Access control method, system, gateway and proxy component for internet of things devices

Abstract

The application relates to an access control method and system of an Internet of Things device, a gateway and an agent component. The method comprises the following steps: acquiring a credibility score of the Internet of Things device; determining an access control policy corresponding to the credibility score according to a corresponding relationship between the credibility score and the access control policy; generating an access configuration modification instruction of the Internet of Things device based on the access control policy; and sending the access configuration modification instruction to an agent component corresponding to the Internet of Things device, so that the agent component executes an access control action corresponding to the access configuration modification instruction. The method can improve the access control efficiency of the Internet of Things device.

Description

Technical Field

[0001] This application relates to the field of Internet of Things (IoT) security management technology, and in particular to an access control method, system, gateway, and agent component for IoT devices. Background Technology

[0002] In the Internet of Things (IoT) environment, the trusted status of IoT devices exhibits real-time dynamic fluctuations. Firmware updates, configuration modifications, and malicious intrusions can all alter the security risk level of IoT devices.

[0003] Therefore, to achieve tiered isolation and protection while balancing security and business availability, it is necessary to dynamically match control rules (e.g., network access rules, device function permission rules, identity and certificate access rules, etc.) to IoT devices based on their risk status. In related technologies, the management platform pre-configures fixed access parameters for IoT devices. The IoT devices periodically report their status to the management platform, and the administrator manually modifies these fixed access configuration parameters based on the reported status to achieve access control for the IoT devices.

[0004] However, the above methods suffer from low efficiency in access control for IoT devices. Summary of the Invention

[0005] Therefore, it is necessary to provide an access control method, system, gateway, and proxy component for IoT devices that can improve the access control efficiency of IoT devices, addressing the aforementioned technical problems.

[0006] Firstly, this application provides an access control method for an Internet of Things (IoT) device, applied to a gateway, comprising:

[0007] Obtain the trustworthiness score of IoT devices;

[0008] Based on the correspondence between trust scores and access policies, determine the access control policy corresponding to the trust score;

[0009] Based on access control policies, generate access configuration modification instructions for IoT devices;

[0010] Send an access configuration modification command to the agent component corresponding to the IoT device, so that the agent component executes the access control action corresponding to the access configuration modification command.

[0011] In one embodiment, determining the access control policy corresponding to the trust score based on the correspondence between the trust score and the access policy includes:

[0012] If the credibility score is not less than the first credibility value, then the corresponding access control policy is determined to allow the terminal to access all business resources allocated to the terminal.

[0013] If the credibility score is not greater than the second credibility value and less than the first credibility value, then the corresponding access control policy is determined as follows: control the terminal's access bandwidth to be less than the preset bandwidth, or allow the terminal to access non-isolated zone services.

[0014] If the credibility score is less than the second credibility value, the corresponding access control policy is determined to be to prohibit the terminal from accessing all business resources.

[0015] In one embodiment, obtaining the trust score of the IoT device includes:

[0016] Obtain the number of software running on the IoT device, the hardware information of the IoT device, the operating system information of the IoT device, and the device certificate information of the IoT device;

[0017] The trustworthiness score of IoT devices is determined based on the number of software programs, hardware information, operating system information, and device certificate information.

[0018] In one embodiment, the method further includes:

[0019] Obtain the current validity period of the device certificate for the IoT device;

[0020] When the validity period of the current device certificate is less than the preset number of days, a certificate application message is sent to the identity authentication platform corresponding to the IoT device; the certificate application message includes the identifier of the IoT device, the type of certificate to be applied for, and the certificate information of the current device certificate;

[0021] Receive the latest device certificate from the identity authentication platform and send the latest device certificate to the corresponding agent component of the IoT device.

[0022] Secondly, this application also provides an access control method for IoT devices, applied to a proxy component corresponding to the IoT device, the method including:

[0023] The gateway receives an access configuration modification instruction for IoT devices sent by the gateway. The access configuration modification instruction is for the gateway to obtain the trust score of the IoT devices, and determine the access control policy corresponding to the trust score based on the correspondence between the trust score and the access policy, as well as generate the access control policy based on the access control policy.

[0024] Execute the access control operation corresponding to the access configuration modification command.

[0025] In one embodiment, the method further includes:

[0026] The gateway receives the latest device certificate of the IoT device. The latest device certificate is generated when the validity period of the current device certificate is less than a preset number of days. The gateway sends a certificate application message to the identity authentication platform corresponding to the IoT device so that the identity authentication platform can generate the latest device certificate for the IoT device based on the certificate application message. The certificate application message includes the identifier of the IoT device, the type of certificate to be applied for, and the certificate information of the current device certificate.

[0027] Perform integrity verification on the latest device certificate and store the verified latest device certificate in the certificate repository.

[0028] Thirdly, this application also provides an access control system for Internet of Things (IoT) devices, the modified system including:

[0029] A gateway for performing the method described in the first aspect above;

[0030] The agent component corresponding to the IoT device is used to execute the method described in the second aspect above.

[0031] Fourthly, this application also provides a gateway, including:

[0032] The acquisition module is used to obtain the trustworthiness score of IoT devices.

[0033] The determination module is used to determine the access control policy corresponding to the trust score based on the correspondence between the trust score and the access policy;

[0034] The generation module is used to generate access configuration modification instructions for IoT devices based on access control policies.

[0035] The sending module is used to send access configuration modification instructions to the agent components corresponding to IoT devices, so that the agent components can execute the access control actions corresponding to the access configuration modification instructions.

[0036] Fifthly, this application also provides a proxy component for an IoT device, including:

[0037] The receiving module is used to receive the access configuration modification instruction of the IoT device sent by the gateway. The access configuration modification instruction is for the gateway to obtain the trust score of the IoT device, and determine the access control policy corresponding to the trust score according to the correspondence between the trust score and the access policy, as well as the access control policy generated based on the access control policy.

[0038] The execution module is used to execute the access control operations corresponding to the access configuration modification instructions.

[0039] The aforementioned access control methods, systems, gateways, and proxy components for IoT devices obtain the trust scores of IoT devices, accurately match the corresponding access control policies based on the matching relationship between the trust scores and access policies, and then generate access configuration modification instructions to be sent to the corresponding proxy components of the devices to execute control actions. This enables dynamic and fine-grained adjustment of device access permissions based on the multi-dimensional trust status of the devices. Relying on the unified implementation of access control logic through proxy components, there is no need for manual adjustment of the configuration of massive numbers of IoT devices. At the same time, it achieves differentiated security isolation based on the trust level of devices, effectively reducing the security risk of unauthorized access by IoT devices and improving the automation level and security protection capabilities of the overall access control of IoT. Attached Figure Description

[0040] To more clearly illustrate the technical solutions in the embodiments of this application or related technologies, the drawings used in the description of the embodiments of this application or related technologies will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other related drawings can be obtained based on these drawings without creative effort.

[0041] Figure 1 This is an application environment diagram of an access control method for an Internet of Things (IoT) device in one embodiment.

[0042] Figure 2 This is a flowchart illustrating an access control method for an IoT device in one embodiment;

[0043] Figure 3 This is a flowchart illustrating an access control method for an IoT device in another embodiment;

[0044] Figure 4 This is a flowchart illustrating an access control method for an IoT device in another embodiment;

[0045] Figure 5 This is a flowchart illustrating an access control method for an IoT device in another embodiment;

[0046] Figure 6 This is a flowchart illustrating an access control method for an IoT device in another embodiment;

[0047] Figure 7 This is a flowchart illustrating an access control method for an IoT device in another embodiment;

[0048] Figure 8 This is a flowchart illustrating an access control method for an IoT device in another embodiment;

[0049] Figure 9 This is a structural block diagram of a gateway in one embodiment;

[0050] Figure 10 This is a structural block diagram of the agent component corresponding to an IoT device in one embodiment. Detailed Implementation

[0051] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application.

[0052] In the Internet of Things (IoT) environment, the trusted status of IoT devices exhibits real-time dynamic fluctuations. Firmware updates, configuration modifications, and malicious intrusions can all alter the security risk level of IoT devices.

[0053] Therefore, to achieve tiered isolation and protection while balancing security and business availability, it is necessary to dynamically match control rules (e.g., network access rules, device function permission rules, identity and certificate access rules, etc.) to IoT devices based on their risk status. In related technologies, the management platform pre-configures fixed access parameters for IoT devices. The IoT devices periodically report their status to the management platform, and the administrator manually modifies these fixed access configuration parameters based on the reported status to achieve access control for the IoT devices.

[0054] However, the above methods suffer from low efficiency in access control for IoT devices. Therefore, this application provides an access control method for IoT devices to address these issues.

[0055] The access control method for IoT devices provided in this application embodiment can be applied to, for example... Figure 1 The IoT device access control system 01 shown includes a gateway 10 and a proxy component 20 corresponding to the IoT device. The gateway 10 is used to generate access configuration modification instructions for the IoT device, and the proxy component 20 corresponding to the IoT device is used to execute the access control actions corresponding to the access configuration modification instructions.

[0056] In one exemplary embodiment, such as Figure 2 As shown, an access control method for an Internet of Things (IoT) device is provided, which is applied to... Figure 1 Taking Gateway 10 as an example, the explanation includes:

[0057] S201. Obtain the trustworthiness score of IoT devices.

[0058] The credibility score refers to the comprehensive security and credibility metric of an IoT device, used to quantitatively assess the current security and credibility level of the device. The credibility score can be determined based on the number of software running on the IoT device, the hardware information of the IoT device, the operating system information of the IoT device, and the device certificate information of the IoT device.

[0059] In this embodiment, when access control of IoT devices is required, the trust score of the IoT devices can be obtained.

[0060] Optionally, the hardware information of the IoT device may be related to whether the corresponding agent component of the IoT device has been upgraded. The remote upgrade process of the agent component corresponding to the IoT device may include:

[0061] S1. The operation and maintenance personnel create an upgrade task on the operation and maintenance management platform, upload the encrypted upgrade package, select the target IoT device (batch or single point), and the security authentication gateway pushes the upgrade instruction to the agent component of the target IoT device.

[0062] S2. After receiving the instruction, the agent component corresponding to the target IoT device requests the gateway to download the upgrade package. The download process supports resuming interrupted downloads (download can continue from the interruption point after network interruption), and performs integrity verification on the upgrade package (such as MD5, SHA256).

[0063] S3. The agent component corresponding to the target IoT device executes the upgrade process (decompression, version verification, program replacement, restart). If an abnormality occurs during the upgrade process (such as verification failure, program failure to start, repeated crashes), the agent component automatically rolls back to the stable version before the upgrade to ensure the component runs normally.

[0064] S4. After the upgrade is completed, the agent component corresponding to the IoT device reports the upgrade result (success / failure / rollback) and the current version information to the gateway, and records all upgrade operations in the upgrade log, which is retained for ≥6 months.

[0065] S202. Based on the correspondence between the trust score and the access policy, determine the access control policy corresponding to the trust score.

[0066] The correspondence between credibility score and access policy can be a one-to-one correspondence between credibility score and access policy.

[0067] The access control policies include: policies that allow terminals to access all service resources allocated to them, policies that control the access bandwidth of terminals to be less than a preset bandwidth, policies that allow terminals to access non-isolated zone services, and policies that prohibit terminals from accessing all service resources.

[0068] In this embodiment, after obtaining the trust score of the IoT device, the access control policy corresponding to the trust score can be determined based on the correspondence between the trust score and the access policy.

[0069] S203. Based on the access control policy, generate access configuration modification instructions for IoT devices.

[0070] In this embodiment, after the access control policy is determined as described above, an access configuration modification instruction for IoT devices can be generated based on the access control policy.

[0071] For example, if the access control policy allows the terminal to access all service resources allocated to the terminal, an access configuration modification instruction is generated to allow the terminal to access all service resources.

[0072] For example, if the access control policy is that the access bandwidth of the control terminal is less than the preset bandwidth, an access configuration modification instruction is generated to indicate that the access bandwidth of the control terminal is less than the preset bandwidth; or, if the access control policy is that the terminal is allowed to access non-isolated zone services, an access configuration modification instruction is generated to indicate that the terminal is allowed to access non-isolated zone services.

[0073] For example, if the access control policy is to prohibit terminals from accessing all business resources, an access configuration modification instruction is generated to prohibit terminals from accessing all business resources.

[0074] S204. Send an access configuration modification instruction to the agent component corresponding to the IoT device, so that the agent component executes the access control action corresponding to the access configuration modification instruction.

[0075] In this embodiment, after generating the access configuration modification instruction for the IoT device, the generated access configuration modification instruction can be sent to the agent component corresponding to the IoT device, so that the agent component of the IoT device can execute the access control action corresponding to the access configuration parameter modification instruction.

[0076] Optionally, after the agent component of the IoT device executes the access control action corresponding to the access configuration parameter modification instruction, it can generate a result indicating failure or success, and send the result back to the gateway so that the gateway can record the policy execution log.

[0077] In this embodiment, by obtaining the trust score of IoT devices, the corresponding access control policy is accurately matched based on the matching relationship between the trust score and the access policy. Then, an access configuration modification instruction is generated and sent to the corresponding proxy component of the device to execute the control action. This can dynamically and finely adjust the device access permissions based on the multi-dimensional trust status of the device. Relying on the unified implementation of access control logic by the proxy component, there is no need to manually adjust the configuration of a large number of IoT devices. At the same time, it can realize differentiated security isolation according to the trust level of the device, effectively reduce the security risk of unauthorized access by IoT devices, and improve the automation level and security protection capability of the overall access control of IoT.

[0078] In one exemplary embodiment, in the above Figure 2 Based on the illustrated embodiment, further specific implementations can be provided for determining the access control policy corresponding to the trust score based on the correspondence between the trust score and the access policy. See [link to relevant documentation]. Figure 3 The aforementioned S202 includes:

[0079] S301. If the credibility score is not less than the first credibility value, then the corresponding access control policy is determined to allow the terminal to access all business resources allocated to the terminal.

[0080] The first confidence value can be 0.8.

[0081] In this embodiment, after obtaining the trust score of the IoT device, if the trust score is not less than 0.8, the corresponding access control policy is determined to allow the terminal to access all business resources allocated to the terminal.

[0082] S302. If the credibility score is not greater than the second credibility value and less than the first credibility value, then the corresponding access control policy is determined as follows: control the terminal's access bandwidth to be less than the preset bandwidth, or allow the terminal to access non-isolated zone services.

[0083] The second confidence value can be 0.3.

[0084] In this embodiment, after obtaining the trust score of the IoT device, if the trust score is not less than 0.3 and less than 0.8, the corresponding access control policy is determined to be: control the terminal's access bandwidth to be less than the preset bandwidth, or allow the terminal to access non-isolated zone services.

[0085] S303. If the credibility score is less than the second credibility value, then the corresponding access control policy is determined to be to prohibit the terminal from accessing all business resources.

[0086] In this embodiment, after obtaining the trust score of the IoT device, if the trust score is less than 0.3, the corresponding access control policy is determined to prohibit the terminal from accessing all business resources.

[0087] In this embodiment, a three-level trust threshold range is divided based on the trust score. Differentiated access control policies are matched for terminals with different trust levels. High-trust terminals are granted full authorized service resources to ensure service access efficiency. Medium-trust terminals are subject to appropriate permission constraints through bandwidth limiting and only non-isolated services are allowed. Low-trust terminals are directly blocked from all service access. This system can achieve layered and refined dynamic permission control based on the real-time trust status of the device. While taking into account the normal service access needs, it can accurately constrain the access behavior of risky terminals, balance service availability and the overall access security of the IoT system, and effectively avoid the risks of data leakage and system intrusion caused by untrusted terminals accessing core isolated services without authorization.

[0088] In one exemplary embodiment, in the above Figure 2 or Figure 3 Based on the illustrated embodiments, a specific implementation method for obtaining the trust score of IoT devices can be described, see [link to documentation]. Figure 4 The aforementioned S201 includes:

[0089] S401. Obtain the number of software running on the IoT device, the hardware information of the IoT device, the operating system information of the IoT device, and the device certificate information of the IoT device.

[0090] The number of software running on an IoT device refers to the total number of programs, processes, background services, and plug-in applications currently loaded in the IoT device's memory and in an active running state.

[0091] Among them, the hardware information of IoT devices refers to the set of hardware parameters used to identify and characterize the inherent attributes and operating status of the IoT device hardware.

[0092] Among them, the operating system information of IoT devices refers to a set of various parameters used to characterize the security baseline and operating status of the device's operating system.

[0093] Among them, the device certificate information of IoT devices refers to the set of credential-related data used to verify the legitimate identity of IoT devices and the validity of their certificates.

[0094] In this embodiment, when it is necessary to determine the trustworthiness score of an IoT device, the number of software running on the IoT device, the hardware information of the IoT device, the operating system information of the IoT device, and the device certificate information of the IoT device can be obtained first.

[0095] S402. Determine the trustworthiness score of IoT devices based on the number of software, hardware information, operating system information, and device certificate information.

[0096] In this embodiment, after obtaining the number of software running on the IoT device, the hardware information of the IoT device, the operating system information of the IoT device, and the device certificate information of the IoT device, the trustworthiness score of the IoT device can be determined based on the number of software, hardware information, operating system information, and device certificate information.

[0097] For example, the four indicators of the number of running software, hardware information, operating system information, and device certificate information can be scored separately. Fixed weights are assigned to each indicator based on its security importance. The scores of each indicator are multiplied by their corresponding weights and then summed and normalized to obtain a credibility score in the range of 0 to 1. When an indicator has a security anomaly, the corresponding sub-item is deducted. The more anomalies there are, the lower the final credibility score.

[0098] In this embodiment, four types of multi-dimensional trusted data—device operating software, hardware, operating system, and certificates—are collected comprehensively. The security status of the device is evaluated from multiple dimensions, and a trust score is calculated accordingly. This approach can comprehensively and accurately identify potential security risks of the device, avoid the bias in trust judgment caused by single-dimensional evaluation, and improve the accuracy and reliability of the trust evaluation results of IoT devices.

[0099] In one exemplary embodiment, in the above Figure 4 Based on the embodiments shown, such as Figure 5 As shown, the above method also includes:

[0100] S501. Obtain the current validity period of the device certificate for the IoT device.

[0101] In this embodiment, when it is necessary to update the device certificate information of an IoT device, the validity period of the current device certificate of the IoT device can be obtained.

[0102] S502. When the validity period of the current device certificate is less than the preset number of days, send a certificate application message to the identity authentication platform corresponding to the IoT device; the certificate application message includes the identifier of the IoT device, the type of certificate to be applied for, and the certificate information of the current device certificate.

[0103] In this embodiment, when the validity period of the current device certificate is less than a preset number of days, it indicates that the current device certificate of the IoT device needs to be updated. Therefore, a certificate application message carrying the IoT device's identifier, the type of certificate to be applied for, and the certificate information of the current device certificate needs to be sent to the identity authentication platform corresponding to the IoT device.

[0104] Optionally, after receiving a certificate application message containing the identifier of the IoT device, the type of certificate to be applied for, and the certificate information of the current device certificate, the identity authentication platform corresponding to the IoT device can generate the latest device certificate for the IoT device based on the identifier of the IoT device, the type of certificate to be applied for, and the certificate information of the current device certificate, and send the latest device certificate of the IoT device to the gateway.

[0105] S503 receives the latest device certificate sent by the identity authentication platform and sends the latest device certificate to the agent component corresponding to the IoT device.

[0106] In this embodiment, after the identity authentication platform sends the latest device certificate of the IoT device to the gateway, the gateway can receive the latest device certificate of the IoT device sent by the identity authentication platform and send the latest device certificate of the IoT device to the corresponding proxy component of the IoT device.

[0107] Optionally, if the latest device certificate of the IoT device is not successfully sent to the corresponding agent component of the IoT device, the gateway will resend the latest device certificate of the IoT device to the corresponding agent component of the IoT device. After multiple retries, if the latest device certificate of the IoT device is still not successfully sent to the corresponding agent component of the IoT device, an alarm message indicating certificate push failure will be generated.

[0108] In this embodiment, the remaining validity period of the device certificate is checked in real time. When the certificate is about to expire, a renewal application is automatically initiated to the authentication platform. The application message carries the complete device identifier and certificate-related information to ensure the platform can quickly verify and process the certificate. After obtaining the new certificate, it is sent to the agent component to complete the update. This realizes automated renewal management of IoT device certificates without manual intervention, avoiding the failure of device identity authentication and interruption of business access due to certificate expiration. It continuously ensures the trustworthiness of device identity and improves the efficiency of IoT identity security operation and maintenance.

[0109] In one exemplary embodiment, such as Figure 6 As shown, an access control method for an Internet of Things (IoT) device is provided, which is applied to... Figure 1 The following explanation uses the agent component 20 corresponding to the IoT device as an example, including:

[0110] S601, Receive the access configuration modification instruction for the IoT device sent by the gateway; The access configuration modification instruction is for the gateway to obtain the trust score of the IoT device, and determine the access control policy corresponding to the trust score based on the correspondence between the trust score and the access policy, as well as the access control policy generated based on the access control policy.

[0111] The credibility score refers to the comprehensive security and credibility metric of an IoT device, used to quantitatively assess the current security and credibility level of the device. The credibility score can be determined based on the number of software running on the IoT device, the hardware information of the IoT device, the operating system information of the IoT device, and the device certificate information of the IoT device.

[0112] In this embodiment, when access control of IoT devices is required, the gateway can obtain the trust score of the IoT devices.

[0113] The correspondence between credibility score and access policy can be a one-to-one correspondence between credibility score and access policy.

[0114] The access control policies include: policies that allow terminals to access all service resources allocated to them, policies that control the access bandwidth of terminals to be less than a preset bandwidth, policies that allow terminals to access non-isolated zone services, and policies that prohibit terminals from accessing all service resources.

[0115] In this embodiment, after the gateway obtains the trust score of the IoT device, it can determine the access control policy corresponding to the trust score based on the correspondence between the trust score and the access policy.

[0116] In this embodiment, after the gateway determines the access control policy, it can generate an access configuration modification instruction for IoT devices based on the access control policy.

[0117] For example, if the access control policy allows a terminal to access all service resources allocated to that terminal, the gateway generates an access configuration modification instruction that allows the terminal to access all service resources.

[0118] For example, if the access control policy is that the access bandwidth of the control terminal is less than the preset bandwidth, the gateway generates an access configuration modification instruction that the access bandwidth of the control terminal is less than the preset bandwidth; or, if the access control policy is that the terminal is allowed to access non-isolated zone services, the gateway generates an access configuration modification instruction that allows the terminal to access non-isolated zone services.

[0119] For example, if the access control policy prohibits terminals from accessing all service resources, the gateway can generate an access configuration modification command to prohibit terminals from accessing all service resources, and can also send the generated access configuration modification command to the corresponding proxy component of the IoT device.

[0120] S602. Execute the access control operation corresponding to the access configuration modification instruction.

[0121] In this embodiment, the proxy component corresponding to the IoT device receives the access configuration modification instruction sent by the gateway, so that the proxy component of the IoT device executes the access control policy corresponding to the access configuration parameter modification instruction.

[0122] In this embodiment, by obtaining the trust score of IoT devices, the corresponding access control policy is accurately matched based on the matching relationship between the trust score and the access policy. Then, an access configuration modification instruction is generated and sent to the corresponding proxy component of the device to execute the control action. This can dynamically and finely adjust the device access permissions based on the multi-dimensional trust status of the device. Relying on the unified implementation of access control logic by the proxy component, there is no need to manually adjust the configuration of a large number of IoT devices. At the same time, it can realize differentiated security isolation according to the trust level of the device, effectively reduce the security risk of unauthorized access by IoT devices, and improve the automation level and security protection capability of the overall access control of IoT.

[0123] In one exemplary embodiment, in the above Figure 6 Based on the illustrated embodiments, see also Figure 7 The above methods also include:

[0124] S701, Receive the latest device certificate of the IoT device sent by the gateway; the latest device certificate is generated when the validity period of the current device certificate is less than a preset number of days. The gateway sends a certificate application message to the identity authentication platform corresponding to the IoT device so that the identity authentication platform can generate the latest device certificate of the IoT device according to the certificate application message; the certificate application message includes the identifier of the IoT device, the type of certificate to be applied for, and the certificate information of the current device certificate.

[0125] In this embodiment, after the gateway receives the latest device certificate of the IoT device sent by the identity authentication platform, it can send the latest device certificate of the IoT device to the proxy component of the IoT device, so that the proxy component of the IoT device can receive the latest device certificate of the IoT device sent by the gateway.

[0126] S702. Perform integrity verification on the latest device certificate and store the latest device certificate after integrity verification in the certificate repository.

[0127] In this embodiment, after receiving the latest device certificate, the integrity of the latest device certificate can be verified, and after the integrity verification of the latest device certificate is completed, the latest device certificate with integrity verification is stored in the certificate repository.

[0128] In this embodiment, receiving a new device certificate issued by the gateway and performing integrity verification before storing it in the database can intercept tampered or damaged invalid certificates in advance, ensuring that the certificates in the certificate repository are authentic and trustworthy, preventing illegal certificates from being used for device identity authentication, and solidifying the security foundation of IoT device identity.

[0129] In one exemplary embodiment, an access control method for an Internet of Things (IoT) device is also provided, see [link to relevant documentation]. Figure 8 ,include:

[0130] T1 (Gateway) obtains the number of software running on the IoT device, the hardware information of the IoT device, the operating system information of the IoT device, and the device certificate information of the IoT device;

[0131] T2. Determine the trustworthiness score of IoT devices based on the number of software, hardware information, operating system information, and device certificate information;

[0132] T3. If the credibility score is not less than the first credibility value, then the corresponding access control policy is determined to allow the terminal to access all business resources allocated to the terminal.

[0133] T4. If the credibility score is not greater than the second credibility value and less than the first credibility value, then the corresponding access control policy is determined as follows: control the terminal's access bandwidth to be less than the preset bandwidth, or allow the terminal to access non-isolated zone services.

[0134] T5. If the credibility score is less than the second credibility value, the corresponding access control policy is determined to be to prohibit the terminal from accessing all business resources.

[0135] T6. Generate access configuration modification instructions for IoT devices based on access control policies;

[0136] T7. Send an access configuration modification command to the agent component corresponding to the IoT device;

[0137] T8 (the proxy component for IoT devices) receives the access configuration modification command for IoT devices sent by the gateway.

[0138] It should be noted that the descriptions of T1-T8 above can be found in the relevant descriptions in the above embodiments, and their effects are similar, so they will not be repeated here.

[0139] It should be understood that although the steps in the flowcharts of the embodiments described above are shown sequentially according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the flowcharts of the embodiments described above may include multiple steps or multiple stages. These steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these steps or stages is not necessarily sequential, but can be performed alternately or in turn with other steps or at least some of the steps or stages of other steps.

[0140] Based on the same inventive concept, this application also provides an access control system for an IoT device to implement the access control method for the IoT device described above. The access control system for the IoT device includes: a gateway for executing the method as described in any one of the above embodiments; and a proxy component corresponding to the IoT device for executing the method as described in any one of the above embodiments. It should be noted that the specific limitations of the access control system for the IoT device can be found in the limitations of the access control method for the IoT device described above, and will not be repeated here.

[0141] In one exemplary embodiment, such as Figure 9 As shown, a gateway is also provided, including: an acquisition module 10, a determination module 11, a generation module 12, and a sending module 13, wherein:

[0142] Module 10 is used to obtain the trustworthiness score of IoT devices.

[0143] The determination module 11 is used to determine the access control policy corresponding to the trust score based on the correspondence between the trust score and the access policy.

[0144] The generation module 12 is used to generate access configuration modification instructions for IoT devices based on access control policies.

[0145] The sending module 13 is used to send an access configuration modification instruction to the agent component corresponding to the IoT device, so that the agent component executes the access control action corresponding to the access configuration modification instruction.

[0146] In an exemplary embodiment, the determining module 11 includes:

[0147] The first determining unit is specifically used to determine the corresponding access control policy as allowing the terminal to access all business resources allocated to the terminal if the credibility score is not less than the first credibility value.

[0148] The second determining unit is specifically used to determine the corresponding access control policy if the credibility score is not greater than the second credibility value and less than the first credibility value: control the terminal's access bandwidth to be less than the preset bandwidth, or allow the terminal to access non-isolated zone services.

[0149] The third determining unit is specifically used to determine the corresponding access control policy as prohibiting the terminal from accessing all business resources if the credibility score is less than the second credibility value.

[0150] In an exemplary embodiment, the acquisition module 10 includes:

[0151] The acquisition unit is specifically used to acquire the number of software running on the IoT device, the hardware information of the IoT device, the operating system information of the IoT device, and the device certificate information of the IoT device.

[0152] The determination unit is specifically used to determine the trustworthiness score of IoT devices based on the number of software, hardware information, operating system information, and device certificate information.

[0153] In one exemplary embodiment, the gateway further includes:

[0154] The acquisition module is used to obtain the current validity period of the device certificate of the IoT device;

[0155] The sending module is used to send a certificate application message to the identity authentication platform corresponding to the IoT device when the validity period of the current device certificate is less than a preset number of days. The certificate application message includes the identifier of the IoT device, the type of certificate to be applied for, and the certificate information of the current device certificate.

[0156] The receiving module is used to receive the latest device certificate sent by the identity authentication platform and send the latest device certificate to the corresponding agent component of the IoT device.

[0157] In one exemplary embodiment, such as Figure 10 As shown, a proxy component corresponding to an IoT device is also provided, including: a receiving module 20 and an execution module 21, wherein:

[0158] The receiving module 20 is used to receive the access configuration modification instruction of the IoT device sent by the gateway; the access configuration modification instruction is for the gateway to obtain the trust score of the IoT device, and determine the access control policy corresponding to the trust score according to the correspondence between the trust score and the access policy, as well as the access control policy generated based on the access control policy.

[0159] The execution module 21 is used to execute the access control operation corresponding to the access configuration modification instruction.

[0160] In an exemplary embodiment, the proxy component corresponding to the above-mentioned IoT device further includes:

[0161] The receiving module is used to receive the latest device certificate of the IoT device sent by the gateway. The latest device certificate is generated when the validity period of the current device certificate is less than a preset number of days. The gateway sends a certificate application message to the identity authentication platform corresponding to the IoT device, so that the identity authentication platform can generate the latest device certificate of the IoT device based on the certificate application message. The certificate application message includes the identifier of the IoT device, the type of certificate to be applied for, and the certificate information of the current device certificate.

[0162] The verification module is used to perform integrity verification on the latest device certificate and store the verified latest device certificate in the certificate repository.

[0163] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium, and when executed, it can include the processes of the embodiments of the above methods. Any references to memory, databases, or other media used in the embodiments provided in this application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM). The databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, blockchain-based distributed databases. The processors involved in the embodiments provided in this application may be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, artificial intelligence (AI) processors, etc., and are not limited to these.

[0164] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.

[0165] The embodiments described above are merely illustrative of several implementation methods of this application, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of this patent application. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this application should be determined by the appended claims.

Claims

1. An access control method for an Internet of Things (IoT) device, characterized in that, Applied to a gateway, the method includes: Obtain the trustworthiness score of IoT devices; Based on the correspondence between the trust score and the access policy, the access control policy corresponding to the trust score is determined; Based on the access control policy, generate an access configuration modification instruction for the IoT device; The access configuration modification instruction is sent to the agent component corresponding to the IoT device, so that the agent component executes the access control action corresponding to the access configuration modification instruction.

2. The method according to claim 1, characterized in that, The step of determining the access control policy corresponding to the trust score based on the correspondence between the trust score and the access policy includes: If the credibility score is not less than the first credibility value, then the corresponding access control policy is determined to allow the terminal to access all business resources allocated to the terminal. If the credibility score is not greater than the second credibility value and is less than the first credibility value, then the corresponding access control policy is determined to be: control the access bandwidth of the terminal to be less than the preset bandwidth, or allow the terminal to access non-isolated zone services; If the credibility score is less than the second credibility value, then the corresponding access control policy is determined to prohibit the terminal from accessing all the service resources.

3. The method according to claim 1 or 2, characterized in that, The process of obtaining the credibility score of IoT devices includes: The number of software running on the IoT device, the hardware information of the IoT device, the operating system information of the IoT device, and the device certificate information of the IoT device are obtained. The trustworthiness score of the IoT device is determined based on the number of software programs, the hardware information, the operating system information, and the device certificate information.

4. The method according to claim 3, characterized in that, The method further includes: Obtain the current validity period of the device certificate of the IoT device; When the validity period of the current device certificate is less than a preset number of days, a certificate application message is sent to the identity authentication platform corresponding to the IoT device; the certificate application message includes the identifier of the IoT device, the type of certificate to be applied for, and the certificate information of the current device certificate; Receive the latest device certificate sent by the identity authentication platform, and send the latest device certificate to the agent component corresponding to the IoT device.

5. An access control method for an Internet of Things (IoT) device, characterized in that, The method, applied to a proxy component for IoT devices, includes: The gateway receives an access configuration modification instruction for an IoT device. The access configuration modification instruction is for the gateway to obtain the trust score of the IoT device, determine the access control policy corresponding to the trust score based on the correspondence between the trust score and the access policy, and generate an access control policy based on the access control policy. Execute the access control operation corresponding to the access configuration modification instruction.

6. The method according to claim 5, characterized in that, The method further includes: The gateway receives the latest device certificate of the IoT device. The latest device certificate is generated when the validity period of the current device certificate is less than a preset number of days. The gateway sends a certificate application message to the identity authentication platform corresponding to the IoT device, so that the identity authentication platform generates the latest device certificate of the IoT device according to the certificate application message. The certificate application message includes the identifier of the IoT device, the type of certificate to be applied for, and the certificate information of the current device certificate. Perform an integrity check on the latest device certificate and store the integrity-checked latest device certificate in the certificate repository.

7. An access control system for an Internet of Things (IoT) device, characterized in that, The access control system includes: A gateway for performing the method as described in any one of claims 1-4 above; The agent component corresponding to the IoT device is used to perform the method as described in claim 5 or 6 above.

8. A gateway, characterized in that, The gateway includes: The acquisition module is used to obtain the trustworthiness score of IoT devices. The determination module is used to determine the access control policy corresponding to the trust score based on the correspondence between the trust score and the access policy; The generation module is used to generate access configuration modification instructions for the IoT device based on the access control policy. The sending module is used to send the access configuration modification instruction to the agent component corresponding to the IoT device, so that the agent component executes the access control action corresponding to the access configuration modification instruction.

9. The gateway according to claim 8, characterized in that, The determining module includes: The first determining unit is specifically used to determine the corresponding access control policy as allowing the terminal to access all business resources allocated to the terminal if the credibility score is not less than the first credibility value. The second determining unit is specifically used to determine the corresponding access control policy as follows if the credibility score is not greater than the second credibility value and is less than the first credibility value: control the access bandwidth of the terminal to be less than the preset bandwidth, or allow the terminal to access non-isolated zone services. The third determining unit is specifically used to determine that if the credibility score is less than the second credibility value, the corresponding access control policy is to prohibit the terminal from accessing all the service resources.

10. A proxy component for an Internet of Things (IoT) device, characterized in that, The proxy component includes: The receiving module is used to receive an access configuration modification instruction for an IoT device sent by the gateway; the access configuration modification instruction is for the gateway to obtain the trust score of the IoT device, and determine the access control policy corresponding to the trust score according to the correspondence between the trust score and the access policy, as well as generate an access control policy based on the access control policy. The execution module is used to execute the access control operation corresponding to the access configuration modification instruction.

Images