CN115696500A

CN115696500A - Service platform switching method, device and system, terminal equipment and service platform

Info

Publication number: CN115696500A
Application number: CN202110869351.6A
Authority: CN
Inventors: 张云龙
Original assignee: China Mobile Communications Group Co Ltd; China Mobile IoT Co Ltd
Current assignee: China Mobile Communications Group Co Ltd; China Mobile IoT Co Ltd
Priority date: 2021-07-30
Filing date: 2021-07-30
Publication date: 2023-02-03

Abstract

The invention provides a method, a device, a system, a terminal device and a service platform for switching service platforms, wherein the method comprises the following steps: under the condition that at least one terminal device and at least two service platforms are successfully accessed to the Internet of things access management system, receiving application query information sent by a first terminal device; sending service platform attribute information to the first terminal equipment according to the application query information; receiving switching request information sent by the first terminal equipment according to the service platform attribute information; and switching the first service platform connected with the first terminal equipment to a second service platform according to the switching request information and the service platform attribute information. The scheme of the invention can realize the decoupling of the terminal equipment and the service platform, realize the free combination or switching of the terminal equipment and the service platform and improve the utilization rate of products.

Description

Service platform switching method, device and system, terminal equipment and service platform

Technical Field

The invention relates to the technical field of internet of things, in particular to a service platform switching method, a device, a system, terminal equipment and a service platform.

Background

In the prior art, a service platform is usually supported by a terminal, or supported switchable service platforms belong to the same party and have the same protocol, and in the consumption process, a consumer needs to purchase a product in a form of strong coupling of the terminal and the service platform, so that the consumption cost is increased.

Disclosure of Invention

The embodiment of the invention provides a service platform switching method, a device, a system, terminal equipment and a service platform, which are used for solving the problem of strong coupling between a terminal and the service platform in the prior art.

In order to solve the above technical problem, an embodiment of the present invention provides the following technical solutions:

in a first aspect, an embodiment of the present invention provides an internet of things service platform switching method, which is applied to an internet of things access management system, and the method includes:

under the condition that at least one terminal device and at least two service platforms are successfully accessed to the Internet of things access management system, receiving application query information sent by a first terminal device;

sending service platform attribute information to the first terminal equipment according to the application query information;

receiving switching request information sent by the first terminal equipment according to the service platform attribute information;

and switching the first service platform connected with the first terminal equipment to a second service platform according to the switching request information and the service platform attribute information.

Optionally, after the switching the first service platform connected to the first terminal device to the second service platform according to the switching request information and the service platform attribute information, the method further includes:

respectively sending service keys to the first terminal equipment and the second service platform according to the switching request information and the application query information;

the service key is used for encrypting first service data interacted between the first terminal device and the second service platform.

Optionally, the handover request information includes: service failure time;

the application query information includes: device identification information of the first terminal device;

the sending service keys to the first terminal device and the second service platform respectively according to the handover request information and the application query information includes:

acquiring a dispersion factor according to the platform identification information of the second service platform, the service failure time, the random number generated by the internet of things access management system and the equipment identification information;

acquiring the service key according to the dispersion factor;

and respectively sending the encrypted service keys to the first terminal equipment and the second service platform.

Optionally, the handover request information includes: service failure time;

after the service keys are respectively sent to the first terminal device and the second service platform according to the handover request information and the application query information, the method further includes:

when the absolute value of the difference between a first time length and a time length indicated by the service failure time is smaller than a first preset time length, respectively sending prompt information to the first terminal device and the second service platform, wherein the first time length is the time length for service data interaction between the first terminal device and the second service platform; or

And under the condition that the time difference value between the first time and the service failure time is smaller than a first preset time value, respectively sending prompt messages to the first terminal equipment and the second service platform, wherein the first time is the time for service data interaction between the first terminal equipment and the second service platform.

Optionally, after the service keys are respectively sent to the first terminal device and the second service platform according to the handover request information and the application query information, the method further includes:

acquiring second service data sent by the first terminal equipment every second preset time, wherein the second service data is obtained by carrying out hash operation on the first service data by the first terminal equipment;

optionally, after the second service data sent by the first terminal device is obtained, the method further includes:

after a second service platform connected with the first terminal equipment is switched to a third service platform, sending data index information to the second service platform;

optionally, in the case that the at least one terminal device and the at least two service platforms successfully access the internet of things access management system, before receiving the application query information sent by the first terminal device, the method further includes:

acquiring device access application information respectively sent by the at least one terminal device;

respectively sending equipment identification information to the at least one terminal equipment according to the equipment access application information;

the device identification information is used for indicating that the at least one terminal device successfully accesses the internet of things access management system.

Optionally, the device access application information includes: a protocol template index number, a public key and a data packet with appointed test data;

the sending device identification information to the at least one terminal device respectively according to the device access application information includes:

judging whether the protocol template corresponding to the index number of the protocol template can analyze the data packet or not;

if the protocol template can analyze the data packet, generating equipment identification information;

encrypting the equipment identification information through the public key to obtain encrypted equipment identification information;

and respectively sending the encrypted equipment identification information to the at least one terminal equipment.

acquiring platform access application information respectively sent by the at least two service platforms;

respectively sending platform identification information to the at least two service platforms according to the platform access application information;

the platform identification information is used for indicating that the at least two service platforms are successfully accessed to the internet of things access management system.

Optionally, the platform access application information includes: a protocol template index number, a public key and a data packet with appointed test data;

the sending of the platform identification information to the at least two service platforms respectively according to the platform access application information includes:

if the protocol template can analyze the data packet, generating platform identification information;

encrypting the platform identification information through the public key to obtain the encrypted platform identification information;

and respectively sending the encrypted platform identification information to the at least two service platforms.

Optionally, the service platform attribute information includes: an Internet Protocol (IP) of the service platform and a service platform protocol index number;

the receiving of the handover request information sent by the first terminal device according to the service platform attribute information includes:

determining a target service platform capable of analyzing the protocol of the first terminal device according to the device identification information of the first terminal device and the corresponding relation between the preset device identification information and the service platform protocol index number, wherein the target service platform comprises at least one service platform;

sending first information to the first terminal device, wherein the first information comprises service platform attribute information of the target service platform;

and acquiring switching request information sent by the first terminal device according to the first information, wherein the switching request information comprises a first Internet Protocol (IP) of the second service platform, and the second service platform is one of the target service platforms.

In a second aspect, an embodiment of the present invention provides a method for switching an internet of things service platform, where the method is applied to a first terminal device, and the method includes:

under the condition that at least one terminal device and at least two service platforms are successfully accessed to the Internet of things access management system, sending application query information to the Internet of things access management system;

receiving service platform attribute information sent by the Internet of things access management system according to the application query information;

and sending switching request information to the Internet of things access management system according to the service platform attribute information so that the Internet of things access management system switches the first service platform connected with the first terminal equipment to a second service platform.

Optionally, after the sending, according to the service platform attribute information, switching request information to the internet of things access management system so that the internet of things access management system switches a first service platform connected to the first terminal device to a second service platform, the method further includes:

receiving a service key sent by the Internet of things access management system according to the switching request information and the application query information;

Optionally, the handover request information includes: service failure time;

the receiving a service key sent by the internet of things access management system according to the switching request information and the application query information includes:

receiving a service key which is sent by the Internet of things access management system and encrypted according to the switching request information and the application query information;

the service key is obtained by the Internet of things access management system according to a dispersion factor; the dispersion factor is obtained by the internet of things access management system according to the platform identification information of the second service platform, the service failure time, the random number generated by the internet of things access management system and the equipment identification information.

Optionally, the handover request information includes: service failure time;

after the receiving of the service key sent by the internet of things access management system according to the handover request information and the application query information, the method further includes:

receiving prompt information sent by the internet of things access management system under the condition that the absolute value of the difference between a first time length and a time length indicated by the service failure time is smaller than a first preset time length, wherein the first time length is the time length for service data interaction between the first terminal equipment and the second service platform; or

And receiving prompt information sent by the Internet of things access management system under the condition that a time difference value between a first time and the service failure time is smaller than a first preset time value, wherein the first time is the time for the first terminal device and the second service platform to perform service data interaction.

Optionally, after the receiving the service key sent by the internet of things access management system according to the handover request information and the application query information, the method further includes:

performing hash operation on the first service data every second preset time to obtain second service data;

and sending the second service data to the access management system of the Internet of things.

Optionally, in the case that the at least one terminal device and the at least two service platforms successfully access the internet of things access management system, before sending the application query information to the internet of things access management system, the method further includes:

sending equipment access application information to the Internet of things access management system;

receiving equipment identification information sent by the Internet of things access management system according to the equipment access application information;

Optionally, the device access application information includes: the protocol template index number, the public key and the data packet with the appointed test data;

the receiving the equipment identification information sent by the internet of things access management system according to the access application information includes:

receiving encrypted equipment identification information sent by the Internet of things access management system;

the encrypted equipment identification information is obtained by encrypting the equipment identification information by the Internet of things access management system according to the public key; the equipment identification information is generated by the internet of things access management system under the condition that the protocol template corresponding to the protocol template index number can be analyzed by the internet of things access management system.

Optionally, the service platform attribute information includes: the Internet protocol IP of the service platform and the service platform protocol index number;

the sending of the switching request information to the internet of things access management system according to the service platform attribute information includes:

receiving first information sent by the Internet of things access management system, wherein the first information comprises service platform attribute information of a target service platform;

sending switching request information to the internet of things access management system according to the first information, wherein the switching request information comprises a first Internet Protocol (IP) of the second service platform, and the second service platform is one of the target service platforms;

the target service platform is a service platform which is determined by the internet of things access management system according to the equipment identification information of the first terminal equipment and the corresponding relation between the preset equipment identification information and a service platform protocol index number and can analyze the protocol of the first terminal equipment; the target service platform comprises at least one service platform.

In a third aspect, an embodiment of the present invention provides an internet of things service platform switching method, which is applied to a second service platform, and the method includes:

under the condition that at least one terminal device and at least two service platforms are successfully accessed to the Internet of things access management system, the terminal device is connected with a first terminal device through the Internet of things access management system;

the second service platform is a platform which is connected with the first terminal equipment after the internet of things access management system switches the first service platform connected with the first terminal equipment according to the switching request information and the service platform attribute information; the switching request information is sent to the internet of things access management system by the first terminal equipment according to the service platform attribute information; the service platform attribute information is sent to the first terminal device by the internet of things access management system according to application query information; the application query information is sent to the internet of things access management system by the first terminal device.

Optionally, after connecting with the first terminal device through the internet of things access management system, the method further includes:

Optionally, the handover request information includes: service failure time;

receiving prompt information sent by the Internet of things access management system under the condition that the absolute value of the difference between a first time length and a time length indicated by the service failure time is smaller than a first preset time length; or alternatively

Receiving prompt information sent by the Internet of things access management system under the condition that a time difference value between first time and service failure time is smaller than a first preset time value;

the first duration is the duration of service data interaction between the first terminal device and the second service platform;

the first time is the time of service data interaction between the first terminal device and the second service platform.

after a second service platform connected with the first terminal equipment is switched to a third service platform, receiving data index information sent by the internet of things access management system;

and sending third service data to the internet of things access management system according to the data index information, so that the internet of things access management system sends the second service data to the third service platform under the condition that the second service data is verified to be correct according to the third service data.

Optionally, in a case that the at least one terminal device and the at least two service platforms successfully access the internet of things access management system, before connecting with the first terminal device through the internet of things access management system, the method further includes:

sending platform access application information to the Internet of things access management system;

receiving platform identification information sent by the Internet of things access management system according to the platform access application information;

the receiving platform identification information sent by the internet of things access management system according to the platform access application information includes:

receiving encrypted platform identification information sent by the Internet of things access management system;

the platform identification information after encryption is obtained by encrypting the platform identification information by the internet of things access management system according to the public key; the platform identification information is generated by the internet of things access management system under the condition that the protocol template corresponding to the protocol template index number can be analyzed by the internet of things access management system.

In a fourth aspect, an embodiment of the present invention provides an internet of things service platform switching device, which is applied to an internet of things access management system, and the device includes:

the first receiving module is used for receiving application query information sent by the first terminal equipment under the condition that at least one terminal equipment and at least two service platforms are successfully accessed to the Internet of things access management system;

the first sending module is used for sending the service platform attribute information to the first terminal equipment according to the application query information;

a second receiving module, configured to receive handover request information sent by the first terminal device according to the service platform attribute information;

and the switching module is used for switching the first service platform connected with the first terminal equipment into the second service platform according to the switching request information and the service platform attribute information.

Optionally, the apparatus further comprises:

a key sending module, configured to send service keys to the first terminal device and the second service platform according to the handover request information and the application query information;

Optionally, the handover request information includes: service failure time;

the key sending module comprises:

a first obtaining unit, configured to obtain a dispersion factor according to platform identification information of the second service platform, the service failure time, the random number generated by the internet of things access management system, and the device identification information;

a second obtaining unit, configured to obtain the service key according to the dispersion factor;

and the first sending unit is used for respectively sending the encrypted service keys to the first terminal equipment and the second service platform.

Optionally, the handover request information includes: service failure time;

the device further comprises:

a prompt message sending module, configured to send prompt messages to the first terminal device and the second service platform respectively when an absolute value of a difference between a first time length and a time length indicated by the service failure time is less than a first preset time length, where the first time length is a time length for service data interaction between the first terminal device and the second service platform; or

Optionally, the apparatus further comprises:

the service data acquisition module is used for acquiring second service data sent by the first terminal equipment at intervals of a second preset duration; the second service data is obtained by performing hash operation on the first service data by the first terminal device.

Optionally, the apparatus further comprises:

the index information sending module is used for sending data index information to a second service platform after the second service platform connected with the first terminal equipment is switched to a third service platform;

the service data receiving module is used for receiving third service data sent by the second service platform according to the data index information;

and the first service data sending module is used for sending the second service data to the third service platform under the condition that the second service data is verified to be correct according to the third service data.

Optionally, the apparatus further comprises:

a first access application information obtaining module, configured to obtain device access application information respectively sent by the at least one terminal device;

a first identification information sending module, configured to send device identification information to the at least one terminal device respectively according to the device access application information;

the first identification information sending module includes:

the first judging unit is used for judging whether the protocol template corresponding to the index number of the protocol template can analyze the data packet or not;

a first generating unit, configured to generate device identification information if the protocol template can analyze the data packet;

the first encryption unit is used for encrypting the equipment identification information through the public key to obtain the encrypted equipment identification information;

a first identifier sending unit, configured to send the encrypted device identifier information to the at least one terminal device, respectively.

Optionally, the apparatus further comprises:

the second access application information acquisition module is used for acquiring platform access application information respectively sent by the at least two service platforms;

the second identification information sending module is used for respectively sending platform identification information to the at least two service platforms according to the platform access application information;

the second identification information sending module includes:

the second judging unit is used for judging whether the protocol template corresponding to the index number of the protocol template can analyze the data packet or not;

a second generating unit, configured to generate platform identification information if the protocol template can analyze the data packet;

the second encryption unit is used for encrypting the platform identification information through the public key to obtain the encrypted platform identification information;

and the second identifier sending unit is used for sending the encrypted platform identifier information to the at least two service platforms respectively.

the second receiving module includes:

a first determining unit, configured to determine, according to the device identification information of the first terminal device and a correspondence between preset device identification information and a service platform protocol index number, a target service platform that is capable of analyzing a protocol of the first terminal device, where the target service platform includes at least one service platform;

a first information sending unit, configured to send first information to the first terminal device, where the first information includes service platform attribute information of the target service platform;

a first information obtaining unit, configured to obtain handover request information sent by the first terminal device according to the first information, where the handover request information includes a first internet protocol IP of the second service platform, and the second service platform is one of the target service platforms.

In a fifth aspect, an embodiment of the present invention provides an internet of things service platform switching device, which is applied to a first terminal device, and the device includes:

the second sending module is used for sending application query information to the Internet of things access management system under the condition that at least one terminal device and at least two service platforms are successfully accessed to the Internet of things access management system;

the third receiving module is used for receiving the service platform attribute information sent by the internet of things access management system according to the application query information;

and the third sending module is used for sending switching request information to the internet of things access management system according to the service platform attribute information so that the internet of things access management system switches the first service platform connected with the first terminal device into the second service platform.

Optionally, the apparatus further comprises:

the first key receiving module is used for receiving a service key sent by the internet of things access management system according to the switching request information and the application query information;

Optionally, the handover request information includes: service failure time;

the first key receiving module includes:

a first key receiving unit, configured to receive a service key that is sent by the internet of things access management system and encrypted according to the handover request information and the application query information;

the service key is obtained by the Internet of things access management system according to the dispersion factor; and the dispersion factor is acquired by the Internet of things access management system according to the platform identification information of the second service platform, the service failure time, the random number generated by the Internet of things access management system and the equipment identification information.

Optionally, the handover request information includes: service failure time;

the device further comprises:

the first prompt information receiving module is used for receiving prompt information sent by the internet of things access management system under the condition that the absolute value of the difference value between a first time length and a time length indicated by the service failure time is smaller than a first preset time length, wherein the first time length is the time length for service data interaction between the first terminal equipment and the second service platform; or

And receiving prompt information sent by the Internet of things access management system under the condition that a time difference value between a first time and the service failure time is smaller than a first preset time value, wherein the first time is the time for the first terminal equipment and the second service platform to carry out service data interaction.

Optionally, the apparatus further comprises:

the operation module is used for performing hash operation on the first service data every second preset time interval to obtain second service data;

and the second service data sending module is used for sending the second service data to the internet of things access management system.

Optionally, the apparatus further comprises:

the first access application information sending module is used for sending equipment access application information to the Internet of things access management system;

the first identification receiving module is used for receiving equipment identification information sent by the Internet of things access management system according to the equipment access application information;

the first identity receiving module comprises:

the first identification receiving unit is used for receiving encrypted equipment identification information sent by the Internet of things access management system;

the encrypted equipment identification information is obtained by encrypting the equipment identification information by the Internet of things access management system according to the public key; the equipment identification information is generated by the internet of things access management system under the condition that the protocol template corresponding to the protocol template index number can analyze the data packet.

the third sending module includes:

the first information receiving unit is used for receiving first information sent by the internet of things access management system, wherein the first information comprises service platform attribute information of a target service platform;

a first switching request information sending unit, configured to send switching request information to the internet of things access management system according to the first information, where the switching request information includes a first internet protocol IP of the second service platform, and the second service platform is one of the target service platforms;

the target service platform is a service platform which can analyze the protocol of the first terminal equipment and is determined by the internet of things access management system according to the equipment identification information of the first terminal equipment and the corresponding relation between the preset equipment identification information and the service platform protocol index number; the target service platform comprises at least one service platform.

In a sixth aspect, an embodiment of the present invention provides an internet of things service platform switching device, which is applied to a second service platform, and the device includes:

the system comprises a connection module, a first terminal device and at least two service platforms, wherein the connection module is used for connecting the first terminal device and the at least two service platforms through an Internet of things access management system under the condition that the at least one terminal device and the at least two service platforms are successfully accessed into the Internet of things access management system;

the Internet of things access management system switches a first service platform connected with the first terminal device into the second service platform according to the switching request information and the service platform attribute information; the switching request information is sent to the internet of things access management system by the first terminal equipment according to the service platform attribute information; the service platform attribute information is sent to the first terminal device by the internet of things access management system according to application query information; the application query information is sent to the internet of things access management system by the first terminal device.

Optionally, the apparatus further comprises:

the second key receiving module is used for receiving a service key sent by the internet of things access management system according to the switching request information and the application query information;

Optionally, the handover request information includes: service failure time;

the second key receiving module includes:

a second key receiving unit, configured to receive a service key that is sent by the internet of things access management system and encrypted according to the handover request information and the application query information;

Optionally, the handover request information includes: service failure time;

the device further comprises:

the second prompt information receiving module is configured to receive prompt information sent by the internet of things access management system when an absolute value of a difference between a first time length and a time length indicated by the service failure time is smaller than a first preset time length, where the first time length is a time length for service data interaction between the first terminal device and the second service platform; or

Optionally, the apparatus further comprises:

the index information receiving module is used for receiving data index information sent by the internet of things access management system after a second service platform connected with the first terminal device is switched to a third service platform;

and the third service data sending module is used for sending third service data to the internet of things access management system according to the data index information so as to send the second service data to the third service platform under the condition that the internet of things access management system verifies that the second service data is correct according to the third service number.

Optionally, the apparatus further comprises:

the second access application information sending module is used for sending platform access application information to the Internet of things access management system;

the second identification receiving module is used for receiving platform identification information sent by the Internet of things access management system according to the platform access application information;

Optionally, the platform access application information includes: the protocol template index number, the public key and the data packet with the appointed test data;

the second identity receiving module comprises:

the second identification receiving unit is used for receiving the encrypted platform identification information sent by the internet of things access management system;

the platform identification information after encryption is obtained by encrypting the platform identification information by the internet of things access management system according to the public key; the platform identification information is generated by the internet of things access management system under the condition that the protocol template corresponding to the protocol template index number can analyze the data packet.

In a seventh aspect, an embodiment of the present invention further provides an internet of things access management system, including: a processor, a memory and a program stored on the memory and executable on the processor, the program implementing the steps of the internet of things service platform switching method according to any one of the first aspect when executed by the processor.

In an eighth aspect, an embodiment of the present invention provides a terminal device, where the terminal device is a first terminal device, and the terminal device includes: a processor, a memory and a program stored on the memory and executable on the processor, the program implementing the steps of the internet of things service platform switching method according to any one of the second aspect when executed by the processor.

In a ninth aspect, an embodiment of the present invention provides a service platform, where the service platform is a second service platform, and the service platform includes: a processor, a memory and a program stored on the memory and executable on the processor, wherein the program, when executed by the processor, implements the steps of the service platform switching method of the internet of things according to any one of the third aspects.

In a tenth aspect, an embodiment of the present invention provides a readable storage medium, where a program or an instruction is stored on the readable storage medium, and when the program or the instruction is executed by a processor, the steps of the service platform switching method for the internet of things described in any of the above are implemented.

The invention has the beneficial effects that:

the scheme of the invention provides an access management system of the internet of things, the access management system of the internet of things is connected with at least one terminal device and at least two service platforms, the attribute information of the service platforms is sent to the first terminal device according to the application query information sent by the first terminal device, so that the first terminal device can query the attribute information of different service platforms, selection or switching can be conveniently carried out subsequently according to the attribute information of the service platforms, the first service platform connected with the first terminal device is switched to the second service platform according to the switching request information sent by the first terminal device according to the attribute information of the service platforms and the switching request information and the attribute information of the service platforms, decoupling of the terminal device and the service platforms can be realized, free combination or switching of the terminal device and the service platforms can be realized, and the utilization rate of products can be improved.

Drawings

Fig. 1 shows one of flowcharts of a service platform switching method for the internet of things according to an embodiment of the present invention;

fig. 2 is an architecture diagram of an internet of things access management system according to an embodiment of the present invention;

fig. 3 is a schematic structural diagram of a terminal device according to an embodiment of the present invention;

fig. 4 shows one specific flowchart of the method for switching service platforms of the internet of things according to the embodiment of the present invention;

fig. 5 shows a second specific flowchart of the method for switching service platforms of the internet of things according to the embodiment of the present invention;

fig. 6 shows a second flowchart of a service platform switching method for the internet of things according to an embodiment of the present invention;

fig. 7 shows a third flowchart of a service platform switching method for the internet of things according to an embodiment of the present invention;

fig. 8 is a schematic structural diagram of an internet of things service platform switching device according to an embodiment of the present invention;

fig. 9 illustrates a second schematic structural diagram of a service platform switching device of the internet of things according to an embodiment of the present invention;

fig. 10 is a third schematic structural diagram of a service platform switching device of the internet of things according to an embodiment of the present invention;

fig. 11 is a schematic structural diagram of an internet of things access management system according to an embodiment of the present invention.

Detailed Description

In order to make the objects, technical solutions and advantages of the present invention more apparent, the present invention will be described in detail with reference to the accompanying drawings and specific embodiments.

The invention provides a method, a device, a system, terminal equipment and a service platform for switching the service platform, aiming at the problems of strong coupling and dependence between the terminal and the service platform in the prior art.

Before proceeding with an explanation of embodiments of the present invention, some concepts in the following description will be explained first.

Asymmetric encryption algorithms require two keys: public keys (public keys for short) and private keys (private keys for short). The public key and the private key are a pair, and if data is encrypted with the public key, only the corresponding private key can be decrypted.

The asymmetric cryptosystem has the characteristics that: the algorithm strength is complex, the security depends on the algorithm and the secret key, but the encryption and decryption speed is not as fast as the symmetric encryption and decryption speed due to the complex algorithm. The symmetric cryptosystem has only one kind of key and is not public, and if the key is required to be decrypted, the opposite party is required to know the key. Therefore, the security of the key is ensured, and the asymmetric key body is provided with two keys, one of which is public, so that the key of the other party does not need to be transmitted like a symmetric cipher. Thus, the security is much greater.

The digital signature (also called public key digital signature) is a section of digital string which can be generated only by the sender of the information and cannot be forged by others, and the section of digital string is also a valid proof for the authenticity of the information sent by the sender of the information. It is a common physical signature similar to that written on paper, but implemented using techniques in the field of public key cryptography, and is used in methods for authenticating digital information. A set of digital signatures typically defines two complementary operations, one for signing and the other for verification. The digital signature is an application of asymmetric key encryption technology and digital digest technology.

The security chip is a trusted platform module, is a device capable of independently generating a secret key, encrypting and decrypting, is internally provided with an independent processor and a storage unit, can store the secret key and characteristic data, and provides encryption and security authentication services for a computer. The encryption is carried out by using the security chip, the key is stored in hardware, and stolen data cannot be decrypted, so that the business privacy and the data security are ensured.

The industrial internet identification resolution System is an important component of an industrial internet network System, is a neural center supporting industrial internet interconnection and interworking, and has a function similar to a Domain Name resolution System (DNS) of the internet. The industrial internet identification analysis system gives the unique identity to the article through the modes of bar codes, two-dimensional codes, radio frequency identification tags and the like. The object obtains the industrial Internet identification through corresponding application, and obtains the related information of the object to which the identification belongs through analysis.

In order to prevent the whole system from collapsing after the main key is cracked, the main key needs to be dispersed into a plurality of sub keys through a key dispersion algorithm. The dispersion factor is used as an output to participate in the key dispersion operation.

As shown in fig. 1, an embodiment of the present invention provides a method for switching service platforms of an internet of things, where the method is applied to an access management system of the internet of things, and the method includes:

step 101: and receiving application query information sent by the first terminal equipment under the condition that at least one terminal equipment and at least two service platforms are successfully accessed to the Internet of things access management system.

In the embodiment of the present invention, an access management system of an internet of things is provided, and the access management system of an internet of things is an open access management system of an internet of things, as shown in fig. 2, and mainly includes the following functional modules: the system comprises an access management module, a service platform information display module, a service platform switching management module and a certificate storage module, wherein the other part of the Internet of things access management system further comprises a uniform identification management platform with application, registration and analysis capabilities. The internet of things access management system is further connected with a neutral third-party security service platform (service platform), a terminal device with active communication capability and safety protection capability and the like. In addition, the architecture formed by the internet of things access management system, the terminal equipment and the service platform also comprises a security center module.

The access management system of the internet of things realizes the following functions:

and (3) access management: the access management module is an auditing module of the open Internet of things access management system which can be accessed by the service platform and the terminal equipment, the module determines whether the access can be performed according to the corresponding qualification and the compliance of the corresponding access protocol, the access is successfully synchronized to distribute a uniform identifier for an access object, and the uniform identifier is a country/industry distributed identifier and has relatively universal explanatory property, such as industrial Internet identifiers. The development is described as follows: and when the service platform/terminal equipment meets the requirements of access examination related qualification and the protocol meets the protocol of the access management related protocol module library, allowing the service platform/terminal equipment to access. If the qualification is satisfied and the protocol is not supported, the protocol template can be applied and updated in an offline application mode.

And (3) displaying service platform information: the service platform information display module is a data table integrated by the service platform which can be accessed by the terminal equipment, and the terminal equipment can inquire the required service platform information through the corresponding inquiry rule. The development is described as: for a service platform meeting the access management requirement, after access verification is finished, an Internet Protocol (IP) address of the service platform is input into service platform information display according to attribute information such as Protocol type, the terminal equipment can subsequently send a request to the service platform information display to obtain a service platform IP address set meeting the relevant attribute classification, and the IP is selected according to specific requirements.

And (3) switching management of the service platform: and the service platform switching management module is used for switching the service platform and completing corresponding permission transfer operation according to requirements. The development is described as: and according to the service requirement, after the corresponding service platform IP is acquired from the service platform information display, the switching management of the service platform is required. The handover management includes the following parts: authorizing the switching and negotiating of the new service platform communication key may also include: and exporting the data of the original platform to the new service platform.

Storing the certificate: for some scenarios, data needs to be certified to ensure that the service platform data is not tampered. If the original platform data is exported to the new service platform, the authenticity and credibility of the original platform data are ensured through the evidence storage module.

A schematic structural diagram of The terminal device is shown in fig. 3, the terminal device needs to have an active communication capability to complete communication of a related platform, the communication module may be a cellular module, such as a second Generation mobile communication technology (The 2nd Generation, 2G), a Narrow Band (NB), a fourth Generation mobile communication technology (The 4th Generation, 4G) module, or a short-range transmission module capable of accessing a gateway, such as ZigBee, wireless network communication (WiFi), a bluetooth module, or The like; the security Module with security protection capability is used for key storage, management and cryptographic operation, and may be a security chip, a Subscriber Identity Module (SIM) card, and an on-chip security kernel (TrustZone), and the above components are used to ensure that the key does not exist in the corresponding component, and the corresponding encryption and decryption key can be specified in an index manner. The key and the sensitive data are guaranteed to be stored to a certain extent to resist physical attacks.

Other core components would include a master control, a general purpose memory device, a communication interface, etc.

The main control system can be a common Micro Control Unit (MCU) for control according to a specific scene, if parts such as a security chip and the like are not used for password management and operation, the selected MCU is provided with an on-chip security core and a hardware coprocessor required by necessary password operation, such as a true random number generator, a coprocessor required by a related algorithm and the like; the general-purpose Memory device is used for storing data, firmware and the like with low safety requirements, and the storage medium is non-volatile, and can be a Nor/Nand Flash Memory (Nor/Nand Flash), a charged Erasable Programmable read only Memory (EEPROM), a Ferroelectric Random Access Memory (FRAM) and the like. The communication Interface may be in the form of a Universal Asynchronous Receiver/Transmitter (UART), a Serial Peripheral Interface (SPI), an Inter-Integrated Circuit (IIC), a Universal Serial Bus (USB), or the like, according to specific service requirements.

In the embodiment of the invention, the terminal equipment and the service platform carry out access application to the access management module of the access management system of the Internet of things, and after the access application is successful, the terminal equipment and the service platform obtain the unified identification.

And inputting the service platform attribute information of the service platform successfully applied into the service platform into a service platform information display module of the access management system of the Internet of things.

The first terminal device is a terminal device needing to switch the service platform, when the first terminal device needs to switch the service platform, the first terminal device sends application query information to the service platform information display module, and queries service platform attribute information compounding self requirements, wherein the service platform attribute information comprises an IP (Internet protocol) of the service platform.

Step 102: and sending service platform attribute information to the first terminal equipment according to the application query information.

In the embodiment of the invention, the service platform information display module sends the IP of the service platform compounding the requirements of the first terminal equipment to the first terminal equipment according to the application query information.

Step 103: and receiving switching request information sent by the first terminal equipment according to the service platform attribute information.

In the embodiment of the invention, the first terminal equipment selects from the service platforms meeting the self requirement, determines the IP of the second service platform and sends the IP of the second service platform to the service switching management module of the access management system of the Internet of things.

Step 104: and switching the first service platform connected with the first terminal equipment to a second service platform according to the switching request information and the service platform attribute information.

In the embodiment of the present invention, the service switching management module switches the first service platform connected to the first terminal device to the second service platform according to the IP of the second service platform sent by the first terminal device, and optionally, if the first terminal device is not connected to the first service platform in the initial state, the service switching management module may also directly establish the connection between the first terminal device and the second service platform according to the IP of the second service platform.

The embodiment of the invention provides an access management system of the Internet of things, so that terminal equipment is free from strong dependence on a specific service platform, and the service platform can be selected or dynamically switched by the terminal equipment according to service requirements, customer requirements or scene requirements.

In the embodiment of the invention, after the first terminal equipment establishes the connection with the second service platform through the internet of things access management system, the service switching management module issues the service key to the first terminal equipment and the second service platform for encrypting the service data interacted between the first terminal equipment and the second service platform, so that the safety of data interaction between the terminal equipment and the service platform is improved.

Optionally, the handover request information includes: service failure time;

acquiring the service key according to the dispersion factor;

In the embodiment of the present invention, the second service platform after the switching is selected by the first terminal device, and the encrypted switching request information is sent to the internet of things access management system, where the switching request information includes: the method comprises the steps that a service platform switching instruction and information such as IP (Internet protocol) and service failure time of a second service platform are sent to the second service platform by an Internet of things access management system, if the request fails, failure information is returned to a first terminal device, and if the request succeeds, a service platform switching management module of the Internet of things access management system takes a device identifier of the first terminal device, a platform identifier of the second service platform, the service failure time and a random number generated by the Internet of things access management system as dispersion factors, disperses a service key used for communication between the first terminal device and the second service platform and sends the service key to the first terminal device and the second service platform.

It should be noted that, the internet of things access management system does not store the service key, but stores the device identifier of the first terminal device, the platform identifier of the second service platform, the service expiration time, and the dispersion factor such as the random number generated by the internet of things access management system, and if necessary, uses the dispersion factor for recovering the service key.

It should be noted that, at any time (even if the service failure time is not reached), the terminal may perform the switching of the new service platform and the application of the corresponding service key.

And the service platform switching management module of the Internet of things access management system encrypts the service key through the public key corresponding to the first terminal device and issues the service key to the first terminal device, and encrypts the service key through the public key corresponding to the second service platform and issues the service key to the second service platform.

Optionally, the handover request information includes: service failure time;

In the embodiment of the invention, the first service data interacted between the first terminal equipment and the second service platform is encrypted by the service key and then transmitted.

It should be noted that the service failure time may be a relative time, such as a preset time duration, or an absolute time, such as a preset time point.

If the service failure time is a preset time length, the service switching management module issues prompt information (early warning information) to the first terminal device and the second service platform under the condition that the absolute value of the difference between the time length of service data interaction between the first terminal device and the second service platform and the time length indicated by the service failure time is smaller than the first preset time length. For example, the service failure time indicates that the duration of service data interaction between the first terminal device and the second service platform is 60 minutes, and the first preset duration is 10 minutes, so that the service switching management module issues a prompt message to the first terminal device and the second service platform at 50 minutes of service data interaction between the first terminal device and the second service platform.

If the service failure time is a preset time point, the service switching management module issues prompt information (early warning information) to the first terminal device and the second service platform under the condition that the absolute value of the time difference between the time of the first terminal device and the second service platform for performing service data interaction and the service failure time is smaller than a first preset time value. For example, when the service expiration time indicates that the time point when the service data interaction between the first terminal device and the second service platform is finished is 12, the first preset time value is 10 minutes, and then when the time point when the service data interaction between the first terminal device and the second service platform is 11 hours and 50 minutes, the service switching management module may issue the prompt message to the first terminal device and the second service platform.

It should be noted that, when the service failure time is close, the terminal device communicates with the internet of things access management system, and the service platform switching management module issues the warning message, but cannot control the interaction between the terminal device and the service platform, that is, after the specified service failure time is exceeded, the service platform switching management module cannot (or cannot) control the disconnection of the interaction between the terminal device and the service platform. And after the next switching instruction of the terminal equipment is uploaded, the service platform switching management module issues the next service key for new interaction.

and acquiring second service data sent by the first terminal equipment at every interval of a second preset time length, wherein the second service data is obtained by carrying out hash operation on the first service data by the first terminal equipment.

In the embodiment of the invention, the first service data sent to the second service platform by the first terminal device is sent to the evidence storage module of the internet of things access management system for evidence storage after being subjected to hash operation periodically. In consideration of resource consumption brought by operation, the terminal equipment can definitely collect the point to sample and store the certificate for a period of time according to the self requirement. It is necessary to fully evaluate the randomness of the sampling to prevent the service platform from circumventing the protection brought by the evidence by evaluating the sampling time period. One implementation method is to obtain the sampling point by obtaining the true random number of the security module and performing conversion. For example, at 24 days, the certificate-storing information needs to be reported, at this time, the first six bits of the random number are obtained to represent the starting point of the certificate-storing information, and the first six bits of the random number are obtained again to represent the step length. If the starting point + step size exceeds 24, the period from the starting point to 24 is proved. And carrying out hash operation on the service data in the time period.

And the first terminal equipment reports the sampling evidence storage information and the initial time and step length information of the evidence storage part.

Optionally, after the obtaining of the second service data sent by the first terminal device, the method further includes:

receiving third service data sent by the second service platform according to the data index information;

and under the condition that the second service data is verified to be correct according to the third service data, sending the second service data to the third service platform.

In the embodiment of the invention, when the service platform is switched, the original service platform data is required to be imported, and the verification work of the original service data can be carried out through the certificate storage module. And the Internet of things access management system sends an index part to the original service platform, the original service platform calculates hash of the service data according to the index, then sends the hash-calculated service data to the Internet of things access management system, and compares the hash-calculated service data with the content of the certificate storage module of the Internet of things access management system to finish data authenticity verification work. And after the verification is finished, importing the data of the original service platform and the corresponding key into the switched service platform so that the switched service network platform obtains the data of the original service platform.

In the embodiment of the invention, the terminal equipment sends the access application information to the Internet of things access management system, and after the application is successful, the identification information sent by the Internet of things access management system is obtained.

the sending device identification information to the at least one terminal device according to the device access application information includes:

In the embodiment of the invention, the terminal equipment presets encryption, signature public key and private key through a security way, and a designer to which the terminal equipment belongs submits corresponding qualification, a protocol template index number meeting the access requirement, a user-defined terminal identification, an encryption public key and a data packet with appointed test data to an access management module. And the access management module checks the qualification and judges whether the protocol template indexed by the index number can analyze the incoming data packet. If the user-defined terminal identification is successful, the access management module sends the user-defined terminal identification to a unified identification management platform to apply for unified identification (such as industrial internet identification), and after the application of the unified identification is finished, the access management module encrypts the unified identification through a corresponding public key and sends the encrypted unified identification to the terminal equipment.

In the embodiment of the invention, the service platform sends the access application information to the access management system of the Internet of things, and after the application is successful, the identification information sent by the access management system of the Internet of things is obtained.

the sending of platform identification information to the at least two service platforms respectively according to the platform access application information includes:

In the embodiment of the invention, a business platform presets encryption, a signature public key and a private key through a security path, and a designer to which the business platform belongs submits corresponding qualification, a protocol template index number meeting the access requirement, a self-defined business platform identifier, an encryption public key and a data packet with appointed test data to an access management module. And the access management module checks the qualification and judges whether the protocol template indexed by the index number can analyze the incoming data packet. If the service platform is successful, the access management module sends the user-defined platform identification to the unified identification management platform to apply for unified identification (such as industrial internet identification), and after the application of the unified identification is finished, the access management module encrypts the unified identification through the corresponding public key and sends the unified identification to the service platform.

It should be noted that the terminal device and the service platform need to check whether the terminal device and the service platform have the capability of accessing to the open internet of things access management system. Besides the corresponding qualification information, the content to be sent also needs to be: the system has an own encryption public key for encrypting a subsequently issued service key; the data packet with appointed test data and the index number of the protocol module are used for verifying whether the interaction protocol of the terminal equipment/service platform really meets the protocol template; and the self-defined identification information is used for applying a unified identification for use.

In the embodiment of the invention, after the service platform completes the whole flow of access management, the attribute information of the corresponding service platform is recorded into the service platform information display module for display (the equipment terminal has no corresponding service requirement). The platform attribute information includes: the service platform public key, the service platform IP, the service platform protocol index number, and other service attribute platform information such as service cost, platform stability index, etc.

And the terminal equipment sends a corresponding protocol self-query to the service platform information display module. The transmitted protocol content comprises: the terminal unifies the identification information, the inquiry service platform information display command and the (optional) communication protocol index number. And sending the encrypted signature to a service platform information display module after the encrypted signature is carried out through the asymmetric key. It should be noted that, under the condition that the service platform information display module is connected to a network end (Web), a client can use the Web end to directly input an identifier of the service platform for querying.

And the service platform information display module determines the service platform of the terminal equipment protocol capable of being analyzed according to the corresponding relation between the terminal identification information and the equipment identification information registered in the access management module and the service platform protocol index number.

The service platform information display module issues service platform attribute information, such as IP information, service cost and the like, to the terminal equipment or displays the information on a web end. And the terminal automatically selects the optimal service platform IP which meets the requirement, namely the IP of the second service platform. And the terminal selects an optimal service platform IP according to the requirement, encrypts the signature and informs the open Internet of things access management system, and synchronously informs the service platform of service failure time.

It should be noted that the service platform information display module displays the service platform attribute information meeting the access condition in a recursive manner of protocol type-major class-public key-other information. The reason is that protocol conformance is a necessary/prerequisite for service platform switching.

It should be noted that the key is stored in a security module (security center) with hardware security protection capability, the key does not leave the module at all times, and the master control program can specify the required key by means of handle/index.

The following describes an internet of things service platform switching method according to a specific embodiment.

A typical use scenario is that multiple service platforms need to be switched in the whole life cycle, for example, some instruments and meters need to be supported by a production platform, an operation platform, a calibration platform, a maintenance platform and the like in the life cycle, a specific flow of the service platform switching method of the Internet of things is shown in FIG. 4.

The internet of things service platform switching method of the invention is described below according to another specific embodiment.

Another typical usage scenario is that a consumer purchases a corresponding service platform service within a certain time period according to a demand, for example, in a certain intelligent agriculture scenario, a customer purchases a big data analysis service for analyzing a soil state for one year, and then soil-related state information collected by a terminal is uploaded to a corresponding big data analysis platform. After the internet of things service platform switching method is finished, a client hopes to purchase other big data analysis services with lower price, a specific flow of the internet of things service platform switching method is shown in fig. 5, a terminal and a corresponding service platform apply for accessing an open internet of things access management system, the client purchases the big data analysis platform A big data service, the validity period is one year, the terminal sends the IP information of the big data analysis platform A to the open internet of things access management system, the open internet of things access management system acquires the IP information of the big data analysis platform A, the terminal interacts with the analysis platform A and applies for data storage according to a user-defined sampling point, the client purchases the big data analysis platform B big data service after the one year expires, the terminal sends the IP information of the big data analysis platform B and the corresponding service key to the open internet of things access management system, if raw data is required to be imported, the terminal synchronizes the service key communicated with the big data analysis platform A to the big data analysis platform B, the big data analysis platform B acquires the whole data of the big data analysis platform A encrypted by the key, and the big data analysis platform B verifies that the user-defined data are correct.

By the method for switching the service platform of the internet of things, a service platform designer can finish protocol docking of a corresponding terminal side by using the universal protocol which accords with the protocol template corresponding to access management in the open internet of things access management system without paying more attention to terminal part design; similarly, the equipment terminal designer can complete the protocol docking of the corresponding service platform side by using the universal protocol which accords with the protocol template corresponding to the access management in the open internet of things access management system without paying much attention to the platform end design.

Through the method for switching the service platform of the internet of things, provided by the embodiment of the invention, developers at the platform side and the equipment terminal side can concentrate energy on the self parts completely, and the overall universality is good. The consumer no longer purchases products in a platform + terminal device strong coupling mode, can independently select combination of the device and the service platform, can dynamically switch the service platform, and has the advantages of increasing selection space of the consumer, promoting benign competition of equipment and platform manufacturers, improving the utilization rate of the products, reducing purchase cost of the consumer and the like.

The method for switching the service platforms of the internet of things provided by the embodiment of the invention ensures that the identity of an object (terminal equipment and the service platform) meeting access examination is credible, meets the requirements of a communication protocol, and ensures that different terminal equipment and different service platforms can carry out data interaction under the same protocol template.

In the embodiment of the invention, besides the authority management, the data switching management ensures the credibility of the interactive identities of the two parties by using the interactive terminal and the identification of the service platform as the dispersion factor, and the switching management module provides a group of random numbers as a part of the dispersion factor to ensure the confidentiality. The distributed service key is encrypted and issued through respective asymmetric public keys to ensure that data is not leaked. The switching management module stores corresponding dispersion factors to ensure that the service keys of the terminal and the service platform can be recovered after being lost.

The embodiment of the invention realizes the data storage and the evidence storage, and ensures that the old service platform can be discovered by the evidence storage module if the stored data is modified and verified. The random sampling points are calculated through random numbers to select the evidence storage time period, so that the resource consumption caused by the fact that the terminal equipment carries out evidence storage operation in the whole quantity is reduced.

The embodiment of the invention realizes an attribute information display mechanism of the accessible service platform, the terminal can select the service platform to be accessed by the service, and the displayed service platforms are all subjected to access examination. Therefore, the flexible switching, safety and reliability of the service platform are ensured.

As shown in fig. 6, an embodiment of the present invention provides an internet of things service platform switching method, which is applied to a first terminal device, and the method includes:

step 601: under the condition that at least one terminal device and at least two service platforms are successfully accessed to the Internet of things access management system, sending application query information to the Internet of things access management system;

step 602: receiving service platform attribute information sent by the Internet of things access management system according to the application query information;

step 603: and sending switching request information to the Internet of things access management system according to the service platform attribute information so that the Internet of things access management system switches the first service platform connected with the first terminal equipment to a second service platform.

According to the embodiment of the invention, through the internet of things access management system, the service platform attribute information is sent to the first terminal device according to the application query information sent by the first terminal device, so that the first terminal device can query the attribute information of different service platforms, and can select or switch according to the attribute information of the service platforms subsequently.

Optionally, after the sending, according to the service platform attribute information, switching request information to the internet of things access management system so that the internet of things access management system switches the first service platform connected to the first terminal device to the second service platform, the method further includes:

Optionally, the handover request information includes: service failure time;

the receiving of the service key sent by the internet of things access management system according to the switching request information and the application query information includes:

receiving a service key which is sent by the Internet of things access management system to be encrypted according to the switching request information and the application query information;

Optionally, the handover request information includes: service failure time;

Optionally, after the receiving a service key sent by the internet of things access management system according to the handover request information and the application query information, the method further includes:

and sending the second service data to the Internet of things access management system.

Optionally, before the sending the application query information to the internet of things access management system when the at least one terminal device and the at least two service platforms successfully access the internet of things access management system, the method further includes:

As shown in fig. 7, an embodiment of the present invention provides an internet of things service platform switching method, which is applied to a second service platform, and the method includes:

step 701: under the condition that at least one terminal device and at least two service platforms are successfully accessed to the Internet of things access management system, the terminal device is connected with a first terminal device through the Internet of things access management system;

Optionally, the handover request information includes: service failure time;

the service key is obtained by the Internet of things access management system according to a dispersion factor; and the dispersion factor is acquired by the Internet of things access management system according to the platform identification information of the second service platform, the service failure time, the random number generated by the Internet of things access management system and the equipment identification information.

Optionally, the handover request information includes: service failure time;

after the receiving the service key sent by the internet of things access management system according to the handover request information and the application query information, the method further includes:

receiving prompt information sent by the Internet of things access management system under the condition that the absolute value of the difference value between the first time length and the time length indicated by the service failure time is smaller than a first preset time length; or alternatively

the receiving of the platform identification information sent by the internet of things access management system according to the platform access application information includes:

As shown in fig. 8, an embodiment of the present invention provides an internet of things service platform switching device, which is applied to an internet of things access management system, and the device includes:

a first receiving module 801, configured to receive application query information sent by a first terminal device under the condition that at least one terminal device and at least two service platforms successfully access the internet of things access management system;

a first sending module 802, configured to send service platform attribute information to the first terminal device according to the application query information;

a second receiving module 803, configured to receive handover request information sent by the first terminal device according to the service platform attribute information;

a switching module 804, configured to switch the first service platform connected to the first terminal device to the second service platform according to the switching request information and the service platform attribute information.

According to the embodiment of the invention, the service platform attribute information is sent to the first terminal equipment by the internet of things access management system according to the application query information sent by the first terminal equipment, so that the first terminal equipment can query the attribute information of different service platforms, and can be conveniently selected or switched according to the attribute information of the service platforms subsequently.

Optionally, the apparatus further comprises:

Optionally, the handover request information includes: service failure time;

the key sending module comprises:

a first obtaining unit, configured to obtain a dispersion factor according to the platform identification information of the second service platform, the service expiration time, the random number generated by the internet of things access management system, and the device identification information;

Optionally, the handover request information includes: service failure time;

the device further comprises:

a prompt message sending module, configured to send prompt messages to the first terminal device and the second service platform respectively when an absolute value of a difference between a first time length and a time length indicated by the service failure time is smaller than a first preset time length, where the first time length is a time length for service data interaction between the first terminal device and the second service platform; or

And sending prompt messages to the first terminal equipment and the second service platform respectively under the condition that a time difference value between first time and the service failure time is smaller than a first preset time value, wherein the first time is the time for the first terminal equipment and the second service platform to carry out service data interaction.

Optionally, the apparatus further comprises:

the first identification information sending module includes:

Optionally, the apparatus further comprises:

the second identification information sending module includes:

a second judging unit, configured to judge whether a protocol template corresponding to the protocol template index number can parse the data packet;

the second receiving module 803 includes:

It should be noted that the service platform switching device for the internet of things provided by the embodiment of the present invention is a device capable of executing the service platform switching method for the internet of things applied to the access management system for the internet of things, and all embodiments of the service platform switching method for the internet of things applied to the access management system for the internet of things are applicable to the device and can achieve the same or similar technical effects.

As shown in fig. 9, an embodiment of the present invention provides an internet of things service platform switching apparatus, which is applied to a first terminal device, and the apparatus includes:

a second sending module 901, configured to send application query information to the internet of things access management system when at least one terminal device and at least two service platforms successfully access the internet of things access management system;

a third receiving module 902, configured to receive service platform attribute information sent by the internet of things access management system according to the application query information;

a third sending module 903, configured to send, according to the service platform attribute information, switching request information to the internet of things access management system, so that the internet of things access management system switches the first service platform connected to the first terminal device to the second service platform.

Optionally, the apparatus further comprises:

Optionally, the handover request information includes: service failure time;

the first key receiving module includes:

the service key is obtained by the Internet of things access management system according to the dispersion factor; the dispersion factor is obtained by the internet of things access management system according to the platform identification information of the second service platform, the service failure time, the random number generated by the internet of things access management system and the equipment identification information.

Optionally, the handover request information includes: service failure time;

the device further comprises:

the first prompt information receiving module is used for receiving prompt information sent by the internet of things access management system under the condition that the absolute value of the difference value between a first time length and a time length indicated by the service failure time is smaller than a first preset time length, wherein the first time length is the time length for service data interaction between the first terminal equipment and the second service platform; or alternatively

Optionally, the apparatus further comprises:

the operation module is used for performing hash operation on the first service data at intervals of a second preset time length to obtain second service data;

Optionally, the apparatus further comprises:

the first identity receiving module comprises:

the third sending module 903 includes:

It should be noted that the service platform switching device of the internet of things provided in the embodiment of the present invention is a device capable of executing the service platform switching method of the internet of things applied to the first terminal device, and all embodiments of the service platform switching method of the internet of things applied to the first terminal device are applicable to the device and can achieve the same or similar technical effects.

As shown in fig. 10, an embodiment of the present invention provides an internet of things service platform switching device, which is applied to a second service platform, and the device includes:

the connection module 1001 is used for connecting with a first terminal device through an internet of things access management system under the condition that at least one terminal device and at least two service platforms are successfully accessed into the internet of things access management system;

the internet of things access management system switches a first service platform connected with the first terminal device to the second service platform according to the switching request information and the service platform attribute information; the switching request information is sent to the internet of things access management system by the first terminal equipment according to the service platform attribute information; the service platform attribute information is sent to the first terminal device by the internet of things access management system according to application query information; the application query information is sent to the internet of things access management system by the first terminal device.

Optionally, the apparatus further comprises:

Optionally, the handover request information includes: service failure time;

the second key receiving module includes:

Optionally, the handover request information includes: service failure time;

the device further comprises:

the second prompt information receiving module is used for receiving prompt information sent by the internet of things access management system under the condition that the absolute value of the difference value between a first time length and a time length indicated by the service failure time is smaller than a first preset time length, wherein the first time length is the time length for service data interaction between the first terminal equipment and the second service platform; or alternatively

Optionally, the apparatus further comprises:

the index information receiving module is used for receiving data index information sent by the internet of things access management system after the second service platform connected with the first terminal device is switched to the third service platform;

Optionally, the apparatus further comprises:

the second identity receiving module comprises:

It should be noted that the service platform switching device of the internet of things provided in the embodiment of the present invention is a device capable of executing the service platform switching method of the internet of things applied to the second service platform, and all embodiments of the service platform switching method of the internet of things applied to the second service platform are applicable to the device, and can achieve the same or similar technical effects.

As shown in fig. 11, an embodiment of the present invention further provides an internet of things access management system, including: a processor 1100; and a memory 1110 connected to the processor 1100 through a bus interface, the memory 1110 being used to store programs and data used by the processor 1100 in performing operations, the processor 1100 calling and executing the programs and data stored in the memory 1110.

The internet of things access management system further comprises a transceiver 1120, wherein the transceiver 1120 is connected with the bus interface and is used for receiving and sending data under the control of the processor 1100; the processor 1100 is used to read programs in the memory 1110.

Specifically, the transceiver 1120 is configured to receive application query information sent by a first terminal device when at least one terminal device and at least two service platforms successfully access the internet of things access management system; sending service platform attribute information to the first terminal equipment according to the application query information; and receiving switching request information sent by the first terminal equipment according to the service platform attribute information.

The processor 1100 is configured to switch a first service platform connected to the first terminal device to a second service platform according to the switching request information and the service platform attribute information.

Optionally, the transceiver 1120 is further configured to send service keys to the first terminal device and the second service platform respectively according to the handover request information and the application query information;

Optionally, the handover request information includes: service failure time;

the processor 1100 is specifically configured to obtain a dispersion factor according to the platform identification information of the second service platform, the service expiration time, the random number generated by the internet of things access management system, and the device identification information; and acquiring the service key according to the dispersion factor.

The transceiver 1120 is specifically configured to send the encrypted service keys to the first terminal device and the second service platform, respectively.

Optionally, the handover request information includes: service failure time;

the transceiver 1120 is further configured to send a prompt message to the first terminal device and the second service platform respectively when an absolute value of a difference between a first time length and a time length indicated by the service failure time is less than a first preset time length, where the first time length is a time length for service data interaction between the first terminal device and the second service platform; or

Optionally, the transceiver 1120 is further configured to acquire, at every second preset duration, second service data sent by the first terminal device, where the second service data is obtained by performing a hash operation on the first service data by the first terminal device.

Optionally, the transceiver 1120 is further configured to send data index information to a second service platform connected to the first terminal device after the second service platform is switched to a third service platform; receiving third service data sent by the second service platform according to the data index information; and sending the second service data to the third service platform under the condition that the second service data is verified to be correct according to the third service data.

Optionally, the transceiver 1120 is further configured to acquire device access application information respectively sent by the at least one terminal device; and respectively sending equipment identification information to the at least one terminal equipment according to the equipment access application information;

the processor 1100 is specifically configured to determine whether the protocol template corresponding to the protocol template index number can parse the data packet; if the protocol template can analyze the data packet, generating equipment identification information; and encrypting the equipment identification information through the public key to obtain the encrypted equipment identification information.

The transceiver 1120 is specifically configured to send the encrypted device identification information to the at least one terminal device, respectively.

Optionally, the transceiver 1120 is further configured to acquire platform access application information sent by the at least two service platforms, respectively; and respectively sending platform identification information to the at least two service platforms according to the platform access application information;

the processor 1100 is specifically configured to determine whether the protocol template corresponding to the protocol template index number can parse the data packet; if the protocol template can analyze the data packet, generating platform identification information; and encrypting the platform identification information through the public key to obtain the encrypted platform identification information.

The transceiver 1120 is specifically configured to send the encrypted platform identification information to the at least two service platforms, respectively.

the processor 1100 is specifically configured to determine, according to the device identification information of the first terminal device and a correspondence between preset device identification information and a service platform protocol index number, a target service platform capable of analyzing a protocol of the first terminal device, where the target service platform includes at least one service platform;

the transceiver 1120 is specifically configured to send first information to the first terminal device, where the first information includes service platform attribute information of the target service platform; and acquiring handover request information sent by the first terminal device according to the first information, wherein the handover request information comprises a first Internet Protocol (IP) of the second service platform, and the second service platform is one of the target service platforms.

In fig. 11, among other things, the bus architecture may include any number of interconnected buses and bridges, with one or more processors, represented by processor 1100, and various circuits, represented by memory 1110, being linked together. The bus architecture may also link together various other circuits such as peripherals, voltage regulators, power management circuits, and the like, which are well known in the art, and therefore, will not be described any further herein. The bus interface provides an interface. The transceiver 1120 may be a plurality of elements including a transmitter and a transceiver providing a means for communicating with various other apparatus over a transmission medium. For different terminals, the user interface 1130 may also be an interface capable of interfacing with desired devices, including but not limited to a keypad, display, speaker, microphone, joystick, etc. The processor 1100 is responsible for managing the bus architecture and general processing, and the memory 1110 may store data used by the processor 1100 in performing operations.

An embodiment of the present invention further provides a terminal device, where the terminal device is a first terminal device, and the terminal device includes: a processor; and the memory is connected with the processor through a bus interface and is used for storing programs and data used by the processor when the processor executes operation, and the processor calls and executes the programs and the data stored in the memory.

The terminal equipment also comprises a transceiver, wherein the transceiver is connected with the bus interface and is used for receiving and sending data under the control of the processor; the processor is used for reading the program in the memory.

It should be noted that the structure of the terminal device provided in the embodiment of the present invention is similar to the structure of the internet of things access management system shown in fig. 11.

Specifically, the transceiver is configured to send application query information to the internet of things access management system when at least one terminal device and at least two service platforms successfully access the internet of things access management system; receiving service platform attribute information sent by the Internet of things access management system according to the application query information; and sending switching request information to the Internet of things access management system according to the service platform attribute information so that the Internet of things access management system switches a first service platform connected with the first terminal device to a second service platform.

Optionally, the transceiver is further configured to receive a service key sent by the internet of things access management system according to the handover request information and the application query information;

Optionally, the handover request information includes: service failure time;

the transceiver is specifically configured to receive a service key encrypted by the internet of things access management system according to the handover request information and the application query information;

Optionally, the handover request information includes: service failure time;

the transceiver is further configured to receive a prompt message sent by the internet of things access management system when an absolute value of a difference between a first time length and a time length indicated by the service failure time is less than a first preset time length, where the first time length is a time length for service data interaction between the first terminal device and the second service platform; or alternatively

Optionally, the processor is further configured to perform hash operation on the first service data at intervals of a second preset duration to obtain second service data.

The transceiver is further configured to send the second service data to the internet of things access management system.

Optionally, the transceiver is further configured to send device access application information to the internet of things access management system; receiving equipment identification information sent by the Internet of things access management system according to the equipment access application information;

the transceiver is specifically configured to receive encrypted device identification information sent by the internet of things access management system;

the transceiver is specifically configured to receive first information sent by the internet of things access management system, where the first information includes service platform attribute information of a target service platform; and sending switching request information to the internet of things access management system according to the first information, wherein the switching request information comprises a first Internet Protocol (IP) of the second service platform, and the second service platform is one of the target service platforms;

The embodiment of the invention provides a service platform, which is a second service platform and comprises a processor; and the memory is connected with the processor through a bus interface and is used for storing programs and data used by the processor when the processor executes operation, and the processor calls and executes the programs and the data stored in the memory.

The service platform also comprises a transceiver, wherein the transceiver is connected with the bus interface and is used for receiving and transmitting data under the control of the processor; the processor is used for reading the program in the memory.

It should be noted that the structure of the service platform provided in the embodiment of the present invention is similar to the structure of the internet of things access management system shown in fig. 11.

Specifically, the processor is configured to, when at least one terminal device and at least two service platforms are successfully accessed to the internet of things access management system, connect with a first terminal device through the internet of things access management system;

Optionally, the transceiver is configured to receive a service key sent by the internet of things access management system according to the handover request information and the application query information;

Optionally, the handover request information includes: service failure time;

the transceiver is further configured to receive a prompt message sent by the internet of things access management system when an absolute value of a difference between a first time length and a time length indicated by the service failure time is smaller than a first preset time length, where the first time length is a time length for service data interaction between the first terminal device and the second service platform; or

Optionally, the transceiver is further configured to receive data index information sent by the internet of things access management system after the second service platform connected to the first terminal device is switched to a third service platform; and sending third service data to the internet of things access management system according to the data index information, so that the internet of things access management system sends the second service data to the third service platform under the condition that the second service data is verified to be correct according to the third service data.

Optionally, the transceiver is further configured to send platform access application information to the internet of things access management system; platform identification information sent by the Internet of things access management system according to the platform access application information is received;

the transceiver is specifically configured to receive encrypted platform identification information sent by the internet of things access management system;

An embodiment of the present invention further provides a readable storage medium, where a program or an instruction is stored on the readable storage medium, and the program or the instruction, when executed by a processor, implements the steps of the service platform switching method for the internet of things according to any of the above items.

Furthermore, it is to be noted that in the device and method of the invention, it is obvious that the individual components or steps can be decomposed and/or recombined. These decompositions and/or recombinations are to be considered as equivalents of the present invention. Also, the steps of performing the series of processes described above may naturally be performed chronologically in the order described, but need not necessarily be performed chronologically, and some steps may be performed in parallel or independently of each other. It will be understood by those skilled in the art that all or any of the steps or elements of the method and apparatus of the present invention may be implemented in any computing device (including processors, storage media, etc.) or network of computing devices, in hardware, firmware, software, or any combination thereof, which can be implemented by those skilled in the art using their basic programming skills after reading the description of the present invention.

The object of the invention is thus also achieved by a program or a set of programs running on any computing device. The computing device may be a general purpose device as is well known. The object of the invention is thus also achieved solely by providing a program product containing program code for implementing the method or device. That is, such a program product also constitutes the present invention, and a storage medium storing such a program product also constitutes the present invention. It is to be understood that such storage media can be any known storage media or any storage media developed in the future. It is also noted that in the apparatus and method of the present invention, it is apparent that each component or step can be decomposed and/or recombined. These decompositions and/or recombinations are to be regarded as equivalents of the present invention. Also, the steps of executing the series of processes described above may naturally be executed chronologically in the order described, but need not necessarily be executed chronologically. Some steps may be performed in parallel or independently of each other.

While the preferred embodiments of the present invention have been described, it will be understood by those skilled in the art that various changes and modifications may be made without departing from the spirit and scope of the invention as defined in the following claims.

Claims

1. A method for switching service platforms of the Internet of things is characterized by being applied to an access management system of the Internet of things, and comprises the following steps:

receiving switching request information sent by the first terminal device according to the service platform attribute information;

2. The method for switching service platforms of the internet of things as claimed in claim 1, wherein after switching a first service platform connected to the first terminal device to a second service platform according to the switching request information and the service platform attribute information, the method further comprises:

3. The internet of things service platform switching method according to claim 2, wherein the switching request information includes: service failure time;

acquiring the service key according to the dispersion factor;

4. The internet of things service platform switching method according to claim 2, wherein the switching request information includes: service failure time;

sending prompt messages to the first terminal equipment and the second service platform respectively under the condition that the absolute value of the difference value between a first time length and the time length indicated by the service failure time is smaller than a first preset time length, wherein the first time length is the time length for service data interaction between the first terminal equipment and the second service platform; or

5. The internet of things service platform switching method according to claim 2, wherein after the service keys are respectively sent to the first terminal device and the second service platform according to the switching request information and the application query information, the method further comprises:

6. The internet of things service platform switching method according to claim 5, wherein after the obtaining of the second service data sent by the first terminal device, the method further comprises:

7. The internet of things service platform switching method according to claim 1, wherein before receiving the application query information sent by the first terminal device in the case that the at least one terminal device and the at least two service platforms successfully access the internet of things access management system, the method further includes:

8. The internet of things service platform switching method according to claim 7, wherein the device access application information includes: a protocol template index number, a public key and a data packet with appointed test data;

9. The method for switching service platforms of the internet of things as claimed in claim 1, wherein before receiving the application query information sent by the first terminal device, the method further comprises, in case that the at least one terminal device and the at least two service platforms successfully access the access management system of the internet of things:

10. The internet of things service platform switching method according to claim 9, wherein the platform access application information includes: a protocol template index number, a public key and a data packet with appointed test data;

11. The internet of things service platform switching method according to claim 1, wherein the service platform attribute information includes: the Internet protocol IP of the service platform and the service platform protocol index number;

and acquiring switching request information sent by the first terminal equipment according to the first information, wherein the switching request information comprises a first Internet Protocol (IP) of the second service platform, and the second service platform is one of the target service platforms.

12. A method for switching service platforms of the Internet of things is applied to first terminal equipment, and the method comprises the following steps:

under the condition that at least one terminal device and at least two service platforms are successfully accessed to an Internet of things access management system, sending application query information to the Internet of things access management system;

13. The method for switching service platforms of the internet of things as claimed in claim 12, wherein after the sending of the switching request message to the access management system of the internet of things according to the service platform attribute information so that the access management system of the internet of things switches the first service platform connected to the first terminal device to the second service platform, the method further comprises:

14. The internet of things service platform switching method according to claim 13, wherein the switching request information includes: service failure time;

15. The internet of things service platform switching method according to claim 13, wherein the switching request information includes: service failure time;

16. The method for switching service platforms of the internet of things as claimed in claim 13, wherein after receiving the service key sent by the access management system of the internet of things according to the switching request message and the application query message, the method further comprises:

performing hash operation on the first service data every second preset time interval to obtain second service data;

17. The internet of things service platform switching method according to claim 12, wherein before the sending of the application query message to the internet of things access management system in the case that the at least one terminal device and the at least two service platforms successfully access the internet of things access management system, the method further comprises:

18. The internet of things service platform switching method according to claim 17, wherein the device access application information includes: the protocol template index number, the public key and the data packet with the appointed test data;

19. The internet of things service platform switching method according to claim 12, wherein the service platform attribute information includes: an Internet Protocol (IP) of the service platform and a service platform protocol index number;

20. An Internet of things service platform switching method is applied to a second service platform, and comprises the following steps:

21. The internet of things service platform switching method according to claim 20, wherein after connecting with the first terminal device through the internet of things access management system, the method further comprises:

22. The internet of things service platform switching method of claim 21, wherein the switching request information comprises: service failure time;

23. The internet of things service platform switching method of claim 21, wherein the switching request information comprises: service failure time;

24. The method for switching service platforms of the internet of things as claimed in claim 21, wherein after receiving the service key sent by the access management system of the internet of things according to the switching request message and the application query message, the method further comprises:

25. The method for switching service platforms of the internet of things as claimed in claim 20, wherein in case that the at least one terminal device and the at least two service platforms successfully access the access management system of the internet of things, before connecting with the first terminal device through the access management system of the internet of things, the method further comprises:

26. The internet of things service platform switching method according to claim 25, wherein the platform access application information includes: a protocol template index number, a public key and a data packet with appointed test data;

27. The utility model provides a thing networking service platform auto-change over device which characterized in that is applied to thing networking access management system, the device includes:

the first sending module is used for sending the attribute information of the service platform to the first terminal equipment according to the application query information;

28. The utility model provides a thing networking service platform auto-change over device which characterized in that is applied to first terminal equipment, the device includes:

and the third sending module is used for sending switching request information to the internet of things access management system according to the service platform attribute information so that the internet of things access management system switches the first service platform connected with the first terminal equipment to the second service platform.

29. The utility model provides a thing networking service platform auto-change over device which characterized in that is applied to second service platform, the device includes:

30. An internet of things access management system, comprising: processor, memory and program stored on the memory and executable on the processor, which when executed by the processor implements the steps of the internet of things service platform switching method according to any one of claims 1 to 11.

31. A terminal device, the terminal device being a first terminal device, comprising: a processor, a memory and a program stored on the memory and executable on the processor, the program, when executed by the processor, implementing the steps of the internet of things service platform switching method according to any one of claims 12 to 19.

32. A service platform, which is a second service platform, is characterized by comprising: a processor, a memory and a program stored on the memory and executable on the processor, the program when executed by the processor implementing the steps of the internet of things service platform switching method according to any one of claims 20 to 26.

33. A readable storage medium, on which a program or instructions are stored, which when executed by a processor implement the steps of the internet of things service platform switching method according to any one of claims 1 to 26.