Method for encryption and decryption, programmable switch and computer program product

1. A method, comprising:

receiving, at a programmable switch, encrypted data directed to an Internet of Things (IoT) device, the encrypted data being encrypted using a public key of the programmable switch;

decrypting the encrypted data using a private key of the programmable switch to obtain decrypted data; and

sending the decrypted data from the programmable switch to the IoT device;

wherein the private key is set based at least in part on input from the IoT device and associated in the programmable switch with a designated source address of a source different from the IoT device;

wherein the decrypting of the encrypted data using the private key is triggered responsive to a determination by the programmable switch that the encrypted data was received from the source address; and

wherein the programmable switch comprises an edge switch of an edge device configured to couple the IoT device to a network, the edge switch implementing a plurality of serverless functions including at least a first serverless function for performing encryption operations in the edge switch and a second serverless function for performing decryption operations in the edge switch;

the method further comprising:

receiving, from the IoT device, a decryption request for one or more packets having the source address, the decryption request being received prior to receipt of a given one of the one or more packets from the source address;

based on a determination that the given packet is received from the source address, decrypting the given packet by the programmable switch; and

performing online authentication of the IoT device via the programmable switch utilizing an additional cryptographic function implemented in the programmable switch.

2. The method of claim 1 , wherein the encrypted data is received from user equipment, and the decrypted data contains an execution command, the method further comprising:

receiving an execution result of the execution command from the IoT device;

encrypting the execution result using a public key of the user equipment; and

sending the encrypted execution result to the user equipment.

3. The method of claim 1 , wherein performing online authentication of the IoT device via the programmable switch utilizing an additional cryptographic function implemented in the programmable switch comprises:

authenticating the IoT device online by implementing an asymmetric encryption function for the IoT device in the programmable switch.

4. The method of claim 3 , wherein authenticating the IoT device online comprises:

receiving a device identifier of the IoT device and a token for authentication from the IoT device;

encrypting the device identifier and the token using a public key of an authentication server;

sending the device identifier and the token that are encrypted to the authentication server; and

receiving an authentication response message from the authentication server, the authentication response message being encrypted using the public key of the programmable switch.

5. The method of claim 4 , wherein authenticating the IoT device online further comprises:

decrypting the authentication response message using the private key of the programmable switch to obtain an authentication result; and

based on a determination that the authentication result indicates that the IoT device has passed the authentication:

granting an access right to the IoT device;

storing the device identifier of the IoT device and a corresponding port; and

sending an indication of authentication success to the IoT device.

6. The method of claim 1 , further comprising:

sending, based on a determination that a request for a serverless list is received from the IoT device, the serverless list to the IoT device;

receiving, from the IoT device, an encryption request for one or more packets associated with a destination address; and

based on a determination that a given packet directed to the destination address is received from the IoT device, encrypting the given packet by the programmable switch.

7. The method of claim 1 , further comprising:

generating an asymmetric key using a processing unit in the programmable switch, the asymmetric key including the public key and private key of the programmable switch; and

performing at least one of asymmetric encryption and asymmetric decryption using a programmable switch chip in the programmable switch.

8. A programmable switch, comprising:

a processing unit; and

a memory coupled to the processing unit and storing instructions that, when executed by the processing unit, perform the following actions:

receiving encrypted data directed to an Internet of Things (IoT) device, the encrypted data being encrypted using a public key of the programmable switch;

decrypting the encrypted data using a private key of the programmable switch to obtain decrypted data; and

sending the decrypted data to the IoT device;

wherein the private key is set based at least in part on input from the IoT device and associated in the programmable switch with a designated source address of a source different from the IoT device;

wherein the decrypting of the encrypted data using the private key is triggered responsive to a determination by the programmable switch that the encrypted data was received from the source address; and

wherein the programmable switch comprises an edge switch of an edge device configured to couple the IoT device to a network, the edge switch implementing a plurality of serverless functions including at least a first serverless function for performing encryption operations in the edge switch and a second serverless function for performing decryption operations in the edge switch;

the actions further comprising:

receiving, from the IoT device, a decryption request for one or more packets having the source address, the decryption request being received prior to receipt of a given one of the one or more packets from the source address;

based on a determination that the given packet is received from the source address, decrypting the given packet by the programmable switch; and

performing online authentication of the IoT device via the programmable switch utilizing an additional cryptographic function implemented in the programmable switch.

9. The programmable switch of claim 8 , wherein the encrypted data is received from user equipment, the decrypted data contains an execution command, and the actions further comprise:

receiving an execution result of the execution command from the IoT device;

encrypting the execution result using a public key of the user equipment; and

sending the encrypted execution result to the user equipment.

10. The programmable switch of claim 8 , wherein performing online authentication of the IoT device via the programmable switch utilizing an additional cryptographic function implemented in the programmable switch comprises:

authenticating the IoT device online by implementing an asymmetric encryption function for the IoT device in the programmable switch.

11. The programmable switch of claim 10 , wherein authenticating the IoT device online comprises:

receiving a device identifier of the IoT device and a token for authentication from the IoT device;

encrypting the device identifier and the token using a public key of an authentication server;

sending the device identifier and the token that are encrypted to the authentication server; and

receiving an authentication response message from the authentication server, the authentication response message being encrypted using the public key of the programmable switch.

12. The programmable switch of claim 11 , wherein authenticating the IoT device online further comprises:

decrypting the authentication response message using the private key of the programmable switch to obtain an authentication result; and

based on a determination that the authentication result indicates that the IoT device has passed the authentication:

granting an access right to the IoT device;

storing the device identifier of the IoT device and a corresponding port; and

sending an indication of authentication success to the IoT device.

13. The programmable switch of claim 8 , wherein the actions further comprise:

sending, based on a determination that a request for a serverless list is received from the IoT device, the serverless list to the IoT device;

receiving, from the IoT device, an encryption request for one or more packets associated with a destination address; and

based on a determination that a given packet directed to the destination address is received from the IoT device, encrypting the given packet by the programmable switch.

14. The programmable switch of claim 8 , further comprising:

a processing unit configured to generate an asymmetric key that includes the public key and private key of the programmable switch; and

a programmable switch chip configured to perform at least one of asymmetric encryption and asymmetric decryption.

15. A computer program product that is tangibly stored on a non-transitory computer-readable medium and contains computer-executable instructions that, when executed, cause a computer to implement a method, the method comprising:

receiving, at a programmable switch, encrypted data directed to an Internet of Things (IoT) device, the encrypted data being encrypted using a public key of the programmable switch;

decrypting the encrypted data using a private key of the programmable switch to obtain decrypted data; and

sending the decrypted data from the programmable switch to the IoT device;

wherein the private key is set based at least in part on input from the IoT device and associated in the programmable switch with a designated source address of a source different from the IoT device;

wherein the decrypting of the encrypted data using the private key is triggered responsive to a determination by the programmable switch that the encrypted data was received from the source address; and

wherein the programmable switch comprises an edge switch of an edge device configured to couple the IoT device to a network, the edge switch implementing a plurality of serverless functions including at least a first serverless function for performing encryption operations in the edge switch and a second serverless function for performing decryption operations in the edge switch;

the method further comprising:

receiving, from the IoT device, a decryption request for one or more packets having the source address, the decryption request being received prior to receipt of a given one of the one or more packets from the source address;

based on a determination that the given packet is received from the source address, decrypting the given packet by the programmable switch; and

performing online authentication of the IoT device via the programmable switch utilizing an additional cryptographic function implemented in the programmable switch.

16. The computer program product of claim 15 , wherein the encrypted data is received from user equipment, and the decrypted data contains an execution command, the method further comprising:

receiving an execution result of the execution command from the IoT device;

encrypting the execution result using a public key of the user equipment; and

sending the encrypted execution result to the user equipment.

17. The computer program product of claim 15 , wherein performing online authentication of the IoT device via the programmable switch utilizing an additional cryptographic function implemented in the programmable switch comprises:

authenticating the IoT device online by implementing an asymmetric encryption function for the IoT device in the programmable switch.

18. The computer program product of claim 17 , wherein authenticating the IoT device online comprises:

receiving a device identifier of the IoT device and a token for authentication from the IoT device;

encrypting the device identifier and the token using a public key of an authentication server;

sending the device identifier and the token that are encrypted to the authentication server; and

receiving an authentication response message from the authentication server, the authentication response message being encrypted using the public key of the programmable switch.

19. The computer program product of claim 15 , wherein the method further comprises:

sending, based on a determination that a request for a serverless list is received from the IoT device, the serverless list to the IoT device;

receiving, from the IoT device, an encryption request for one or more packets associated with a destination address; and

based on a determination that a given packet directed to the destination address is received from the IoT device, encrypting the given packet by the programmable switch.

20. The computer program product of claim 15 , wherein the method further comprises:

generating an asymmetric key using a processing unit in the programmable switch, the asymmetric key including the public key and private key of the programmable switch; and

performing at least one of asymmetric encryption and asymmetric decryption using a programmable switch chip in the programmable switch.