CN112948784B - Internet of Things terminal identity authentication method, computer storage medium and electronic device - Google Patents
Internet of Things terminal identity authentication method, computer storage medium and electronic device Download PDFInfo
- Publication number
- CN112948784B CN112948784B CN202110304930.6A CN202110304930A CN112948784B CN 112948784 B CN112948784 B CN 112948784B CN 202110304930 A CN202110304930 A CN 202110304930A CN 112948784 B CN112948784 B CN 112948784B
- Authority
- CN
- China
- Prior art keywords
- internet
- terminal
- registration
- things
- time
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
- G06F21/31—User authentication
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Theoretical Computer Science (AREA)
- Computer Hardware Design (AREA)
- Software Systems (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Computer And Data Communications (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
Abstract
Description
技术领域Technical Field
本申请涉及物联网技术，具体地，涉及一种物联网终端身份认证方法、计算机存储介质及电子设备。The present application relates to Internet of Things technology, and specifically, to an Internet of Things terminal identity authentication method, a computer storage medium, and an electronic device.
背景技术Background technique
随着物联网应用领域的不断扩展，接入物联网的终端数量呈指数增长,且种类各异，使用场景和使用类型也更加复杂化，物联网在给我们日常生活带来便利和舒适的同时，也带来了一系列的安全问题。With the continuous expansion of the application fields of the Internet of Things, the number of terminals connected to the Internet of Things has increased exponentially, and the types of terminals vary. The usage scenarios and types of terminals have also become more complicated. While the Internet of Things brings convenience and comfort to our daily lives, it also brings a series of security issues.
未经认证的终端接入物联网后，会给网络带来巨大的安全隐患，物联网中大多数终端的智能化程度较低，这样，互联网中广泛使用的认证技术就不能直接用来认证物联网终端，终端认证作为物联网安全的第一道屏障，是目前亟需解决的问题。When unauthenticated terminals are connected to the Internet of Things, it will bring huge security risks to the network. Most terminals in the Internet of Things have a low level of intelligence. Therefore, the authentication technology widely used on the Internet cannot be directly used to authenticate Internet of Things terminals. Terminal authentication, as the first barrier to Internet of Things security, is an issue that needs to be urgently resolved.
发明内容Summary of the invention
本申请实施例中提供了一种物联网终端身份认证方法、计算机存储介质及电子设备，以解决上述技术问题。The embodiments of the present application provide an Internet of Things terminal identity authentication method, a computer storage medium, and an electronic device to solve the above technical problems.
根据本申请实施例的第一个方面，提供了一种物联网终端身份认证方法，应用于物联网终端，所述方法包括：According to a first aspect of an embodiment of the present application, there is provided an Internet of Things terminal identity authentication method, which is applied to an Internet of Things terminal, and the method includes:
基于验证公式及当前时间生成验证数；Generate a verification number based on the verification formula and the current time;
获取所述物联网终端的注册时间；Obtaining the registration time of the IoT terminal;
通过私钥对所述注册时间以及所述当前时间进行加密；Encrypting the registration time and the current time by using a private key;
将所述物联网终端的标识、验证数、加密后的注册时间和加密后的当前时间发送至工业企业平台，以使所述工业企业平台基于所述物联网终端的标识、验证数、加密后的注册时间和加密后的当前时间对所述物联网终端进行身份认证。The identification, verification number, encrypted registration time and encrypted current time of the Internet of Things terminal are sent to the industrial enterprise platform, so that the industrial enterprise platform performs identity authentication on the Internet of Things terminal based on the identification, verification number, encrypted registration time and encrypted current time of the Internet of Things terminal.
可选地，所述方法还包括：Optionally, the method further comprises:
向工业标识管理平台发送标识注册申请，以使所述工业标识管理平台根据所述注册申请对所述物联网终端进行注册，得到所述物联网终端的标识、注册时间、私钥、公钥、验证公式，并将所述物联网终端的标识、注册时间、私钥、公钥、验证公式存储于区块链上；Sending an identification registration application to the industrial identification management platform, so that the industrial identification management platform registers the Internet of Things terminal according to the registration application, obtains the identification, registration time, private key, public key, and verification formula of the Internet of Things terminal, and stores the identification, registration time, private key, public key, and verification formula of the Internet of Things terminal on the blockchain;
接收所述工业标识管理平台反馈的物联网终端的标识、注册时间、私钥和验证公式。Receive the identification, registration time, private key and verification formula of the Internet of Things terminal fed back by the industrial identification management platform.
可选地，所述标识为分散式标识符DID；Optionally, the identifier is a decentralized identifier DID;
所述注册申请中包括所述物联网终端的出厂标号；The registration application includes the factory number of the IoT terminal;
所述验证公式为k的r次方+当前时间的哈希值，其中，k为出厂标号的二进制码右移m位后的值，m为DID最低位的十进制值与3的商的上取整。The verification formula is k to the power of r + the hash value of the current time, where k is the value of the binary code of the factory label shifted right by m bits, and m is the upper integer of the quotient of the decimal value of the lowest bit of the DID and 3.
根据本申请实施例的第二个方面，提供一种物联网终端身份认证方法，应用于工业标识管理平台，所述方法包括：According to a second aspect of an embodiment of the present application, there is provided an Internet of Things terminal identity authentication method, which is applied to an industrial identification management platform, and the method includes:
获取物联网终端发送的标识注册申请；Obtain the identification registration application sent by the IoT terminal;
根据所述标识注册申请对所述物联网终端进行注册，得到所述物联网终端的标识、注册时间、私钥、公钥、验证公式，并将所述物联网终端的标识、注册时间、私钥、公钥、验证公式存储于区块链上；Register the IoT terminal according to the identification registration application, obtain the identification, registration time, private key, public key, and verification formula of the IoT terminal, and store the identification, registration time, private key, public key, and verification formula of the IoT terminal on the blockchain;
向所述物联网终端反馈所述物联网终端的标识、注册时间和私钥，以使所述物联网终端基于所述物联网终端的标识、注册时间和私钥完成身份认证。The identifier, registration time and private key of the Internet of Things terminal are fed back to the Internet of Things terminal, so that the Internet of Things terminal completes identity authentication based on the identifier, registration time and private key of the Internet of Things terminal.
可选地，所述标识为分散式标识符DID；Optionally, the identifier is a decentralized identifier DID;
所述注册申请中包括所述物联网终端的出厂标号；The registration application includes the factory number of the IoT terminal;
所述根据所述标识注册申请对所述物联网终端进行注册，得到所述物联网终端的标识、注册时间、私钥、公钥、验证公式，包括：The step of registering the IoT terminal according to the identification registration application to obtain the identification, registration time, private key, public key, and verification formula of the IoT terminal includes:
将所述标识注册申请的接收时间作为注册时间；The time of receipt of the logo registration application is used as the registration time;
根据预设的DID生成规则，生成所述物联网终端的DID、私钥、公钥；Generate the DID, private key, and public key of the IoT terminal according to the preset DID generation rules;
根据所述注册时间生成随机数r；Generate a random number r according to the registration time;
确定验证公式为k的r次方+当前时间的哈希值，其中，k为出厂标号的二进制码右移m位后的值，m为DID最低位的十进制值与3的商的上取整。The verification formula is determined to be k to the power of r + the hash value of the current time, where k is the value of the binary code of the factory label shifted right by m bits, and m is the quotient of the decimal value of the lowest bit of the DID and 3, rounded up.
根据本申请实施例的第三个方面，提供一种物联网终端身份认证方法，应用于工业企业平台，所述方法包括：According to a third aspect of an embodiment of the present application, there is provided an Internet of Things terminal identity authentication method, which is applied to an industrial enterprise platform, and the method includes:
获取物联网终端的标识、所述物联网终端基于验证公式及当前时间生成的验证数、所述物联网终端通过私钥加密的注册时间和所述物联网终端通过私钥加密的当前时间；Obtaining an identification of an Internet of Things terminal, a verification number generated by the Internet of Things terminal based on a verification formula and a current time, a registration time of the Internet of Things terminal encrypted by a private key, and a current time of the Internet of Things terminal encrypted by a private key;
从区块链中获取所述物联网终端的标识对应的注册时间、公钥和验证公式；Obtaining the registration time, public key and verification formula corresponding to the identifier of the IoT terminal from the blockchain;
通过所述公钥对加密的注册时间和加密的当前时间进行解密；Decrypting the encrypted registration time and the encrypted current time by using the public key;
若解密得到的注册时间与区块链中获取的标识注册时间相同，且基于解密得到的当前时间和所述验证公式得到的值与所述验证数相同，则确定所述物联网终端身份认证成功。If the registration time obtained by decryption is the same as the identification registration time obtained in the blockchain, and the value obtained based on the current time obtained by decryption and the verification formula is the same as the verification number, it is determined that the Internet of Things terminal identity authentication is successful.
可选地，所述物联网终端标识为分散式标识符DID。Optionally, the IoT terminal identifier is a decentralized identifier DID.
可选地，所述方法还包括：所述验证公式为k的r次方+当前时间的哈希值，其中，k为出厂标号的二进制码右移m位后的值，m为DID最低位的十进制值与3的商的上取整；Optionally, the method further includes: the verification formula is k to the power of r + the hash value of the current time, wherein k is the value of the binary code of the factory label shifted right by m bits, and m is the upper integer of the quotient of the decimal value of the lowest bit of the DID and 3;
所述基于所述当前时间和所述验证公式得到的值为k的r次方+解密得到的当前时间的哈希值。The value obtained based on the current time and the verification formula is k to the power of r + the hash value of the current time obtained by decryption.
根据本申请实施例的第四个方面，提供一种计算机存储介质，其上存储有计算机程序，所述计算机程序被处理器执行时实现如上第一个方面，或者，第二个方面，或者第三个方面所述方法的步骤。According to a fourth aspect of an embodiment of the present application, a computer storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps of the method described in the first aspect, or the second aspect, or the third aspect are implemented.
根据本申请实施例的第五个方面，提供一种电子设备，其特征在于，包括存储器、以及一个或多个处理器，所述存储器用于存储一个或多个程序；所述一个或多个程序被所述一个或多个处理器执行时，实现如上第一个方面，或者，第二个方面，或者第三个方面所述的方法。According to the fifth aspect of the embodiments of the present application, an electronic device is provided, characterized in that it includes a memory and one or more processors, the memory is used to store one or more programs; when the one or more programs are executed by the one or more processors, the method described in the first aspect, or the second aspect, or the third aspect is implemented.
本实施例中提供的方案中，基于验证公式及当前时间生成验证数，将物联网终端标识、验证数、加密后的注册时间和加密后的当前时间发送至工业企业平台，以使工业企业平台基于物联网终端标识、验证数、加密后的注册时间和加密后的当前时间完成物联网终端的身份验证。In the solution provided in this embodiment, a verification number is generated based on the verification formula and the current time, and the Internet of Things terminal identification, verification number, encrypted registration time and encrypted current time are sent to the industrial enterprise platform, so that the industrial enterprise platform completes the identity authentication of the Internet of Things terminal based on the Internet of Things terminal identification, verification number, encrypted registration time and encrypted current time.
附图说明BRIEF DESCRIPTION OF THE DRAWINGS
此处所说明的附图用来提供对本申请的进一步理解，构成本申请的一部分，本申请的示意性实施例及其说明用于解释本申请，并不构成对本申请的不当限定。在附图中：The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:
图1示出了本申请实施例中提供的第一种物联网终端身份认证方法的流程示意图；FIG1 is a schematic diagram showing a flow chart of a first method for authenticating an identity of an IoT terminal provided in an embodiment of the present application;
图2示出了本申请实施例中提供的第二种物联网终端身份认证方法的流程示意图；FIG2 is a schematic diagram showing a flow chart of a second method for authenticating an identity of an IoT terminal provided in an embodiment of the present application;
图3示出了本申请实施例中提供的第三种物联网终端身份认证方法的流程示意图；FIG3 shows a schematic diagram of a process flow of a third IoT terminal identity authentication method provided in an embodiment of the present application;
图4示出了本申请实施例中提供的第四种物联网终端身份认证方法的流程示意图；FIG4 shows a schematic diagram of a fourth method for authenticating an identity of an IoT terminal provided in an embodiment of the present application;
图5示出了本申请实施例中提供的第五种物联网终端身份认证方法的实现架构示意图；FIG5 shows a schematic diagram of an implementation architecture of a fifth IoT terminal identity authentication method provided in an embodiment of the present application;
图6示出了本申请实施例中提供的一种电子设备的结构示意图。FIG6 shows a schematic structural diagram of an electronic device provided in an embodiment of the present application.
具体实施方式Detailed ways
随着物联网应用领域的不断扩展，接入物联网的终端数量呈指数增长,且种类各异，这些种类各异，数量众多的物联网终端在使网络更加多样化，使我们日常生活更加舒适的同时，也带来了一系列的安全问题。未经认证的终端接入物联网后，会给网络带来巨大的安全隐患，物联网中大多数终端的智能较低，这样，在互联网中被广泛使用的认证的技术就不能直接用来认证物联网终端，作为一个物联网安全的第一道屏障的终端认证，是目前急需解决的问题。With the continuous expansion of the application field of the Internet of Things, the number of terminals connected to the Internet of Things has increased exponentially, and the types are different. These various types and large numbers of Internet of Things terminals make the network more diversified and make our daily life more comfortable, but they also bring a series of security issues. When unauthenticated terminals are connected to the Internet of Things, it will bring huge security risks to the network. Most terminals in the Internet of Things have low intelligence. In this way, the authentication technology widely used on the Internet cannot be directly used to authenticate the Internet of Things terminals. As the first barrier to the security of the Internet of Things, terminal authentication is an issue that needs to be solved urgently.
基于此，本申请提供一种物联网终端身份认证方法，基于验证公式及当前时间生成验证数，将物联网终端标识、验证数、加密后的注册时间和加密后的当前时间发送至工业企业平台，以使工业企业平台基于物联网终端标识、验证数、加密后的注册时间和加密后的当前时间完成物联网终端的身份验证。Based on this, the present application provides an IoT terminal identity authentication method, which generates a verification number based on a verification formula and the current time, and sends the IoT terminal identification, verification number, encrypted registration time and encrypted current time to the industrial enterprise platform, so that the industrial enterprise platform completes the identity authentication of the IoT terminal based on the IoT terminal identification, verification number, encrypted registration time and encrypted current time.
参见图1，本实施例提供的应用于物联网终端的物联网终端身份认证方法具体包括：Referring to FIG. 1 , the IoT terminal identity authentication method provided in this embodiment for use in an IoT terminal specifically includes:
101，基于验证公式及当前时间生成验证数。101, generate a verification number based on the verification formula and the current time.
102，获取物联网终端的注册时间。102. Obtain the registration time of the IoT terminal.
103，通过私钥对注册时间以及当前时间进行加密。103, encrypt the registration time and the current time by using the private key.
104，将物联网终端的标识、验证数、加密后的注册时间和加密后的当前时间发送至工业企业平台，以使工业企业平台基于物联网终端的标识、验证数、加密后的注册时间和加密后的当前时间对物联网终端进行身份认证。104, sending the identification, verification number, encrypted registration time and encrypted current time of the IoT terminal to the industrial enterprise platform, so that the industrial enterprise platform performs identity authentication on the IoT terminal based on the identification, verification number, encrypted registration time and encrypted current time of the IoT terminal.
其中，在执行步骤101之前，还会向工业标识管理平台发送标识注册申请，以使工业标识管理平台根据注册申请对物联网终端进行注册，得到物联网终端的标识、注册时间、私钥、公钥、验证公式，并将物联网终端的标识、注册时间、私钥、公钥、验证公式存储于区块链上。Among them, before executing step 101, an identification registration application will be sent to the industrial identification management platform, so that the industrial identification management platform will register the Internet of Things terminal according to the registration application, obtain the identification, registration time, private key, public key, and verification formula of the Internet of Things terminal, and store the identification, registration time, private key, public key, and verification formula of the Internet of Things terminal on the blockchain.
接收工业标识管理平台反馈的物联网终端的标识、注册时间、私钥和验证公式。Receive the IoT terminal's identification, registration time, private key, and verification formula fed back by the industrial identification management platform.
另外，标识为分散式标识符DID。In addition, the identifier is a decentralized identifier DID.
注册申请中包括物联网终端的出厂标号。The registration application includes the factory label number of the IoT terminal.
验证公式为k的r次方+当前时间的哈希值，其中，k为出厂标号的二进制码右移m位后的值，m为DID最低位的十进制值与3的商的上取整。The verification formula is k to the power of r + the hash value of the current time, where k is the value of the binary code of the factory label shifted right by m bits, and m is the quotient of the decimal value of the lowest bit of the DID and 3, rounded up.
本实施例提供的方法，物联网终端基于验证公式及当前时间生成验证数，将物联网终端标识、验证数、加密后的注册时间和加密后的当前时间发送至工业企业平台，以使工业企业平台基于物联网终端标识、验证数、加密后的注册时间和加密后的当前时间完成物联网终端的身份验证。The method provided in this embodiment is that the Internet of Things terminal generates a verification number based on the verification formula and the current time, and sends the Internet of Things terminal identification, verification number, encrypted registration time and encrypted current time to the industrial enterprise platform, so that the industrial enterprise platform completes the identity authentication of the Internet of Things terminal based on the Internet of Things terminal identification, verification number, encrypted registration time and encrypted current time.
参见图2，本实施例提供的应用于工业标识管理平台的物联网终端身份认证方法具体包括：Referring to FIG. 2 , the IoT terminal identity authentication method applied to the industrial identification management platform provided in this embodiment specifically includes:
201，获取物联网终端发送的标识注册申请。201, obtaining the identification registration application sent by the IoT terminal.
202，根据标识注册申请对物联网终端进行注册，得到物联网终端的标识、注册时间、私钥、公钥、验证公式，并将物联网终端的标识、注册时间、私钥、公钥、验证公式存储于区块链上。202. Register the IoT terminal according to the identification registration application, obtain the identification, registration time, private key, public key, and verification formula of the IoT terminal, and store the identification, registration time, private key, public key, and verification formula of the IoT terminal on the blockchain.
203，向物联网终端反馈物联网终端的标识、注册时间和私钥，以使物联网终端基于物联网终端的标识、注册时间和私钥完成身份认证。203 , feeding back the identifier, registration time and private key of the IoT terminal to the IoT terminal, so that the IoT terminal completes identity authentication based on the identifier, registration time and private key of the IoT terminal.
其中，标识为分散式标识符DID。Among them, the identifier is a decentralized identifier DID.
注册申请中包括物联网终端的出厂标号。The registration application includes the factory label number of the IoT terminal.
另外，根据标识注册申请对物联网终端进行注册，得到物联网终端的标识、注册时间、私钥、公钥、验证公式，具体包括：In addition, the IoT terminal is registered according to the identification registration application to obtain the IoT terminal's identification, registration time, private key, public key, and verification formula, including:
将标识注册申请的接收时间作为注册时间。The time when the registration application is received shall be regarded as the registration time.
根据预设的DID生成规则，生成物联网终端的DID、私钥、公钥。Generate the DID, private key, and public key of the IoT terminal according to the preset DID generation rules.
根据注册时间生成随机数r。Generate a random number r according to the registration time.
确定验证公式为k的r次方+当前时间的哈希值，其中，k为出厂标号的二进制码右移m位后的值，m为DID最低位的十进制值与3的商的上取整。The verification formula is determined to be k to the power of r + the hash value of the current time, where k is the value of the binary code of the factory label shifted right by m bits, and m is the quotient of the decimal value of the lowest bit of the DID and 3, rounded up.
本体是实施例提供的方法，工业标识管理平台获取物联网终端发送的标识注册申请。根据标识注册申请对物联网终端进行注册，得到物联网终端的标识、注册时间、私钥、公钥、验证公式，并将物联网终端的标识、注册时间、私钥、公钥、验证公式存储于区块链上。向物联网终端反馈物联网终端的标识、注册时间和私钥，以使物联网终端基于物联网终端的标识、注册时间和私钥完成身份认证，实现了物联终端的身份认证。The main body is the method provided in the embodiment, and the industrial identification management platform obtains the identification registration application sent by the IoT terminal. The IoT terminal is registered according to the identification registration application, and the identification, registration time, private key, public key, and verification formula of the IoT terminal are obtained, and the identification, registration time, private key, public key, and verification formula of the IoT terminal are stored on the blockchain. The identification, registration time, and private key of the IoT terminal are fed back to the IoT terminal, so that the IoT terminal completes identity authentication based on the identification, registration time, and private key of the IoT terminal, thereby realizing identity authentication of the IoT terminal.
参见图3，本实施例提供的应用于工业企业平台的物联网终端身份认证方法具体包括：Referring to FIG. 3 , the IoT terminal identity authentication method applied to the industrial enterprise platform provided in this embodiment specifically includes:
301，获取物联网终端的标识、物联网终端基于验证公式及当前时间生成的验证数、物联网终端通过私钥加密的注册时间和物联网终端通过私钥加密的当前时间。301, obtaining the identifier of the IoT terminal, the verification number generated by the IoT terminal based on the verification formula and the current time, the registration time of the IoT terminal encrypted by the private key, and the current time of the IoT terminal encrypted by the private key.
302，从区块链中获取物联网终端的标识对应的注册时间、公钥和验证公式。302, obtaining the registration time, public key and verification formula corresponding to the identifier of the IoT terminal from the blockchain.
303，通过公钥对加密的注册时间和加密的当前时间进行解密。303. Decrypt the encrypted registration time and the encrypted current time using the public key.
304，若解密得到的注册时间与区块链中获取的标识注册时间相同，且基于解密得到的当前时间和验证公式得到的值与验证数相同，则确定物联网终端身份认证成功。304. If the registration time obtained by decryption is the same as the registration time of the identifier obtained in the blockchain, and the value obtained based on the current time obtained by decryption and the verification formula is the same as the verification number, it is determined that the IoT terminal identity authentication is successful.
其中，物联网终端标识为分散式标识符DID。Among them, the IoT terminal is identified by a decentralized identifier DID.
验证公式为k的r次方+当前时间的哈希值，其中，k为出厂标号的二进制码右移m位后的值，m为DID最低位的十进制值与3的商的上取整。The verification formula is k to the power of r + the hash value of the current time, where k is the value of the binary code of the factory label shifted right by m bits, and m is the quotient of the decimal value of the lowest bit of the DID and 3, rounded up.
基于当前时间和验证公式得到的值为k的r次方+解密得到的当前时间的哈希值。The value obtained based on the current time and the verification formula is k to the power of r + the hash value of the current time obtained by decryption.
本实施例提供的方法，工业企业平台获取物联网终端的标识、物联网终端基于验证公式及当前时间生成的验证数、物联网终端通过私钥加密的注册时间和物联网终端通过私钥加密的当前时间。从区块链中获取物联网终端的标识对应的注册时间、公钥和验证公式。通过公钥对加密的注册时间和加密的当前时间进行解密，若解密得到的注册时间与区块链中获取的标识注册时间相同，且基于解密得到的当前时间和验证公式得到的值与验证数相同，则确定物联网终端身份认证成功，实现了物联终端的身份认证。In the method provided in this embodiment, the industrial enterprise platform obtains the identification of the IoT terminal, the verification number generated by the IoT terminal based on the verification formula and the current time, the registration time encrypted by the IoT terminal through the private key, and the current time encrypted by the IoT terminal through the private key. The registration time, public key, and verification formula corresponding to the identification of the IoT terminal are obtained from the blockchain. The encrypted registration time and the encrypted current time are decrypted by the public key. If the registration time obtained by decryption is the same as the registration time of the identification obtained in the blockchain, and the value obtained based on the decrypted current time and the verification formula is the same as the verification number, it is determined that the IoT terminal identity authentication is successful, and the IoT terminal identity authentication is achieved.
下面参见图4，在由物联网终端、工业标识管理平台和工业企业平台组成的系统中，本实施例提供的物联网终端身份认证方法实现流程如下：Referring to FIG. 4 below, in a system consisting of an IoT terminal, an industrial identification management platform, and an industrial enterprise platform, the implementation process of the IoT terminal identity authentication method provided in this embodiment is as follows:
401，物联网终端向工业标识管理平台发送标识注册申请。401, the IoT terminal sends an identification registration application to the industrial identification management platform.
其中，注册申请中可以包括物联网终端的出厂标号。Among them, the registration application can include the factory number of the IoT terminal.
出厂标号为物联网终端出厂时由物联网终端的厂商写入该物联网终端中红。The factory label is written into the IoT terminal by the manufacturer of the IoT terminal when the IoT terminal leaves the factory.
402，工业标识管理平台获取物联网终端发送的标识注册申请。402. The industrial identification management platform obtains the identification registration application sent by the IoT terminal.
403，工业标识管理平台根据标识注册申请对物联网终端进行注册，得到物联网终端的标识、注册时间、私钥、公钥、验证公式，并将物联网终端的标识、注册时间、私钥、公钥、验证公式存储于区块链上。403. The industrial identification management platform registers the IoT terminal according to the identification registration application, obtains the identification, registration time, private key, public key, and verification formula of the IoT terminal, and stores the identification, registration time, private key, public key, and verification formula of the IoT terminal on the blockchain.
其中，物联网终端的标识可以为DID（Decentralized Identifier，分散式标识符）。DID独立于任何集中注册表，身份提供者或证书颁发机构，是一个全局唯一的身份标识，具有全球唯一性、可解析性高、可加密、并且能够加密验证的特点。DID文档是一个JSON-LD Object，包括6个部分（都是optional的）：1.DID标识符；2.一个加密材料的集合。比如公钥；3.一个加密协议的集合；4.一个服务端点的集合；5.时间戳；6.一个可选的JSON-LD签名，该签名用来证明这个DID文档是合法的。Among them, the identifier of the IoT terminal can be DID (Decentralized Identifier). DID is independent of any centralized registry, identity provider or certificate authority. It is a globally unique identifier with global uniqueness, high resolvability, encryption, and cryptographic verification. The DID document is a JSON-LD Object, which includes 6 parts (all optional): 1. DID identifier; 2. A collection of cryptographic materials. For example, a public key; 3. A collection of encryption protocols; 4. A collection of service endpoints; 5. Timestamp; 6. An optional JSON-LD signature, which is used to prove that the DID document is legal.
若注册申请中可以包括物联网终端的出厂标号，则本步骤中根据标识注册申请对物联网终端进行注册，得到物联网终端的标识、注册时间、私钥、公钥、验证公式的具体实现方式为：If the registration application can include the factory label of the IoT terminal, the IoT terminal is registered according to the identification registration application in this step, and the specific implementation method of obtaining the IoT terminal's identification, registration time, private key, public key, and verification formula is as follows:
1、将标识注册申请的接收时间作为注册时间。1. The time of receipt of the logo registration application shall be regarded as the registration time.
2、根据预设的DID生成规则，生成物联网终端的DID、私钥、公钥。2. Generate the DID, private key, and public key of the IoT terminal according to the preset DID generation rules.
3、根据注册时间生成随机数r。3. Generate a random number r based on the registration time.
此部分可采用现有的基于时间生成随机数的方案，此处不再进行限定。This part can adopt the existing scheme of generating random numbers based on time, which is not limited here.
4、确定验证公式为k的r次方+当前时间的哈希值。4. Determine the verification formula as k to the power of r + the hash value of the current time.
其中，k的r次方为kr，即验证公式为kr+当前时间的哈希值。k为出厂标号的二进制码右移m位后的值，即k=出厂标号的二进制码>>m，m为DID最低位的十进制值与3的商的上取整。Among them, k to the power of r is k r , that is, the verification formula is k r + the hash value of the current time. k is the value of the binary code of the factory label after shifting right by m bits, that is, k=binary code of the factory label>>m, and m is the decimal value of the lowest bit of the DID and the quotient of 3, rounded up.
即，m为X的上取整值，X=DID最低位的十进制值/3。That is, m is the upper integer value of X, X=the decimal value of the lowest digit of DID/3.
若DID最低位为1，则m为1，即1/3=0.333的上取整。If the lowest bit of DID is 1, then m is 1, which is the upper integer of 1/3=0.333.
此公式中的当前时间的哈希值是个变量，是在使用验证公式的时间的哈希值。The hash value of the current time in this formula is a variable, which is the hash value of the time when the verification formula is used.
404，工业标识管理平台向物联网终端反馈物联网终端的标识、注册时间和私钥。404. The industrial identification management platform feeds back the identification, registration time and private key of the IoT terminal to the IoT terminal.
405，物联网终端接收工业标识管理平台反馈的物联网终端的标识、注册时间、私钥和验证公式。405, the IoT terminal receives the IoT terminal's identification, registration time, private key, and verification formula fed back by the industrial identification management platform.
上述步骤401至405为物联网终端的激活流程，上述激活流程并非每次进行物联网终端身份认证时均需执行的步骤，而是首次进行身份认证时执行的步骤，或者，当物联网终端的标识、注册时间、私钥和验证公式中的一个或多个发生变化时执行的步骤。The above steps 401 to 405 are the activation process of the Internet of Things terminal. The above activation process is not a step that needs to be executed every time the Internet of Things terminal identity authentication is performed, but a step executed when the identity authentication is performed for the first time, or when one or more of the identification, registration time, private key and verification formula of the Internet of Things terminal changes.
406，物联网终端基于验证公式及当前时间生成验证数。406. The IoT terminal generates a verification number based on the verification formula and the current time.
由于在激活阶段物联网终端已经得到工业标识管理平台反馈的物联网终端的标识、注册时间、私钥和验证公式，此步骤将当前时间带入验证公式：k的r次方+当前时间的哈希值即可。Since the IoT terminal has obtained the IoT terminal's identification, registration time, private key and verification formula from the industrial identification management platform during the activation phase, this step will bring the current time into the verification formula: k to the power of r + the hash value of the current time.
407，物联网终端获取物联网终端的注册时间。407, the IoT terminal obtains the registration time of the IoT terminal.
408，物联网终端通过私钥对注册时间以及当前时间进行加密。408, the IoT terminal encrypts the registration time and the current time using the private key.
409，物联网终端将物联网终端的标识、验证数、加密后的注册时间和加密后的当前时间发送至工业企业平台。409, the IoT terminal sends the IoT terminal's identification, verification number, encrypted registration time, and encrypted current time to the industrial enterprise platform.
410，工业企业平台获取物联网终端的标识、物联网终端基于验证公式及当前时间生成的验证数、物联网终端通过私钥加密的注册时间和物联网终端通过私钥加密的当前时间。410, the industrial enterprise platform obtains the identification of the IoT terminal, the verification number generated by the IoT terminal based on the verification formula and the current time, the registration time of the IoT terminal encrypted by the private key, and the current time of the IoT terminal encrypted by the private key.
411，工业企业平台从区块链中获取物联网终端的标识对应的注册时间、公钥和验证公式。411, the industrial enterprise platform obtains the registration time, public key and verification formula corresponding to the identifier of the IoT terminal from the blockchain.
412，工业企业平台通过公钥对加密的注册时间和加密的当前时间进行解密。412, the industrial enterprise platform decrypts the encrypted registration time and the encrypted current time through the public key.
413，若解密得到的注册时间与区块链中获取的标识注册时间相同，且基于解密得到的当前时间和验证公式得到的值与验证数相同，则工业企业平台确定物联网终端身份认证成功。413. If the registration time obtained by decryption is the same as the registration time of the identifier obtained in the blockchain, and the value obtained based on the current time obtained by decryption and the verification formula is the same as the verification number, the industrial enterprise platform determines that the IoT terminal identity authentication is successful.
本实施例提供的方法，工业企业平台将物联网终端发送的注册时间和验证数与基于区块链得到的注册时间和验证数进行比对，若均相同则认证成功，实现了物联网终端的安全认证。In the method provided in this embodiment, the industrial enterprise platform compares the registration time and verification number sent by the IoT terminal with the registration time and verification number obtained based on the blockchain. If they are the same, the authentication is successful, thereby achieving secure authentication of the IoT terminal.
另外，在工业企业平台确定物联网终端身份认证成功之后，还会接收认证后的物联网终端发送的数据，进行处理及存储。In addition, after the industrial enterprise platform determines that the IoT terminal identity authentication is successful, it will also receive the data sent by the authenticated IoT terminal for processing and storage.
下面再以图5所示的架构为例，对上述方法再次进行说明。The above method is further described below by taking the architecture shown in FIG. 5 as an example.
步骤1，通过工业标识管理激活物联网终端。Step 1: Activate the IoT terminal through industrial identity management.
此时，工业标识管理平台对物联网终端进行注册，得到物联网终端的标识、注册时间、私钥、公钥、验证公式，并将物联网终端的标识、注册时间、私钥、公钥、验证公式存储于区块链上，同时将物联网终端的标识、注册时间、私钥和验证公式发送给物联网终端。At this time, the industrial identification management platform registers the IoT terminal, obtains the IoT terminal's identification, registration time, private key, public key, and verification formula, and stores the IoT terminal's identification, registration time, private key, public key, and verification formula on the blockchain. At the same time, the IoT terminal's identification, registration time, private key, and verification formula are sent to the IoT terminal.
本步骤对应上述步骤401至405。This step corresponds to the above steps 401 to 405.
步骤2，物联网终端基于标识、注册时间、私钥和验证公式得到标识、验证数、加密后的注册时间和加密后的当前时间，并将标识、验证数、加密后的注册时间和加密后的当前时间发送至工业企业平台。Step 2: The IoT terminal obtains the identification, verification number, encrypted registration time and encrypted current time based on the identification, registration time, private key and verification formula, and sends the identification, verification number, encrypted registration time and encrypted current time to the industrial enterprise platform.
本步骤对应上述步骤406至409。This step corresponds to the above steps 406 to 409.
步骤3，工业企业平台从区块链中获取物联网终端的标识对应的注册时间、公钥和验证公式，并基于区块链获取到的注册时间、公钥和验证公式以及物联网终端发送的标识、验证数、加密后的注册时间和加密后的当前时间进行身份认证。Step 3: The industrial enterprise platform obtains the registration time, public key and verification formula corresponding to the IoT terminal's identifier from the blockchain, and performs identity authentication based on the registration time, public key and verification formula obtained from the blockchain and the identifier, verification number, encrypted registration time and encrypted current time sent by the IoT terminal.
本步骤对应上述步骤410至413。This step corresponds to the above steps 410 to 413.
本实施例提供的方法，基于验证公式及当前时间生成验证数，将物联网终端标识、验证数、加密后的注册时间和加密后的当前时间发送至工业企业平台，以使工业企业平台基于物联网终端标识、验证数、加密后的注册时间和加密后的当前时间完成物联网终端的身份验证。The method provided in this embodiment generates a verification number based on a verification formula and the current time, and sends the IoT terminal identification, verification number, encrypted registration time and encrypted current time to the industrial enterprise platform, so that the industrial enterprise platform completes the identity authentication of the IoT terminal based on the IoT terminal identification, verification number, encrypted registration time and encrypted current time.
基于同一发明构思，本实施例提供了一种计算机存储介质，其上存储有计算机程序。Based on the same inventive concept, this embodiment provides a computer storage medium on which a computer program is stored.
若所述计算机存储介质位于物联网终端，则所述程序被处理器执行时实现如下步骤。If the computer storage medium is located in the IoT terminal, the following steps are implemented when the program is executed by the processor.
基于验证公式及当前时间生成验证数。Generates a verification number based on the verification formula and the current time.
获取物联网终端的注册时间。Get the registration time of the IoT terminal.
通过私钥对注册时间以及当前时间进行加密。The registration time and current time are encrypted using a private key.
将物联网终端的标识、验证数、加密后的注册时间和加密后的当前时间发送至工业企业平台，以使工业企业平台基于物联网终端的标识、验证数、加密后的注册时间和加密后的当前时间对物联网终端进行身份认证。The identification, verification number, encrypted registration time and encrypted current time of the IoT terminal are sent to the industrial enterprise platform, so that the industrial enterprise platform can authenticate the IoT terminal based on the identification, verification number, encrypted registration time and encrypted current time of the IoT terminal.
可选地，方法还包括：Optionally, the method further comprises:
向工业标识管理平台发送标识注册申请，以使工业标识管理平台根据注册申请对物联网终端进行注册，得到物联网终端的标识、注册时间、私钥、公钥、验证公式，并将物联网终端的标识、注册时间、私钥、公钥、验证公式存储于区块链上。Send an identification registration application to the industrial identification management platform so that the industrial identification management platform can register the IoT terminal according to the registration application, obtain the IoT terminal's identification, registration time, private key, public key, and verification formula, and store the IoT terminal's identification, registration time, private key, public key, and verification formula on the blockchain.
接收工业标识管理平台反馈的物联网终端的标识、注册时间、私钥和验证公式。Receive the IoT terminal's identification, registration time, private key, and verification formula fed back by the industrial identification management platform.
可选地，标识为分散式标识符DID。Optionally, the identifier is a decentralized identifier DID.
注册申请中包括物联网终端的出厂标号。The registration application includes the factory label number of the IoT terminal.
验证公式为k的r次方+当前时间的哈希值，其中，k为出厂标号的二进制码右移m位后的值，m为DID最低位的十进制值与3的商的上取整。The verification formula is k to the power of r + the hash value of the current time, where k is the value of the binary code of the factory label shifted right by m bits, and m is the quotient of the decimal value of the lowest bit of the DID and 3, rounded up.
本实施例提供的计算机存储介质上存储的计算机程序，基于验证公式及当前时间生成验证数，将物联网终端标识、验证数、加密后的注册时间和加密后的当前时间发送至工业企业平台，以使工业企业平台基于物联网终端标识、验证数、加密后的注册时间和加密后的当前时间完成物联网终端的身份验证。The computer program stored on the computer storage medium provided in this embodiment generates a verification number based on the verification formula and the current time, and sends the Internet of Things terminal identification, verification number, encrypted registration time and encrypted current time to the industrial enterprise platform, so that the industrial enterprise platform completes the identity authentication of the Internet of Things terminal based on the Internet of Things terminal identification, verification number, encrypted registration time and encrypted current time.
若所述计算机存储介质位于工业标识管理平台，则所述程序被处理器执行时实现如下步骤。If the computer storage medium is located in the industrial identification management platform, the following steps are implemented when the program is executed by the processor.
获取物联网终端发送的标识注册申请。Get the identification registration application sent by the IoT terminal.
根据标识注册申请对物联网终端进行注册，得到物联网终端的标识、注册时间、私钥、公钥、验证公式，并将物联网终端的标识、注册时间、私钥、公钥、验证公式存储于区块链上。The IoT terminal is registered according to the identification registration application, and the identification, registration time, private key, public key and verification formula of the IoT terminal are obtained, and the identification, registration time, private key, public key and verification formula of the IoT terminal are stored on the blockchain.
向物联网终端反馈物联网终端的标识、注册时间和私钥，以使物联网终端基于物联网终端的标识、注册时间和私钥完成身份认证。The identification, registration time and private key of the IoT terminal are fed back to the IoT terminal, so that the IoT terminal completes identity authentication based on the identification, registration time and private key of the IoT terminal.
可选地，标识为分散式标识符DID。Optionally, the identifier is a decentralized identifier DID.
注册申请中包括物联网终端的出厂标号。The registration application includes the factory label number of the IoT terminal.
根据标识注册申请对物联网终端进行注册，得到物联网终端的标识、注册时间、私钥、公钥、验证公式，包括：Register the IoT terminal according to the identification registration application, and obtain the IoT terminal's identification, registration time, private key, public key, and verification formula, including:
将标识注册申请的接收时间作为注册时间。The time when the registration application is received shall be regarded as the registration time.
根据预设的DID生成规则，生成物联网终端的DID、私钥、公钥。Generate the DID, private key, and public key of the IoT terminal according to the preset DID generation rules.
根据注册时间生成随机数r。Generate a random number r according to the registration time.
确定验证公式为k的r次方+当前时间的哈希值，其中，k为出厂标号的二进制码右移m位后的值，m为DID最低位的十进制值与3的商的上取整。The verification formula is determined to be k to the power of r + the hash value of the current time, where k is the value of the binary code of the factory label shifted right by m bits, and m is the quotient of the decimal value of the lowest bit of the DID and 3, rounded up.
本实施例提供的计算机存储介质上存储的计算机程序，获取物联网终端发送的标识注册申请。根据标识注册申请对物联网终端进行注册，得到物联网终端的标识、注册时间、私钥、公钥、验证公式，并将物联网终端的标识、注册时间、私钥、公钥、验证公式存储于区块链上。向物联网终端反馈物联网终端的标识、注册时间和私钥，以使物联网终端基于物联网终端的标识、注册时间和私钥完成身份认证，实现了物联终端的身份认证。The computer program stored on the computer storage medium provided in this embodiment obtains the identification registration application sent by the Internet of Things terminal. The Internet of Things terminal is registered according to the identification registration application, and the identification, registration time, private key, public key, and verification formula of the Internet of Things terminal are obtained, and the identification, registration time, private key, public key, and verification formula of the Internet of Things terminal are stored on the blockchain. The identification, registration time, and private key of the Internet of Things terminal are fed back to the Internet of Things terminal, so that the Internet of Things terminal completes identity authentication based on the identification, registration time, and private key of the Internet of Things terminal, thereby realizing identity authentication of the Internet of Things terminal.
若所述计算机存储介质位于工业企业平台，则所述程序被处理器执行时实现如下步骤。If the computer storage medium is located on an industrial enterprise platform, the following steps are implemented when the program is executed by a processor.
获取物联网终端的标识、物联网终端基于验证公式及当前时间生成的验证数、物联网终端通过私钥加密的注册时间和物联网终端通过私钥加密的当前时间。Obtain the identification of the IoT terminal, the verification number generated by the IoT terminal based on the verification formula and the current time, the registration time of the IoT terminal encrypted by the private key, and the current time of the IoT terminal encrypted by the private key.
从区块链中获取物联网终端的标识对应的注册时间、公钥和验证公式。Obtain the registration time, public key and verification formula corresponding to the IoT terminal's identification from the blockchain.
通过公钥对加密的注册时间和加密的当前时间进行解密。The encrypted registration time and the encrypted current time are decrypted by the public key.
若解密得到的注册时间与区块链中获取的标识注册时间相同，且基于解密得到的当前时间和验证公式得到的值与验证数相同，则确定物联网终端身份认证成功。If the registration time obtained by decryption is the same as the registration time of the identifier obtained in the blockchain, and the value obtained based on the current time obtained by decryption and the verification formula is the same as the verification number, then the IoT terminal identity authentication is determined to be successful.
可选地，物联网终端标识为分散式标识符DID。Optionally, the IoT terminal identifier is a decentralized identifier DID.
可选地，方法还包括：验证公式为k的r次方+当前时间的哈希值，其中，k为出厂标号的二进制码右移m位后的值，m为DID最低位的十进制值与3的商的上取整。Optionally, the method also includes: the verification formula is k to the power of r + the hash value of the current time, wherein k is the value of the binary code of the factory label shifted right by m bits, and m is the upper integer of the quotient of the decimal value of the lowest bit of the DID and 3.
基于当前时间和验证公式得到的值为k的r次方+解密得到的当前时间的哈希值。The value obtained based on the current time and the verification formula is k to the power of r + the hash value of the current time obtained by decryption.
本实施例提供的计算机存储介质上存储的计算机程序，获取物联网终端的标识、物联网终端基于验证公式及当前时间生成的验证数、物联网终端通过私钥加密的注册时间和物联网终端通过私钥加密的当前时间。从区块链中获取物联网终端的标识对应的注册时间、公钥和验证公式。通过公钥对加密的注册时间和加密的当前时间进行解密，若解密得到的注册时间与区块链中获取的标识注册时间相同，且基于解密得到的当前时间和验证公式得到的值与验证数相同，则确定物联网终端身份认证成功，实现了物联终端的身份认证。The computer program stored on the computer storage medium provided in this embodiment obtains the identification of the Internet of Things terminal, the verification number generated by the Internet of Things terminal based on the verification formula and the current time, the registration time encrypted by the Internet of Things terminal through the private key, and the current time encrypted by the Internet of Things terminal through the private key. The registration time, public key and verification formula corresponding to the identification of the Internet of Things terminal are obtained from the blockchain. The encrypted registration time and the encrypted current time are decrypted by the public key. If the registration time obtained by decryption is the same as the registration time of the identification obtained in the blockchain, and the value obtained based on the decrypted current time and the verification formula is the same as the verification number, it is determined that the identity authentication of the Internet of Things terminal is successful, and the identity authentication of the Internet of Things terminal is realized.
基于同一发明构思，本实施例提供了一种电子设备，参见图6，包括存储器601、处理器602、总线603以及存储在存储器601上并可在处理器602上运行的计算机程序，若该电子设备为物联网终端，则所述处理器602执行所述程序时实现如下步骤。Based on the same inventive concept, this embodiment provides an electronic device, see Figure 6, including a memory 601, a processor 602, a bus 603, and a computer program stored in the memory 601 and executable on the processor 602. If the electronic device is an Internet of Things terminal, the processor 602 implements the following steps when executing the program.
基于验证公式及当前时间生成验证数。Generates a verification number based on the verification formula and the current time.
获取物联网终端的注册时间。Get the registration time of the IoT terminal.
通过私钥对注册时间以及当前时间进行加密。The registration time and current time are encrypted using a private key.
将物联网终端的标识、验证数、加密后的注册时间和加密后的当前时间发送至工业企业平台，以使工业企业平台基于物联网终端的标识、验证数、加密后的注册时间和加密后的当前时间对物联网终端进行身份认证。The identification, verification number, encrypted registration time and encrypted current time of the IoT terminal are sent to the industrial enterprise platform, so that the industrial enterprise platform can authenticate the IoT terminal based on the identification, verification number, encrypted registration time and encrypted current time of the IoT terminal.
可选地，方法还包括：Optionally, the method further comprises:
向工业标识管理平台发送标识注册申请，以使工业标识管理平台根据注册申请对物联网终端进行注册，得到物联网终端的标识、注册时间、私钥、公钥、验证公式，并将物联网终端的标识、注册时间、私钥、公钥、验证公式存储于区块链上。Send an identification registration application to the industrial identification management platform so that the industrial identification management platform can register the IoT terminal according to the registration application, obtain the IoT terminal's identification, registration time, private key, public key, and verification formula, and store the IoT terminal's identification, registration time, private key, public key, and verification formula on the blockchain.
接收工业标识管理平台反馈的物联网终端的标识、注册时间、私钥和验证公式。Receive the IoT terminal's identification, registration time, private key, and verification formula fed back by the industrial identification management platform.
可选地，标识为分散式标识符DID。Optionally, the identifier is a decentralized identifier DID.
注册申请中包括物联网终端的出厂标号。The registration application includes the factory label number of the IoT terminal.
验证公式为k的r次方+当前时间的哈希值，其中，k为出厂标号的二进制码右移m位后的值，m为DID最低位的十进制值与3的商的上取整。The verification formula is k to the power of r + the hash value of the current time, where k is the value of the binary code of the factory label shifted right by m bits, and m is the quotient of the decimal value of the lowest bit of the DID and 3, rounded up.
本实施例提供的电子设备，基于验证公式及当前时间生成验证数，将物联网终端标识、验证数、加密后的注册时间和加密后的当前时间发送至工业企业平台，以使工业企业平台基于物联网终端标识、验证数、加密后的注册时间和加密后的当前时间完成物联网终端的身份验证。The electronic device provided in this embodiment generates a verification number based on a verification formula and the current time, and sends the IoT terminal identification, verification number, encrypted registration time and encrypted current time to the industrial enterprise platform, so that the industrial enterprise platform completes the identity authentication of the IoT terminal based on the IoT terminal identification, verification number, encrypted registration time and encrypted current time.
若该电子设备为工业标识管理平台，则所述处理器602执行所述程序时实现如下步骤。If the electronic device is an industrial identification management platform, the processor 602 implements the following steps when executing the program.
获取物联网终端发送的标识注册申请。Get the identification registration application sent by the IoT terminal.
根据标识注册申请对物联网终端进行注册，得到物联网终端的标识、注册时间、私钥、公钥、验证公式，并将物联网终端的标识、注册时间、私钥、公钥、验证公式存储于区块链上。The IoT terminal is registered according to the identification registration application, and the identification, registration time, private key, public key and verification formula of the IoT terminal are obtained, and the identification, registration time, private key, public key and verification formula of the IoT terminal are stored on the blockchain.
向物联网终端反馈物联网终端的标识、注册时间和私钥，以使物联网终端基于物联网终端的标识、注册时间和私钥完成身份认证。The identification, registration time and private key of the IoT terminal are fed back to the IoT terminal, so that the IoT terminal completes identity authentication based on the identification, registration time and private key of the IoT terminal.
可选地，标识为分散式标识符DID。Optionally, the identifier is a decentralized identifier DID.
注册申请中包括物联网终端的出厂标号。The registration application includes the factory label number of the IoT terminal.
根据标识注册申请对物联网终端进行注册，得到物联网终端的标识、注册时间、私钥、公钥、验证公式，包括：Register the IoT terminal according to the identification registration application, and obtain the IoT terminal's identification, registration time, private key, public key, and verification formula, including:
将标识注册申请的接收时间作为注册时间。The time when the registration application is received shall be regarded as the registration time.
根据预设的DID生成规则，生成物联网终端的DID、私钥、公钥。Generate the DID, private key, and public key of the IoT terminal according to the preset DID generation rules.
根据注册时间生成随机数r。Generate a random number r according to the registration time.
确定验证公式为k的r次方+当前时间的哈希值，其中，k为出厂标号的二进制码右移m位后的值，m为DID最低位的十进制值与3的商的上取整。The verification formula is determined to be k to the power of r + the hash value of the current time, where k is the value of the binary code of the factory label shifted right by m bits, and m is the quotient of the decimal value of the lowest bit of the DID and 3, rounded up.
本实施例提供的电子设备，获取物联网终端发送的标识注册申请。根据标识注册申请对物联网终端进行注册，得到物联网终端的标识、注册时间、私钥、公钥、验证公式，并将物联网终端的标识、注册时间、私钥、公钥、验证公式存储于区块链上。向物联网终端反馈物联网终端的标识、注册时间和私钥，以使物联网终端基于物联网终端的标识、注册时间和私钥完成身份认证，实现了物联终端的身份认证。The electronic device provided in this embodiment obtains an identification registration application sent by an IoT terminal. The IoT terminal is registered according to the identification registration application, and the identification, registration time, private key, public key, and verification formula of the IoT terminal are obtained, and the identification, registration time, private key, public key, and verification formula of the IoT terminal are stored on the blockchain. The identification, registration time, and private key of the IoT terminal are fed back to the IoT terminal, so that the IoT terminal completes identity authentication based on the identification, registration time, and private key of the IoT terminal, thereby realizing identity authentication of the IoT terminal.
若该电子设备为工业企业平台，则所述处理器602执行所述程序时实现如下步骤。If the electronic device is an industrial enterprise platform, the processor 602 implements the following steps when executing the program.
获取物联网终端的标识、物联网终端基于验证公式及当前时间生成的验证数、物联网终端通过私钥加密的注册时间和物联网终端通过私钥加密的当前时间。Obtain the identification of the IoT terminal, the verification number generated by the IoT terminal based on the verification formula and the current time, the registration time of the IoT terminal encrypted by the private key, and the current time of the IoT terminal encrypted by the private key.
从区块链中获取物联网终端的标识对应的注册时间、公钥和验证公式。Obtain the registration time, public key and verification formula corresponding to the IoT terminal's identification from the blockchain.
通过公钥对加密的注册时间和加密的当前时间进行解密。The encrypted registration time and encrypted current time are decrypted using the public key.
若解密得到的注册时间与区块链中获取的标识注册时间相同，且基于解密得到的当前时间和验证公式得到的值与验证数相同，则确定物联网终端身份认证成功。If the registration time obtained by decryption is the same as the registration time of the identifier obtained in the blockchain, and the value obtained based on the current time obtained by decryption and the verification formula is the same as the verification number, then the IoT terminal identity authentication is determined to be successful.
可选地，物联网终端标识为分散式标识符DID。Optionally, the IoT terminal identifier is a decentralized identifier DID.
可选地，方法还包括：验证公式为k的r次方+当前时间的哈希值，其中，k为出厂标号的二进制码右移m位后的值，m为DID最低位的十进制值与3的商的上取整。Optionally, the method also includes: the verification formula is k to the power of r + the hash value of the current time, wherein k is the value of the binary code of the factory label shifted right by m bits, and m is the upper integer of the quotient of the decimal value of the lowest bit of the DID and 3.
基于当前时间和验证公式得到的值为k的r次方+解密得到的当前时间的哈希值。The value obtained based on the current time and the verification formula is k to the power of r + the hash value of the current time obtained by decryption.
本实施例提供的电子设备，获取物联网终端的标识、物联网终端基于验证公式及当前时间生成的验证数、物联网终端通过私钥加密的注册时间和物联网终端通过私钥加密的当前时间。从区块链中获取物联网终端的标识对应的注册时间、公钥和验证公式。通过公钥对加密的注册时间和加密的当前时间进行解密，若解密得到的注册时间与区块链中获取的标识注册时间相同，且基于解密得到的当前时间和验证公式得到的值与验证数相同，则确定物联网终端身份认证成功，实现了物联终端的身份认证。The electronic device provided in this embodiment obtains the identification of the Internet of Things terminal, the verification number generated by the Internet of Things terminal based on the verification formula and the current time, the registration time encrypted by the Internet of Things terminal through the private key, and the current time encrypted by the Internet of Things terminal through the private key. The registration time, public key and verification formula corresponding to the identification of the Internet of Things terminal are obtained from the blockchain. The encrypted registration time and the encrypted current time are decrypted by the public key. If the registration time obtained by decryption is the same as the registration time of the identification obtained in the blockchain, and the value obtained based on the decrypted current time and the verification formula is the same as the verification number, it is determined that the identity authentication of the Internet of Things terminal is successful, and the identity authentication of the Internet of Things terminal is realized.
本领域内的技术人员应明白，本申请的实施例可提供为方法、系统、或计算机程序产品。因此，本申请可采用完全硬件实施例、完全软件实施例、或结合软件和硬件方面的实施例的形式。而且，本申请可采用在一个或多个其中包含有计算机可用程序代码的计算机可用存储介质（包括但不限于磁盘存储器、CD-ROM、光学存储器等）上实施的计算机程序产品的形式。Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.
本申请是参照根据本申请实施例的方法、设备（系统）、和计算机程序产品的流程图和／或方框图来描述的。应理解可由计算机程序指令实现流程图和／或方框图中的每一流程和／或方框、以及流程图和／或方框图中的流程和／或方框的结合。可提供这些计算机程序指令到通用计算机、专用计算机、嵌入式处理机或其他可编程数据处理设备的处理器以产生一个机器，使得通过计算机或其他可编程数据处理设备的处理器执行的指令产生用于实现在流程图一个流程或多个流程和／或方框图一个方框或多个方框中指定的功能的装置。The present application is described with reference to the flowcharts and/or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and/or box in the flowchart and/or block diagram, as well as the combination of the processes and/or boxes in the flowchart and/or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate a device for implementing the functions specified in one process or multiple processes in the flowchart and/or one box or multiple boxes in the block diagram.
这些计算机程序指令也可存储在能引导计算机或其他可编程数据处理设备以特定方式工作的计算机可读存储器中，使得存储在该计算机可读存储器中的指令产生包括指令装置的制造品，该指令装置实现在流程图一个流程或多个流程和／或方框图一个方框或多个方框中指定的功能。These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce a manufactured product including an instruction device that implements the functions specified in one or more processes in the flowchart and/or one or more boxes in the block diagram.
这些计算机程序指令也可装载到计算机或其他可编程数据处理设备上，使得在计算机或其他可编程设备上执行一系列操作步骤以产生计算机实现的处理，从而在计算机或其他可编程设备上执行的指令提供用于实现在流程图一个流程或多个流程和／或方框图一个方框或多个方框中指定的功能的步骤。These computer program instructions may also be loaded onto a computer or other programmable data processing device so that a series of operational steps are executed on the computer or other programmable device to produce a computer-implemented process, whereby the instructions executed on the computer or other programmable device provide steps for implementing the functions specified in one or more processes in the flowchart and/or one or more boxes in the block diagram.
尽管已描述了本申请的优选实施例，但本领域内的技术人员一旦得知了基本创造性概念，则可对这些实施例作出另外的变更和修改。所以，所附权利要求意欲解释为包括优选实施例以及落入本申请范围的所有变更和修改。Although the preferred embodiments of the present application have been described, those skilled in the art may make other changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications falling within the scope of the present application.
显然，本领域的技术人员可以对本申请进行各种改动和变型而不脱离本申请的精神和范围。这样，倘若本申请的这些修改和变型属于本申请权利要求及其等同技术的范围之内，则本申请也意图包含这些改动和变型在内。Obviously, those skilled in the art can make various changes and modifications to the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.
Claims (9)
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110304930.6A CN112948784B (en) | 2021-03-23 | 2021-03-23 | Internet of Things terminal identity authentication method, computer storage medium and electronic device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110304930.6A CN112948784B (en) | 2021-03-23 | 2021-03-23 | Internet of Things terminal identity authentication method, computer storage medium and electronic device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN112948784A CN112948784A (en) | 2021-06-11 |
| CN112948784B true CN112948784B (en) | 2024-05-14 |
Family
ID=76227883
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202110304930.6A Active CN112948784B (en) | 2021-03-23 | 2021-03-23 | Internet of Things terminal identity authentication method, computer storage medium and electronic device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN112948784B (en) |
Families Citing this family (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113591103B (en) * | 2021-06-29 | 2024-02-23 | 中国电力科学研究院有限公司 | Identity authentication method and system between intelligent terminals of electric power Internet of things |
| CN113420250B (en) * | 2021-07-19 | 2024-12-20 | 江苏方向家科技股份有限公司 | A data control method and system based on Internet of Things |
| CN114070586A (en) * | 2021-10-19 | 2022-02-18 | 中诚区块链研究院(南京)有限公司 | Cooperative working method of block chain and Internet of things |
| CN114205140B (en) * | 2021-12-09 | 2023-04-11 | 四川启睿克科技有限公司 | Block chain-based credible unified identification generation method for Internet of things equipment |
| CN114448727B (en) * | 2022-04-02 | 2022-06-21 | 中国信息通信研究院 | Information processing method and system based on industrial Internet identification analysis system |
| CN115225339B (en) * | 2022-06-28 | 2024-03-26 | 国网电力科学研究院有限公司 | A method and system for safe access and data transmission of sensing terminals in power transmission Internet of Things |
| CN115208698B (en) * | 2022-09-15 | 2022-12-09 | 中国信息通信研究院 | Block chain-based Internet of things identity authentication method and device |
| CN116614228B (en) * | 2023-06-08 | 2024-03-08 | 嵩山实验室 | An Internet of Things terminal access registration method and device used in the power industry |
Citations (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103678572A (en) * | 2013-12-09 | 2014-03-26 | 中国科学院计算机网络信息中心 | Method and system for searching for Internet of Things information based on two layers of DHTs |
| CN107895111A (en) * | 2017-10-11 | 2018-04-10 | 西安电子科技大学 | Internet of things equipment supply chain trust systems management method, computer program, computer |
| CN108429802A (en) * | 2018-03-07 | 2018-08-21 | 国家计算机网络与信息安全管理中心 | Method and device for acquiring information of Internet of things equipment |
| CN108668258A (en) * | 2018-05-09 | 2018-10-16 | 中国信息通信研究院 | V2X communication rapid identity authentication system and method |
| CN108737381A (en) * | 2018-04-23 | 2018-11-02 | 厦门盛华电子科技有限公司 | A kind of extended authentication method of Internet of things system |
| CN111835752A (en) * | 2020-07-09 | 2020-10-27 | 国网山西省电力公司信息通信分公司 | Lightweight authentication method and gateway based on device identity |
| CN112218294A (en) * | 2020-09-08 | 2021-01-12 | 深圳市燃气集团股份有限公司 | 5G-based access method and system for Internet of things equipment and storage medium |
| CN112699352A (en) * | 2021-03-23 | 2021-04-23 | 中国信息通信研究院 | Trusted data acquisition terminal identity verification method, computer storage medium and electronic equipment |
| CN113569210A (en) * | 2021-07-09 | 2021-10-29 | 远光软件股份有限公司 | Distributed identity authentication method, device access method and device |
| US11379213B1 (en) * | 2019-12-06 | 2022-07-05 | Equinix, Inc. | Decentralized identifiers for securing device registration and software updates |
Family Cites Families (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110311883B (en) * | 2018-03-27 | 2020-11-10 | 华为技术有限公司 | Identity management method, device, communication network and storage medium |
| US11392702B2 (en) * | 2019-03-17 | 2022-07-19 | Microsoft Technology Licensing, Llc | Discovery and matching of internet of things (IoT) devices and services using a secure global registry |
-
2021
- 2021-03-23 CN CN202110304930.6A patent/CN112948784B/en active Active
Patent Citations (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103678572A (en) * | 2013-12-09 | 2014-03-26 | 中国科学院计算机网络信息中心 | Method and system for searching for Internet of Things information based on two layers of DHTs |
| CN107895111A (en) * | 2017-10-11 | 2018-04-10 | 西安电子科技大学 | Internet of things equipment supply chain trust systems management method, computer program, computer |
| CN108429802A (en) * | 2018-03-07 | 2018-08-21 | 国家计算机网络与信息安全管理中心 | Method and device for acquiring information of Internet of things equipment |
| CN108737381A (en) * | 2018-04-23 | 2018-11-02 | 厦门盛华电子科技有限公司 | A kind of extended authentication method of Internet of things system |
| CN108668258A (en) * | 2018-05-09 | 2018-10-16 | 中国信息通信研究院 | V2X communication rapid identity authentication system and method |
| US11379213B1 (en) * | 2019-12-06 | 2022-07-05 | Equinix, Inc. | Decentralized identifiers for securing device registration and software updates |
| CN111835752A (en) * | 2020-07-09 | 2020-10-27 | 国网山西省电力公司信息通信分公司 | Lightweight authentication method and gateway based on device identity |
| CN112218294A (en) * | 2020-09-08 | 2021-01-12 | 深圳市燃气集团股份有限公司 | 5G-based access method and system for Internet of things equipment and storage medium |
| CN112699352A (en) * | 2021-03-23 | 2021-04-23 | 中国信息通信研究院 | Trusted data acquisition terminal identity verification method, computer storage medium and electronic equipment |
| CN113569210A (en) * | 2021-07-09 | 2021-10-29 | 远光软件股份有限公司 | Distributed identity authentication method, device access method and device |
Non-Patent Citations (5)
| Title |
|---|
| A Decentralized Lightweight Blockchain-based Authentication Mechanism for IoT Systems;Umair Khalid 等;Cluster Computing;第23卷;第2067-2087页 * |
| Rethinking Decentralised Identifiers and Verifiable Credentials for the Internet of Things;Parikshit N. 等;Springer VS;第266卷;第361-374页 * |
| 一种物联网网关架构及设备接入实现研究;陈文艺;田创;;信息技术(第10期);第115-119页 * |
| 基于区块链的分布式物联网设备身份认证机制研究;谭琛;陈美娟;Amuah Ebenezer Ackah;;物联网学报;4(第02期);第70-77页 * |
| 面向MES的工业互联网标识数据 互通系统设计;柴森春 等;信息通信技术与政策(第08期);第62-66页 * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN112948784A (en) | 2021-06-11 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN112948784B (en) | Internet of Things terminal identity authentication method, computer storage medium and electronic device | |
| CN109478214B (en) | Apparatus and method for certificate registration | |
| US9185111B2 (en) | Cryptographic authentication techniques for mobile devices | |
| US8468339B2 (en) | Efficient security information distribution | |
| CN107920052B (en) | Encryption method and intelligent device | |
| CN110661748B (en) | Log encryption method, log decryption method and log encryption device | |
| CN113128999B (en) | Block chain privacy protection method and device | |
| CN105763331A (en) | Data encryption method, device, data decryption method and device | |
| CN109754226B (en) | Data management method, device and storage medium | |
| CN111314066B (en) | Block chain-based data transfer method, terminal and computer-readable storage medium | |
| CN115242553B (en) | Data exchange method and system supporting safe multi-party calculation | |
| CN109005184A (en) | File encrypting method and device, storage medium, terminal | |
| Win et al. | Privacy enabled digital rights management without trusted third party assumption | |
| CN112565265A (en) | Authentication method, authentication system and communication method between terminal devices of Internet of things | |
| CN113343201A (en) | Registration request processing method, user identity information management method and device | |
| US12051061B2 (en) | Method for operating a distributed database system, distributed database system, and industrial automation system | |
| CN110149311B (en) | Data processing method, device, server and readable storage medium | |
| CN114726536B (en) | A timestamp generation method, device, electronic device and storage medium | |
| CN108199836A (en) | A kind of key and apparatus bound, the method and device of solution binding | |
| CN102270285A (en) | Key authorization information management method and device | |
| CN114553438A (en) | Data transmission method and device, electronic equipment and storage medium | |
| CN116709312A (en) | Safety protection method and device and electronic equipment | |
| CN106571928B (en) | A kind of method and device of browser administration | |
| CN116055105A (en) | Cloud storage data processing method, device and server | |
| CN116827542B (en) | Digital certificate management method and system of intelligent device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |