WO2013167070A2

WO2013167070A2 - Method for authentication of terminal cooperation and equipment middleware thereof

Info

Publication number: WO2013167070A2
Application number: PCT/CN2013/079834
Authority: WO
Inventors: 孙爱芳; 何经纬; 张志飞; 凌志浩; 高冲; 祁学文; 曹建福; 袁宜峰
Original assignee: 中兴通讯股份有限公司
Priority date: 2013-01-21
Filing date: 2013-07-22
Publication date: 2013-11-14
Also published as: WO2013167070A3; CN103945378B; CN103945378A

Abstract

Disclosed is a method for authentication of terminal cooperation and an equipment middleware thereof. Wherein, the method includes: according to the terminal information of the terminal itself which applies to join a cooperative network, a central node searches a cooperative operable terminal information table. If the cooperative operable terminal information table contains the terminal information, authentication is performed directly based on the cooperative needed information in the cooperative operable terminal information table which corresponds to the terminal information , otherwise authentication is performed through requesting the terminal to provide the cooperative needed information. The equipment middleware includes communication drive module, information storage module and authentication module. Adopting the invention, the judgment mistake of imitative identification terminal which will lead to joining in the cooperative network and affecting the safety of cooperative transmission is avoided.

Description

Terminal cooperative authentication method and device middleware

The present invention relates to a terminal identity authentication technology in the field of wireless communication technologies, and in particular, to a terminal collaborative authentication method and device middleware. Background technique

With the continuous development of communication technology and the continuous improvement of people's living standards, the scope of terminals has become more and more extensive. At the same time, a single terminal has certain limitations due to its functions and features, which limits users to a certain extent. Convenience of operation, and ubiquitous network and ubiquitous terminal technology can solve this problem.

The rapid development of wireless communication technology has created an increasingly rich network type and formed a ubiquitous network environment. At the same time, mobile service manufacturers have provided users with a variety of business applications through the continuous improvement of network performance, which has improved the convenience of users to use the powerful ubiquitous terminal devices. In the scenario where the same user has multiple terminals and multiple carrying terminals, that is, multiple ubiquitous terminals exist in the ubiquitous network, the terminals can work together to improve the user's operation convenience.

However, since the ubiquitous network belongs to a heterogeneous network, each ubiquitous terminal in the ubiquitous network constitutes a heterogeneous terminal group, and the cooperative interworking and authentication of the heterogeneous terminal group in the heterogeneous network is a problem that must be solved because, In practical applications, only the terminal collaboration between heterogeneous terminal groups can fully invoke the resources between the heterogeneous networks, so that the terminals can work together to achieve the purpose of improving user convenience. In order to simplify the description below, the ubiquitous terminal is replaced by a terminal.

Security is very important in the terminal collaboration process. Since terminal collaboration is a new network interaction process, the security design is different from the existing security architecture. Therefore, in order to avoid misjudgment of the terminal for falsifying identity and join the collaborative network, the terminal is authenticated when the terminal works together. This is especially important, but there is currently no effective solution. Summary of the invention

In view of this, the main purpose of the embodiments of the present invention is to provide a terminal cooperative authentication method and device middleware, so as to avoid misjudgment of the terminal for forging identity and join the collaborative network, thereby affecting the security of coordinated transmission.

To achieve the above objective, the technical solution of the embodiment of the present invention is implemented as follows:

A method for authenticating a terminal, the method comprising:

The central node searches for the collapsible terminal information table according to the terminal information of the terminal itself that is applied to join the collaborative network;

If the terminal information is included in the splicable terminal information table, performing authentication according to the collaboration required information corresponding to the terminal information in the configurable terminal information table; otherwise, requesting the terminal to provide collaboration Information is certified.

The performing the verification specifically includes:

After the terminal determines that the terminal has the right to join the collaborative network, the central node sends an authentication certificate to the terminal, and the terminal sends the authentication certificate and the terminal information of the terminal to the terminal. After the operation of the information required for the cooperation, the operation result is returned to the central node?

The central node compares the returned operation result with the operation result obtained by the local operation using the authentication certificate. If they are consistent, the authentication passes, allowing the terminal to join the collaborative network; otherwise, the terminal is denied to join the collaborative network.

The operation of the local use authentication certificate is specifically:

The local operation result is obtained by performing operation on the terminal information and the coordination required information stored in the collusable terminal information table stored by the central node by using the authentication certificate.

After the requesting the terminal to provide the required information for collaboration, the method further includes:

The central node updates the locally stored location according to the received information required for collaboration from the terminal. The cooperative terminal information table is broadcasted in the collaborative network and sent to all terminals in the collaborative network.

The cooperative terminal information table includes at least: the terminal information and the corresponding required information; wherein

The terminal information specifically includes: a MAC address of the terminal;

The information required for the collaboration specifically includes: service information and terminal capability information of the terminal itself. The method further includes: after the central node is switched, the central node after the handover re-organizes the authentication according to the updated collision terminal information table.

A device middleware, the device middleware can be run in each terminal in the collaborative network; the device middleware runs in a scenario of applying for joining the collaborative network terminal, and includes: a communication driving module, an information storage module, and a certification Module; among them,

The communication driving module is configured to send, by the terminal, a request for joining the collaborative network to the central node, and the request for joining the collaborative network carries the terminal information of the terminal itself; the terminal receives the cooperation required for providing the collaboration from the central node. After the request of the information, the information required for the collaboration is sent; the information storage module is configured to store the collapsible terminal information table, where the collaborative terminal information table includes at least: the terminal information and corresponding coordination required information;

The authentication module is configured to directly perform authentication according to the collaboration required information corresponding to the terminal information in the cooperateable terminal information table when the terminal information exists in the cooperateable terminal information table; otherwise, the call is performed. The communication driver module requests the terminal to provide information required for collaboration for authentication.

The authentication module is further configured to: after determining, according to the information required by the collaboration, that the terminal has the right to join the collaborative network, invoke the communication driving module to receive an authentication certificate from the central node; After the authentication certificate is operated with the terminal information and the cooperation required information, the communication driver module is called to return the operation result to the central node- The communication driver module is further configured to receive an authentication certificate and return the operation result to the central node.

The terminal information specifically includes: a MAC address of the terminal;

The information required for the collaboration specifically includes: service information and terminal capability information of the terminal itself. A device middleware, the device middleware can be run in each terminal in the collaborative network; the device middleware is operated in a scenario of the central node, and includes: a communication driving module, an information storage module, and an authentication module;

The communication driver module is configured to obtain, by the central node, terminal information from the terminal, and send a request for providing the required information to the terminal;

The information storage module is configured to store a collapsible terminal information table, where the collision terminal information table includes at least: the terminal information and corresponding collaboration required information;

The authentication module is further configured to: after determining, according to the information required by the collaboration, that the terminal has the right to join the collaborative network, invoke the communication driver module to send an authentication certificate to the terminal; The local operation result obtained by the certificate operation is compared with the operation result returned by the terminal. When they are consistent, the authentication is passed, and the terminal is allowed to join the collaborative network; otherwise, the terminal is denied to join the collaborative network;

The communication driver module is further configured to issue an authentication certificate and receive an operation result returned by the terminal.

The terminal information specifically includes: a MAC address of the terminal;

The information required for the collaboration specifically includes: service information and terminal capability information of the terminal itself. The method of the embodiment of the present invention is that the central node joins the terminal of the collaborative network according to the application. The terminal information is used to search for a collapsible terminal information table; if the terminal information is included in the configurable terminal information table, the authentication is directly performed according to the collaboration required information corresponding to the terminal information in the configurable terminal information table; Otherwise, the terminal is requested to provide the information required for coordination for authentication.

The embodiment of the present invention can perform authentication according to the information required for collaboration corresponding to the terminal information. Therefore, the terminal for falsifying the identity can be prevented from being misjudged and added to the collaborative network, thereby affecting the security of the coordinated transmission. BRIEF DESCRIPTION OF DRAWINGS FIG. 2 is a schematic structural diagram of a device middleware according to an embodiment of a system of the present invention;

detailed description

In the embodiment of the present invention, the central node searches for the collapsible terminal information table according to the terminal information of the terminal itself that is applied to join the collaborative network; and if the terminal information is included in the collisable terminal information table, according to the cooperative terminal The information required for collaboration corresponding to the terminal information in the information table is directly authenticated; otherwise, the terminal is requested to provide information required for collaboration for authentication.

The implementation of the technical solution will be further described in detail below with reference to the accompanying drawings.

The terminal cooperative authentication method of the embodiment of the present invention includes: the terminal requests to join the collaborative network; the central node searches for the cooperateable terminal information table after obtaining the terminal information, such as the MAC address of the terminal, if the collaborative terminal information table does not have a corresponding MAC address, Then, the terminal is requested to provide the information required for the collaboration; the terminal sends the information required for the collaboration according to the request; the central node updates the collapsible terminal information table after receiving the cooperation required information provided by the terminal; the central node sends the authentication certificate; the terminal according to the authentication certificate and Synchronize the required information to calculate the operation result, and send the operation result to the central node; The central node compares the obtained terminal operation result with the local operation result to authenticate the terminal; the authenticated terminal joins the collaborative network.

Further, the central node broadcasts the latest collapsible terminal information table; when the collaborative network needs to perform the central node migration, all the terminals are detached from the original central node, and apply to join the new collaborative network, and the new central node pairs all The terminal organizes new certifications.

Specifically, the method mainly includes the following contents:

1. The terminal applies to join the collaborative network;

2. After obtaining the terminal information, such as the MAC address of the terminal, the central node searches the collapsible terminal information table to confirm whether the terminal information, such as the MAC address of the terminal, already exists in the cooperable terminal information table;

3. requesting the terminal to provide the required information for the terminal that is not in the collaborative terminal information table;

4. The terminal sends the required information for collaboration;

5. After obtaining the information required by the terminal to cooperate, updating the collapsible terminal information table;

6. The central node issues an authentication certificate;

7. The terminal operates according to the authentication certificate and sends the operation result to the central node;

8. The central node compares the received terminal operation result with the local operation result;

9. If the results are consistent, the terminal is allowed to join the collaborative network;

10. If a new terminal joins, broadcast the latest collapsible terminal information table;

11. If the central node switches, the new central node re-authenticates the currently cooperating terminal.

The device middleware of the embodiment of the present invention should be configured to authenticate the terminal in a ubiquitous network, and run on each terminal of the ubiquitous network (including the central node in the heterogeneous terminal group) to implement the authentication interaction function operation of the collaborative process. . The authentication device middleware is located between the application service and the hardware device. The device middleware of the embodiment of the present invention includes at least an authentication module, an information storage module, and a communication driver module. Further, an information collecting module may be further included. among them: The authentication module is configured to authorize the terminal's authorization and identity authentication. The so-called authority identification means: whether the terminal has the right to join the collaborative network, including whether the terminal's own service information and terminal capability information meet the coordination requirement; the so-called identity authentication refers to: issuing the certificate, receiving the terminal operation result and the local operation result The comparison, etc., to confirm that the identity of the terminal is consistent with the information of the locally stored collapsible terminal.

The information storage module is configured to store the service information and terminal capability information of the terminal itself, the collaborative terminal information collected by the mutual discovery process, and the latest collaborative terminal information table broadcasted by the central node.

The communication driver module, configured as an interaction interface module, is configured to exchange information during the authentication process, and the terminal side is configured to send a request to join the collaborative network, send the required information for the collaboration, receive the authentication certificate, and send the operation result. On the central node side, the terminal information, such as the MAC address of the terminal, is sent to send a request for providing the required information, the authentication certificate is issued, the operation result is received, and the latest collaborative terminal information table is broadcasted.

Further, the device middleware further includes an information collecting module configured to collect the service information and the terminal capability information of the terminal itself, and the service information and the terminal capability of the terminal itself may be provided when the collaborative network central node needs the information provided by the terminal itself for collaboration. Information is provided to the central node in a timely manner. Here, the information required for the cooperation includes at least terminal information, service information of the terminal itself, and terminal capability information. The terminal information includes terminal hardware information such as a MAC. The terminal's own service information and terminal capability information belong to the terminal software information.

In summary, the authentication method and the device middleware configured in the embodiment of the present invention are configured to be authenticated by the terminal collaborative process and the central node switching process, thereby ensuring the security of the collaborative process, and introducing the cooperative terminal information. The table avoids repeated terminal information acquisition and improves the efficiency of the authentication process.

Security is very important in the terminal collaboration process. Since terminal collaboration is a new network interaction process, the security design is different from the existing security architecture. The mutual discovery process allows the mutual discovery process to provide some information for authentication. Therefore, the embodiment of the present invention fully utilizes the existing information to perform the authority identification, authenticates the terminal to join the collaborative network, realizes the sharing of the cooperative terminal information table, and provides the authentication mechanism of the central node switching, which effectively overcomes The incompatibility factors such as the identity forgery of the terminal in the collaborative network and the central node switching process are introduced, and the collaborative terminal information table is introduced, because it can be shared, thereby avoiding repeated terminal information acquisition, and the use of the cooperative terminal information table improves the authority. The efficiency of the identification, which in turn increases the efficiency of the entire certification process.

Compared with the prior art, the authentication in the existing terminal cooperation is generally based on a network form such as P2P, and does not consider the network formation process. The establishment of all information is actually a very complicated process, and only considers end-to-end, multiple terminals. When collaborating, unified certification between each other is still lacking. In the embodiment of the present invention, the terminal information obtained in the process of mutual discovery is used to confirm whether the right to join the collaborative network is used to implement the collaborative authority authentication, and the terminal is authenticated to implement identity authentication, thereby preventing the terminal from being engaged in the process of joining the collaborative network. Identity forgery. When the cooperative network center node switches, because the sharing mechanism of the cooperative terminal information table is adopted, the new central node can quickly identify whether the terminal to be joined has the collaborative authority, and organizes the re-authentication to prevent the network switching process. Unsafe factors such as identity forgery.

In summary, compared with the prior art, the embodiment of the present invention adopts a terminal collaborative authentication mechanism based on a cooperative terminal information table and identity authentication (including collaborative authority authentication, identity authentication, etc.) to implement authentication and authentication in the terminal cooperation process. Improve the security and reliability of collaborative interactions, and use the collaborative terminal information table to improve the efficiency of authority authentication, thereby improving the efficiency of the entire authentication process.

Method Embodiment: This embodiment is a complete embodiment of the terminal collaborative authentication method of the present invention. The terminal information is specifically the MAC address of the terminal, but the terminal information is not limited to the MAC address of the terminal, and may also be other terminal hardware information, such as Figure la and Figure lb show the following steps: Step 101: The terminal applies to join the collaborative network.

In this step, the cooperative terminal may apply to join the collaborative network when it needs to cooperate with the nodes in the collaborative network, and provide its own terminal information, such as the MAC address of the terminal, when applying.

Step 102: The central node obtains the MAC address of the terminal.

In this step, the central node responds to the request of the terminal and acquires the MAC address of the terminal. It should be pointed out here that the central node is: The terminal that plays the role of the master in the coordinated terminal group composed of each terminal in the collaborative network.

Step 103: Search for a collapsible terminal information table.

In this step, the locally stored collapsible terminal information table is searched for the purpose of confirming whether there is a MAC address of the terminal to which the application is applied, to confirm whether the central node interacts with it and saves the information required for the terminal to cooperate.

Step 104: If there is corresponding MAC information, go to step 108 directly, otherwise go to step 105.

In this step, it is determined whether the terminal information already exists in the coordinable terminal information table of the central node. If yes, the authentication is not required to be acquired again; if not, the acquisition is required to confirm whether the terminal has the coordinated authority.

Step 105: The central node requests the terminal to provide information required for collaboration.

In this step, since the terminal is newly added to the terminal, the terminal needs to obtain the service information and terminal capability information of the terminal itself.

Step 106: The terminal sends the required information for collaboration.

In this step, after receiving the request of the central node, the terminal sends the information required for the collaboration. Step 107: The central node updates the collapsible terminal information table.

In this step, since the information of the terminal does not exist in the coordinable terminal information table in the central node, including the MAC address, the service information of the terminal itself, and the terminal capability information, it needs to be updated to ensure that the storage is up-to-date. Information that can be coordinated with the terminal. Step 108, issuing an authentication certificate.

In this step, the central node sends the certificate required for authentication to the terminal.

Step 109: The terminal calculates according to the authentication certificate and sends the operation result to the central node.

In this step, the terminal performs calculation according to the authentication certificate and its own MAC address, the terminal's own service information and terminal capability information, and sends the operation result to the central node.

Step 110: The central node compares the received operation result with the local operation result. In this step, while the terminal performs the operation, the information stored in the collisable terminal information table is also locally calculated, and the received terminal operation result is compared with the local operation result.

Step 111: Determine whether the results are consistent. If they are inconsistent, go to step 112. If they are consistent, go to step 113.

In this step, it is determined whether the terminal information is consistent with the locally stored information, so as to decide whether to allow the terminal information to join the collaborative network.

Step 112, refusing to join the collaborative network.

In this step, the terminal that refuses to be inconsistent with the local information is added to the collaborative network, and the terminal and the forged information are mainly prevented.

Step 113: The terminal joins the collaborative network.

In this step, the terminal that has obtained the authentication is added to the collaborative network.

Step 114: Is there a new terminal to join?

In this step, it is determined whether a new terminal joins the collaborative network, that is, whether there is new collapsible terminal information. If yes, step 115 is performed; otherwise, step 116 is performed.

Step 115: Broadcast the latest collaborative terminal information table.

In this step, the latest cooperable terminal information table of the central node is broadcasted to the terminals in the cooperative network to ensure the consistency of all the terminals to the latest cooperable terminal information table, and avoid the cooperable terminal information after the central node is switched. Re-acquisition.

Step 116: Whether the central node switches. In this step, it is determined whether the central node in the collaborative network is switched. If the handover is performed, step 117 is performed, otherwise step 118 is performed.

Step 117: The new central node reorganizes the authentication for the existing cooperating terminal.

In this step, when a handover occurs at the collaborative network central node, the new central node (which may also be referred to as the switched target central node) needs to re-authenticate the existing collaborative terminal. The authentication process is as shown in steps 101-115. Since the new central node has the latest collapsible terminal information table, the re-authentication process does not need to reacquire the terminal information, but only needs to identify whether there is identity forgery during the handover process.

Step 118, waiting for the new terminal to join.

In this step, after waiting for the new terminal to join, repeat steps 101~118.

Through the method embodiment, the terminal can join the collaborative network and the network center node switching process for efficient authentication, and the terminal service information and capability information are authenticated, and the identity of the terminal is verified by the authentication certificate.

System Embodiment: This embodiment is a complete embodiment of the device middleware of the present invention, including an optional information collecting module in the device middleware.

As shown in FIG. 2, the device middleware of the embodiment is built between the application service and the hardware device, and provides a solution for the terminal to authenticate in the collaborative process. The authentication device middleware 10 includes: an authentication module 11, an information storage module 12, an information collection module 13, and a communication driver module 14.

Authentication module 11: configured to provide terminal information, such as authentication of the MAC address of the terminal, identity authentication, and the like. After receiving the request to join the collaborative network from the communication driver module 14, obtain the MAC address of the terminal, and retrieve the collapsible terminal information table from the information storage module 12 for comparison to see if it is a cooperable terminal; The communication driver module 14 delivers the authentication certificate, and obtains the result of the operation of the terminal using the certificate through the communication driver module 14, and compares with the operation result of the terminal to determine whether the terminal is authentic and can join the collaborative network.

The information storage module 12 is configured to store the service information and terminal capability information of the terminal itself. At the same time, the information of the cooperating terminal is stored. When applying as a terminal to join the collaborative network, the module may obtain its own service information from the information collecting module 13 and send it to the central node through the communication driving module 14, and also need to receive the latest collaborative terminal information broadcasted by the central node, and provide Called to the authentication module 11 . When the central node is used as the central node, the service information and terminal capability information of the terminal itself to be joined are obtained by the communication driver module 14. When a new terminal joins, the collaborative terminal information table is updated and broadcasted to the collaboration through the communication driver module 14. All terminals within the network.

The information collection module 13 is configured to collect service and hardware capability information of the application service layer of the terminal, and is added to the module 12 for use in collaborative process authentication, so that the central node can confirm whether it has the right and capability to join the collaborative network. It should be noted here that the information collection module 13 should be mainly configured as an internal call of the local terminal, and the information storage module 12 should be mainly configured as an interactive call between the terminals.

Communication Driver Module 14: Configured as a communication bearer for the collaborative authentication process between terminals. It is mainly responsible for the sending and receiving work, including receiving the request of the terminal to join the collaborative network, and providing the MAC address to the authentication module 11; sending the authentication module 11 to obtain the request for the cooperation of the terminal; receiving the information required for the collaboration from the terminal; The electronic authentication certificate of the authentication module 11; the certificate operation result received from the terminal; and the latest collaborative terminal information table in the broadcast information storage module 12.

Application Example: Referring to the authentication device middleware shown in FIG. 2, the implementation process of the real example of the embodiment of the present invention is shown in FIG. 3, and the device middleware only includes the required components (authentication module, information storage module, and communication driver). The module does not include an optional information collection module. The implementation process mainly includes the following steps:

Step 301: The terminal requests to join the collaborative network to the central node by using the communication driver module.

Step 302: The central node searches for a cooperable terminal information table in the information storage module after acquiring terminal information, such as a MAC address of the terminal. Step 303: If it is a newly added terminal, the authentication module requests the terminal to provide the terminal with the required information.

Step 304: The central node updates the collisable terminal information table in the information storage module according to the collaboration required information sent by the terminal.

Step 305: The central node sends an authentication certificate to the terminal through the authentication module.

Step 306: The terminal sends the operation result, and the central node compares the result with the local operation result to confirm whether the identity is true.

Step 307: The terminal joins the collaborative network after passing the authorization and identity confirmation.

Step 308: In the process of adding a new terminal node, since the stored collapsible terminal information table has been updated, in order to facilitate all terminals to know the latest collisionable terminal information in time, the latest collaborative terminal information table is broadcasted.

Step 309: When the central node switches, the new central point re-organizes all the terminals that apply to join the collaborative network. Since the basic information already exists, it is not necessary to repeatedly obtain the service and capability information, and only needs to verify whether the identity is true, and improve the authentication efficiency. . The heterogeneous terminal group applying the above authentication method is as shown in FIG. 4, and includes: a computer, a mobile phone, a pad, a camera, etc., and terminal cooperation is required to complete data sharing and link aggregation.

If the computer is selected as the central node through mutual discovery and other mechanisms, the central node has other information tables that can cooperate with the terminal, so that rapid authorization identification can be performed, and then the identity authentication can be performed. When a new mobile terminal is added, it is necessary to identify the collaborative rights, including the information required for the collaboration, such as the service type and hardware device capabilities, and then authenticate the identity. After the central node is transferred to the pad, the new central node performs fast authentication on the cooperating terminal and re-authenticates the identity to form a new collaborative network.

The above is only the preferred embodiment of the present invention and is not intended to limit the scope of the present invention. Industrial applicability

In the embodiment of the present invention, the central node searches for the collapsible terminal information table according to the terminal information of the terminal itself that is added to the collaborative network; and if the terminal information is included in the collisionable terminal information table, according to the collisable terminal information table The information required for collaboration corresponding to the terminal information is directly authenticated; otherwise, the terminal is requested to provide information required for collaboration for authentication. The embodiment of the present invention can perform authentication according to the information required for the collaboration corresponding to the terminal information. Therefore, the embodiment of the present invention can avoid the misjudgment of the terminal for falsifying the identity and join the collaborative network, thereby affecting the security of the coordinated transmission.

Claims

Claim

A method for authenticating a terminal, the method comprising:

The method according to claim 1, wherein the performing the authentication comprises: determining, according to the information required by the collaboration, that the terminal has the right to join the collaborative network, and the central node sends the authentication certificate to the The terminal, the terminal performs the operation of the authentication certificate with the terminal information and the cooperation required information, and returns an operation result to the central node;

3. The method according to claim 2, wherein the local utilization authentication certificate operation is:

The method according to claim 1, wherein, after the requesting the terminal to provide the information required for the collaboration, the method further includes:

The central node updates the locally configurable collapsible terminal information table according to the received information required for cooperation from the terminal, and broadcasts the updated collisable terminal information table in the collaborative network, and sends the information to the collaborative network. All terminals.

The method according to any one of claims 1 to 4, wherein the cooperative terminal letter The address table includes at least: the terminal information and the corresponding collaboration required information; wherein, the terminal information specifically includes: a MAC address of the terminal;

The information required for the collaboration specifically includes: service information and terminal capability information of the terminal itself.

The method according to claim 4, wherein the method further comprises: after the central node is switched, the switched central node re-authenticates the terminal according to the updated collisable terminal information table.

7. A device middleware, wherein the device middleware can run in each terminal in a collaborative network;

The device middleware is executed in the scenario of the terminal that is applied to join the collaborative network, and includes: a communication driving module, an information storage module, and an authentication module;

The device middleware according to claim 7, wherein the authentication module is further configured to: after determining, according to the information required by the collaboration, that the terminal has the right to join the collaborative network, invoke the communication driver The module receives the authentication certificate from the central node; after the operation of the authentication certificate with the terminal information and the cooperation required information, the communication driver module is called to return the operation result to the central node;

The communication driver module is further configured to receive an authentication certificate and return the operation result to the middle Heart node.

The device middleware according to claim 7 or 8, wherein the terminal information specifically includes: a MAC address of the terminal;

10. A device middleware, wherein the device middleware can run in each terminal in a collaborative network;

The device middleware is operated in a scenario of a central node, and includes: a communication driver module, an information storage module, and an authentication module;

The device middleware according to claim 10, wherein the authentication module is further configured to: after determining, according to the information required by the collaboration, that the terminal has the right to join the collaborative network, invoke the communication driver The module sends the authentication certificate to the terminal; the local operation result obtained by the central node using the authentication certificate operation is compared with the operation result returned by the terminal. When the agreement is consistent, the authentication is passed, and the terminal is allowed to join the collaborative network; otherwise, the terminal is rejected. Join the collaborative network;

The device middleware according to claim 10 or 11, wherein the terminal information device The body includes: a MAC address of the terminal;