IoT Data Processing Method for Secure Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The Internet of Things (IoT) platforms face security risks due to data theft and unauthorized control of IoT devices, even when data is encrypted, as public networks can lead to interception and illegal control of devices.
Innovation Solution
A data processing method and apparatus that encrypts target instructions and identifiers using negotiated keys, allowing IoT devices to decrypt and verify matching results, ensuring secure communication by adding identifiers during the encryption process, preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If data is transmitted through public networks for IoT communication, then connectivity and accessibility are improved, but security risks increase due to potential data theft and unauthorized control
Solution Approach 1:
The patent applies preliminary anti-action by pre-establishing encrypted communication channels and authentication mechanisms before data transmission. Terminal devices and IoT devices perform mutual authentication and establish secure sessions in advance, preventing unauthorized access and data theft before they can occur during communication.
Solution Approach 2:
The patent introduces an IoT platform as an intermediary that facilitates secure communication between terminal devices and IoT devices. The platform manages device authentication, key distribution, and message routing, acting as a trusted mediator that reduces direct exposure to public network risks while maintaining connectivity.
2Object-affected harmful factors
If data is encrypted during transmission, then security is improved, but the risk of data interception and reuse on public networks remains
Solution Approach 1:
The patent implements preliminary action by incorporating unique identifiers into the encryption process beforehand. Each message includes device-specific identifiers that are encrypted along with the data payload. This preliminary inclusion of identifying information ensures that even if data is intercepted, it cannot be reused without the corresponding identifier, preventing replay attacks.
Solution Approach 2:
The patent applies parameter changes by dynamically varying encryption parameters for each communication session. Unique identifiers, timestamps, and session-specific keys are used to change the encryption parameters continuously, ensuring that each message is encrypted with different parameters. This prevents intercepted data from being reused since the encryption parameters have already changed by the time interception would occur.
3Object-affected harmful factors
If encryption keys are negotiated between terminal device and IoT device, then communication security is improved, but the complexity of key management increases
Solution Approach 1:
The patent uses the IoT platform as an intermediary to simplify key management complexity. While end-to-end encryption keys are negotiated between terminal devices and IoT devices for security, the platform assists in the key exchange process, managing the complexity of key generation, distribution, and rotation without requiring devices to handle all key management operations independently.
Data Source
AI summary
A data processing method is provided. A terminal device encrypts a target instruction and a first identifier using a first key to obtain a first ciphertext; and sends the first ciphertext to an IoT device through an IoT platform. The IoT device decrypts the first ciphertext using a second key to obtain the target instruction and the first identifier; determines whether the first identifier matches a second identifier stored locally and comes to a matching result, the first key and the second key being negotiated by the terminal device and the IoT device; and obtains a second cipher text by encrypting the matching result using the second key. The terminal device receives the second ciphertext returned by the IoT device through the IoT platform; decrypts the second ciphertext using the first key to obtain a decryption result; and performs a corresponding operation using the decryption result.