CN112351005B - Internet of things communication method, device, readable storage medium and computer equipment - Google Patents

Abstract

An Internet of things communication method, an Internet of things communication device, a readable storage medium and computer equipment are provided, and the method comprises the following steps: acquiring risk perception data of the Internet of things equipment, and respectively calculating the grading values of an attack factor index and a threat factor index according to the risk perception data; determining the trust level of the Internet of things equipment according to the score value of the attack factor index and the score value of the threat factor index; and when the trust level is higher than the level threshold, sending connection establishment information to a service system so that the service system establishes connection with the Internet of things equipment. The invention ensures the safety of the data of the service system by detecting the trust of the equipment, thereby preventing malicious equipment from entering the service system and preventing data leakage.

Description

Internet of things communication method, device, readable storage medium and computer equipment

technical field

The present invention relates to the field of communication technology, in particular to an Internet of Things communication method, device, readable storage medium and computer equipment.

Background technique

In 2020, the pace of people's online life will gradually accelerate, and the form of remote collaborative office will gradually rise. The implementation of remote office has played a positive role in the resumption of work and economic revival of enterprises to a certain extent, but at the same time, the intranet of enterprises is also facing new security threats. The network security architecture composed of firewalls and firewalls has been difficult to meet the external network access needs of a large number of users.

In the traditional network security architecture, the client device establishes a connection with the enterprise network after simple identity authentication. Once the client device is connected to the enterprise network, it can freely access or leak data beyond its authority. cause serious safety hazards. In addition, the security boundaries of the Internet of Things of enterprises are also blurring, and enterprises gradually increase their business in big data and cloud computing, which also increases the attack surface to a certain extent, which is difficult to resist with traditional security architecture.

Contents of the invention

In view of the above situation, it is necessary to provide an Internet of Things communication method, device, readable storage medium and computer equipment for the problem of poor network security in the prior art.

A communication method for the Internet of Things, comprising:

Obtaining risk perception data of IoT devices, and calculating scoring values of attack factor indicators and threat factor indicators respectively according to the risk perception data;

determining the trust level of the IoT device according to the score value of the attack factor indicator and the score value of the threat factor indicator;

When the trust level is higher than the level threshold, send connection establishment information to the business system, so that the business system can establish a connection with the IoT device.

Further, the above-mentioned communication method for the Internet of Things, wherein the risk perception data includes security warnings and vulnerabilities, and the step of calculating the scoring values of the attack factor indicators and the threat factor indicators respectively according to the risk perception data includes:

Obtain the current alert level, attack times and attack interval time in each security alert;

determining a corresponding first base number according to the current warning level, determining a corresponding first coefficient according to the number of attacks, and determining a second coefficient according to the attack interval time;

calculating the score of each security warning according to the first base, the first coefficient and the second coefficient, and calculating the score value of the attack factor index of the IoT device according to the scoring of each security warning;

Obtain the level of each vulnerability, and determine the corresponding second base number according to the level of the vulnerability;

The score value of the threat factor indicator is calculated according to the second base number corresponding to each vulnerability level.

Further, the above-mentioned communication method for the Internet of Things, wherein, the calculation formula of the score value of the attack factor index is:

；

;

，m_i为第一基数，k₁和k₂分别为第一系数和第二系 数，a为攻击因素指标的评分值的上限值。 in,

, m _i is the first base number, k ₁ and k ₂ are the first coefficient and the second coefficient respectively, and a is the upper limit value of the scoring value of the attack factor index.

Further, the above-mentioned communication method for the Internet of Things, wherein, the calculation formula of the scoring value of the threat factor indicator is:

；

;

为第二基数，b为威胁因素指标的评分值的上限值。 in,

is the second base, and b is the upper limit of the score value of the threat factor indicator.

Further, the above-mentioned Internet of Things communication method, wherein, after the step of sending the connection establishment information to the business system, it further includes:

When the trust level is a low trust level, sending first information to the service system, so that the service system refuses the Internet of Things device to access any data;

When the trust level is a medium trust level, sending second information to the business system, so that the business system authorizes the Internet of Things device to access public data;

When the trust level is a high trust level, sending third information to the business system, so that the business system authorizes the IoT device to access all data of the business system.

Further, the above-mentioned Internet of Things communication method, wherein, after the step of sending the connection establishment information to the service system so that the service system establishes a connection with the Internet of Things device, the Internet of Things communication method further includes :

Obtaining the risk perception data of the IoT device at a preset time interval;

calculating the current trust level of the IoT device according to the currently acquired risk perception data;

When the current trust level is higher or lower than the trust level calculated last time, sending information corresponding to the current trust level to the access gateway.

Further, the above-mentioned Internet of Things communication method, wherein, before the step of obtaining the risk perception data of the Internet of Things device, it also includes:

Obtaining the security factor information of the IoT device, the security factor information including the IP address, MAC address, operating system version and patch information of the IoT device;

calculating the security score of the IoT device according to the security factor information;

When the security score is higher than the threshold score, sending connection establishment information to the access gateway, so that the access gateway establishes a connection with the IoT device.

Further, the above-mentioned Internet of Things communication method, wherein before the step of sending the connection establishment information to the access gateway, so that the access gateway establishes a connection with the Internet of Things device, further includes:

Obtain the identity information of the user sent by the IoT device;

Verify the identity information, and determine the user's business authority information;

The step of sending the connection establishment information to the access gateway, so that the access gateway establishes a connection with the IoT device includes:

Sending connection establishment information to the access gateway, so that the access gateway establishes a connection between the Internet of Things device and the network area corresponding to the service authority information.

The embodiment of the present invention also provides an Internet of Things communication device, including:

The first calculation module is used to obtain risk perception data of the Internet of Things device, and calculate the score value of the attack factor index and the threat factor index according to the risk perception data;

A determining module, configured to determine the trust level of the IoT device according to the scoring values of the attack factor indicators and the threat factor indicators;

A first sending module, configured to send connection establishment information to a business system when the trust level is higher than a level threshold, so that the business system can establish a connection with the IoT device.

Further, in the aforementioned networked communication device, wherein the risk perception data includes security warnings and vulnerabilities, and the first computing module includes:

The first calculation submodule is used for:

Obtain the current alert level, attack times and attack interval time in each security alert;

determining a corresponding first base number according to the current warning level, determining a corresponding first coefficient according to the number of attacks, and determining a second coefficient according to the attack interval time;

calculating the score of each security warning according to the first base, the first coefficient and the second coefficient, and calculating the score value of the attack factor index of the IoT device according to the scoring of each security warning;

The second calculation submodule is used for:

Obtain the level of each vulnerability, and determine the corresponding second base number according to the level of the vulnerability;

The score value of the threat factor indicator is calculated according to the second base number corresponding to each vulnerability level.

Further, the above-mentioned networked communication device, wherein, after the step of sending the connection establishment information to the service system, the first sending module is further used for:

When the trust level is a low trust level, sending first information to the service system, so that the service system refuses the Internet of Things device to access any data;

When the trust level is a medium trust level, sending second information to the business system, so that the business system authorizes the Internet of Things device to access public data;

When the trust level is a high trust level, sending third information to the business system, so that the business system authorizes the IoT device to access all data of the business system.

Further, the above-mentioned networking communication device also includes:

The second obtaining module is used to obtain the risk perception data of the IoT device at a preset time interval;

A second calculation module, configured to calculate the current trust level of the IoT device according to the currently acquired risk perception data;

The second sending module is configured to send information corresponding to the current trust level to the access gateway when the current trust level is higher or lower than the trust level calculated last time.

Further, the above-mentioned networking communication device also includes:

A third acquisition module, configured to acquire security factor information of the IoT device, the security factor information including the IP address, MAC address, operating system version and patch information of the IoT device;

A third calculation module, configured to calculate the security score of the IoT device according to the security factor information;

A third sending module, configured to send connection establishment information to an access gateway when the security score is higher than a threshold score, so that the access gateway establishes a connection with the IoT device.

Further, the above networked communication device, wherein the third obtaining module is further configured to obtain the identity information of the user sent by the IoT device, verify the identity information, and determine the service authority information of the user;

The third sending module is used for:

Sending connection establishment information to the access gateway, so that the access gateway establishes a connection between the Internet of Things device and the network area corresponding to the service authority information.

An embodiment of the present invention also provides a readable storage medium, on which a program is stored, and when the program is executed by a processor, any one of the above-mentioned methods is implemented.

An embodiment of the present invention also provides a computer device, including a memory, a processor, and a program stored in the memory and operable on the processor. When the processor executes the program, the method described in any one of the above is implemented. .

In the present invention, the connection between the business system and the Internet of Things device is constructed through a trust agent, and the trust degree level of the device is determined by obtaining the risk perception data of the Internet of Things device. When the trust degree level is higher than the level threshold, the connection establishment information is sent to the business system, so that the business system can establish a connection with the device. Through the trust detection of equipment, the security of business system data is ensured, thereby preventing malicious equipment from entering the business system and preventing data leakage.

Description of drawings

The drawings described here are used to provide a further understanding of the application and constitute a part of the application. The schematic embodiments and descriptions of the application are used to explain the application and do not constitute an improper limitation to the application. In the attached picture:

FIG. 1 is a flowchart of a communication method for the Internet of Things in a first embodiment of the present invention;

FIG. 2 is a flowchart of a communication method for the Internet of Things in a second embodiment of the present invention;

FIG. 3 is a flowchart of a communication method for the Internet of Things in a third embodiment of the present invention;

Fig. 4 is a structural block diagram of an IoT communication device in a fourth embodiment of the present invention.

Detailed ways

Embodiments of the present invention are described in detail below, examples of which are shown in the drawings, wherein the same or similar reference numerals designate the same or similar elements or elements having the same or similar functions throughout. The embodiments described below by referring to the figures are exemplary only for explaining the present invention and should not be construed as limiting the present invention.

These and other aspects of embodiments of the invention will become apparent with reference to the following description and drawings. In these descriptions and drawings, some specific implementations of the embodiments of the present invention are specifically disclosed to represent some ways of implementing the principles of the embodiments of the present invention, but it should be understood that the scope of the embodiments of the present invention is not limited by this limit. On the contrary, the embodiments of the present invention include all changes, modifications and equivalents coming within the spirit and scope of the appended claims.

Please refer to FIG. 1 , which is a communication method for the Internet of Things in the first embodiment of the present invention, including steps S11-S13.

Step S11 , acquiring risk perception data of IoT devices, and calculating score values of attack factor indicators and threat factor indicators respectively according to the risk perception data.

The architecture of the Internet of Things communication in this embodiment is different from the traditional architecture. In this embodiment, the connection between the network and the Internet of Things devices needs to be established through a trusted proxy. The network is an enterprise network, or another network that the user wants to access remotely. The trust agent is, for example, a server. In this embodiment, the server monitors hidden dangers in the entire network architecture in real time through a situation awareness system, and monitors behavioral risks, environmental risks, and network risks of IoT devices.

When an IoT device requests to access a business system in a network architecture, the server obtains risk perception data of the IoT device. Specifically, the risk perception data includes risk details, behavior portraits, and vulnerabilities of IoT devices. The risk details include attack sources, security alerts, etc., the behavior portraits include access sources, access traffic, etc., and the vulnerabilities include vulnerability names. threat level etc. By monitoring the risk perception data, the risk assessment of the connection between the IoT device and the business system can be performed.

The trust level calculation of IoT devices mainly includes two aspects: attack factor indicators and threat factor indicators. The attack factor is the attacker or the victim detected by the situational awareness system is the security alarm of the device IP address or MAC address, and the threat factor is the vulnerability information monitored by the situational awareness system.

Preferably, the scoring value calculation steps of the attack factor index are as follows:

Obtain the current alert level, attack times and attack interval time in each security alert;

determining a corresponding first base number according to the current warning level, determining a corresponding first coefficient according to the number of attacks, and determining a second coefficient according to the attack interval time;

Calculate the score of each security alarm according to the first base number, the first coefficient and the second coefficient, and perform a summation calculation to obtain the score value of the attack factor indicator of the Internet of Things device.

Specifically, the alarm level can be divided into three levels, namely high level, middle level and low level. The alarm level is used as the first base number, for example, the first base number corresponding to the high level is 10, the first base number corresponding to the middle level is 7, and the first base number corresponding to the low level is 4. The number of attacks is the first coefficient, for example, if the number of attacks is 1, the corresponding coefficient is 1, if the number of attacks is 2-5, the coefficient is 1.5, and if the number of attacks is 6 or more, the coefficient is 2. The attack interval is used as the second coefficient, for example, the coefficient corresponding to within one week is 1, the coefficient corresponding to one month is 0.5, and the coefficient corresponding to more than one month is 0.1.

Further, the score value of the attack factor indicator is set with a first upper limit value, the first upper limit value is, for example, 10, and the calculation formula of the score value of the attack factor indicator is:

；

;

，m_i为第一基数，k₁和k₂分别为第一系数和第二系数，

为攻击因素指标的评分值的上限值。 in,

, m _i is the first base, k ₁ and k ₂ are the first coefficient and the second coefficient respectively,

It is the upper limit value of the scoring value of the attack factor index.

The calculation steps of the score value of the threat factor indicator are as follows:

Obtain the level of each vulnerability, and determine the corresponding second base number according to the level of the vulnerability;

The second base numbers corresponding to all the vulnerability levels are summed to obtain the score value of the threat factor index.

The vulnerability level can be set to three levels, for example, each level corresponds to a second base number, for example, the second base number corresponding to the high level is 5, the second base number corresponding to the middle level is 3, and the base number corresponding to the low level is 1.

Further, the scoring value of the threat factor indicator is set with a second upper limit, the second upper limit is, for example, 50, and the calculation formula of the scoring value of the threat factor indicator is:

；

;

为第二基数，b为威胁因素指标的评分值的上限值。 in,

is the second base, and b is the upper limit of the score value of the threat factor indicator.

The basic value of the current trust score of the IoT device is 100, and the final result is calculated according to the attack factor score and the threat factor score:

。

.

Step S12, determining the trust level of the IoT device according to the score value of the attack factor indicator and the score value of the threat factor indicator.

Step S13, when the trust level is higher than the level threshold, send connection establishment information to the business system, so that the business system can establish a connection with the IoT device.

During specific implementation, the trust level of the IoT device can be set to three levels, as shown in Table 1, for example, each trust level corresponds to a scoring range, and the corresponding trust level can be determined according to the trust score of the IoT device.

Table 1

Understandably, the level threshold may be set to a low trust level. When the trust level of the IoT device is higher than the low trust level, the connection establishment information is sent to the business system, so that the business system can establish an encrypted connection with the IoT device.

In this embodiment, the connection between the business system and the IoT device is established through a trust agent, and the trust level of the device is determined by obtaining the risk perception data of the IoT device. When the trust level is higher than the level threshold, the connection establishment is sent. Send information to the business system, so that the business system can establish a connection with the device. Through the trust detection of equipment, the security of business system data is ensured, thereby preventing malicious equipment from entering the business system and preventing data leakage.

Further, in another embodiment of the present invention, the server can also determine the data access authority of the IoT device to the system according to the trust level of the IoT device, and send corresponding information to the access gateway. This data access right includes:

no access;

access only publicly available data within the system;

All data in the system can be accessed.

Specifically, when the trust level of the IoT device is a low trust level, send the first information to the business system, so that the business system refuses the IoT device to access any data; when the trust level of the IoT device is When the trust level is medium, send the second message to the business system so that the business system authorizes the IoT device to only access public data; when the trust level of the IoT device is a high trust level, send the third message to the business system , so that the business system authorizes the IoT device to access all data of the business system.

Furthermore, in order to maintain the security of the network architecture, after the IoT device is connected to the business system, the server can periodically evaluate the trust of the IoT device, and make state adjustments based on the evaluation results to ensure system security. Please refer to FIG. 2 , which is a communication method for the Internet of Things in the second embodiment of the present invention, including steps S21-S23.

Step S21, acquiring the risk perception data of the IoT device at a preset time interval.

Step S22, calculating the current trust level of the IoT device according to the currently acquired risk perception data.

Step S23, when the current trust level is higher or lower than the trust level calculated last time, sending information corresponding to the current trust level to the access gateway.

In this embodiment, dynamic access control is performed according to the trust evaluation result and the service request initiated by the IoT device. When the IoT device is connected to the business system of the enterprise, the trust score of the IoT device is calculated according to a certain periodicity, and the corresponding trust level is given according to the trust score. And make dynamic adjustments according to the trust evaluation results. When the current trust level is higher or lower than the last calculated trust level, send the information corresponding to the current trust level to the access gateway to adjust the business system data of the IoT device access permission. If the trust level is too low, data transmission will not be performed or the connection will be disconnected to ensure system security.

It can be understood that, in other embodiments of the present invention, in order to ensure the security of system data, the trust level can also be determined every time the IoT device accesses the business system. When the trust level of the device is higher than the level threshold , the data can be accessed.

Further, please refer to FIG. 3 , in the third embodiment of the present invention, before the step of acquiring the risk perception data of the IoT device, the IoT communication method further includes steps S31-S33.

Step S31, acquiring security factor information of the IoT device, the security factor information including the IP address, MAC address, operating system version and patch information of the IoT device.

Step S32, calculating the security score of the IoT device according to the security factor information.

When an IoT device requests to access a business system, it first needs to connect to the enterprise network. After the IoT device is connected to the enterprise network, it can request to access the data of the business system in the network.

When the Internet of Things device needs to connect to the enterprise network, it sends a connection request, and when the server obtains the connection request, it sends an instruction to the Internet of Things device, and the Internet of Things device sends security factor information to the server after obtaining the instruction. The security factor information is information carried by the IoT device itself, and is used by the server to identify the security of the IoT device.

After obtaining the security factor information sent by the IoT device, the server extracts data of each security factor from the security factor information. For example, the security factor information includes the IP address, MAC address, operating system version and patch information of the IoT device, from which data of three security factors can be extracted, and the data of the first security factor is the security of the IoT device accessing the network. Level, the data of the second security factor is the system version, and the data of the third security factor is the number of patches. The corresponding scoring value is determined according to the extracted data of each safety factor.

Specifically, the step of calculating the security score of the IoT device according to the security factor information includes:

Determining the security level of the Internet of Things access network according to the IP address and the MAC address of the IoT device, and determining a corresponding score value according to the security level of the access network, to obtain the score value of the first security factor;

Determine the score value corresponding to the operating system version to obtain the score value of the second security factor;

Determine the number of patches of the IoT device according to the patch information, and determine the corresponding score value according to the number of patches, to obtain the score value of the third security factor;

The security score of the IoT device is calculated according to the score values of each security factor.

In this embodiment, according to the IP address and the MAC address, the network connected to the IoT device and the security of the connected network can be determined. The network connected to the IoT device is, for example, a home network, a personal mobile data network, or a network in a public place. After obtaining the IP address and MAC address of the IoT device, the server determines the security level of the IoT device accessing the network. The security level is directly proportional to the score value, and the corresponding score value is determined according to the security level of the access network. For example, the security level of home network and personal mobile data network is higher than that of public place network, and the network security level of different public places can also be set to be different.

The operating system version of the IoT device can be used as one of the security performance indicators of the device. Low-version operating systems often have some vulnerabilities and low security. Therefore, the higher the operating system version, the higher the score value. Specifically, the version of the operating system is proportional to the score value of the security factor. For example, the total score value corresponding to the security factor is 10 points, and the score value of the security factor is the current version of the operating system (for example, the current version is Version 5) is divided by the total number of versions 8, and the resulting value is multiplied by 10 to obtain a value of 6.25, that is, 6.25 is the score value corresponding to the operating version.

The patch information of the IoT device also reflects the security performance of the device to a certain extent. In this embodiment, the score value of the third security factor is determined by the number of patches in the IoT device. Specifically, the number of patches can be set in various ranges, and each range corresponds to a score value of a trust degree.

The trust score of the IoT device is calculated according to the score values of the first security factor, the second security factor and the third security factor. During specific implementation, the sum of the score values of each security factor may be used as the trust score of the IoT device, or the sum of the product scores of each security factor and the corresponding weight may be used as the security score of the IoT device.

Step S33, when the security score is higher than the threshold score, send connection establishment information to the access gateway, so that the access gateway establishes a connection with the IoT device.

The threshold score can be set according to actual needs. When the business system detects that the security score of the IoT device is higher than the threshold, it can determine that the IoT device is in a safe state, and then allow the IoT device to access the enterprise network.

Further, before the step of sending the connection establishment information to the access gateway, so that the access gateway establishes a connection with the IoT device, the step further includes:

Obtain the identity information of the user sent by the IoT device;

Verify the identity information, and determine the user's business authority information;

The step of sending the connection establishment information to the access gateway, so that the access gateway establishes a connection with the IoT device includes:

Sending connection establishment information to the access gateway, so that the access gateway establishes a connection between the Internet of Things device and the network area corresponding to the service authority information.

During specific implementation, the user's identity information may be sent to the server when the IoT device sends a connection request, that is, the connection request information sent by the IoT device includes the user's identity information.

After obtaining the identity information, the server authenticates the user and determines the system access service authority information of the user. After the user authentication is passed, the server executes the step of obtaining the security factor information of the IoT device.

The user identity information is used to identify the identity of the user, and the user identity information includes, for example, a user account, a password, and/or a biometric key. The password can be a fixed password or a dynamic password set by the user, and the biometric key is, for example, the user's facial features, fingerprint features, iris features, and the like.

In this embodiment, the network architecture divides the minimum business authority information by business systems, such as financial data systems, procurement systems, personnel systems, etc., and each business system is connected to a different network area. Different service authority information can access different network areas, that is, users with different service authority information can access different types and numbers of service systems. The IoT device can only access the business system corresponding to its business authority information, and has no access business authority to other business systems, and the corresponding data resources are assigned to the device according to the trust evaluation results.

Please refer to Fig. 4, which is the communication device for the Internet of Things in the fourth embodiment of the present invention, including:

The first computing module 10 is configured to acquire risk perception data of IoT devices, and calculate scoring values of attack factor indicators and threat factor indicators according to the risk perception data;

A determining module 20, configured to determine the trust level of the IoT device according to the score values of the attack factor indicators and the threat factor indicators;

The first sending module 30 is configured to send connection establishment information to a business system when the trust level is higher than a level threshold, so that the business system can establish a connection with the IoT device.

Further, in the aforementioned IoT communication device, wherein the risk perception data includes security warnings and vulnerabilities, the first computing module 10 includes,

The first calculation submodule is used for:

Obtain the current alert level, attack times and attack interval time in each security alert;

determining a corresponding first base number according to the current warning level, determining a corresponding first coefficient according to the number of attacks, and determining a second coefficient according to the attack interval time;

calculating the score of each security warning according to the first base, the first coefficient and the second coefficient, and calculating the score value of the attack factor index of the IoT device according to the scoring of each security warning;

The second calculation submodule is used for:

Obtain the level of each vulnerability, and determine the corresponding second base number according to the level of the vulnerability;

The score value of the threat factor indicator is calculated according to the second base number corresponding to each vulnerability level.

Further, the above-mentioned Internet of Things communication device, wherein, after the step of sending the connection establishment information to the business system, the first sending module 30 is also used for:

When the trust level is a low trust level, sending first information to the service system, so that the service system refuses the Internet of Things device to access any data;

When the trust level is a medium trust level, sending second information to the business system, so that the business system authorizes the Internet of Things device to access public data;

When the trust level is a high trust level, sending third information to the business system, so that the business system authorizes the IoT device to access all data of the business system.

Further, the above-mentioned IoT communication device also includes:

The second obtaining module is used to obtain the risk perception data of the IoT device at a preset time interval;

A second calculation module, configured to calculate the current trust level of the IoT device according to the currently acquired risk perception data;

The second sending module is configured to send information corresponding to the current trust level to the access gateway when the current trust level is higher or lower than the trust level calculated last time.

Further, the above-mentioned IoT communication device also includes:

A third acquisition module, configured to acquire security factor information of the IoT device, the security factor information including the IP address, MAC address, operating system version and patch information of the IoT device;

A third calculation module, configured to calculate the security score of the IoT device according to the security factor information;

A third sending module, configured to send connection establishment information to an access gateway when the security score is higher than a threshold score, so that the access gateway establishes a connection with the IoT device.

Further, the above IoT communication device, wherein the third acquisition module is further configured to acquire the identity information of the user sent by the IoT device, verify the identity information, and determine the service authority information of the user ;

The third sending module is used for:

Sending connection establishment information to the access gateway, so that the access gateway establishes a connection between the Internet of Things device and the network area corresponding to the service authority information.

The implementation principle and technical effects of the communication device for the Internet of Things provided by the embodiment of the present invention are the same as those of the foregoing method embodiments. For a brief description, for the parts not mentioned in the device embodiments, please refer to the corresponding content in the foregoing method embodiments. .

The present invention also proposes a readable storage medium on which a computer program is stored, and when the program is executed by a processor, the above software compatibility detection method is realized.

The embodiment of the present invention also provides computer equipment, including a memory, a processor, and a computer program stored in the memory and operable on the processor, and the processor implements the steps of the above method when executing the program.

The logic and/or steps represented in the flowcharts or otherwise described herein, for example, can be considered as a sequenced listing of executable instructions for implementing logical functions, can be embodied in any computer-readable medium, For use with an instruction execution system, device, or device (such as a computer-based system, a system including a processor, or other systems that can fetch instructions from an instruction execution system, device, or device and execute instructions), or in conjunction with such an instruction execution system, device or equipment for use. For the purposes of this specification, a "computer-readable medium" may be any device that can contain, store, communicate, propagate or transmit a program for use in or in conjunction with an instruction execution system, device or device.

More specific examples (non-exhaustive list) of computer-readable media include the following: electrical connection with one or more wires (electronic device), portable computer disk case (magnetic device), random access memory (RAM), Read Only Memory (ROM), Erasable and Editable Read Only Memory (EPROM or Flash Memory), Fiber Optic Devices, and Portable Compact Disc Read Only Memory (CDROM). In addition, the computer-readable medium may even be paper or other suitable medium on which the program can be printed, since the program can be read, for example, by optically scanning the paper or other medium, followed by editing, interpretation or other suitable processing if necessary. processing to obtain the program electronically and store it in computer memory.

It should be understood that various parts of the present invention can be realized by hardware, software, firmware or their combination. In the embodiments described above, various steps or methods may be implemented by software or firmware stored in memory and executed by a suitable instruction execution system. For example, if implemented in hardware, as in another embodiment, it can be implemented by any one or combination of the following techniques known in the art: Discrete logic circuits, ASICs with suitable combinational logic gates, Programmable Gate Arrays (PGAs), Field Programmable Gate Arrays (FPGAs), etc.

In the description of this specification, descriptions referring to the terms "one embodiment", "some embodiments", "example", "specific examples", or "some examples" mean that specific features described in connection with the embodiment or example , structure, material or characteristic is included in at least one embodiment or example of the present invention. In this specification, schematic representations of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials or characteristics described may be combined in any suitable manner in any one or more embodiments or examples.

The above-mentioned embodiments only express several implementation modes of the present invention, and the descriptions thereof are relatively specific and detailed, but should not be construed as limiting the patent scope of the present invention. It should be pointed out that those skilled in the art can make several modifications and improvements without departing from the concept of the present invention, and these all belong to the protection scope of the present invention. Therefore, the protection scope of the patent for the present invention should be based on the appended claims.

Claims (9)

1. A communication method for the Internet of Things, characterized in that, comprising: Obtaining the security factor information of the IoT device, the security factor information including the IP address, MAC address, operating system version and patch information of the IoT device; calculating the security score of the IoT device according to the security factor information; When the security score is higher than the threshold score, obtain the identity information of the user sent by the IoT device; verify the identity information, and determine the service authority information of the user; send the connection establishment information to the access gateway, Making the access gateway establish a connection with the Internet of Things device includes: sending connection establishment information to the access gateway, so that the access gateway establishes a link between the Internet of Things device and the service authority information connectivity between network regions; Obtain the risk perception data of the IoT device, and calculate the score values of the attack factor indicators and the threat factor indicators respectively according to the risk perception data; determine the Trust ratings for IoT devices; When the trust level is higher than the level threshold, send connection establishment information to the business system, so that the business system can establish a connection with the IoT device. 2. The Internet of Things communication method according to claim 1, wherein the risk perception data includes security warnings and loopholes, and the step of calculating the scoring value of the attack factor index and the threat factor index respectively according to the risk perception data include: Obtain the current alert level, attack times and attack interval time in each security alert; determining a corresponding first base number according to the current warning level, determining a corresponding first coefficient according to the number of attacks, and determining a second coefficient according to the attack interval time; calculating the score of each security warning according to the first base, the first coefficient and the second coefficient, and calculating the score value of the attack factor index of the IoT device according to the scoring of each security warning; Obtain the level of each vulnerability, and determine the corresponding second base number according to the level of the vulnerability; The score value of the threat factor indicator is calculated according to the second base number corresponding to each vulnerability level. 3. The Internet of Things communication method as claimed in claim 2, wherein the calculation formula of the scoring value of the attack factor index is: Score _{attack, i} = min(∑Score _{a, i} , a); Among them, Score _a,i =m _i ×k ₁ ×k ₂ , m _i is the first base, k ₁ and k ₂ are the first coefficient and the second coefficient respectively, and a is the upper limit value of the scoring value of the attack factor index . 4. The Internet of Things communication method as claimed in claim 2, wherein the calculation formula of the scoring value of the threat factor index is: Score _{vul, i} = min(∑Score _{v, i} , b); Wherein, Score _v,i is the second base number, and b is the upper limit value of the score value of the threat factor index. 5. The IoT communication method according to claim 1, further comprising: after the step of sending the connection establishment information to the business system: When the trust level is a low trust level, sending first information to the business system, so that the business system refuses the Internet of Things device to access any data; When the trust level is a medium trust level, sending second information to the business system, so that the business system authorizes the Internet of Things device to access public data; When the trust level is a high trust level, sending third information to the business system, so that the business system authorizes the IoT device to access all data of the business system. 6. The Internet of Things communication method according to claim 5, characterized in that, after the step of sending the connection establishment information to the service system so that the service system establishes a connection with the Internet of Things device, the The Internet of Things communication method also includes: Obtaining the risk perception data of the IoT device at a preset time interval; calculating the current trust level of the IoT device according to the currently acquired risk perception data; When the current trust level is higher or lower than the trust level calculated last time, sending information corresponding to the current trust level to the access gateway. 7. The Internet of Things communication method according to claim 1, wherein said calculating the security score of said Internet of Things device according to said security factor information comprises: Determine the security level of the Internet of Things device access network according to the IP address and the MAC address of the IoT device, and determine the corresponding score value according to the security level of the network access, to obtain the score value of the first security factor; Determine the score value corresponding to the operating system version to obtain the score value of the second security factor; Determine the number of patches of the IoT device according to the patch information, and determine the corresponding score value according to the number of patches, to obtain the score value of the third security factor; The security score of the IoT device is calculated according to the score values of each security factor. 8. A communication device for the Internet of Things, characterized in that, comprising: The first calculation module is used to obtain the security factor information of the IoT device, the security factor information includes the IP address, MAC address, operating system version and patch information of the IoT device; calculate the security factor information according to the security factor information The security score of the IoT device; when the security score is higher than the threshold score, obtain the identity information of the user sent by the IoT device; verify the identity information, and determine the user's business authority information; send Sending the connection establishment information to the access gateway, so that the access gateway establishes a connection with the IoT device, includes: sending the connection establishment information to the access gateway, so that the access gateway establishes the connection between the IoT device and the IoT device Connections between network areas corresponding to the service authority information; The first computing module is further configured to acquire risk perception data of IoT devices, and calculate scoring values of attack factor indicators and threat factor indicators according to the risk perception data; A determining module, configured to determine the trust level of the IoT device according to the scoring values of the attack factor indicators and the threat factor indicators; A first sending module, configured to send connection establishment information to a business system when the trust level is higher than a level threshold, so that the business system can establish a connection with the IoT device. 9. A readable storage medium, on which a program is stored, wherein, when the program is executed by a processor, the method according to any one of claims 1-7 is realized.

Images