encrypted communication of the fire protection IoT device.

[0011] Furthermore, in step S1, the calculation formula for identity registration via the built-in Physically Unclonable Function (PUF) circuit includes: r i =PUF(ID||c i (i=0,1,...,q-1)

[0012] In the formula, r i For the response value, PUF is the Physically Unclonable Function, ID is the device parameter, and c i Let q be the i-th random challenge value, where i is the sequence number and q is the total number of random challenge values.

[0013] Furthermore, in step S1, the calculation process for achieving unique device authentication through the challenge-response mechanism includes: j=(k c +k s ) mod q, r'=PUF(ID||c j ), r' j+1 =PUF(ID||c j+1 ),

[0014] In the formula, j is the sequence number, k c k is a random number generated by the fire protection IoT device and sent to the fire protection IoT platform. sThe random number generated for the fire protection IoT platform, mod is the modulo operation, q is the total number of random challenge values, and r' represents the response. j+1 This is a temporary response; PUF stands for Physically Unclonable Function; ID represents the device parameter; c j+1 This is the (j+1)th random challenge value.

[0015] Furthermore, in step S2, the aforementioned performance testing includes testing the computing power, storage space, and energy consumption status of the fire protection IoT device, and the calculation formula includes: m enc =r' j+1 ⊕(m memory ||m cpu ||m power ), (m memory ||m cpu ||m power )=r j+1 ⊕m enc，

[0016] In the formula, ⊕ represents the XOR operation, and m enc For encrypted text, r' j+1 For temporary response, m memory This represents the memory usage value, m. cpu This represents the CPU utilization value, m. power This represents energy consumption.

[0017] Furthermore, the above equipment classification includes classifying fire protection IoT devices into low-performance devices, medium-performance devices, and high-performance devices based on performance test results.

[0018] Furthermore, the aforementioned key negotiation includes: the fire protection IoT platform calculating m based on the performance perception of the fire protection IoT devices. alg The process involves decryption, and the calculation of the communication key based on the decryption result. The calculation process includes: m alg =r j+1 ⊕(c j-1 ||m scheme ), (c j-1 ||m scheme )=r' j+1 ⊕m alg， s0=Hash(k c ||ID||c j-1 ||r j-1 ), s0'=Hash(k c ||ID||c j-1 ||PUF(c j-1 )),

[0019] In the formula, m alg The encrypted ciphertext is the concatenation of the performance index and the (j-1)th challenge value sent by the fire protection IoT platform to the fire protection IoT device. j+1 Here, c represents the encryption performance index, ⊕ represents the XOR operation, and c is the delimiter for the encryption performance index j-1 For the (j-1)th random challenge value stored in the fire protection IoT platform, m scheme r' is the performance index. j+1 For a temporary response, s0 is the initial key, Hash is the SM3 hash algorithm, and k c A random number generated and sent to the fire protection IoT platform by the fire protection IoT device, where ID represents the device parameter, r j-1 s0' is the (j-1)th response value stored in the fire protection IoT platform, s0' is the communication key, and PUF is the physically unclonable function.

[0020] Furthermore, the above adaptive algorithm selection includes: for low-performance devices, lightweight stream cipher algorithms are selected; for medium-performance devices, lightweight block cipher algorithms are selected; and for high-performance devices, symmetric cryptography algorithms are selected.

[0021] Secondly, this application provides an encrypted communication system for fire protection IoT devices, comprising:

[0022] The fire protection IoT device identity registration and authentication module is used to register the identity of fire protection IoT devices at the factory through the built-in Physically Unclonable Function (PUF) circuit, and to achieve unique device identity authentication through a challenge-response mechanism based on the registration information, while generating a one-time session key;

[0023] The performance perception module is used to perform performance testing on fire IoT devices that have passed identity authentication through the fire IoT platform, and classify the fire IoT devices into equipment levels based on the performance test results.

[0024] The key negotiation and adaptive algorithm selection module is used to perform key negotiation and adaptive algorithm selection on the fire protection IoT device based on the one-time session key and the level classification result to obtain the communication key of the fire protection IoT device.

[0025] The encrypted communication module is used to encrypt and decrypt communication data using a communication key, and dynamically adjusts the encryption algorithm in real time according to the performance changes of the fire protection IoT device during the communication process to obtain the latest communication key to complete the encrypted communication of the fire protection IoT device.

[0026] Thirdly, this application provides an electronic device, comprising:

[0027] Memory, used to store one or more programs;

[0028] processor;

[0029] When one or more of the above programs are executed by the above processor, a method for encrypted communication of fire protection IoT devices as described in any of the first aspects above is implemented.

[0030] Fourthly, this application provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements an encrypted communication method for fire protection IoT devices as described in any of the first aspects above.

[0031] Compared with the prior art, the present invention has at least the following advantages or beneficial effects:

[0032] (1) The present invention provides a method and system for encrypted communication of fire protection IoT devices. It registers the identity through a built-in Physically Unclonable Function (PUF) circuit and generates a one-time session key by using a challenge-response mechanism to achieve unique device identity authentication based on the registration information. This eliminates the need to store the key, reduces the risk of key leakage, and improves the reliability of device identity authentication.

[0033] (2) This invention uses the one-time session key and the level classification result of the fire protection IoT device to perform key negotiation and adaptive algorithm selection for the device. It can automatically select the symmetric encryption algorithm according to the device performance, realize the adaptive security mechanism of "lightweight for weak devices and high strength for strong devices", avoid the waste of resources or insufficient security caused by the unified algorithm, and effectively reduce the computing burden and energy consumption of low-performance devices while ensuring security, and meet the strict requirements of fire protection scenarios for real-time communication.

[0034] (3) The present invention combines PUF authentication and dynamic encryption mechanism to avoid frequent manual key updates and maintenance, and is suitable for the characteristics of long-term fixed deployment and long life cycle of fire protection equipment. Attached Figure Description

[0035] To more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings used in the embodiments will be briefly introduced below. It should be understood that the following drawings only show some embodiments of the present invention and should not be regarded as a limitation on the scope. For those skilled in the art, other related drawings can be obtained based on these drawings without creative effort.

[0036] Figure 1 This is a step diagram of an encrypted communication method for fire protection IoT devices according to the present invention;

[0037] Figure 2 This is a schematic structural block diagram of an electronic device according to an embodiment of the present invention.

[0038] Icons: 101, memory; 102, processor; 103, communication interface. Detailed Implementation

[0039] To make the objectives, technical solutions, and advantages of the embodiments of this application clearer, the technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. The components of the embodiments of this application described and shown in the accompanying drawings can generally be arranged and designed in various different configurations.

[0040] Therefore, the following detailed description of the embodiments of this application provided in the accompanying drawings is not intended to limit the scope of the claimed application, but merely to illustrate selected embodiments of the application. All other embodiments obtained by those skilled in the art based on the embodiments of this application without inventive effort are within the scope of protection of this application.

[0041] It should be noted that similar labels and letters in the following figures indicate similar items. Therefore, once an item is defined in one figure, it does not need to be further defined and explained in subsequent figures.

[0042] It should be noted that, in this document, the term "comprising" or any other variation thereof is intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.

[0043] The following detailed description of some embodiments of this application is provided in conjunction with the accompanying drawings. Unless otherwise specified, the various embodiments and features described below can be combined with each other.

[0044] Example 1

[0045] Please see Figure 1 , Figure 1 The diagram shows the steps of an encrypted communication method for fire protection IoT devices provided in an embodiment of this application.

[0046] In a first aspect, this application provides an encrypted communication method for fire protection IoT devices, which includes the following steps:

[0047] S1. When the fire protection IoT device leaves the factory, it is registered by the built-in Physically Unclonable Function (PUF) circuit, and the unique identity authentication of the device is achieved through the challenge-response mechanism based on the registration information, while generating a one-time session key;

[0048] S2. Conduct performance testing on fire IoT devices that have passed identity authentication through the fire IoT platform, and classify the fire IoT devices into equipment levels based on the performance test results.

[0049] S3. Based on the one-time session key and the classification results of the fire protection IoT device, perform key negotiation and adaptive algorithm selection on the device to obtain the communication key of the fire protection IoT device;

[0050] S4. Use the communication key to encrypt and decrypt communication data, and dynamically adjust the encryption algorithm according to the real-time changes in the performance of the fire protection IoT device during the communication process to obtain the latest communication key to complete the encrypted communication of the fire protection IoT device.

[0051] In a preferred embodiment, step S1 includes the following calculation formula for identity registration via the built-in Physically Unclonable Function (PUF) circuit: r i =PUF(ID||c i (i=0,1,...,q-1),

[0052] In the formula, r i For the response value, PUF is the Physically Unclonable Function, ID is the device parameter, and c i Let q be the i-th random challenge value, where i is the sequence number and q is the total number of random challenge values.

[0053] As a preferred implementation, step S1, the calculation process for unique device authentication through a challenge-response mechanism, includes: j=(k c +k s ) mod q, r'=PUF(ID||c j ), r' j+1 =PUF(ID||c j+1 ),

[0054] In the formula, j is the sequence number, k c k is a random number generated by the fire protection IoT device and sent to the fire protection IoT platform. s The random number generated for the fire protection IoT platform, mod is the modulo operation, q is the total number of random challenge values, and r' represents the response. j+1 This is a temporary response; PUF stands for Physically Unclonable Function; ID represents the device parameter; c j+1 This is the (j+1)th random challenge value.

[0055] In a preferred embodiment, step S2, performance testing includes testing the computing power, storage space, and energy consumption status of the fire protection IoT device, and the calculation formula includes: m enc =r' j+1 ⊕(m memory ||m cpu ||m power ), (m memory ||m cpu ||m power )=r j+1 ⊕m enc，

[0056] In the formula, ⊕ represents the XOR operation, and m enc For encrypted text, r' j+1 For temporary response, m memory This represents the memory usage value, m. cpu This represents the CPU utilization value, m. power This represents energy consumption.

[0057] As a preferred implementation, the equipment classification includes classifying fire protection IoT devices into low-performance devices, medium-performance devices, and high-performance devices based on performance test results.

[0058] As a preferred implementation, key negotiation includes: the fire protection IoT platform calculating m based on the performance perception of the fire protection IoT devices. alg The process involves decryption, and the calculation of the communication key based on the decryption result. The calculation process includes: m alg =r j+1 ⊕(c j-1 ||m scheme ), (c j-1 ||m scheme )=r' j+1 ⊕m alg， s0=Hash(k c ||ID||c j-1 ||r j-1 ), s0'=Hash(k c ||ID||c j-1 ||PUF(c j-1 )),

[0059] In the formula, m alg The encrypted ciphertext is the concatenation of the performance index and the (j-1)th challenge value sent by the fire protection IoT platform to the fire protection IoT device. j+1 Here, c represents the encryption performance index, ⊕ represents the XOR operation, and c is the delimiter for the encryption performance indexj-1 For the (j-1)th random challenge value stored in the fire protection IoT platform, m scheme r' is the performance index. j+1 For a temporary response, s0 is the initial key, Hash is the SM3 hash algorithm, and k c A random number generated and sent to the fire protection IoT platform by the fire protection IoT device, where ID represents the device parameter, r j-1 s0' is the (j-1)th response value stored in the fire protection IoT platform, s0' is the communication key, and PUF is the physically unclonable function.

[0060] As a preferred implementation, the adaptive algorithm selection includes: for low-performance devices, using lightweight stream cipher algorithms; for medium-performance devices, using lightweight block cipher algorithms; and for high-performance devices, using symmetric cryptography algorithms.

[0061] Secondly, this application provides an encrypted communication system for fire protection IoT devices, comprising:

[0062] The fire protection IoT device identity registration and authentication module is used to register the identity of fire protection IoT devices at the factory through the built-in Physically Unclonable Function (PUF) circuit, and to achieve unique device identity authentication through a challenge-response mechanism based on the registration information, while generating a one-time session key;

[0063] The performance perception module is used to perform performance testing on fire IoT devices that have passed identity authentication through the fire IoT platform, and classify the fire IoT devices into equipment levels based on the performance test results.

[0064] The key negotiation and adaptive algorithm selection module is used to perform key negotiation and adaptive algorithm selection on the fire protection IoT device based on the one-time session key and the level classification result to obtain the communication key of the fire protection IoT device.

[0065] The encrypted communication module is used to encrypt and decrypt communication data using a communication key, and dynamically adjusts the encryption algorithm in real time according to the performance changes of the fire protection IoT device during the communication process to obtain the latest communication key to complete the encrypted communication of the fire protection IoT device.

[0066] As a preferred implementation, the calculation formula for identity registration via the built-in Physically Unclonable Function (PUF) circuit includes: r i =PUF(ID||c i (i=0,1,...,q-1),

[0067] In the formula, r i For the response value, PUF is the Physically Unclonable Function, ID is the device parameter, and c iLet q be the i-th random challenge value, where i is the sequence number and q is the total number of random challenge values.

[0068] As a preferred implementation, the calculation process for unique device authentication via a challenge-response mechanism includes: j=(k c +k s )mod·q, r'=PUF(ID||r'), r' j+1 =PUF(ID||c j+1 ),

[0069] In the formula, j is the sequence number, k c k is a random number generated by the fire protection IoT device and sent to the fire protection IoT platform. s The random number generated for the fire protection IoT platform, mod is the modulo operation, q is the total number of random challenge values, and r' represents the response. j+1 This is a temporary response; PUF stands for Physically Unclonable Function; ID represents the device parameter; c j+1 This is the (j+1)th random challenge value.

[0070] As a preferred implementation, performance testing includes testing the computing power, storage space, and energy consumption status of the fire protection IoT device, and the calculation formula includes: m enc =r' j+1 ⊕(m memory ||m cpu ||m power ), (m memory ||m cpu ||m power )=r j+1 ⊕m enc，

[0071] In the formula, ⊕ represents the XOR operation, and m enc For encrypted text, r' j+1 For temporary response, m memory This represents the memory usage value, m. cpu This represents the CPU utilization value, m. power This represents energy consumption.

[0072] As a preferred implementation, the equipment classification includes classifying fire protection IoT devices into low-performance devices, medium-performance devices, and high-performance devices based on performance test results.

[0073] As a preferred implementation, key negotiation includes: the fire protection IoT platform calculating m based on the performance perception of the fire protection IoT devices. algThe process involves decryption, and the calculation of the communication key based on the decryption result. The calculation process includes: m alg =r j+1 ⊕(c j-1 ||m scheme ), (c j-1 ||m scheme )=r' j+1 ⊕m alg， s0=Hash(k c ||ID||c j-1 ||r j-1 ), s0'=Hash(k c ||ID||c j-1 ||PUF(c j-1 )),

[0074] In the formula, m alg The encrypted ciphertext is the concatenation of the performance index and the (j-1)th challenge value sent by the fire protection IoT platform to the fire protection IoT device. j+1 Here, c represents the encryption performance index, ⊕ represents the XOR operation, and c is the delimiter for the encryption performance index j-1 For the (j-1)th random challenge value stored in the fire protection IoT platform, m scheme r' is the performance index. j+1 For a temporary response, s0 is the initial key, Hash is the SM3 hash algorithm, and k c A random number generated and sent to the fire protection IoT platform by the fire protection IoT device, where ID represents the device parameter, r j-1 s0' is the (j-1)th response value stored in the fire protection IoT platform, s0' is the communication key, and PUF is the physically unclonable function.

[0075] As a preferred implementation, the adaptive algorithm selection includes: for low-performance devices, using lightweight stream cipher algorithms; for medium-performance devices, using lightweight block cipher algorithms; and for high-performance devices, using symmetric cryptography algorithms.

[0076] Example 2

[0077] Please see Figure 2 , Figure 2 This is a schematic structural block diagram of an electronic device provided in an embodiment of this application.

[0078] An electronic device includes a memory 101, a processor 102, and a communication interface 103. The memory 101, processor 102, and communication interface 103 are electrically connected directly or indirectly to enable data transmission or interaction. For example, these components can be electrically connected to each other via one or more communication buses or signal lines. The memory 101 can be used to store software programs and modules. The processor 102 executes the software programs and modules stored in the memory 101 to perform various functional applications and data processing. The communication interface 103 can be used for signaling or data communication with other node devices.

[0079] The memory 101 may be, but is not limited to, random access memory (RAM), read-only memory (ROM), programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), etc.

[0080] The processor 102 can be an integrated circuit chip with signal processing capabilities. The processor 102 can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components.

[0081] It is understood that the structure shown in the figure is for illustrative purposes only, and a method for encrypted communication of fire protection IoT devices may include more or fewer components than shown in the figure, or have a different configuration. The components shown in the figure may be implemented in hardware, software, or a combination thereof.

[0082] In the embodiments provided in this application, it should be understood that the disclosed methods can also be implemented in other ways. The embodiments described above are merely illustrative. For example, the flowcharts or block diagrams in the accompanying drawings illustrate the architecture, functionality, and operation of possible implementations of methods and computer program products according to various embodiments of this application. In this regard, each block in the flowchart or block diagram may represent a module, segment, or portion of code containing one or more executable instructions for implementing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the blocks may occur in a different order than those marked in the drawings. For example, two consecutive blocks may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in the block diagram and / or flowchart, and combinations of blocks in the block diagram and / or flowchart, can be implemented using a dedicated hardware-based system that performs the specified function or action, or using a combination of dedicated hardware and computer instructions.

[0083] In addition, the functional modules in the various embodiments of this application can be integrated together to form an independent part, or each module can exist independently, or two or more modules can be integrated to form an independent part.

[0084] If the aforementioned functions are implemented as software functional modules and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or a portion of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0085] The above description is merely a preferred embodiment of this application and is not intended to limit this application. Various modifications and variations can be made to this application by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the protection scope of this application.

[0086] It will be apparent to those skilled in the art that this application is not limited to the details of the exemplary embodiments described above, and that this application can be implemented in other specific forms without departing from the spirit or essential characteristics of this application. Therefore, the embodiments should be considered illustrative and non-limiting in all respects, and the scope of this application is defined by the appended claims rather than the foregoing description. Thus, all variations falling within the meaning and scope of equivalents of the claims are intended to be included within this application. No reference numerals in the claims should be construed as limiting the scope of the claims.

Claims

1. A method for encrypted communication of fire protection IoT devices, characterized in that, Includes the following steps: S1. When the fire protection IoT device leaves the factory, it is registered by the built-in Physically Unclonable Function (PUF) circuit, and the device is uniquely authenticated by the challenge-response mechanism based on the registration information, while generating a one-time session key. S2. Conduct performance testing on fire IoT devices that have passed identity authentication through the fire IoT platform, and classify the fire IoT devices into equipment levels based on the performance test results. S3. Based on the one-time session key and the classification results of the fire protection IoT device, perform key negotiation and adaptive algorithm selection on the device to obtain the communication key of the fire protection IoT device; S4. Use the communication key to encrypt and decrypt communication data, and dynamically adjust the encryption algorithm according to the real-time changes in the performance of the fire protection IoT device during the communication process to obtain the latest communication key to complete the encrypted communication of the fire protection IoT device.

2. The encrypted communication method for fire protection IoT devices as described in claim 1, characterized in that, In step S1, the calculation formula for identity registration via the built-in Physically Unclonable Function (PUF) circuit is... include: r i =PUF(ID||c i )(i=0,1,...,q-1) In the formula, r i For the response value, PUF is the Physically Unclonable Function, ID is the device parameter, and c i Let q be the i-th random challenge value, where i is the sequence number and q is the total number of random challenge values.

3. The encrypted communication method for fire protection IoT devices as described in claim 1, characterized in that, In step S1, the calculation process for achieving unique device authentication through the challenge-response mechanism includes: j=(k c +k s ) mod q r'=PUF(ID||c j ) r' j+1 =PUF(ID||c j+1 ) In the formula, j is the sequence number, k c k is a random number generated by the fire protection IoT device and sent to the fire protection IoT platform. s The random number generated for the fire protection IoT platform, mod is the modulo operation, q is the total number of random challenge values, and r' represents the response. j+1 This is a temporary response; PUF stands for Physically Unclonable Function; ID represents the device parameter; c j+1 This is the (j+1)th random challenge value.

4. The encrypted communication method for fire protection IoT devices as described in claim 1, characterized in that, In step S2, the performance testing includes testing the computing power, storage space, and energy consumption status of the fire protection IoT device, and the calculation formula includes: m enc =r’ j+1 ⊕(m memory ||m cpu ||m power ) (m memory ||m cpu ||m power )=r j+1 ⊕m enc In the formula, ⊕ represents the XOR operation, and m enc For encrypted text, r' j+1 For temporary response, m memory This represents the memory usage value, m. cpu This represents the CPU utilization value, m. power This represents energy consumption.

5. The encrypted communication method for fire protection IoT devices as described in claim 1, characterized in that, The equipment classification includes classifying fire protection IoT devices into low-performance devices, medium-performance devices, and high-performance devices based on performance test results.

6. The encrypted communication method for fire protection IoT devices as described in claim 5, characterized in that, The key negotiation includes: the fire protection IoT platform calculating m based on the performance perception of the fire protection IoT devices. alg The process involves decryption, and the calculation of the communication key based on the decryption result. The calculation process includes: m alg =r j+1 ⊕(c j-1 ||m scheme ) (c j-1 ||m scheme )=r’ j+1 ⊕m alg s0=Hash(k c ||ID||c j-1 ||r j-1 ) s0’=Hash(k c ||ID||c j-1 ||PUF(c j-1 )) In the formula, m alg The encrypted ciphertext is the concatenation of the performance index and the (j-1)th challenge value sent by the fire protection IoT platform to the fire protection IoT device. j+1 Here, c represents the encryption performance index, ⊕ represents the XOR operation, and c is the delimiter for the encryption performance index j-1 For the (j-1)th random challenge value stored in the fire protection IoT platform, m scheme r' is the performance index. j+1 For a temporary response, s0 is the initial key, Hash is the SM3 hash algorithm, and k c A random number generated and sent to the fire protection IoT platform by the fire protection IoT device, where ID represents the device parameter, r j-1 s0' is the (j-1)th response value stored in the fire protection IoT platform, s0' is the communication key, and PUF is the physically unclonable function.

7. The encrypted communication method for fire protection IoT devices as described in claim 6, characterized in that, The adaptive algorithm selection includes: for low-performance devices, using lightweight stream cipher algorithms; for medium-performance devices, using lightweight block cipher algorithms; and for high-performance devices, using symmetric cryptography algorithms.

8. A fire protection IoT device encrypted communication system, characterized in that, include: The fire protection IoT device identity registration and authentication module is used to register the identity of fire protection IoT devices at the factory through the built-in Physically Unclonable Function (PUF) circuit, and to achieve unique device identity authentication through a challenge-response mechanism based on the registration information, while generating a one-time session key; The performance perception module is used to perform performance testing on fire IoT devices that have passed identity authentication through the fire IoT platform, and classify the fire IoT devices into equipment levels based on the performance test results. The key negotiation and adaptive algorithm selection module is used to perform key negotiation and adaptive algorithm selection on the fire protection IoT device based on the one-time session key and the level classification result to obtain the communication key of the fire protection IoT device. The encrypted communication module is used to encrypt and decrypt communication data using a communication key, and dynamically adjusts the encryption algorithm in real time according to the performance changes of the fire protection IoT device during the communication process to obtain the latest communication key to complete the encrypted communication of the fire protection IoT device.

9. An electronic device, characterized in that, include: Memory, used to store one or more programs; processor; When the processor executes the one or more programs, it implements a fire protection IoT device encrypted communication method as described in any one of claims 1-7.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it implements an encrypted communication method for fire protection IoT devices as described in any one of claims 1-7.

Images