WO2019015037A1

WO2019015037A1 - Internet of things access point-based method and device for selective encryption

Info

Publication number: WO2019015037A1
Application number: PCT/CN2017/100748
Authority: WO
Inventors: 杜光东
Original assignee: 深圳市盛路物联通讯技术有限公司
Priority date: 2017-07-17
Filing date: 2017-09-06
Publication date: 2019-01-24
Also published as: CN107483201A

Abstract

Disclosed by the present application is an Internet of Things access point (AP)-based method and device for selective encryption, the method comprising the following steps: an Internet of Things access point receives a data packet sent by an Internet of Things terminal; the Internet of Things access point receives a first encryption unit that is inputted and selected by a user by means of a human-machine interaction interface; the Internet of Things access point calls the first encryption unit to carry out encryption processing on the data packet; the Internet of Things access point calls the first encryption unit to carry out encryption processing on the data packet; and the Internet of Things access point sends the encrypted data packet to a gateway. The technical solution provided by the present invention has the advantages of a high security level and great user experience.

Description

Method and device for selecting encryption based on internet of things access point

The present invention claims the prior application priority of the application No. 201710579924.5, entitled "A Method and Apparatus for Selecting Encryption Based on the Internet of Things Access Point", which was filed on July 17, 2017, the content of which is incorporated by reference. The way is incorporated into this text.

Technical field

The present application relates to the field of communications, and in particular, to a method and apparatus for selecting and encrypting an access point (AP) based on an Internet of Things (AP).

Background technique

The Internet of Things is an important part of the new generation of information technology, and an important stage of development in the era of "informatization." Its English name is: "Internet of things (IoT)". As the name suggests, the Internet of Things is the Internet that connects things. This has two meanings: First, the core and foundation of the Internet of Things is still the Internet, which is an extended and extended network based on the Internet; Second, its client extends and extends to any item and item for information. Exchange and communication, that is, things and things. The Internet of Things is widely used in the convergence of networks through communication-aware technologies such as intelligent sensing, identification technology and pervasive computing. It is also called the third wave of the development of the world information industry after computers and the Internet. The Internet of Things is the application expansion of the Internet. It is not so much that the Internet of Things is a network, but the Internet of Things is a business and application. Therefore, application innovation is the core of the development of the Internet of Things. Innovation 2.0 with user experience as the core is the soul of the development of the Internet of Things.

The Internet of Things solves the interconnection between objects and the exchange of data between objects. The existing Internet of Things is connected to the Internet based on IoT access points when the Internet is connected. The existing Internet of Things AP receives the Internet of Things. After the data of the terminal, the data of the Internet of Things terminal cannot be separately encrypted, so the existing security is not high.

Summary of the invention

The application provides a selective encryption method based on an Internet of Things AP. Can improve IoT data Security to improve the user experience.

In a first aspect, a method for selecting an encryption based on an Internet of Things AP is provided, the method comprising the following steps:

Receiving, by the Internet of Things access point, a data packet sent by the Internet of Things terminal;

The IoT access point receives a first encryption unit selected by a user input through a human-computer interaction interface;

The IoT access point invokes the first encryption unit to perform encryption processing on the data packet;

The IoT access point sends the encrypted data packet to the gateway.

Optionally, the method may further include: before the IoT access point sends the encrypted data packet to the gateway:

If the first encryption unit fails to encrypt the data packet, the alternate encryption unit of the first encryption unit is invoked to encrypt the data packet.

Optionally, the requesting, by the IoT access point, the first encryption unit to perform encryption processing on the data packet includes:

Extracting a media access control MAC address of the Internet of Things terminal in the data packet, and encrypting the data packet by using the MAC address as a secret key of the first encryption unit.

Optionally, the IoT access point invokes the first encryption unit to perform encryption processing on the data packet, including:

The IoT access point extracts a set digit number from the MAC address of the Internet of Things terminal as a secret key, and the first encryption unit encrypts the data packet by using the secret key.

Converting the MAC address of the Internet of Things terminal into a decimal value, extracting the value of the second-to-last digit in the decimal value, and extracting the public key corresponding to the value of the second-to-last digit from the preset set of 10 sets of key pairs And using the public key to invoke the first encryption unit to encrypt the data packet.

Optionally, the set number of bits is 4, 6, or 8. The value of the above-mentioned set number of bits is to be divisible by the number of bits of the MAC address, because if it cannot be divisible by the number of bits of the MAC address, for the set number of bits, it may be extracted if the value is extracted by the number of bits. Different values or corresponding extraction The number of digits.

In a second aspect, a selection encryption device based on an Internet of Things AP is provided, the device comprising:

a receiving unit, configured to receive a data packet sent by the Internet of Things terminal;

a processing unit, configured to receive a first encryption unit selected by a user input through a human-computer interaction interface; and invoke the first encryption unit to perform encryption processing on the data packet;

a sending unit, configured to send the encrypted data packet to the gateway.

Optionally, the processing unit is further configured to: if the first encryption unit fails to encrypt the data packet, call the alternate encryption unit of the first encryption unit to encrypt the data packet.

Optionally, the processing unit is further configured to extract a MAC address of the Internet of Things terminal in the data packet, and encrypt the data packet by using the MAC address as a key of the first encryption unit.

Optionally, the processing unit is further configured to extract a set digit number as a secret key from a MAC address of the Internet of Things terminal, where the first encryption unit encrypts the data packet by using the secret key.

Optionally, the processing unit is further configured to convert the MAC address of the Internet of Things terminal into a decimal value, and extract a value of a penultimate digit in the decimal value, and extract the preset 10 sets of key pairs. The public key corresponding to the penultimate digit value is used to invoke the first encryption unit to encrypt the data packet.

Optionally, the set number of bits is 4, 6, or 8.

In a third aspect, a computer storage medium is provided, wherein the computer storage medium can store a program, the program including some or all of the steps of the IoT AP-based selective encryption method described in the above first aspect.

In a fourth aspect, an access point device is provided, the access point device comprising: one or more processors, a memory, a bus system, a transceiver, and one or more programs, the processor, the memory, and The transceiver is coupled by the bus system; wherein the one or more programs are stored in the memory, the one or more programs including instructions that, when executed by an access point, cause an access point to perform the In one aspect and in the first aspect, it is entirely possible to design any of the methods provided.

After the IoT terminal of the technical solution provided by the present invention sends the data packet to the AP, the AP selects an encryption unit corresponding to the Internet of Things terminal according to the serial number of the Internet of Things terminal, and encrypts the data through the encryption unit. For the Internet of Things , IoT terminals do not need to configure encryption, all encryption The settings are all in the AP. This method can effectively reduce the cost of the IoT terminal. For the entire Internet of Things, because one AP can connect to many IoT terminals, the AP configuration alone can reduce the overall cost of the Internet of Things. In addition, the computing power of the AP is generally stronger than that of the Internet of Things terminal, so the delay of data transmission can be reduced when the encryption unit is operated, the delay of the network is reduced, and the user experience is improved.

DRAWINGS

In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings used in the description of the embodiments will be briefly described below. It is obvious that the drawings in the following description are some embodiments of the present application, Those skilled in the art can also obtain other drawings based on these drawings without paying any creative work.

1 is a schematic flow chart of an AP-based data routing method;

2 is a transmission flow chart of an IoT terminal transmitting a data packet to an AP;

3 is a flow chart of a method for selecting an encryption method based on an Internet of Things AP

4 is a schematic diagram of a technical scenario provided by an embodiment of the present application;

FIG. 5 is a schematic diagram of a mapping relationship provided by an embodiment of the present application; FIG.

6 is a schematic flowchart of a method for selecting and encrypting an Internet of Things AP based on another embodiment of the present application;

7 is a schematic structural diagram of a selection encryption device based on an Internet of Things AP provided by the present application;

FIG. 8 is a schematic structural diagram of hardware of an Internet of Things access point provided by the present application.

Detailed ways

Before discussing the exemplary embodiments in more detail, it should be noted that some exemplary embodiments are described as a process or method depicted as a flowchart. Although the flowcharts describe various operations as a sequential process, many of the operations can be implemented in parallel, concurrently or concurrently. In addition, the order of operations can be rearranged. The process may be terminated when its operation is completed, but may also have additional steps not included in the figures. The processing may correspond to a method, a function, a procedure, a sub Routines, subroutines, and more.

By "computer device", also referred to as "computer" in the context, is meant an intelligent electronic device that can perform predetermined processing, such as numerical calculations and/or logical calculations, by running a predetermined program or instruction, which can include a processor and The memory is executed by the processor to execute a predetermined process pre-stored in the memory to execute a predetermined process, or is executed by hardware such as an ASIC, an FPGA, a DSP, or the like, or a combination of the two. Computer devices include, but are not limited to, servers, personal computers, notebook computers, tablets, smart phones, and the like.

The methods discussed below, some of which are illustrated by flowcharts, can be implemented in hardware, software, firmware, middleware, microcode, hardware description languages, or any combination thereof. When implemented in software, firmware, middleware or microcode, the program code or code segments to carry out the necessary tasks can be stored in a machine or computer readable medium, such as a storage medium. The processor(s) can perform the necessary tasks.

The specific structural and functional details disclosed are merely representative and are for the purpose of describing exemplary embodiments of the invention. The present invention may, however, be embodied in many alternative forms and should not be construed as being limited only to the embodiments set forth herein.

It should be understood that although the terms "first," "second," etc. may be used herein to describe the various elements, these elements should not be limited by these terms. These terms are used only to distinguish one unit from another. For example, a first unit could be termed a second unit, and similarly a second unit could be termed a first unit, without departing from the scope of the exemplary embodiments. The term "and/or" used herein includes any and all combinations of one or more of the associated listed items.

The terminology used herein is for the purpose of describing the particular embodiments, Except The singular forms "a", "an", and, It is also to be understood that the terms "comprising" and """ Other features, integers, steps, operations, units, components, and/or combinations thereof.

It should also be noted that in some alternative implementations, the functions/acts noted may occur in a different order than that illustrated in the drawings. For example, two figures shown in succession may in fact be executed substantially concurrently or sometimes in the reverse order, depending on the function/acts involved.

The invention is further described in detail below with reference to the accompanying drawings.

According to an aspect of the present invention, an uplink data transmission method of an Internet of Things AP is provided. The method is applied to the Internet of Things network as shown in FIG. 1. As shown in FIG. 1, the Internet of Things includes: an Internet of Things terminal 10, an Internet of Things access point AP20, a gateway 30, and an Internet of Things terminal 40. The Internet of Things terminal can have different manifestations according to different situations. For example, the Internet of Things terminal can be: a mobile phone, a tablet computer, a computer, etc., of course, it can also include other devices with networking functions, such as smart TV, smart. The air conditioner, the smart water bottle or some Internet of Things terminal devices, the above-mentioned Internet of Things terminal 10 is connected to the Internet of Things terminal 40 by wireless, the Internet of Things terminal 40 is connected to the AP 20, and the AP 20 is connected to the AP 20 by another means (ie, a wireless connection method). And the gateway 30 is connected to the Internet. The foregoing wireless methods include, but are not limited to, Bluetooth, WIFI, etc., and the other manner may be LTE or wired. The foregoing gateway may specifically be a mobile base station, a mobile relay station, a switch, or the like. . In Fig. 1, the wired mode is taken as an example, and for convenience of representation, only one solid line is shown here.

The above-mentioned gateway 30 may be a personal computer (PC) according to the size of the Internet of Things. Of course, in actual applications, it may also be a plurality of PCs, servers or server groups. The specific embodiment of the present invention is not limited to the specific expression form of the above gateway 30.

Referring to FIG. 2, FIG. 2 is a flow chart of data reception and transmission of an Internet of Things AP. As shown in FIG. 2, the process includes:

Step S201, the Internet of Things terminal 10 sends the data packet to be sent to the Internet of Things repeater 40 by wireless;

Step S202, the Internet of Things repeater sends the data packet to the AP20;

Step S203, AP20 forwards the data packet to the gateway 30;

Step S204: The gateway 30 transmits the data packet to the Internet.

Through the above-mentioned representations of FIG. 1 and FIG. 2, in the actual transmission of the data packet, if there is a leak between the AP 20 and the gateway 30, the data packet is easily leaked due to the fact that the transmitted data packet has not undergone corresponding encryption processing. It is prone to security problems.

Referring to FIG. 3, FIG. 3 is a method for selecting and encrypting an Internet of Things AP based on the present invention. The method is implemented under the network architecture shown in FIG. 4, as shown in FIG. 4, a plurality of objects can be connected under one AP20. The networked terminal can connect multiple IoT access terminals under the Internet of Things terminal. The AP can be a mobile phone that opens a hot spot, a personal computer that provides wireless connection, or a conventional hotspot device such as a router. The method is as shown in FIG. The indication includes the following steps:

Step S301, the Internet of Things terminal sends a data packet to the Internet of Things repeater, and the Internet of Things repeater sends the data packet to the AP;

The object-to-network terminal in the above step S301 may specifically be: a mobile phone, a tablet computer, a computer, etc., of course, it may also include other devices with networking functions, such as a smart TV, a smart air conditioner, a smart water bottle, a smart light, a smart switch, or Some IoT smart devices.

In the foregoing step S301, the manner in which the Internet of Things terminal sends a data packet to the Internet of Things terminal may be to send a data packet by using a wireless connection, including but not limited to: Bluetooth, Wireless Fidelity (WIFI) or Zigbee And other wireless methods, wherein the above WIFI needs to comply The standard of IEEE802.11b.

It should be noted that the Internet of Things and the Internet of Things terminal are only for wireless IoT terminals, because for the Internet of Things, the number of devices accessed by it is large. For the Internet of Things terminals, if the connection is through a wired connection, the terminal is first. The number of accesses is limited, and for the home, the wired connection is unimaginable for the wiring of the home user, and the cost of the cable is also very high, so in the technical solution of the present invention The connection between the IoT terminal and the IoT terminal is limited to wireless connection.

Step S302: The AP20 receives the data packet sent by the Internet of Things relay, and the AP20 receives the first encryption unit selected by the user input through the human-computer interaction interface.

The type of the Internet of Things terminal in the above step S302 can be set according to the situation of the device. For example, the IoT terminal can specifically include: a smart electric light, a smart television, a smart cleaning device, a smart sleep device, an intelligent monitoring device, etc. The form of performance can be various, for example, for a smart electric lamp, including but not limited to: a smart table lamp, a smart ceiling lamp, a smart wall lamp, etc., for example, for a smart TV, it can be a Samsung smart TV, of course It can also be a Sharp smart TV. For example, for a smart cleaning device, it can be a smart sweeping robot. Of course, it can also include a smart vacuum cleaner, a smart garbage processor, etc., for example, for a smart sleep device, For the smart mattress, the smart sofa, and the like, for example, for the smart monitoring device, it may be an intelligent sphygmomanometer, a smart thermometer, etc., and the specific form, number, or type of the above-mentioned Internet of Things terminal is not limited.

The user selection and encryption unit mapping table in the above steps is as shown in FIG. 5, and the mapping may be a one-to-one mapping, or may be a one-to-many mapping.

The encryption unit in the foregoing step S302 may be specifically a hardware encryption unit that is configured in the AP, and includes an encryption algorithm preset by the manufacturer. Of course, in an actual application, the encryption unit may also be a software encryption unit configured in the AP. The invention does not limit the specific expression of the above encryption unit.

The foregoing encryption algorithms include, but are not limited to, triple data encryption algorithm block cipher (English: riple Data Encryption Algorithm, 3DES), message digest algorithm (English: Message Digest Algorithm, MD5) or RSA (Rivest, Shamir, Adleman) and other encryption algorithms. The invention is not limited to specific encryption algorithms. For example, 3DES is a generic term for triple-data encryption algorithm block ciphers. It is equivalent to applying three DES encryption algorithms to each data block. Due to the enhancement of computer computing power, the original DES secret The key length of the code becomes vulnerable to brute force; 3DES is designed to provide a relatively simple way to avoid similar attacks by increasing the key length of the DES.

Step S303: The AP20 invokes the first encryption unit to perform encryption processing on the data packet.

The implementation method of the foregoing step S303 may specifically be:

For example, if the first encryption unit is a 3DES encryption unit, the AP 20 invokes the 3DES encryption unit to perform 3DES encryption processing on the data packet. For example, if the first encryption unit is a RAS encryption unit, the AP 20 invokes the RAS encryption unit to perform RAS encryption processing on the data packet. For example, if the first encryption unit is an MD5 encryption unit, the AP 20 invokes the MD5 encryption unit to perform MD5 encryption processing on the data packet.

For details about the encryption process, refer to related descriptions of 3DES, RSA, and MD5, and details are not described here.

The implementation method of the foregoing step S303 may specifically be:

The AP20 invokes the first encryption unit to perform encryption processing on the data packet. If the encryption succeeds, the subsequent step S304 is performed. If the encryption is unsuccessful, the standby encryption unit of the first encryption unit is invoked to encrypt the data packet, and the standby encryption is used. The unit ID is added to the header extension field of the encrypted packet.

Step S304: The AP20 sends the encrypted data packet to the gateway.

The implementation method of the above step S304 can be:

In another way, the encrypted data packet is sent to the gateway. For example, the IoT terminal is connected to the AP through the WIFI, and the AP20 can send the data packet to the gateway through the wired mode. Of course, in practical applications, the AP20 can also pass the long-term. Evolution (English: Long Term Evolution, LTE) sends the encrypted data packet to the gateway. Of course, the foregoing LTE or limited mode and the manner in which the Internet of Things terminal is connected to the AP through the WIFI are merely for illustrative purposes, and the present invention does not limit the specific manner of the foregoing connection.

According to the method provided in FIG. 3, the AP encrypts the data according to the encryption unit corresponding to the user's selection in the human-computer interaction interface. For the Internet of Things, the Internet of Things terminal does not need to configure encryption, and all encryption settings are in the AP. This method can effectively reduce the cost of the Internet of Things terminal, and for the entire Internet of Things, since one AP can connect a large number of IoT terminals, only the AP configuration can reduce the overall cost of the Internet of Things. APs generally have better computing power than IoT terminals, so they can reduce the delay of data transmission when running the encryption unit. The delay of the network improves the user experience.

Referring to FIG. 6, FIG. 6 is a method for selecting and encrypting an Internet of Things AP based on the present invention. The method is implemented under the network architecture shown in FIG. 4, as shown in FIG. 4, a plurality of objects can be connected under one AP20. The networking terminal can connect multiple IoT access terminals under the Internet of Things terminal, and the AP can be a mobile phone that opens a hot spot, a personal computer or a router that provides a wireless connection, and the method is as shown in FIG.

Step S601: The Internet of Things terminal sends a data packet to the Internet of Things relay.

The IoT terminal in the above step S601 may specifically be: a mobile phone, a tablet computer, a computer, etc., of course, it may also include other devices with networking functions, such as a smart TV, a smart air conditioner, a smart water bottle, a smart light, a smart switch, or Some IoT smart devices.

In the foregoing step S601, the manner in which the Internet of Things terminal sends a data packet to the Internet of Things terminal may be a method of sending a data packet by using a wireless connection, including but not limited to: Bluetooth, Wireless Fidelity (WIFI) or Zigbee And other wireless methods, wherein the above WIFI needs to comply with the IEEE802.11b standard.

Step S602: The AP20 receives the data packet sent by the Internet of Things relay, and the AP20 receives the first encryption unit selected by the user input through the human-computer interaction interface.

The type of the Internet of Things terminal in the above step S602 can be set according to the situation of the device. For example, the IoT terminal can include: a smart light, a smart TV, a smart cleaning device, a smart sleep device, an intelligent monitoring device, etc. The form of performance can be various, for example, for a smart electric lamp, including but not limited to: a smart table lamp, a smart ceiling lamp, a smart wall lamp, etc., for example, for a smart TV, it can be a Samsung smart TV, of course It can also be summer The smart TV, for example, for a smart cleaning device, may be a smart sweeping robot, and of course, it may also include a smart vacuum cleaner, a smart garbage processor, etc., for example, for a smart sleep device, it may be: a smart bed A device such as a pad or a smart sofa, for example, for an intelligent monitoring device, may be an intelligent sphygmomanometer, a smart thermometer, or the like. The specific form, number, or type of the above-described Internet of Things terminal is not limited.

The mapping between the Internet of Things terminal and the encryption unit in the above steps is as shown in FIG. 5, and the mapping may be a one-to-one mapping, or may be a one-to-many mapping.

The cryptographic unit in the foregoing step S602 may be a hardware cryptographic unit that is configured in the AP, and includes an encryption algorithm preset by the manufacturer. Of course, in an actual application, the cryptographic unit may also be a software cryptographic unit configured in the AP. The invention does not limit the specific expression of the above encryption unit.

The foregoing encryption algorithm includes, but is not limited to, an encryption algorithm such as 3DES, MD5 or RSA, and the present invention is not limited to a specific encryption algorithm.

Step S603: The AP20 invokes the first encryption unit to perform encryption processing on the data packet.

The implementation method of the foregoing step S603 may specifically be:

The AP 20 extracts the MAC address of the Internet of Things terminal in the data packet, and encrypts the data packet by using the MAC address as the secret key of the first encryption unit.

Of course, the implementation method of the foregoing step S603 may also be:

The above setting number may specifically be 4, 6 or 8, because for the MAC address, it has a value of 48 bits, that is, 48 bits, then when the set number is taken, it is necessary to divide by 48, otherwise the private key bit will appear. The number of inconsistencies. Of course, in practical applications, the number of extracted set digits can be converted into a decimal number, and then the decimal number is used as a private key. Of course, the above decimal numbers can also be replaced by hexadecimal numbers. The above-mentioned extraction set number of digits may be extracted in order, for example, the first 8 digits are extracted for the first time, and the 9-17 digits are extracted for the second time. Of course, the number of digits may be extracted or other digits may be extracted. The specific implementation manner does not limit the specific extraction method of the above digits.

The Internet of Things access point converts the MAC address of the IoT terminal into a decimal value and extracts ten a value of a penultimate digit in the hexadecimal value, extracting a public key corresponding to the value of the second-to-last digit from a preset set of 10 sets of key pairs, and using the public key to invoke the first cryptographic unit to the data The package is encrypted. For example, if the second-to-last value is 3, the fourth set of keys is extracted, and if the second-to-last value is 0, the first set of keys is extracted.

The advantage of this setting is that you first need to convert the MAC address to a decimal number. If you need to decipher, you first need to know how many digits to convert the MAC address into. In addition, we extract the second-digit value in order to make 10 sets of keys. The frequency is relatively uniform, because for 48-bit binary, if the extracted decimal digits are too high, the range of values may not be 0-9, which may result in 10 sets of key pairs always using only the first few. The use of the key pair reduces the difficulty of deciphering. So here we choose the value of the second digit of the last.

The implementation method of the foregoing step S603 may specifically be:

Step S604: The AP20 sends the encrypted data packet to the gateway.

The implementation method of the above step S604 can be:

In another way, the encrypted data packet is sent to the gateway. For example, the IoT terminal is connected to the AP through the WIFI, and the AP20 can send the data packet to the gateway through the wired mode. Of course, in practical applications, the AP20 can also pass the long-term. Evolution (English: Long Term Evolution, LTE) sends the encrypted data packet to the gateway. Of course, the foregoing LTE or limited mode and the manner in which the Internet of Things terminal is connected to the AP through the WIFI are for illustrative purposes only, and the present invention is not limited to the above connection. The specific way.

According to the method provided in FIG. 6, the AP acquires the first encryption unit selected by the user, and encrypts the data packet by using the first encryption unit selected by the user. For the Internet of Things, the Internet of Things terminal does not need to configure encryption, and all encryption settings are performed. Both are in the AP, this method can effectively reduce the cost of the Internet of Things terminal, and for the entire Internet of Things, because one AP can connect a large number of IoT terminals, only the AP configuration can reduce the overall cost of the Internet of Things. In addition, the computing power of the AP is generally stronger than that of the Internet of Things terminal, so the delay of data transmission can be reduced when the encryption unit is operated, the delay of the network is reduced, and the user experience is improved.

Referring to FIG. 7, FIG. 7 is an IoT AP-based selective encryption device 700. The device includes:

The receiving unit 701 is configured to receive a data packet sent by the Internet of Things terminal, and receive a first encryption unit selected by the user input through the human-computer interaction interface;

The processing unit 702 is configured to invoke the first encryption unit to perform encryption processing on the data packet.

The sending unit 703 is configured to send the encrypted data packet to the gateway.

Optionally, the processing unit 702 is further configured to: if the first encryption unit fails to encrypt the data packet, call the alternate encryption unit of the first encryption unit to encrypt the data packet.

Optionally, the processing unit 702 is further configured to extract a MAC address of the Internet of Things terminal in the data packet, and perform the encryption processing on the data packet by using the MAC address as a key of the first encryption unit.

Optionally, the processing unit 702 is further configured to extract a set digit number as a secret key from a MAC address of the Internet of Things terminal, where the first encryption unit encrypts the data packet by using the secret key.

Optionally, the processing unit 702 is further configured to convert the MAC address of the Internet of Things terminal into a decimal value, extract a value of a penultimate digit in the decimal value, and extract the preset 10 sets of key pairs. The public key corresponding to the second-to-last value is used to invoke the first encryption unit to encrypt the data packet.

Optionally, the set number of bits is 4, 6, or 8. The value of the above-mentioned set number of bits is to be divisible by the number of bits of the MAC address, because if it cannot be divisible by the number of bits of the MAC address, for the set number of bits, it may be extracted if the value is extracted by the number of bits. The values are different or the corresponding number of digits cannot be extracted.

A specific embodiment of the present invention further provides a computer storage medium, wherein the computer storage medium may store a program, where the program is executed, including the part of the time-phase encryption method for receiving data of any one of the Internet of Things APs described in the above first aspect. Or all steps.

Referring to FIG. 8, FIG. 8 is an IoT access point 800 provided by the present invention. The IoT access point may be a node deployed in an Internet system, and the Internet system may further include: an Internet of Things terminal and an Internet of Things connection. The access point and gateway, the Internet of Things access point 800 includes but is not limited to: a computer, a server, etc., as shown in FIG. 8, the IoT access point 800 includes: a processor 801, a memory 802, a transceiver 803, and a bus. 804. The transceiver 803 is configured to transmit and receive data with an external device (such as other devices in the interconnection system, including but not limited to: an Internet of Things terminal, a core network device, etc.). The number of processors 801 in the Internet of Things access point 800 can be one or more. In some embodiments of the present application, processor 801, memory 802, and transceiver 803 may be connected by a bus system or other means. For the meanings and examples of the terms involved in this embodiment, reference may be made to the corresponding embodiment of FIG. 3 or FIG. 6 , and details are not described herein again.

The program code can be stored in the memory 802. The processor 801 is configured to call program code stored in the memory 802 for performing the following operations:

The transceiver 803 is configured to receive a data packet sent by the Internet of Things terminal, and receive a first encryption unit selected by the user input through the human-computer interaction interface;

The processor 801 is configured to invoke the first encryption unit to perform encryption processing on the data packet.

The transceiver 803 is further configured to send the encrypted data packet to the gateway.

Optionally, the processor 801 and the transceiver 803 are further configured to perform the refinement and the steps of the steps and steps in the embodiment shown in FIG. 3 or FIG. 6.

It should be noted that the processor 801 herein may be a processing component or a general term of multiple processing components. For example, the processing component may be a central processing unit (CPU), an application specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present application. For example, one or more digital singal processors (DSPs), or one or more Field Programmable Gate Arrays (FPGAs).

The memory 803 may be a storage device or a collective name of a plurality of storage elements, and is used to store executable program code or parameters, data, and the like required for the application running device to operate. Memory The 903 may include a random access memory (RAM), and may also include a non-volatile memory such as a magnetic disk memory, a flash memory, or the like.

The bus 804 may be an Industry Standard Architecture (ISA) bus, a Peripheral Component (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus. The bus can be divided into an address bus, a data bus, a control bus, and the like. For ease of representation, only one thick line is shown in Figure 8, but it does not mean that there is only one bus or one type of bus.

The user equipment may also include input and output devices coupled to bus 804 for connection to other portions, such as processor 801, via a bus. The input/output device can provide an input interface for the operator, so that the operator can select the control item through the input interface, and can also be other interfaces through which other devices can be externally connected.

It should be noted that, for the foregoing various method embodiments, for the sake of brevity, they are all described as a series of action combinations, but those skilled in the art should understand that the present application is not limited by the described action sequence. Because some steps may be performed in other orders or concurrently in accordance with the present application. In the following, those skilled in the art should also understand that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily required by the present application.

In the above embodiments, the descriptions of the various embodiments are different, and the parts that are not described in detail in a certain embodiment can be referred to the related descriptions of other embodiments.

A person skilled in the art may understand that all or part of the various steps of the foregoing embodiments may be performed by a program to instruct related hardware. The program may be stored in a computer readable storage medium, and the storage medium may include: Flash disk, read-only memory (English: Read-Only Memory, referred to as: ROM), random accessor (English: Random Access Memory, referred to as: RAM), disk or optical disk.

The content downloading method and the related device and system provided by the embodiments of the present application are described in detail. The principles and implementation manners of the present application are described in the specific examples. The description of the above embodiments is only used to help understand the present application. The method of application and its core idea; at the same time, for those of ordinary skill in the art, according to the idea of the present application, there will be changes in the specific implementation manner and application scope. In summary, the content of this specification should not be understood. To limit the application.

Claims

A method for selecting an encryption method based on an Internet of Things access point AP, characterized in that the method comprises the following steps:

Receiving, by the Internet of Things access point, a data packet sent by the Internet of Things terminal;

The IoT access point receives a first encryption unit selected by a user input through a human-computer interaction interface;

The IoT access point invokes the first encryption unit to perform encryption processing on the data packet;

The IoT access point sends the encrypted data packet to the gateway.
The method according to claim 1, wherein the method may further include: before the IoT access point sends the encrypted data packet to the gateway:

If the first encryption unit fails to encrypt the data packet, the alternate encryption unit of the first encryption unit is invoked to encrypt the data packet.
The method according to claim 1 or 2, wherein the invoking the first encryption unit by the IoT access point to perform encryption processing on the data packet comprises:

Extracting a media access control MAC address of the Internet of Things terminal in the data packet, and encrypting the data packet by using the MAC address as a secret key of the first encryption unit.
The method according to claim 3, wherein the IoT access point invoking the first encryption unit to perform encryption processing on the data packet comprises:

The IoT access point extracts a set digit number from the MAC address of the Internet of Things terminal as a secret key, and the first encryption unit encrypts the data packet by using the secret key.
The method of claim 4 wherein said set number of bits is four, six or eight.
A selective encryption device based on an Internet of Things access point AP, characterized in that the device comprises:

a receiving unit, configured to receive a data packet sent by the Internet of Things terminal, and receive a first encryption unit selected by the user input through the human-computer interaction interface;

a processing unit, configured to invoke the first encryption unit to perform encryption processing on the data packet;

a sending unit, configured to send the encrypted data packet to the gateway.
The apparatus according to claim 6, wherein said processing unit is further used for When the first encryption unit fails to encrypt the data packet, the backup encryption unit of the first encryption unit is called to encrypt the data packet.
The device according to claim 6, wherein the processing unit is further configured to extract a MAC address of the Internet of Things terminal in the data packet, and use the MAC address as a key pair of the first encryption unit. The data packet is encrypted.
The apparatus according to claim 6, wherein the processing unit is further configured to extract a set digit number as a secret key from a MAC address of the Internet of Things terminal, and the first encryption unit adopts the secret key The packet is encrypted.
The apparatus according to claim 9, wherein said set number of bits is 4, 6, or 8.
A computer readable storage medium storing a computer program for electronic data exchange, wherein the computer program causes a computer to perform the method of any of claims 1-5.
A computer program product, comprising: a non-transitory computer readable storage medium storing a computer program, the computer program being operative to cause a computer to perform any of claims 1-5 The method described.