Access control method and device of Internet of Things equipment

Abstract

The invention relates to an access control method and device for Internet of Things equipment. The method comprises the following steps: receiving a first control request represented by a standardized data model; selecting a translation configuration set corresponding to the identification information from a preloaded configuration index; target bidirectional conversion logic information matched with the target equipment is determined according to the mapping relation, and the first control request is converted into a second control request matched with the non-standard data model through the target bidirectional conversion logic information; sending the second control request to a third-party platform, so that the third-party platform executes a control operation corresponding to the second control request on the target equipment and generates response data; and receiving response data sent by the third-party platform, reversely converting the response data into a first response result represented by the standardized data model based on the mapping relationship, and sending the first response result to an initiator of the first control request. According to the scheme, the access control efficiency of the Internet of Things equipment is improved.

Description

Technical Field

[0001] This disclosure relates to the field of Internet of Things (IoT) technology, and in particular to an access control method and apparatus for IoT devices. Background Technology

[0002] In related technologies, with the deep integration of IoT technology into various industries, the large-scale access of multi-source heterogeneous devices has become a key challenge for platform construction. Currently, the market has a large number of devices using proprietary protocols and closed third-party cloud platforms, forcing IoT systems to undergo deep customization for specific protocols when accessing new types of devices. This process typically involves writing hard-coded protocol conversion layers, manually mapping functionalities, and requires a complete development, testing, and release cycle. This model not only leads to high project development costs and long delivery cycles but also causes the system codebase to expand rapidly with the increase in device types, resulting in highly coupled access modules and a severe decrease in maintainability and scalability. Summary of the Invention

[0003] To overcome the problems existing in related technologies, this disclosure provides an access control method and apparatus for Internet of Things (IoT) devices.

[0004] According to a first aspect of the present disclosure, an access control method for an Internet of Things (IoT) device is provided, comprising: Receive a first control request represented by a standardized data model; the first control request includes the identification information of the target device and control operation instructions; Select the translation configuration set corresponding to the identification information from the preloaded configuration index; the translation configuration set includes the mapping relationship between the standardized data model and the non-standard data model of the third-party platform to which the target device belongs, as well as the bidirectional conversion logic information between the standardized data model and the non-standard data model; Based on the mapping relationship, target bidirectional conversion logic information matching the target device is determined, and the first control request is converted into a second control request matching the non-standard data model using the target bidirectional conversion logic information. The second control request is sent to the third-party platform so that the third-party platform performs a control operation corresponding to the second control request on the target device and generates response data. The system receives the response data sent by the third-party platform, and converts the response data into a first response result represented by a standardized data model based on the mapping relationship, and sends the first response result to the initiator of the first control request.

[0005] According to a second aspect of the present disclosure, an access control device for an Internet of Things (IoT) device is provided, characterized in that it includes: The receiving unit is configured to receive a first control request represented by a standardized data model; the first control request includes identification information of the target device and control operation instructions; The selection unit is used to select a translation configuration set corresponding to the identification information from the preloaded configuration index; the translation configuration set includes the mapping relationship between the standardized data model and the non-standard data model of the third-party platform to which the target device belongs, as well as the bidirectional conversion logic information between the standardized data model and the non-standard data model; The conversion unit is used to determine the target bidirectional conversion logic information that matches the target device according to the mapping relationship, and convert the first control request into a second control request that matches the non-standard data model through the target bidirectional conversion logic information; The first sending unit is configured to send the second control request to the third-party platform, so that the third-party platform performs a control operation corresponding to the second control request on the target device and generates response data. The second sending unit is configured to receive the response data sent by the third-party platform, and convert the response data into a first response result represented by a standardized data model based on the mapping relationship, and send the first response result to the initiator of the first control request.

[0006] According to a third aspect of the present disclosure, an electronic device includes: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor, when executing the computer program, implements the method as described in any one of the first aspects.

[0007] According to a fourth aspect of the present disclosure, a computer-readable storage medium is provided having a computer program stored thereon, which, when executed by a processor, implements the method as described in any one of the first aspects.

[0008] According to a fifth aspect of the present disclosure, a computer program product is provided, including a computer program that, when executed by a processor, implements the method as described in any one of the first aspects.

[0009] The technical solutions provided by the embodiments of this disclosure may include the following beneficial effects: receiving a first control request represented by a standardized data model; selecting a translation configuration set corresponding to the identification information from a preloaded configuration index; the translation configuration set includes a mapping relationship between the standardized data model and the non-standard data model of the third-party platform to which the target device belongs, as well as bidirectional conversion logic information between the standardized data model and the non-standard data model; determining the target bidirectional conversion logic information matching the target device according to the mapping relationship, and converting the first control request into a second control request matching the non-standard data model through the target bidirectional conversion logic information; sending the second control request to the third-party platform so that the third-party platform performs control operations corresponding to the second control request on the target device and generates response data; receiving the response data sent by the third-party platform, and inversely converting the response data into a first response result represented by a standardized data model based on the mapping relationship, and sending the first response result to the initiator of the first control request. By using a preloaded translation configuration set and the mapping relationships and bidirectional conversion logic information defined therein, standardized control requests for the target device are converted into non-standard protocol requests for the third-party platform in real time and sent. At the same time, the response returned by the third-party platform is converted back into a standardized response result and returned to the requester. This achieves zero-code development and zero-service deployment for new device access, improving access efficiency and system maintainability.

[0010] It should be understood that the above general description and the following detailed description are exemplary and explanatory only, and are not intended to limit this disclosure. Attached Figure Description

[0011] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with the invention and, together with the description, serve to explain the principles of the invention.

[0012] Figure 1 This is a flowchart illustrating an access control method for an Internet of Things (IoT) device according to an exemplary embodiment.

[0013] Figure 2 This is a block diagram illustrating an access control device for an Internet of Things (IoT) device according to an exemplary embodiment.

[0014] Figure 3 This is a block diagram illustrating an apparatus for an access control method for an Internet of Things (IoT) device according to an exemplary embodiment.

[0015] Figure Labels 201-Receiving unit; 202-Selection unit; 203-Conversion unit; 204-First transmitting unit; 205-Second transmitting unit; 300-Device; 302-Processing component; 304-Memory; 306-Power component; 308-Multimedia component; 310-Audio component; 312-I / O interface; 316-Communication component; 320-Processor. Detailed Implementation

[0016] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numerals in different drawings denote the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present invention. Rather, they are merely examples of apparatuses and methods consistent with some aspects of the invention as detailed in the appended claims.

[0017] The terminology used in this disclosure is for the purpose of describing particular embodiments only and is not intended to be limiting of the present disclosure. The singular forms “a” and “the” as used in this disclosure and the appended claims are also intended to include the plural forms, unless the context clearly indicates otherwise.

[0018] It should be understood that although the terms first, second, third, etc., may be used to describe various information in embodiments of this disclosure, such information should not be limited to these terms. These terms are only used to distinguish information of the same type from one another. For example, first information may also be referred to as second information without departing from the scope of embodiments of this disclosure, and similarly, second information may also be referred to as first information. Depending on the context, the words “if” and “suppose” as used herein may be interpreted as “when”, “when”, or “in response to a determination”.

[0019] Furthermore, various forms of processes shown in the embodiments of this disclosure can be used to reorder, add, or delete steps. For example, the steps described in this application can be executed in parallel, sequentially, or in different orders, as long as the desired result of the technical solution disclosed in this disclosure can be achieved, and no limitation is imposed herein.

[0020] It should be noted that the collection, storage, use, processing, transmission, provision, and disclosure of user personal information involved in the technical solution disclosed herein all comply with the provisions of relevant laws and regulations and do not violate public order and good morals.

[0021] Figure 1 This is a flowchart illustrating an access control method for an Internet of Things (IoT) device according to an exemplary embodiment, such as... Figure 1As shown, it should be noted that the IoT device access control method of this disclosure embodiment is applied in the IoT device access control device. For example... Figure 1 As shown, the method may include the following steps: Step 101: Receive a first control request represented by a standardized data model.

[0022] The first control request includes the identification information of the target device and control operation instructions.

[0023] In this embodiment, the standardized data model refers to a predefined, unified structured framework used to abstractly describe the common capabilities and interaction methods of IoT devices. This model categorizes device functions into standard elements such as attributes (describing state, e.g., temperature), services (callable functions, e.g., dimming), events (actively reported messages, e.g., alarms), and actions (operations to be performed, e.g., unlocking), specifying their data types, value ranges, and relationships. Through this model, physical devices of different brands and protocols are mapped to logical entities with consistent interfaces. This allows upper-layer applications to develop and control based on this unified model without needing to concern themselves with the heterogeneous implementation details of the underlying devices, thereby achieving standardization, interoperability, and scalability of device access.

[0024] In one embodiment, the first control request may refer to an instruction initiated by an upstream application system (such as a user APP, business platform, or automation rule engine) to this server, requesting the execution of a certain operation on a specific device. The first control request follows and is constructed and represented using a standardized data model, which explicitly includes the unique identification information of the target device and the specific control operation instruction (e.g., "set the switch of device A to on").

[0025] In some embodiments of this application, prior to step 101, the method may further include: Retrieve all configuration information from the cloud configuration center and build an initial configuration index based on the full configuration information; The method also includes: The configuration version of the cloud configuration center is detected at a preset frequency. When a configuration version update is detected, incremental configuration data is retrieved from the cloud configuration center, and the configuration index and translation configuration set are updated based on the incremental configuration data so that the new configuration takes effect in real time.

[0026] In one embodiment, during the preparation phase of system startup or service instance initialization, preprocessing operations such as configuration loading and index building can be performed first: accessing the cloud configuration center to obtain the translation configuration information (i.e., full configuration information) of all currently defined devices; this information describes the mapping rules and conversion logic between standard and non-standard data models of various devices in a structured manner (such as JSON format). After obtaining the full configuration information, an initial configuration index (e.g., a hash mapping or tree structure based on device identifiers) can be dynamically built in local memory based on these configurations. The configuration index serves as the basis for querying all subsequent device control requests, ensuring that the ability to map device identifiers to their corresponding translation configuration sets is available immediately before the first control request is formally processed, providing the necessary data support for achieving efficient protocol conversion.

[0027] In this embodiment, to ensure the dynamic and real-time nature of device access rules, a continuously synchronized background hot update mechanism is introduced. This mechanism uses an independent scheduled task to proactively query the cloud configuration center at preset time intervals (e.g., every 30 seconds) to verify the global configuration version number it maintains. When a cloud version number is detected to be higher than the local current version, it intelligently requests and retrieves incremental configuration data that has changed since the last synchronization. Subsequently, without interrupting service, this incremental data is applied: on the one hand, the core configuration index is updated to reflect the newly added or modified device mapping relationships; on the other hand, new translation configuration sets are refreshed or loaded. This process ensures that the configuration of newly accessed devices or modifications to existing configurations can take effect in the production environment in real time with extremely short latency, thereby achieving "zero-release" updates and deployments for business requirements.

[0028] In some embodiments of this application, the above-mentioned updating of the configuration index and translation configuration set based on incremental configuration data includes: If the incremental configuration data includes a custom executor, the source code of the custom executor is obtained from the incremental configuration data; the custom executor is used to perform logical conversion between the standardized data model and the third-party platform data model based on bidirectional conversion logic information; The compiler is invoked to compile the source code into executable bytecode; The bytecode is loaded by a custom class loader, the class obtained after loading the bytecode is instantiated to obtain a custom executor, and the instance is cached for later use.

[0029] In one embodiment, if a custom executor defined for a specific complex conversion scenario is identified in the incremental configuration data, a dynamic loading and compilation process is triggered. This custom executor is essentially an executable code module pre-written by developers to implement non-standard or complex logic conversions (such as specific encoding / decoding, color space calculations, protocol encapsulation, etc.) between standardized data models and third-party platform data models. The executor's source code (e.g., text code defined as Java classes) can be extracted from the incremental data package, rather than a pre-compiled binary file, to support subsequent just-in-time compilation and hot deployment in memory. This ensures that newly added or updated conversion logic can be dynamically distributed and take effect in real time as part of the pure configuration data, without restarting the service or redeploying the entire system. This maintains the stability of the core service while seamlessly extending its deep adaptation capabilities to various heterogeneous device protocols.

[0030] In this embodiment, after obtaining the source code of the custom executor, an embedded Java compiler can be invoked to dynamically compile the source code text into bytecode executable by the JVM (Java Virtual Machine). This bytecode can be temporarily stored in a specific area of ​​memory. This bytecode is loaded through an isolated custom class loader and defined as a new class at runtime. A usable instance of the custom executor is obtained by instantiating this newly loaded class using reflection. To improve subsequent execution efficiency, this instance can be stored in a dedicated cache pool.

[0031] It should be noted that the class obtained after loading the bytecode refers to an executable structured template or type definition after being loaded into memory by the JVM. It is generated by parsing the bytecode through the class loader and fully describes the data structure (such as attributes and fields) and behavioral logic (such as methods and functions) of a class of objects.

[0032] In one embodiment, a coherent mechanism is employed to extract custom executor source code from incremental configuration data, dynamically compile it into bytecode, and cache it after instantiation via a custom class loader. This enables newly added or updated complex protocol conversion logic to be hot-loaded into the running system in real time as part of the configuration. This achieves dynamic expansion of the IoT platform's data model conversion capability for heterogeneous devices without interrupting service or requiring version releases and restarts. It significantly improves the system's flexibility and response speed in dealing with new devices and new protocol access, while ensuring high efficiency and stability in processing performance.

[0033] Step 102: Select the translation configuration set corresponding to the identification information from the preloaded configuration index.

[0034] The translation configuration set includes the mapping relationship between the standardized data model and the non-standard data model of the third-party platform to which the target device belongs, as well as the bidirectional conversion logic information between the standardized data model and the non-standard data model.

[0035] In this embodiment of the application, the pre-defined translation configuration set for the device can be quickly located and selected by querying the configuration index preloaded into memory and based on the received target device identification information.

[0036] It's important to note that the translation configuration set comprises two key components: first, a mapping relationship, which explicitly establishes a correspondence table between each element (such as attributes and services) in the standardized device data model and the corresponding fields in the specific non-standard data model used by the target third-party platform; and second, bidirectional conversion logic information, which details the specific rules and processing logic for forward (standard to non-standard) and reverse (non-standard to standard) conversions between standardized and non-standard data formats based on the aforementioned mapping relationship. By decoupling the abstract device capability description from the specific platform protocol through the translation configuration set, subsequent conversion steps can be executed accurately in a data-driven manner.

[0037] In some embodiments of this application, the configuration index is a dual-index structure, and the configuration index includes: A first index based on device identification information is used to match and retrieve the translation configuration set corresponding to the target device based on the identification information; and... A second index based on the unique identifier of the device type is used for batch configuration of devices of the same type.

[0038] In this embodiment, the configuration index employs a dual-index structure, meaning it utilizes an efficient dual-index structure to organize and manage the translation configuration set. The first index is a precise lookup table built based on each device's unique identifier (such as a product serial number). This table can quickly match the device identifier carried in the request, rapidly retrieving the translation configuration set specific to that device, ensuring efficient response to single-device control requests. The second index is a categorization directory built based on the unique identifier of the device type. By logically classifying devices, it enables batch configuration management, unified policy distribution, and configuration template reuse for all devices of the same type, significantly improving operational efficiency and configuration consistency when large-scale device access is implemented. The collaborative work of the dual indexes satisfies the real-time requirements of high-frequency single-point control while supporting flexible batch operations and rapid expansion, optimizing overall performance and maintainability at the data structure level.

[0039] In some embodiments of this application, the translation configuration set is defined using structured data; at least one mapping item in the mapping relationship is bound to an identifier for indicating an executor, which is used to perform logical conversion between a standardized data model and a third-party platform data model based on bidirectional conversion logic information.

[0040] In this embodiment, the translation configuration set can be defined using structured data (such as JSON or YAML), and specific complex items in its core mapping relationship can be bound to an executor identifier. This executor identifier points to an executable module (i.e., the executor) dedicated to handling non-standard conversion logic. Its responsibility is to perform precise, programmable conversions between the standard model and the third-party platform model based on the bidirectional conversion logic information detailed in the configuration, including specific steps such as data format, calculation rules, or protocol encapsulation. This achieves decoupling of rules and logic; that is, simple mappings are directly described by the configuration, while complex special conversions are dynamically loaded and executed by the executor. This ensures the simplicity and maintainability of the configuration while improving the flexibility and scalability for handling various heterogeneous protocol differences.

[0041] Step 103: Determine the target bidirectional conversion logic information that matches the target device based on the mapping relationship, and convert the first control request into a second control request that matches the non-standard data model through the target bidirectional conversion logic information.

[0042] In this embodiment, the mapping relationship in the translation configuration set can be used to accurately locate the target bidirectional conversion logic information applicable to the target device. The target bidirectional conversion logic information (which can be a preset rule or a dynamically loaded executor) is used to parse and convert the first control request represented by the standardized data model into a second control request that fully conforms to the non-standard data model format expected by the third-party platform.

[0043] It should be noted that the above conversion process is essentially a translation of data format and protocol. Specifically, it may include mapping of field names, calculation and formatting of data values ​​(such as unit conversion and encoding conversion), and encapsulation of request structure according to the target platform's API specifications, thereby ensuring that control instructions can be accurately understood and executed by the third-party platform.

[0044] Step 104: Send the second control request to the third-party platform so that the third-party platform can perform the control operation corresponding to the second control request on the target device and generate response data.

[0045] In this embodiment, a second control request conforming to the proprietary protocol format of the third-party platform is sent to the service interface of the third-party platform. The third-party platform parses the second control request and performs corresponding actual control operations (such as switching on / off or adjusting parameters) on the associated target device (such as a smart light fixture, a sensor, or other physical entity).

[0046] In one embodiment, after completing device operation, the third-party platform can generate response data representing the operation result (such as success, failure, or current device status). The response data can be encapsulated in the third-party platform's own protocol format, providing the necessary data source for the system to receive and reverse convert back to standardized results in subsequent steps.

[0047] Step 105: Receive response data sent by a third-party platform, and convert the response data into a first response result represented by a standardized data model based on the mapping relationship, and send the first response result to the initiator of the first control request.

[0048] In this embodiment, response data encapsulated in the proprietary protocol format of a third-party platform is received. Based on the aforementioned mapping relationship and its corresponding reverse conversion rules, the response data undergoes reverse conversion processing. This process parses and reconstructs the platform-specific data format (such as specific field names, encoded values, or structures), generating a unified and structured first response result that fully conforms to the system's internal standardized data model. This standardized response result is then returned to the originator (such as a user application or management platform) that initially initiated the first control request, thereby completing the closed loop of the entire control transaction. This ensures that regardless of which third-party platform the device is connected to, the requester can always obtain a predictable and easily parsed response using the same simple and standard data interface, achieving unification and transparency in cross-platform device access and management.

[0049] In some embodiments of this application, the method may further include the following steps: Hierarchical caching is performed on access device information, access device status, and actuators used for logical transformation to obtain hierarchical cache data; When an anomaly is detected in communication with a third-party platform, the target cache data corresponding to the third-party platform is obtained from the hierarchical cache data. A second response result represented by a standardized data model is generated based on the target cache data, and the second response result is sent to the initiator of the first control request.

[0050] In this embodiment, a hierarchical caching mechanism can be established to optimize system performance and reliability. Specifically, three types of core data are stored and managed in layers: access device information (such as device metadata and static configuration), access device status (such as real-time or near-real-time device attribute values), and executor instances used for logical transformation (such as dynamically compiled and loaded custom protocol converters). These data are stored in different levels of cache (such as memory cache and distributed cache) according to their update frequency, access frequency, and stability, forming a hierarchical caching data system. This allows for extremely fast response to frequently accessed static or quasi-static data. Simultaneously, by isolating the lifecycles of different data types, the risk of global cache failure caused by data changes is effectively reduced, and crucial data support is provided for subsequent abnormal degradation responses and rapid system recovery.

[0051] In one embodiment, when a communication anomaly with a third-party platform is detected (such as network interruption, request timeout, platform service unavailability, etc.), a fault-tolerant degradation process can be automatically triggered. From the maintained tiered cache data, target cache data (such as the device's latest known state, static attribute information, or preset default values) associated with the third-party platform and target device involved in the current request is precisely retrieved. Based on this target cache data, following established standardized data model specifications, a second response result with a uniform format and usable content is constructed and generated. It should be noted that although the second response result may not be real-time data, it ensures the structured and readable information. Finally, this standardized response result generated by the degradation is sent to the initiator of the original first control request. This mechanism ensures that even in scenarios where the underlying platform dependency fails, the upper-layer application can still obtain meaningful feedback, thereby achieving high service availability and continuity of user experience.

[0052] In some embodiments of this application, a set of reusable TCP / HTTP connections can be pre-created and managed during system initialization. This allows all subsequent requests to the same third-party platform to obtain readily available connections from the pool and directly transmit data, thereby completely avoiding the significant network latency and system overhead caused by establishing a separate TCP connection for each request (including three-way handshake, SSL negotiation, etc.). The connection pool is responsible for maintaining the lifecycle, health status, and concurrency of connections, ensuring efficient utilization and reasonable allocation of network resources in high-concurrency scenarios. This not only significantly improves the response speed of individual requests but also significantly enhances the overall throughput and scalability of the system, making it one of the key infrastructures for ensuring the stable handling of massive device interactions by the IoT platform.

[0053] In other embodiments of this application, when multiple control commands (such as simultaneous adjustment of brightness, color temperature, and color) for the same target device are received within a short period of time, they are not sent immediately one by one. Instead, they are temporarily stored and intelligently merged into a structured batch request packet, which is then sent to the third-party platform all at once. This mechanism significantly reduces the number of network round trips and protocol encapsulation overhead, reduces the call pressure on the platform interface, and improves the overall efficiency and stability of the device in continuously executing multiple commands. In particular, it can effectively improve the system throughput and response consistency in high-concurrency or weak network environments.

[0054] In some embodiments of this application, when the system performs any input / output operations such as network communication (e.g., sending requests to a third-party platform), file reading (e.g., loading configuration), or database access, all operations are initiated asynchronously. After a request is sent, the current thread is immediately released and begins processing other tasks, rather than waiting for a response. Once the I / O operation is complete, the system's underlying event notification mechanism (e.g., callbacks, Futures, or reactive programming models) triggers subsequent processing logic. This design completely eliminates thread blocking caused by waiting for external responses, enabling a limited number of server threads to efficiently serve massive concurrent device requests. Simultaneously, combined with multi-threaded scheduling, it fully utilizes the parallel computing capabilities of multi-core CPUs, separating computationally intensive tasks (e.g., protocol conversion, data compilation) from I / O-intensive tasks and distributing them evenly across different cores. This achieves a balance between high concurrency, low latency, and high resource utilization, meeting the stringent performance requirements of IoT platforms handling large-scale device access.

[0055] According to the IoT device access control method proposed in this disclosure, the method involves: receiving a first control request represented by a standardized data model; selecting a translation configuration set corresponding to identification information from a pre-loaded configuration index; the translation configuration set includes a mapping relationship between the standardized data model and a non-standard data model of a third-party platform to which the target device belongs, as well as bidirectional conversion logic information between the standardized data model and the non-standard data model; determining target bidirectional conversion logic information matching the target device based on the mapping relationship; converting the first control request into a second control request matching the non-standard data model using the target bidirectional conversion logic information; sending the second control request to the third-party platform to enable the third-party platform to perform control operations corresponding to the second control request on the target device and generate response data; receiving the response data sent by the third-party platform and, based on the mapping relationship, inversely converting the response data into a first response result represented by a standardized data model; and sending the first response result to the initiator of the first control request. By using a preloaded translation configuration set and the mapping relationships and bidirectional conversion logic information defined therein, standardized control requests for the target device are converted into non-standard protocol requests for the third-party platform in real time and sent. At the same time, the response returned by the third-party platform is converted back into a standardized response result and returned to the requester. This achieves zero-code development and zero-service deployment for new device access, improving access efficiency and system maintainability.

[0056] Figure 2 This is a block diagram illustrating an access control device for an Internet of Things (IoT) device according to an exemplary embodiment. (Refer to...) Figure 2 The device includes a receiving unit 201, a selection unit 202, a conversion unit 203, a first transmitting unit 204, and a second transmitting unit 205.

[0057] The receiving unit 201 is used to receive a first control request represented by a standardized data model; the first control request includes the identification information of the target device and control operation instructions; The selection unit 202 is used to select the translation configuration set corresponding to the identification information from the preloaded configuration index; the translation configuration set includes the mapping relationship between the standardized data model and the non-standard data model of the third-party platform to which the target device belongs, as well as the bidirectional conversion logic information between the standardized data model and the non-standard data model; The conversion unit 203 is used to determine the target bidirectional conversion logic information that matches the target device according to the mapping relationship, and convert the first control request into a second control request that matches the non-standard data model through the target bidirectional conversion logic information; The first sending unit 204 is used to send the second control request to a third-party platform so that the third-party platform can perform control operations corresponding to the second control request on the target device and generate response data. The second sending unit 205 is used to receive response data sent by a third-party platform, and to reverse convert the response data into a first response result represented by a standardized data model based on the mapping relationship, and to send the first response result to the initiator of the first control request.

[0058] In some embodiments of this application, the translation configuration set is defined using structured data; at least one mapping item in the mapping relationship is bound to an identifier for indicating an executor, which is used to perform logical conversion between a standardized data model and a third-party platform data model based on bidirectional conversion logic information.

[0059] In some embodiments of this application, the apparatus may further include: The building unit is used to obtain full configuration information from the cloud configuration center and build an initial configuration index based on the full configuration information; The detection unit is used to detect the configuration version of the cloud configuration center at a preset frequency. The update unit is used to obtain incremental configuration data from the cloud configuration center when a configuration version update is detected, and update the configuration index and translation configuration set based on the incremental configuration data so that the new configuration takes effect in real time.

[0060] In some embodiments of this application, the configuration index is a dual-index structure, and the configuration index includes: A first index based on device identification information is used to match and retrieve the translation configuration set corresponding to the target device based on the identification information; and... A second index based on the unique identifier of the device type is used for batch configuration of devices of the same type.

[0061] In some embodiments of this application, the update unit may specifically be used for: If the incremental configuration data includes a custom executor, the source code of the custom executor is obtained from the incremental configuration data; the custom executor is used to perform logical conversion between the standardized data model and the third-party platform data model based on bidirectional conversion logic information; The compiler is invoked to compile the source code into executable bytecode; The bytecode is loaded by a custom class loader, the class obtained after loading the bytecode is instantiated to obtain a custom executor, and the instance is cached for later use.

[0062] In some embodiments of this application, the apparatus may further include: The caching unit is used to hierarchically cache access device information, access device status, and executors used for logical transformation, to obtain hierarchical cached data; The third sending unit is used to obtain the target cache data corresponding to the third-party platform from the hierarchical cache data when an abnormal communication with the third-party platform is detected, generate a second response result represented by a standardized data model based on the target cache data, and send the second response result to the initiator of the first control request.

[0063] Regarding the apparatus in the above embodiments, the specific manner in which each module performs its operation has been described in detail in the embodiments related to the method, and will not be elaborated upon here.

[0064] According to the IoT device access control device proposed in the embodiments of this disclosure, the device receives a first control request represented by a standardized data model; selects a translation configuration set corresponding to the identification information from a pre-loaded configuration index; the translation configuration set includes a mapping relationship between the standardized data model and the non-standard data model of the third-party platform to which the target device belongs, and bidirectional conversion logic information between the standardized data model and the non-standard data model; determines the target bidirectional conversion logic information matching the target device according to the mapping relationship, and converts the first control request into a second control request matching the non-standard data model through the target bidirectional conversion logic information; sends the second control request to the third-party platform so that the third-party platform performs a control operation corresponding to the second control request on the target device and generates response data; receives the response data sent by the third-party platform, and reversely converts the response data into a first response result represented by a standardized data model based on the mapping relationship, and sends the first response result to the initiator of the first control request. By using a preloaded translation configuration set and the mapping relationships and bidirectional conversion logic information defined therein, standardized control requests for the target device are converted into non-standard protocol requests for the third-party platform in real time and sent. At the same time, the response returned by the third-party platform is converted back into a standardized response result and returned to the requester. This achieves zero-code development and zero-service deployment for new device access, improving access efficiency and system maintainability.

[0065] Figure 3 This is a block diagram illustrating an apparatus for an access control method for an Internet of Things (IoT) device according to an exemplary embodiment. For example, apparatus 300 may be an electronic device, such as a mobile phone, computer, digital broadcasting terminal, messaging device, tablet device, personal digital assistant, etc.

[0066] Reference Figure 3 The device 300 may include one or more of the following components: processing component 302, memory 304, power component 306, multimedia component 308, audio component 310, input / output (I / O) interface 312, sensor component 314, and communication component 316.

[0067] Processing component 302 typically controls the overall operation of device 300, such as operations associated with display, telephone calls, data communication, camera operation, and recording. Processing component 302 may include one or more processors 320 to execute instructions to perform all or part of the steps of the methods described above. Furthermore, processing component 302 may include one or more modules to facilitate interaction between processing component 302 and other components. For example, processing component 302 may include a multimedia module to facilitate interaction between multimedia component 308 and processing component 302.

[0068] Memory 304 is configured to store various types of data to support the operation of device 300. Examples of such data include instructions for any application or method operating on device 300, contact data, phonebook data, messages, pictures, videos, etc. Memory 304 can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic storage, flash memory, magnetic disk, or optical disk.

[0069] The power supply component 306 provides power to the various components of the device 300. The power supply component 306 may include a power management system, one or more power sources, and other components associated with generating, managing, and distributing power to the device 300.

[0070] Multimedia component 308 includes a screen that provides an output interface between the device 300 and the user. In some embodiments, the screen may include a liquid crystal display (LCD) and a touch panel (TP). If the screen includes a touch panel, the screen may be implemented as a touchscreen to receive input signals from the user. The touch panel includes one or more touch sensors to sense touches, swipes, and gestures on the touch panel. The touch sensors may sense not only the boundaries of the touch or swipe action but also the duration and pressure associated with the touch or swipe operation. In some embodiments, multimedia component 308 includes a front-facing camera and a rear-facing camera. When the device 300 is in an operating mode, such as a shooting mode or a video mode, the front-facing camera and the rear-facing camera may receive external multimedia data. Each front-facing camera and rear-facing camera may be a fixed optical lens system or have focal length and optical zoom capabilities.

[0071] Audio component 310 is configured to output and input audio signals. For example, audio component 310 includes a microphone (MIC) configured to receive external audio signals when device 300 is in an operating mode, such as call mode, recording mode, and voice recognition mode. The received audio signals may be further stored in memory 304 or transmitted via communication component 316. In some embodiments, audio component 310 also includes a speaker for outputting audio signals.

[0072] I / O interface 312 provides an interface between processing component 302 and peripheral interface modules, such as keyboards, click wheels, buttons, etc. These buttons may include, but are not limited to, home buttons, volume buttons, start buttons, and lock buttons.

[0073] Sensor assembly 314 includes one or more sensors for providing status assessments of various aspects of device 300. For example, sensor assembly 314 may detect the on / off state of device 300, the relative positioning of components such as the display and keypad of device 300, changes in the position of device 300 or a component of device 300, the presence or absence of user contact with device 300, the orientation or acceleration / deceleration of device 300, and temperature changes of device 300. Sensor assembly 314 may include a proximity sensor configured to detect the presence of nearby objects without any physical contact. Sensor assembly 314 may also include a light sensor, such as a CMOS or CCD image sensor, for use in imaging applications. In some embodiments, sensor assembly 314 may also include an accelerometer, a gyroscope, a magnetometer, a pressure sensor, or a temperature sensor.

[0074] Communication component 316 is configured to facilitate wired or wireless communication between device 300 and other devices. Device 300 can access wireless networks based on communication standards, such as WiFi, 2G, or 3G, or combinations thereof. In one exemplary embodiment, communication component 316 receives broadcast signals or broadcast-related information from an external broadcast management system via a broadcast channel. In one exemplary embodiment, communication component 316 also includes a near-field communication (NFC) module to facilitate short-range communication. For example, the NFC module may be implemented based on radio frequency identification (RFID) technology, Infrared Data Association (IrDA) technology, ultra-wideband (UWB) technology, Bluetooth (BT) technology, and other technologies.

[0075] In an exemplary embodiment, the apparatus 300 may be implemented by one or more application-specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field-programmable gate arrays (FPGAs), controllers, microcontrollers, microprocessors, or other electronic components to perform the methods described above.

[0076] In an exemplary embodiment, a non-transitory computer-readable storage medium including instructions is also provided, such as a memory 304 including instructions, which can be executed by a processor 320 of the device 300 to perform the above-described method. For example, the non-transitory computer-readable storage medium may be a ROM, random access memory (RAM), CD-ROM, magnetic tape, floppy disk, and optical data storage device, etc.

[0077] In an exemplary embodiment, a computer program product is also provided, including a computer program that implements the above-described method when executed by the processor 320 of the device 300.

[0078] Other embodiments of the invention will readily occur to those skilled in the art upon consideration of the specification and practice of the invention disclosed herein. This disclosure is intended to cover any variations, uses, or adaptations of the invention that follow the general principles of the invention and include common knowledge or customary techniques in the art not disclosed herein. The specification and examples are to be considered exemplary only, and the true scope and spirit of the invention are indicated by the following claims.

[0079] It should be understood that the present invention is not limited to the precise structure described above and shown in the accompanying drawings, and various modifications and changes can be made without departing from its scope. The scope of the invention is limited only by the appended claims.

Claims

1. A method for access control of an Internet of Things (IoT) device, characterized in that, include: Receive the first control request represented by a standardized data model; The first control request includes the identification information of the target device and control operation instructions; Select the translation configuration set corresponding to the identification information from the preloaded configuration index; the translation configuration set includes the mapping relationship between the standardized data model and the non-standard data model of the third-party platform to which the target device belongs, as well as the bidirectional conversion logic information between the standardized data model and the non-standard data model; Based on the mapping relationship, target bidirectional conversion logic information matching the target device is determined, and the first control request is converted into a second control request matching the non-standard data model using the target bidirectional conversion logic information. The second control request is sent to the third-party platform so that the third-party platform performs a control operation corresponding to the second control request on the target device and generates response data. The system receives the response data sent by the third-party platform, and converts the response data into a first response result represented by a standardized data model based on the mapping relationship, and sends the first response result to the initiator of the first control request.

2. The access control method for IoT devices according to claim 1, characterized in that, The translation configuration set is defined using structured data; at least one mapping item in the mapping relationship is bound to an identifier for indicating an executor, which is used to perform logical conversion between a standardized data model and a third-party platform data model based on bidirectional conversion logic information.

3. The access control method for IoT devices according to claim 1, characterized in that, Prior to receiving the first control request represented by a standardized data model, the method further includes: Obtain all configuration information from the cloud configuration center and construct an initial configuration index based on the full configuration information; The method further includes: The configuration version of the cloud configuration center is detected at a preset frequency. When a configuration version update is detected, the incremental configuration data from the cloud configuration center is obtained, and the configuration index and translation configuration set are updated based on the incremental configuration data so that the new configuration takes effect in real time.

4. The access control method for IoT devices according to claim 1, characterized in that, The configuration index has a dual index structure, and the configuration index includes: A first index based on device identification information is used to match and retrieve the translation configuration set corresponding to the target device based on the identification information; and... A second index based on the unique identifier of the device type is used for batch configuration of devices of the same type.

5. The access control method for IoT devices according to claim 3, characterized in that, Update the configuration index and translation configuration set based on the incremental configuration data, including: If the incremental configuration data includes a custom executor, the source code of the custom executor is obtained from the incremental configuration data; the custom executor is used to perform logical conversion between the standardized data model and the third-party platform data model based on bidirectional conversion logic information; The compiler is invoked to compile the source code into executable bytecode; The bytecode is loaded using a custom class loader, and the resulting class is instantiated to obtain the custom executor. The instance is then cached for later use.

6. The access control method for IoT devices according to claim 1, characterized in that, The method further includes: Hierarchical caching is performed on access device information, access device status, and actuators used for logical transformation to obtain hierarchical cache data; When an anomaly is detected in communication with a third-party platform, target cache data corresponding to the third-party platform is obtained from the hierarchical cache data, a second response result represented by a standardized data model is generated based on the target cache data, and the second response result is sent to the initiator of the first control request.

7. An access control device for an Internet of Things (IoT) device, characterized in that, include: A receiving unit is used to receive a first control request represented by a standardized data model; The first control request includes the identification information of the target device and control operation instructions; The selection unit is used to select a translation configuration set corresponding to the identification information from the preloaded configuration index; the translation configuration set includes the mapping relationship between the standardized data model and the non-standard data model of the third-party platform to which the target device belongs, as well as the bidirectional conversion logic information between the standardized data model and the non-standard data model; The conversion unit is used to determine the target bidirectional conversion logic information that matches the target device according to the mapping relationship, and convert the first control request into a second control request that matches the non-standard data model through the target bidirectional conversion logic information; The first sending unit is configured to send the second control request to the third-party platform, so that the third-party platform performs a control operation corresponding to the second control request on the target device and generates response data. The second sending unit is configured to receive the response data sent by the third-party platform, and convert the response data into a first response result represented by a standardized data model based on the mapping relationship, and send the first response result to the initiator of the first control request.

8. An electronic device, characterized in that, include: A memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor, when executing the computer program, implements the method as described in any one of claims 1 to 6.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the method as described in any one of claims 1 to 6.

10. A computer program product, comprising a computer program, characterized in that, The computer program, when executed by a processor, implements the method as described in any one of claims 1 to 6.

Images