The invention relates to the technical field of
Internet of Things security, in particular to an
Internet of Things equipment and cloud bidirectional
authentication dynamic key
derivation method, which comprises the following steps of: distributing a unique identity
label, an initial key and an
equipment serial number for equipment, and encrypting and storing the initial key; the device obtains a current
timestamp, calculates a
time quantum factor, and performs
cascade processing on the initial key, the identity
label, the device serial number and the
time quantum factor by adopting a multi-stage
cascade key derivation structure to obtain an intermediate key; the equipment encrypts the registration request by using the intermediate key and then sends the encrypted registration request to the gateway, the gateway carries out decryption
verification and generates a random number, and the equipment and the gateway derive an
access token based on the intermediate key and the random number; the equipment generates a request signature identifier by using the
access token, and sends the service parameters, the request signature identifier and the request serial number to the gateway; and the device and the cloud carry out bidirectional identity
verification. According to the technical scheme of the invention, high-strength bidirectional
authentication and key dynamic generation of the equipment and the cloud are realized.