WO2019015038A1

WO2019015038A1 - Encryption control method and device for type-based uplink data of internet of things repeater

Info

Publication number: WO2019015038A1
Application number: PCT/CN2017/100751
Authority: WO
Inventors: 杜光东
Original assignee: 深圳市盛路物联通讯技术有限公司
Priority date: 2017-07-20
Filing date: 2017-09-06
Publication date: 2019-01-24
Also published as: CN107493571B; CN107493571A

Abstract

Disclosed in the present application is an encryption control method for type-based uplink data of an Internet of Things repeater, the method comprising the following steps: the Internet of Things repeater receiving a data packet sent by an Internet of Things terminal; the Internet of Things repeater identifying the type of the Internet of Things terminal, and querying, according to the type, a first encryption unit corresponding to the type from a preconfigured mapping table between types and encryption units; the Internet of Things repeater invoking the first encryption unit to encrypt the data packet; and the Internet of Things repeater sending the encrypted data packet to an Internet of Things access point. The present invention has the advantage of good user experience.

Description

Type-based uplink data encryption control method and device for internet of things repeater

The present invention claims the prior application priority of the application No. 201710593623.8, entitled "IoT Repeater Type-Based Uplink Data Encryption Control Method and Apparatus", filed on July 20, 2017, the content of the above-mentioned prior application is introduced The way is incorporated into this text.

Technical field

The present application relates to the field of communications, and in particular, to an IoT repeater type-based uplink data encryption control method and apparatus.

Background technique

The Internet of Things is an important part of the new generation of information technology, and an important stage of development in the era of "informatization." Its English name is: "Internet of things (IoT)". As the name suggests, the Internet of Things is the Internet that connects things. This has two meanings: First, the core and foundation of the Internet of Things is still the Internet, which is an extended and extended network based on the Internet; Second, its client extends and extends to any item and item for information. Exchange and communication, that is, things and things. The Internet of Things is widely used in the convergence of networks through communication-aware technologies such as intelligent sensing, identification technology and pervasive computing. It is also called the third wave of the development of the world information industry after computers and the Internet. The Internet of Things is the application expansion of the Internet. It is not so much that the Internet of Things is a network, but the Internet of Things is a business and application. Therefore, application innovation is the core of the development of the Internet of Things. Innovation 2.0 with user experience as the core is the soul of the development of the Internet of Things.

The Internet of Things solves the interconnection between objects and the exchange of data between objects. The existing Internet of Things is based on IoT repeaters to send data to the IoT point of interest when it is connected to the Internet (English: access point, AP) to access the Internet, the data security of the Internet of Things is low, so the user experience is low.

Summary of the invention

The application provides an IoT repeater type-based uplink data encryption control method. It can improve the security of IoT data and improve the user experience.

In a first aspect, an uplink type data encryption control method for an Internet of Things repeater is provided. The method includes the following steps:

The Internet of Things relay receives a data packet sent by the Internet of Things terminal;

The IoT repeater identifies the type of the Internet of Things terminal, and queries the first encryption unit corresponding to the type in the pre-configured type and the encryption unit mapping table according to the type;

The Internet of Things repeater invokes the first encryption unit to perform encryption processing on the data packet;

The IoT repeater sends the encrypted data packet to an IoT access point.

Optionally, the IoT repeater identifies the type of the Internet of Things terminal, including:

The Internet of Things repeater identifies the type of the Internet of Things terminal by the identifier of the Internet of Things terminal; the type includes: a smart light, a smart TV, a smart cleaning device, a smart sleep device, or an intelligent monitoring device.

The Internet of Things repeater sends an IoT terminal type table to the Internet of Things terminal,

The Internet of Things relay receives the type of the Internet of Things terminal that is matched by the Internet of Things terminal type table according to the Internet of Things terminal type.

Optionally, the IoT repeater invokes the first encryption unit to perform encryption processing on the data packet, including:

The IoT repeater invokes the first encryption unit to perform encryption processing on the data packet. If the encryption is successful, the subsequent steps are performed. If the encryption is unsuccessful, the IoT repeater calls the standby of the first encryption unit. The encryption unit encrypts the data packet, and adds the alternate encryption unit identifier to the header extension field of the encrypted data packet.

If the IoT repeater parses the data packet to obtain a signal modulation mode of the data packet as quadrature phase shift keying QPSK, the phase number with energy in the QPSK is obtained, and the phase number is sequentially sorted. The value is used as a secret key, and the encryption unit is called by the secret key to perform encryption processing on the data packet.

Optionally, the method further includes:

The IoT repeater generates a key pair, the key pair includes: a public key and a private key, and the IoT repeater encrypts the data packet by using the public key through the first encryption unit, and encrypts the data packet After The data packet is sent through the first path, and the private key is sent through the second path.

In a second aspect, an IoT repeater type-based uplink data encryption control apparatus is provided, the apparatus comprising:

a receiving unit, configured to receive a data packet sent by the Internet of Things terminal;

An identification unit, configured to identify a type of the Internet of Things terminal;

a searching unit, configured to query, according to the type, a first encryption unit corresponding to the type in a pre-configured type and an encryption unit mapping table;

An encryption unit, configured to invoke the first encryption unit to perform encryption processing on the data packet;

The sending unit is configured to send the encrypted data packet to the Internet of Things access point.

Optionally, the identifying unit is specifically configured to identify, by using an identifier of the Internet of Things terminal, a type of the Internet of Things terminal, where the type includes: a smart light, a smart television, a smart cleaning device, a smart sleep device, or an intelligent monitoring device. .

Optionally, the identifying unit is configured to send an IoT terminal type table to the Internet of Things terminal, and receive, by the IoT terminal, the IoT terminal type that matches the IoT terminal type table according to the IoT terminal type table.

Optionally, the encryption unit is configured to invoke the first encryption unit to perform encryption processing on the data packet. If the encryption is successful, perform subsequent steps. If the encryption is unsuccessful, the backup encryption unit of the first encryption unit is invoked. The data packet is encrypted, and the alternate encryption unit identifier is added to the header extension field of the encrypted data packet.

Optionally, the cryptographic unit is configured to: if the signal modulation mode of the data packet is obtained by parsing the data packet into a quadrature phase shift keying QPSK, obtain a phase number with energy in the QPSK, The value obtained by sequentially sorting the phase numbers is used as a secret key, and the encryption unit is called by the secret key to perform encryption processing on the data packet.

Optionally, the encryption unit is specifically configured to generate a key pair, where the key pair includes: a public key and a private key, and the data packet is encrypted by the first encryption unit by using a public key, where the sending unit is configured to: The method is configured to send the encrypted data packet through the first path, and send the private key through the second path.

According to a third aspect, a computer storage medium is provided, wherein the computer storage medium may store a program, where the program is executed, including any one of the Internet of Things repeater type-based uplink data encryption control methods described in the first aspect. Some or all of the steps.

In a fourth aspect, an access point device is provided, the access point device comprising: one or more processors, a memory, a bus system, a transceiver, and one or more programs, the processor, the memory, and The transceiver is coupled by the bus system; wherein the one or more programs are stored in the memory, the one or more programs including instructions that, when executed by an access point, cause an access point to perform the In one aspect and in the first aspect, it is entirely possible to design any of the methods provided.

After the Internet of Things terminal of the technical solution provided by the present invention sends the data packet to the Internet of Things repeater, the Internet of Things repeater queries the corresponding encryption unit according to the type of the Internet of Things terminal, and encrypts the data through the encryption unit. For the Internet of Things, the IoT terminal does not need to configure encryption. All encryption settings are in the IoT repeater. This method can effectively reduce the cost of the IoT terminal, and for the entire Internet of Things, because of its An IoT repeater can connect to a large number of IoT terminals. The IoT repeater configuration can also reduce the overall cost of the Internet of Things. In addition, for IoT repeaters, the computing power is generally stronger than that of the IoT repeater. The networked terminal can reduce the delay of data transmission when running the encryption unit, reduce the delay of the network, and improve the user experience.

DRAWINGS

In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings used in the description of the embodiments will be briefly described below. It is obvious that the drawings in the following description are some embodiments of the present application, Those skilled in the art can also obtain other drawings based on these drawings without paying any creative work.

1 is a schematic flow chart of a repeater-based data routing method;

2 is a flow chart of transmission of a packet sent by an Internet of Things terminal to a gateway;

Figure 3 is a transmission flow chart of the gateway transmitting the data packet to the Internet of Things terminal

4 is a schematic flowchart of a repeater-based data automatic routing method according to an embodiment of the present application;

FIG. 5 is a schematic diagram of an implementation scenario of an embodiment of the present application; FIG.

6 is a schematic flowchart of a repeater-based data automatic routing method according to another embodiment of the present application;

7 is a schematic structural diagram of a repeater-based data automatic routing apparatus provided by the present application;

8 is a schematic structural diagram of an Internet of Things repeater device provided by the present application;

FIG. 9 is a schematic structural diagram of hardware of an Internet of Things repeater provided by the present application.

Detailed ways

Before discussing the exemplary embodiments in more detail, it should be noted that some exemplary embodiments are described as a process or method depicted as a flowchart. Although the flowcharts describe various operations as a sequential process, many of the operations can be implemented in parallel, concurrently or concurrently. In addition, the order of operations can be rearranged. The process may be terminated when its operation is completed, but may also have additional steps not included in the figures. The processing may correspond to methods, functions, procedures, subroutines, subroutines, and the like.

By "computer device", also referred to as "computer" in the context, is meant an intelligent electronic device that can perform predetermined processing, such as numerical calculations and/or logical calculations, by running a predetermined program or instruction, which can include a processor and The memory is executed by the processor to execute a predetermined process pre-stored in the memory to execute a predetermined process, or is executed by hardware such as an ASIC, an FPGA, a DSP, or the like, or a combination of the two. Computer devices include, but are not limited to, servers, personal computers, notebook computers, tablets, smart phones, and the like.

The methods discussed below, some of which are illustrated by flowcharts, can be implemented in hardware, software, firmware, middleware, microcode, hardware description languages, or any combination thereof. When implemented in software, firmware, middleware or microcode, the program code or code segments to carry out the necessary tasks can be stored in a machine or computer readable medium, such as a storage medium. The processor(s) can perform the necessary tasks.

The specific structural and functional details disclosed are merely representative and are for the purpose of describing exemplary embodiments of the invention. The present invention may, however, be embodied in many alternative forms and should not be construed as being limited only to the embodiments set forth herein.

It should be understood that although the terms "first," "second," etc. may be used herein to describe the various elements, these elements should not be limited by these terms. These terms are used only to distinguish one unit from another. For example, a first unit could be termed a second unit, and similarly a second unit could be termed a first unit, without departing from the scope of the exemplary embodiments. The term "and/or" used herein includes any and all combinations of one or more of the associated listed items.

The terminology used herein is for the purpose of describing the particular embodiments, The singular forms "a", "an", It is also to be understood that the terms "comprising" and """ Other features, integers, steps, operations, units, components, and/or combinations thereof.

It should also be noted that in some alternative implementations, the functions/acts noted may occur in a different order than that illustrated in the drawings. For example, two figures shown in succession may in fact be executed substantially concurrently or sometimes in the reverse order, depending on the function/acts involved.

The invention is further described in detail below with reference to the accompanying drawings.

According to an aspect of the present invention, an uplink data transmission method of an Internet of Things AP is provided. The method is applied to the object network shown in FIG. 1. As shown in FIG. 1, the object network includes: the Internet of Things terminal 10, the Internet of Things access point AP20, the Internet of Things repeater 40, and the wireless connection. In the controller 30, the above-mentioned Internet of Things terminal may have different expressions according to different situations. For example, the Internet of Things terminal may specifically be: a mobile phone, a tablet computer, a computer, etc., of course, it may also include other devices with networking functions. Such as smart TV, smart air conditioner, smart water bottle or some intelligence of the Internet of Things The device, the IoT terminal 10 is connected to the AP 20 in a wireless manner, and the AP 20 accesses the Internet through the gateway 12 by using another method (that is, a connection mode different from the wireless mode). The wireless mode includes but is not limited to: Bluetooth, WIFI, and the like. The other way of the above may be LTE or wired. In Fig. 1, the wired mode is taken as an example, and for convenience of representation, only one solid line is shown here.

The above-mentioned wireless access controller 30 may be a personal computer (PC) according to the size of the Internet of Things. Of course, in practical applications, it may also be multiple PCs or servers. The specific embodiment of the present invention is not limited. The specific manifestation of the above wireless access controller.

Referring to FIG. 2, FIG. 2 is a transmission flow chart of uplink data transmission of an Internet of Things repeater. As shown in FIG. 2, the process includes:

Step S201, the Internet of Things terminal 10 wirelessly transmits the data packet to be sent to the Internet of Things repeater;

Step S202, the Internet of Things repeater sends the data packet to the AP20;

Step S203: The AP20 forwards the data packet to the radio access controller 30.

Through the above-mentioned representations of FIG. 1 and FIG. 2, in the actual transmission of the data packet, if there is a leak between the Internet of Things repeater and the wireless access controller 30, then the transmitted data packet is not subjected to corresponding encryption processing. Therefore, it is easy to cause data leakage and it is prone to security problems.

Referring to FIG. 3, FIG. 3 is a schematic diagram of a type-based uplink data encryption control method for an Internet of Things repeater according to the present invention. The method is implemented in a network architecture as shown in FIG. 4, as shown in FIG. Multiple IoT terminals can be connected. The AP can be a relay station. Of course, in actual applications, it can also be a router or other network device with wireless connection and data forwarding function, such as a mobile phone that provides hotspots and a personal computer that provides wireless connection. Such equipment, as shown in Figure 3, includes the following steps:

Step S301: The Internet of Things terminal sends a data packet to the Internet of Things relay.

The object-to-network terminal in the above step S301 may specifically be: a mobile phone, a tablet computer, a computer, etc., of course, it may also include other devices with networking functions, such as a smart TV, a smart air conditioner, a smart water bottle, a smart light, a smart switch, or Some IoT smart devices.

In the foregoing step S301, the manner in which the Internet of Things terminal sends a data packet to the Internet of Things relay may be a method of transmitting a data packet by using a wireless connection, including but not limited to: Bluetooth, Wireless Fidelity (WIFI) Or a wireless method such as Zigbee, wherein the above WIFI needs to comply with the IEEE802.11b standard.

It should be noted that the Internet of Things and IoT repeaters here are only for wireless IoT repeaters, because for the Internet of Things, the number of devices it accesses is large, for IoT repeaters, if With wired connections, the number of IoT repeaters will be limited first, and for the home, wired connections are unimaginable for home users' wiring, and the cost of this cable is also very high. Therefore, the connection between the Internet of Things terminal and the Internet of Things relay in the technical solution of the present invention is limited to a wireless connection.

Step S302: The Internet of Things repeater identifies the type of the Internet of Things terminal, and queries the first encryption unit corresponding to the type in the pre-configured type and the encryption unit mapping table according to the type.

The types of the Internet of Things terminals in the above step S302 can be set according to the situation of the device. For example, the types of the Internet of Things terminals can include: smart lights, smart TVs, smart cleaning devices, smart sleep devices, intelligent monitoring devices, etc. The form of performance can be varied. For example, for a smart electric light, the smart electric light includes, but is not limited to, a smart table lamp, a smart ceiling lamp, a smart wall lamp, etc., for example, for a smart TV, it can be a Samsung smart TV. Of course, it can also be a Sharp smart TV. For example, for a smart cleaning device, it can be a smart sweeping robot. Of course, it can also include a smart vacuum cleaner, a smart garbage processor, etc., for example, for a smart sleep device, It can be: a smart mattress, a smart sofa, etc., for example, for an intelligent monitoring device, or it can be an intelligent blood pressure meter, a smart thermometer, etc., the specific types and types of the above-mentioned Internet of Things terminals of the present invention. Not limited.

The type and encryption unit mapping table in the above steps are as shown in FIG. 5, and the foregoing mapping may be a one-to-one mapping, and may of course be a one-to-many mapping.

The encryption unit in the above step S302 may specifically be a hardware encryption set in the Internet of Things repeater. The unit includes an encryption algorithm preset by the manufacturer. Of course, in an actual application, the encryption unit may also be a software encryption unit configured in the Internet of Things repeater, and the present invention does not limit the specific expression of the encryption unit.

The foregoing encryption algorithms include, but are not limited to, triple data encryption algorithm block cipher (English: riple Data Encryption Algorithm, 3DES), message digest algorithm (English: Message Digest Algorithm, MD5) or RSA (Rivest, Shamir, Adleman) and other encryption algorithms. The invention is not limited to specific encryption algorithms. For example, 3DES is a generic term for triple-data encryption algorithm block ciphers. It is equivalent to applying three DES encryption algorithms to each data block. Due to the increased computing power of the computer, the key length of the original DES password becomes vulnerable to brute force; 3DES is designed to provide a relatively simple method to avoid similar attacks by increasing the key length of DES.

Step S303: The Internet of Things repeater invokes the first encryption unit to perform encryption processing on the data packet.

The implementation method of the foregoing step S303 may specifically be:

For example, the first encryption unit is a 3DES encryption unit, and the Internet of Things relay invokes the 3DES encryption unit to perform 3DES encryption processing on the data packet. For example, the first encryption unit is a RAS encryption unit, and the Internet of Things relay invokes the RAS encryption unit to perform RAS encryption processing on the data packet. For example, if the first encryption unit is an MD5 encryption unit, the Internet of Things relay invokes the MD5 encryption unit to perform MD5 encryption processing on the data packet.

For details about the encryption process, refer to related descriptions of 3DES, RSA, and MD5, and details are not described here.

The implementation method of the foregoing step S303 may specifically be:

The IoT repeater invokes the first encryption unit to perform encryption processing on the data packet. If the encryption is successful, the subsequent step S304 is performed. If the encryption is unsuccessful, the standby encryption unit of the first encryption unit is called to encrypt the data packet. The alternate encryption unit identifier is added to the header extension field of the encrypted packet.

Step S304: The Internet of Things relay sends the encrypted data packet to the wireless access controller.

The implementation method of the above step S304 can be:

The encrypted data packet is sent to the wireless access controller in another manner. For example, if the Internet of Things terminal is connected to the AP through the WIFI, the AP 20 can send the data packet to the wired device to The radio access controller, of course, in practical applications, the AP 20 can also send the encrypted data packet to the radio access controller through Long Term Evolution (LTE). Of course, the foregoing LTE or limited mode and the manner in which the Internet of Things terminal is connected to the AP through the WIFI are merely for illustrative purposes, and the present invention does not limit the specific manner of the foregoing connection.

If the IoT repeater parses the data packet to obtain a signal modulation mode of the data packet, which is Quadrature Phase Shift Keying (QPSK), obtain a phase number with energy in the QPSK, and The value obtained by sequentially sorting the phase numbers is used as a secret key, and the encryption unit is called by the secret key to perform encryption processing on the data packet.

The phase number with energy refers to the energy of the QPSK subcarrier, that is, the subcarrier transmits the number 1, and the corresponding phase number may specifically be the phase number of the phase, for example, the first phase row number is 1, the second The phase number is 2, and the 15th phase has a row number of 15. In this way, it is difficult to obtain a secret key to be decrypted, and the security is further improved.

According to the method provided in FIG. 3, after the Internet of Things terminal sends the data packet to the Internet of Things repeater, the IoT repeater queries the corresponding encryption unit according to the type of the Internet of Things terminal, and performs data on the data through the encryption unit. Encryption, for the Internet of Things, the IoT terminal does not need to configure encryption. All encryption settings are in the IoT repeater. This method can effectively reduce the cost of the IoT terminal, and for the entire Internet of Things, One of the IoT repeaters can connect to many IoT terminals. The IoT repeater configuration can also reduce the overall cost of the Internet of Things. In addition, for IoT repeaters, the computing power is generally stronger than that of IoT repeaters. The Internet of Things terminal can reduce the delay of data transmission when running the encryption unit, reduce the delay of the network, and improve the user experience.

Referring to FIG. 6, FIG. 6 is a method for controlling uplink type data encryption of an Internet of Things repeater according to the present invention. The method is implemented in a network architecture as shown in FIG. 4, as shown in FIG. Multiple IoT terminals can be connected under the repeater. The IoT repeater can be a relay station. Of course, in practical applications, it can also be a router or other network device with wireless connection and data forwarding function, for example, hotspots are opened. Mobile phones, personal computers and other devices that provide wireless connectivity, such as As shown in Figure 6, the following steps are included:

Step S601: The Internet of Things terminal sends a data packet to the Internet of Things relay.

The IoT terminal in the above step S601 may specifically be: a mobile phone, a tablet computer, a computer, etc., of course, it may also include other devices with networking functions, such as a smart TV, a smart air conditioner, a smart water bottle, a smart light, a smart switch, or Some IoT smart devices.

In the foregoing step S601, the manner in which the Internet of Things terminal sends a data packet to the Internet of Things relay may be a method of sending a data packet by using a wireless connection, including but not limited to: Bluetooth, Wireless Fidelity (WIFI) Or a wireless method such as Zigbee, wherein the above WIFI needs to comply with the IEEE802.11b standard.

It should be noted that the Internet of Things and IoT repeaters here are only for wireless APs, because for the Internet of Things, the number of devices connected to them is large. For IoT repeaters, if they are connected by wire, First, the number of accesses of the Internet of Things repeater is limited, and for the home, wired connections are unimaginable for the wiring of the home users, and the cost of the cable is also very high, so the present invention The connection between the Internet of Things terminal and the Internet of Things repeater in the technical solution is limited to wireless connection.

Step S602, the Internet of Things repeater identifies the type of the Internet of Things terminal, and queries the first encryption unit corresponding to the type in the pre-configured type and the encryption unit mapping table according to the type;

The types of the Internet of Things terminals in the above step S602 can be set according to the situation of the device. For example, the types of the Internet of Things terminals can include: smart lights, smart TVs, smart cleaning devices, smart sleep devices, intelligent monitoring devices, etc. The form of performance can be varied. For example, for a smart electric light, the smart electric light includes, but is not limited to, a smart table lamp, a smart ceiling lamp, a smart wall lamp, etc., for example, for a smart TV, it can be a Samsung smart TV. Of course, it can also be a Sharp smart TV. For example, for a smart cleaning device, it can be a smart sweeping robot. Of course, it can also include a smart vacuum cleaner, a smart garbage processor, etc., for example, for a smart sleep device, It can be: a smart mattress, a smart sofa, etc., for example, for an intelligent monitoring device, or it can be an intelligent blood pressure meter, a smart thermometer, etc., the specific types and types of the above-mentioned Internet of Things terminals of the present invention. Not limited.

The specific implementation method for identifying the type of the Internet of Things terminal by the Internet of Things repeater in the above step S602 Can be:

The Internet of Things repeater identifies the type of the Internet of Things terminal through the identification of the Internet of Things terminal, including but not limited to: the media access address (English: Media Access Control, MAC) of the Internet of Things terminal, the IP address, or the Internet of Things terminal. Name and so on, of course, in practical applications, the AP20 and the Internet of Things terminal can also determine the type of the above-mentioned Internet of Things terminal through information interaction. As shown in FIG. 7, the flow of the information interaction may specifically be:

Step S701: The Internet of Things terminal sends a connection request to the Internet of Things repeater.

Step S702, the Internet of Things repeater returns a connection response to the Internet of Things terminal, and establishes a wireless connection with the Internet of Things terminal;

Step S703, the Internet of Things repeater sends the IoT terminal type table in the Internet of Things relay to the Internet of Things terminal through the wireless connection;

Step S704: The Internet of Things terminal searches for the type of the Internet of Things terminal that matches the self of the Internet of Things terminal type table;

Step S705: The Internet of Things terminal reports the type of the Internet of Things terminal to the Internet of Things repeater.

The cryptographic unit in the above step S602 may specifically be a hardware cryptographic unit disposed in the Internet of Things repeater, and includes an encryption algorithm preset by the manufacturer. Of course, in an actual application, the cryptographic unit may also be configured in the Internet of Things relay. The software encryption unit in the device does not limit the specific expression of the above encryption unit.

The foregoing encryption algorithm includes, but is not limited to, an encryption algorithm such as 3DES, MD5 or RSA, and the present invention is not limited to a specific encryption algorithm.

Step S603, the Internet of Things repeater generates a key pair, the secret key pair includes a private key and a public key, and the Internet of Things repeater uses a public key to encrypt the data packet according to the first encryption unit;

The implementation method of the foregoing step S603 may specifically be:

For example, the first encryption unit is a 3DES encryption unit, and the Internet of Things relay invokes the 3DES encryption unit to perform 3DES encryption processing on the data packet. For example, if the first encryption unit is a RAS encryption unit, the AP 20 invokes the RAS encryption unit to perform RAS encryption processing on the data packet. For example, if the first encryption unit is an MD5 encryption unit, the Internet of Things repeater calls the MD5 encryption unit to perform MD5 encryption on the data packet. deal with.

Step S604: The Internet of Things relay sends the encrypted data packet to the wireless access controller through the first path, and the Internet of Things relay sends the private key to the wireless access controller through the second path.

The implementation method of the above step S604 can be:

The encrypted data packet is sent to the wireless access controller in another manner. For example, the Internet of Things terminal is connected to the AP through the WIFI, and then the AP20 can send the data packet to the wireless access controller by wire, of course, in practice. In the application, the AP20 can also send the encrypted data packet to the radio access controller through Long Term Evolution (LTE). Of course, the foregoing LTE or limited mode and the manner in which the Internet of Things terminal is connected to the AP through the WIFI are merely for illustrative purposes, and the present invention does not limit the specific manner of the foregoing connection.

The first path and the second path are different paths, and the first path may be calculated by using a different path algorithm, including but not limited to: a shortest path first algorithm or a shortest time delay first algorithm, of course, the first path And the second path may also be calculated by using different path algorithms. For example, the first path may be calculated by using a shortest path first algorithm, and the second path may be calculated by a shortest delay first algorithm.

According to the method provided in FIG. 6, after the Internet of Things terminal sends the data packet to the Internet of Things repeater, the IoT repeater queries the corresponding encryption unit according to the type of the Internet of Things terminal, and performs data on the data through the encryption unit. Encryption, for the Internet of Things, the IoT terminal does not need to configure encryption. All encryption settings are in the IoT repeater. This method can effectively reduce the cost of the IoT terminal, and for the entire Internet of Things, One AP can connect to many IoT terminals, and the IoT repeater configuration can also reduce the overall cost of the Internet of Things. In addition, for IoT repeaters, the computing power is generally stronger than the IoT terminal. Then, when running the encryption unit, the delay of data transmission can be reduced, the delay of the network can be reduced, and the user experience can be improved. The method shown in FIG. 6 uses different paths when transmitting encrypted data packets and private keys, which increases the difficulty of information interception, which can further improve data security.

The present invention also provides a computer storage medium, wherein the computer storage medium can store a program, the program including any type of Internet of Things repeater described in the first aspect, based on type Some or all of the steps of the uplink data encryption control method.

Referring to FIG. 8, FIG. 8 is an IoT repeater device 800 according to the present invention. The device includes:

The receiving unit 801 is configured to receive a data packet sent by the Internet of Things terminal;

The identifying unit 802 is configured to identify a type of the Internet of Things terminal;

The searching unit 803 is configured to query, according to the type, the first encryption unit corresponding to the type in the pre-configured type and the encryption unit mapping table;

The encryption unit 804 is configured to invoke the first encryption unit to perform encryption processing on the data packet.

The sending unit 805 is configured to send the encrypted data packet to the radio access controller.

Optionally, the identifying unit 802 is specifically configured to identify, by using the identifier of the Internet of Things terminal, a type of the Internet of Things terminal.

Optionally, the identifying unit 805 is specifically configured to send the IoT terminal type table to the Internet of Things terminal, and receive the IoT terminal type that is matched by the IoT terminal according to the IoT terminal type table.

Optionally, the encryption unit 804 is specifically configured to invoke the first encryption unit to perform encryption processing on the data packet. If the encryption is successful, perform subsequent steps. If the encryption is unsuccessful, the standby encryption unit pair of the first encryption unit is invoked. The data packet is subjected to an encryption process, and the alternate encryption unit identifier is added to the header extension field of the encrypted data packet.

Optionally, the encryption unit 804 is specifically configured to: if the signal modulation mode of the data packet is obtained by parsing the data packet into a quadrature phase shift keying QPSK, obtain a phase number with energy in the QPSK, and obtain the phase The value obtained by sequentially sorting the numbers is used as a secret key, and the encryption unit is called by the secret key to perform encryption processing on the data packet.

Optionally, the encryption unit 804 is specifically configured to generate a key pair, where the key pair includes: a public key and a private key, and the data packet is encrypted by the first encryption unit by using a public key, where the sending unit uses The encrypted data packet is sent through the first path, and the private key is sent through the second path.

Referring to FIG. 9, FIG. 9 is an Internet of Things repeater 900 provided by the present invention. The Internet of Things relay can be a node deployed in an Internet system, and the Internet system can further include: an Internet of Things terminal and wireless access. The controller, the Internet of Things repeater 900 includes but is not limited to: a computer, a server, etc., as shown in FIG. 9, the Internet of Things repeater 900 includes: a processor 901, a memory 902, and a transceiver 903 and bus 904. The transceiver 903 is configured to transmit and receive data with an external device (eg, other devices in the interconnection system, including but not limited to: a repeater, a core network device, etc.). The number of processors 901 in the Internet of Things repeater 900 may be one or more. In some embodiments of the present application, processor 901, memory 902, and transceiver 903 may be connected by a bus system or other means. For the meanings and examples of the terms involved in this embodiment, reference may be made to the corresponding embodiment of FIG. 3 or FIG. 6 , and details are not described herein again.

The program code can be stored in the memory 902. The processor 901 is configured to call the program code stored in the memory 902, and is configured to perform the following operations:

The transceiver 903 is configured to receive a data packet sent by the Internet of Things terminal;

The processor 901 is configured to identify the type of the Internet of Things terminal, query the first encryption unit corresponding to the type in the pre-configured type and the encryption unit mapping table according to the type, and invoke the first encryption unit pair. The data packet is encrypted.

The transceiver 903 is further configured to send the encrypted data packet to the wireless access controller.

Optionally, the processor 901 and the transceiver 903 can also be used to perform the refinement and the steps of the steps and steps in the embodiment shown in FIG. 3 or FIG. 6.

It should be noted that the processor 901 herein may be a processing component or a general term of multiple processing components. For example, the processing component may be a central processing unit (CPU), an application specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present application. For example, one or more digital singal processors (DSPs), or one or more Field Programmable Gate Arrays (FPGAs).

The memory 903 may be a storage device or a collective name of a plurality of storage elements, and is used to store executable program code or parameters, data, and the like required for the application running device to operate. And the memory 903 may include random access memory (RAM), and may also include non-volatile memory such as a magnetic disk memory, a flash memory, or the like.

The bus 904 may be an Industry Standard Architecture (ISA) bus, a Peripheral Component (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus. The bus can be divided into an address bus, a data bus, a control bus, and the like. For ease of representation, only one thick line is shown in Figure 9. But it does not mean that there is only one bus or one type of bus.

The user equipment may also include input and output means coupled to bus 904 for connection to other portions, such as processor 901, via a bus. The input/output device can provide an input interface for the operator, so that the operator can select the control item through the input interface, and can also be other interfaces through which other devices can be externally connected.

It should be noted that, for the foregoing various method embodiments, for the sake of brevity, they are all described as a series of action combinations, but those skilled in the art should understand that the present application is not limited by the described action sequence. Because some steps may be performed in other orders or concurrently in accordance with the present application. In the following, those skilled in the art should also understand that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily required by the present application.

In the above embodiments, the descriptions of the various embodiments are different, and the parts that are not described in detail in a certain embodiment can be referred to the related descriptions of other embodiments.

A person skilled in the art may understand that all or part of the various steps of the foregoing embodiments may be performed by a program to instruct related hardware. The program may be stored in a computer readable storage medium, and the storage medium may include: Flash disk, read-only memory (English: Read-Only Memory, referred to as: ROM), random accessor (English: Random Access Memory, referred to as: RAM), disk or optical disk.

The content downloading method and the related device and system provided by the embodiments of the present application are described in detail. The principles and implementation manners of the present application are described in the specific examples. The description of the above embodiments is only used to help understand the present application. The method of application and its core idea; at the same time, for those of ordinary skill in the art, according to the idea of the present application, there will be changes in the specific implementation manner and application scope. In summary, the content of this specification should not be understood. To limit the application.

Claims

An IoT repeater type-based uplink data encryption control method, characterized in that the method comprises the following steps:

The Internet of Things relay receives a data packet sent by the Internet of Things terminal;

The IoT repeater identifies the type of the Internet of Things terminal, and queries the first encryption unit corresponding to the type in the pre-configured type and the encryption unit mapping table according to the type;

The Internet of Things repeater invokes the first encryption unit to perform encryption processing on the data packet;

The IoT repeater sends the encrypted data packet to an IoT access point.
The method according to claim 1, wherein the Internet of Things relay identifies the type of the Internet of Things terminal, including:

The Internet of Things repeater identifies the type of the Internet of Things terminal by the identifier of the Internet of Things terminal, and the type includes: a smart light, a smart TV, a smart cleaning device, a smart sleep device, or an intelligent monitoring device.
The method according to claim 1, wherein the Internet of Things relay identifies the type of the Internet of Things terminal, including:

The Internet of Things repeater sends an IoT terminal type table to the Internet of Things terminal,

The Internet of Things relay receives the type of the Internet of Things terminal that is matched by the Internet of Things terminal type table according to the Internet of Things terminal type.
The method of claim 1, wherein the object-to-network repeater invokes the first encryption unit to perform encryption processing on the data packet, including:

The IoT repeater invokes the first encryption unit to perform encryption processing on the data packet. If the encryption is successful, the subsequent steps are performed. If the encryption is unsuccessful, the IoT repeater calls the standby of the first encryption unit. The encryption unit encrypts the data packet, and adds the alternate encryption unit identifier to the header extension field of the encrypted data packet.
The method of claim 1 further comprising:

The IoT repeater generates a key pair, the key pair includes: a public key and a private key, and the IoT repeater encrypts the data packet by using the public key through the first encryption unit, and encrypts the data packet The subsequent data packet is sent through the first path, and the private key is sent through the second path.
An IoT repeater type-based uplink data encryption control device, characterized in that the device comprises:

a receiving unit, configured to receive a data packet sent by the Internet of Things terminal;

An identification unit, configured to identify a type of the Internet of Things terminal;

a searching unit, configured to query, according to the type, a first encryption unit corresponding to the type in a pre-configured type and an encryption unit mapping table;

An encryption unit, configured to invoke the first encryption unit to perform encryption processing on the data packet;

The sending unit is configured to send the encrypted data packet to the Internet of Things access point.
The device according to claim 6, wherein the identifying unit is specifically configured to identify an type of the Internet of Things terminal by using an identifier of the Internet of Things terminal, the type comprising: a smart electric light, a smart television, and a smart cleaning Equipment, smart sleep equipment or intelligent monitoring equipment.
The device according to claim 6, wherein the identification unit is configured to send an IoT terminal type table to the Internet of Things terminal, and receive the IoT terminal to send and find out according to the IoT terminal type table. Matching IoT terminal type.
The device according to claim 6, wherein the encryption unit is configured to invoke the first encryption unit to perform encryption processing on the data packet, and if the encryption is successful, perform subsequent steps, such as unsuccessful encryption. The alternate encryption unit that invokes the first encryption unit encrypts the data packet, and adds the alternate encryption unit identifier to the header extension field of the encrypted data packet.
The device according to claim 6, wherein the sending unit is specifically configured to generate a key pair, the key pair includes: a public key and a private key, and the Internet of Things relay adopts a public key to pass The first encryption unit encrypts the data packet, transmits the encrypted data packet through the first path, and transmits the private key through the second path.
A computer readable storage medium storing a computer program for electronic data exchange, wherein the computer program causes a computer to perform the method of any of claims 1-5.
A computer program product, comprising: a non-transitory computer readable storage medium storing a computer program, the computer program being operative to cause a computer to perform any of claims 1-5 The method described.