Intelligent lighting multi-network fusion identity binding and security check method

Abstract

This invention discloses a method for identity binding and security verification in intelligent lighting multi-network convergence, applied to intelligent lighting systems. The system communication links include at least two of the following: starlight, mesh, and DC power line carrier. By assigning a unique device identity identifier to each lighting terminal, the identity identifier and link identifier are bound and verified during link access and switching. Access or switching is only allowed after successful verification; otherwise, access is rejected and the anomaly is recorded. This invention achieves unified verification of device identity and multiple communication links, improving system access security and operational stability.

Description

Technical Field

[0001] This invention relates to the field of intelligent lighting communication security technology, specifically to a method for identity binding and security verification in intelligent lighting multi-network fusion. Background Technology

[0002] Existing intelligent lighting multi-network systems lack a unified mechanism for binding device identities and communication links. Each link is independently authenticated, making them prone to problems such as unauthorized device access, unverified link switching, and identity theft. In multi-network converged communication scenarios, different communication links share transmission resources, and there is a lack of correlation between device identity legitimacy and link usage permissions, resulting in insufficient system security and data transmission reliability. Summary of the Invention

[0003] This invention aims to provide a method for identity binding and security verification of multi-network convergence in smart lighting. By binding and authenticating device identity identifiers with multiple communication links, it improves system access security and operational stability.

[0004] The present invention adopts the following technical solution: A method for identity binding and security verification across multiple networks in intelligent lighting is provided, applied to an intelligent lighting system. The system communication links include at least two of the following: starlight communication link, mesh communication link, and DC power line carrier communication link. The method includes the following steps: S1: Assign a unique device identifier to the lighting terminal within the system. The device identifier is pre-stored in the storage unit of the lighting terminal. S2: The lighting terminal sends an access request through any communication link, and the access request carries the device identification and link identification; S3: Bind and verify the device identity and link identity to determine whether the current lighting terminal has access permission for the current communication link; S4: If the verification passes, the lighting terminal is allowed to access the current communication link and establish a communication connection; if the verification fails, access is rejected and abnormal information is recorded. S5: When switching communication links, the binding verification of the target communication link is re-executed, and the switching can only be completed after the verification passes.

[0005] Furthermore, the device identification includes at least one of the following: device serial number and hardware identification code.

[0006] Furthermore, the link identifier is used to distinguish between star flash communication links, mesh communication links, and DC power line carrier communication links.

[0007] Furthermore, the binding verification includes comparing the pre-stored list of legitimate identities and comparing the correspondence between identity identifiers and link identifiers.

[0008] Furthermore, after the lighting terminal connects to the communication link, it periodically sends an identity verification packet, which carries the device identity identifier and the current link identifier.

[0009] Furthermore, the system periodically rechecks the identity and link binding of the received verification packets; if the verification fails, the communication connection is disconnected.

[0010] Furthermore, during communication link switching, the target communication link verifies the device's identity separately, and performs the switching after the verification is successful.

[0011] Furthermore, the DC power line carrier communication link transmits data based on the DC power supply line, and data transmission and power transmission share the same line.

[0012] Furthermore, abnormal information includes at least one of the following: illegal identity identifier, lack of link authorization, and verification timeout.

[0013] Furthermore, the system supports updating the list of legitimate identities, and the update method includes at least one of local configuration and remote distribution. Attached Figure Description

[0014] Figure 1 This is a flowchart of the intelligent lighting multi-network fusion identity binding and security verification method of the present invention. Detailed Implementation Example 1

[0015] Each lighting terminal has a pre-stored unique hardware identification code, while the system controller stores a list of authorized identities. The terminal sends an access request via any communication link, carrying the hardware identification code and the corresponding link identifier. The system compares the identity list with the link permissions; if the verification passes, access is granted. After access, the terminal periodically sends heartbeat packets, and the system verifies the identity's legitimacy in real time. When switching communication links, the target link re-performs binding verification; the switch can only be completed after successful verification. Unauthorized identities and access attempts are directly rejected and recorded as abnormalities, with anomaly logs retained for system security auditing. Example 2

[0016] In a driverless DC-powered lighting system, the terminal initiates access via a DC power line carrier link, carrying the device serial number and carrier link identifier in the access request. After the system completes identity and link permission verification, a communication connection is established. Any link switch triggers identity re-verification, ensuring consistent identity for the same device across multiple links and improving system operational security.

Claims

1. A method for identity binding and security verification in intelligent lighting multi-network fusion, applied to an intelligent lighting system, characterized in that, The system communication link includes at least two of the following: star flash communication link, mesh communication link, and DC power line carrier communication link; the method includes the following steps: S1: Assign a unique device identifier to the lighting terminal within the system. The device identifier is pre-stored in the storage unit of the lighting terminal. S2: The lighting terminal sends an access request through any communication link, and the access request carries the device identification and link identification; S3: Bind and verify the device identity and link identity to determine whether the current lighting terminal has access permission for the current communication link; S4: If the verification passes, the lighting terminal is allowed to access the current communication link and establish a communication connection; if the verification fails, access is rejected and abnormal information is recorded. S5: When switching communication links, the binding verification of the target communication link is re-executed, and the switching can only be completed after the verification passes.

2. The method according to claim 1, characterized in that, Device identification includes at least one of the following: device serial number and hardware identification code.

3. The method according to claim 1, characterized in that, Link identifiers are used to distinguish between star flash communication links, mesh communication links, and DC power line carrier communication links.

4. The method according to claim 1, characterized in that, Binding verification includes comparing the pre-stored list of legitimate identities and comparing the correspondence between identity identifiers and link identifiers.

5. The method according to claim 1, characterized in that, After the lighting terminal is connected to the communication link, it periodically sends heartbeat packets, which carry the device identification identifier.

6. The method according to claim 5, characterized in that, The system periodically verifies the received heartbeat packets, and disconnects the communication connection if the verification fails.

7. The method according to claim 1, characterized in that, When switching communication links, the target communication link verifies the device's identity separately, and the switch is executed after the verification is successful.

8. The method according to claim 1, characterized in that, DC power line carrier communication links transmit data based on DC power supply lines, and data transmission and power transmission share the same line.

9. The method according to claim 1, characterized in that, Abnormal information includes at least one of the following: illegal identity, no link permission, or verification timeout.

10. The method according to claim 1, characterized in that, The system supports updating the list of legitimate identities, and the update method includes at least one of local configuration and remote distribution.

Images