Method and system for cooperative authentication of far and near fields of intelligent equipment, medium and product

Abstract

The invention provides a far and near field cooperative authentication method and system for an intelligent device, a medium and a product. The method comprises the steps that the intelligent device establishes connection with an authentication platform through an MQTT protocol and completes far field authentication; the authentication platform constructs a dynamic equipment group and synchronizes group authentication information with the intelligent equipment; when the intelligent equipment in the group triggers near field interaction, automatic authentication is carried out according to the group authentication information; and when the group authentication information is dynamically updated, the intelligent equipment and the authentication platform are synchronously updated. According to the invention, automatic authentication during near-field interaction of the equipment is realized, and the security and convenience of a multi-equipment collaborative scene are improved.

Description

Technical Field

[0001] This invention belongs to the field of computer technology, specifically relating to a method, system, medium, and product for near-field and far-field collaborative authentication of intelligent devices. Background Technology

[0002] With the development of IoT technology, the collaborative interaction of multiple smart devices (such as smart home devices, industrial sensors, smart terminals, etc.) is becoming more and more frequent, and near-field authentication between devices (such as identity verification when connecting via Bluetooth and NFC) has become a key link in security.

[0003] Single-device authentication is inefficient: Traditional near-field authentication requires devices to exchange keys one by one or to repeatedly verify identities. In multi-device scenarios (such as near-field interaction between mobile phones and door locks, lights, and air conditioners in smart homes), the operation is cumbersome and the user experience is poor.

[0004] Lack of cross-device trust mechanism: There is a lack of unified trust endorsement between devices. Even if all devices have passed the platform's far-field authentication, they still need to be authenticated independently during near-field interaction, and the "device legitimacy" information already confirmed by the platform cannot be used.

[0005] Group management and authentication are disconnected: Some solutions support device group division (such as MQTT topic grouping), but only for data communication. They do not integrate group information with the authentication process and cannot simplify near-field authentication through "group trust". Summary of the Invention

[0006] The purpose of this invention is to provide a method, system, medium, and product for near-field collaborative authentication of intelligent devices, enabling automatic authentication during near-field device interaction and improving the security and convenience of multi-device collaborative scenarios.

[0007] To achieve the above objectives, the technical solution of the present invention is as follows:

[0008] A method for near-field and far-field collaborative authentication of intelligent devices includes:

[0009] S1. The smart device establishes a connection with the authentication platform and completes far-field authentication through the MQTT protocol;

[0010] S2. The authentication platform builds dynamic device groups and synchronizes group authentication information with smart devices;

[0011] S3. When a smart device in the group triggers near-field interaction, it automatically authenticates based on the group authentication information.

[0012] S4. When group authentication information is dynamically updated, the smart device and the authentication platform are updated synchronously.

[0013] Furthermore, step S1 includes:

[0014] Smart devices establish a connection with the authentication platform via the MQTT protocol and submit device identity information;

[0015] After the authentication platform verifies the credentials, it generates a far-field authentication credential containing the device ID and authentication timestamp, and sends it to the local storage of the smart device via the MQTT protocol.

[0016] Furthermore, the construction of the dynamic device group in step S2 includes:

[0017] The authentication platform groups smart devices belonging to the same near field into the same group and configures group attributes, including group ID, trust validity period, and allowed near field interaction types.

[0018] Furthermore, the method for synchronizing group authentication information with smart devices in step S2 includes:

[0019] The authentication platform generates a group trust list, which includes the far-field authentication credentials of all smart devices in the group and the group attributes.

[0020] The authentication platform broadcasts the group trust list to all smart devices in the group via the MQTT protocol; the smart devices receive and store the list as a trust basis for near-field authentication.

[0021] Furthermore, when broadcasting the group trust list to all smart devices within the group via the MQTT protocol, asymmetric encryption is used.

[0022] Furthermore, the method for automatic authentication based on the group authentication information in step S3 includes:

[0023] The smart device queries the locally stored group trust list and verifies whether: the ID of the smart device that sent the near-field authentication request is in the list; whether the far-field authentication credentials of the smart device that sent the near-field authentication request are valid; and whether the type of this near-field interaction is within the range allowed by the group.

[0024] Furthermore, step S4 includes:

[0025] When the authentication platform removes a smart device from the group, it immediately sends a removal notification to the remaining smart devices in the group via the MQTT protocol. The remaining smart devices then update the group trust list stored locally.

[0026] When a smart device's far-field authentication credential expires and is updated, the authentication platform synchronizes the new far-field authentication credential of the smart device to all smart devices in the group via the MQTT protocol.

[0027] In another aspect, this invention also proposes a system for near-field and far-field collaborative authentication of intelligent devices, comprising:

[0028] Authentication Platform: Smart devices establish a connection with the authentication platform via the MQTT protocol and complete far-field authentication;

[0029] Group building module: Set up on the authentication platform, it builds dynamic device groups and synchronizes group authentication information with smart devices;

[0030] Near-field authentication module: Located on smart devices, it is used to automatically authenticate based on the group authentication information when smart devices in a group trigger near-field interaction;

[0031] Update synchronization module: Set on the authentication platform, when group authentication information is dynamically updated, the smart device and the authentication platform are updated synchronously.

[0032] The present invention also proposes a computer-readable storage medium storing a computer program for executing the above-described method for near-field and far-field cooperative authentication of intelligent devices.

[0033] The present invention also provides a computer product, including a computer program, which, when executed by a processor, implements the above-described method for near-field and far-field collaborative authentication of intelligent devices.

[0034] Compared with the prior art, the beneficial effects of the present invention include:

[0035] 1. Improved efficiency: No need for repeated authentication when devices interact near the field within a group. Automatic access is achieved by utilizing the pre-shared group trust list on the platform, solving the problem of cumbersome operations in multi-device scenarios;

[0036] 2. Enhanced security: Based on the authentication platform's far-field authentication and combined with dynamic group management, it ensures that only authenticated devices within the group can complete near-field interactions, preventing unauthorized devices from accessing the network.

[0037] 3. Excellent scalability: Based on the MQTT protocol, it supports large-scale device networking, and the group can dynamically add or remove devices, adapting to multi-device collaboration scenarios such as smart homes and industrial IoT. Attached Figure Description

[0038] Figure 1 This is a flowchart illustrating Embodiment 1 of the present invention;

[0039] Figure 2 This is a flowchart of a collaborative authentication application example of Embodiment 2 of the present invention;

[0040] Figure 3 This is a schematic diagram of the system structure of Embodiment 3 of the present invention. Detailed Implementation

[0041] It should be noted that, unless otherwise specified, the embodiments and features described in the present invention can be combined with each other.

[0042] This invention aims to solve the problems of repetitive verification and low efficiency in near-field authentication of multiple intelligent devices. The main design idea is to build a device group through the MQTT platform, and use the fact that all devices in the group have passed far-field authentication as a trust basis to realize automatic authentication when devices in the group interact in the near field, thereby improving the security and convenience of multi-device collaborative scenarios.

[0043] The present invention will now be described in detail with reference to specific embodiments and accompanying drawings.

[0044] Example 1:

[0045] The method for near-field and far-field collaborative authentication of intelligent devices proposed in this embodiment, such as Figure 1 As shown, it includes:

[0046] S1: The smart device establishes a connection with the authentication platform and completes far-field authentication through the MQTT protocol.

[0047] Smart devices (such as devices A, B, and C) establish a connection with the authentication platform via the MQTT protocol, submitting their device identity information (including unique device ID, hardware fingerprint, certificates, etc.) to the platform for remote authentication. The authentication platform's main function is to perform remote authentication of smart devices, as well as subsequent steps such as group creation, synchronization, and other management functions. MQTT is a mainstream protocol for the Internet of Things (IoT), covering the vast majority of smart devices with communication needs.

[0048] After the authentication platform verifies the smart device that submitted the remote authentication, it records the trusted status of the smart device, generates a remote authentication credential containing the device ID and authentication timestamp, and sends it to the device's local storage via MQTT message (topic encrypted).

[0049] S2: The authentication platform builds dynamic device groups and synchronizes group authentication information with smart devices.

[0050] The authentication platform groups trusted smart devices that are already online and belong to the same near field (such as smart devices A, B, and C that have completed far-field authentication in the previous steps) into the same group G, and configures group attributes, including group ID, trust validity period, and allowed near-field interaction types. The group division process can be performed by the administrator through the platform console or automatically through programming. The automatic division identifies whether smart devices belong to the same near field based on the information submitted during remote authentication. After identification, smart devices in the same near field are dynamically grouped.

[0051] The platform generates a group trust list, which includes the far-field authentication credentials of all devices in the group and the group attributes. The group trust list is presented in JSON format and is broadcast to all smart devices in the group via the MQTT protocol. The broadcast uses asymmetric encryption, which can only be decrypted by devices in the group.

[0052] After receiving the data, the smart device stores the group trust list locally (in the smart device's storage space) as the trust basis for near-field authentication.

[0053] S3: When a smart device in the group triggers near-field interaction, it automatically authenticates based on the group authentication information.

[0054] Taking smart devices A and B, which share the same near field and are grouped together, as an example:

[0055] When smart device A (a device within the group) enters the near-field communication range (such as the coverage range of Bluetooth or NFC) of smart device B (a device in the same group), smart device B sends an authentication request to smart device A via near-field communication, which includes its own device ID and group ID.

[0056] Smart device A queries the locally stored group trust list and verifies the following:

[0057] ①Is the ID of smart device B in the list?

[0058] ②Is the far-field authentication certificate of smart device B still valid?

[0059] ③ Does the type of interaction this time fall within the scope allowed by the group?

[0060] If all verifications pass, smart device A will automatically be authenticated and establish a near-field connection with smart device B; if verification fails (e.g., smart device B is not on the list or the remote authentication certificate has expired), smart device A will refuse to connect and send an error alarm to the authentication platform.

[0061] S4: When group authentication information is dynamically updated, the smart device and the authentication platform are updated synchronously.

[0062] When the authentication platform removes smart device B from group G, it immediately sends a removal notification to the remaining smart devices (A and C) in the group via MQTT. Smart devices A and C update the group trust list stored locally and delete the information of smart device B.

[0063] When the far-field authentication credentials of a smart device expire (e.g., after periodic re-authentication), the platform synchronizes the new credentials to all smart devices in the group via MQTT to ensure the timeliness of the near-field authentication credentials.

[0064] The intelligent device near-field collaborative authentication method proposed in this embodiment combines MQTT grouping with authentication information sharing: it deeply integrates MQTT's device networking capabilities with the authentication trust mechanism, and realizes cross-device authentication information reuse through group management, which is different from traditional single device authentication or static grouping.

[0065] The intelligent device near-field collaborative authentication method proposed in this embodiment uses a dynamic trust list mechanism to enable the verification platform to synchronize the authentication status of group devices in real time, support dynamic updates of trust information when devices join / leave the group, and solve security vulnerabilities caused by expired static credentials or device changes.

[0066] The intelligent device far-field and near-field collaborative authentication method proposed in this embodiment sets up near-field automatic authentication logic. Based on the premise that all devices in the group have passed far-field authentication, only the group identity and credential validity need to be verified in the near field, without the need for repeated strong authentication, thus balancing security and efficiency.

[0067] Example 2:

[0068] This embodiment is a specific application example of the method described in Embodiment 1.

[0069] Taking a specific industrial IoT scenario as an example, the application scenarios include:

[0070] Equipment online: Sensors, robotic arms, and maintenance terminals in the workshop connect to the industrial platform (certification platform) via MQTT and submit equipment certificates to complete remote field certification;

[0071] Group construction: Through the industrial platform (certification platform), the equipment on the same production line is grouped into production line A group, and configured to only allow near-field data interaction between "sensor → robotic arm" and "maintenance terminal → sensor";

[0072] Near-field authentication: When the sensor communicates with the robotic arm in the near field, the robotic arm verifies that the sensor is within the group and the interaction type is legal, and automatically receives the data; when an external device outside the group approaches, the connection is rejected to ensure production safety.

[0073] For example, consider a sensor as device A and a robotic arm as device B, such as... Figure 2 As shown, Device A and Device B each generate device identity information and upload it to the platform for remote authentication. The platform generates remote authentication credentials, encrypts them, and sends them back to Device A and Device B respectively, each storing them locally.

[0074] The platform then creates a group and adds devices A and B, generates a group trust list, and distributes the group trust list to devices A and B.

[0075] When device A (sensor) sends an approach authentication request to device B (robotic arm), device B receives the request and verifies whether the device ID and group ID in the request are correct. If not, it uploads a warning message to the platform. If yes, it continues to verify the group trust list, including whether device A's device ID is in the group trust list, whether smart device B's far-field authentication certificate is valid, and whether the type of this interaction is within the group's allowed range. If any of these items are not correct, it uploads a warning message to the platform. If all are correct, the near-field authentication is successful.

[0076] This embodiment, based on platform far-field authentication and combined with dynamic group management, ensures that only authenticated devices within the group can complete near-field interactions, preventing unauthorized devices from accessing the site.

[0077] Example 3:

[0078] This embodiment proposes a system for near-field and far-field collaborative authentication of intelligent devices, such as... Figure 3 As shown, it includes:

[0079] Authentication Platform: Smart devices establish a connection with the authentication platform via the MQTT protocol and complete far-field authentication;

[0080] Group building module: Set up on the authentication platform, it builds dynamic device groups and synchronizes group authentication information with smart devices;

[0081] Near-field authentication module: Located on smart devices, it is used to automatically authenticate based on the group authentication information when smart devices in a group trigger near-field interaction;

[0082] Update synchronization module: Set on the authentication platform, when group authentication information is dynamically updated, the smart device and the authentication platform are updated synchronously.

[0083] The certification platforms include:

[0084] Smart devices establish a connection with the authentication platform via the MQTT protocol and submit device identity information;

[0085] After the authentication platform verifies the credentials, it generates a far-field authentication credential containing the device ID and authentication timestamp, and sends it to the local storage of the smart device via the MQTT protocol.

[0086] The group building module includes:

[0087] Smart devices belonging to the same near field are grouped into the same group, and group attributes are configured, including group ID, trust validity period, and allowed near field interaction types.

[0088] The group building module also includes:

[0089] Generate a group trust list, which includes the far-field authentication credentials of all smart devices in the group and group attributes;

[0090] The group trust list is broadcast to all smart devices in the group via the MQTT protocol; the smart devices receive and store it as a trust basis for near-field authentication.

[0091] When broadcasting the group trust list to all smart devices in the group via the MQTT protocol, asymmetric encryption is used.

[0092] The near-field authentication module includes:

[0093] The smart device queries the locally stored group trust list and verifies whether: the ID of the smart device that sent the near-field authentication request is in the list; whether the far-field authentication credentials of the smart device that sent the near-field authentication request are valid; and whether the type of this near-field interaction is within the range allowed by the group.

[0094] The update synchronization module includes:

[0095] When the authentication platform removes a smart device from the group, it immediately sends a removal notification to the remaining smart devices in the group via the MQTT protocol. The remaining smart devices then update the group trust list stored locally.

[0096] When a smart device's far-field authentication credential expires and is updated, the authentication platform synchronizes the new far-field authentication credential of the smart device to all smart devices in the group via the MQTT protocol.

[0097] The intelligent device far-field and near-field collaborative authentication system proposed in this embodiment can realize the intelligent device far-field and near-field collaborative authentication method described in Embodiments 1 and 2, and has the same technical effect as the method.

[0098] The above-described embodiments are merely preferred embodiments of the present invention and are only used to help understand the method and core ideas of this application. The scope of protection of the present invention is not limited to the above embodiments, and all technical solutions falling within the scope of the present invention's concept are within the scope of protection of the present invention. It should be noted that for those skilled in the art, any improvements and modifications made without departing from the principles of the present invention should also be considered within the scope of protection of the present invention.

Claims

1. A method for near-field and far-field collaborative authentication of intelligent devices, characterized in that, include: S1. The smart device establishes a connection with the authentication platform and completes far-field authentication through the MQTT protocol; S2. The authentication platform builds dynamic device groups and synchronizes group authentication information with smart devices; S3. When a smart device in the group triggers near-field interaction, it automatically authenticates based on the group authentication information. S4. When group authentication information is dynamically updated, the smart device and the authentication platform are updated synchronously.

2. The method for near-field and far-field collaborative authentication of intelligent devices according to claim 1, characterized in that, Step S1 includes: Smart devices establish a connection with the authentication platform via the MQTT protocol and submit device identity information; After the authentication platform verifies the credentials, it generates a far-field authentication credential containing the device ID and authentication timestamp, and sends it to the local storage of the smart device via the MQTT protocol.

3. The method for near-field and far-field collaborative authentication of intelligent devices according to claim 1, characterized in that, The construction of the dynamic device group in step S2 includes: The authentication platform groups smart devices belonging to the same near field into the same group and configures group attributes, including group ID, trust validity period, and allowed near field interaction types.

4. The method for near-field and far-field collaborative authentication of intelligent devices according to claim 1, characterized in that, The method for synchronizing group authentication information with smart devices in step S2 includes: The authentication platform generates a group trust list, which includes the far-field authentication credentials of all smart devices in the group and the group attributes. The authentication platform broadcasts the group trust list to all smart devices in the group via the MQTT protocol; the smart devices receive and store the list as a trust basis for near-field authentication.

5. The method for near-field and far-field collaborative authentication of intelligent devices according to claim 4, characterized in that, When broadcasting the group trust list to all smart devices in the group via the MQTT protocol, asymmetric encryption is used.

6. The method for near-field and far-field collaborative authentication of intelligent devices according to claim 4, characterized in that, The method for automatic authentication based on the group authentication information in step S3 includes: The smart device queries the locally stored group trust list and verifies whether: the ID of the smart device that sent the near-field authentication request is in the list; whether the far-field authentication credentials of the smart device that sent the near-field authentication request are valid; and whether the type of this near-field interaction is within the range allowed by the group.

7. The method for near-field and far-field collaborative authentication of intelligent devices according to claim 4, characterized in that, Step S4 includes: When the authentication platform removes a smart device from the group, it immediately sends a removal notification to the remaining smart devices in the group via the MQTT protocol. The remaining smart devices then update the group trust list stored locally. When a smart device's far-field authentication credential expires and is updated, the authentication platform synchronizes the new far-field authentication credential of the smart device to all smart devices in the group via the MQTT protocol.

8. A system for collaborative authentication of near and far fields of intelligent devices, characterized in that, include: Authentication Platform: Smart devices establish a connection with the authentication platform via the MQTT protocol and complete far-field authentication; Group building module: Set up on the authentication platform, it builds dynamic device groups and synchronizes group authentication information with smart devices; Near-field authentication module: Located on smart devices, it is used to automatically authenticate based on the group authentication information when smart devices in a group trigger near-field interaction; Update synchronization module: Set on the authentication platform, when group authentication information is dynamically updated, the smart device and the authentication platform are updated synchronously.

9. A computer-readable storage medium storing a computer program, characterized in that, The computer program is used to perform the method for near-field and far-field collaborative authentication of intelligent devices as described in any one of claims 1-7.

10. A computer product comprising a computer program, characterized in that, When the computer program is executed by the processor, it implements the method for near-field and far-field collaborative authentication of intelligent devices as described in any one of claims 1-7.

Images