Granted Patent B2

US 12,566,827 · App. 18/694,367 · Granted Mar 3, 2026

Inventor: Xuesong Wang (Shanghai, CN)

Assignee: Hangzhou AliCloud Feitian Information Technology Co., Ltd.

G06F21/108H04L9/32

Abstract

Claims (56)

1 . A method for data processing based on Internet of Things, applied to an Internet of Things platform, comprising:

receiving an authorization request message sent by an Internet of Things device, wherein the Internet of Things device is deployed with encrypted target content, and the authorization request message carries a device identification and an authentication code of the Internet of Things device;

performing verification on the Internet of Things device according to the device identification and the authentication code, and generating a first authorization license specific to the Internet of Things device after the verification of the Internet of Things device is passed; and

sending the first authorization license to the Internet of Things device to enable the Internet of Things device to adopt the first authorization license to decrypt the encrypted target content and use decrypted target content.

2 . The method according to claim 1 , before generating the first authorization license specific to the Internet of Things device, further comprising:

generating a second authorization license for original target content, wherein the second authorization license comprises key information for encrypting the original target content; and

obtaining authorization license configuration information, and generating a third authorization license based on the second authorization license and the authorization license configuration information; wherein the third authorization license comprises the second authorization license and the authorization license configuration information;

wherein the generating the first authorization license specific to the Internet of Things device comprises:

generating the first authorization license specific to the Internet of Things device according to the third authorization license.

3 . The method according to claim 2 , before generating the second authorization license for the original target content, further comprising:

obtaining the original target content; and

performing encryption on the original target content, and deploying the encrypted target content to the Internet of Things device.

4 . The method according to claim 2 , wherein the authorization license configuration information comprises:

information on a number of devices of authorization license, and information on an effective duration of authorization license.

5 . The method according to claim 1 , before receiving the authorization request message sent by the Internet of Things device, further comprising:

establishing a message channel with the Internet of Things device after the Internet of Things device is started.

6 . The method according to claim 1 , wherein the authentication code is one-off authentication data generated based on an authentication key or a device root-of-trust of the Internet of Things device, and the Internet of Things device performs an authentication code generation every time the Internet of Things device uses the authentication code for authentication.

7 . A method for data processing based on Internet of Things, applied to an Internet of Things device, wherein the Internet of Things device is deployed with encrypted target content, and the method comprises:

sending an authorization request message to an Internet of Things platform when a use of the encrypted target content is triggered, wherein the authorization request message carries a device identification and an authentication code of the Internet of Things device; and

receiving a first authorization license sent by the Internet of Things platform, and adopting the first authorization license to decrypt the encrypted target content and use decrypted target content; wherein the first authorization license is generated specific to the Internet of Things device after the Internet of Things platform performs verification on the Internet of Things device according to the device identification and the authentication code and the verification of the Internet of Things device is passed.

8 . The method according to claim 7 , further comprising:

storing the first authorization license locally and binding the first authorization license to the Internet of Things device.

9 . The method of claim 7 , wherein the sending the authorization request message to the Internet of Things platform when the use of the encrypted target content is triggered comprises:

loading and verifying an authorization license for the encrypted target content when the use of the encrypted target content is triggered, and sending the authorization request message to the Internet of Things platform when an abnormal condition occurs during the loading or verifying process,

wherein an abnormal condition occurring during the loading or verifying process comprises any of the following:

there is no authorization license for the encrypted target content locally stored on the Internet of Things device, or an authorization license for the encrypted target content stored locally on the Internet of Things device is invalid.

10 . The method according to claim 7 , wherein the authentication code is one-off authentication data generated based on an authentication key or a device root-of-trust of the Internet of Things device, and the Internet of Things device performs an authentication code generation every time the Internet of Things device uses the authentication code for authentication.

11 . An apparatus for data processing based on Internet of Things, applied to an Internet of Things platform, comprising:

a processor and a memory stored with computer program instructions capable of running on the processor; wherein when the computer program instructions are executed by the processor, the processor is enabled to:

receive an authorization request message sent by an Internet of Things device, wherein the Internet of Things device is deployed with encrypted target content, and the authorization request message carries a device identification and an authentication code of the Internet of Things device;

perform verification on the Internet of Things device according to the device identification and the authentication code, and generate a first authorization license specific to the Internet of Things device after the verification of the Internet of Things device is passed; and

send the first authorization license to the Internet of Things device to enable the Internet of Things device to adopt the first authorization license to decrypt the encrypted target content and use decrypted target content.

12 . An apparatus for data processing based on Internet of Things, applied to an Internet of Things device, wherein the Internet of Things device is deployed with encrypted target content, and the apparatus comprises:

a processor; and

a memory stored with computer program instructions capable of running on the processor; wherein when the computer program instructions are executed by the processor, the processor is enabled to perform the method according to claim 7 .

13 . The apparatus according to claim 11 , wherein when the computer program instructions are executed by the processor, the processor is further enabled to:

generate a second authorization license for original target content, wherein the second authorization license comprises key information for encrypting the original target content;

obtain authorization license configuration information, and generating a third authorization license based on the second authorization license and the authorization license configuration information; wherein the third authorization license comprises the second authorization license and the authorization license configuration information; and

generate the first authorization license specific to the Internet of Things device according to the third authorization license.

14 . The apparatus according to claim 13 , wherein when the computer program instructions are executed by the processor, the processor is further enabled to:

obtain the original target content; and

perform encryption on the original target content, and deploy the encrypted target content to the Internet of Things device.

15 . The apparatus according to claim 13 , wherein the authorization license configuration information comprises:

information on a number of devices of authorization license, and information on an effective duration of authorization license.

16 . The apparatus according to claim 11 , before receiving the authorization request message sent by the Internet of Things device, further comprising:

establish a message channel with the Internet of Things device after the Internet of Things device is started.

17 . The apparatus according to claim 11 , wherein the authentication code is one-off authentication data generated based on an authentication key or a device root-of-trust of the Internet of Things device, and the Internet of Things device performs an authentication code generation every time the Internet of Things device uses the authentication code for authentication.

18 . The apparatus according to claim 12 , wherein when the computer program instructions are executed by the processor, the processor is further enabled to:

store the first authorization license locally and bind the first authorization license to the Internet of Things device.

19 . The apparatus according to claim 12 , wherein when the computer program instructions are executed by the processor, the processor is further enabled to:

load and verify an authorization license for the encrypted target content when the use of the encrypted target content is triggered, and send the authorization request message to the Internet of Things platform when an abnormal condition occurs during the loading or verifying process,

wherein an abnormal condition occurring during the loading or verifying process comprises any of the following:

there is no authorization license for the encrypted target content locally stored on the Internet of Things device, or an authorization license for the encrypted target content stored locally on the Internet of Things device is invalid.

20 . The apparatus according to claim 12 , wherein wherein the first authorization license specific to the Internet of Things device is generated according to a third authorization license;

wherein the third authorization license is generated by the Internet of Things platform according to a second authorization license and authorization license configuration information, wherein the third authorization license comprises the second authorization license and the authorization license configuration information;

wherein the second authorization license is generated, by the Internet of Things platform, for original target content, wherein the second authorization license comprises key information for encrypting the original target content.

Assignments (2)

Priority Claims (1)

Continuity (1)

References Cited (22)