CN110233825B - Equipment initial method, Internet of things equipment, system, platform equipment and intelligent equipment - Google Patents
Equipment initial method, Internet of things equipment, system, platform equipment and intelligent equipment Download PDFInfo
- Publication number
- CN110233825B CN110233825B CN201910375971.7A CN201910375971A CN110233825B CN 110233825 B CN110233825 B CN 110233825B CN 201910375971 A CN201910375971 A CN 201910375971A CN 110233825 B CN110233825 B CN 110233825B
- Authority
- CN
- China
- Prior art keywords
- internet
- things
- equipment
- feature code
- accessed
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1441—Countermeasures against malicious traffic
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/02—Protocols based on web technology, e.g. hypertext transfer protocol [HTTP]
- H04L67/025—Protocols based on web technology, e.g. hypertext transfer protocol [HTTP] for remote control or remote monitoring of applications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/12—Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computing Systems (AREA)
- Computer Hardware Design (AREA)
- General Engineering & Computer Science (AREA)
- Health & Medical Sciences (AREA)
- General Health & Medical Sciences (AREA)
- Medical Informatics (AREA)
- Computer And Data Communications (AREA)
Abstract
The application discloses an equipment initial method, Internet of things equipment, a system, platform equipment and intelligent equipment, wherein the method comprises the following steps: the method comprises the steps that an Internet of things platform receives a query request for querying the initialization state of the Internet of things equipment to be accessed, wherein the query request comprises an identifier of the Internet of things equipment to be accessed; responding to the query request, and querying the initialization state of the Internet of things equipment matched with the identifier; if the inquired initialization state of the Internet of things equipment matched with the identification is not initialized, initializing the Internet of things equipment so as to start the service function of the Internet of things equipment. By means of the method, the device and the system, the safety of the service function of the equipment can be improved, and the risk of being attacked is reduced.
Description
Technical Field
The application relates to the technical field of internet of things, in particular to an equipment initial method, internet of things equipment, a system, platform equipment and intelligent equipment.
Background
The Internet of things (IoT) is an important component of new-generation information technology and is also an important development stage of the information era. The internet of things is the internet with connected objects and comprises two meanings: firstly, the core and the foundation of the internet of things are still the internet, and the internet is an extended and expanded network on the basis of the internet; and secondly, the system extends and expands to any article to article for information exchange and communication. The internet of things is widely applied to network convergence through communication perception technologies such as intelligent perception and identification technologies, and is also called as the third wave of development of the world information industry after computers and the internet.
Along with more and more equipment access to the internet, because the internet of things equipment can be used after accessing the internet, the equipment is easily attacked by malicious programs on the internet, and personal privacy information leakage, property loss and other damages are easily caused.
Disclosure of Invention
The technical problem mainly solved by the application is to provide an equipment initial method, an internet of things equipment, a system, a platform equipment and an intelligent equipment, which can improve the safety of equipment service functions and reduce the risk of being attacked.
In order to solve the above technical problem, the first technical solution adopted by the present application is: provided is a device initialization method including: the method comprises the steps that an Internet of things platform receives a query request for querying the initialization state of the Internet of things equipment to be accessed, wherein the query request comprises an identifier of the Internet of things equipment to be accessed; responding to the query request, and querying the initialization state of the Internet of things equipment matched with the identifier; if the inquired initialization state of the Internet of things equipment matched with the identification is not initialized, initializing the Internet of things equipment so as to start the service function of the Internet of things equipment.
In order to solve the above technical problem, the second technical solution adopted by the present application is: provided is a device initialization method including: judging whether an initialization request sent by an Internet of things platform is received; if the initialization request is received, the service function of the Internet of things equipment is started; and when the Internet of things equipment is not initialized, the service function is not started.
In order to solve the above technical problem, the third technical solution adopted by the present application is: provided is a device initialization method including: the client acquires the identification and the feature code of the Internet of things equipment to be accessed and generates a query request for querying the initialization state of the Internet of things equipment to be accessed; and sending the query request to the Internet of things platform so that the Internet of things platform initializes the Internet of things equipment to be accessed when querying that the Internet of things equipment to be accessed is not initialized, so as to start the service function of the Internet of things equipment to be accessed.
In order to solve the above technical problem, a fourth technical solution adopted by the present application is: provided is an Internet of things platform device, including: a communication circuit and a processor connected to each other; the communication circuit is used for receiving a query request for querying the initialization state of the to-be-accessed Internet of things equipment, wherein the query request comprises an identifier of the to-be-accessed Internet of things equipment; the processor is configured to execute instructions to implement the method as provided in the first aspect above.
In order to solve the above technical problem, a fifth technical solution adopted by the present application is: provided is an Internet of things device, including: a communication circuit and a processor connected to each other; the communication circuit is used for communicating with the Internet of things platform; the processor is used for executing the method provided by the second technical scheme.
In order to solve the above technical problem, a sixth technical solution adopted in the present application is: there is provided a smart device comprising: an identification device, a communication circuit and a processor; the recognition device and the communication circuit are respectively connected with the processor; the identification device is used for acquiring the identification and the feature code of the Internet of things equipment to be accessed; the communication circuit is used for communicating with the Internet of things platform; the processor is configured to execute the instructions to implement the method according to the third technical solution.
In order to solve the above technical problem, a seventh technical solution adopted by the present application is: provided is an Internet of things system, including: the internet of things platform device provided by the fourth technical scheme, the internet of things device provided by the fifth technical scheme and the intelligent device provided by the sixth technical scheme are provided; the Internet of things equipment and the intelligent equipment are respectively connected with the Internet of things platform so as to complete initialization of the Internet of things equipment through the Internet of things platform.
The beneficial effect of this application is: different from the situation of the prior art, in the embodiment of the application, the internet of things platform receives an inquiry request for inquiring the initialization state of the internet of things equipment to be accessed, wherein the inquiry request comprises the identification of the internet of things equipment to be accessed; responding to the query request, and querying the initialization state of the Internet of things equipment matched with the identification of the Internet of things equipment; if the inquired initialization state of the Internet of things equipment matched with the identification is not initialized, initializing the Internet of things equipment so as to start the service function of the Internet of things equipment. By means of the method, after the Internet of things equipment is connected with the Internet, equipment initialization is carried out through the Internet of things platform, and then the business function of the equipment can be started, so that malicious programs on the Internet cannot detect the business service of the equipment before the equipment is not initialized to attack, the safety of the business function of the equipment can be improved, and the risk of attack is reduced.
Drawings
FIG. 1 is a schematic flow chart diagram illustrating a first embodiment of a device initialization method according to the present application;
FIG. 2 is a schematic diagram of the architecture of an Internet of things system;
FIG. 3 is a schematic flow chart diagram illustrating a second embodiment of a device initialization method according to the present application;
FIG. 4 is a detailed flowchart of step S131 in FIG. 3;
FIG. 5 is a schematic flow chart diagram illustrating a third embodiment of a device initialization method according to the present application;
FIG. 6 is a detailed flowchart of step S22 in FIG. 5;
FIG. 7 is a schematic flow chart diagram illustrating a fourth embodiment of a device initialization method according to the present application;
FIG. 8 is a flowchart illustrating a fifth embodiment of a method for initializing a device according to the present application;
fig. 9 is a schematic structural diagram of an embodiment of an internet of things platform device according to the present application;
fig. 10 is a schematic structural diagram of an embodiment of an internet of things device according to the present application;
FIG. 11 is a schematic structural diagram of an embodiment of a smart device of the present application;
fig. 12 is a schematic structural diagram of an embodiment of an internet of things system according to the present application;
fig. 13 is a schematic structural diagram of an embodiment of an apparatus with a storage function according to the present application.
Detailed Description
The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application, and it is obvious that the described embodiments are only a part of the embodiments of the present application, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present application.
An execution main body of the first embodiment of the device initialization method is the internet of things platform device, the internet of things platform device has a control service function, and the control service function is responsible for keeping long connection with an internet of things device end and providing a communication channel with the internet of things device. As shown in fig. 1, a first embodiment of a device initialization method according to the present application includes:
s11: the Internet of things platform receives a query request sent by a client for querying the initialization state of the Internet of things equipment to be accessed.
As shown in fig. 2, the control service function of the internet of things platform may provide a communication channel with the client. After the user uses the client to connect to the internet of things platform, the control service function of the internet of things platform keeps a link with the client, for example, the control service function keeps a long connection with the initialization module of the client in fig. 2, so that the client and the internet of things platform can keep communication.
In an application example, a user of the internet of things device, for example, a device owner, may obtain information of the internet of things device (including an identifier of the internet of things device, etc.), and then may connect the internet of things platform through the client, for example, connect a control service of the internet of things platform through an initialization module of the client, and send an inquiry request to the control service of the internet of things platform, where the inquiry request includes an identifier of the internet of things device to be accessed, that is, the identifier of the internet of things device obtained by the client. The identification can be a unique identification code such as an ID or a serial number of the Internet of things equipment. The query request may be a signaling generated by the client and including an identifier of the internet of things device, or may be a data message directly sent by the client to the internet of things platform and including the identifier of the internet of things device.
S12: and responding to the query request, and querying the initialization state of the Internet of things equipment matched with the identification.
Specifically, after the internet of things device is installed, the device starts the access network and then registers to the internet of things platform, for example, in fig. 2, the device registers to the control service of the internet of things platform through the initialization module of the device side. The internet of things platform stores the initialization state of the internet of things equipment registered to the internet of things platform, for example, the internet of things platform can store the state of the equipment in the form of an equipment state table, and the equipment state table stores the identification of the internet of things equipment and the corresponding initialization state of the internet of things equipment. Wherein the initialization state includes initialized and uninitialized. The initialized device does not need to be initialized again, and the service function is started; the uninitialized device may start its service function only after an initialization process, for example, the service module of the dashed box in the uninitialized internet of things device in fig. 2 is not started and is not connected to the internet.
After receiving the query request, the internet of things platform responds to the query request, analyzes the query request to obtain the identifier of the internet of things device to be accessed, and then queries the initialization state data of the internet of things device stored in the platform according to the identifier, such as a device state table, so as to obtain the initialization state of the internet of things device matched with the identifier. If the initialization state of the internet of things device matched with the identifier is not initialized, the following step S13 is executed, otherwise, the step S14 is executed.
S13: initializing the IOT equipment to start the service function of the IOT equipment.
S14: and returning the initialized message of the equipment of the Internet of things to the client.
Specifically, if the internet of things platform queries that the initialization state of the internet of things device to be accessed is not initialized, the control service of the internet of things platform sends an initialization request to an initialization module of the internet of things device to be accessed to initialize the internet of things device and start a service function of the internet of things device, so that the service function is accessed to a network, and a client performs subsequent service logic operation conveniently, for example, the client can call video data of a network camera. If the internet of things platform inquires that the initialization state of the internet of things equipment to be accessed is initialized, the internet of things platform can return the initialized message of the internet of things equipment to the client. If the initialization state of the internet of things equipment matched with the identification cannot be inquired by the internet of things platform, the fact that the internet of things equipment is not registered in the internet of things platform is indicated, the internet of things platform can return a message that the initialization state of the internet of things equipment is not inquired to the client, and meanwhile information prompting a user to check whether the internet of things equipment is started or whether networking is performed can be given.
In this embodiment, the internet of things platform receives an inquiry request for inquiring the initialization state of the internet of things device to be accessed, where the inquiry request includes an identifier of the internet of things device to be accessed; responding to the query request, and querying the initialization state of the Internet of things equipment matched with the identification of the Internet of things equipment; if the inquired initialization state of the Internet of things equipment matched with the identifier is not initialized, the Internet of things equipment is initialized to start the service function of the Internet of things equipment, so that after the Internet of things equipment is connected with the Internet, equipment initialization is carried out through an Internet of things platform, the service function of the equipment can be started, malicious programs on the Internet cannot detect the service attack of the equipment before the equipment is not initialized, the safety of the service function of the equipment can be improved, and the risk of the attack is reduced.
In other embodiments, to further enhance the security of device initialization, verification of the device feature code may be added at the time of device initialization.
Specifically, as shown in fig. 3, a second embodiment of the device initialization method according to the present application is based on the first embodiment of the device initialization method according to the present application, and further defines that the query request further includes a feature code of the internet of things device to be accessed. Step S13 includes:
s131: and judging whether the feature code of the to-be-accessed Internet of things equipment is matched with the feature code corresponding to the identifier stored by the Internet of things platform.
The feature codes are different and irrelevant to the identifiers, are set when the internet of things equipment leaves a factory, and are different from each other. The feature code can be a security code of the internet of things device and the like.
The Internet of things platform also stores the identification of the Internet of things equipment registered to the Internet of things platform and the feature code matched with the identification. For example, the device state table of the internet of things platform further includes a feature code corresponding to each device.
Specifically, when the initialization state matched with the identifier of the to-be-accessed internet-of-things device is not initialized when the internet-of-things platform queries that the initialization state is not initialized, in order to further enhance the security of device initialization and avoid the security problem caused by the identifier leakage of the internet-of-things device, before the internet-of-things device is initialized, the internet-of-things platform verifies the feature code of the to-be-accessed internet-of-things device, and when the feature code of the to-be-accessed internet-of-things device in the received query request is matched with the feature code corresponding to the identifier of the to-be-accessed internet-of-things device stored in the internet-of-things platform, the following step S132 is executed, otherwise, the step S133 is executed.
S132: and starting a business module of the Internet of things equipment.
S133: and sending a message that the device feature codes are not matched and the initialization fails to the client.
Specifically, after the internet of things platform analyzes the feature code of the internet of things device to be accessed from the query request, the feature code can be compared with the feature code of the internet of things device to be accessed stored by the internet of things platform, if the feature code is consistent with the feature code, the feature code is matched, the control service of the internet of things platform can send an initialization command to an initialization module of the internet of things device, the service module of the internet of things device can be started after the initialization command is received by the internet of things device, and the internet of things device can provide actual service operation. Taking an internet protocol Camera (IP Camera, IPC) as an example, the service module of the IPC can provide services for streaming media such as RTSP, and after initialization, the service module of the IPC can provide actual monitoring services.
If the internet of things platform judges that the feature code is not matched with the feature code of the corresponding equipment stored by the internet of things platform, the control service of the internet of things platform sends a message that the equipment feature code is not matched and the initialization fails to the initialization module of the client. At this moment, the internet of things equipment is not initialized, the service module is not started, the service function is not started, and therefore a malicious attack program cannot detect actual service, so that the internet of things equipment cannot be directly attacked at this moment, the purpose of improving the security of equipment service access network is achieved, and the equipment is verified by using the equipment feature code, so that the equipment is prevented from being initialized maliciously due to the fact that the equipment identifier is easy to guess or the equipment identifier is leaked, the security of equipment initialization can be improved, and the security of equipment service access network is further improved.
Optionally, in order to further improve the security of feature code verification, the ciphertext of the device feature code is stored in the platform of the internet of things. As shown in fig. 4, step S131 includes:
s1311: and calculating the corresponding equipment feature code abstract by using the feature code of the Internet of things equipment to be accessed.
The device feature code digest is a ciphertext obtained by computing the device feature code through an encryption algorithm, such as an irreversible hash algorithm sha256 and sha 512.
S1312: and comparing the equipment feature code abstract with a feature code abstract corresponding to the identifier stored by the Internet of things platform.
Specifically, after the internet of things platform obtains the feature code of the internet of things device to be accessed, the feature code abstract corresponding to the feature code is obtained through calculation by using an encryption algorithm, wherein the encryption algorithm is an algorithm which is defaulted or negotiated between the internet of things platform and the internet of things device, or an algorithm specified by an internet of things protocol. Then, the internet of things platform compares the calculated device feature code abstract with a feature code abstract corresponding to the identifier of the internet of things device to be accessed, if the two are consistent, the following step S1313 is executed, otherwise, the step S1314 is executed.
S1313: and judging that the feature code of the Internet of things equipment to be accessed is matched with the feature code corresponding to the identifier stored by the Internet of things platform.
S1314: and judging that the feature code of the Internet of things equipment to be accessed is not matched with the feature code corresponding to the identifier stored by the Internet of things platform.
If the feature code of the internet of things device to be accessed is matched with the feature code corresponding to the identifier stored by the internet of things platform, the internet of things platform continues to execute the following step S132, otherwise, the step S133 is executed.
Optionally, in other embodiments, the client may directly perform encryption operation after obtaining the feature code, and after obtaining the feature code digest, directly include the feature code digest in the query request sent to the internet of things platform, so as to further ensure the security of information transmission.
In other embodiments, if the access password of the internet of things device can be set, the access security of the internet of things device can be improved.
Specifically, as shown in fig. 5, a third embodiment of the device initialization method according to the present application is based on the second embodiment of the device initialization method according to the present application, before further limiting step S132, the method further includes:
s21: and judging whether the equipment of the Internet of things supports the setting of the access password.
Specifically, some internet of things devices may support access password setting, and before starting a service function of the internet of things device, the internet of things platform may query whether the device supports the access password setting, and if so, perform the following step S22, otherwise perform step S23.
S22: and acquiring an access password sent by the client, and sending the access password to the Internet of things equipment for storage so as to carry out password verification during subsequent access.
S23: the process continues to step S132.
If the internet of things equipment supports the access password setting, the internet of things platform can send an access password setting prompt to the client, so that the client can prompt a user to input an access password of the internet of things equipment and transmit the access password to the internet of things platform. After receiving the access password sent by the client, the internet of things platform can send the access password to the initialization module of the internet of things equipment through the control service for storage, so that password verification is performed on the client when the client accesses the internet of things equipment subsequently. Therefore, before the client of the Internet of things equipment uses the equipment, the client needs to log in an access password, and the client cannot access the equipment if the password is not accurate, so that the attack difficulty of a malicious attacker can be improved, and the use safety of the equipment is improved.
Optionally, in order to further improve the security of device access, when setting an access password, a security requirement may be set, so that a user sets a password with higher complexity, and the password is prevented from being too simple and being easily cracked by a malicious attacker. As shown in fig. 6, step S22 includes:
s221: and receiving an access password input by a user through the client.
S222: and judging whether the access password meets the safety requirement.
The security requirement is a preset access password limiting condition. The security requirements may include the number of characters and character type requirements that the access code must contain, among other things. For example, the security requirement is that the access code must contain upper and lower case letters as well as numbers, and must be within 6-20 characters.
If the access password input by the user meets the security requirement, step S223 is executed, otherwise, step S224 is executed.
S223: and sending the access password to the Internet of things equipment for storage so as to carry out password verification during subsequent access.
S224: sending a setting failure message to the client to prompt the user to re-input the access password meeting the security requirement.
Specifically, in an application example, the control service of the internet of things platform receives an access password, such as aBc1249d, input by a user through a client, and then the control service of the internet of things platform determines whether the access password meets a security requirement, such as aBc1249d meets a security requirement of mixing 8-digit numbers and letters, and since the password aBc1249d meets the security requirement of mixing 8-digit numbers and letters, the control service of the internet of things platform sends the access password aBc1249 124 1249d to an initialization module of the internet of things device for storage, so as to perform password verification during subsequent access. If the access password input by the user, such as aaaaab, does not meet the security requirement, the internet of things platform sends a setting failure message to the client to prompt the user to re-input the access password meeting the security requirement. Therefore, when the access password of the Internet of things equipment is set, the security verification of the equipment password is added, the scenes of weak passwords and default passwords can be effectively prevented, and the access security of the equipment is improved.
Optionally, when the access password of the internet of things equipment is set, the internet of things platform can also directly acquire the feature code of the internet of things equipment to be accessed, and judge whether the feature code meets the security requirement, if so, the feature code is used as the access password, and the access password is sent to the internet of things equipment for storage, so that password verification is performed during subsequent access, so that the internet of things equipment can be initialized without adding extra operation of a client, and the experience of adding equipment by an actual user is not influenced while the security is ensured.
An execution main body of the fourth embodiment of the device initialization method in the present application is an internet of things device, and the internet of things device may be an IPC, an NVR (Network Video Recorder), an IoT gateway, or the like. The Internet of things equipment is provided with an initialization module and a service module, wherein the initialization module is responsible for maintaining long connection with an Internet of things platform and is responsible for actually initializing the whole body; the service module is a module for providing actual service operation, taking IPC as an example, and can serve streaming media such as RTSP. As shown in fig. 7, a fourth embodiment of a device initialization method according to the present application includes:
s32: and judging whether an initialization request sent by the Internet of things platform is received.
If the initialization request is received, go to step S33, otherwise go back to step S32.
S33: and starting the service function of the equipment of the Internet of things.
And when the Internet of things equipment is not initialized, the service function is not started.
Specifically, after the internet of things platform receives an inquiry request sent by the client, the internet of things platform inquires whether the internet of things equipment to be accessed is initialized, and if not, the control service of the internet of things platform sends the initialization request to an initialization module of the internet of things equipment. After the internet of things platform is started, the internet of things platform is connected, whether the internet of things platform sends an initialization request is monitored, when the internet of things equipment receives the initialization request sent by the internet of things platform, initialization operation is carried out, the service function of the internet of things equipment is started, and by taking IPC as an example, the monitoring service of the service module of the internet of things equipment is started. When the internet of things equipment does not perform initialization operation, the service function of the internet of things equipment is not started, namely, the service module of the internet of things equipment does not work. Therefore, after the internet of things equipment is connected with the internet, the business function of the equipment can be started only by initializing the equipment through the internet of things platform, so that malicious programs on the internet cannot detect the business service of the equipment to attack before the equipment is not initialized, the safety of the business function of the equipment can be improved, and the risk of being attacked is reduced.
Optionally, as shown in fig. 7, before step S32, the method further includes:
s30: and registering and logging in the Internet of things platform by the Internet of things equipment.
S31: and reporting the equipment feature code abstract of the Internet of things equipment to the Internet of things platform, and keeping long connection with the Internet of things platform.
Specifically, after the internet of things device is started, the internet of things device registers and logs in a corresponding internet of things platform, and reports its own information, such as reporting its own identifier (e.g., serial number) and device feature code abstract, to the internet of things platform, so that the subsequent internet of things platform performs feature code verification, thereby improving the security of device initialization. At present, the internet of things device needs to obtain a feature code of the device (such as a security code set when the device leaves a factory) first, and then encrypt the feature code by using an encryption algorithm, such as an irreversible hash algorithm, to obtain an abstract of the feature code. Meanwhile, the initialization module of the Internet of things equipment can be kept in long connection with the control service of the Internet of things platform, so that subsequent operations such as initialization can be performed.
Optionally, with reference to fig. 7, before step S33, the method may further include:
s34: and receiving and storing the access password sent by the Internet of things platform.
Specifically, in an application example, when the internet of things device supports access password setting, the internet of things device may receive an access password (for example, a device feature code or an access password input by a user) sent by the internet of things platform, and store the access password, so as to perform password authentication when a subsequent client logs in to the device. For example, when a client needs to access initialized internet of things equipment, the client needs to input an access password first, the internet of things equipment verifies whether the access password is consistent with an access password stored by the internet of things equipment, if so, the client is allowed to access, otherwise, the client is not allowed to access. Therefore, the safety of the access of the Internet of things equipment can be improved, and the unauthorized client is prevented from accessing the Internet of things equipment.
An execution main body of the fifth embodiment of the device initialization method is an internet of things device client, and the client is a user-oriented client, such as an APP client, a PC client, and other common clients. The client side is provided with an initialization module and a service module, wherein the initialization module is responsible for keeping connection with the Internet of things platform and providing the capability of directly initializing the Internet of things equipment for the client side; the service module can be connected with the equipment end of the Internet of things to provide actual service operation. As shown in fig. 8, a fifth embodiment of an apparatus initialization method according to the present application includes:
s41: the client acquires the identification and the feature code of the to-be-accessed Internet of things equipment and generates a query request for querying the initialization state of the to-be-accessed Internet of things equipment.
Specifically, in an application example, the internet of things device has a barcode or a two-dimensional code, and the client device scans the barcode or the two-dimensional code to obtain the identifier and the feature code of the internet of things device. After the client acquires the identifier and the feature code of the internet of things device, a query request can be generated, wherein the query request at least comprises the identifier of the internet of things device. The client can also directly use the identifier as a query request for querying the initialization state of the internet of things device.
S42: and sending the query request to the Internet of things platform so that the Internet of things platform initializes the Internet of things equipment to be accessed when querying that the Internet of things equipment to be accessed is not initialized, so as to start the service function of the Internet of things equipment to be accessed.
Specifically, in the application example, after the client generates the query request, the initialization module may send the query request to the control service of the internet of things platform, and the internet of things platform initializes the internet of things device to be accessed when querying that the internet of things device to be accessed is not initialized, so as to start a service function of the internet of things device to be accessed. Therefore, after the Internet of things equipment is connected with the Internet, equipment initialization must be carried out through the Internet of things platform, the service function of the equipment can be started, and the client can only carry out service operation after the service function is started, so that malicious programs on the Internet cannot detect the service of the equipment before the equipment is not initialized to attack, the safety of the service function of the equipment can be improved, and the risk of attack is reduced.
Optionally, after step S42, the method further includes:
s43: and judging whether the access password input prompt information sent by the Internet of things platform is received.
If the access password input prompt information is received, the following step S44 is performed, otherwise, the step S45 is performed.
S44: and prompting the user to input an access password of the Internet of things equipment to be accessed so as to send the access password to the Internet of things platform for setting the access password of the Internet of things equipment to be accessed.
S45: and connecting a business module of the Internet of things equipment and executing business operation.
Specifically, in an application example, when the internet of things device to be accessed supports the setting of the access password, the internet of things platform sends the access password input prompt information to the client, so as to prompt the user to set the access password of the internet of things device. After receiving the prompt message, the client prompts the user to input the access password of the to-be-accessed Internet of things device, so that the access password is sent to the Internet of things platform to set the access password of the to-be-accessed Internet of things device. The client can prompt the user to input the access password in various forms such as voice, characters and the like, and the user can input the access password in the modes such as voice, characters, touch and the like.
When the to-be-accessed Internet of things equipment does not support the access password setting, the Internet of things platform can directly initialize the Internet of things equipment, the service function of the Internet of things equipment is started, and the client can be directly connected with the service module of the Internet of things equipment to execute service operation.
As shown in fig. 9, in an embodiment of an internet of things platform device according to the present application, an internet of things platform device 60 includes: a communication circuit 601 and a processor 602 connected to each other.
The communication circuit 601 is configured to receive an inquiry request for inquiring an initialization state of an internet of things device to be accessed, where the inquiry request includes an identifier of the internet of things device to be accessed.
The processor 602 is configured to execute instructions to implement the method as provided in any one of the first to third embodiments of a device initialization method of the present application or a non-conflicting combination thereof.
In this embodiment, the internet of things platform device 60 may be a computer, a server, or a computer cluster and a server cluster. The internet of things platform device 60 may further include a memory 603 and a display 604, etc.
As shown in fig. 10, in an embodiment of an internet of things device according to the present application, an internet of things device 70 includes: a communication circuit 701 and a processor 702 connected to each other.
The communication circuit 701 is used for communicating with an internet of things platform.
The processor 702 is configured to execute instructions to implement a method as provided in the fourth embodiment of a device initialization method of the present application.
In this embodiment, the internet of things device 70 may be an IPC, an NVR (Network Video Recorder), an IoT gateway, or the like. The internet of things device 70 may further include a memory 703 and a display 704.
As shown in fig. 11, in an embodiment of the smart device of the present application, the smart device 80 includes: the identification device 801, the communication circuit 802 and the processor 803, and the identification device 801 and the communication circuit 802 are respectively connected with the processor 803.
The identification device 801 may be a camera, an RF device, or other devices capable of identifying device codes such as bar codes or two-dimensional codes, and is configured to obtain an identifier and a feature code of the internet of things device to be accessed.
The communication circuit 802 is configured to communicate with an internet of things platform.
The processor 803 is configured to execute instructions to implement a method as provided in the fifth embodiment of the device initialization method of the present application.
In this embodiment, the smart device 80 may be a smart phone, a computer, a tablet, or the like having an internet of things device client. The smart device 80 may also include a memory 804 and a display 805, among other things.
As shown in fig. 12, in an embodiment of the internet of things system of the present application, an internet of things system 90 includes: an internet of things platform device 901, an internet of things device 902, and an intelligent device 903. The internet of things device 902 and the intelligent device 903 are connected to the internet of things platform device 901 respectively, so that initialization of the internet of things device 902 is completed through the internet of things platform device 901.
The internet of things platform device 901 can refer to the internet of things platform device provided in the embodiment of the application, the internet of things device 902 can refer to the internet of things device provided in the embodiment of the application, and the intelligent device 903 can refer to the intelligent device provided in the embodiment of the application.
In this embodiment, the internet of things system 90 may include a plurality of smart devices 903 and a plurality of internet of things devices 902.
As shown in fig. 13, in an embodiment of an apparatus with storage function of the present application, a program instruction 110 is stored in the apparatus with storage function 100, and the program instruction 110 is used for execution to implement the method provided in any one of the first to fifth embodiments of an apparatus initialization method of the present application.
In this embodiment, the apparatus 100 with a storage function may be a medium that can store program instructions, such as a usb disk, a removable hard disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk, or an optical disk, or may also be a server, a computer, or the like that stores the program instructions, where the server may send the stored program instructions to other devices for operation, or may self-operate the stored program instructions.
In one embodiment, the apparatus 100 with a storage function may be the memories 603, 703 or 804 shown in FIGS. 9-11.
In the several embodiments provided in the present application, it should be understood that the disclosed method and apparatus may be implemented in other ways. For example, the above-described apparatus embodiments are merely illustrative, and for example, a division of a module or a unit is merely a logical division, and an actual implementation may have another division, for example, a plurality of units or components may be combined or integrated into another system, or some features may be omitted, or not executed. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be an indirect coupling or communication connection through some interfaces, devices or units, and may be in an electrical, mechanical or other form.
Units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the embodiment.
In addition, functional units in the embodiments of the present application may be integrated into one processing unit, or each unit may exist alone physically, or two or more units are integrated into one unit. The integrated unit can be realized in a form of hardware, and can also be realized in a form of a software functional unit.
The integrated unit, if implemented in the form of a software functional unit and sold or used as a stand-alone product, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present application may be substantially implemented or contributed to by the prior art, or all or part of the technical solution may be embodied in a software product, which is stored in a storage medium and includes instructions for causing a computer device (which may be a personal computer, a server, a network device, or the like) or a processor (processor) to execute all or part of the steps of the method according to the embodiments of the present application. The aforementioned processor may also be referred to as a CPU (Central Processing Unit). The processor may be an integrated circuit chip having signal processing capabilities. The processor may also be a general purpose processor, a Digital Signal Processor (DSP), an Application Specific Integrated Circuit (ASIC), an off-the-shelf programmable gate array (FPGA) or other programmable logic device, discrete gate or transistor logic, discrete hardware components. A general purpose processor may be a microprocessor or the processor may be any conventional processor or the like. The foregoing storage medium includes: a U-disk, a removable hard disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk or an optical disk, and other various media capable of storing program codes.
The above description is only for the purpose of illustrating embodiments of the present application and is not intended to limit the scope of the present application, and all modifications of equivalent structures and equivalent processes, which are made by the contents of the specification and the drawings of the present application or are directly or indirectly applied to other related technical fields, are also included in the scope of the present application.
Claims (14)
1. A method for initializing a device, comprising:
the method comprises the steps that an Internet of things platform receives a query request for querying the initialization state of the Internet of things equipment to be accessed, wherein the query request comprises an identifier of the Internet of things equipment to be accessed;
responding to the query request, and querying the initialization state of the Internet of things equipment matched with the identification;
if the inquired initialization state of the Internet of things equipment matched with the identifier is not initialized, initializing the Internet of things equipment to start a service function of the Internet of things equipment;
the query request further comprises a feature code of the Internet of things device to be accessed; the initializing the internet of things device to start the service function of the internet of things device includes:
judging whether the feature code of the to-be-accessed Internet of things equipment is matched with the feature code corresponding to the identifier stored by the Internet of things platform or not, wherein the step of calculating the corresponding equipment feature code abstract by using the feature code of the to-be-accessed Internet of things equipment comprises the steps of comparing the equipment feature code abstract with the feature code abstract corresponding to the identifier stored by the Internet of things platform;
if the matching is successful, starting a service module of the Internet of things equipment;
or, the initializing the internet of things device to start a service function of the internet of things device includes:
the query request comprises the equipment feature code abstract, and the equipment feature code abstract is compared with a feature code abstract corresponding to the identifier stored by the Internet of things platform;
and if the matching is successful, starting a service module of the Internet of things equipment.
2. The method of claim 1, wherein the determining whether the feature code of the to-be-accessed internet-of-things device matches the feature code corresponding to the identifier stored by the internet-of-things platform comprises:
calculating a corresponding equipment feature code abstract by using the feature code of the Internet of things equipment to be accessed;
comparing the equipment feature code abstract with a feature code abstract corresponding to the identifier stored by the Internet of things platform;
and if the two are consistent, judging that the feature code of the to-be-accessed Internet of things equipment is matched with the feature code corresponding to the identifier stored by the Internet of things platform.
3. The method of claim 1, wherein before the initiating the service module of the internet of things device, the method further comprises:
judging whether the Internet of things equipment supports access password setting or not;
and if so, acquiring an access password sent by the client, and sending the access password to the Internet of things equipment for storage so as to carry out password verification during subsequent access.
4. The method of claim 3, wherein the obtaining the access password sent by the client and sending the access password to the Internet of things device for storage, and performing password verification for subsequent access comprises:
receiving an access password input by a user through the client;
judging whether the access password meets the security requirement;
if the access password is in accordance with the password, the access password is sent to the Internet of things equipment for storage, and password verification is carried out in the subsequent access process;
otherwise, sending a setting failure message to the client to prompt the user to re-input the access password meeting the security requirement.
5. The method of claim 3, wherein the obtaining the access password sent by the client and sending the access password to the Internet of things device for storage, and performing password verification for subsequent access comprises:
acquiring the feature code of the equipment of the Internet of things to be accessed;
judging whether the feature code meets the safety requirement or not;
and if so, taking the feature code as the access password, and sending the access password to the Internet of things equipment for storage so as to carry out password verification during subsequent access.
6. A method for initializing a device, comprising:
judging whether an initialization request sent by an Internet of things platform is received;
if the initialization request is received, starting a service function of the Internet of things equipment;
when the Internet of things equipment is not initialized, the service function of the Internet of things equipment is not started;
the initialization request is sent when the Internet of things platform responds to a query request comprising an identifier of the Internet of things equipment to be accessed and a feature code of the Internet of things equipment to be accessed, and queries the Internet of things equipment matched with the identifier when the Internet of things equipment is not initialized; the initialization request is used for initializing the Internet of things equipment;
the initializing the internet of things device includes:
judging whether the feature code of the Internet of things equipment to be accessed is matched with the feature code corresponding to the identifier stored by the Internet of things platform, if so, starting the service module of the Internet of things equipment, and the method comprises the following steps: calculating a corresponding equipment feature code abstract by using a feature code of the Internet of things equipment to be accessed, and comparing the equipment feature code abstract with a feature code abstract corresponding to the identifier stored by the Internet of things platform;
or, the initializing the internet of things device includes:
the query request comprises the equipment feature code abstract, and the equipment feature code abstract is compared with a feature code abstract corresponding to the identifier stored by the Internet of things platform;
and if the matching is successful, starting a service module of the Internet of things equipment.
7. The method of claim 6, wherein before determining whether the initialization request sent by the platform of the internet of things is received, the method comprises:
the Internet of things equipment is registered and logged in the Internet of things platform;
and reporting the equipment feature code abstract of the Internet of things equipment to the Internet of things platform, and keeping long connection with the Internet of things platform.
8. The method of claim 6, wherein before the starting the service function of the internet of things device, the method further comprises:
and receiving and storing the access password sent by the Internet of things platform.
9. A method for initializing a device, comprising:
the method comprises the steps that a client side obtains an identification and a feature code of the Internet of things equipment to be accessed and generates a query request for querying the initialization state of the Internet of things equipment to be accessed; the query request comprises the identification of the equipment to be accessed and the feature code of the equipment to be accessed;
sending the query request to an Internet of things platform, so that the Internet of things platform initializes the Internet of things equipment to be accessed when querying that the Internet of things equipment to be accessed is not initialized, and starting a service function of the Internet of things equipment to be accessed;
the initializing the to-be-accessed internet of things device to start the service function of the to-be-accessed internet of things device includes:
judging whether the feature code of the to-be-accessed Internet of things equipment is matched with the feature code corresponding to the identifier stored by the Internet of things platform or not, and the method comprises the following steps: calculating a corresponding equipment feature code abstract by using a feature code of the Internet of things equipment to be accessed; comparing the equipment feature code abstract with a feature code abstract corresponding to the identifier stored by the Internet of things platform; if the matching is successful, starting a service module of the Internet of things equipment;
or, the initializing the to-be-accessed internet of things device to start a service function of the to-be-accessed internet of things device includes:
the query request comprises the equipment feature code abstract, and the equipment feature code abstract is compared with a feature code abstract corresponding to the identifier stored by the Internet of things platform;
and if the matching is successful, starting a service module of the Internet of things equipment.
10. The method of claim 9, wherein after sending the query request to the internet of things platform, the method comprises:
judging whether access password input prompt information sent by the Internet of things platform is received or not;
and if the access password input prompt information is received, prompting a user to input the access password of the to-be-accessed Internet of things equipment so as to send the access password to an Internet of things platform for setting the access password of the to-be-accessed Internet of things equipment.
11. An internet of things platform device, comprising: a communication circuit and a processor connected to each other;
the communication circuit is used for receiving a query request for querying the initialization state of the to-be-accessed Internet of things device, wherein the query request comprises an identifier of the to-be-accessed Internet of things device;
the processor is configured to execute instructions to implement the method of any one of claims 1-5.
12. An internet of things device, comprising: a communication circuit and a processor connected to each other;
the communication circuit is used for communicating with the Internet of things platform;
the processor is configured to execute instructions to implement the method of any one of claims 6-8.
13. A smart device, comprising: an identification device, a communication circuit and a processor; the identification device and the communication circuit are respectively connected with the processor;
the identification device is used for acquiring the identification and the feature code of the Internet of things equipment to be accessed;
the communication circuit is used for communicating with the Internet of things platform;
the processor is configured to execute instructions to implement the method of any of claims 9-10.
14. An internet of things system, comprising: the internet of things platform device of claim 11, the internet of things device of claim 12, and the smart device of claim 13;
the Internet of things equipment and the intelligent equipment are respectively connected with the Internet of things platform equipment so as to complete initialization of the Internet of things equipment through the Internet of things platform equipment.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910375971.7A CN110233825B (en) | 2019-05-07 | 2019-05-07 | Equipment initial method, Internet of things equipment, system, platform equipment and intelligent equipment |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910375971.7A CN110233825B (en) | 2019-05-07 | 2019-05-07 | Equipment initial method, Internet of things equipment, system, platform equipment and intelligent equipment |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN110233825A CN110233825A (en) | 2019-09-13 |
| CN110233825B true CN110233825B (en) | 2021-10-15 |
Family
ID=67860434
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201910375971.7A Active CN110233825B (en) | 2019-05-07 | 2019-05-07 | Equipment initial method, Internet of things equipment, system, platform equipment and intelligent equipment |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN110233825B (en) |
Families Citing this family (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113839967B (en) * | 2021-11-26 | 2022-02-15 | 深圳市聚慧合创信息技术有限公司 | Internet of things equipment fraud prevention and control system based on big data technology |
| CN115065712B (en) * | 2022-08-16 | 2022-11-04 | 飞天诚信科技股份有限公司 | Method and system for sensing and controlling shared equipment |
Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101291246A (en) * | 2007-04-20 | 2008-10-22 | 研华股份有限公司 | Control method for information service system of terminal equipment |
| CN104901957A (en) * | 2015-05-21 | 2015-09-09 | 北京智付融汇科技有限公司 | Method and device for initializing electronic token equipment |
| CN104994073A (en) * | 2015-05-29 | 2015-10-21 | 北京奇虎科技有限公司 | Cell phone terminal, server and account-device linking control and executing method |
| CN105629273A (en) * | 2016-01-05 | 2016-06-01 | 深圳市伊爱高新技术开发有限公司 | GNSS vehicle-mounted terminal initialization method and system |
| CN105871857A (en) * | 2016-04-13 | 2016-08-17 | 北京怡和嘉业医疗科技有限公司 | Authentication method, authentication device, authentication system and treatment equipment |
| CN105897784A (en) * | 2016-07-01 | 2016-08-24 | 三星电子（中国）研发中心 | Internet of things terminal equipment encryption communication method and device |
| CN106506636A (en) * | 2016-11-04 | 2017-03-15 | 武汉噢易云计算股份有限公司 | A kind of cloud platform cluster method and system based on OpenStack |
| CN107104958A (en) * | 2017-04-14 | 2017-08-29 | 深圳市先河系统技术有限公司 | Manage the method, private clound and public cloud equipment and storage device of private clound equipment |
| CN108322536A (en) * | 2018-01-31 | 2018-07-24 | 广州中大数码科技有限公司 | A kind of Internet of Things service platform based on M2M terminals |
Family Cites Families (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US6304973B1 (en) * | 1998-08-06 | 2001-10-16 | Cryptek Secure Communications, Llc | Multi-level security network system |
| US20110154496A1 (en) * | 2009-12-23 | 2011-06-23 | Chun Hsiang Cheng | Removable Apparatus and Method for Verifying an Executable File in a Computing Apparatus and Computer-Readable Medium Thereof |
-
2019
- 2019-05-07 CN CN201910375971.7A patent/CN110233825B/en active Active
Patent Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101291246A (en) * | 2007-04-20 | 2008-10-22 | 研华股份有限公司 | Control method for information service system of terminal equipment |
| CN104901957A (en) * | 2015-05-21 | 2015-09-09 | 北京智付融汇科技有限公司 | Method and device for initializing electronic token equipment |
| CN104994073A (en) * | 2015-05-29 | 2015-10-21 | 北京奇虎科技有限公司 | Cell phone terminal, server and account-device linking control and executing method |
| CN105629273A (en) * | 2016-01-05 | 2016-06-01 | 深圳市伊爱高新技术开发有限公司 | GNSS vehicle-mounted terminal initialization method and system |
| CN105871857A (en) * | 2016-04-13 | 2016-08-17 | 北京怡和嘉业医疗科技有限公司 | Authentication method, authentication device, authentication system and treatment equipment |
| CN105897784A (en) * | 2016-07-01 | 2016-08-24 | 三星电子（中国）研发中心 | Internet of things terminal equipment encryption communication method and device |
| CN106506636A (en) * | 2016-11-04 | 2017-03-15 | 武汉噢易云计算股份有限公司 | A kind of cloud platform cluster method and system based on OpenStack |
| CN107104958A (en) * | 2017-04-14 | 2017-08-29 | 深圳市先河系统技术有限公司 | Manage the method, private clound and public cloud equipment and storage device of private clound equipment |
| CN108322536A (en) * | 2018-01-31 | 2018-07-24 | 广州中大数码科技有限公司 | A kind of Internet of Things service platform based on M2M terminals |
Also Published As
| Publication number | Publication date |
|---|---|
| CN110233825A (en) | 2019-09-13 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN106330850B (en) | Security verification method based on biological characteristics, client and server | |
| US9887988B2 (en) | Login information transmission method, code scanning method and apparatus, and server | |
| KR102511030B1 (en) | Verification information update method and device | |
| US10445487B2 (en) | Methods and apparatus for authentication of joint account login | |
| US10419431B2 (en) | Preventing cross-site request forgery using environment fingerprints of a client device | |
| CN108632253B (en) | Client data security access method and device based on mobile terminal | |
| US20160269181A1 (en) | Method and Device for Information System Access Authentication | |
| KR101341256B1 (en) | Apparatus and method for strengthening security connection of network | |
| CN107196917B (en) | Service response method and middleware thereof | |
| US9913315B2 (en) | Method and device for connection management | |
| CN111131300B (en) | Communication method, terminal and server | |
| WO2017185577A1 (en) | Esim card data sharing method, and related device and system | |
| CN106686754B (en) | Data interaction method and data interaction system | |
| CN110233825B (en) | Equipment initial method, Internet of things equipment, system, platform equipment and intelligent equipment | |
| US20220159462A1 (en) | Router, network connection method and mobile terminal | |
| CN113194353A (en) | Wireless screen projection method, device, medium and product | |
| US9235696B1 (en) | User authentication using a portable mobile device | |
| CN107688480B (en) | Information authentication method and device based on virtual reality scene and storage medium | |
| CN111541649A (en) | Password resetting method, device, server and storage medium | |
| KR101553482B1 (en) | Authentication System For Password And Method | |
| CN106685914B (en) | Information verification method, server and client | |
| JP2001357015A (en) | Connection authentication system | |
| CN115550002B (en) | TEE-based intelligent home remote control method and related device | |
| CN104331649A (en) | Identity recognition system and method based on network connection | |
| CN116232700A (en) | Login authentication method, login authentication device, computer equipment and storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |