CN113518118B

CN113518118B - Information processing method and system based on Internet of things security service

Info

Publication number: CN113518118B
Application number: CN202110550940.8A
Authority: CN
Inventors: 杨智皓; 苏佳伟; 周浩; 庞晨; 肖海婷
Original assignee: Changzhou Haochen Technology Co ltd
Current assignee: Changzhou Haochen Technology Co ltd
Priority date: 2021-05-20
Filing date: 2021-05-20
Publication date: 2022-03-29
Anticipated expiration: 2041-05-20
Also published as: CN113518118A

Abstract

The embodiment of the application provides an information processing method and system based on Internet of things security service, information category labels of target Internet of things information in a plurality of Internet of things terminal operation information spaces of an Internet of things terminal operation information queue are obtained from an Internet of things terminal operation information queue of a first Internet of things information transmission layer, information index fields corresponding to the information category labels are obtained from the Internet of things terminal operation information spaces respectively to obtain a plurality of pieces of to-be-processed Internet of things information, and finally the to-be-processed Internet of things information of the first Internet of things information transmission layer is subjected to information security protection processing according to a preset Internet of things information interlayer transmission security processing protocol to obtain the target terminal operation information transmitted from the first Internet of things information transmission layer to a second Internet of things information transmission layer, so that the target terminal operation information can be subjected to information security protection processing on the first Internet of things information transmission layer and then subjected to information security protection processing on the target terminal operation information And the safe transmission of the information of the Internet of things is realized.

Description

Information processing method and system based on Internet of things security service

Technical Field

The application relates to the technical field of Internet of things and information, in particular to an information processing method and system based on Internet of things security service.

Background

With the continuous development of computer science and Information Technology, the Internet of things (IoT) gradually integrates Information industry chains of Information and Communication Technologies (ICT) such as traditional networks, sensors, wireless networks, pervasive computing and cloud computing. With the rapid development of the internet of things technology, the number of terminals of the internet of things is increased dramatically, and the information safety hidden danger in the internet of things is increased gradually. In a common internet of things architecture, an internet of things security service platform can perform information interaction with a large number of terminals of internet of things of different types, information can be transmitted among different information transmission layers (such as a sensing layer, a network layer and an application layer) of the internet of things in an information interaction process, and risks of attacking, stealing, altering and the like of important information still exist in the transmission process, so that information security processing and protection in the information transmission process are very important.

Disclosure of Invention

In view of the above, in a first aspect, an embodiment of the present application provides an information processing method based on an internet of things security service, which is applied to an internet of things security service platform in an information processing system based on the internet of things security service, where the internet of things security service platform is in communication connection with an internet of things terminal device, and the method includes:

the method comprises the steps that information category labels of target internet of things information with the same type of information identification in a plurality of internet of things terminal operation information spaces of an internet of things terminal operation information queue of a first internet of things information transmission layer are obtained from a pre-received internet of things terminal operation information queue of a plurality of internet of things terminal devices in the system and transmitted, and each internet of things terminal operation information space comprises terminal operation information obtained by carrying out information interaction on at least one internet of things terminal operation;

respectively acquiring information index fields corresponding to the information category labels from the operation information space of each Internet of things terminal to obtain a plurality of pieces of information of the Internet of things to be processed;

and carrying out information security protection processing on each piece of to-be-processed Internet of things information of the first Internet of things information transmission layer according to a preset Internet of things information interlayer transmission security processing protocol to obtain target terminal operation information which is transmitted from the first Internet of things information transmission layer to the second Internet of things information transmission layer, wherein the second Internet of things information transmission layer is used for carrying out Internet of things information security transmission on the target terminal operation information after carrying out information security protection processing on the to-be-processed Internet of things information on the first Internet of things information transmission layer.

Based on the first aspect, the obtaining, from a pre-received internet of things terminal operation information queue of a first internet of things information transmission layer, information category labels of target internet of things information with the same type of information identifier in a plurality of internet of things terminal operation information spaces of the internet of things terminal operation information queue includes:

performing field mapping on each information index field of each internet of things terminal operation information space in the internet of things terminal operation information queue according to a preset index field mapping rule to obtain a first mapping result array consisting of mapping results corresponding to each information index field, and performing information category analysis on each first mapping result array to obtain information category labels of each information index field in each internet of things terminal operation information space in the internet of things terminal operation information queue;

and inquiring the information category labels of the target Internet of things information in a plurality of Internet of things terminal operation information spaces from the analyzed information category labels of each information index field.

Based on the first aspect, the field mapping is performed on each information index field of each internet of things terminal operation information space in the internet of things terminal operation information queue according to a preset index field mapping rule to obtain a first mapping result array composed of mapping results corresponding to each information index field, and the information category analysis is performed on each first mapping result array to obtain the information category label of each information index field in each internet of things terminal operation information space in the internet of things terminal operation information queue, including:

the method comprises the steps that the terminal operation information queue of the internet of things is input into a preset first internet of things information extraction network, index field mapping is carried out on each terminal operation information space of the internet of things in the terminal operation information queue of the internet of things by an index field mapping unit of the first internet of things information extraction network to obtain a first mapping result array formed by mapping results corresponding to each information index field, information category analysis is carried out on each first mapping result array by an information category analysis unit of the first internet of things information extraction network, and information category labels of each information index field of target internet of things information in each terminal operation information space of the internet of things in the terminal operation information queue of the internet of things are obtained.

performing field mapping on each information index field of each internet of things terminal operation information space in the internet of things terminal operation information queue according to a preset index field mapping rule by adopting a preset information mapping rule to obtain a first mapping result array consisting of mapping results corresponding to each information index field; the preset information mapping rule at least comprises index field mapping and key value pair processing, wherein the index field mapping and key value pair processing comprises mapping each information index field to an index characteristic value in a preset index hash table, and performing key value pair processing on terminal operation information of each information index field and then performing associated recording on the corresponding index characteristic value;

and inputting each first mapping result array into a preset second networking information extraction network, and performing information category analysis on each first mapping result array by an information category analysis unit of the second networking information extraction network to obtain information category labels of each information index field of the target Internet of things information in each Internet of things terminal operation information space of the Internet of things terminal operation information queue.

Based on the first aspect, the information category label includes: an operation attribute label of terminal operation information and an internet of things information security level label indicating the internet of things information security level corresponding to the target internet of things information are preset in the target internet of things information;

the method for obtaining the information index fields corresponding to the information category labels from the operation information spaces of the internet of things terminals respectively to obtain a plurality of pieces of information of the internet of things to be processed comprises the following steps:

for each Internet of things terminal operation information space, according to an information acquisition interval corresponding to the target Internet of things information when information acquisition is carried out on an operation attribute label and an Internet of things information security level label in an information category label of the Internet of things terminal operation information space, acquiring an information index field of a preset attribute label in the Internet of things terminal operation information space according to the information acquisition interval, and determining the acquired information index field as the to-be-processed Internet of things information; or

For each Internet of things terminal operation information space, sequentially searching information index fields corresponding to the Internet of things information security level labels in the Internet of things terminal operation information space according to operation attribute labels of the target Internet of things information in the information category labels in the Internet of things terminal operation information space; and associating the searched information index fields to the target attribute tags from different Internet of things information security level fields by adopting a field association mode, and determining the terminal operation information corresponding to the information index fields after the field association as the information of the Internet of things to be processed.

Based on the first aspect, the obtaining of the target terminal operation information transmitted from the first internet of things information transmission layer to the second internet of things information transmission layer by performing information security protection processing on each piece of to-be-processed internet of things information of the first internet of things information transmission layer includes:

performing field mapping on each piece of to-be-processed internet-of-things information according to a preset index field mapping rule to obtain a second mapping result array, performing information labeling on corresponding information parameters of the target internet-of-things information in each second mapping result array to obtain a third mapping result array after information labeling, and performing information security protection processing on each third mapping result array to obtain the target terminal operation information, wherein the information security protection processing comprises interlayer information transmission security protection discrete processing or labeling information encryption processing; or

Inputting all pieces of to-be-processed internet-of-things information into a preset third internet-of-things information extraction network, performing index field mapping on each piece of input to-be-processed internet-of-things information by an index field mapping unit of the third internet-of-things information extraction network to obtain a second mapping result array, performing information labeling on corresponding information parameters of target internet-of-things information in each second mapping result array by an array information labeling unit of the third internet-of-things information extraction network to obtain a third mapping result array after information labeling, and performing information security protection processing on each third mapping result array by an interlayer information transmission security protection array processing unit of the third internet-of-things information extraction network to obtain the target terminal operation information; the index field mapping unit realizes index field mapping by a field characteristic mapping method.

Based on the first aspect, the field mapping is performed on each piece of to-be-processed internet-of-things information according to a preset index field mapping rule to obtain a second mapping result array, information labeling is performed on corresponding information parameters of the target internet-of-things information in each second mapping result array to obtain a third mapping result array after information labeling, and information security protection processing is performed on each third mapping result array to obtain the target terminal operation information, and the method includes:

performing field mapping on each piece of to-be-processed internet of things information according to a preset index field mapping rule by adopting a preset information mapping rule to obtain a second mapping result array; the preset information mapping rule at least comprises index field mapping and key value pair processing;

and inputting each second mapping result array into a preset fourth Internet of things information extraction network, performing information labeling on corresponding information parameters of target Internet of things information in each second mapping result array by an array information labeling unit of the fourth Internet of things information extraction network to obtain a third mapping result array after information labeling, and performing information security protection processing on each third mapping result array by an interlayer information transmission security protection array processing unit of the third Internet of things information extraction network to obtain the target terminal operation information.

Based on the first aspect, the performing information security protection processing on each third mapping result array to obtain the target terminal operation information includes any one of the following methods:

executing a preset function on each array element in the third mapping result array by using the third mapping result array to obtain a function execution result array, and performing information safety protection processing on the function execution result array by using at least one interlayer information transmission safety protection array processing unit to obtain the target terminal operation information;

directing each array element in the third mapping result array to a corresponding element space according to a set array element directing algorithm, and taking the corresponding element space obtained after the array element is directed as the target terminal operation information transmitted from the first internet of things information transmission layer to the second internet of things information transmission layer;

extracting element pointers of array elements with the same type of information identification in the third mapping result array, and performing information security protection processing on the array elements corresponding to the element pointers according to the element pointers to obtain the target terminal operation information for transmitting from the first internet of things information transmission layer to the second internet of things information transmission layer; or

Respectively carrying out information security encryption processing on the third mapping result arrays according to an information encryption protocol corresponding to the first internet of things information transmission layer, and carrying out interlayer information transmission security protection discrete processing or labeling information encryption processing on each third mapping result array after the information security encryption processing to obtain target terminal operation information for being transmitted from the first internet of things information transmission layer to the second internet of things information transmission layer; or

And carrying out interlayer information transmission security protection discrete processing or labeling information encryption processing on the third mapping result array to obtain candidate terminal operation information, and then carrying out information security encryption processing on the candidate terminal operation information according to an information encryption protocol corresponding to the first internet of things information transmission layer to obtain target terminal operation information for transmitting from the first internet of things information transmission layer to the second internet of things information transmission layer.

Based on the first aspect, the first internet of things information transmission layer and the second internet of things information transmission layer are respectively one of a sensing layer, a network layer and an application layer.

In a second aspect, an embodiment of the present application further provides an information processing system based on internet of things security service, including an internet of things security service platform and a plurality of internet of things terminal devices communicatively connected to the internet of things security service platform, where the internet of things security service platform includes a processor, a machine-readable storage medium, the machine-readable storage medium is connected to the processor, the machine-readable storage medium is used to store a program, an instruction, or a code, and the processor is used to execute the program, the instruction, or the code in the machine-readable storage medium, so as to implement the above information processing method based on internet of things security service.

In summary, the information processing method and system based on the internet of things security service provided by the embodiment of the present application acquire information category labels of target internet of things information having the same type of information identifier in a plurality of internet of things terminal operation information spaces of an internet of things terminal operation information queue from an internet of things terminal operation information queue of a first internet of things information transmission layer, then respectively acquire information index fields corresponding to the information category labels from each internet of things terminal operation information space to obtain a plurality of pieces of information of the internet of things to be processed, and finally perform information security protection processing on each piece of information of the first internet of things information transmission layer according to a preset internet of things information interlayer transmission security processing protocol to obtain the target terminal operation information for transmission from the first internet of things information transmission layer to a second internet of things information transmission layer, therefore, the information security protection processing of the to-be-processed internet of things information on the first internet of things information transmission layer can be carried out, and then the target terminal operation information is subjected to internet of things information security transmission. Based on this, when considering that the operation information of the terminal of the internet of things is transmitted between different information transmission layers of the internet of things, different information has different security requirements or levels, the application adopts a corresponding inter-layer transmission security processing protocol (such as a field encryption protocol, a sensitive information anonymity processing protocol, an information security storage protocol and the like) of the information of the internet of things to process the information according to the corresponding information type, so that the security of the transmission of the information of the internet of things between different layers can be improved. In addition, through data processing modes such as the internet of things information extraction network and the mapping result array, the related internet of things information subjected to the internet of things information security encryption processing can be accurately identified, and therefore the reliability of the internet of things information security transmission can be further improved.

Drawings

In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings needed to be used in the embodiments will be briefly described below.

Fig. 1 is a schematic flowchart of an information processing method based on an internet of things security service according to an embodiment of the present application.

Fig. 2 is a flow diagram illustrating the sub-steps of step 1 in fig. 1.

Fig. 3 is a schematic diagram of an information processing system based on an internet of things security service provided in an embodiment of the present application.

Fig. 4 is a block schematic diagram of the internet of things security service network platform in fig. 3.

Detailed Description

As shown in fig. 1, fig. 1 is a schematic flowchart of an information processing method based on an internet of things security service provided in an embodiment of the present application. In the application, the method can be executed by an internet of things security service platform, and the internet of things security service platform can be an information processing device with information analysis and processing capabilities, such as a server.

The steps involved in the method are described in detail below.

Step 1, obtaining information category labels of target internet of things information with the same type of information identification in a plurality of internet of things terminal operation information spaces of an internet of things terminal operation information queue from the internet of things terminal operation information queue of a first internet of things information transmission layer. In the application, each terminal operation information space of the internet of things comprises terminal operation information obtained by performing information interaction on at least one terminal operation of the internet of things.

And 2, respectively acquiring information index fields corresponding to the information category labels from the operation information space of each Internet of things terminal to obtain a plurality of pieces of information of the Internet of things to be processed.

And 3, carrying out information security protection processing on the to-be-processed Internet of things information of the first Internet of things information transmission layer according to a preset Internet of things information interlayer transmission security processing protocol to obtain target terminal operation information which is transmitted from the first Internet of things information transmission layer to the second Internet of things information transmission layer, wherein the second Internet of things information transmission layer is used for carrying out Internet of things information security transmission on the target terminal operation information after carrying out information security protection processing on the to-be-processed Internet of things information on the first Internet of things information transmission layer.

For example, in the present application, the first internet of things information transmission layer and the second internet of things information transmission layer in the above steps may be different data transmission layers on an internet of things information transmission path on the internet of things security service platform, which are preset, and for example, the different data transmission layers may be a sensing layer, a network layer, an application layer, and the like. The terminal operation information queue of the first internet of things information transmission layer can be composed of terminal operation information of the internet of things obtained by information acquisition and interaction of terminal operation information of the internet of things generated by a related internet of things terminal used by a user of the internet of things through an internet of things safety service platform or other information interaction terminals connected with or mutually communicating with the internet of things safety service platform.

The information category label can be an information identifier included in various information index fields and used for representing information categories (such as enterprise production information, sensing data information, internet of things terminal field state information, terminal device control information and the like). The information index field may be an information content segment formed by information interaction or acquisition of one-time terminal operation of the internet of things, or an information content segment formed by information interaction or acquisition of terminal operation of the internet of things in one information interaction period, or an information content segment formed by information segmentation of terminal operation information of the internet of things acquired in a set information acquisition period according to a predetermined information index field segmentation mode, and is not particularly limited.

The information security processing according to the set inter-layer information transfer security processing rule may be information processing that analyzes information in each information index field that needs security protection, and executes the analyzed specific information according to a set inter-layer information transfer security processing method (for example, inter-layer information transfer security protection discrete processing, important information encryption processing, sensitive information anonymization processing, and the like).

The specific implementation method of the above related steps will be described in detail with reference to specific embodiments.

As shown in fig. 2, in step 1, obtaining information category labels of target internet of things information with the same type of information identifier in a plurality of internet of things terminal operation information spaces of an internet of things terminal operation information queue from the internet of things terminal operation information queue of the first internet of things information transmission layer may include the following sub-steps.

And a substep 11, performing field mapping on each information index field of each internet of things terminal operation information space in the internet of things terminal operation information queue according to a preset index field mapping rule to obtain a first mapping result array consisting of mapping results corresponding to each information index field.

For example, in the application, each terminal operation information space of the internet of things may be an information recording space for recording information obtained by performing information interaction or collecting two times on terminal operation of the internet of things at one time, or may be an information recording space for recording information obtained by performing information interaction or collecting on terminal operation of the internet of things within one information interaction or collecting time period, and the terminal operation information space of the internet of things may be an information storage unit or an information storage block.

In addition, in this application, the internet of things terminal operation information queue can be input to a preset first internet of things information extraction network, so that an index field mapping unit of the first internet of things information extraction network maps an index field of each internet of things terminal operation information space in the internet of things terminal operation information queue to obtain the first mapping result array. The index field mapping unit is used for mapping the index field of the terminal operation information space of the internet of things by a field feature mapping method.

For example, the field feature mapping method may perform feature association mapping on field features of each piece of information in the information index field according to a specific mapping relationship, so as to obtain a corresponding index feature value.

And a substep 12, performing information category analysis on each first mapping result array to obtain information category labels of each information index field in each internet of things terminal operation information space in the internet of things terminal operation information queue.

For example, in the application, the information category analysis unit of the first internet of things information extraction network may perform information category analysis on each first mapping result array to obtain the information category label of each information index field of the target internet of things information in each internet of things terminal operation information space of the internet of things terminal operation information queue.

And a substep 13 of querying information category labels of the target internet of things information in a plurality of internet of things terminal operation information spaces from the analyzed information category labels of each information index field.

Therefore, the information category labels of the target internet of things information with the same type of information identification in the plurality of internet of things terminal operation information spaces of the internet of things terminal operation information queue can be obtained. The target internet of things information is target internet of things information meeting preset information conditions, for example, information needing interlayer information transmission safety protection processing.

The information category label of the target internet of things information in the internet of things terminal operation information space may include an operation attribute label of the target internet of things information in the internet of things terminal operation information space and a terminal type attribute label corresponding to the target internet of things information in the internet of things terminal operation information space. The expression form of the information category label can be various forms, and the information category label is used for representing and positioning target internet of things information in an internet of things terminal operation information space.

In the application, the target internet of things information may be information which is preset and needs to be subjected to information security protection processing, for example, information generated by an internet of things terminal with a higher security level set in the internet of things, such as control information, enterprise business information, account information, financial information, order information, and the like.

In addition, in the above step 11 and step 12, field mapping is performed on each information index field of each internet of things terminal operation information space in the internet of things terminal operation information queue according to a preset index field mapping rule to obtain a first mapping result array composed of mapping results corresponding to each information index field, and information category analysis is performed on each first mapping result array to obtain an information category tag of each information index field in each internet of things terminal operation information space in the internet of things terminal operation information queue.

Firstly, performing field mapping on each information index field of each Internet of things terminal operation information space in the Internet of things terminal operation information queue according to a preset index field mapping rule by adopting a preset information mapping rule to obtain a first mapping result array consisting of mapping results corresponding to each information index field;

then, inputting each first mapping result array to a preset second networking information extraction network, and performing information category analysis on each first mapping result array by an information category analysis unit of the second networking information extraction network to obtain information category labels of each information index field of the target Internet of things information in each Internet of things terminal operation information space of the Internet of things terminal operation information queue.

In this application, the preset information mapping rule may include index field mapping and key value pair processing. The index field mapping and key value pair processing comprises the steps of mapping each information index field to an index characteristic value in a preset index hash table, and then performing key value pair processing on the terminal operation information of each information index field and performing associated recording on the corresponding index characteristic value.

Further, in the present application, the information category label may include: the operation attribute label of the preset terminal operation information in the target internet of things information and the internet of things information security level label representing the internet of things information security level corresponding to the target internet of things information. The preset terminal operation information in the target internet of things information may be, for example, information carrying a security level, such as order operation information, financial information, field device control information, and the like.

Based on the above, in step 2, the information index field corresponding to each information category label is respectively obtained from each internet of things terminal operation information space, and the obtained multiple pieces of to-be-processed internet of things information may be any one of the following two schemes.

According to the first scheme, for each Internet of things terminal operation information space, according to an information acquisition interval corresponding to information acquisition of an operation attribute label and an Internet of things information security level label of target Internet of things information in an information category label of the Internet of things terminal operation information space, an information index field with an attribute label being a preset attribute label is acquired in the Internet of things terminal operation information space according to the information acquisition interval, and the acquired information index field is determined as the Internet of things information to be processed.

According to the second scheme, for each Internet of things terminal operation information space, sequentially searching an information index field with an attribute label as an Internet of things information security level label in the Internet of things terminal operation information space according to an operation attribute label of the target Internet of things information in an information category label in the Internet of things terminal operation information space; and then, associating the obtained information index field to a target attribute tag from different Internet of things information security level fields by adopting a field association mode, and determining the terminal operation information corresponding to the information index field after field association as the to-be-processed Internet of things information.

Therefore, the interlayer information transmission safety protection processing can be subsequently carried out on the corresponding information to be processed according to the target attribute label. For example, the corresponding information to be processed may be encrypted, replaced with a preset character, and the like.

Further, in this application, in step 3, the information security protection processing is performed on the to-be-processed internet-of-things information of the first internet-of-things information transmission layer to obtain the target terminal operation information transmitted from the first internet-of-things information transmission layer to the second internet-of-things information transmission layer, and one possible implementation manner is as follows:

performing field mapping on each piece of to-be-processed internet-of-things information according to a preset index field mapping rule to obtain a second mapping result array, and performing information labeling on corresponding information parameters of the target internet-of-things information in each second mapping result array to obtain a third mapping result array after information labeling;

and carrying out information security protection processing on each third mapping result array to obtain the operation information of the target terminal, wherein the information security protection processing comprises any one or more of interlayer information transmission security protection discrete processing and labeling information encryption processing. In the present application, for example, interlayer information transmission security protection processing may be performed on information parameters of information tagging, such as information encryption, sensitive information anonymization processing, and the like, on information parameters of a tagged portion. Therefore, the terminal operation information corresponding to the corresponding information parameter needing interlayer information transmission safety protection processing can be found through the information parameter marked with the information, and then the corresponding terminal operation information is subjected to information safety protection processing.

Alternatively, another possible implementation manner of the step 3 is:

inputting the information of the Internet of things to be processed into a preset third Internet of things information extraction network, and performing index field mapping on the input information of the Internet of things to be processed by an index field mapping unit of the third Internet of things information extraction network to obtain a second mapping result array;

carrying out information annotation on corresponding information parameters of the target Internet of things information in each second mapping result array by an array information annotation unit of the third Internet of things information extraction network to obtain a third mapping result array after information annotation;

carrying out information security protection processing on each third mapping result array by an interlayer information transmission security protection array processing unit of the third Internet of things information extraction network to obtain the target terminal operation information; wherein, the index field mapping unit is used for realizing by a field characteristic mapping method.

Further, in this implementation, the field mapping is performed on each piece of to-be-processed internet-of-things information according to a preset index field mapping rule to obtain a second mapping result array, and one implementation manner may be: performing field mapping on each piece of to-be-processed internet of things information according to a preset index field mapping rule by adopting a preset information mapping rule to obtain a second mapping result array; the preset information mapping rule at least comprises index field mapping and key value pair processing.

Based on this, the target internet of things information is subjected to information labeling on corresponding information parameters in each second mapping result array to obtain a third mapping result array after information labeling, and each third mapping result array is subjected to information security protection processing to obtain the target terminal operation information, and an achievable manner may be:

and inputting each second mapping result array into a preset fourth Internet of things information extraction network, performing information labeling on corresponding information parameters of target Internet of things information in each second mapping result array by an array information labeling unit of the fourth Internet of things information extraction network to obtain a third mapping result array after information labeling, and performing information security protection processing on each third mapping result array by an interlayer information transmission security protection array processing unit of the third Internet of things information extraction network to obtain the target terminal operation information. Therefore, the fourth internet of things information extraction network can be an information processing neural network obtained by adopting a sample to perform machine learning in advance, and can be used for performing information labeling on each information parameter in the mapping result array, for example, labeling information needing information security protection processing in a corresponding information labeling mode, labeling information needing no information security protection processing in other information labeling modes different from the information needing information security protection processing, performing information security protection processing on information parameters of the information needing information security protection processing in the third mapping result array including corresponding information labeling, and achieving the purpose of security transmission of the internet of things information between different layers.

Based on the above, the information security protection processing is performed on each third mapping result array to obtain the target terminal operation information, which may be implemented in any one of the following manners a to e.

a. And executing a preset function on each array element in the third mapping result array by using each third mapping result array to obtain a function execution result array, and executing information safety protection processing on the function execution result array by using at least one information interlayer information transmission safety protection processing unit to obtain the target terminal operation information. The information in the operation information space of each internet of things terminal can correspondingly obtain a third mapping result array, and each third mapping result array can obtain a function execution result array in a mode of executing a preset function on each array element in the third mapping result array, so that the function execution result array can be uniformly subjected to information safety protection processing in the subsequent process.

b. And mapping each array element in the third mapping result array to a corresponding element space according to a set array element direction algorithm, and taking the corresponding element space obtained after the array elements are directed as the operation information of the target terminal. In this application, for example, the corresponding element space may include a first element space used for storing information that needs to be subjected to information security protection processing and a second element space used for storing information that does not need to be subjected to information security protection processing, and the array elements that do not need to be subjected to information labeling of information security protection processing in the third mapping result array may be pointed to the second element space, and the array elements that need to be subjected to information labeling of information security protection processing are pointed to the first element space.

c. Extracting element pointers of array elements with the same type of information identification in the third mapping result array, and performing information security protection processing on the array elements corresponding to the element pointers according to the element pointers to obtain the target terminal operation information. In the application, the element pointers of the corresponding array elements can be positioned according to different types of information identifications, and then information safety protection processing is carried out on the corresponding array elements according to the corresponding element pointers.

d. And respectively carrying out information security encryption processing on the third mapping result arrays according to an information encryption protocol corresponding to the information transmission layer of the first internet of things, and carrying out interlayer information transmission security protection discrete processing, labeling information encryption processing or carrying out security protection processing on information needing information security protection processing on each third mapping result array after the information security encryption processing to obtain the operation information of the target terminal. Therefore, the information security encryption processing can be performed on each third mapping result array according to the information encryption protocol corresponding to the first internet of things information transmission layer, then the interlayer information transmission security protection discrete processing and the label information encryption processing are performed on the information needing the information security protection processing in the third mapping result array, or the security protection processing is performed on the information needing the information security protection processing, and the like, so that the information security processing needing the information security protection processing is realized, and the target terminal operation information transmitted from the first internet of things information transmission layer to the second internet of things information transmission layer is obtained.

e. And carrying out interlayer information transmission security protection discrete processing and labeling information encryption processing on the third mapping result array to obtain candidate terminal operation information, and then carrying out information security encryption processing on the candidate terminal operation information according to an information encryption protocol corresponding to the first internet of things information transmission layer to obtain the target terminal operation information. Therefore, interlayer information transmission safety protection discrete processing and labeling information encryption processing can be firstly carried out on the related information needing information safety protection processing in the third mapping result array, and then information safety encryption processing is respectively carried out on each third mapping result array according to the information encryption protocol corresponding to the first internet of things information transmission layer, so that the target terminal operation information transmitted from the first internet of things information transmission layer to the second internet of things information transmission layer is obtained.

Further, in this embodiment of the application, the information security protection processing manner may be information security protection processing that needs information security protection processing for specific information. Step 3 above may illustratively include sub-steps 31-35 described below, with exemplary descriptions as follows.

And a substep 31 of acquiring an index field character combination and an internet of things terminal identification combination corresponding to each piece of to-be-processed internet of things information according to each piece of to-be-processed internet of things information of the first internet of things information transmission layer. In this application, the index field character combination may include index field characters corresponding to information index fields in each user information space in the information of the to-be-processed internet of things, and one index field character may correspond to information of one user information space. The Internet of things terminal identification is used for representing category identification, task identification and the like of the Internet of things terminal corresponding to each piece of information of the Internet of things to be processed.

In step 31, the index field character combination and the internet of things terminal identification combination in the to-be-protected terminal operation information corresponding to the to-be-processed internet of things information are obtained in the following specific manner:

firstly, according to the to-be-processed internet of things information of the first internet of things information transmission layer, acquiring a plurality of index field characters and a plurality of internet of things terminal identifications in the to-be-protected terminal operation information corresponding to the to-be-processed internet of things information;

then, acquiring character similarity and character characteristic offset among the index field characters, and acquiring terminal identification association and terminal identification characteristic offset among the Internet of things terminal identifications;

finally, the index field characters are arranged according to the character similarity and the character characteristic offset, and an index field character combination in the terminal operation information to be protected corresponding to the information of the internet of things to be processed is obtained; an index field character combination comprises at least one index field character; arranging the plurality of Internet of things terminal identifications according to the terminal identification association degree and the terminal identification characteristic offset to obtain an Internet of things terminal identification combination in the to-be-protected terminal operation information corresponding to the to-be-processed Internet of things information; an internet of things terminal identification combination comprises at least one internet of things terminal identification.

And a substep 32 of performing information security preceding stage processing on the index field character combination and the internet of things terminal identification combination in the to-be-protected terminal operation information corresponding to the to-be-processed internet of things information based on the corresponding relationship between the index field character combination and the internet of things terminal identification combination corresponding to the to-be-processed internet of things information to obtain an information security preceding stage processing result. For example, the information security pre-stage processing may be to match each index field character in the index field character combination with a corresponding terminal identifier of the internet of things, and obtain an information security pre-stage processing result according to the matching result, for example, the index field character matched with the specific terminal identifier of the internet of things triggers a security early warning instruction, and the corresponding security early warning instruction represents that information of the internet of things to be processed related to the corresponding index field character needs to be subjected to information security protection processing.

And a substep 33, determining the terminal identifier of the internet of things with the safety early warning indication in the information safety pre-stage processing as a target terminal identifier of the internet of things according to the information safety pre-stage processing result, and determining the information safety processing type corresponding to the terminal identifier of the target internet of things according to the association degree between the terminal operation information corresponding to the terminal identifier of the internet of things without the safety early warning indication in the information safety pre-stage processing result and the terminal operation information corresponding to the terminal identifier of the target internet of things. In the application, the safety early warning indication when the information safety pre-stage processing occurs can be that any internet of things terminal identification determines the internet of things information needing information safety protection in the information safety pre-stage processing.

And a substep 34 of performing information security pre-stage processing on the target internet of things terminal identifier according to the information security processing type corresponding to the target internet of things terminal identifier. The information security pre-stage processing procedure herein can refer to the manner of step 32, and is not described herein.

And a substep 35, obtaining a target internet of things information interlayer transmission security processing protocol corresponding to the internet of things information interlayer transmission security processing protocol according to the information security preceding-stage processing results obtained in the substeps 32 and 34, and performing information security protection processing on the to-be-protected terminal operation information according to the target internet of things information interlayer transmission security processing protocol to obtain the target terminal operation information. For example, the target internet of things information layer transmission security processing protocol may include, but is not limited to, a field encryption protocol, a sensitive information anonymization processing protocol, an information security storage protocol, and the like. For example, different target internet of things information interlayer transmission security processing protocols represent different modes or requirements of interlayer information transmission security protection processing, and different requirements correspond to different information security protection processing modes to meet requirements under different application types.

Fig. 3 is a schematic view of an information processing system based on an internet of things security service according to an embodiment of the present application. The system comprises an Internet of things security service platform 10 and a plurality of Internet of things terminal devices 20 which are in communication connection with the Internet of things security service platform 10. In the application, the internet of things security service platform 10 is used for implementing the information processing method based on the internet of things security service provided in the embodiment of the application. The internet of things terminal device 20 may be a mobile phone, a notebook computer, an industrial field device, a home intelligent terminal, and other various devices that can implement corresponding functions through the internet of things, and is not limited specifically.

In the present application, as shown in fig. 4, the internet of things security service platform 10 may include an information processing device 110, a machine-readable storage medium 111, and a processor 112.

Alternatively, the machine-readable storage medium 111 may be accessed by the processor 112 through a bus interface. The machine-readable storage medium 111 may also be integrated into the processor 112, e.g., may be a cache and/or general registers.

The processor 112 is the core of the internet of things security service platform 10, connects various hardware components of the whole internet of things security service platform 10, and executes various functions of the internet of things security service platform 10 and realizes the functions by implementing software programs and/or modules stored in the machine-readable storage medium 111 and calling information stored in the machine-readable storage medium 111. Alternatively, processor 112 may include one or more processing cores.

The processor 112 may be a general-purpose Central Processing Unit (CPU), a microprocessor, an Application-Specific Integrated Circuit (ASIC), or the like. Machine-readable storage medium 111 may be, but is not limited to, a ROM or other type of static storage device that may store static information and instructions, a RAM or other type of dynamic storage device that may store information and instructions, and the like.

The embodiments described above are only a part of the embodiments of the present application, and not all of the embodiments. The components of the embodiments of the present application, as generally described and illustrated in the figures herein, may be arranged and designed in a wide variety of different configurations. Thus, the detailed description of the embodiments of the present application provided in the accompanying drawings is not intended to limit the scope of the application, but is merely representative of selected embodiments of the application. Therefore, the protection scope of the present application shall be subject to the protection scope of the claims. Moreover, based on the embodiments of the present application, various other embodiments that can be obtained by a person skilled in the art without making creative efforts shall fall within the protection scope of the present application.

Claims

1. An information processing method based on Internet of things security service is characterized in that the information processing method is applied to an Internet of things security service platform in an information processing system based on Internet of things security service, the Internet of things security service platform is in communication connection with an Internet of things terminal device, and the method comprises the following steps:

and carrying out information security protection processing on each piece of to-be-processed Internet of things information of the first Internet of things information transmission layer by adopting a corresponding Internet of things information interlayer transmission security processing protocol according to the corresponding information category of each piece of to-be-processed Internet of things information to obtain target terminal operation information which is transmitted to the second Internet of things information transmission layer from the first Internet of things information transmission layer, wherein the second Internet of things information transmission layer is used for carrying out Internet of things information security transmission on the target terminal operation information after the to-be-processed Internet of things information is subjected to information security protection processing on the first Internet of things information transmission layer.

2. The method as claimed in claim 1, wherein the obtaining of information category labels of target internet of things information with the same type of information identifier in a plurality of internet of things terminal operation information spaces of an internet of things terminal operation information queue from a previously received internet of things terminal operation information queue of a first internet of things information transmission layer to which a plurality of internet of things terminal devices in the system are sent and transmitted comprises:

3. The method of claim 2, wherein the field mapping is performed on each information index field of each internet of things terminal operation information space in the internet of things terminal operation information queue according to a preset index field mapping rule to obtain a first mapping result array composed of mapping results corresponding to each information index field, and the information category analysis is performed on each first mapping result array to obtain the information category label of each information index field in each internet of things terminal operation information space in the internet of things terminal operation information queue, and the method comprises the following steps:

4. The method of claim 2, wherein the field mapping is performed on each information index field of each internet of things terminal operation information space in the internet of things terminal operation information queue according to a preset index field mapping rule to obtain a first mapping result array composed of mapping results corresponding to each information index field, and the information category analysis is performed on each first mapping result array to obtain the information category label of each information index field in each internet of things terminal operation information space in the internet of things terminal operation information queue, and the method comprises the following steps:

5. The method of claim 1, wherein the information category label comprises: an operation attribute label of terminal operation information and an internet of things information security level label indicating the internet of things information security level corresponding to the target internet of things information are preset in the target internet of things information;

6. The method of claim 1, wherein performing information security protection processing on each piece of to-be-processed internet-of-things information of the first internet-of-things information transmission layer by using a corresponding internet-of-things information inter-layer transmission security processing protocol for a corresponding information category of each piece of to-be-processed internet-of-things information to obtain target terminal operation information for transmission from the first internet-of-things information transmission layer to the second internet-of-things information transmission layer comprises:

7. The method of claim 6, wherein the field mapping is performed on each piece of to-be-processed IOT information according to a preset index field mapping rule to obtain a second mapping result array, the information labeling is performed on corresponding information parameters of the target IOT information in each second mapping result array to obtain a third mapping result array after the information labeling, and the information security protection processing is performed on each third mapping result array to obtain the target terminal operation information, and the method comprises the following steps:

8. The method according to claim 7, wherein the performing information security protection processing on each third mapping result array to obtain the target terminal operation information includes any one of the following methods:

9. The method according to any one of claims 1 to 8, wherein the first and second internet-of-things information transmission layers are each one of a sensing layer, a network layer, and an application layer.

10. An information processing system based on internet of things security service, comprising an internet of things security service platform and a plurality of internet of things terminal devices in communication connection with the internet of things security service platform, wherein the internet of things security service platform comprises a processor and a machine-readable storage medium, the machine-readable storage medium is connected with the processor, the machine-readable storage medium is used for storing programs, instructions or codes, and the processor is used for executing the programs, instructions or codes in the machine-readable storage medium to realize the information processing method based on internet of things security service according to any one of claims 1 to 9.