CN112543223B - Internet of things system - Google Patents

Internet of things system Download PDF

Info

Publication number
CN112543223B
CN112543223B CN202011258536.5A CN202011258536A CN112543223B CN 112543223 B CN112543223 B CN 112543223B CN 202011258536 A CN202011258536 A CN 202011258536A CN 112543223 B CN112543223 B CN 112543223B
Authority
CN
China
Prior art keywords
internet
things
data
paas platform
access unit
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202011258536.5A
Other languages
Chinese (zh)
Other versions
CN112543223A (en
Inventor
招嘉焕
陶洋
陈小军
黄章良
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Guangzhou Lubangtong IoT Co Ltd
Original Assignee
Guangzhou Lubangtong IoT Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Guangzhou Lubangtong IoT Co Ltd filed Critical Guangzhou Lubangtong IoT Co Ltd
Priority to CN202011258536.5A priority Critical patent/CN112543223B/en
Publication of CN112543223A publication Critical patent/CN112543223A/en
Application granted granted Critical
Publication of CN112543223B publication Critical patent/CN112543223B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/50Network services
    • H04L67/56Provisioning of proxy services
    • H04L67/562Brokering proxy services
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/26Special purpose or proprietary protocols or architectures

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computing Systems (AREA)
  • Computer Security & Cryptography (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Computer And Data Communications (AREA)

Abstract

The invention discloses an internet of things system, which relates to the internet of things technology and is deployed in a server on a public network address, wherein the system comprises: the Internet of things equipment access unit is used for receiving data uploaded by a plurality of Internet of things equipment and preprocessing the data; the PaaS platform access unit is used for sending the data uploaded by the Internet of things equipment or the preprocessed data to the PaaS platform and requesting service from the PaaS platform; and the client access processing unit is used for responding to the access request based on the public network address and requesting service from the PaaS platform according to the access request. The invention can increase the safety of the internet of things system and reduce the operation cost.

Description

Internet of things system
Technical Field
The invention relates to the technology of the Internet of things, in particular to an Internet of things system.
Background
The Internet of things basic PaaS platform is diversified, and different operators and Internet companies at home and abroad provide corresponding Internet of things services. Different customers choose different platforms according to their own needs and prices. And different platforms have different access flows and methods. The internet of things equipment needs to adapt to the requirements of different platforms to establish data connection. The Internet of things has numerous protocols, such as HTTP, MQTT, coap, LWM M, TCP and the like. The internet of things equipment needs to integrate different protocols according to the requirements of clients so as to establish data connection.
The platform diversity of the Internet of things equipment is provided with an android and Linux set singlechip, and the chips are also distinguished by ARM, X86, MIPS and the like. The SDK of some internet of things platforms possibly cannot be directly used, and cross-platform transplantation is needed. Under the demand scene of thing networking flow, general equipment communication flow is not very big at present, but along with AI, image technique's popularization, the demand of flow is increasingly big. At present, operators have various internet of things cards and flow pools, the relative charge is lower than that of a general flow card, but the price problem still faces under the use of multimedia information of a large number of devices.
If a nationwide PaaS platform is used, customers often have the problems of easy disconnection, low bandwidth and the like.
Some clients do not necessarily adopt PaaS platforms, but build themselves, or even if the PaaS platform of the Internet of things is adopted, but the development capability of themselves is limited, the security of the developed SaaS platform interface is insufficient, and attacks are easy to receive.
The application scene of the Internet of things is needed, and the edge computing function of the integrated part is needed. Although the development difficulty for the equipment end is low, the diversity is complex, and the multiplexing degree is not beneficial to the application of the equipment end. For example: the data is read from a plurality of devices and is shaped, and finally the data is converted into the data which is finally needed.
In summary, the existing internet of things scheme has the problems of high cost, high equipment cost and poor safety of using the nationwide internet of things service.
Disclosure of Invention
In view of the foregoing, it is an object of the present invention to provide an internet of things system, which aims to reduce the use cost of users, reduce the equipment cost and improve the security of the transnational services.
According to the scheme provided by the embodiment of the invention:
An internet of things system deployed in a server at a public network address, the system comprising:
the Internet of things equipment access unit is used for receiving data uploaded by a plurality of Internet of things equipment and preprocessing the data;
The PaaS platform access unit is used for sending the data uploaded by the Internet of things equipment or the preprocessed data to the PaaS platform and requesting service from the PaaS platform;
and the client access processing unit is used for responding to the access request based on the public network address and requesting service from the PaaS platform according to the access request.
In some embodiments, the internet of things device access unit communicates with a plurality of the internet of things devices based on MQTT protocol;
the preprocessing of the data comprises the following steps:
at least one of deleting useless or duplicate data, performing numerical conversion on the data, or rejecting abnormal data.
In some embodiments, the PaaS platform access unit accesses the PaaS platform based on a transnational private line.
In some embodiments, the number of the cross-country private lines is at least two, and the PaaS platform access unit accesses the PaaS platform after connecting the cross-country private lines to the cross-country substation server.
In some embodiments, the two transnational substation servers connected by the transnational private line are mutually backup.
In some embodiments, the client access processing unit is further configured to:
and responding to the configuration request based on the public network address, and distributing resources and configuration service functions in a PaaS platform resource pool for the terminal of the configuration request.
In some embodiments, the internet of things device accesses the internet of things device access unit through the directional traffic corresponding to the public network address.
In some embodiments, the data sent by the internet of things device to the internet of things device access unit is encrypted data, and the internet of things device access unit decrypts the encrypted data based on the decryption algorithm to obtain the original data.
In some embodiments, in the internet of things device, a selection SDK or a communication protocol library based on a chip type and an operating system is in communication with the internet of things device access unit.
In some embodiments, the preprocessing of the data is implemented based on JavaScript code.
As can be seen from the above embodiments, the present solution has the following technical effects: the Internet of things equipment access unit of the system is used for accessing the Internet of things equipment and preprocessing data, compared with the prior art, the Internet of things equipment does not need to directly access a server and a background built by a client, so that the risk of exposing and attacking addresses of the client is reduced, meanwhile, the Internet of things access unit of the system can be used for preprocessing the data, the hardware calculation difficulty of a client side can be reduced, the large-scale deployment is facilitated, the client access processing unit of the system is more convenient, the client can be connected to the PaaS platform through the system only by accessing the system, the client does not need to expose own IP address to the outside, the risk of data leakage and attack is reduced, the client only interfaces the system, the difference between the PaaS platforms is shielded through the PaaS platform access unit, and the development difficulty of the client is reduced.
Drawings
Other features, objects and advantages of the present invention will become more apparent upon reading of the detailed description of non-limiting embodiments, made with reference to the following drawings, in which:
fig. 1 is a schematic structural diagram of an internet of things system according to an embodiment of the present invention;
Fig. 2 is a schematic structural diagram of another internet of things system according to an embodiment of the present invention.
Detailed Description
Referring to fig. 1 and 2, the present embodiment discloses an internet of things system deployed in a server on a public network address, the system comprising:
the Internet of things equipment access unit is used for receiving data uploaded by a plurality of Internet of things equipment and preprocessing the data;
The PaaS platform access unit is used for sending the data uploaded by the Internet of things equipment or the preprocessed data to the PaaS platform and requesting service from the PaaS platform;
and the client access processing unit is used for responding to the access request based on the public network address and requesting service from the PaaS platform according to the access request.
Fig. 1 is a schematic diagram of a domestic PaaS platform, and fig. 2 is a schematic diagram of a foreign PaaS platform.
According to the structure shown in fig. 1 and 2, through the internet of things system, a barrier and isolation function can be achieved among the client server, the internet of things equipment and the PaaS platform, so that the client server or the terminal does not need to expose own IP address, the client server can be prevented from being attacked, the internet of things equipment itself does not know the address of the server, and even if the internet of things equipment adopts a non-confidential mode to transfer data, the client server address exposure can not be caused. Meanwhile, as the client server is not directly connected with the PaaS platform, the Internet of things system of the scheme can be connected with the PaaS platform by adopting a special line, so that lower flow cost can be strived for the client, and the communication speed and the connection stability are convenient and more enhanced. In addition, the Internet of things equipment can be accessed to the system through directional flow, so that the use cost of a user can be saved.
In some embodiments, the internet of things device access unit communicates with a plurality of the internet of things devices based on an MQTT protocol;
the preprocessing of the data comprises the following steps:
at least one of deleting useless or duplicate data, performing numerical conversion on the data, or rejecting abnormal data.
In the embodiment, the system communicates with each Internet of things system based on the unified MQTT protocol, so that the workload of protocol matching development of clients can be reduced. In addition, the data of the Internet of things equipment are subjected to simple data cleaning and data conversion, so that on one hand, the communication traffic with the PaaS platform can be reduced, and the data conversion can be configured in the Internet of things system based on the needs of users, so that the Internet of things equipment does not need to independently develop the data conversion, and the acquired data can be directly uploaded. For example: the temperature integer data of 207 is read by the internet of things equipment, and the data is obtained by dividing 20.7 by 10. The data read from the three registers need to be converted by the formula to be the final data: a 0.7+b 1.3+c/100. The equipment end of the Internet of things needs to integrate too many operations, so that the software multiplexing degree is reduced.
Through the description, all the devices of the internet of things are uniformly connected to the same system. According to the unified Internet of things system, the large PaaS platform interfaces are in butt joint according to the PaaS selection of the client. For all the Internet of things devices accessing the system, only one Internet of things platform is seen, and the interference of the real PaaS platform is shielded. The leasing and account management of the PaaS platform are all carried out by the unified Internet of things system.
The system unifies various complex Internet of things protocols into an MQTT protocol (of course, other Internet of things protocols can be unified). The Internet of things equipment does not need to integrate various other protocols, so that development difficulty is reduced, and meanwhile, the software multiplexing degree is improved.
After the platform interface and the protocol are unified, the system provides the SDK used by android, linux and the singlechip. The internet of things device does not need to care about details of specific links, registration, etc., but rather care about implementation in other business logic.
The system unifies the Internet of things platform, and meanwhile, the Internet of things flow pool is purchased from an operator, and the Internet of things card is also provided. Still further, dedicated traffic may be purchased from the operator. Because the internet of things equipment only accesses the address of the public network, the cost of the traffic of the internet of things equipment can be further reduced by introducing the special traffic.
For a foreign server, the unified Internet of things platform also establishes a dedicated data channel from an operator. Since the account numbers of the clients are uniformly established by the system, a server of the region, such as japan, singapore, or korea, can be selected. Thus, the general 2 special lines can cover the connection of 4 main foreign PaaS platforms. The domestic Internet of things equipment is connected with a domestic deployed unified Internet of things platform, so that the system agent forwards data to a foreign server. This speed is much faster and much more stable than if the device were directly connected to a foreign server.
The client can build the platform by himself, and the connection address of the platform is informed when the Internet of things equipment is used, so that the position of the server is exposed. If encryption is not done, the security is not guaranteed. In particular, without the service of acting as a reverse proxy, all the background and databases are located on the same server, which is easy to cause greater loss. The unified internet of things platform only carries out the work of data proxy, and the database function does not exist, so that the risk of losing and revealing the client data is avoided. Meanwhile, the unified Internet of things platform agent is used for connecting a real background system, so that the connection address of the background is not exposed. All the safety work is ensured by the unified internet of things platform. The background design of the client can be ensured safely, or the difficulty of the design is greatly reduced.
According to the embodiment, the numerical calculation of the edge terminal diversity is transferred to the unified Internet of things system. According to different customer requirements, before each data is uploaded, javaScript codes are added for operation, and after final data is obtained, data forwarding is performed.
In some embodiments, the PaaS platform access unit accesses the PaaS platform based on a private line across the country. The number of the cross-country private lines is at least two, and the PaaS platform access unit is connected with the cross-country substation server through the cross-country private lines and then is accessed to the PaaS platform. And the two transnational substation servers connected by the transnational private line are mutually backed up.
As can be seen from the description in the previous embodiments, only two cross-country substation servers and two dedicated lines need to be deployed to access several mainstream PaaS platforms and complete redundant backups.
In some embodiments, the client access processing unit is further configured to:
And responding to the configuration request based on the public network address, and distributing resources and configuration service functions in a PaaS platform resource pool for the terminal of the configuration request. In this embodiment, because the present internet of things system shields the differences between PaaS platforms, that is, the present system may form a resource pool by purchasing PaaS resources, and then implement PaaS services by allocating resources from the resource pool when providing services for clients.
The Internet of things equipment accesses the Internet of things equipment access unit through the directional flow corresponding to the public network address. Because the system is deployed on a certain fixed public network address, the communication charge can be greatly reduced by purchasing the directional flow.
The data sent by the internet of things equipment to the internet of things equipment access unit are encrypted data, and the internet of things equipment access unit decrypts the encrypted data based on the decryption algorithm to obtain the original data. The scheme can improve the security performance of the scheme based on encrypted communication.
And in the Internet of things equipment, the SDK or the communication protocol library is selected based on the chip type and the operating system to communicate with the Internet of things equipment access unit. The preprocessing of the data is realized based on JavaScript codes.
And the Internet of things equipment is to be successfully docked with a certain Internet of things platform. Firstly, a proper communication protocol library or a version of the SDK is selected according to the type of the device chip and an operating system. And then according to the support of the platform or the requirements of clients, the task writing of registration, connection and data reporting under different protocols is solved. The repeatability and fragmentation of the development work of the Internet of things equipment are caused. Such as: and the android device of the ARM is provided with a CoAP protocol library for connecting with the development of the Azure platform. And installing an Http protocol library on the windows equipment of the X86 to connect with the development of the China mobile platform. MIPS's Linux equipment installs MQTT protocol library to connect with the Arian cloud, etc.
It will be appreciated that in the above embodiment, the protocol is mainly MQTT mode, and HTTP may be used if necessary. Therefore, only the connection flow aiming at the system is needed to be realized, and the access flow of other large platforms is responsible for completing the butt joint by the system. Meanwhile, no matter which target platform is, only one library and one SDK need to be introduced on the equipment, and a developer only needs to develop one App and become familiar with one set of rules, so that the butt joint work of a plurality of platforms can be completed.
In summary, the internet of things device access unit of the system accesses the internet of things device and preprocesses data, compared with the prior art, the internet of things device does not need to directly access a server and a background built by a client, so that the risk of exposing and attacking the address of the client is reduced, meanwhile, the internet of things access unit can reduce the hardware calculation difficulty of the client side by preprocessing the data, the large-scale deployment is more convenient, the client access processing unit of the system is based, the client only needs to access the system, can be connected to the PaaS platform through the system, and can not need to expose the IP address of the client to the outside, thereby reducing the risk of data leakage and attack, and the client only interfaces the system, and the system shields the difference between the PaaS platforms through the PaaS platform access unit, thereby reducing the development difficulty of the client.
It will be appreciated that computer program code for carrying out operations of embodiments of the present invention may be written in one or more programming languages, including an object oriented programming language such as Java, smalltalk, C ++ and conventional procedural programming languages, such as the "C" programming language or similar programming languages. The program code may execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any kind of network, including a Local Area Network (LAN) or a Wide Area Network (WAN), or may be connected to an external computer (for example, through the Internet using an Internet service provider).
The units involved in the embodiments of the present invention may be implemented in software or in hardware. The described units may also be provided in a processor, for example, described as: a processor includes a receiving unit, an obtaining unit, a first generating unit, and a second generating unit. The names of these units do not constitute a limitation on the unit itself in some cases, and for example, the receiving unit may also be described as "a unit that receives a query request sent by a terminal".
The above description is only illustrative of the preferred embodiments of the present invention and of the principles of the technology employed. It will be appreciated by those skilled in the art that the scope of the invention in the embodiments of the present invention is not limited to the specific combination of the above technical features, but also encompasses other technical features formed by any combination of the above technical features or their equivalents without departing from the spirit of the invention. Such as the above-described features, are mutually replaced with the technical features having similar functions (but not limited to) disclosed in the embodiments of the present invention.

Claims (6)

1. An internet of things system, characterized in that it is deployed in a server on a public network address, the system comprising:
the Internet of things equipment access unit is used for receiving data uploaded by a plurality of Internet of things equipment and preprocessing the data;
The PaaS platform access unit is used for sending the data uploaded by the Internet of things equipment or the preprocessed data to the PaaS platform and requesting service from the PaaS platform;
The client access processing unit is used for responding to the access request based on the public network address and requesting service from the PaaS platform according to the access request;
The PaaS platform access unit accesses the PaaS platform based on a nationwide private line;
The number of the cross-country private lines is at least two, and the PaaS platform access unit is connected with the cross-country substation server through the cross-country private lines and then is accessed to the PaaS platform;
the two transnational substation servers connected by the transnational private line are mutually backed up;
The client access processing unit is further configured to:
and responding to the configuration request based on the public network address, and distributing resources and configuration service functions in a PaaS platform resource pool for the terminal of the configuration request.
2. The internet of things system of claim 1, wherein the internet of things device access unit communicates with a plurality of the internet of things devices based on MQTT protocol;
the preprocessing of the data comprises the following steps:
at least one of deleting useless or duplicate data, performing numerical conversion on the data, or rejecting abnormal data.
3. The internet of things system of claim 1, wherein the internet of things device accesses the internet of things device access unit through directional traffic corresponding to the public network address.
4. The internet of things system according to claim 1, wherein the data sent by the internet of things device to the internet of things device access unit is encrypted data, and the internet of things device access unit decrypts the encrypted data based on a decryption algorithm to obtain the original data.
5. The internet of things system of claim 1, wherein in the internet of things device, a selection SDK or a communication protocol library based on a chip type and an operating system communicates with the internet of things device access unit.
6. The internet of things system of claim 1, wherein the preprocessing of the data is implemented based on JavaScript code.
CN202011258536.5A 2020-11-11 2020-11-11 Internet of things system Active CN112543223B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202011258536.5A CN112543223B (en) 2020-11-11 2020-11-11 Internet of things system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202011258536.5A CN112543223B (en) 2020-11-11 2020-11-11 Internet of things system

Publications (2)

Publication Number Publication Date
CN112543223A CN112543223A (en) 2021-03-23
CN112543223B true CN112543223B (en) 2024-05-10

Family

ID=75014040

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202011258536.5A Active CN112543223B (en) 2020-11-11 2020-11-11 Internet of things system

Country Status (1)

Country Link
CN (1) CN112543223B (en)

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109587228A (en) * 2018-11-23 2019-04-05 济南浪潮高新科技投资发展有限公司 A kind of publicly-owned agreement platform of internet of things and equipment cut-in method
CN109639790A (en) * 2018-12-06 2019-04-16 上海美亦健健康管理有限公司 A kind of distributed Internet of Things software architecture
CN110460656A (en) * 2019-08-01 2019-11-15 哈工大机器人(合肥)国际创新研究院 A kind of industry environmental protection Internet of Things remotely monitors cloud platform

Family Cites Families (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103475680B (en) * 2012-06-07 2018-12-11 南京中兴新软件有限责任公司 A kind of capability of Internet of things integrated approach and system
CN106911641A (en) * 2015-12-23 2017-06-30 索尼公司 For authorizing the client terminal device for accessing, server unit and access control system
US10970418B2 (en) * 2018-08-23 2021-04-06 Servicenow, Inc. System and method for anonymized data repositories

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109587228A (en) * 2018-11-23 2019-04-05 济南浪潮高新科技投资发展有限公司 A kind of publicly-owned agreement platform of internet of things and equipment cut-in method
CN109639790A (en) * 2018-12-06 2019-04-16 上海美亦健健康管理有限公司 A kind of distributed Internet of Things software architecture
CN110460656A (en) * 2019-08-01 2019-11-15 哈工大机器人(合肥)国际创新研究院 A kind of industry environmental protection Internet of Things remotely monitors cloud platform

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
基于MQTT协议的跨平台工业级物联网消息传输系统实现与设计;孙海滨;张敬超;;软件(第08期);全文 *

Also Published As

Publication number Publication date
CN112543223A (en) 2021-03-23

Similar Documents

Publication Publication Date Title
JP7203444B2 (en) Selectively provide mutual transport layer security using alternate server names
US6775700B2 (en) System and method for common information model object manager proxy interface and management
US20190141022A1 (en) On-premise and off-premise communication
CN109964451A (en) The virtual network service for checking credentials
US9088410B2 (en) Accessing local applications when roaming using a NFC mobile device
US20220311661A1 (en) System and method for automated information technology services management
CN103973785B (en) A kind of log read system and method based on P2P
US20200344112A1 (en) On-premise and off-premise debugging
US8595106B2 (en) System and method for detecting fraudulent financial transactions
CN112202744B (en) Multi-system data communication method and device
CN111522625B (en) Cloud data online evidence obtaining system and method
US11296981B2 (en) Serverless packet processing service with configurable exception paths
CN112543223B (en) Internet of things system
CN114285659A (en) Reverse proxy method, device, equipment and storage medium
JP2021511737A (en) Methods and equipment for trusted service management
CN115334150B (en) Data forwarding method, device, system, electronic equipment and medium
CN117336022A (en) Method, system, terminal and storage medium for authenticating power terminal in trusted WLAN
CN116366689A (en) Distributed industrial private cloud system
EP3972214B1 (en) Techniques to extend public cloud computing systems to a home of a user
CN107124411B (en) Virtual private cloud implementation method, device and system under classic network environment
JP2002032468A (en) System, device and method for information processing, and storage medium
US12040915B1 (en) Systems and methods for using serverless functions to call mainframe application programing interfaces
CN112134910B (en) Network request debugging method, device, equipment and storage medium
US10848418B1 (en) Packet processing service extensions at remote premises
Kryvenchuk et al. Organization of the network connection in the Industry 4.0

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
CB02 Change of applicant information
CB02 Change of applicant information

Address after: 511356 Room 501, building 2, No. 63, Yong'an Avenue, Huangpu District, Guangzhou, Guangdong

Applicant after: Guangzhou lubangtong Internet of things Technology Co.,Ltd.

Address before: 510653 room F315, 95 daguanzhong Road, Tianhe District, Guangzhou City, Guangdong Province

Applicant before: GUANGZHOU ROBUSTEL TECHNOLOGIES Co.,Ltd.

GR01 Patent grant
GR01 Patent grant