CN110933131A - Digital monitoring safe access method and device based on narrowband Internet of things - Google Patents
Digital monitoring safe access method and device based on narrowband Internet of things Download PDFInfo
- Publication number
- CN110933131A CN110933131A CN201911019407.8A CN201911019407A CN110933131A CN 110933131 A CN110933131 A CN 110933131A CN 201911019407 A CN201911019407 A CN 201911019407A CN 110933131 A CN110933131 A CN 110933131A
- Authority
- CN
- China
- Prior art keywords
- key
- equipment
- digital monitoring
- characteristic information
- private key
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0823—Network architectures or network communication protocols for network security for authentication of entities using certificates
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L12/00—Data switching networks
- H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
- H04L12/2854—Wide area networks, e.g. public data networks
- H04L12/2856—Access arrangements, e.g. Internet access
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/12—Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0861—Generation of secret information including derivation or calculation of cryptographic keys or passwords
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3263—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N7/00—Television systems
- H04N7/18—Closed-circuit television [CCTV] systems, i.e. systems in which the video signal is not broadcast
- H04N7/181—Closed-circuit television [CCTV] systems, i.e. systems in which the video signal is not broadcast for receiving images from a plurality of remote sources
Abstract
The invention discloses a digital monitoring safe access method and device based on a narrowband Internet of things. The method comprises the following steps: acquiring equipment characteristic information of a digital monitoring camera and sending the equipment characteristic information to a key management center, so that the key management center sends the equipment characteristic information to a key generation center after recording the equipment characteristic information; the key generation center generates an equipment private key and an equipment public key on a private key matrix based on the equipment characteristic information, and sends the equipment private key back to the key management center; the key management center records the equipment private key and sends the equipment private key to a certificate registration generation center; and the certificate registration generation center makes the equipment private key into an equipment identification key certificate and distributes the equipment identification key certificate to the digital monitoring camera through a secure channel. The system of the invention can realize the safe access of the digital monitoring equipment.
Description
Technical Field
The invention relates to the technical field of Internet of things, in particular to a digital monitoring safe access method and device based on a narrow-band Internet of things.
Background
The Internet of Things (IoT) is a network world with Things connected. The IoT connects objects through technologies such as communication and cloud computing to meet people's living needs and support social operations.
With the development of the 'cloud and object movement' technology, more and more internet of things systems (technologies) are applied to electric power scenes, and an asset life-span lean management system which takes object identification as a core and comprehensively utilizes new technologies such as internet of things, mobile application, big data and the like is basically built. Typical internet of things systems in asset management projects include an internet of things platform, a cable channel monitoring system and the like. Meanwhile, products such as a vehicle management system, an electronic intelligent lock, a video monitoring network and the like widely used by a power grid company at present can also be understood as an internet of things system.
In general, from the business, the technology of the internet of things is widely used in the power industry; however, in terms of technology, because the development of technology is different from the corresponding safety protection level of each system, the safety protection work of the internet of things system in the power industry still needs to be strengthened, and a plurality of problems still exist, such as:
1. there is a safety risk in monitoring systems such as cable trench detection on-line. The front-end sensor and the acquisition unit of the existing cable channel monitoring system lack identity authentication, and if the acquisition unit is connected in a wired mode, information content cannot be accessed due to lack of a safety protection means, so that the information content becomes an information isolated island; if the acquisition units are connected in a wireless mode, a PKI certificate needs to be adopted to access through the security access platform, the acquisition units are required to have higher computing capacity, and the security access platform cannot support mass equipment. Therefore, the traditional security access platform cannot meet the requirement of the existing service for new addition.
2. Some video monitoring systems such as cameras have security risks. The main body is as follows: bypass monitoring (others access a video network to perform onlooker monitoring or store video), network intrusion (an attacker borrows a wired network of a camera to intrude an information intranet), and unauthorized user viewing (unauthorized users view video through a system of a monitoring center such as NVR). In summary, the current smart sensors (e.g., cameras) lack new technical validation and instructional construction standards.
Disclosure of Invention
In view of this, an object of the embodiments of the present invention is to provide a method and an apparatus for digital monitoring secure access based on a narrowband internet of things, which can implement secure access of a digital monitoring camera.
In view of the above object, a first aspect of an embodiment of the present invention provides a narrowband internet of things-based digital monitoring secure access method, including:
acquiring equipment characteristic information of a digital monitoring camera and sending the equipment characteristic information to a key management center, so that the key management center sends the equipment characteristic information to a key generation center after recording the equipment characteristic information;
the key generation center generates an equipment private key and an equipment public key on a private key matrix based on the equipment characteristic information, and sends the equipment private key back to the key management center;
the key management center records the equipment private key and sends the equipment private key to a certificate registration generation center;
and the certificate registration generation center makes the equipment private key into an equipment identification key certificate and distributes the equipment identification key certificate to the digital monitoring camera through a secure channel.
Optionally, the method further includes:
the digital monitoring camera acquires monitoring data, encrypts the monitoring data based on the equipment identification key certificate, and sends the encrypted monitoring data to a digital monitoring platform;
and the digital monitoring platform acquires the equipment public key and decrypts the encrypted monitoring data according to the equipment public key to acquire the monitoring data.
Optionally, the device feature information includes device fingerprint information, operating system information, and interface information.
Optionally, the device private key and the device public key are combined keys.
Optionally, the method further includes: and the digital monitoring camera is provided with an SDK module for providing communication capability and identity authentication capability for accessing the digital monitoring platform.
In a second aspect of the embodiments of the present invention, a digital monitoring security access apparatus based on a narrowband internet of things includes:
the device comprises an acquisition module, a key generation center and a digital monitoring camera, wherein the acquisition module is used for acquiring the device characteristic information of the digital monitoring camera and sending the device characteristic information to the key management center, so that the key management center sends the device characteristic information to the key generation center after recording the device characteristic information;
the generating module is used for generating an equipment private key and an equipment public key on a private key matrix by the secret key generating center based on the equipment characteristic information and sending the equipment private key back to the secret key management center;
the sending module is used for recording the equipment private key by the key management center and sending the equipment private key to the certificate registration generating center;
and the distribution module is used for making the equipment private key into an equipment identification key certificate by the certificate registration generation center and distributing the equipment identification key certificate to the digital monitoring camera through a secure channel.
Optionally, the method further includes:
the digital monitoring camera acquires monitoring data, encrypts the monitoring data based on the equipment identification key certificate, and sends the encrypted monitoring data to a digital monitoring platform;
and the digital monitoring platform acquires the equipment public key and decrypts the encrypted monitoring data according to the equipment public key to acquire the monitoring data.
Optionally, the device feature information includes device fingerprint information, operating system information, and interface information.
Optionally, the device private key and the device public key are combined keys.
Optionally, the method further includes: and the digital monitoring camera is provided with an SDK module for providing communication capability and identity authentication capability for accessing the digital monitoring platform.
As can be seen from the foregoing, embodiments of the present invention provide a digital monitoring secure access method and apparatus based on a narrowband internet of things, and establish a digital camera secure access system based on an NB-IoT technology, so as to implement identity authentication, communication encryption, and secure access control, and promote secure and stable operation of the digital monitoring system.
Drawings
Fig. 1 is a flowchart of a digital monitoring secure access method based on a narrowband internet of things according to an embodiment of the present invention;
fig. 2 is a structural diagram of a digital monitoring security access device based on a narrowband internet of things according to an embodiment of the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the present invention more apparent, the present invention is described in further detail below with reference to specific embodiments and the accompanying drawings.
It should be noted that all expressions using "first" and "second" in the embodiments of the present invention are used for distinguishing two entities with the same name but different names or different parameters, and it should be noted that "first" and "second" are merely for convenience of description and should not be construed as limitations of the embodiments of the present invention, and they are not described in any more detail in the following embodiments.
The power internet of things is an application of the internet of things in a smart power grid, intelligent devices with certain sensing capability, computing capability and execution capability are widely deployed in all links of power production, transmission, consumption and management, communication infrastructure resources and power system infrastructure resources are effectively integrated, panoramic holographic sensing, information fusion, intelligent management and decision making in the whole process of power grid production operation and enterprise management are promoted, the utilization efficiency of the existing infrastructures of the power system is improved, and important technical support is provided for links of power grid generation, transmission, transformation, distribution, power utilization and the like.
The electric power internet of things is mainly formed by constructing each intelligent terminal and a cloud end with the assistance of a user end, the control right of the electric power internet of things is determined by the cloud end, and the intelligent terminal receives a cloud end (or the user end sends a command through the cloud end) to execute operation. In the world of the internet of things, establishing a trusted link between people (application of the internet of things), clouds (platform of the internet of things) and terminals (intelligent terminals), and realizing identity authentication and encrypted communication are the core of security problems.
A first aspect of the embodiments of the present invention provides a digital monitoring secure access method based on a narrowband internet of things, as shown in fig. 1, including:
102, the key generation center generates an equipment private key and an equipment public key on a private key matrix based on the equipment characteristic information, and sends the equipment private key back to the key management center;
103, the key management center records the device private key and sends the device private key to a certificate registration generation center;
and 104, the certificate registration generation center makes the equipment private key into an equipment identification key certificate, and distributes the equipment identification key certificate to the digital monitoring camera through a secure channel.
The embodiment of the invention provides a digital monitoring security access method based on a narrowband Internet of things, which is used for establishing a digital camera security access system based on an NB-IoT technology, realizing identity authentication, communication encryption and security access control and promoting the digital monitoring system to operate safely and stably.
Optionally, the method further includes:
the digital monitoring camera acquires monitoring data, encrypts the monitoring data based on the equipment identification key certificate, and sends the encrypted monitoring data to a digital monitoring platform;
and the digital monitoring platform acquires the equipment public key and decrypts the encrypted monitoring data according to the equipment public key to acquire the monitoring data.
Optionally, the device feature information includes device fingerprint information, operating system information, and interface information.
Optionally, the device private key and the device public key are combined keys.
Optionally, the method further includes: and the digital monitoring camera is provided with an SDK module for providing communication capability and identity authentication capability for accessing the digital monitoring platform.
In a second aspect of the embodiments of the present invention, a digital monitoring security access apparatus based on a narrowband internet of things is shown in fig. 2, and includes:
the acquisition module 11 is configured to acquire device feature information of a digital monitoring camera and send the device feature information to a key management center, so that the key management center sends the device feature information to a key generation center after recording the device feature information;
the generating module 12 is configured to generate, by the key generation center, an apparatus private key and an apparatus public key on a private key matrix based on the apparatus characteristic information, and send the apparatus private key back to the key management center;
the sending module 13 is configured to record the device private key by the key management center and send the device private key to the certificate registration generation center;
the distribution module 14 is configured to, by the certificate registration generation center, make the device private key into a device identification key certificate, and distribute the device identification key certificate to the digital surveillance camera through a secure channel.
Optionally, the method further includes:
the digital monitoring camera acquires monitoring data, encrypts the monitoring data based on the equipment identification key certificate, and sends the encrypted monitoring data to a digital monitoring platform;
and the digital monitoring platform acquires the equipment public key and decrypts the encrypted monitoring data according to the equipment public key to acquire the monitoring data.
Optionally, the device feature information includes device fingerprint information, operating system information, and interface information.
Optionally, the device private key and the device public key are combined keys.
Optionally, the method further includes: and the digital monitoring camera is provided with an SDK module for providing communication capability and identity authentication capability for accessing the digital monitoring platform.
The digital monitoring safe access method and device based on the narrowband Internet of things solve the problem of safety risk of a video monitoring system, and establish a digital certificate safety solution based on a CPK (compact public Key) identification key technology and a key protection technology; providing a diversified digital certificate carrier to authenticate and encrypt data/signaling for the camera, realizing trusted access of equipment and encrypted transmission of information, and preventing safety risks such as user information leakage, data bare transmission and illegal control of the camera; meanwhile, on the premise of ensuring information safety, original operation experience of a user is not changed.
Those of ordinary skill in the art will understand that: the discussion of any embodiment above is meant to be exemplary only, and is not intended to intimate that the scope of the disclosure, including the claims, is limited to these examples; within the idea of the invention, also features in the above embodiments or in different embodiments may be combined, steps may be implemented in any order, and there are many other variations of the different aspects of the invention as described above, which are not provided in detail for the sake of brevity.
In addition, well known power/ground connections to Integrated Circuit (IC) chips and other components may or may not be shown within the provided figures for simplicity of illustration and discussion, and so as not to obscure the invention. Furthermore, devices may be shown in block diagram form in order to avoid obscuring the invention, and also in view of the fact that specifics with respect to implementation of such block diagram devices are highly dependent upon the platform within which the present invention is to be implemented (i.e., specifics should be well within purview of one skilled in the art). Where specific details (e.g., circuits) are set forth in order to describe example embodiments of the invention, it should be apparent to one skilled in the art that the invention can be practiced without, or with variation of, these specific details. Accordingly, the description is to be regarded as illustrative instead of restrictive.
While the present invention has been described in conjunction with specific embodiments thereof, many alternatives, modifications, and variations of these embodiments will be apparent to those of ordinary skill in the art in light of the foregoing description. For example, other memory architectures (e.g., dynamic ram (dram)) may use the discussed embodiments.
The embodiments of the invention are intended to embrace all such alternatives, modifications and variances that fall within the broad scope of the appended claims. Therefore, any omissions, modifications, substitutions, improvements and the like that may be made without departing from the spirit and principles of the invention are intended to be included within the scope of the invention.
Claims (10)
1. A digital monitoring security access method based on a narrowband Internet of things is characterized by comprising the following steps:
acquiring equipment characteristic information of a digital monitoring camera and sending the equipment characteristic information to a key management center, so that the key management center sends the equipment characteristic information to a key generation center after recording the equipment characteristic information;
the key generation center generates an equipment private key and an equipment public key on a private key matrix based on the equipment characteristic information, and sends the equipment private key back to the key management center;
the key management center records the equipment private key and sends the equipment private key to a certificate registration generation center;
and the certificate registration generation center makes the equipment private key into an equipment identification key certificate and distributes the equipment identification key certificate to the digital monitoring camera through a secure channel.
2. The method of claim 1, further comprising:
the digital monitoring camera acquires monitoring data, encrypts the monitoring data based on the equipment identification key certificate, and sends the encrypted monitoring data to a digital monitoring platform;
and the digital monitoring platform acquires the equipment public key and decrypts the encrypted monitoring data according to the equipment public key to acquire the monitoring data.
3. The method of claim 1, wherein the device characteristic information comprises device fingerprint information, operating system information, and interface information.
4. The method of claim 1, wherein the device private key and the device public key are a combined key.
5. The method of claim 1, further comprising: and the digital monitoring camera is provided with an SDK module for providing communication capability and identity authentication capability for accessing the digital monitoring platform.
6. The utility model provides a digit control safety access device based on narrowband thing networking which characterized in that includes:
the device comprises an acquisition module, a key generation center and a digital monitoring camera, wherein the acquisition module is used for acquiring the device characteristic information of the digital monitoring camera and sending the device characteristic information to the key management center, so that the key management center sends the device characteristic information to the key generation center after recording the device characteristic information;
the generating module is used for generating an equipment private key and an equipment public key on a private key matrix by the secret key generating center based on the equipment characteristic information and sending the equipment private key back to the secret key management center;
the sending module is used for recording the equipment private key by the key management center and sending the equipment private key to the certificate registration generating center;
and the distribution module is used for making the equipment private key into an equipment identification key certificate by the certificate registration generation center and distributing the equipment identification key certificate to the digital monitoring camera through a secure channel.
7. The apparatus of claim 6, further comprising:
the digital monitoring camera acquires monitoring data, encrypts the monitoring data based on the equipment identification key certificate, and sends the encrypted monitoring data to a digital monitoring platform;
and the digital monitoring platform acquires the equipment public key and decrypts the encrypted monitoring data according to the equipment public key to acquire the monitoring data.
8. The apparatus of claim 6, wherein the device characteristic information comprises device fingerprint information, operating system information, and interface information.
9. The apparatus of claim 6, wherein the device private key and the device public key are a combined key.
10. The apparatus of claim 6, further comprising: and the digital monitoring camera is provided with an SDK module for providing communication capability and identity authentication capability for accessing the digital monitoring platform.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201911019407.8A CN110933131A (en) | 2019-10-24 | 2019-10-24 | Digital monitoring safe access method and device based on narrowband Internet of things |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201911019407.8A CN110933131A (en) | 2019-10-24 | 2019-10-24 | Digital monitoring safe access method and device based on narrowband Internet of things |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN110933131A true CN110933131A (en) | 2020-03-27 |
Family
ID=69849321
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201911019407.8A Pending CN110933131A (en) | 2019-10-24 | 2019-10-24 | Digital monitoring safe access method and device based on narrowband Internet of things |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN110933131A (en) |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20060200857A1 (en) * | 2005-03-07 | 2006-09-07 | Tomofumi Yokota | Certificate acquisition system, certificate acquisition method, management communication apparatus, certification authority, and computer readable recording medium |
| CN101778381A (en) * | 2009-12-31 | 2010-07-14 | 卓望数码技术（深圳）有限公司 | Digital certificate generation method, user key acquisition method, mobile terminal and device |
| CN107277320A (en) * | 2017-07-13 | 2017-10-20 | 北京视博融合科技有限公司 | A kind of safe picture pick-up device encryption method and safe picture pick-up device |
-
2019
- 2019-10-24 CN CN201911019407.8A patent/CN110933131A/en active Pending
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20060200857A1 (en) * | 2005-03-07 | 2006-09-07 | Tomofumi Yokota | Certificate acquisition system, certificate acquisition method, management communication apparatus, certification authority, and computer readable recording medium |
| CN101778381A (en) * | 2009-12-31 | 2010-07-14 | 卓望数码技术（深圳）有限公司 | Digital certificate generation method, user key acquisition method, mobile terminal and device |
| CN107277320A (en) * | 2017-07-13 | 2017-10-20 | 北京视博融合科技有限公司 | A kind of safe picture pick-up device encryption method and safe picture pick-up device |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN103001773B (en) | Fingerprint authentication system and fingerprint authentication method based on near field communication (NFC) | |
| CN111372247A (en) | Terminal secure access method and terminal secure access system based on narrowband Internet of things | |
| CN109327314A (en) | Access method, device, electronic equipment and the system of business datum | |
| CN110932854B (en) | Block chain key distribution system and method for Internet of things | |
| US20150304321A1 (en) | An image management system and an image management method based on fingerprint authentication | |
| CN104065680A (en) | Information processing method and apparatus, information retrieval method and apparatus, user terminal and server | |
| CN105656859A (en) | Secure online upgrade method and system for tax control equipment software | |
| CN104038481A (en) | Communication method of power asset management master station system and RFID (radio frequency identification device) terminal | |
| CN110708291B (en) | Data authorization access method, device, medium and electronic equipment in distributed network | |
| CN110972136A (en) | Internet of things safety communication module, terminal, safety control system and authentication method | |
| KR101993885B1 (en) | The PUF-QRANG quantum system with security chips | |
| CN111371737A (en) | Internet of things security access system based on NB-IoT | |
| Jerald et al. | Secure IoT architecture for integrated smart services environment | |
| CN114238897A (en) | Internet of things data acquisition system and method based on distributed digital identity | |
| CN106296926B (en) | A kind of intelligent entrance guard control system and method based on mandate in limited time | |
| CN102202291B (en) | Card-free terminal, service access method and system thereof, terminal with card and bootstrapping server function (BSF) | |
| Feng et al. | Autonomous Vehicles' Forensics in Smart Cities | |
| CN116049792A (en) | Face registration and recognition method and face data protection system | |
| CN110933131A (en) | Digital monitoring safe access method and device based on narrowband Internet of things | |
| CN107819751A (en) | A kind of safe automated log on management system | |
| Jerald et al. | Algorithmic approach to security architecture for integrated IoT smart services environment | |
| Choi et al. | A distributed cloud based video storage system with privacy protection | |
| Mani Sekhar et al. | Security and privacy in 5G-enabled internet of things: a data analysis perspective | |
| CN111641646A (en) | Safety enhancement type communication positioning terminal | |
| CN205721117U (en) | A kind of wrist-watch of built-in electronic identity card |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| WD01 | Invention patent application deemed withdrawn after publication |
Application publication date: 20200327 |
|
| WD01 | Invention patent application deemed withdrawn after publication |