WO2018121572A1

WO2018121572A1 - Cloud platform-based internet-of-things terminal communication management and control system and method

Info

Publication number: WO2018121572A1
Application number: PCT/CN2017/118877
Authority: WO
Inventors: 杨立群; 衣昕楠
Original assignee: 珠海国芯云科技有限公司
Priority date: 2016-12-28
Filing date: 2017-12-27
Publication date: 2018-07-05
Also published as: CN106790590A

Abstract

The invention provides a cloud platform-based Internet-of-Things (IoT) terminal communication management and control system, comprising: an IoT cloud platform, which comprises control terminal binding, control terminal command forwarding, user client end identity authentication, and IoT terminal identify authentication; an IoT cloud control gateway, which comprises IoT terminal protocol conversion and IoT terminal internal control, provides local access authentication for the IoT terminal and the IoT communication processors, provides a local area network communication forwarding function, and provides a conversion bridge for upper communication of TCP/IP and lower communication of an IoT private protocol; IoT communication processors, which are configured in the IoT cloud control gateway and the IoT terminal correspondingly and are used for implementing interaction between the IoT cloud control gateway and the IoT terminal; and an IoT terminal, which is used for receiving a command of the IoT cloud control gateway, controlling an IoT sensor and a controller, and transmitting the states of the IoT sensor and the controller to the cloud control gateway through the IoT communication processors. On the other hand, the invention provides a cloud platform-based IoT terminal communication management and control method.

Description

IoT terminal communication communication control system based on cloud platform and method thereof

Related application

The present application claims the priority of Chinese Patent Application No. 201611239215.4, entitled "Cloud-Based Internet of Things Terminal Communication Control System and Method", filed on December 28, 2016.

Technical field

The present invention relates to the field of Internet of Things, and in particular, to a cloud platform-based IOT terminal communication management system and method thereof.

Background technique

As one of the important directions for the development of the future information network field, the Internet of Things has received extensive attention worldwide. The Internet of Things is regarded as the third wave of the world information industry after computers, the Internet and mobile communication networks, and it has received extensive attention worldwide. Domestic and foreign enterprises, universities, scientific research institutions and relevant international standardization organizations have initiated research on issues related to the Internet of Things. In 2009, the United States proposed the concept of "smart planet" to vigorously develop the emerging technology of the Internet of Things. The European Union has also begun research on IoT technology in the "RFID and IoT Research Project Cluster" under the Seventh Framework. China has also explicitly included the “Internet of Things” in the National Medium- and Long-Term Science and Technology Development Plan (2006-2020) and the 2050 National Industry Roadmap. The promotion of the Internet of Things will become another driving force for promoting China's economic development, which is of great significance for optimizing China's industrial structure and promoting economic growth in various industries.

Due to the large difference between the IoT service and the ordinary mobile service, most of the IoT terminal services are small-traffic services, and most of them are uplink services. At the same time, most IoT terminals are unattended terminals, which need to be protected against IoT terminals. Abuse, anti-theft, and terminal power savings, but these new requirements cannot be solved by current mobile network management technologies. The current IoT platform has problems such as poor security and confidentiality, low data transmission rate, short transmission distance, and cumbersome user terminal access.

Summary of the invention

In view of the above drawbacks, the present invention provides a cloud platform-based Internet of Things communication management system and method thereof, which are used to realize an Internet of Things platform that creates a good security and confidentiality, a high data transmission rate, a long transmission distance, and seamless access of user terminals. .

According to an aspect of the present invention, a cloud platform-based IoT terminal communication management system is provided, including:

The Internet of Things cloud platform, its functions include control terminal binding, control terminal command forwarding, user client identity verification, and IoT terminal identity verification;

The Internet of Things cloud control gateway, its role includes IoT terminal protocol conversion and IoT terminal internal control, providing local access authentication for IoT terminals and IoT communication devices, providing LAN communication forwarding function, providing TCP/IP upper-level communication and a conversion bridge for the underlying communication of the Internet of Things proprietary protocol;

The Internet of Things communication devices are respectively arranged in the Internet of Things cloud control gateway and the Internet of Things terminal, and are used for interaction between the Internet of Things cloud control gateway and the Internet of Things terminal, including operation commands and status information;

The function of the Internet of Things terminal includes receiving the command of the Internet of Things cloud control gateway, controlling the IoT sensor, the controller, and transmitting the IoT sensor controller status to the Internet of Things cloud control gateway through the Internet of Things communication device;

The Internet of Things cloud platform is connected to the Internet of Things cloud control gateway, and the Internet of Things cloud control gateway is connected to the Internet of Things terminal by the Internet of Things communication machine.

The wireless physical support layer of the Internet of Things proprietary protocol includes a 2.4 GHz global open ISM frequency band, and supports six-channel license-free data transmission and reception.

The wireless physical support layer of the Internet of Things proprietary protocol includes a maximum 125 frequency point hopping communication.

The data link layer of the Internet of Things proprietary protocol provides reliable communication of plaintext data; provides reliable communication of static keys; and provides reliable communication of dynamic key pairing.

Further, the Internet of Things cloud platform includes:

Realize IoT communication machine address generation, remote programming and address data management;

Realize IoT communication machine key generation, remote programming (or modification) and key data management;

Assisting the Internet of Things cloud control gateway to provide key negotiation for encrypted communication of IoT communication machines.

Further, the functions of the Internet of Things cloud control gateway include:

The command data from the Internet of Things terminal is received, and is distributed to the corresponding Internet of Things terminal according to the command data and content.

According to the cloud platform-based IoT terminal communication management system, the Internet of Things cloud service platform is connected to the Internet and Ethernet in a bridge manner.

According to the cloud platform-based IoT terminal communication management and control system, the communication between the Internet of Things cloud platform and the Internet is encrypted by using an SSL certificate, and the Internet of Things cloud control gateway adopts an independent SSL client certificate.

According to another aspect of the present invention, a method for controlling communication control of an Internet of Things terminal based on the communication control system of the Internet of Things terminal includes:

The Internet of Things cloud control gateway requests a key from the IoT cloud platform and burns the obtained certificate into it;

The Internet of Things cloud control gateway sends an encrypted communication request to the target IoT communication machine through the IoT communication machine configured therein;

After the target communicator passes the verification, it responds with a response packet with a dynamic key.

According to the communication control method of the Internet of Things terminal of the present invention, reliable point-to-point transmission is adopted between the Internet of Things terminals.

According to the communication control method of the Internet of Things terminal of the present invention, the data communication after the paired connection of the Internet of Things terminal adopts a dynamic rolling key.

According to the above invention, a cloud platform-based IOT terminal communication management and control system and method provided by the present invention can utilize the mass storage capability and the extremely powerful computing capability of the cloud service platform, and utilize the Internet of Things cloud control gateway and communication. The communication encryption of the machine and the Internet of Things terminal realizes the security and confidentiality of the Internet of Things platform, high data transmission rate, long transmission distance and seamless access of user terminals.

DRAWINGS

1 is a structural diagram of a cloud platform-based IoT terminal communication management system according to an embodiment of the present invention;

2 is a schematic diagram of a communication verification process of a cloud platform-based IOT terminal communication management and control method according to an embodiment of the present invention;

FIG. 3 is a schematic flowchart of a process in which an IoT cloud control gateway requests a key from a cloud platform and burns it;

4 is a schematic flow chart showing a process of programming a communication address and a key by a communication device;

FIG. 5 is a schematic diagram of a flow control method of an Internet of Things terminal based on a cloud platform, including modifying a method of pairing keys.

detailed description

The present invention will be further described in detail below with reference to the accompanying drawings and embodiments. It is understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.

FIG. 1 is a schematic diagram of a cloud platform-based IoT terminal communication management system according to an embodiment of the present invention. As shown in FIG. 1 , the cloud platform-based IoT terminal communication management system includes: an Internet of Things cloud platform, and its function Including control terminal binding, control terminal command forwarding, user client authentication, IoT terminal authentication; Internet of Things cloud control gateway, including Internet of Things terminal protocol conversion and IoT terminal internal control, for IoT terminals, Internet of Things The communication machine provides local access authentication, provides local area network communication forwarding function, and provides a conversion bridge for upper communication of TCP/IP upper-level communication and IoT proprietary protocol; IoT communication machine is respectively configured in the Internet of Things cloud control gateway and IoT terminal The interaction between the cloud control gateway and the Internet of Things terminal of the Internet of Things includes operation commands and status information; the Internet of Things terminal receives commands of the Internet of Things cloud control gateway, controls the IoT sensor, the controller, and The IoT sensor controller status is sent to the Internet of Things cloud control gateway via the IoT communicator.

The Internet of Things cloud platform is connected to the Internet of Things cloud control gateway, and the Internet of Things cloud control gateway is connected to the Internet of Things terminal by the Internet of Things communication machine. The wireless physical support layer of the Internet of Things proprietary protocol includes a 2.4 GHz global open ISM band and supports six channels of license-free data transmission and reception. The wireless physical support layer of the Internet of Things proprietary protocol includes a maximum of 125 frequency point hopping communications. The data link layer of the Internet of Things proprietary protocol provides reliable communication of plaintext data; provides reliable communication of static keys; and provides reliable communication of dynamic key pairing.

The wireless physical support layer provides two services through data service access points and management service access points. The sending and receiving of data is done through the data service provided by the physical layer, and the management service is responsible for the following tasks:

(1) Activation and deactivation of the radio transceiver: The device controls the activation and deactivation of the radio transceiver according to whether the data is transmitted or received.

(2) Energy detection (ED) on the available channel: Channel energy detection is used to measure the power intensity of wireless signal reception in all available channels, and to provide the basis for channel selection for the network layer by comparing the power intensity in each channel. . This energy detection is performed before the device starts networking or enters the network. If the 2.4 GHz band is selected, 16 channels are detected in turn, and the channel with the best channel quality is selected as its own working channel.

(3) Link quality indication (LQI) of the received data: The link quality indicator generates a signal to noise ratio indicator by decoding the received wireless signal, and the network layer or the application layer is passed through the signal to noise ratio indicator. It can know the received data frame, the strength and quality of the wireless signal, and so on, and judge the quality of the data link. In a mesh network, data can be transmitted by judging and selecting an optimal path by the quality of the link.

(4) Evaluating the idle channel based on the CSMA-CA (Carrier Avoidance Carrier Detection) mechanism: There are three evaluation methods for judging whether the channel is idle, respectively: 1 Determine the signal energy of the channel by channel scanning, when the signal If the energy is lower than a certain value, the channel is considered to be idle, otherwise the channel is considered busy; 2, by determining the characteristics of the spread spectrum signal and the carrier frequency in the wireless signal, to determine whether the target channel is idle; 3 combining the first two modes and simultaneously detecting Signal strength and signal characteristics in the target channel to determine whether the channel is idle. The device selects when it accesses the channel for data communication by detecting whether the channel is idle, thereby effectively avoiding competition and conflict of data between devices.

(5) Selection of channel frequency: selection and switching can be performed between multiple available channels. For example, if the frequency band of 2.4 GHz is selected, the range of the selectable frequency band is 2400 MHz to 2483.5 MHz by changing the channel. If the frequency band of 915 MHz is selected, the range of the available frequency band is 902 to 928 MHz.

The data link layer uses the CSMA-CA mechanism to access the selected working channel and provides the following two services through two service access points.

(1) The MAC data service is accessed through the sub-layer data access point MCPS-SAP of the public part.

(2) MAC management service, which accesses the access point MLME-SAP through the sub-layer of the public part.

The MAC sublayer handles transactions such as accessing physical wireless channels through the above two services, and is mainly responsible for the following tasks:

(1) A network beacon can be generated (the device is a network coordinator). In a PAN network using beacons, the network coordinator can generate beacon frames as needed to enable other devices in the network to track and process beacons so that they can be synchronized with the network coordinator.

(2) Keep the same with the beacon. In a PAN network using beacons, other devices in the network, such as routers and simplified function devices, can be synchronized with the coordinator via beacon frames.

(3) Support PAN connection and disconnection. A device that is not connected to the network completes the network connection by generating a connection request command and sending the command to the coordinator of the PAN identifier and the network address specified in the command packet; and a device connected to the network passes the The coordinator or its own parent sends a disconnect request for the device to leave the PAN network.

(4) Support device security. The communication between devices is secure. Any communication between devices needs to match the PAN identifier and the network address. In addition, there is a retransmission mechanism for the data that fails to be transmitted, which can greatly reduce the communication failure rate and further ensure data security. Reliably transmitted to the other party.

(5) Channel access uses the CSMA-CA access mechanism. In the channel access mode, there are two modes of collision avoidance carrier detection (CSMA-CA) and guaranteed time slot (GTS), wherein the GTS is similar to reserved time domain multiple access (TDMA). In the GTS mode, the device to be communicated can obtain the access right of the channel without going through the random competition mechanism in the CSMA-CA, and the device activates and transmits and receives data only in its own time slot, which is in an emergency situation. Communication is particularly useful, but in most cases CSMA-CA's access mechanism is used to effectively avoid competition and conflicts, as well as improve channel utilization.

(6) Processing and maintaining the GTS mechanism. In a beaconed PAN network, some devices need to track the beacons sent by the coordinator, which requires management and maintenance of the GTS. Other devices in the network can reassign a GTS or cancel an existing GTS by making a request to the coordinator.

(7) Provide a reliable communication link between peer MAC entities. Communication between devices provides an end-to-end acknowledgment mechanism at the MAC layer. That is, the sender's data is sent out from the MAC. When the receiver correctly receives the data, it will reply an acknowledgement frame from the MAC layer to the sender, indicating that the data is successfully received. Otherwise, the sender does not receive the acknowledgement from the receiver within a certain period of time. In the case of a frame, the transmission is considered to be unsuccessful and will be retransmitted several times as needed until the data is successfully transmitted, thereby establishing a reliable communication link. The following two devices exist in the network as specified in the agreement. Full-featured device (FFD): can act as a network coordinator, set up a network, and let other FFD or simplified function devices (RFDs) join the network. FFD can serve as a gateway for the entire network. Through this gateway, the wireless sensor network can contact other networks. For example, the commonly used Internet can also be connected to the PC of the control center through a serial port or a USB port to transmit and receive data and transmit commands. FFD can act as a transit device in the network and has the ability to route.

In an embodiment, the Internet of Things cloud platform is further configured to: implement IoT communicator address generation, remote programming, and address data management; implement IoT communication key generation, remote programming (or modification), and Key data management; assists the Internet of Things cloud control gateway to provide key negotiation for IoT communication machine encrypted communication.

According to the cloud platform-based IoT terminal communication management and control system, the role of the Internet of Things cloud control gateway further includes:

In another aspect of the present invention, an IOT terminal communication management method based on the IoT terminal communication management system according to any of the above embodiments is provided.

2 is a schematic diagram of a communication verification process of a cloud platform-based IoT terminal communication management and control method according to an embodiment of the present invention. As shown in FIG. 2, a cloud platform-based IoT terminal communication management and control method includes:

S1. The Internet of Things cloud control gateway requests a key from the Internet of Things cloud platform and burns the obtained certificate into it;

S2. The Internet of Things cloud control gateway sends an encrypted communication request to the target Internet of Things communication device through the IoT communication machine configured therein;

S3. After the target communication machine passes the verification, it responds to the response packet with the dynamic key.

Specifically, as shown in FIG. 3, the process for the IoT cloud control gateway to request a key and burn to the Internet of Things cloud platform includes:

S101, the Internet of Things cloud control gateway burning program requests a certificate to the Internet of Things cloud platform;

S102. The Internet of Things cloud platform forwards the request to the certificate server.

S103. The Internet of Things cloud platform writes the approval certificate and writes it to the database, and returns to the burning program;

S104. Burn the certificate to the embedded module of the Internet of Things cloud control gateway.

Specifically, as shown in FIG. 4, the process of the communication machine burning the communication address and the key includes:

S201, IoT communication machine burning program applies for address and key to the Internet of Things cloud platform;

S202, the Internet of Things cloud platform randomly generates an address and a key is recorded in the database and delivered;

S203. Burn the address and the key to the IoT communication machine.

Further, as shown in FIG. 5, the cloud platform-based IoT terminal communication management method includes modifying the pairing key mode, specifically:

S301. The control end initiates a modification command to the Internet of Things cloud platform.

S302, the Internet of Things cloud platform randomly generates a new key;

S303. The IoT cloud platform records the new key into the database and delivers it to the Internet of Things cloud control gateway;

S304, the Internet of Things cloud control gateway sends a remote modification key burning command to the IoT communication machine;

S305, IoT communication machine modify the key.

According to the communication control method of the Internet of Things terminal of the present invention, the point-to-point transmission between the Internet of Things terminals is adopted.

It will be understood by those skilled in the art that all or part of the steps of implementing the above method embodiments may be performed by related hardware of the program instructions. The aforementioned program can be stored in a computer readable storage medium. The program executes the steps of the above method embodiments when executed, and the foregoing storage medium includes various media that can store program codes, such as a RAM, a ROM, a magnetic disk, or an optical disk.

It should be noted that the above-mentioned embodiments are merely illustrative of several embodiments of the present invention, and the description thereof is more specific and detailed, but is not to be construed as limiting the scope of the invention. It should be noted that a number of variations and modifications may be made by those skilled in the art without departing from the spirit and scope of the invention. Therefore, the scope of the invention should be determined by the appended claims.

Claims

A cloud platform-based IoT terminal communication management and control system, comprising: an Internet of Things cloud platform, which is used for control terminal binding, control terminal command forwarding, user client identity verification, and IoT terminal identity verification;

The Internet of Things cloud control gateway is used for IoT terminal protocol conversion and IoT terminal internal control, providing local access authentication for IoT terminals and IoT communication devices, providing LAN communication forwarding function, and providing TCP/IP upper-level communication and communication. a conversion bridge for the lower communication of the networked private protocol;

The Internet of Things communication devices are respectively arranged in the Internet of Things cloud control gateway and the Internet of Things terminal, and are used for interaction between operation commands and status information between the Internet of Things cloud control gateway and the Internet of Things terminal;

The Internet of Things terminal is configured to receive the command of the Internet of Things cloud control gateway, control the IoT sensor, the controller, and send the IoT sensor controller status to the Internet of Things cloud control gateway through the IoT communication machine;

The Internet of Things cloud platform is connected to the Internet of Things cloud control gateway, and the Internet of Things cloud control gateway is connected to the Internet of Things terminal by the Internet of Things communication machine.
The cloud platform-based Internet of Things terminal communication management system according to claim 1, wherein the wireless physical support layer of the Internet of Things proprietary protocol comprises a 2.4 GHz global open ISM frequency band, and supports six-channel license-free data transmission and reception.
The cloud platform-based Internet of Things terminal communication management system according to claim 1, wherein the wireless physical support layer of the Internet of Things proprietary protocol comprises a maximum 125 frequency point frequency hopping communication.
The cloud platform-based IoT terminal communication management and control system according to claim 1, wherein the Internet of Things cloud platform is adapted to:

Realize IoT communication machine address generation, remote programming and address data management;

Realize IoT communication key generation, remote programming or modification and key data management;

Assisting the Internet of Things cloud control gateway to provide key negotiation for encrypted communication of IoT communication machines.
The cloud platform-based IoT terminal communication management and control system according to claim 1, wherein the Internet of Things cloud control gateway is adapted to:

The command data from the Internet of Things terminal is received, and is distributed to the corresponding Internet of Things terminal according to the command data and content.
The cloud platform-based IoT terminal communication management and control system according to claim 1, wherein the Internet of Things cloud platform is connected to the Internet and Ethernet in a bridge manner.
The cloud platform-based IoT terminal communication management and control system according to claim 1, wherein the communication between the Internet of Things cloud platform and the Internet is encrypted by using an SSL certificate, and the Internet of Things cloud control gateway adopts an independent SSL client certificate. .
A cloud platform-based IoT terminal communication management method, the method for a system according to any one of claims 1 to 7, characterized in that the method comprises the following steps:

S1. The Internet of Things cloud control gateway requests a key from the Internet of Things cloud platform and burns the obtained certificate into it;

S2. The Internet of Things cloud control gateway sends an encrypted communication request to the target Internet of Things communication device through the IoT communication machine configured therein;

S3. After the target communication machine passes the verification, it responds to the response packet with the dynamic key.
The cloud platform-based IoT terminal communication management and control method according to claim 8, wherein the Internet of Things terminals adopt point-to-point reliability transmission.
The cloud platform-based IoT terminal communication management and control method according to claim 8 or 9, wherein the data communication after the IoT terminal is paired and connected adopts a dynamic rolling key.