WO2014173357A1

WO2014173357A1 - Authentication method and device for use in ubiquitous terminal networks

Info

Publication number: WO2014173357A1
Application number: PCT/CN2014/078755
Authority: WO
Inventors: 陈继刚
Original assignee: 中兴通讯股份有限公司
Priority date: 2013-08-30
Filing date: 2014-05-29
Publication date: 2014-10-30
Also published as: CN104426874A; CN104426874B

Abstract

Disclosed is an authentication method and device for use in ubiquitous terminal networks, relates to the technical field of network communications, and solves the problem of the prior art wherein a central node of an ubiquitous terminal network is insufficiently secure. The method comprises: a pre-central node sends, to each terminal node, a request to engage in the authentication of said pre-central node, and receives, from each said terminal node, information regarding the authentication of said pre-central node; in accordance with the received authentication information, the number of terminal nodes which approve said pre-central node is determined; if the number of terminal nodes which approve said pre-central node is greater than or equal to the minimum number of nodes necessary to form said ubiquitous terminal network, said pre-central node becomes a central node and the establishment of the ubiquitous terminal network is successful. The present invention can be used in ubiquitous terminal networks.

Description

Authentication method and device for ubiquitous terminal network

The present invention relates to the field of network communication technologies, and in particular, to an authentication method and apparatus for a ubiquitous terminal network. Background technique

With the continuous development of communication technologies, terminals such as mobile phones, computers, and personal digital assistants (PDAs) are becoming more and more popular. By connecting these terminals to each other to form a ubiquitous terminal network, multiple terminals can work together, thereby greatly improving the working efficiency of the terminal and making the terminal more convenient to use.

When the terminal is connected to the network, the central node needs to be elected among multiple peer nodes, so that multiple terminals form a certain network architecture to support the upper layer service. Since the central node is at the center of the network, the security of the central node is critical to the overall security of the ubiquitous terminal network.

In the prior art, a central node of a ubiquitous terminal network can be directly specified in multiple cooperative nodes of a peer-to-peer network, and then the central node performs security for each collaborative node that wants to join the ubiquitous terminal network. Authentication, the authenticated collaborative node and the central node together form a ubiquitous terminal network. However, the security of the central node itself is not guaranteed by appropriate methods or mechanisms. Summary of the invention

In view of this, the embodiments of the present invention are directed to providing an authentication method and apparatus for a ubiquitous terminal network, which at least solves the problem of insufficient security of a central node of a ubiquitous terminal network in the prior art. An embodiment of the present invention provides an authentication method for a ubiquitous terminal network, including: a pre-central node sends a request for authenticating the pre-central node to each coordinated node; and the pre-center node receives the collation node Determining authentication information of the pre-center node; determining the number of coordinating nodes that approve the pre-center node;

When the number of the cooperative nodes that the pre-central node is recognized is greater than or equal to the minimum number of nodes required to form the ubiquitous terminal network, the pre-central node is converted into a central node, and the ubiquitous terminal network is successfully formed.

Preferably, after the determining the number of the cooperative nodes that approve the pre-central node, the method further includes:

When the number of the cooperative nodes that recognize the pre-center node is smaller than the minimum number of nodes required to form the ubiquitous terminal network, the pre-central node is converted into a cooperative node, and the ubiquitous terminal network formation fails.

Specifically, the determining, by the number of the coordinated nodes of the pre-central node, the determining, by the pre-central node, determining, according to the authentication information, whether each of the cooperative nodes approves the pre-center node;

The pre-center node calculates the number of coordinating nodes that recognize the pre-center node.

Optionally, after the pre-central node determines, according to the authentication information, whether each of the collaboration nodes approves the pre-center node, the method further includes:

The pre-central node calculates a security indicator of the pre-central node according to a security level of the pre-central node authentication by the coordinating node that recognizes the pre-central node, where the security level is carried in the authentication information. Send to the pre-center node.

Optionally, the security indicator of the pre-central node is equal to a weighted sum of the security levels of the pre-central node authentication by the coordinating node that recognizes the pre-central node.

Preferably, after the ubiquitous terminal network is successfully formed, the method further includes: when the central node determines that a new cooperative node applies to join the ubiquitous terminal network, The central node determines that the new collaborative node approves the central node, and the central node updates the security indicator, and sends the updated security indicator to each of the coordinated nodes.

Optionally, after the ubiquitous terminal network is successfully configured, the method further includes: when the central node determines whether a coordinated node exits the ubiquitous terminal network, the central node updates the security indicator, And sending the updated security indicator to each of the coordinated nodes as historical authentication information of each of the coordinated nodes to the central node.

Preferably, after the pre-center node is converted into a central node, and the ubiquitous terminal network is successfully formed, the method further includes:

Sending a message that the ubiquitous terminal network is successfully formed to the coordinated nodes.

An embodiment of the present invention further provides an authentication method for a ubiquitous terminal network, including: each cooperative node receiving a request for authenticating a pre-center node;

Each of the collaborative nodes authenticates the pre-center node;

Each of the collaborative nodes sends the authentication information obtained by the authentication to the pre-center node. Preferably, after the each cooperative node receives the request for authenticating the pre-central node, before the each of the cooperative nodes authenticates the pre-central node, the method further includes:

Each of the cooperative nodes shares the history authentication information of the pre-center node with each other; and the authentication of the pre-center node by each of the coordinated nodes includes:

Each of the collaborative nodes authenticates the pre-center node according to the shared historical authentication information and the security settings of each of the collaborative nodes themselves.

Optionally, the each of the collaboration nodes performs the authentication on the pre-central node according to the shared historical authentication information and the security settings of each of the collaboration nodes, including: The historical security level in the historical authentication information is weighted and summed to obtain a reference security level;

When the reference security level is greater than or equal to the security setting of the collaboration node itself, The cooperative node recognizes the pre-center node;

When the reference security level is less than the security setting of the collaboration node itself, the collaboration node does not approve the pre-center node.

Preferably, after the each of the collaboration nodes sends the authentication information obtained by the authentication to the pre-center node, the method further includes:

Receiving a message that the ubiquitous terminal network is successfully formed;

Converting the collaborative node to a terminal node.

The embodiment of the present invention further provides an authentication device for a ubiquitous terminal network, including: a transceiver unit, configured to send a request for authenticating a pre-center node to each coordinated node, and receive the cooperative node to receive the pre-node Authentication information of the central node;

a determining unit, configured to determine, according to the authentication information received by the transceiver unit, a number of coordinated nodes that approve the pre-center node;

a first converting unit, configured to convert the pre-central node into a central node when the number of cooperative nodes that recognize the pre-central node is greater than or equal to a minimum number of nodes required to form the ubiquitous terminal network The ubiquitous terminal network was successfully formed.

Preferably, the first converting unit is further configured to: when the determining unit determines that the number of the cooperative nodes that approve the pre-central node is smaller than the minimum number of nodes required to form the ubiquitous terminal network, the pre-center The node is converted to a collaborative node.

Optionally, the determining unit includes:

a determining module, configured to determine, according to the authentication information, whether each of the collaborative nodes approves the pre-center node;

And a calculating module, configured to determine, according to the authentication information, when each of the collaborative nodes approves the pre-central node, calculate a number of cooperative nodes that approve the pre-central node.

Optionally, the calculating module is further configured to calculate, according to each security node that approves the pre-central node, a security level of the pre-central node, and a security level of the pre-central node authentication. The security level is carried in the authentication information and sent to the pre-center node. Optionally, the security indicator of the pre-central node is equal to a weighted sum of the security levels of the pre-central node authentication by the coordinating node that recognizes the pre-central node.

Optionally, the determining module is further configured to: determine, when a new cooperative node applies to join the ubiquitous terminal network, determine whether the new collaborative node approves the central node;

Optionally, the calculating module is further configured to: when the determining module determines that the new collaboration node approves the central node, updating the security indicator;

Preferably, the transceiver unit is further configured to send the updated security indicator to each of the collaboration nodes.

Preferably, the determining module is further configured to determine whether a cooperative node exits the ubiquitous terminal network;

The calculating module is further configured to: when it is determined that the cooperative node exits the ubiquitous terminal network, update the security indicator;

The transceiver unit is further configured to send the updated security indicator to each of the collaboration nodes as historical authentication information of each of the coordinated nodes to the pre-center node.

Preferably, the transceiver unit is further configured to send a message that the ubiquitous terminal network is successfully formed to the coordinated nodes.

The embodiment of the present invention further provides an authentication device for a ubiquitous terminal network, including: a receiving unit, configured to receive a request for authenticating a pre-center node;

An authentication unit, configured to authenticate the pre-center node;

The sending unit is configured to send the authentication information obtained by the authentication unit to the pre-center node.

Preferably, the device further includes:

a sharing unit configured to share historical authentication information of each of the cooperative nodes with the pre-center node; The authentication unit is configured to authenticate the pre-center node according to the historical authentication information shared by the sharing unit and the security setting of each of the collaboration nodes themselves.

Optionally, the authentication unit includes:

a weighting module, configured to perform weighted summation on a historical security level in the historical authentication information shared by the shared unit to obtain a reference security level;

The authentication module is configured to: when the reference security level is greater than or equal to the security setting of the collaboration node, the collaboration node approves the pre-center node; the reference security level is less than the security setting of the collaboration node itself The cooperative node does not approve the pre-center node.

Preferably, the receiving unit is further configured to receive a message that the ubiquitous terminal network is successfully formed;

The apparatus also includes a second conversion unit configured to convert the coordinating node into a terminal node.

The beneficial effects of the embodiments of the present invention are as follows: In the process, the pre-central node sends a request for authenticating the pre-center node to other coordinating nodes, and receives authentication information of each pre-center node by each coordinating node, when When the number of the cooperative nodes of the pre-central node is greater than or equal to the minimum number of nodes required to form the ubiquitous terminal network, the pre-central node is converted into a central node, and the ubiquitous terminal network is successfully formed. In this way, when a pre-central node is to establish a ubiquitous terminal network with itself as the center node, each co-node needs to authenticate the pre-center node, and only a certain number of cooperating nodes can authenticate through the pre-center node. The networking is successful, which effectively ensures the security of the central node of the ubiquitous terminal network. DRAWINGS

a process Figure 2 ^ A process diagram;

Figure 3 is

Flow chart

Figure 4 is

Schematic diagram

Figure 5 is a schematic diagram of another structure

Figure 6 is a schematic diagram of another structure

Figure 7 is a schematic view showing another structure of the arrangement;

Figure 8 is a schematic view showing another structure of the arrangement;

Fig. 9 is a schematic view showing another structure of the embodiment.

The present invention provides an authentication method and apparatus for a ubiquitous terminal network. The present invention will be further described in detail below with reference to the accompanying drawings. It is understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.

As shown in FIG. 1, an embodiment of the present invention provides an authentication method for a ubiquitous terminal network, including:

Step S11: The pre-central node sends a request for authenticating the pre-center node to each coordinated node, and receives authentication information of the pre-center node by each coordinated node. Step S12: Determine, according to the received authentication information, a number of coordinated nodes that approve the pre-center node;

Step S13, if the number of the cooperative nodes that approve the pre-center node is greater than or equal to the minimum number of nodes required to form the ubiquitous terminal network, the pre-central node is converted into a central node, and the ubiquitous terminal network The formation was successful. The pre-central node to be the central node sends a request for authenticating the pre-centre node to other coordinating nodes, and receives authentication information of each pre-center node by each co-node, when the co-node of the pre-central node is recognized When the number of nodes is greater than or equal to the minimum number of nodes required to form the ubiquitous terminal network, the pre-central node is converted into a central node, and the ubiquitous terminal network is successfully established. In this way, when a pre-central node is to establish a ubiquitous terminal network with itself as the center node, each co-node needs to authenticate the pre-center node, and only a certain number of cooperating nodes can authenticate through the pre-center node. The networking is successful, which effectively ensures the security of the central node of the ubiquitous terminal network.

Optionally, in step S11, the communication between the pre-central node and each coordinated node may be implemented by using various known communication methods, but in consideration of the fact that the networking has not been successful, in order to improve the communication efficiency between the nodes, Preferably, each node sends a message, data, or authentication request to other nodes in a broadcast manner.

It should be noted that the authentication information represents an evaluation of the security or trust level of the pre-center node by a collaborative node, and may include two pieces of information: an authentication result and a security level. The authentication result indicates whether the pre-center node is recognized by the coordinating node after authentication, and if it is approved, the cooperating node is trusted by the pre-center node, and may join the ubiquitous terminal network formed by the pre-center node; If it is approved, it means that the collaborative node does not trust the pre-center node and does not join the ubiquitous terminal network formed by the pre-central node. The security level indicates the security of the collaborative node to the pre-center node. The higher the security level, the better the security. Related association How the same node obtains the authentication information will be described in detail in the collaborative node section below.

It should be noted that the authentication result and the security level are only used to exemplify the features that the authentication information needs to include. In other embodiments of the present invention, the authentication information may further describe the degree of trust of the cooperative node to the pre-center node by using other parameters. Whether or not the pre-center node is approved, the embodiment of the present invention does not limit this.

Specifically, in step S12, determining, according to the received authentication information, the number of the cooperative nodes that approve the pre-center node may include:

Determining, by the pre-central node, whether each of the cooperative nodes approves the pre-center node according to the authentication information;

Since the ubiquitous terminal network and the ubiquitous terminal network and the nodes outside the network often need data exchange or security authentication, in order to make the security of the pre-center node have a reference standard, without using Each method is required to authenticate the central node, and the method may further include: after the pre-central node determines, according to the authentication information, whether each of the coordinated nodes approves the pre-centre node, the method may further include: The pre-central node calculates the security indicator of the pre-central node according to the security level of the pre-central node authentication by the coordinating node that recognizes the pre-central node. The security level is carried in the authentication information and sent to the pre-center node. The security indicator is a function of each security level of the collaboration node that recognizes the pre-center node. For example, the security indicator may be an average of the foregoing security levels, or may be after each security level is assigned a different weight factor. The weighted sum, of course, may also be other functional relationships, which are not limited by the embodiments of the present invention.

In this embodiment, in step S13, if the number of the cooperative nodes that approve the pre-central node is greater than or equal to the minimum number of nodes required to form the ubiquitous terminal network, the pre-central node is converted into a central node, The ubiquitous terminal network is successfully formed. After the pre-center node is converted into a central node, after the ubiquitous terminal network is successfully formed, the central node may further A message that the ubiquitous terminal network is successfully formed is sent to the coordinated nodes, so that the coordinated nodes are ready to join the ubiquitous terminal network.

Conversely, if the number of coordinating nodes that recognize the pre-center node is less than the minimum number of nodes required to form the ubiquitous terminal network, the pre-central node is converted to a cooperating node, and the ubiquitous terminal network formation fails. In this way, when the security of a pre-central node is poor, many cooperating nodes may not recognize the pre-central node, and the number of coordinating nodes that authenticate through the pre-central node is insufficient to form a ubiquitous terminal network, thereby preventing The establishment of the network effectively maintains the security of the ubiquitous terminal network.

After the ubiquitous terminal network is formed, each node in the network can work together with each other, effectively improving the working efficiency of each node. After the network is built, it is allowed to dynamically adjust. Each node can exit the network as needed, or a new collaborative node can join.

In an embodiment of the present invention, when a new collaborative node is to join, the following steps may be performed:

Determining, by the pre-center node, whether a new coordinating node applies to join the ubiquitous terminal network; if yes, the central node determines whether the new coordinating node approves the central node; optionally, in this step, the central node The security indicator can be directly sent to the new collaboration node for reference by the new collaboration node, so that the new collaboration node can authenticate the central node according to the security indicator of the central node, and determine whether to join the ubiquitous terminal. Come in the network. Of course, the new cooperative node may also use other methods, such as referencing the historical authentication information of the central node to other coordinated nodes (ie, terminal nodes) in the network, and authenticating the central node, and the embodiment of the present invention does not Make restrictions.

The central node determines that the new collaborative node approves the central node, and the central node updates the security indicator, and sends the updated security indicator to each of the coordinated nodes. This is because the security index of the central node is related to the authentication of the central node by all the cooperative nodes in the network. When the new cooperative node joins the ubiquitous terminal network, the number of nodes in the network is sent. Changes have occurred and the central node needs to update its security metrics accordingly.

In another embodiment of the present invention, after the ubiquitous terminal network is successfully formed, the central node determines whether there is a cooperative node exiting the ubiquitous terminal network;

If yes, the central node updates the security indicator, and sends the updated security indicator to each of the coordinated nodes as historical authentication information of each of the coordinated nodes to the central node. The historical authentication information can be used as a reference for other nodes to authenticate the central node.

Correspondingly, as shown in FIG. 2, an embodiment of the present invention further provides an authentication method for a ubiquitous terminal network, including the following steps:

Step S21: Each coordinated node receives a request for performing authentication on the pre-center node;

Step S22: Each of the collaborative nodes performs authentication on the pre-center node.

Step S23: Each of the collaboration nodes sends the authentication information obtained by the authentication to the pre-center node. Both can authenticate the pre-central node that will form the ubiquitous terminal network and send the authentication information to the pre-central node, so that the pre-central node can determine whether it can be securely networked, thereby effectively ensuring the security of the central node of the ubiquitous terminal network. Sex.

Specifically, when a pre-central node is to form a ubiquitous terminal network, a request for authenticating the pre-center node is generally sent to each coordinated node by means of broadcast. Accordingly, in step S21, each of the cooperating nodes also receives the request.

In step S22, each coordinated node needs to authenticate the pre-central node, and the specific authentication method is not limited. However, in order to overcome the one-sidedness and limitation of the single node to the central node authentication, the security of the central node of the ubiquitous terminal network is further improved. In an embodiment of the present invention, between steps S21 and S22, the method The method may further include: the cooperative nodes are shared with each other The historical authentication information of the pre-central node, that is, the authentication information that each of the co-nodes has had for the pre-central node; step S22 may specifically be, for each of the cooperating nodes, according to the shared historical authentication information and each The security setting of the collaboration node itself authenticates the pre-center node.

Optionally, the collaboration node may perform weighted summation on the historical security level in the shared historical authentication information, thereby obtaining a reference security level, and comparing the reference security level with the security setting of the collaborative node itself. If the reference security level is greater than or equal to the security setting of the collaboration node, it indicates that the security requirement of the collaboration node for the network is not high, and the security of the pre-center node can meet the security requirement of the collaboration node, The cooperative node recognizes the pre-center node; on the contrary, if the reference security level is smaller than the security setting of the collaborative node itself, it indicates that the security requirement of the cooperative node is relatively high, and the security of the pre-central node cannot meet the coordination. The security requirement of the node, the coordination node does not approve the pre-center node. Because the authentication is based on the historical authentication information sharing of each coordinated node, the security and reliability of the central node elected in the collaborative networking process are fully authenticated, which ensures the security of the cooperative node in the process of participating in the collaborative task.

It should be noted that, in the networking stage of the ubiquitous terminal network, the recognition of the pre-center node by a single cooperative node does not necessarily guarantee the success of the networking. Therefore, it is not necessary to convert the cooperative node into a terminal node at this time. Only when the coordinating node recognizes the pre-central node and receives the message that the ubiquitous terminal network is successfully formed, the cooperating node is converted into the terminal node and joins the ubiquitous terminal network.

For example, in a ubiquitous terminal network composed of a notebook, a mobile phone, and a tablet, terminal cooperation is required to complete data sharing and link aggregation, etc., assuming that a notebook is selected as a pre-center node by mutual discovery and the like. In order to ensure the security of the central node, it needs to be authenticated. The authentication request is initiated by the notebook to each collaborative terminal, and each collaborative terminal shares its own security requirements through the sharing of historical authentication information, for example, the mobile phone has special security requirements. High, the authentication result may regard the notebook as an unreliable central node and will not join the collaborative network (ubiquitous terminal network). After the notebook collects the authentication results of all the cooperative nodes, after calculation, if the number of cooperative nodes that recognize the notebook as the central node meets the minimum number of nodes required for data sharing and link aggregation, then the notebook initiates a role conversion request, and the notebook becomes the collaboration. Network center node, other devices become collaborative nodes. The notebook broadcasts its own security indicators to all the cooperative nodes. When a new mobile phone joins, the newly joined node obtains the security index of the central node, determines whether to join the collaborative network according to its own security requirements, and implements the central node. Certification. When a collaborative node exits from the network, it needs to obtain the latest security indicator value of the notebook as the basis for the central node authentication when it is coordinated again. Whether there is a new node join or a node exit, the central node notebook needs to update its security metric value. The certification method #zhang detailed description.

As shown in FIG. 3, the authentication method for the ubiquitous terminal network provided by this embodiment mainly includes the following steps:

Step 101: The pre-center node broadcasts the authentication.

In this step, in the peer-to-peer scenario, the ubiquitous terminal generates a pre-central node for better collaborative election, and other nodes act as cooperative nodes. To ensure security, the pre-central node broadcasts a message to all the cooperative nodes to initiate authentication. request.

Step 102: Each coordinated node broadcasts and collects historical authentication information.

In this step, after receiving the authentication request of the pre-central node, each coordinated node shares the historical authentication information of the pre-center node stored in the peer-to-peer mode to other coordinated nodes, and collects other cooperative nodes. The shared history authentication information is used by step 103.

Step 103: The collaboration node gives the authentication information in combination with its own security settings.

In this step, the collaborative node uses the historical authentication information of the pre-center node of the other cooperative nodes obtained in step 102 as a reference, and combines the security setting requirements of the user, that is, the given security. The full threshold determines whether the pre-authentication center meets the security requirements of the collaborative node. Please refer to the previous article for details.

Step 104: The pre-center node collects the authentication information of each coordinated node.

In this step, each of the cooperative terminals transmits the authentication information given in step 103 to the pre-center node, and the authentication information includes the authentication result and the security level. The authentication result is also whether the pre-center node meets the security requirement of the coordinating node, that is, whether the coordinating node approves the pre-center node; the security level is a parameter describing the degree of trust of the cooperating node to the pre-central node.

Step 105: The pre-center node calculates a security indicator and initiates a role transition.

In this step, the pre-central node performs statistical analysis on the authentication information obtained in step 104, including calculating the security requirements of how many coordinated nodes are met, and if the number of nodes passing is less than the minimum number of nodes required by the collaborative network, The role is converted, canceled as the central node; if the number of nodes passing through meets the minimum number of nodes required by the collaborative network, the average value of the security level of the coordinated node that recognizes the pre-central node is calculated as the security indicator of the pre-central node, and is initiated. In the role transition, the pre-center node is converted into the central node of the collaborative network, and the cooperative node is converted into the terminal node to join the collaborative network, and other cooperative nodes exit the network because of high security requirements.

Step 106: The central node broadcasts the calculated security indicator.

In this step, the central node needs to broadcast the result of the calculation in step 105, that is, the security indicator, for reference by the newly joined collaborative node, and may also be saved as the historical authentication information in the coordinated node when the coordinated node exits, for Collaborate again in the future.

Step 107: A new node joins, and the central node obtains the newly added node authentication information.

In this step, the newly added collaborative node obtains the security indicator calculation result of the central node, and determines whether to join the collaborative network according to its own security configuration requirement, and gives the authentication information of the central node.

Step 108: The central node updates the security indicator and broadcasts. In this step, according to the result given in step 107, if the new cooperative node joins, combined with the authentication information newly added by the collaborative node to the central node authentication, the central node recalculates its security index and updates the calculation result.

Step 109: A node exits, and the exit node obtains the latest security indicator as historical authentication information.

In this step, the exiting collaborative node stores the latest security indicator of the obtained central node locally, as the basis for the next authentication, as the historical authentication information for re-establishing the collaborative network.

Step 110: The central node updates the security indicator and broadcasts.

In this step, after the exiting collaborative node deletes the authentication and evaluation information of the central node, the central node recalculates its security index, updates the calculation result, and broadcasts.

Through the above method, the high-efficiency authentication of the central node in the process of joining the collaborative network can be realized, which not only realizes the sharing of historical authentication information of each coordinated terminal, but also combines the security requirements of the user, and ensures the reliability of the central node. .

As shown in FIG. 4, in accordance with the foregoing authentication method for a ubiquitous terminal network, an embodiment of the present invention further provides an authentication apparatus for a ubiquitous terminal network, including:

The transceiver unit 11 is configured to send a request for authenticating the pre-center node to each coordinated node, and receive authentication information of the pre-center node by each coordinated node;

The determining unit 12 is configured to determine, according to the authentication information received by the transceiver unit 11, the number of the cooperative nodes that approve the pre-center node;

The first converting unit 13 is configured to convert the pre-center node into a central node if the number of the cooperative nodes that approve the pre-central node is greater than or equal to the minimum number of nodes required to form the ubiquitous terminal network. Sending, by the transceiver unit 11, a request for authenticating the pre-center node to other coordinating nodes, and receiving authentication information of each pre-center node by each cooperating node, when determining unit 12 determines the When the number of the cooperative nodes of the pre-center node is greater than or equal to the minimum number of nodes required to form the ubiquitous terminal network, the pre-center node can be converted into a central node by the first converting unit 13, thereby The ubiquitous terminal network was successfully formed. In this way, when a pre-central node is to establish a ubiquitous terminal network with itself as the center node, each co-node needs to authenticate the pre-center node, and only a certain number of cooperating nodes can authenticate through the pre-center node. The networking is successful, which effectively ensures the security of the central node of the ubiquitous terminal network.

Furthermore, the first conversion unit 13 is further configured to convert the pre-center node to the minimum number of nodes required to form the ubiquitous terminal network if the number determined by the determining unit 12 to approve the pre-center node is Collaborative node.

Specifically, as shown in FIG. 5, the determining unit 12 may include:

The determining module 121 is configured to determine, according to the authentication information, that each of the collaborative nodes is a denial of the pre-center node;

The calculating module 122 is configured to calculate the number of the cooperative nodes that approve the pre-central node. Optionally, the calculating module 122 is further configured to calculate a security indicator of the pre-central node according to a security level that is recognized by the coordinating node of the pre-central node.

The security indicator of the pre-center node may be equal to a weighted sum of the security levels of the pre-central node authentication by the coordinating node that recognizes the pre-center node.

In an embodiment of the present invention, the determining module 121 is further configured to determine whether a new cooperative node applies to join the ubiquitous terminal network; if yes, the determining module 121 is further configured to determine the new Whether the collaborative node approves the central node;

Then, the calculating module 122 is further configured to: if the determining module 121 determines that the new collaborative node recognizes the central node, updating the security indicator;

The transceiver unit 11 is further configured to send the updated security indicator to each of the coordinated nodes. In another embodiment of the present invention, the determining module 121 is further configured to determine whether a cooperating node exits the ubiquitous terminal network; and the calculating module 122 is further configured to determine that there is a collaboration. The node exits the ubiquitous terminal network, and updates the security indicator. The transceiver unit 11 is further configured to send the updated security indicator to each of the coordinated nodes, as each of the coordinated nodes and the pre-central node. Historical certification information.

Preferably, the transceiver unit 11 is further configured to send a message that the ubiquitous terminal network is successfully formed to each of the coordinated nodes.

Correspondingly, as shown in FIG. 6, an embodiment of the present invention further includes an authentication device configured to be a ubiquitous terminal network, including:

The receiving unit 21 is configured to receive a request for authenticating the pre-center node;

The authentication unit 22 is configured to authenticate the pre-center node;

The sending unit 23 is configured to send the authentication information obtained by the authentication unit to the pre-center node.

21. The authentication unit 22 and the sending unit 23, each of the cooperative nodes can authenticate the pre-central node that will form the ubiquitous terminal network and send the authentication information to the pre-central node, so that the pre-center node can determine whether the network can be securely networked. Therefore, the security of the central node of the ubiquitous terminal network is effectively guaranteed.

Optionally, as shown in FIG. 7, the apparatus may further include: a sharing unit 24 configured to share historical authentication information of each of the coordinated nodes with the pre-center node; the authentication unit 22 is specifically configured to be according to the sharing The historical authentication information shared by the unit and the security settings of each of the collaborative nodes themselves authenticate the pre-center node.

Specifically, as shown in FIG. 8, the authentication unit 22 may include:

The weighting module 221 is configured to perform weighted summation of the historical security level in the historical authentication information shared by the sharing unit to obtain a reference security level;

The authentication module 222 is configured to: if the reference security level is greater than or equal to the security setting of the collaboration node itself, the collaboration node approves the pre-center node; The full level is smaller than the security setting of the collaborative node itself, and the collaborative node does not approve the pre-central node.

Preferably, the receiving unit 21 is further configured to receive the message that the ubiquitous terminal network is successfully formed. As shown in FIG. 9, the apparatus further includes a second converting unit 25 configured to approve the pre-center at the authenticating unit 22. After receiving the message that the ubiquitous terminal network is successfully formed, the receiving unit 21 converts the coordinated node into a terminal node.

The above is only the preferred embodiment of the present invention and is not intended to limit the scope of the present invention. In the industrial utility process, the pre-central node sends a request for authenticating the pre-center node to other coordinating nodes, and receives authentication information of each pre-center node by each cooperating node, when the cooperation of the pre-central node is recognized When the number of nodes is greater than or equal to the minimum number of nodes required to form the ubiquitous terminal network, the pre-central node is converted into a central node, and the ubiquitous terminal network is successfully established. In this way, when a pre-central node is to establish a ubiquitous terminal network with itself as the center node, each co-node needs to authenticate the pre-center node, and only a certain number of cooperating nodes can authenticate through the pre-center node. The networking is successful, which effectively ensures the security of the central node of the ubiquitous terminal network.

Claims

claims

1. An authentication method for ubiquitous terminal networks, including:

The pre-central node sends a request for authentication of the pre-central node to each collaborative node; the pre-central node receives the authentication information of the pre-central node from each collaborative node; the pre-central node determines based on the received authentication information The number of collaborative nodes that recognize the pre-central node;

When the number of collaborative nodes that approve the pre-central node is greater than or equal to the minimum number of nodes required to form the ubiquitous terminal network, the pre-central node is converted into a central node, and the ubiquitous terminal network is successfully established.

2. The method of claim 1, wherein, after determining the number of collaborative nodes that approve the pre-central node, the method further includes:

When the number of collaborative nodes recognized by the pre-central node is less than the minimum number of nodes required to form the ubiquitous terminal network, the pre-central node is converted into a collaborative node, and the establishment of the ubiquitous terminal network fails.

3. The method of claim 1, wherein the determining the number of collaborative nodes that approve the pre-central node includes:

The pre-central node determines whether each of the collaborative nodes recognizes the pre-central node based on the authentication information;

The pre-central node calculates the number of cooperating nodes that approve the pre-central node.

4. The method of claim 3, wherein, after the pre-central node determines whether each of the collaborative nodes recognizes the pre-central node based on the authentication information, the method further includes:

The pre-central node calculates the security index of the pre-central node based on the security level authenticated by each collaborative node that recognizes the pre-central node, wherein the security level is carried in the authentication information. Sent to the pre-central node.

5. The method according to claim 4, wherein the security index of the pre-central node is equal to the sum of the power of the security level certified by the pre-central node by each collaborative node that recognizes the pre-central node.

6. The method of claim 5, wherein after the ubiquitous terminal network is successfully established, the method further includes:

When the central node determines that a new collaborative node applies to join the ubiquitous terminal network, the central node determines that the new collaborative node recognizes the central node, and the central node updates the security indicator and updates The final security indicators are sent to each of the collaborative nodes.

7. The method of claim 5, wherein after the ubiquitous terminal network is successfully established, the method further includes:

When the central node determines that a collaborative node exits the ubiquitous terminal network, the central node updates the security indicator and sends the updated security indicator to each collaborative node as a pair of each collaborative node. Historical authentication information of the central node.

8. The method according to any one of claims 1 to 7, wherein, after the pre-central node is converted into a central node and the ubiquitous terminal network is successfully established, the method further includes:

A message indicating that the ubiquitous terminal network is successfully established is sent to each collaborative node.

9. An authentication method for ubiquitous terminal networks, including:

Each collaborative node receives a request for authentication of the pre-central node;

Each of the collaborative nodes authenticates the pre-central node;

Each cooperative node sends the authentication information obtained through authentication to the pre-central node.

10. The method of claim 9, wherein, after each coordinated node receives a request to authenticate a pre-central node, and before each coordinated node authenticates the pre-central node, The above methods also include:

The collaborative nodes share their historical authentication information for the pre-central node with each other; the authentication of the pre-central node by each of the collaborative nodes includes: Each collaborative node authenticates the pre-central node based on the shared historical authentication information and each collaborative node's own security settings.

11. The method of claim 10, wherein each of the collaborative nodes authenticates the pre-central node based on the shared historical authentication information and each collaborative node's own security settings. include:

The collaborative node performs a weighted sum of the historical security levels in the shared historical authentication information to obtain a reference security level;

When the reference security level is greater than or equal to the security setting of the collaborative node itself, the collaborative node recognizes the pre-central node;

When the reference security level is smaller than the security setting of the collaborative node itself, the collaborative node does not recognize the pre-central node.

12. The method according to any one of claims 9-11, wherein, after each of the collaborative nodes sends the authenticated authentication information to the pre-center node, the method further includes: receiving all Describes the news that the ubiquitous terminal network has been successfully established;

Convert the collaborative node into a terminal node.

13. An authentication device for ubiquitous terminal networks, including:

A transceiver unit configured to send a request for authentication of the pre-central node to each collaborative node and receive authentication information of the pre-central node from each collaborative node;

A determining unit configured to determine the number of collaborative nodes that approve the pre-central node based on the authentication information received by the transceiver unit;

The first conversion unit is configured to convert the pre-central node into a central node when the number of collaborative nodes that approve the pre-central node is greater than or equal to the minimum number of nodes required to form the ubiquitous terminal network, so The ubiquitous terminal network is successfully established.

14. The apparatus according to claim 13, wherein the first conversion unit is further configured to determine that the number of collaborative nodes that approve the pre-central node determined by the determining unit is less than the number of collaborative nodes that form the ubiquitous node. When the minimum number of nodes required by the terminal network is reached, the pre-central node is converted into a collaborative node, and the establishment of the ubiquitous terminal network fails.

15. The device according to claim 13, wherein the determining unit includes:

Determining module, configured to determine whether each of the collaborative nodes recognizes the pre-center node according to the authentication information;

The calculation module is configured to calculate the number of collaborative nodes that recognize the pre-central node when determining that each of the collaborative nodes recognizes the pre-central node according to the authentication information.

16. The apparatus according to claim 15, wherein the calculation module is further configured to calculate the security of the pre-central node according to the security level of the pre-central node authentication by each collaborative node that approves the pre-central node. Indicator, wherein the security level is carried in the authentication information and sent to the pre-center node.

17. The apparatus according to claim 16, wherein the security index of the pre-central node is equal to the weighted sum of the security levels of the pre-central node authentication by each collaborative node that recognizes the pre-central node.

18. The device of claim 17, wherein,

The determination module is also configured to determine whether a new collaborative node applies to join the ubiquitous terminal network, and determines whether the new collaborative node recognizes the central node;

The computing module is further configured to update the security index when the determining module determines that the new collaborative node recognizes the central node;

The transceiver unit is also configured to send the updated security index to each of the collaborative nodes.

19. The device of claim 17, wherein,

The determination module is further configured to determine that a collaborative node exits the ubiquitous terminal network; the calculation module is further configured to update the security index when it is determined that a collaborative node exits the ubiquitous terminal network; The transceiver unit is also configured to send the updated security index to each of the collaborative nodes as historical authentication information of each of the collaborative nodes to the pre-central node.

20. The device according to any one of claims 13 to 19, wherein the transceiver unit is further configured to send a message indicating that the ubiquitous terminal network is successfully established to each collaborative node.

21. An authentication device for ubiquitous terminal networks, including:

a receiving unit configured to receive a request for authentication of the pre-central node;

An authentication unit, configured to authenticate the pre-center node;

22. The device of claim 21, further comprising:

A sharing unit configured to share historical authentication information of each collaborative node for the pre-central node with each other;

The authentication unit is configured to authenticate the pre-center node according to the historical authentication information shared by the sharing unit and the security settings of each collaborative node itself.

23. The device of claim 22, wherein the authentication unit includes:

A weighting module configured to perform a weighted summation of historical security levels in the historical authentication information shared by the sharing unit to obtain a reference security level;

Authentication module, configured such that when the reference security level is greater than or equal to the security setting of the collaborative node itself, the collaborative node recognizes the pre-center node; the reference security level is less than the security setting of the collaborative node itself , the cooperative node does not recognize the pre-central node.

24. The device according to any one of claims 21-23, wherein,

The receiving unit is also configured to receive a message that the ubiquitous terminal network is successfully established; the device further includes a second conversion unit configured to convert the collaborative node into a terminal node.