Encryption method for communication between IoT terminal and cloud

Abstract

The present invention discloses an encryption method used for communication between an Internet of Things terminal and a cloud end. The method comprises a first step that fixed-byte-number secret keys composed of an Internet of Things terminal ID, an AES secret key and an Auth code are pre-stored at the Internet of Things terminal and the cloud end at the same time; a second step that every time connection is established, the cloud end generates a new AES code at random, the Internet of Things terminal and the cloud end at carry out bidirectional authentication by comparing the new AES code and the pre-stored AES secret key, and after the authentication succeeds, the Internet of Things terminal updates the AES secret key into a new AES code; and a third step that the Internet of Things terminal and the cloud end carry out data communication after the connection succeeds, and the Internet of Things terminal sends KeepAlive packages to the cloud end at fixed time, thus to maintain that the connection is available. By presetting the fixed-byte-number secret key data at the Internet of Things terminal and the cloud end, reliable bidirectional authentication is realized, consumption of computing and storing resources is greatly reduced, and safety requirements of lightweight class Internets of Things are met.

Description

technical field [0001] The invention relates to a communication processing method, in particular to an encryption method for communication between an Internet of Things terminal and a cloud, and a lightweight Internet of Things security solution with two-way authentication. Background technique [0002] The current development of the Internet of Things has gradually entered the fast lane. The characteristics of Internet of Things products include: online at any time, remote control. As a result, IoT products must be able to connect to the cloud through the Internet, upload and receive data and related control requests anytime, anywhere, and any device connected to the Internet must take into account the possibility of hacker attacks, thus generating encryption requirements. Encryption requirements must be met There are two solutions: [0003] Simple account password encryption: It can be implemented on an MCU with limited resources, but it cannot complete two-way authentica...

AI Technical Summary

Problems solved by technology

[0006] 1) There is only one-way authentication in the cloud, and there is no two-way authentication between the terminal and the cloud. Once a hacker steals cloud data, it can simulate server data reverse attack and control IoT terminal equipment

[0007] 2) Long-term online IoT products require the terminal to maintain data communication with the cloud at any time. Hackers can directly capture the communication data between the terminal and the cloud, and replay attacks on either the IoT terminal or the cloud, thereby paralyzing the IoT terminal or the cloud.

Images