The invention belongs to the technical field of passwords, and discloses an
Internet of Things security system and communication method based on a
password technology, and the method comprises the steps: registering equipment identifier and an
application identifier, and generating a protection secret key, a sign-in secret key, a data secret key, an instruction secret key, a half secret key, a CPKsecret key and an SM9 secret key; encrypting all the generated secret keys and then safely storing the secret keys; sending a request carrying a terminal identifier to the
cipher machine, and performing data
encryption transmission after the request is authenticated and negotiated by the registration equipment and the
cipher machine; and through data
encryption transmission, enabling the
cipher machine to decrypt the encrypted data after receiving the encrypted data. A symmetric
algorithm or an identification cryptographic
algorithm is used, a series of
software and hardware products are combined, the safety of
the Internet of Things is integrally achieved, and the functions of
secure channel, secure storage, data
encryption, identity
authentication,
digital signature and the like are rapidly achieved. According to the invention, the data in
the Internet of Things is prevented from being stolen and tampered, the identity is credible, and the data can be transmitted secretly.