WO2019019287A1

WO2019019287A1 - Random encryption method and apparatus for internet of things terminal data

Info

Publication number: WO2019019287A1
Application number: PCT/CN2017/100896
Authority: WO
Inventors: 杜光东
Original assignee: 深圳市盛路物联通讯技术有限公司
Priority date: 2017-07-27
Filing date: 2017-09-07
Publication date: 2019-01-31
Also published as: CN107493267A

Abstract

Disclosed are a random encryption method and apparatus for Internet of things terminal data. The method comprises the following steps: an Internet of things terminal obtains a data packet that needs to be sent; the Internet of things terminal extracts a first encryption unit adopted during the last encryption, and the Internet of things terminal randomly selects a second encryption unit in the remaining encryption units except the first encryption unit; the Internet of things terminal invokes the second encryption unit to encrypt the data packet; and the Internet of things terminal sends the encrypted data and current time to a network side device. The technical solution provided by the present invention has advantages of high security and high user experience.

Description

Random encryption method and device for Internet of Things terminal data

The present invention claims the prior application priority of the application number No. 201710621291.X, which is filed on July 27, 2017, entitled "A Random Encryption Method and Apparatus for IoT Terminal Data", the content of the above prior application is introduced. The way is incorporated into this text.

Technical field

The present application relates to the field of communications, and in particular, to a random encryption method and apparatus for data of an Internet of Things terminal.

Background technique

The Internet of Things is an important part of the new generation of information technology, and an important stage of development in the era of "informatization." Its English name is: "Internet of things (IoT)". As the name suggests, the Internet of Things is the Internet that connects things. This has two meanings: First, the core and foundation of the Internet of Things is still the Internet, which is an extended and extended network based on the Internet; Second, its client extends and extends to any item and item for information. Exchange and communication, that is, things and things. The Internet of Things is widely used in the convergence of networks through communication-aware technologies such as intelligent sensing, identification technology and pervasive computing. It is also called the third wave of the development of the world information industry after computers and the Internet. The Internet of Things is the application expansion of the Internet. It is not so much that the Internet of Things is a network, but the Internet of Things is a business and application. Therefore, application innovation is the core of the development of the Internet of Things. Innovation 2.0 with user experience as the core is the soul of the development of the Internet of Things.

The Internet of Things solves the interconnection between objects and the exchange of data between objects. The existing Internet of Things is connected to the Internet based on IoT access points (APs). There are multiple IoT terminals under the Internet of Things (AP). The data between the Internet of Things (the network side device) and the IoT terminal is not encrypted. This makes it easy for the IoT device to leak, resulting in the leakage of user privacy data. User experience is not high.

Summary of the invention

The application provides a random encryption method for Internet of Things terminal data. Can improve IoT data Security to improve the user experience.

In a first aspect, a method for random encryption of Internet of Things terminal data is provided, the method comprising the following steps:

The Internet of Things terminal acquires a data packet that needs to be sent;

The IoT terminal extracts a first encryption unit used for the last encryption, and the Internet of Things terminal randomly selects a second encryption unit in the encryption unit remaining in the first encryption unit;

The IoT terminal invokes the second encryption unit to perform encryption processing on the data packet;

The Internet of Things terminal sends the encrypted data and the current time to the network side device.

Optionally, the method may further include: before the sending, by the IoT terminal, the encrypted data packet and the identifier of the second encryption unit to the gateway:

If the second encryption unit fails to encrypt the data packet, the alternate encryption unit of the third encryption unit is called to encrypt the data packet.

Optionally, the invoking the second encryption unit by the Internet of Things terminal to perform encryption processing on the data packet specifically includes:

The Internet of Things terminal extracts 6 digits from the media access terminal control MAC address of the Internet of Things terminal according to the extraction strategy corresponding to the working time period of the Internet of Things terminal, and obtains the signal strength value of the Internet of Things terminal, and the 6 digits The digital and signal strength values are connected to obtain a digit string, and the digit string is divided by a set integer to obtain a value of the first remainder, and the value of the first remainder is extracted from a plurality of pre-stored public keys. The first public key, the second encryption unit encrypts the data packet by using the first public key.

The invoking the second encryption unit by the Internet of Things terminal to encrypt the data packet specifically includes:

The IoT terminal extracts a signal modulation mode of the data packet, and obtains a bit number and a position in the MAC address of the IoT terminal to be extracted from the signal modulation mode and the extracted value according to the signal modulation mode, and extracts a bit value in the MAC address. The result of the bit value input into the preset algorithm is a secret key, and the second encryption unit is used to encrypt the data packet by using the secret key, and the method further includes: the Internet of Things The terminal counts the usage of each encryption unit. If each encryption unit is used once, the IoT terminal clears the usage of each encryption unit, and randomly selects one encryption unit from all encryption units.

In a second aspect, an Internet of Things terminal device is provided, the device comprising:

An obtaining unit, configured to acquire a data packet that needs to be sent;

a processing unit, configured to extract a first encryption unit used in the last encryption, the Internet of Things terminal randomly selects a second encryption unit in the encryption unit remaining in the first encryption unit; and invokes the second encryption unit Decoding the data packet;

And a sending unit, configured to send the encrypted data and the identifier of the second encryption unit to the network side device.

Optionally, the processing unit is configured to: when the second encryption unit fails to encrypt the data packet, call the alternate encryption unit of the third encryption unit to encrypt the data packet.

Optionally, the processing unit is configured to extract a 6-digit number from the media access terminal control MAC address of the Internet of Things terminal according to an extraction policy corresponding to a working time period of the Internet of Things terminal, and obtain a signal strength of the Internet of Things terminal. a value, connecting the 6-digit number and the signal strength value to obtain a digit string, dividing the digit string by a set integer to obtain a value of the first remainder, and extracting the number from a plurality of pre-stored public keys The first public key corresponding to the value of the remainder, the second encryption unit encrypts the data packet by using the first public key.

Optionally, the processing unit is specifically configured to extract a signal modulation manner of the data packet, and obtain, according to the signal modulation manner, a digit and a position in the MAC address of the Internet of Things terminal that needs to be extracted from the signal modulation manner and the extracted value. The bit value in the MAC address is extracted, and the result calculated by inputting the bit value into the preset algorithm is a secret key, and the second encryption unit is invoked by the secret key to encrypt the data packet.

Optionally, the processing unit is specifically configured to count the usage of each encryption unit. For example, each encryption unit is used once, and the Internet of Things terminal clears the usage of each encryption unit, and again from all the encryption units. Randomly select an encryption unit.

In a third aspect, a computer storage medium is provided, wherein the computer storage medium can store a program that, when executed, includes some or all of the steps of the random encryption method of any one of the Internet of Things terminal data described in the first aspect.

In a fourth aspect, an Internet of Things terminal device is provided, the IoT terminal device comprising: one or more processors, a memory, a bus system, a transceiver, and one or more programs, the processor, the memory, and The transceiver is connected by the bus system; wherein the one or more programs are Stored in the memory, the one or more programs include instructions that, when executed by the Internet of Things terminal, cause the Internet of Things terminal to perform any of the first aspect and all of the methods provided by the first aspect.

After the Internet of Things terminal of the technical solution provided by the present invention acquires the data packet that needs to be sent, the Internet of Things terminal extracts the first encryption unit used for the last encryption, and the Internet of Things terminal randomly selects one encryption unit from the remaining encryption unit, that is, the second The encryption unit encrypts the data through the encryption unit. For the Internet of Things, the encryption is set in the Internet of Things terminal. This method can encrypt the data, protect the privacy of the user, and improve the user experience.

DRAWINGS

In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings used in the description of the embodiments will be briefly described below. It is obvious that the drawings in the following description are some embodiments of the present application, Those skilled in the art can also obtain other drawings based on these drawings without paying any creative work.

1 is a schematic diagram of a network architecture;

2 is a transmission flow chart of an IoT terminal transmitting a data packet to a network side (taking a repeater as an example);

3 is a flow chart of a random encryption method for data of an Internet of Things terminal

4 is a schematic diagram of a technical scenario provided by an embodiment of the present application;

FIG. 5 is a schematic diagram of a mapping relationship provided by an embodiment of the present application; FIG.

6 is a schematic flowchart of a method for randomly encrypting data of an Internet of Things terminal according to another embodiment of the present application;

7 is a schematic structural diagram of an Internet of Things terminal device provided by the present application;

FIG. 8 is a schematic structural diagram of hardware of an Internet of Things terminal provided by the present application.

Detailed ways

Before discussing the exemplary embodiments in more detail, it should be noted that some exemplary embodiments are described as a process or method depicted as a flowchart. Although the flowchart describes the operations as sequential Rational, but many of these operations can be implemented in parallel, concurrently or simultaneously. In addition, the order of operations can be rearranged. The process may be terminated when its operation is completed, but may also have additional steps not included in the figures. The processing may correspond to methods, functions, procedures, subroutines, subroutines, and the like.

By "computer device", also referred to as "computer" in the context, is meant an intelligent electronic device that can perform predetermined processing, such as numerical calculations and/or logical calculations, by running a predetermined program or instruction, which can include a processor and The memory is executed by the processor to execute a predetermined process pre-stored in the memory to execute a predetermined process, or is executed by hardware such as an ASIC, an FPGA, a DSP, or the like, or a combination of the two. Computer devices include, but are not limited to, servers, personal computers, notebook computers, tablets, smart phones, and the like.

The methods discussed below, some of which are illustrated by flowcharts, can be implemented in hardware, software, firmware, middleware, microcode, hardware description languages, or any combination thereof. When implemented in software, firmware, middleware or microcode, the program code or code segments to carry out the necessary tasks can be stored in a machine or computer readable medium, such as a storage medium. The processor(s) can perform the necessary tasks.

The specific structural and functional details disclosed are merely representative and are for the purpose of describing exemplary embodiments of the invention. The present invention may, however, be embodied in many alternative forms and should not be construed as being limited only to the embodiments set forth herein.

It should be understood that although the terms "first," "second," etc. may be used herein to describe the various elements, these elements should not be limited by these terms. These terms are used only to distinguish one unit from another. For example, a first unit may be referred to as a second unit without departing from the scope of the exemplary embodiments, and similarly the second unit may be referred to as a first unit. The term "and/or" used herein includes any and all combinations of one or more of the associated listed items.

The terminology used herein is for the purpose of describing the particular embodiments, The singular forms "a", "an", It is also to be understood that the terms "comprising" and """ Other features, integers, steps, operations, units, components, and/or combinations thereof.

It should also be noted that in some alternative implementations, the functions/acts noted may occur in a different order than that illustrated in the drawings. For example, two figures shown in succession may in fact be executed substantially concurrently or sometimes in the reverse order, depending on the function/acts involved.

The invention is further described in detail below with reference to the accompanying drawings.

According to an aspect of the present invention, a data transmission method of an Internet of Things is provided. The method is applied to the object network shown in FIG. 1. As shown in FIG. 1, the object network includes: an Internet of Things terminal 10, an Internet of Things access point AP20, a gateway, and a repeater 40. The networked terminal may have different manifestations according to different situations. For example, the Internet of Things terminal may specifically be: a mobile phone, a tablet computer, a computer, etc., of course, it may also include other devices with networking functions, such as a smart TV, a smart air conditioner. The smart water bottle or some Internet of Things terminal device, the Internet of Things terminal 10 is connected to the repeater 40 in a wireless manner, and the repeater 40 is connected to the AP. The connection manner may be wireless or limited. The wireless mode includes but is not limited to: Bluetooth, WIFI, etc., and the foregoing gateway may specifically be a mobile base station, a mobile relay station, a switch, and the like. In Fig. 1, the wired mode is taken as an example, and for convenience of representation, only one solid line is shown here.

The above-mentioned gateway 30 may be a personal computer (PC) according to the size of the Internet of Things. In practice, it may be a plurality of PCs, servers, or server groups. The specific embodiment of the present invention is not limited. The specific manifestation of the above gateway 30.

The repeater 40 may be a plurality of devices according to different scenarios, such as a mobile phone, a smart watch, and the like.

Referring to FIG. 2, FIG. 2 is a transmission flowchart of data transmission of the Internet of Things. The network side device takes a repeater as an example. As shown in FIG. 2, the process includes:

Step S201, the Internet of Things terminal 10 transmits the data packet to be transmitted to the relay station 40 by wireless;

Step S202: The relay station forwards the data packet to the Internet of Things access point;

Step S203: The Internet of Things access point transmits the data packet to the gateway.

Through the above-mentioned FIG. 1 and FIG. 2, in the actual transmission of the data packet, if there is a leak between the Internet of Things terminal and the repeater, the data packet is easily corrupted because the corresponding data packet is not subjected to corresponding encryption processing. The leak is prone to security problems.

Referring to FIG. 3, FIG. 3 is a method for randomly encrypting data of an Internet of Things terminal according to the present invention. The method is implemented in a network architecture as shown in FIG. 4, as shown in FIG. 4, a repeater 40 can be connected. A plurality of IoT terminals, the repeater may be a mobile phone that opens a hotspot, a personal computer that provides a wireless connection, a forwarding device, and the like. The method is as shown in FIG. 3, and includes the following steps:

Step S301: The Internet of Things terminal acquires a data packet to be sent;

The object-to-network terminal in the above step S301 may specifically be: a mobile phone, a tablet computer, a computer, etc., of course, it may also include other devices with networking functions, such as a smart TV, a smart air conditioner, a smart water bottle, a smart light, a smart switch, or Some IoT smart devices.

Step S302: The Internet of Things terminal extracts a first encryption unit used for the last encryption, and the Internet of Things The terminal randomly selects a second one of the encryption units remaining in the first encryption unit.

The type of the Internet of Things terminal in the above step S302 can be set according to the situation of the device. For example, the IoT terminal can specifically include: a smart electric light, a smart television, a smart cleaning device, a smart sleep device, an intelligent monitoring device, etc. The form of performance can be various, for example, for a smart electric lamp, including but not limited to: a smart table lamp, a smart ceiling lamp, a smart wall lamp, etc., for example, for a smart TV, it can be a Samsung smart TV, of course It can also be a Sharp smart TV. For example, for a smart cleaning device, it can be a smart sweeping robot. Of course, it can also include a smart vacuum cleaner, a smart garbage processor, etc., for example, for a smart sleep device, For the smart mattress, the smart sofa, and the like, for example, for the smart monitoring device, it may be an intelligent sphygmomanometer, a smart thermometer, etc., and the specific form, number, or type of the above-mentioned Internet of Things terminal is not limited.

The encryption unit in the above steps can be as shown in FIG. 5.

The encryption unit in the above step S302 may specifically be a hardware encryption unit provided in the Internet of Things terminal, and includes an encryption algorithm preset by the manufacturer. Of course, in an actual application, the encryption unit may also be a software configured in the Internet of Things terminal. The encryption unit, the present invention does not limit the specific expression of the above encryption unit.

The foregoing encryption algorithm includes, but is not limited to, an encryption algorithm such as 3DES, MD5 or RSA, and the present invention is not limited to a specific encryption algorithm.

Step S303: The Internet of Things terminal invokes the second encryption unit to perform encryption processing on the data packet.

The implementation method of the foregoing step S303 may specifically be:

For example, the second encryption unit is a 3DES encryption unit, and the Internet of Things terminal invokes the 3DES encryption unit to perform 3DES encryption processing on the data packet. For example, if the second encryption unit is a RAS encryption unit, the Internet of Things terminal invokes the RAS encryption unit to perform RAS encryption processing on the data packet. For example, if the second encryption unit is an MD5 encryption unit, the Internet of Things terminal invokes the MD5 encryption unit to perform MD5 encryption processing on the data packet.

The foregoing encryption algorithms include, but are not limited to, triple data encryption algorithm block cipher (English: riple Data Encryption Algorithm, 3DES), message digest algorithm (English: Message Digest Algorithm, MD5) or RSA (Rivest, Shamir, Adleman) and other encryption algorithms. The invention is not limited to specific Encryption algorithm. For example, 3DES is a generic term for triple-data encryption algorithm block ciphers. It is equivalent to applying three DES encryption algorithms to each data block. Due to the increased computing power of the computer, the key length of the original DES password becomes vulnerable to brute force; 3DES is designed to provide a relatively simple method to avoid similar attacks by increasing the key length of DES.

The implementation method of the foregoing step S303 may specifically be:

The IoT terminal invokes the second encryption unit to perform encryption processing on the data packet. If the encryption is successful, the subsequent step S304 is performed. If the encryption is unsuccessful, the standby encryption unit (ie, the third encryption unit) of the second encryption unit is called to the data. The packet is encrypted and the alternate encryption unit identifier is added to the header extension field of the encrypted packet.

Step S304: The Internet of Things terminal sends the encrypted data and the identifier of the second encryption unit to the network side device.

The identifier of the second encryption unit includes, but is not limited to, a number, a codebook, a name, and the like, which can identify the information of the second encryption unit.

The implementation method of the above step S304 can be:

In the foregoing step S304, the manner in which the Internet of Things terminal sends a data packet to the Internet of Things terminal may be to send a data packet by using a wireless connection, including but not limited to: Bluetooth, Wireless Fidelity (WIFI) or Zigbee And other wireless methods, wherein the above WIFI needs to comply with the IEEE802.11b standard.

It should be noted that the Internet of Things and IoT terminals here are only for wireless IoT terminals, because for the Internet of Things, the number of devices accessed by them is large. For IoT terminals, if they are connected by wire, the first thing The number of accesses of the networked terminal is limited, and the wired connection is used for the home, which is unimaginable for the wiring of the home user, and the cost of the cable is also very high, so in the technical solution of the present invention The connection between the IoT terminal and the IoT terminal is limited to wireless connection.

According to the method provided in FIG. 3, after the Internet of Things terminal of the technical solution provided by the present invention acquires the data packet that needs to be sent, the Internet of Things terminal extracts the first encryption unit used for the last encryption, and the Internet of Things terminal is from the remaining encryption unit. Randomly select an encryption unit, that is, a second encryption unit, and encrypt the data through the encryption unit. For the Internet of Things, the encryption is set in the Internet of Things terminal. This method can encrypt the data and protect the privacy of the user. User experience.

Referring to FIG. 6, FIG. 6 is a method for randomly encrypting data of an Internet of Things terminal according to the present invention. The method is implemented under the network architecture shown in FIG. 4, as shown in FIG. 4, and an Internet of Things repeater can be used. A plurality of IoT terminals are connected. The IoT repeater may be a mobile phone that opens a hotspot, a personal computer that provides a wireless connection, and the like. The method is as shown in FIG. 6, and includes the following steps:

Step S601: The Internet of Things terminal acquires a data packet that needs to be sent;

The IoT terminal in the above step S601 may specifically be: a mobile phone, a tablet computer, a computer, etc., of course, it may also include other devices with networking functions, such as a smart TV, a smart air conditioner, a smart water bottle, a smart light, a smart switch, or Some IoT smart devices.

Step S602, the Internet of Things terminal extracts a first encryption unit used for the last encryption, and the Internet of Things terminal randomly selects a second encryption unit in the encryption unit remaining in the first encryption unit; and invokes the second encryption unit pair. The data packet is encrypted.

The type of the Internet of Things terminal in the above step S602 can be set according to the situation of the device. For example, the IoT terminal can include: a smart light, a smart TV, a smart cleaning device, a smart sleep device, an intelligent monitoring device, etc. The form of performance can be various, for example, for a smart electric lamp, including but not limited to: a smart table lamp, a smart ceiling lamp, a smart wall lamp, etc., for example, for a smart TV, it can be a Samsung smart TV, of course It can also be a Sharp smart TV. For example, for a smart cleaning device, it can be a smart sweeping robot. Of course, it can also include a smart vacuum cleaner, a smart garbage processor, etc., for example, for a smart sleep device, For the smart mattress, the smart sofa, and the like, for example, for the smart monitoring device, it may be an intelligent sphygmomanometer, a smart thermometer, etc., and the specific form, number, or type of the above-mentioned Internet of Things terminal is not limited.

The time period and the encryption unit mapping table in the above steps are as shown in FIG. 5, and the foregoing mapping may be a one-to-one mapping, or may be a one-to-many mapping or the like.

The cryptographic unit in the above step S602 may specifically be a hardware cryptographic unit disposed in the Internet of Things repeater, and includes an encryption algorithm preset by the manufacturer. Of course, in an actual application, the cryptographic unit may also be configured in the Internet of Things relay. The software encryption unit in the device does not limit the specific expression of the above encryption unit.

Step S603: The Internet of Things terminal extracts 6 digits from the media access terminal control MAC address of the Internet of Things terminal according to the extraction strategy corresponding to the working time period of the Internet of Things terminal, and obtains the signal strength value of the Internet of Things terminal, The 6-digit number is connected with the signal strength value to obtain a digit string, and the digit string is divided by a set integer (specifically, any integer of 6-11) to obtain a value of the first remainder, from a plurality of pre-stored values. Extracting, by the public key, a first public key corresponding to the value of the first remainder, and the second encryption unit encrypting the data packet by using the first public key;

The above-mentioned 6-digit number is connected with the signal strength value to obtain a digital string. Specifically, the signal strength value can be converted into a binary number to prevent the front or the back of the 6-digit number.

The implementation method of the foregoing step S603 may specifically be:

For details about the encryption process, refer to related descriptions of 3DES, RSA, and MD5, and details are not described here.

The implementation method of the foregoing step S603 may specifically be:

The IoT terminal invokes the second encryption unit to perform encryption processing on the data packet. If the encryption is successful, the subsequent step S304 is performed. If the encryption is unsuccessful, the standby encryption unit of the second encryption unit is called to encrypt the data packet, and the data packet is encrypted. The alternate encryption unit identifies the header extension field added to the encrypted packet.

Step S604: The Internet of Things terminal transmits the encrypted data packet and the signal strength value of the Internet of Things terminal, and the working time period of the Internet of Things terminal is carried in the payload of the frame and sent to the Internet of Things access point.

The implementation method of the above step S604 can be:

In the foregoing step S604, the manner in which the Internet of Things terminal sends a data packet to the Internet of Things (a type of network side device) may be a method of sending a data packet by using a wireless connection, including but not limited to: Bluetooth, wireless fidelity (English: Wireless Fidelity, WIFI) or Zigbee and other wireless methods, Among them, the above WIFI needs to comply with the IEEE802.11b standard.

It should be noted that the Internet of Things and IoT terminals here are only for wireless IoT terminals, because for the Internet of Things, the number of devices accessed by them is large. For IoT terminals, if they are connected by wire, the first thing The number of accesses of the networked terminal is limited, and the wired connection is used for the home, which is unimaginable for the wiring of the home user, and the cost of the cable is also very high, so in the technical solution of the present invention The connection between the IoT terminal and the IoT repeater is limited to wireless connections.

The technical solution adopted by the invention has the advantage of high safety.

Optionally, the foregoing method may further include: before step S604:

The IoT terminal invoking the second encryption unit to encrypt is unsuccessful, the IoT terminal invoking the alternate encryption unit of the second encryption unit to encrypt the data packet, and adding the identifier of the alternate encryption unit to the encryption process The header extension field of the packet.

Optionally, after the step S604, the foregoing method may further include:

The Internet of Things terminal counts the usage of each encryption unit. If each encryption unit is used once, the IoT terminal clears the usage of each encryption unit, and randomly selects one encryption unit from all encryption units.

The above use cases may specifically include, use or not, which may be represented by 1 bit, for example, 0 means unused, 1 means use, and of course, there may be other forms of expression, for example, 0 means use and 1 means unused.

Referring to FIG. 7, FIG. 7 is an IoT terminal device 700. The IoT terminal device 700 may be an Internet of Things terminal as shown in FIG. 3 or FIG. 6. The technical terms and definitions in the foregoing IoT terminal device may be referred to. As defined in Figure 3 or Figure 6, the apparatus comprises:

An obtaining unit 701, configured to acquire a data packet that needs to be sent;

The processing unit 702 is configured to extract a first encryption unit that is used for the last encryption, where the Internet of Things terminal randomly selects a second encryption unit in the encryption unit remaining in the first encryption unit; and invokes the second encryption unit pair The data packet is encrypted;

The sending unit 703 is configured to send the encrypted data and the current time to the network side device.

Optionally, the processing unit 702 is specifically configured to encrypt the data packet by, for example, the second encryption unit. If it fails, the alternate encryption unit of the second encryption unit is called to encrypt the data packet.

Optionally, the processing unit 702 is configured to: extract, according to an extraction policy corresponding to the working time period of the Internet of Things terminal, a 6-digit number from the media access terminal control MAC address of the Internet of Things terminal, and obtain a signal strength value of the Internet of Things terminal. And connecting the 6-digit number and the signal strength value to obtain a digit string, dividing the digit string by a set integer to obtain a value of the first remainder, and extracting the first number from a plurality of pre-stored public keys The first public key corresponding to the value of the remainder, the second encryption unit encrypts the data packet by using the first public key.

Optionally, the set integer is an integer greater than or equal to 6 and less than or equal to 11.

Optionally, the processing unit 602 is specifically configured to count the usage of each cryptographic unit. If each cryptographic unit is used once, the IoT terminal clears the usage of each cryptographic unit, and again from all the cryptographic units. Randomly select an encryption unit.

The present invention also provides a computer storage medium, wherein the computer storage medium can store a program that, when executed, includes some or all of the steps of the random encryption method of any one of the Internet of Things terminal data described in the above first aspect.

Referring to FIG. 8, FIG. 8 is an Internet of Things terminal 800 provided by the present invention. The Internet of Things terminal may be a node deployed in an Internet system, and the Internet system may further include: an Internet of Things repeater and an Internet of Things access point. And the gateway, the Internet of Things terminal 800 includes but is not limited to: a computer, a server, etc., as shown in FIG. 8, the Internet of Things terminal 800 includes a processor 801, a memory 802, a transceiver 803, and a bus 804. The transceiver 803 is configured to transmit and receive data with an external device (eg, other devices in the interconnection system, including but not limited to: a repeater, a core network device, etc.). The number of processors 801 in the Internet of Things terminal 800 may be one or more. In some embodiments of the present application, processor 801, memory 802, and transceiver 803 may be connected by a bus system or other means. For the meanings and examples of the terms involved in this embodiment, reference may be made to the corresponding embodiment of FIG. 3 or FIG. 6 , and details are not described herein again.

The program code can be stored in the memory 802. The processor 801 is configured to call the memory 802. The program code stored in it to do the following:

a transceiver 803, configured to acquire a data packet that needs to be sent;

The processor 801 is configured to extract a first encryption unit used for the last encryption, where the Internet of Things terminal randomly selects a second encryption unit other than the remaining encryption unit of the first encryption unit; and invokes the second encryption unit pair The data packet is encrypted.

The transceiver 803 is further configured to send the encrypted data packet and the current time to be carried in the payload of the frame to the IoT access point.

Optionally, the processor 801 and the transceiver 803 are further configured to perform the refinement and the steps of the steps and steps in the embodiment shown in FIG. 3 or FIG. 6.

It should be noted that the processor 801 herein may be a processing component or a general term of multiple processing components. For example, the processing component may be a central processing unit (CPU), an application specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present application. For example, one or more digital singal processors (DSPs), or one or more Field Programmable Gate Arrays (FPGAs).

The memory 803 may be a storage device or a collective name of a plurality of storage elements, and is used to store executable program code or parameters, data, and the like required for the application running device to operate. And the memory 903 may include random access memory (RAM), and may also include non-volatile memory such as a magnetic disk memory, a flash memory, or the like.

The bus 804 may be an Industry Standard Architecture (ISA) bus, a Peripheral Component (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus. The bus can be divided into an address bus, a data bus, a control bus, and the like. For ease of representation, only one thick line is shown in Figure 8, but it does not mean that there is only one bus or one type of bus.

The user equipment may also include input and output devices coupled to bus 804 for connection to other portions, such as processor 801, via a bus. The input/output device can provide an input interface for the operator, so that the operator can select the control item through the input interface, and can also be other interfaces through which other devices can be externally connected.

It should be noted that, for the foregoing various method embodiments, for the sake of simple description, It is described as a series of combinations of actions, but those skilled in the art will appreciate that the present application is not limited by the sequence of actions described, as some steps may be performed in other sequences or concurrently in accordance with the present application. In the following, those skilled in the art should also understand that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily required by the present application.

In the above embodiments, the descriptions of the various embodiments are different, and the parts that are not described in detail in a certain embodiment can be referred to the related descriptions of other embodiments.

A person skilled in the art may understand that all or part of the various steps of the foregoing embodiments may be performed by a program to instruct related hardware. The program may be stored in a computer readable storage medium, and the storage medium may include: Flash disk, read-only memory (English: Read-Only Memory, referred to as: ROM), random accessor (English: Random Access Memory, referred to as: RAM), disk or optical disk.

The content downloading method and the related device and system provided by the embodiments of the present application are described in detail. The principles and implementation manners of the present application are described in the specific examples. The description of the above embodiments is only used to help understand the present application. The method of application and its core idea; at the same time, for those of ordinary skill in the art, according to the idea of the present application, there will be changes in the specific implementation manner and application scope. In summary, the content of this specification should not be understood. To limit the application.

Claims

A random encryption method for data of an Internet of Things terminal, characterized in that the method comprises the following steps:

The Internet of Things terminal acquires a data packet that needs to be sent;

The IoT terminal extracts a first encryption unit used for the last encryption, and the Internet of Things terminal randomly selects a second encryption unit in the encryption unit remaining in the first encryption unit;

The IoT terminal invokes the second encryption unit to perform encryption processing on the data packet;

The Internet of Things terminal sends the encrypted data and the identifier of the second encryption unit to the network side device.
The method according to claim 1, wherein the method may further include: before the IoT terminal sends the encrypted data packet to the gateway:

If the second encryption unit fails to encrypt the data packet, the alternate encryption unit of the third encryption unit is called to encrypt the data packet.
The method according to claim 1, wherein the invoking the second encryption unit to perform the encryption processing on the data packet comprises:

The Internet of Things terminal extracts 6 digits from the media access terminal control MAC address of the Internet of Things terminal according to the extraction strategy corresponding to the working time period of the Internet of Things terminal, and obtains the signal strength value of the Internet of Things terminal, and the 6 digits The digital and signal strength values are connected to obtain a digit string, and the digit string is divided by a set integer to obtain a value of the first remainder, and the value of the first remainder is extracted from a plurality of pre-stored public keys. The first public key, the second encryption unit encrypts the data packet by using the first public key.
The method according to claim 3, wherein the invoking the second encryption unit by the Internet of Things terminal to encrypt the data packet comprises:

The IoT terminal extracts a signal modulation mode of the data packet, and obtains a bit number and a position in the MAC address of the IoT terminal to be extracted from the signal modulation mode and the extracted value according to the signal modulation mode, and extracts a bit value in the MAC address. The result obtained by inputting the bit value into the preset algorithm is a secret key, and the second encryption unit is called by the secret key to encrypt the data packet.
The method of claim 1 further comprising:

The Internet of Things terminal counts the usage of each encryption unit. If each encryption unit is used once, the IoT terminal clears the usage of each encryption unit, and randomly selects one encryption unit from all encryption units.
An Internet of Things terminal device, characterized in that the device comprises:

An obtaining unit, configured to acquire a data packet that needs to be sent;

a processing unit, configured to extract a first encryption unit used in the last encryption, the Internet of Things terminal randomly selects a second encryption unit in the encryption unit remaining in the first encryption unit; and invokes the second encryption unit Decoding the data packet;

And a sending unit, configured to send the encrypted data and the identifier of the second encryption unit to the network side device.
The apparatus according to claim 6, wherein the processing unit is configured to: if the second encryption unit fails to encrypt the data packet, call the alternate encryption unit of the third encryption unit to the data packet Encryption processing.
The device according to claim 6, wherein the processing unit is configured to extract 6 bits from the media access terminal media access control MAC address according to an extraction policy corresponding to a working time period of the Internet of Things terminal And obtaining a signal strength value of the Internet of Things terminal, connecting the 6-digit number and the signal strength value to obtain a digit string, dividing the digit string by a set integer to obtain a value of the first remainder, from pre-stored The first public key corresponding to the value of the first remainder is extracted from the plurality of public keys, and the second encryption unit encrypts the data packet by using the first public key.
The device according to claim 8, wherein the processing unit is specifically configured to extract a signal modulation mode of the data packet, and obtain an Internet of Things to be extracted from the signal modulation mode and the extracted value according to the signal modulation mode. The number of bits in the MAC address of the terminal and the location, the bit value in the MAC address is extracted, and the result of the bit value input into the preset algorithm is the secret key, and the second encryption unit is called by the secret key. The data packet is encrypted.
The device according to claim 8, wherein the processing unit is specifically configured to count the usage of each encryption unit, for example, each encryption unit is used once, and the Internet of Things terminal uses each encryption unit. Clear the situation and randomly select an encryption unit from all encryption units.
A computer readable storage medium characterized in that it is stored for electronic data exchange A computer program, wherein the computer program causes a computer to perform the method of any of claims 1-5.
A computer program product, comprising: a non-transitory computer readable storage medium storing a computer program, the computer program being operative to cause a computer to perform any of claims 1-5 The method described.