Method and system for secure registration and access of Internet of Things terminal

Abstract

The invention relates to the field of secret communication, and discloses an Internet of Things terminal security registration and access method and system. The method comprises the following steps: the Internet of Things terminal performs session key negotiation with a second certificate authentication mechanism server; the second certificate authentication mechanism server verifies the pre-registered certificate of the Internet of Things terminal by using the first root certificate; a session key is obtained after the verification is passed; the Internet of Things terminal sends an acquisition request of a second root certificate and a certificate logout list to a second certificate authentication mechanism server; the second certificate authentication mechanism server sends a second root certificate to the Internet of Things terminal; the Internet of Things terminal generates a digital certificate registration request instruction; the Internet of Things terminal sends the digital certificate registration request instruction to a second certificate authentication mechanism server; and after receiving the registration request instruction, the second certificate authentication mechanism server generates a digital certificate and feeds the digital certificate back to the Internet of Things terminal. And automatic and safe registration and access processes are realized through a simplified certificate coding mode with a compact certificate structure.

Description

technical field [0001] The present invention relates to the field of secure communication, in particular to a method and system for secure registration and access of Internet of Things terminals. Background technique [0002] The statements in this section merely provide background related to the present disclosure and do not necessarily constitute prior art. [0003] The Internet of Things is an information carrier based on the Internet, traditional telecommunication networks, etc. It enables all common physical objects that can be independently addressed to form an interconnected network. With the rapid development of information technology and various sensors, microprocessor devices have the ability to detect their own state, environmental parameters, network transmission and data exchange, making people enter the era of Internet of Things. With the rapid development of the Internet of Things, the application of the Internet of Things in life is becoming more and more ex...

AI Technical Summary

Problems solved by technology

[0005] (1) The storage space of IoT terminal entities is limited. At present, the size of a single digital certificate file is about 2~4KB, which is not conducive to the storage of IoT terminal entities

[0006] (2) The computing power of the terminal entity of the Internet of Things is limited, and the efficiency of parsing digital certificates becomes the key to whether it is applicable to the Internet of Things

The current recursive definition and ASN.1 encoding and decoding methods used in digital certificates lead to cumbersome structures and complex parsing processes, especially for large certificate chains, which also have problems in non-binding protocols such as EAP-TLS, unless the number of bytes sent by the server Less than three times the number of bytes received before validating the client address, otherwise the latency would increase significantly

[0007] (3) For some battery-powered IoT terminal devices, encoding and decoding digital certificates will lead to excessive power consumption, which is not suitable for battery-powered devices;

[0008] (4) Internet of Things applications generally have a large number of terminal devices, and traditional manual offline registration, issuance and import of certificates has a large workload and cannot guarantee the accuracy and security of human operations, and cannot meet the needs of Internet of Things application scenarios;

[0009] (5) For the transmission confidentiality of IoT communication data, the traditional TLS protocol adopts the TCP protocol, the negotiation process is cumbersome, and the amount of negotiation data is large, which cannot meet the requirements of the restricted environment and network of the IoT

Images