Iot device access authentication management method and water conservancy internet of things platform

By generating temporary key pairs for identity authentication in the water conservancy Internet of Things system, the problems of easy leakage of device private keys and waste of communication resources are solved, achieving lightweight and highly secure access authentication and enhancing the security and efficiency of the system.

CN122419831APending Publication Date: 2026-07-17POWERCHINA HUADONG ENG CORP LTD +1
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202610408258.8
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2026-03-31
Publication Date
2026-07-17

AI Technical Summary

Technical Problem

Existing water conservancy IoT systems lack lightweight, highly secure, and reliable access authentication methods that meet the security needs of different businesses, and device private keys are easily leaked, leading to security threats.

Method used

By generating random numbers on the client and server sides, using the device root key and unique identifier in the hardware security module to generate a temporary key pair, performing joint signing and key negotiation, generating a session key, realizing device identity authentication, and only transmitting the hash value of the device identity certificate to reduce the amount of communication data.

Benefits of technology

It improves key security, reduces the requirements for terminal device performance and network bandwidth, enhances long-term communication security, enables the handling of different business security needs, and ensures the security and resource conservation of critical businesses.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN122419831A_ABST
    Figure CN122419831A_ABST
Patent Text Reader

Abstract

本发明提供一种IOT设备接入认证管理方法及水利物联网平台,物联网终端按业务数据安全等级生成客户端随机数,与预设密码套件安全等级标识封装成客户端问候消息发至认证服务器,服务器接收后确定密码套件、生成服务器随机数,将所述与自身公钥证书封装成服务器问候消息回传终端,终端用硬件安全模块中的设备根密钥、唯一标识符及设备身份证书哈希值,经密钥导出函数生成临时密钥对,用所述私钥对服务器随机数和证书哈希值联合签名,发送临时公钥、数字签名与证书哈希值给服务器,验证通过后双方分别用自身私钥与对方公钥生成相同预主密钥,再基于预主密钥、两端随机数及安全等级标识各自生成会话密钥,完成接入认证。
Need to check novelty before this filing date? Find Prior Art