CN115242440A - Block chain-based Internet of things equipment trusted calling method, device and equipment - Google Patents
Block chain-based Internet of things equipment trusted calling method, device and equipment Download PDFInfo
- Publication number
- CN115242440A CN115242440A CN202210702311.7A CN202210702311A CN115242440A CN 115242440 A CN115242440 A CN 115242440A CN 202210702311 A CN202210702311 A CN 202210702311A CN 115242440 A CN115242440 A CN 115242440A
- Authority
- CN
- China
- Prior art keywords
- equipment
- internet
- request
- public key
- terminal
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000000034 method Methods 0.000 title claims abstract description 71
- 238000013475 authorization Methods 0.000 claims abstract description 55
- 238000011156 evaluation Methods 0.000 claims description 25
- 238000004590 computer program Methods 0.000 claims description 8
- 230000006855 networking Effects 0.000 claims 2
- 238000010586 diagram Methods 0.000 description 7
- 230000008569 process Effects 0.000 description 6
- 238000004891 communication Methods 0.000 description 5
- 239000007787 solid Substances 0.000 description 4
- 238000012795 verification Methods 0.000 description 3
- 238000005516 engineering process Methods 0.000 description 2
- 238000012854 evaluation process Methods 0.000 description 2
- 230000006870 function Effects 0.000 description 2
- 230000003993 interaction Effects 0.000 description 2
- 230000007246 mechanism Effects 0.000 description 2
- 238000012545 processing Methods 0.000 description 2
- 230000001413 cellular effect Effects 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 230000007613 environmental effect Effects 0.000 description 1
- 238000007689 inspection Methods 0.000 description 1
- 230000005055 memory storage Effects 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 238000012544 monitoring process Methods 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
- 230000000750 progressive effect Effects 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
- G06F16/27—Replication, distribution or synchronisation of data between databases or within a distributed database system; Distributed database system architectures therefor
-
- G—PHYSICS
- G16—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR SPECIFIC APPLICATION FIELDS
- G16Y—INFORMATION AND COMMUNICATION TECHNOLOGY SPECIALLY ADAPTED FOR THE INTERNET OF THINGS [IoT]
- G16Y40/00—IoT characterised by the purpose of the information processing
- G16Y40/50—Safety; Security of things, users, data or systems
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
- H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
- H04L9/0825—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3247—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving digital signatures
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Signal Processing (AREA)
- Computing Systems (AREA)
- Computer Networks & Wireless Communication (AREA)
- General Engineering & Computer Science (AREA)
- Computer Hardware Design (AREA)
- Databases & Information Systems (AREA)
- Theoretical Computer Science (AREA)
- Data Mining & Analysis (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Telephonic Communication Services (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
Abstract
The embodiment of the specification provides a block chain-based method, a block chain-based device and a device for trustable calling of Internet of things equipment. The method comprises the following steps: receiving a device calling request sent by a user terminal; the equipment calling request comprises a request encrypted by a terminal private key corresponding to the user terminal; sending a terminal public key acquisition request to the block link point equipment; the terminal public key acquisition request is used for acquiring a terminal public key uploaded to the blockchain node device by the user terminal; receiving a terminal public key fed back by the block chain node equipment; and if the terminal public key is used for decrypting the equipment calling request, authorization information is fed back to the user terminal so that the client on the user terminal calls the Internet of things equipment. The method verifies the identity of the user terminal, and ensures the calling safety.
Description
The application is a divisional application of an invention patent application with the application number of 202010684456.X, the application date of 2020, 07, 16 and the name of 'a block chain-based Internet of things equipment safety calling method, device and equipment'.
Technical Field
The embodiment of the specification relates to the technical field of network security, in particular to a block chain-based method, a block chain-based device and a block chain-based device for trustable calling of internet of things.
Background
With the development of the internet of things technology, people can access more and more devices to the internet, and can conveniently acquire device data and remotely control the devices. For example, for an intelligent camera accessing a network, a user may directly acquire video data captured by the camera by using a client in a corresponding terminal device, and issue a remote instruction to adjust a capturing angle and a magnification of the intelligent camera.
The internet of things equipment can acquire data by using the sensing module in the equipment, so that the internet of things equipment has higher requirements on safety. And lawless persons can obtain the control authority of the equipment of the internet of things indirectly through the client by tampering the code of the client or implanting a malicious plug-in the client and the like. Because the internet of things device generally utilizes the firmware stored in the internet of things device to execute the corresponding instruction, the fixed verification program directly set in the firmware is also easy to be deceived by lawbreakers. Therefore, when a user controls the internet of things device through the corresponding client, the internet of things device is difficult to verify the security of the client.
Disclosure of Invention
An object of an embodiment of the present specification is to provide a method, an apparatus, and a device for trustable calling of an internet of things device based on a block chain, so as to solve a problem of how to ensure security of a process of calling the internet of things device.
In order to solve the above technical problem, an embodiment of the present specification further provides a block chain-based internet of things device trusted calling method, including: receiving a device calling request sent by a user terminal; the equipment calling request comprises a request encrypted by a terminal private key corresponding to the user terminal; sending a terminal public key acquisition request to block link point equipment; the terminal public key acquisition request is used for acquiring a terminal public key uploaded to the blockchain node device by the user terminal; receiving a terminal public key fed back by the block chain node equipment; and if the terminal public key is used for decrypting the equipment calling request, authorization information is fed back to the user terminal so that the client side can call the Internet of things equipment.
In some embodiments, after receiving the terminal public key fed back by the blockchain node device, the method further includes: and if the equipment calling request cannot be decrypted by using the terminal public key, sending a terminal identifier corresponding to the user terminal to block link point equipment as a high-risk equipment identifier so that the user terminal associated with the block link point equipment can acquire the high-risk equipment identifier.
In some embodiments, before sending the request for obtaining the terminal public key to the block link node device, the method further includes: sending a terminal query request to the block link node equipment; the terminal query request is used for acquiring a safety evaluation result of the user terminal; correspondingly, the sending of the terminal public key acquisition request to the block link node device includes: and if the safety evaluation result fed back by the block chain node point equipment is safety equipment, sending a terminal public key acquisition request to the block chain node point equipment.
An embodiment of the present specification further provides an internet of things device trusted call apparatus based on a block chain, including: the request receiving module is used for receiving a device calling request sent by a user terminal; the equipment calling request comprises a request encrypted by a terminal private key corresponding to the user terminal; the request sending module is used for sending a terminal public key obtaining request to the block chain node equipment; the terminal public key acquisition request is used for acquiring a terminal public key uploaded to the block chain node equipment by the user terminal; the public key receiving module is used for receiving a terminal public key fed back by the block chain node equipment; and the information feedback module is used for feeding back authorization information to the user terminal when the terminal public key is used for decrypting the equipment calling request so as to enable the client to call the Internet of things equipment.
The embodiment of the present specification further provides an internet of things device, including a memory and a processor; the memory for storing computer program instructions; the processor to execute the computer program instructions to implement the steps of: receiving a device calling request sent by a user terminal; the equipment calling request comprises a request encrypted by a terminal private key corresponding to the user terminal; sending a terminal public key acquisition request to block link point equipment; the terminal public key acquisition request is used for acquiring a terminal public key uploaded to the blockchain node device by the user terminal; receiving a terminal public key fed back by the block chain node equipment; and if the terminal public key is used for realizing the decryption of the equipment calling request, authorization information is fed back to the user terminal so that the client side can call the Internet of things equipment.
An embodiment of the present specification further provides a block chain-based internet of things device trusted calling method, including: encrypting the equipment calling request by using a terminal private key; the device call request comprises a request generated by a client; sending an encrypted equipment calling request to the Internet of things equipment, so that the Internet of things equipment sends a terminal public key obtaining request to the block chain node point equipment after receiving the equipment calling request and receives a terminal public key fed back by the block chain node point equipment; the terminal public key comprises a terminal public key uploaded to the block chain node equipment by a user terminal; receiving authorization information fed back by the Internet of things equipment so as to enable the client to call the Internet of things equipment; the authorization information comprises information generated after the internet of things equipment utilizes the terminal public key to decrypt the encrypted equipment calling request.
In some embodiments, before sending the encrypted device invocation request to the internet of things device, the method further includes: sending an internet of things equipment query request to the blockchain node equipment; the Internet of things equipment query request is used for acquiring a safety evaluation result of the Internet of things equipment; correspondingly, the sending the encrypted device call request to the internet of things device includes: and if the safety evaluation result fed back by the block link point equipment is safety equipment, sending an encrypted equipment calling request to the Internet of things equipment.
In some embodiments, the authorization information includes information encrypted by the internet of things device using a device private key; after receiving the authorization information fed back by the internet of things device, the method further includes: sending an equipment public key acquisition request to the block link point equipment; the device public key obtaining request is used for obtaining a device public key uploaded to the block chain node device by the Internet of things device; receiving a device public key fed back by the block chain node device; and if the decryption of the authorization information is realized by using the equipment public key, calling the Internet of things equipment by using the client.
An embodiment of the present specification further provides an internet of things device trusted call apparatus based on a block chain, including: the encryption module is used for encrypting the equipment calling request by using a terminal private key; the device call request comprises a request generated by a client; the request sending module is used for sending an encrypted equipment calling request to the Internet of things equipment so as to enable the Internet of things equipment to send a terminal public key obtaining request to the block chain node point equipment after receiving the equipment calling request and receive a terminal public key fed back by the block chain node point equipment; the terminal public key comprises a terminal public key uploaded to the block chain node equipment by a user terminal; the information receiving module is used for receiving authorization information fed back by the Internet of things equipment so as to enable the client to call the Internet of things equipment; the authorization information comprises information generated after the internet of things equipment utilizes the terminal public key to decrypt the encrypted equipment calling request.
The embodiment of the present specification further provides a user terminal, which includes a memory and a processor; the memory to store computer program instructions; the processor to execute the computer program instructions to implement the steps of: encrypting the equipment calling request by using a terminal private key; the device call request comprises a request generated by a client; sending an encrypted equipment calling request to Internet of things equipment, so that the Internet of things equipment sends a terminal public key obtaining request to block chain node point equipment after receiving the equipment calling request, and receives a terminal public key fed back by the block chain node point equipment; the terminal public key comprises a terminal public key uploaded to the block chain node equipment by a user terminal; receiving authorization information fed back by the Internet of things equipment so as to enable the client to call the Internet of things equipment; the authorization information comprises information generated after the internet of things equipment utilizes the terminal public key to decrypt the encrypted equipment calling request.
As can be seen from the technical solutions provided in the embodiments of the present specification, the encrypted device invocation request is decrypted by using the terminal public key stored in the blockchain network, and the right to invoke the internet of things device by the user terminal is granted when the decryption is successful, so that the identity of the user terminal is verified based on the digital signature technology, the right to invoke the device is still granted when the user terminal is hijacked, and the security of the invocation process is ensured.
Drawings
In order to more clearly illustrate the embodiments of the present specification or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, it is obvious that the drawings in the following description are only some embodiments described in the specification, and other drawings can be obtained by those skilled in the art without creative efforts.
Fig. 1 is a framework diagram of an internet of things device invoking system according to an embodiment of the present disclosure;
fig. 2 is a flowchart of a block chain-based method for invoking security of an internet of things device in an embodiment of the present specification;
fig. 3 is a flowchart of a method for securely invoking an internet of things device based on a block chain according to an embodiment of the present disclosure;
fig. 4 is a flowchart of a method for securely invoking an internet of things device based on a block chain in an embodiment of the present specification;
fig. 5 is a flowchart of a trusted invocation method of an internet of things device based on a block chain in an embodiment of the present specification;
fig. 6 is a flowchart of a trusted invocation method of an internet of things device based on a block chain in an embodiment of the present specification;
fig. 7 is a flowchart of a trusted invoking method for an internet of things device based on a block chain according to an embodiment of the present specification;
fig. 8 is a block diagram of an apparatus for invoking security of an internet of things device based on a block chain according to an embodiment of the present disclosure;
fig. 9 is a block diagram of an apparatus for invoking security of an internet of things device based on a block chain according to an embodiment of the present disclosure;
fig. 10 is a block diagram of a trusted invocation device of an internet of things device based on a block chain in an embodiment of the present specification;
fig. 11 is a block diagram of an apparatus for trusted invocation of devices of the internet of things based on a block chain according to an embodiment of the present specification;
fig. 12 is a structural diagram of an internet of things device according to an embodiment of the present disclosure;
fig. 13 is a block diagram of a user terminal according to an embodiment of the present disclosure.
Detailed Description
The technical solutions in the embodiments of the present specification will be clearly and completely described below with reference to the drawings in the embodiments of the present specification, and it is obvious that the described embodiments are only a part of the embodiments of the present specification, and not all of the embodiments. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments in the present specification without making any creative effort shall fall within the protection scope of the present specification.
In order to better understand the inventive concept of the present application, an internet of things device invoking system in an embodiment of the present specification is first introduced. As shown in fig. 1, the internet of things device invoking system 100 includes an internet of things device 110, a user terminal 120, and a block link node device 130.
The internet of things is a network which connects various networks according to an agreed protocol through sensing equipment to exchange and communicate information so as to realize intelligent identification, positioning, tracking, monitoring and management. From the logical structure, the internet of things can be roughly composed of 3 layers of a sensing layer, a network layer and an application layer, the sensing layer at the bottom layer is mainly realized through a sensor network, object information is collected and controlled by means of RFID, sensors and the like, and information of a group of sensors is collected through the sensor network and is transmitted to a core network. The network layer is mainly composed of the existing basic network and is used for interconnecting objects. The available basic networks of the internet of things can be various, and can be a public communication network, an industry private network or even a newly-built communication network special for the internet of things according to the application requirement. The application layer at the higher layer is mainly responsible for processing information, decision support and business application services.
The internet of things device 110 is a device connected to the internet of things. Through the Internet of things, a user can remotely acquire sensing data in the Internet of things equipment or data of the Internet of things equipment through terminal equipment. Under the condition that the IOT equipment has certain maneuverability, the IOT equipment can be controlled to a certain degree by sending instructions to the IOT equipment. For example, when the internet of things device is an intelligent camera, the intelligent camera can acquire video data based on a camera component of the intelligent camera, and store the video data in a storage module of the intelligent camera or transmit the video data to a cloud server, so that a user can acquire the video data through an APP or a webpage. The internet of things device is not limited to the above example, and may also be an intelligent home robot, for example, which is not described herein again.
The user terminal 120 is a device used by the user. The user terminal can be, for example, a smart phone, a PC, a smart wearable device, a server, and the like. The user terminal 120 may implement communication with the internet of things device, so as to implement sending and receiving of related instructions. The user terminal is provided with a client, and the client may be an applet, an APP, a software program, a web client, and the like, which are used to call the internet of things device 110. In this embodiment of the present specification, in order to ensure the security of the internet of things device, the security of the client needs to be verified.
The block chain is a distributed account book which organizes a plurality of data blocks in a chain structure according to time sequence and ensures safety, traceability and non-falsification by a cryptographic algorithm. The block link point device 130 may be used to construct a block chain network. The blockchain may include a public blockchain, a federated blockchain (also referred to as a federation blockchain), a private blockchain, and so forth. The distributed ledger is commonly maintained by a plurality of blockchain node devices 130 in the blockchain network. The block chain network is formed by a plurality of block chain node devices through a consensus mechanism. The blockchain network may include, for example, a P2P network (peer-to-peer network) or the like. The consensus mechanism may be implemented based on algorithms such as Proof of Work (POW), proof of rights and interests (POS), proof of equity authority (DPOS), or active Byzantine Fault Tolerance (PBFT). Specifically, a plurality of service providers may set up a plurality of blockchain node devices. The plurality of blockchain node devices may establish a blockchain network based on blockchain techniques. For example, multiple enterprises providing third party payment services may set up multiple blockchain node devices. The plurality of blockchain node devices may establish the blockchain network based on blockchain techniques.
In this embodiment, the internet of things device 110 and the user terminal 120 may store information for authentication, such as device identification and the like, or a key for encrypting and decrypting the information in the block-node device. Due to the fact that the information stored in the blockchain has the characteristic of being not capable of being tampered, the correctness of the verification information stored in the blockchain link point device is guaranteed, and therefore the verification of the identity of the device can be achieved through the verification information.
Based on the internet of things equipment calling system, an embodiment of the specification provides a block chain-based internet of things equipment security calling method, and an execution main body of the internet of things equipment calling method is the internet of things equipment calling system. As shown in fig. 2, the method for safely invoking an internet of things device based on a blockchain includes the following steps.
S210: and the user terminal sends the equipment calling request to the Internet of things equipment.
The device calling request is a request for obtaining the permission to call the internet of things device. The device invocation request may be a request generated by a first client on the user terminal. The first client may be a client on the user terminal corresponding to an internet of things device. Since the user terminal may be hijacked by a lawless person, thereby tampering with the program of the first client and further damaging the internet of things device, the first client needs to be verified.
In some embodiments, the device invocation request includes a first client identification of the first client. The first client identifier is used for identifying identity information or environmental characteristics of the first client.
In a specific example, the first client identifier includes a digest obtained by encrypting a program and/or a plug-in of the first client. Specifically, executable programs, files and legal plug-ins in the app may be encrypted by using the SHA256 in the Hash algorithm to obtain the digest.
In another specific example, the first client identity may be an IP address of the user terminal. The first client identifier is not limited to the above example, and other examples of the first client identifier proposed by those skilled in the art based on the technical solution of the present application are within the protection scope of the present application.
In the process of practical application, the physical network device may also have a risk of being hijacked by a lawbreaker based on own vulnerability, so in some embodiments, in order to ensure the security of the internet of things device, before sending a device call request, it may be determined whether the internet of things device is secure.
In this embodiment, a security evaluation result exists for the internet of things device. The safety evaluation result is a result obtained after the safety of the Internet of things equipment is evaluated. The specific evaluation process can be implemented by those skilled in the art according to the requirements of practical applications, and is not described herein again. The safety evaluation result may include, for example, safety equipment and high-risk equipment. The safety equipment indicates that the Internet of things equipment does not have a vulnerability which has a great influence on data safety or equipment control authority, and can send an equipment calling request to the Internet of things equipment; the high-risk equipment represents that the equipment of the Internet of things has a vulnerability with higher influence on safety, and the interaction between the equipment of the Internet of things possibly has higher risk. Other manners may also be provided for classifying the safety evaluation result, and those skilled in the art may perform corresponding adjustment according to actual situations, which is not described herein again.
Therefore, in this embodiment, before the user terminal sends the device call request to the internet of things device, the user terminal may also send an internet of things device query request to the blockchain node device to obtain a security evaluation result of the internet of things device, and when the security evaluation result is the security device, send the device call request to the internet of things device; when the safety evaluation result is high-risk equipment, the equipment calling request is not sent to the Internet of things equipment any more, and if the demand for calling the Internet of things equipment exists, the equipment calling request can be sent to other safer Internet of things equipment.
S220: and the Internet of things equipment sends a second client identifier acquisition request to the block link node equipment.
After receiving the device call request, the internet of things device may send a second client identifier acquisition request to the block link node device. The second client identifier obtaining request is used for obtaining a second client identifier. The second client identity is stored in the blockchain node device.
The second client identification is an identification corresponding to the second client. The second client is a client with the authority of calling the Internet of things equipment. For example, the second client may be a client that is developed and tested by a developer, and the client at this time has no possibility of being tampered by a lawbreaker, and can also realize a corresponding function, and accordingly has higher security, and can be used as the second client.
The type of the second client identifier corresponds to the type of the first client identifier. For example, when the first client identifier is an IP address, the obtained second client identifier is an IP address with the highest frequency in the historical login IP addresses of the user terminal, that is, the IP address is an IP address used by the user under a general condition, and the user may log in a dangerous environment without conforming to the IP address; and when the first client identification is the abstract of the program of the first client, the obtained second client identification is the abstract of the program of the second client. The specific corresponding type may be adjusted based on actual application, which is not described herein again.
S230: and the block chain node equipment feeds back the second client identifier to the Internet of things equipment.
After receiving the second client identifier acquisition request, the blockchain node device may obtain a second client identifier by querying data stored in a blockchain network, and feed back the second client identifier to the internet of things device.
S240: the Internet of things equipment judges whether the first client identification is matched with the second client identification.
And after receiving the second client identification, the Internet of things equipment judges whether the first client identification is matched with the second client identification. The matching process may be, for example, determining whether the first client identifier is the same as the second client identifier, or determining whether the first client identifier is the same as the second client identifier in a preset comparison portion. The specific comparison process may be determined based on the types of the first client identifier and the second client identifier, and is not described herein again.
S250: and if so, the Internet of things equipment sends authorization information to the user terminal.
If the first client side is matched with the internet of things device, the first client side is not tampered, or the application environment of the first client side is safe, the possibility that the first client side sends malicious instructions when calling the internet of things device is low, and the first client side can be granted the permission to call the internet of things device. Therefore, authorization information, that is, authorization information allowing the first client to invoke the internet of things device, may be sent to the user terminal.
In other embodiments, the first client identifier may not match the second client identifier, which indicates that the first client may be tampered by a lawless person or the user terminal is in an insecure application environment, and there may be a high risk if the right to invoke the internet of things device is granted to the first client. Therefore, warning information can be fed back to the user terminal, wherein the warning information is used for reminding the user that the first client side lacks safety.
If the first client identification is not matched with the second client identification, the internet of things equipment can also send the first client identification to block chain node point equipment as a high-risk client identification, so that a user terminal associated with the block chain network receives the high-risk client identification, and then self checking and inspection can be carried out.
According to the method, the first client identification is verified by comparing the first client identification with the second client identification stored in the block chain network, so that the influence on the first client caused by tampering of the first client or the situation that the user terminal is in a dangerous application environment is avoided, and the safety of equipment calling is ensured.
According to the block chain-based internet of things device security calling method corresponding to fig. 2, an embodiment of the present specification further provides a block chain-based internet of things device security calling method. The execution subject of the block chain-based internet of things equipment safety calling method is the internet of things equipment, and as shown in fig. 3, the block chain-based internet of things equipment safety calling method comprises the following specific steps.
S310: receiving a device calling request sent by a user terminal; the device invocation request comprises a request generated by a first client on the user terminal; the device call request includes a first client identifier of the first client.
For the introduction of this step, reference may be made to the description in step S210, which is not described herein again.
S320: sending a second client identifier acquisition request to the block link node equipment; and a second client identifier is stored in the block chain node equipment.
For the introduction of this step, reference may be made to the description in step S220, and the description is not repeated here.
S330: receiving a second client identifier fed back by the block chain node equipment; the second client identification comprises a client identification corresponding to the second client; the second client side has the authority of calling the Internet of things equipment.
For the introduction of this step, reference may be made to the description in step S230, which is not described herein again.
S340: and if the first client identification is matched with the second client identification, feeding back authorization information to the user terminal so that the first client calls the Internet of things equipment.
For the introduction of this step, reference may be made to the descriptions in steps S240 and S250, which are not described herein again.
According to the block chain-based internet of things device security calling method corresponding to fig. 2, an embodiment of the present specification further provides a block chain-based internet of things device security calling method. The execution subject of the block chain-based internet of things equipment safety calling method is the user terminal, and as shown in fig. 4, the block chain-based internet of things equipment safety calling method includes the following specific steps.
S410: acquiring a device call request generated by a first client; the device call request includes a first client identifier of the first client.
For the introduction of this step, reference may be made to the description in step S210, and details are not repeated here.
S420: sending the equipment calling request to Internet of things equipment so that the Internet of things equipment sends a second client identification obtaining request to block chain node point equipment and receives a second client identification fed back by the block chain node point equipment; the second client identification comprises a client identification corresponding to the second client; the second client side has the authority of calling the Internet of things equipment.
For the introduction of this step, reference may be made to the descriptions in steps S210, S220, S230, and S240, which are not described herein again.
S430: receiving authorization information fed back by the Internet of things equipment so that the first client calls the Internet of things equipment; the authorization information comprises information generated by the internet of things equipment when the first client identification is matched with the second client identification.
For the introduction of this step, reference may be made to the description in step S250, and details are not repeated here.
Based on the internet of things equipment calling system, an embodiment of the present specification further provides a block chain-based internet of things equipment trusted calling method, where an execution subject of the internet of things equipment trusted calling method is the internet of things equipment calling system. As shown in fig. 5, the block chain-based internet of things device trusted calling method includes the following steps.
S510: the user terminal generates a device call request.
The device calling request is a request for obtaining the permission to call the internet of things device. The device invocation request may be a request generated by a client on the user terminal.
In some embodiments, the device invocation request may be a request obtained by encrypting the device invocation request by using a terminal private key stored in the user terminal. The terminal private key corresponds to the terminal public key. The terminal private key is stored on the user terminal, and the terminal public key is stored in the block chain network. And under the condition that the terminal private key is not tampered, the terminal public key can be used for decrypting the information encrypted by the terminal private key, so that whether the equipment is tampered or not can be judged according to whether the terminal public key can be used for decryption or not.
In the process of practical application, the physical network device may also be hijacked by a lawless person based on the vulnerability of the physical network device, so in some embodiments, in order to ensure the security of the internet of things device, before sending the device call request, whether the internet of things device is secure or not may be judged.
In this embodiment, a security evaluation result exists for the internet of things device. The safety evaluation result is a result obtained after the safety of the Internet of things equipment is evaluated. The specific evaluation process can be implemented by those skilled in the art according to the requirements of practical applications, and is not described herein again. The safety evaluation result may include, for example, safety equipment and high-risk equipment. The safety equipment indicates that the Internet of things equipment does not have a vulnerability which has a great influence on data safety or equipment control authority, and can send an equipment calling request to the Internet of things equipment; the high-risk equipment represents that the equipment of the Internet of things has a vulnerability with higher influence on safety, and the interaction between the equipment of the Internet of things possibly has higher risk. Other manners may also be provided for classifying the safety evaluation result, and those skilled in the art may perform corresponding adjustment according to actual situations, which is not described herein again.
Therefore, in this embodiment, before the user terminal sends the device call request to the internet of things device, the user terminal may also send an internet of things device query request to the blockchain node device to obtain a security evaluation result of the internet of things device, and when the security evaluation result is the security device, send the device call request to the internet of things device; when the safety evaluation result is high-risk equipment, the equipment calling request is not sent to the Internet of things equipment any more, and if the demand for calling the Internet of things equipment exists, the equipment calling request can be sent to other safer Internet of things equipment.
S520: and the user terminal sends the equipment calling request to the Internet of things equipment.
After the device call request is generated, the user terminal may send the device call request to the internet of things device.
S530: and the Internet of things equipment sends a terminal public key acquisition request to the block chain node point equipment.
After receiving the device call request, the internet of things device can send a terminal public key acquisition request to the block link node device. And the terminal public key obtaining request is used for obtaining the terminal public key. And the terminal public key is stored in the block chain node equipment. And the terminal public key can be used for decrypting the information encrypted by the corresponding terminal private key, so that the judgment of the user identity is realized.
In some embodiments, before obtaining the terminal public key, the internet of things device may send a terminal query request to the block link node device to obtain a security evaluation result of the user terminal. And if the safety evaluation result fed back by the block chain node point equipment is safety equipment, sending a terminal public key acquisition request to the block chain node point equipment. If the safety evaluation result fed back by the block link point device is not the safety device, it indicates that the user terminal may have a risk, and the device call request may be directly rejected.
S540: and feeding back the terminal public key to the Internet of things equipment by the block chain node equipment.
After receiving the terminal public key acquisition request, the blockchain node device can obtain the terminal public key by inquiring data stored in the blockchain network, and feed the terminal public key back to the internet of things device.
S550: and the Internet of things equipment judges whether the terminal public key can be used for decrypting the equipment calling request.
After the terminal public key is obtained, the internet of things device may attempt to decrypt the device call request by using the terminal public key. Since the terminal public key is stored in the blockchain network and has the property of being not tampered, the terminal public key can be used to decrypt the device invocation request to verify the identity of the user terminal in the case that the terminal private key is not changed.
S560: if the authorization information can be realized, the Internet of things equipment feeds back the authorization information to the user terminal.
If the method can be realized, the terminal private key used by the client is the correct private key, the client is the client corresponding to the Internet of things equipment and is not replaced by a lawless person, the possibility that the client sends a malicious instruction when calling the Internet of things equipment is low, and the client can be granted the right to call the Internet of things equipment. Therefore, authorization information, that is, authorization information allowing the client to invoke the internet of things device, may be sent to the user terminal.
In other embodiments, if the device invocation request cannot be decrypted by using the terminal public key, it indicates that the client may be tampered by a lawless person, or the user terminal is in an unsafe application environment, and there may be a higher risk if the right to invoke the internet of things device is granted to the client. Therefore, warning information can be fed back to the user terminal, and the warning information is used for reminding the user that the client side is lack of safety.
If the terminal public key can not be used for decrypting the equipment calling request, the Internet of things equipment can also send the terminal identification corresponding to the user terminal to the block chain node equipment as the high-risk equipment identification, so that the user terminal associated with the block chain network receives the high-risk equipment identification, communication with the user terminal is avoided, and safety is improved.
In some embodiments, the authorization information may be information obtained by encrypting a private key by using an internet of things device, after receiving the authorization information, the user terminal may send a device public key obtaining request to the blockchain node device to obtain a device public key uploaded to the blockchain node device by using the internet of things device, and after receiving the device public key fed back by the blockchain node device, decrypt the authorization information by using the device public key, if the device public key implements decryption of the authorization information, it is indicated that the internet of things device is a safe device, and the client may be used to call the internet of things device. If the authorization information cannot be decrypted, it is indicated that the internet of things equipment is possibly tampered or replaced, a higher risk may exist in continuously calling the internet of things equipment, and other internet of things equipment can be obtained to call.
By the method, after the device calling request is received, the encrypted device calling request is decrypted by using the terminal public key stored in the block chain network, and the authority of the user terminal for calling the Internet of things device is granted when the decryption is successful.
Based on the block chain-based internet of things device trusted calling method corresponding to fig. 5, an embodiment of the present specification further provides a block chain-based internet of things device trusted calling method. The execution subject of the block chain-based internet of things device trusted calling method is the internet of things device, and as shown in fig. 6, the block chain-based internet of things device trusted calling method includes the following specific steps.
S610: receiving a device calling request sent by a user terminal; the device call request comprises a request encrypted by a terminal private key corresponding to the user terminal.
For the introduction of this step, reference may be made to the descriptions in steps S510 and S520, which are not described herein again.
S620: sending a terminal public key acquisition request to the block link point equipment; and the terminal public key acquisition request is used for acquiring a terminal public key uploaded to the blockchain node equipment by the user terminal.
For the introduction of this step, reference may be made to the description in step S530, and the description is not repeated here.
S630: and receiving the terminal public key fed back by the block chain node equipment.
For the introduction of this step, reference may be made to the description in step S540, and details are not repeated here.
And S640: and if the terminal public key is used for realizing the decryption of the equipment calling request, authorization information is fed back to the user terminal so that the client side can call the Internet of things equipment.
For the introduction of this step, reference may be made to the description in steps S550 and S560, and details are not repeated here.
Based on the block chain-based internet of things device trusted calling method corresponding to fig. 5, the embodiment of the present specification further provides an internet of things device trusted calling method based on a block chain. The execution subject of the block chain-based internet of things device trusted calling method is the user terminal, and as shown in fig. 7, the block chain-based internet of things device trusted calling method includes the following specific steps.
S710: encrypting the equipment calling request by using a terminal private key; the device invocation request comprises a request generated by a client.
For the introduction of this step, reference may be made to the description in step S510, and details are not repeated here.
S720: sending an encrypted equipment calling request to Internet of things equipment, so that the Internet of things equipment sends a terminal public key obtaining request to block chain node point equipment after receiving the equipment calling request, and receives a terminal public key fed back by the block chain node point equipment; and the terminal public key comprises a terminal public key uploaded to the block chain node equipment by the user terminal.
For the introduction of this step, reference may be made to the description in step S520, and details are not repeated here.
S730: receiving authorization information fed back by the Internet of things equipment so as to enable the client to call the Internet of things equipment; the authorization information comprises information generated after the internet of things equipment utilizes the terminal public key to decrypt the encrypted equipment calling request.
For the introduction of this step, reference may be made to the descriptions in steps S530, S540, S550, and S560, which are not described herein again.
An internet of things equipment security calling device based on a block chain in the embodiment of the present specification is introduced based on the block chain-based internet of things equipment security calling method corresponding to fig. 3. The device for safely calling the internet of things equipment based on the block chain is arranged on the internet of things equipment, and as shown in fig. 8, the device for safely calling the internet of things equipment based on the block chain comprises the following modules.
A request receiving module 810, configured to receive a device call request sent by a user terminal; the device invocation request comprises a request generated by a first client on the user terminal; the device calling request comprises a first client identification of the first client;
a request sending module 820, configured to send a second client identifier obtaining request to the block link node device; a second client identifier is stored in the block chain node equipment;
an identifier receiving module 830, configured to receive a second client identifier fed back by the block link point device; the second client identification comprises a client identification corresponding to the second client; the second client has the authority of calling the Internet of things equipment;
an information feedback module 840, configured to feed back authorization information to the user terminal when the first client identifier matches the second client identifier, so that the first client invokes the internet of things device.
An internet of things device security calling apparatus based on a block chain in an embodiment of the present specification is introduced based on a block chain-based internet of things device security calling method corresponding to fig. 4. The device for safely calling the internet of things equipment based on the block chain is arranged on the user terminal, and as shown in fig. 9, the device for safely calling the internet of things equipment based on the block chain comprises the following modules.
A request obtaining module 910, configured to obtain a device invocation request generated by a first client; the device calling request comprises a first client identification of the first client;
a request sending module 920, configured to send the device call request to an internet of things device, so that the internet of things device sends a second client identifier obtaining request to a block link point device, and receives a second client identifier fed back by the block link point device; the second client identification comprises a client identification corresponding to the second client; the second client has the authority of calling the Internet of things equipment;
an information receiving module 930, configured to receive authorization information fed back by an internet of things device, so that the first client invokes the internet of things device; the authorization information comprises information generated by the internet of things equipment when the first client identification is matched with the second client identification.
An internet of things device trusted calling apparatus based on a block chain in an embodiment of the present specification is introduced based on the block chain-based internet of things device trusted calling method corresponding to fig. 6. The block chain-based internet of things equipment trusted calling device is arranged on the internet of things equipment, and as shown in fig. 10, the block chain-based internet of things equipment trusted calling device comprises the following modules.
A request receiving module 1010, configured to receive a device call request sent by a user terminal; the equipment calling request comprises a request encrypted by a terminal private key corresponding to the user terminal;
a request sending module 1020, configured to send a terminal public key obtaining request to the block link node device; the terminal public key acquisition request is used for acquiring a terminal public key uploaded to the blockchain node device by the user terminal;
a public key receiving module 1030, configured to receive a terminal public key fed back by the block link node device;
the information feedback module 1040 is configured to feed back authorization information to the user terminal when the terminal public key is used to decrypt the device call request, so that the client calls the internet of things device.
An internet of things device trusted calling apparatus based on a block chain in an embodiment of the present specification is introduced based on the block chain-based internet of things device trusted calling method corresponding to fig. 7. The device for calling the internet of things equipment based on the block chain is arranged in the user terminal, and as shown in fig. 11, the device for calling the internet of things equipment based on the block chain comprises the following modules.
An encryption module 1110, configured to encrypt the device call request by using a terminal private key; the device call request comprises a request generated by a client;
a request sending module 1120, configured to send an encrypted device call request to an internet of things device, so that the internet of things device sends a terminal public key acquisition request to a block link point device after receiving the device call request, and receives a terminal public key fed back by the block link point device; the terminal public key comprises a terminal public key uploaded to the block chain node equipment by a user terminal;
an information receiving module 1130, configured to receive authorization information fed back by an internet of things device, so that the client invokes the internet of things device; the authorization information comprises information generated after the internet of things equipment utilizes the terminal public key to decrypt the encrypted equipment calling request.
Based on the block chain-based internet of things device security calling method corresponding to fig. 3, an embodiment of the present specification further provides an internet of things device, and as shown in fig. 12, the internet of things device may include a memory and a processor.
In this embodiment, the memory may be implemented in any suitable manner. For example, the memory may be a read-only memory, a mechanical hard disk, a solid state disk, a U disk, or the like. The memory may be used to store computer instructions.
In this embodiment, the processor may be implemented in any suitable manner. For example, the processor may take the form of, for example, a microprocessor or processor and a computer-readable medium that stores computer-readable program code (e.g., software or firmware) executable by the (micro) processor, logic gates, switches, an Application Specific Integrated Circuit (ASIC), a programmable logic controller, an embedded microcontroller, and so forth. The processor may execute the computer instructions to perform the steps of: receiving a device calling request sent by a user terminal; the device invocation request comprises a request generated by a first client on the user terminal; the device calling request comprises a first client identifier of the first client; sending a second client identifier acquisition request to the block link node equipment; a second client identifier is stored in the block chain node equipment; receiving a second client identifier fed back by the block chain node equipment; the second client identification comprises a client identification corresponding to the second client; the second client has the authority of calling the Internet of things equipment; and if the first client identification is matched with the second client identification, feeding back authorization information to the user terminal so that the first client calls the Internet of things equipment.
Based on the block chain based internet of things device security invoking method corresponding to fig. 4, an embodiment of the present specification further provides a user terminal, which may include a memory and a processor, as shown in fig. 13.
In this embodiment, the memory may be implemented in any suitable manner. For example, the memory may be a read-only memory, a mechanical hard disk, a solid state disk, a usb flash disk, or the like. The memory may be used to store computer instructions.
In this embodiment, the processor may be implemented in any suitable manner. For example, the processor may take the form of, for example, a microprocessor or processor and a computer-readable medium that stores computer-readable program code (e.g., software or firmware) executable by the (micro) processor, logic gates, switches, an Application Specific Integrated Circuit (ASIC), a programmable logic controller and embedded microcontroller, and so forth. The processor may execute the computer instructions to perform the steps of: acquiring a device call request generated by a first client; the device calling request comprises a first client identifier of the first client; sending the equipment calling request to Internet of things equipment so that the Internet of things equipment sends a second client identifier obtaining request to block chain node point equipment and receives a second client identifier fed back by the block chain node point equipment; the second client identification comprises a client identification corresponding to the second client; the second client has the authority of calling the Internet of things equipment; receiving authorization information fed back by the Internet of things equipment so that the first client calls the Internet of things equipment; the authorization information comprises information generated by the internet of things equipment when the first client identification is matched with the second client identification.
Based on the block chain-based internet of things device security invoking method corresponding to fig. 6, an embodiment of the present specification further provides an internet of things device, which may include a memory and a processor, as shown in fig. 12.
In this embodiment, the memory may be implemented in any suitable manner. For example, the memory may be a read-only memory, a mechanical hard disk, a solid state disk, a U disk, or the like. The memory may be used to store computer instructions.
In this embodiment, the processor may be implemented in any suitable manner. For example, the processor may take the form of, for example, a microprocessor or processor and a computer-readable medium that stores computer-readable program code (e.g., software or firmware) executable by the (micro) processor, logic gates, switches, an Application Specific Integrated Circuit (ASIC), a programmable logic controller, an embedded microcontroller, and so forth. The processor may execute the computer instructions to perform the steps of: receiving a device calling request sent by a user terminal; the equipment calling request comprises a request encrypted by a terminal private key corresponding to the user terminal; sending a terminal public key acquisition request to the block link point equipment; the terminal public key acquisition request is used for acquiring a terminal public key uploaded to the blockchain node device by the user terminal; receiving a terminal public key fed back by the block chain node equipment; and if the terminal public key is used for realizing the decryption of the equipment calling request, authorization information is fed back to the user terminal so that the client side can call the Internet of things equipment.
Based on the block chain based internet of things device security calling method corresponding to fig. 7, an embodiment of the present specification further provides a user terminal, which may include a memory and a processor, as shown in fig. 13.
In this embodiment, the memory may be implemented in any suitable manner. For example, the memory may be a read-only memory, a mechanical hard disk, a solid state disk, a U disk, or the like. The memory may be used to store computer instructions.
In this embodiment, the processor may be implemented in any suitable manner. For example, the processor may take the form of, for example, a microprocessor or processor and a computer-readable medium that stores computer-readable program code (e.g., software or firmware) executable by the (micro) processor, logic gates, switches, an Application Specific Integrated Circuit (ASIC), a programmable logic controller and embedded microcontroller, and so forth. The processor may execute the computer instructions to perform the steps of: encrypting the equipment calling request by using a terminal private key; the device call request comprises a request generated by a client; sending an encrypted equipment calling request to Internet of things equipment, so that the Internet of things equipment sends a terminal public key obtaining request to block chain node point equipment after receiving the equipment calling request, and receives a terminal public key fed back by the block chain node point equipment; the terminal public key comprises a terminal public key uploaded to the block chain node equipment by a user terminal; receiving authorization information fed back by the Internet of things equipment so that the client calls the Internet of things equipment; the authorization information comprises information generated after the internet of things equipment utilizes the terminal public key to decrypt the encrypted equipment calling request.
The systems, apparatuses, modules or units described in the above embodiments may be specifically implemented by a computer chip or an entity, or implemented by a product with certain functions. One typical implementation device is a computer. In particular, the computer may be, for example, a personal computer, a laptop computer, a cellular telephone, a camera phone, a smartphone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or a combination of any of these devices.
From the above description of the embodiments, it is clear to those skilled in the art that the present specification can be implemented by software plus a necessary general hardware platform. Based on such understanding, the technical solutions of the present specification may be essentially or partly implemented in the form of software products, which may be stored in a storage medium, such as ROM/RAM, magnetic disk, optical disk, etc., and include several instructions for enabling a computer device (which may be a personal computer, a server, or a network device, etc.) to execute the methods described in the embodiments or some parts of the embodiments of the present specification.
The embodiments in the present specification are described in a progressive manner, and the same and similar parts among the embodiments are referred to each other, and each embodiment focuses on the differences from the other embodiments. In particular, as for the system embodiment, since it is substantially similar to the method embodiment, the description is relatively simple, and reference may be made to the partial description of the method embodiment for relevant points.
The description is operational with numerous general purpose or special purpose computing system environments or configurations. For example: personal computers, server computers, hand-held or portable devices, tablet-type devices, multiprocessor systems, microprocessor-based systems, set top boxes, programmable consumer electronics, network PCs, minicomputers, mainframe computers, distributed computing environments that include any of the above systems or devices, and the like.
This description may be described in the general context of computer-executable instructions, such as program modules, being executed by a computer. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform particular tasks or implement particular abstract data types. The specification may also be practiced in distributed computing environments where tasks are performed by remote processing devices that are linked through a communications network. In a distributed computing environment, program modules may be located in both local and remote computer storage media including memory storage devices.
While the specification has been described with examples, those skilled in the art will appreciate that there are numerous variations and permutations of the specification without departing from the spirit of the specification, and it is intended that the appended claims encompass such variations and modifications without departing from the spirit of the specification.
Claims (10)
1. A block chain-based Internet of things equipment trusted calling method is characterized by comprising the following steps:
receiving a device calling request sent by a user terminal; the equipment calling request comprises a request encrypted by a terminal private key corresponding to the user terminal;
sending a terminal public key acquisition request to the block link point equipment; the terminal public key acquisition request is used for acquiring a terminal public key uploaded to the block chain node equipment by the user terminal;
receiving a terminal public key fed back by the block chain node equipment;
and if the terminal public key is used for decrypting the equipment calling request, authorization information is fed back to the user terminal so that the client on the user terminal calls the Internet of things equipment.
2. The method of claim 1, wherein after receiving the terminal public key fed back by the blockchain node device, further comprising:
and if the equipment calling request cannot be decrypted by using the terminal public key, sending a terminal identifier corresponding to the user terminal to block chain node point equipment as a high-risk equipment identifier so that the user terminal associated with the block chain node point equipment can acquire the high-risk equipment identifier.
3. The method of claim 1, wherein prior to sending the request for obtaining the terminal public key to the block-node device, further comprising:
sending a terminal query request to block link point equipment; the terminal query request is used for acquiring a security evaluation result of the user terminal;
correspondingly, the sending of the terminal public key acquisition request to the block link node device includes:
and if the safety evaluation result fed back by the block chain node point equipment is safety equipment, sending a terminal public key acquisition request to the block chain node point equipment.
4. The utility model provides a trusted calling device of thing networking equipment based on block chain which characterized in that includes:
the request receiving module is used for receiving a device calling request sent by a user terminal; the equipment calling request comprises a request encrypted by a terminal private key corresponding to the user terminal;
the request sending module is used for sending a terminal public key obtaining request to the block chain link point equipment; the terminal public key acquisition request is used for acquiring a terminal public key uploaded to the blockchain node device by the user terminal;
the public key receiving module is used for receiving a terminal public key fed back by the block chain link point equipment;
and the information feedback module is used for feeding back authorization information to the user terminal when the terminal public key is used for decrypting the equipment calling request, so that a client on the user terminal calls the Internet of things equipment.
5. An internet of things device comprising a memory and a processor;
the memory for storing computer program instructions;
the processor to execute the computer program instructions to implement the steps of: receiving a device calling request sent by a user terminal; the equipment calling request comprises a request encrypted by a terminal private key corresponding to the user terminal; sending a terminal public key acquisition request to the block link point equipment; the terminal public key acquisition request is used for acquiring a terminal public key uploaded to the blockchain node device by the user terminal; receiving a terminal public key fed back by the block chain node equipment; and if the terminal public key is used for decrypting the equipment calling request, authorization information is fed back to the user terminal so that the client on the user terminal calls the Internet of things equipment.
6. A block chain-based Internet of things equipment trusted calling method is characterized by comprising the following steps:
encrypting the equipment calling request by using a terminal private key; the device call request comprises a request generated by a client;
sending an encrypted equipment calling request to the Internet of things equipment, so that the Internet of things equipment sends a terminal public key obtaining request to the block chain node point equipment after receiving the equipment calling request and receives a terminal public key fed back by the block chain node point equipment; the terminal public key comprises a terminal public key uploaded to the block chain node equipment by a user terminal;
receiving authorization information fed back by the Internet of things equipment so as to enable the client to call the Internet of things equipment; the authorization information comprises information generated after the internet of things equipment utilizes the terminal public key to decrypt the encrypted equipment calling request.
7. The method of claim 6, wherein before sending the encrypted device invocation request to the internet of things device, further comprising:
sending an internet of things equipment query request to the blockchain node equipment; the Internet of things equipment query request is used for acquiring a safety evaluation result of the Internet of things equipment;
correspondingly, the sending of the encrypted device invocation request to the internet of things device includes:
and if the safety evaluation result fed back by the block link point equipment is safety equipment, sending an encrypted equipment calling request to the Internet of things equipment.
8. The method of claim 6, wherein the authorization information comprises information encrypted by the Internet of things device using a device private key; after receiving the authorization information fed back by the internet of things device, the method further includes:
sending an equipment public key acquisition request to the block link point equipment; the device public key obtaining request is used for obtaining a device public key uploaded to the block chain node device by the Internet of things device;
receiving an equipment public key fed back by the block chain node equipment;
and if the decryption of the authorization information is realized by using the equipment public key, calling the Internet of things equipment by using the client.
9. The utility model provides a trusted calling apparatus of thing networking device based on block chain which characterized in that includes:
the encryption module is used for encrypting the equipment calling request by using a terminal private key; the device call request comprises a request generated by a client;
the request sending module is used for sending an encrypted equipment calling request to the Internet of things equipment so that the Internet of things equipment sends a terminal public key obtaining request to the block link point equipment after receiving the equipment calling request and receives a terminal public key fed back by the block link point equipment; the terminal public key comprises a terminal public key uploaded to the block chain node equipment by a user terminal;
the information receiving module is used for receiving authorization information fed back by the Internet of things equipment so as to enable the client to call the Internet of things equipment; the authorization information comprises information generated after the internet of things equipment utilizes the terminal public key to decrypt the encrypted equipment calling request.
10. A user terminal comprising a memory and a processor;
the memory to store computer program instructions;
the processor to execute the computer program instructions to implement the steps of: encrypting the equipment calling request by using a terminal private key; the device call request comprises a request generated by a client; sending an encrypted equipment calling request to the Internet of things equipment, so that the Internet of things equipment sends a terminal public key obtaining request to the block chain node point equipment after receiving the equipment calling request and receives a terminal public key fed back by the block chain node point equipment; the terminal public key comprises a terminal public key uploaded to the block chain node equipment by a user terminal; receiving authorization information fed back by the Internet of things equipment so that the client calls the Internet of things equipment; the authorization information comprises information generated after the internet of things equipment utilizes the terminal public key to decrypt the encrypted equipment calling request.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN202210702311.7A CN115242440B (en) | 2020-07-16 | 2020-07-16 | Block chain-based internet of things equipment trusted calling method, device and equipment |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN202210702311.7A CN115242440B (en) | 2020-07-16 | 2020-07-16 | Block chain-based internet of things equipment trusted calling method, device and equipment |
CN202010684456.XA CN111835775A (en) | 2020-07-16 | 2020-07-16 | Block chain-based Internet of things equipment safety calling method, device and equipment |
Related Parent Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN202010684456.XA Division CN111835775A (en) | 2020-07-16 | 2020-07-16 | Block chain-based Internet of things equipment safety calling method, device and equipment |
Publications (2)
Publication Number | Publication Date |
---|---|
CN115242440A true CN115242440A (en) | 2022-10-25 |
CN115242440B CN115242440B (en) | 2024-01-26 |
Family
ID=72924122
Family Applications (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN202210702311.7A Active CN115242440B (en) | 2020-07-16 | 2020-07-16 | Block chain-based internet of things equipment trusted calling method, device and equipment |
CN202010684456.XA Pending CN111835775A (en) | 2020-07-16 | 2020-07-16 | Block chain-based Internet of things equipment safety calling method, device and equipment |
Family Applications After (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN202010684456.XA Pending CN111835775A (en) | 2020-07-16 | 2020-07-16 | Block chain-based Internet of things equipment safety calling method, device and equipment |
Country Status (1)
Country | Link |
---|---|
CN (2) | CN115242440B (en) |
Citations (11)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
KR20170083359A (en) * | 2016-01-08 | 2017-07-18 | 주식회사 유비벨록스모바일 | Method for encryption and decryption of IoT(Internet of Things) devices using AES algorithm |
CN107579817A (en) * | 2017-09-12 | 2018-01-12 | 广州广电运通金融电子股份有限公司 | User ID authentication method, apparatus and system based on block chain |
CN108632284A (en) * | 2018-05-10 | 2018-10-09 | 网易(杭州)网络有限公司 | User data authorization method, medium, device and computing device based on block chain |
CN109728898A (en) * | 2019-03-08 | 2019-05-07 | 湖南师范大学 | Internet-of-things terminal safety communicating method based on block chain technology |
CN109768988A (en) * | 2019-02-26 | 2019-05-17 | 安捷光通科技成都有限公司 | Decentralization Internet of Things security certification system, facility registration and identity identifying method |
CN109918878A (en) * | 2019-04-24 | 2019-06-21 | 中国科学院信息工程研究所 | A kind of industrial internet of things equipment authentication and safety interacting method based on block chain |
CN110336832A (en) * | 2019-07-24 | 2019-10-15 | 深圳传音控股股份有限公司 | A kind of information encryption and decryption method, device, terminal and storage medium |
KR20190139742A (en) * | 2018-12-31 | 2019-12-18 | 주식회사 미탭스플러스 | Distributed Ledger for logging inquiry time in blockchain |
CN110601853A (en) * | 2019-09-17 | 2019-12-20 | 腾讯科技(深圳)有限公司 | Block chain private key generation method and equipment |
CN110781509A (en) * | 2019-10-28 | 2020-02-11 | 腾讯科技(深圳)有限公司 | Data verification method and device, storage medium and computer equipment |
WO2020082226A1 (en) * | 2018-10-23 | 2020-04-30 | Beijing DIDI Infinity Technology and Development Co., Ltd | Method and system for transferring data in a blockchain system |
Family Cites Families (17)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US8745758B2 (en) * | 2009-11-02 | 2014-06-03 | Time Warner Cable Enterprises Llc | Apparatus and methods for device authorization in a premises network |
CN103546294B (en) * | 2013-10-10 | 2017-03-29 | 小米科技有限责任公司 | Entrance guard authorization method, device and equipment |
CN104506510B (en) * | 2014-12-15 | 2017-02-08 | 百度在线网络技术(北京)有限公司 | Method and device for equipment authentication and authentication service system |
CN105141621A (en) * | 2015-09-16 | 2015-12-09 | 北京星网锐捷网络技术有限公司 | Network access monitoring method and device |
CN106899547B (en) * | 2015-12-18 | 2020-07-31 | 阿里巴巴集团控股有限公司 | Equipment operation method based on Internet of things and server |
CN106101147B (en) * | 2016-08-12 | 2019-04-23 | 北京同余科技有限公司 | A kind of method and system for realizing smart machine and the communication of remote terminal dynamic encryption |
US10356102B2 (en) * | 2017-02-24 | 2019-07-16 | Verizon Patent And Licensing Inc. | Permissions using blockchain |
WO2018172819A1 (en) * | 2017-03-23 | 2018-09-27 | Pismo Labs Technology Ltd. | Method and system for updating a whitelist at a network node |
CN108809914A (en) * | 2017-05-05 | 2018-11-13 | 国民技术股份有限公司 | Access control method, device, terminal and Internet of Things house system |
CN108880797B (en) * | 2018-06-27 | 2021-09-24 | 京信网络系统股份有限公司 | Authentication method of Internet of things equipment and Internet of things equipment |
CN109302415B (en) * | 2018-11-09 | 2019-11-01 | 四川虹微技术有限公司 | A kind of authentication method, block chain node and storage medium |
CN109462588B (en) * | 2018-11-13 | 2021-04-16 | 上海物融智能科技有限公司 | Decentralized data transaction method and system based on block chain |
CN109714174B (en) * | 2019-02-18 | 2021-08-17 | 中国科学院合肥物质科学研究院 | Internet of things equipment digital identity management system and method based on block chain |
CN110493261B (en) * | 2019-09-16 | 2021-07-27 | 腾讯科技(深圳)有限公司 | Verification code obtaining method based on block chain, client, server and storage medium |
CN110633328B (en) * | 2019-09-25 | 2024-03-22 | 腾讯云计算(北京)有限责任公司 | Information processing method, device and computer readable storage medium |
CN110597924B (en) * | 2019-09-29 | 2021-08-06 | 腾讯科技(深圳)有限公司 | Block chain-based user identification processing method, device, equipment and storage medium |
CN111010372A (en) * | 2019-11-20 | 2020-04-14 | 国家信息中心 | Block chain network identity authentication system, data processing method and gateway equipment |
-
2020
- 2020-07-16 CN CN202210702311.7A patent/CN115242440B/en active Active
- 2020-07-16 CN CN202010684456.XA patent/CN111835775A/en active Pending
Patent Citations (11)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
KR20170083359A (en) * | 2016-01-08 | 2017-07-18 | 주식회사 유비벨록스모바일 | Method for encryption and decryption of IoT(Internet of Things) devices using AES algorithm |
CN107579817A (en) * | 2017-09-12 | 2018-01-12 | 广州广电运通金融电子股份有限公司 | User ID authentication method, apparatus and system based on block chain |
CN108632284A (en) * | 2018-05-10 | 2018-10-09 | 网易(杭州)网络有限公司 | User data authorization method, medium, device and computing device based on block chain |
WO2020082226A1 (en) * | 2018-10-23 | 2020-04-30 | Beijing DIDI Infinity Technology and Development Co., Ltd | Method and system for transferring data in a blockchain system |
KR20190139742A (en) * | 2018-12-31 | 2019-12-18 | 주식회사 미탭스플러스 | Distributed Ledger for logging inquiry time in blockchain |
CN109768988A (en) * | 2019-02-26 | 2019-05-17 | 安捷光通科技成都有限公司 | Decentralization Internet of Things security certification system, facility registration and identity identifying method |
CN109728898A (en) * | 2019-03-08 | 2019-05-07 | 湖南师范大学 | Internet-of-things terminal safety communicating method based on block chain technology |
CN109918878A (en) * | 2019-04-24 | 2019-06-21 | 中国科学院信息工程研究所 | A kind of industrial internet of things equipment authentication and safety interacting method based on block chain |
CN110336832A (en) * | 2019-07-24 | 2019-10-15 | 深圳传音控股股份有限公司 | A kind of information encryption and decryption method, device, terminal and storage medium |
CN110601853A (en) * | 2019-09-17 | 2019-12-20 | 腾讯科技(深圳)有限公司 | Block chain private key generation method and equipment |
CN110781509A (en) * | 2019-10-28 | 2020-02-11 | 腾讯科技(深圳)有限公司 | Data verification method and device, storage medium and computer equipment |
Non-Patent Citations (2)
Title |
---|
DEEPA PAVITHRAN: "Towards Creating Public Key Authentication for IoT Blockchain", 《2019 SIXTH HCT INFORMATION TECHNOLOGY TRENDS (ITT)》 * |
周艺华;李洪明;: "基于区块链的数据管理方案", 信息安全研究, no. 01 * |
Also Published As
Publication number | Publication date |
---|---|
CN115242440B (en) | 2024-01-26 |
CN111835775A (en) | 2020-10-27 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US11558381B2 (en) | Out-of-band authentication based on secure channel to trusted execution environment on client device | |
AU2021231439B2 (en) | Storage and communication environment for cryptographic tags | |
CN106878318B (en) | Block chain real-time polling cloud system | |
CN107483419B (en) | Method, device and system for authenticating access terminal by server, server and computer readable storage medium | |
CN102546171B (en) | Secure element authentication method | |
WO2016184216A1 (en) | Link-stealing prevention method, link-stealing prevention server, and client side | |
CN115967534A (en) | Retrieving public data of blockchain networks using trusted execution environments | |
CN112765684B (en) | Block chain node terminal management method, device, equipment and storage medium | |
CN110990827A (en) | Identity information verification method, server and storage medium | |
CN110113355B (en) | Internet of things cloud access method and device | |
EP2798772A1 (en) | Web authentication using client platform root of trust | |
CN112016106A (en) | Authentication calling method, device, equipment and readable storage medium of open interface | |
US11424915B2 (en) | Terminal registration system and terminal registration method with reduced number of communication operations | |
CN114257376B (en) | Digital certificate updating method, device, computer equipment and storage medium | |
CN111130769A (en) | Internet of things terminal encryption method and device | |
CN108900595B (en) | Method, device and equipment for accessing data of cloud storage server and computing medium | |
Feng et al. | Autonomous vehicles' forensics in smart cities | |
JP2008176741A (en) | Client terminal, service providing server, service providing system, control method, and service providing method | |
CN115242440B (en) | Block chain-based internet of things equipment trusted calling method, device and equipment | |
CN115482132A (en) | Data processing method and device for electronic contract based on block chain and server | |
CN114861144A (en) | Data authority processing method based on block chain | |
KR102534012B1 (en) | System and method for authenticating security level of content provider | |
US20230155839A1 (en) | Peer-to-peer secure conditional transfer of cryptographic data | |
CN115580495B (en) | Data auditing method and device, electronic equipment and storage medium | |
CN113556365B (en) | Authentication result data transmission system, method and device |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PB01 | Publication | ||
PB01 | Publication | ||
SE01 | Entry into force of request for substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
GR01 | Patent grant | ||
GR01 | Patent grant |