WO2024113183A1

WO2024113183A1 - Internet of things system and internet of things data processing method

Info

Publication number: WO2024113183A1
Application number: PCT/CN2022/135158
Authority: WO
Inventors: 梁宝荣; 黄镇涛
Original assignee: 上下左右有限公司
Priority date: 2022-11-29
Filing date: 2022-11-29
Publication date: 2024-06-06

Abstract

Disclosed in the present application are an Internet of Things system and an Internet of Things data processing method. The Internet of Things system comprises: a user side, which is configured to acquire a private key from an Internet of Things server according to an account of a user, and generate a data packet by using the private key and on the basis of upload information of the user, wherein the data packet comprises the upload information and a signature which is generated according to the upload information; the user side is further configured to send the data packet to a blockchain platform; and the Internet of Things server is used for allocating a key for asymmetric encryption. By using the Internet of Things system of the present application, data tampering can be effectively prevented.

Description

Internet of things system and Internet of things data processing method

Technical Field

The present application relates to the field of Internet of Things, and in particular to an Internet of Things system and an Internet of Things data processing method.

Background technique

The Internet of Things (IOT) refers to: through various devices and technologies such as information sensors, radio frequency identification technology, global positioning system, infrared sensors, laser scanners, etc., any object or process that needs to be monitored, connected, and interacted with can be collected in real time, and its sound, light, heat, electricity, mechanics, chemistry, biology, location and other required information can be collected. Through various possible network access, ubiquitous connection between things and things, things and people can be achieved, and intelligent perception, identification and management of objects and processes can be realized.

Consortium Block Chains means: multiple pre-selected nodes are designated as bookkeepers within a certain group, and the generation of each block is jointly decided by all pre-selected nodes (pre-selected nodes participate in the consensus process). Other access nodes can participate in transactions but do not inquire about the bookkeeping process (it is essentially still custodial bookkeeping, but it has become distributed bookkeeping. The number of pre-selected nodes and how to decide the bookkeeper of each block become the main risk points of the blockchain). Anyone else can perform limited queries through the open API of the blockchain.

Due to the multiple access possibilities of IoT, data in the physical network can be easily tampered by hackers, causing errors in the IoT system.

Summary of the invention

The present application aims to solve at least one of the technical problems existing in the prior art. To this end, the present application proposes an Internet of Things system and an Internet of Things data processing method, which can effectively prevent data from being tampered with.

IoT systems, including:

The user terminal is configured to obtain a private key from the IoT server according to the user's account, and generate a data packet based on the user's uploaded information using the private key, wherein the data packet includes the uploaded information and a signature generated according to the uploaded information; the user terminal is also configured to send the data packet to the blockchain platform;

Wherein, the Internet of Things server is used to distribute asymmetric encryption keys.

The Internet of Things system according to the embodiment of the first aspect of the present application has at least the following technical effects: the data packet contains a signature generated based on the uploaded information, which can quickly verify the authenticity of the information, quickly identify tampered information, and prevent the Internet of Things system from being attacked; in addition, the data packet is stored in the blockchain platform, which further increases the difficulty of tampering with the information, further improving the security of the Internet of Things system of the present application.

According to the Internet of Things system of the first aspect of the present application, the user terminal is further configured as follows:

The data packet is obtained from the blockchain platform, and a public key can be obtained from the IoT server according to a user account to verify a signature in the data packet.

The uploaded information in the data packet is encrypted using a private key.

The uploaded information in the data packet is decrypted using the public key.

The Internet of Things system according to the first embodiment of the present application further includes:

Several information collection devices are configured to collect IoT data and obtain private keys and public keys from the IoT server, encrypt and package the IoT data using the private key to form IoT data packets, and send the IoT data packets to the blockchain platform and broadcast them in the IoT;

Among them, the Internet of Things data includes first data and second data, the first data is data actively generated by the information collection device itself, and the second data is data received by the information collection device in the Internet of Things and actively generated by other information collection devices in the Internet of Things and broadcast in the Internet of Things.

According to the Internet of Things system of the first aspect of the present application, the information collection device is further configured as:

The received IoT data packet is decrypted using the public key and compared with the first data actively generated by itself, the identical data is eliminated, and the modified first data and the second data are repackaged using the private key to form an IoT data packet, and the IoT data packet is sent to the blockchain platform and broadcast in the IoT.

Obtain an IoT data packet from the blockchain platform and decrypt the IoT data packet using a public key.

The second aspect of the present application also provides an Internet of Things data processing method:

The user end receives the uploaded information from the user and obtains the private key from the IoT server according to the user's account; and

Generate a data packet using a private key based on the user's uploaded information, the data packet including the uploaded information and a signature generated according to the uploaded information;

The data packet is sent to the blockchain platform.

The method for processing Internet of Things data according to the second embodiment of the present application further includes the following steps:

The user end obtains the public key from the IoT server according to the user's account, and uses the public key to verify the signature in the data packet.

In the step of generating a data packet based on the user's uploaded information using a private key, wherein the data packet includes the uploaded information and a signature generated according to the uploaded information, the following steps are also included:

Encrypting the user's uploaded information using a private key;

The step of obtaining a public key from the IoT server according to the user's account and verifying the signature in the data packet using the public key at the user end further includes the following steps:

The public key is used to decrypt the uploaded information of the user.

Information collection equipment collects IoT data;

The information collection device obtains a private key from the Internet of Things server;

The information collection device encrypts and packages the IoT data using a private key to form an IoT data packet, and sends the IoT data packet to the blockchain platform and broadcasts it in the IoT.

According to the IoT data processing method of the second aspect of the present application, the IoT data packet includes first data and second data, the first data is data actively generated by the information collection device itself, the second data is data received by the information collection device in the IoT and actively generated by other information collection devices in the IoT and broadcast in the IoT, and the method further includes the following steps:

The information collection device obtains the public key from the Internet of Things;

The information collection device receives the IoT data packets broadcast in the IoT or obtains the IoT data packets from the blockchain platform;

The information collection device decrypts the IoT data packet using the public key;

The information collection device compares the data in the decrypted IoT data packet with the first data actively generated by itself, and removes the identical data;

The information collection device uses the private key to re-encrypt the modified first data and the second data and package them into Internet of Things data, broadcast them in the Internet of Things, and send them to the blockchain platform.

The method for processing IoT data according to the second aspect of the present application also includes the following steps: the user terminal obtains an IoT data packet from the blockchain platform;

The user end uses the private key to decrypt the IoT data packet.

According to an embodiment of the third aspect of the present application, a non-transitory computer-readable storage medium storing computer instructions is provided, wherein the computer instructions are used to enable the computer to execute the method provided by any embodiment of the present application.

Additional aspects and advantages of the present application will be given in part in the description below, and in part will become apparent from the description below, or will be learned through the practice of the present application.

BRIEF DESCRIPTION OF THE DRAWINGS

The accompanying drawings are used to better understand the present solution and do not constitute a limitation of the present application.

FIG1 is a schematic diagram of data flow of an Internet of Things system according to an embodiment of the present application;

FIG2 is a schematic diagram of a data encryption process of an Internet of Things system according to an embodiment of the present application;

FIG3 is a schematic diagram of information sharing of an Internet of Things system according to an embodiment of the present application.

Detailed ways

The embodiments of the present application are described in detail below, and examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are only used to explain the present application, and cannot be understood as limiting the present application.

In addition, features defined as "first" or "second" may include one or more of the features explicitly or implicitly. In the description of the present application, unless otherwise specified, "plurality" means two or more.

The following describes in detail the Internet of Things system of the embodiment of the present application in conjunction with the accompanying drawings. The Internet of Things system includes:

As an exemplary implementation, FIG1 shows the data transmission process of the Internet of Things system according to an embodiment of the present application. As shown in FIG1 , the Internet of Things system includes a user terminal, an Internet of Things server, a blockchain, and information collection devices (deviceA, deviceB). The user can log in to the account at the user terminal. When the user logs in successfully, the user terminal obtains data access rights and obtains the public key and private key for asymmetric decryption from the Internet of Things server according to the account authority. As shown in FIG2 , according to the account authority of different users, different numbers of public keys and private keys can be obtained. For example, in FIG2 , user 1 (user1) obtains private keys 1-8 and public keys 11-18, and user 2 (user2) obtains private keys 11-15 and public keys 1-19.

In this embodiment, the IoT server is used to distribute asymmetric encryption keys, including different private keys and different public keys for each user account, so that each user account has different information access permissions, and also includes distributing different private keys and different public keys to other devices in the IoT system, so that each device has different information access permissions. The user can upload data at the user end to form uploaded information, and then the user end performs a hash operation (hash) on the uploaded information to obtain a summary of the uploaded information, and then uses the private key to asymmetrically encrypt the summary to form a signature, and then package the signature and the uploaded information to form a data packet and send it to the blockchain. In the process of uploading information circulation, the user's uploaded information is doubly protected by the signature and the blockchain to ensure that the uploaded information is difficult to be tampered with.

The blockchain platform includes the underlying blockchain, which in turn includes multiple blockchain nodes.

Here, the underlying blockchain 22 can be any blockchain known in the art or developed in the future, including a public chain, a consortium chain, or a private chain, etc., which will not be described in detail in this disclosure.

According to an embodiment of the present application, the user terminal is also configured to: obtain the data packet from the blockchain platform, and obtain the public key from the Internet of Things server based on the user account to verify the signature in the data packet.

Specifically, according to the user account permissions, the user end can obtain the public key from the IoT server to verify the authenticity of the uploaded information shared by other users.

According to an embodiment of the present application, the user terminal is further configured as follows:

Encrypting the uploaded information in the data packet using a private key;

The uploaded information in the data packet is decrypted using the public key.

Specifically, the upload information in the data packet is encrypted using a private key, so that only designated users have the authority to view the information. Exemplarily, the role and effect of this embodiment are explained in detail in the form of a specific embodiment below. The upload information in the data packet is encrypted using a private key, so that the user can share his upload information with other designated users to prevent leakage. Referring to Figure 3, the upload information in the solid-line box in the figure is obtained by the user's active upload, and the information in the dotted-line box is obtained by sharing with other users. For example, user 1 only uploaded upload information 1-3 (data1, data2, data3), and obtained upload information 4-5 (data4, data5) through sharing. For another example, user 3 did not upload any upload information, but obtained upload information 1-5 (data1, data2, data3, data4, data5) through sharing.

In addition, in this embodiment, the role of the signature is to quickly verify whether the user has the reading permission for the uploaded information in the data packet. If the signature verification passes, it can be directly decrypted. If the signature verification fails, a verification error result is returned.

According to an embodiment of the present application, there are also several information collection devices, which are configured to collect IoT data and obtain a private key and a public key from the IoT server, and encrypt and package the IoT data using the private key to form an IoT data packet, and send the IoT data packet to the blockchain platform and broadcast it in the IoT;

The first data is data actively generated by the information collection device itself. For example, signals or information such as light, heat, electricity, etc. detected from the target object or target environment. The second data is data that is not actively generated by the information collection device itself, but is actively generated by any other information collection device in the Internet of Things and is received by the data collection device through broadcast. For example, taking three information collection devices (device A, device B, device C) in the Internet of Things as an example, the information collection device device A actively collects data to generate data A, the information collection device device B actively collects data to generate data B, and the information collection device device C actively collects data to generate data C. The information collection device device A can receive Internet of Things data packets from the blockchain platform or the broadcast between information collection devices, in which data A is the first data relative to the information collection device device A, and data B and data C are the second data relative to the information collection device device A. It can be understood that for the Internet of Things data packets broadcast from the blockchain platform or between information collection devices, the public key can be used to decrypt them to obtain the second data.

In this embodiment, blockchain is used to store and transmit data, which can prevent data tampering. Secondly, since data may be lost during the upload process, in order to avoid this situation, the data in the Internet of Things is transmitted between data collection devices, which can maximize the redundancy of the data to avoid data loss.

According to an embodiment of the present application, the information collection device is further configured as follows:

Specifically, in order to reduce the volume of IoT data packets and speed up data transmission efficiency, the same data in the received IoT data packets is eliminated, which can effectively reduce the volume of data and speed up decryption efficiency.

Specifically, in the present application, the user can view the IoT data at the user end, and at the same time, there is no direct connection between the user end and the information collection device, which can prevent hackers from intruding into the IoT system of the present application from the user end.

This application also proposes a method for processing IoT data:

The S100 client receives the uploaded information from the user and obtains the private key and the public key from the IoT server according to the user's account; and

S110 generates a data packet based on the user's uploaded information using a private key, the data packet including the uploaded information and a signature generated based on the uploaded information, and the user's uploaded information encrypted by the private key; and

S120 sends the data packet to the blockchain platform;

S200 information collection equipment collects IoT data;

S210 The information collection device obtains a private key and a public key from the Internet of Things server;

S221 The information collection device encrypts and packages the IoT data using a private key to form an IoT data packet, and sends the IoT data packet to the blockchain platform and broadcasts it in the IoT;

S222 The information collection device receives the IoT data packet broadcasted in the IoT or obtains the IoT data packet from the blockchain platform;

S223 The information collection device decrypts the IoT data packet using the public key;

S224 The information collection device compares the data in the decrypted IoT data packet with the first data actively generated by itself, and removes the identical data;

The S225 information collection device uses the private key to re-encrypt the modified first data and the second data and package them into IoT data, broadcast them in the IoT, and send them to the blockchain platform.

The information collection device uses the private key to re-encrypt the modified first data and the second data and package them into IoT data, broadcast them in the IoT, and send them to the blockchain platform.

The Internet of Things data packet includes first data and second data, wherein the first data is data actively generated by the information collection device itself, and the second data is data received by the information collection device in the Internet of Things and actively generated by other information collection devices in the Internet of Things and broadcast in the Internet of Things.

When a user needs to check information, the following steps are included:

S300 obtains the public key from the IoT server based on the user account authority of the user terminal;

S310 The user end verifies and decrypts the data packet using the public key;

The S320 client uses the public key to decrypt Internet data packets.

Although the embodiments of the present application have been shown and described, those skilled in the art will appreciate that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present application, and that the scope of the present application is defined by the claims and their equivalents.

It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps recorded in this application can be executed in parallel, sequentially or in different orders, as long as the expected results of the technical solution disclosed in this application can be achieved, and this document is not limited here.

The above specific implementations do not constitute a limitation on the protection scope of this application. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions and improvements made within the spirit and principles of this application should be included in the protection scope of this application.

Claims

The Internet of Things system is characterized by comprising:

The user terminal is configured to obtain a private key from the IoT server according to the user's account, and generate a data packet based on the user's uploaded information using the private key, wherein the data packet includes the uploaded information and a signature generated according to the uploaded information; the user terminal is also configured to send the data packet to the blockchain platform;

Wherein, the Internet of Things server is used to distribute asymmetric encryption keys.
The Internet of Things system according to claim 1, characterized in that the user terminal is further configured to:

The data packet is obtained from the blockchain platform, and a public key can be obtained from the IoT server according to a user account to verify a signature in the data packet.
The Internet of Things system according to claim 2, characterized in that the user terminal is further configured as:

The uploaded information in the data packet is encrypted using a private key.
The Internet of Things system according to claim 3, characterized in that the user terminal is further configured as:

The uploaded information in the data packet is decrypted using the public key.
The Internet of Things system according to any one of claims 1 to 4, characterized in that it also includes:

Several information collection devices are configured to collect IoT data and obtain private keys and public keys from the IoT server, encrypt and package the IoT data using the private key to form IoT data packets, and send the IoT data packets to the blockchain platform and broadcast them in the IoT;

Among them, the Internet of Things data includes first data and second data, the first data is data actively generated by the information collection device itself, and the second data is data received by the information collection device in the Internet of Things and actively generated by other information collection devices in the Internet of Things and broadcast in the Internet of Things.
The Internet of Things system according to claim 5, characterized in that the information collection device is further configured as:

The received IoT data packet is decrypted using the public key and compared with the first data actively generated by itself, the identical data is eliminated, and the modified first data and the second data are repackaged using the private key to form an IoT data packet, and the IoT data packet is sent to the blockchain platform and broadcast in the IoT.
The Internet of Things system according to claim 6, characterized in that the user terminal is further configured to:

Obtain an IoT data packet from the blockchain platform and decrypt the IoT data packet using a public key.
The method for processing Internet of Things data is characterized by:

The user end receives the uploaded information from the user and obtains the private key from the IoT server according to the user's account; and

Generate a data packet using a private key based on the user's uploaded information, the data packet including the uploaded information and a signature generated according to the uploaded information;

The data packet is sent to the blockchain platform.
The method according to claim 8, characterized in that:

The user end obtains the public key from the IoT server according to the user's account, and uses the public key to verify the signature in the data packet.
The method according to claim 9, characterized in that:

In the step of generating a data packet based on the user's uploaded information using a private key, wherein the data packet includes the uploaded information and a signature generated according to the uploaded information, the following steps are also included:

Encrypting the user's uploaded information using a private key;

The step of obtaining a public key from the IoT server according to the user's account and verifying the signature in the data packet using the public key at the user end further includes the following steps:

The public key is used to decrypt the user's uploaded information.
The method according to any one of claims 8 to 10, characterized in that it also includes the following steps:

Information collection equipment collects IoT data;

The information collection device obtains a private key from the Internet of Things server;

The information collection device encrypts and packages the IoT data using a private key to form an IoT data packet, and sends the IoT data packet to the blockchain platform and broadcasts it in the IoT.
The method according to claim 12 is characterized in that the IoT data packet includes first data and second data, the first data is data actively generated by the information collection device itself, the second data is data received by the information collection device in the IoT and actively generated by other information collection devices in the IoT and broadcast in the IoT, and the method further comprises the following steps:

The information collection device obtains the public key from the Internet of Things;

The information collection device receives the IoT data packets broadcast in the IoT or obtains the IoT data packets from the blockchain platform;

The information collection device decrypts the IoT data packet using the public key;

The information collection device compares the data in the decrypted IoT data packet with the first data actively generated by itself, and removes the identical data;

The information collection device uses the private key to re-encrypt the modified first data and the second data and package them to form IoT data, broadcast them in the IoT, and send them to the blockchain platform.
The Internet of Things system according to claim 12, characterized in that it also includes the following steps:

The user end obtains IoT data packets from the blockchain platform;

The user end uses the private key to decrypt the IoT data packet.