彩客网

将物联网设备连接到云端的安全解决方案
来源: 电子发烧友    发布时间: 2019-03-27 10:46   652 次浏览   大小:  16px  14px  12px
将物联网设备连接到云端的安全解决方案

彩客网  JINGUANRENMENYUELAIYUEYISHIDAOXUYAOANQUANXING,DANKAIFARENYUANJINGCHANGFAXIANZIJIZAIANQUANXINGFANGMIANCAIQULEKUAIJIEFANGSHI,JIANGWULIANWANGSHEBEILIANJIEDAOYUNDUAN。ZAIXUDUOQINGKUANGXIA,HESHIDEANQUANJIZHIDEFUZAXING,WEIXINGDIANCHIGONGDIANDEWULIANWANGSHEBEIZHONGKEYONGDEYOUXIANNEICUNHECHULIZIYUANYIJIYUNSHUCHANPINDEXUQIUZHIJIANDECHONGTUSIHUSHIBUKEKEFUDE。

  JIEJUEZHEIXIEWENTIHEWEIJIANHUAWULIANWANGSHEBEIZHONGANQUANGONGNENGDESHISHI,Microchip TechnologyHEGoogleHEZUOCHUANGJIANLEYIZHONGFANGFA,JIANGMicrochipDEANQUANYINGJIANGONGNENGYUCHENGWEIJSON WebLINGPAI(JWT)DEJIANDANSHUJUJIEGOUXIANGJIEHE。JIEGUOSHIQUEBAOWULIANWANGSHEBEIYUGoogle Cloud IoTHEXINFUWUZHIJIANXIANGHUSHENFENYANZHENGDEJIANBIANFANGFA。

  BENWENJIANGJIESHAOWULIANWANGSHEBEIANQUANWEIXIE,BINGJIESHAODANGQIANYONGYUYINGDUIGAIWEIXIEDESHEBEI。TAJIANGQUEDINGANQUANLOUDONGYIJIKAIFARENYUANHEQIANRUSHIXITONGSHEJIRENYUANRUHESHIYONGJWTGUANBITAMEN。

  WULIANWANGSHEBEIDEANQUANLOUDONG

彩客网  DUIWULIANWANGSHEBEIDEGONGJIKEYICAIQUDUOZHONGXINGSHI,JUEBUJINXIANYUDAGUIMODEWULIANWANGBUSHU。DUIYUXIWANGLIYONGYONGYUFENBUSHIJUJUEFUWU(DDoS)GONGJIDEJIANGSHIWANGLUOZHONGDEXUDUODANGESHEBEIDEZIYUANDEHEIKELAISHUO,JISHISHIZUIXIAODEWULIANWANGYESHIYIGEHENYOUXIYINLIDEMUBIAO。YINCI,MEIYILEIWULIANWANGSHEBEIDESHEJIZHEDOUBUKEBIMIANDIXUYAOTONGGUOJIYUYINGJIANDEQIANGDAANQUANJIZHILAIBAOHUTAMENDEXITONG,CONGERZUZHIGONGJI。

  LIRU,SHIYONGXITONGNEICUNHUOSHANCUNCUNCHUYONGYUJIAMIHESHENFENYANZHENGDESIYAOHUISHIIoTSHEBEIRONGYISHOUDAOGONGJI。GENGZAOGAODESHI,HEIKEKEYIQIEQUZHEIXIEMIYAOBINGSHIYONGTAMENLAIFANGWENWULIANWANGWANGLUOHEFUJIADEGONGSIZIYUAN。

  ANQUANIC

彩客网  Microchip TechnologyDECryptoMemoryHECryptoAuthentication ICDENGZHUANYONGANQUANSHEBEIJUYOUYINGJIANGONGNENGJIYUBAOHUSIYAOHEQITAMIMISHUJUDEJIZHI。 EEPROMZHENLIEJICHENGZAIZHEIXIEQIJIANZHONG,TIGONGANQUANCUNCHU,ZHINENGTONGGUOQIJIANDESPIHUOI 2 CCHUANXINGJIEKOUFANGWENDEJIAMIANQUANJIZHI(TU1)。YINCI,ZHEIXIESHEBEITIGONGLEYIZHONGXIANGRENHEWULIANWANGSHEBEISHEJITIANJIAANQUANCUNCHUHEQITAANQUANGONGNENGDEJIANDANFANGFA。

  TU1:Microchip TechnologyYINGJIANANQUANSHEBEI(RUAT88SC0204C CryptoMemory IC)TIGONGANQUANCUNCHU,SHIYONGJICHENGJIAMIJIZHIBAOHUDUIPIANSHANGEEPROMDEFANGWEN。 (TUPIAN:Microchip Technology)

  Microchip CryptoAuthenticationXILIEDECHENGYUAN(RUATECC608A)ZENGQIANGLEANQUANCUNCHUJICHU,BINGZHICHIANQUANSHEJIZHONGCHANGYONGDEJIAMISUANFA。ZAIQIYINGJIANGONGNENGZHONG,GAIQIJIANJUYOUDUOZHONGSUANFADEYINGJIANJIASUGONGNENG,BAOKUO:

  FEIDUICHENGJIAMISUANFA:

彩客网  FIPS186-3TUOYUANQUXIANSHUZIQIANMINGSUANFA(ECDSA)

  FIPS SP800-56ATUOYUANQUXIANDiffie-Hellman(ECDH)

  NISTBIAOZHUNP256TUOYUANQUXIANJIAMI(ECC)

  DUICHENGJIAMISUANFA:

  SHA-256HAXIMIMASHU

彩客网  JIYUHAXIDEXIAOXISHENFENYANZHENGDAIMA(HMAC)MIMASHU

彩客网  AES-128MIMASHU

  AES-GCM( GaloisZIDUANCHENGFA)MIMAXUE

  MIYAOPAISHENGHANSHU(KDF):

  WEISUIJIHANSHU(PRF)KDF

  JIYUHMACDETIQU - BINGQIEKUOZHANKDF(HKDF)

彩客网  DUIYUJIAMIZHUANJIALAISHUO,ZHEIZUJIAMIGONGNENGDAIBIAOLEZHICHIGENGGAOJIBIEANQUANXIEYISUOXUDEQUANMIANJIZHILIEBIAO。SHENFENYANZHENGHEANQUANSHUJUJIAOHUAN。LIRU,KDFGONGNENGTIGONGLECHUANSHUCENGANQUANXING(TLS)XIEYISUOXUDEJIBENJIZHI,YONGYUZAIJIAOHUANSHENZHIKAISHIZHIQIANYANZHENGSHUJUJIAOHUANHUIHUAZHONGDECANYUZHE。

彩客网  ZAICIXIEYIZHONG,TLSHUIHUAYIKEHUDUANXIANGFUWUQIFASONGQIDONGANQUANHUIHUADEQINGQIU。FUWUQISHIYONGQISHUZIZHENGSHUJINXINGXIANGYING,KEHUDUANSHIYONGGAIZHENGSHULAIQUERENFUWUQIDESHENFEN。ZAIKEHUDUANYIZHEIZHONGFANGSHIYANZHENGFUWUQIZHIHOU,HUIHUASHEZHIJIXUTONGGUOSHIYONGFUWUQIDEGONGYAOLAISHENGCHENGHUIHUAMIYAO,YIJIAMISHIYONGPRF KDFHUOGENGQIANGDADEHDKFCHUANGJIANDEYIXIESUIJIZHI。

  TLSSHENFENYANZHENGXIEYISHIInternetANQUANDEJICHU。CHENGWEIZHENGSHUBANFAJIGOU(CA)DEZHENGGEZHENGSHUTIGONGSHANGXINGYEYIJINGFAZHANWEIZHICHIANQUANTONGXINDEZHEIYIGUANJIANZUJIAN。GONGSICONGCAHUODEKEXINZHENGSHU,YIBIANZAIZIJIDEFUWUQISHANGANZHUANG,YIZHICHISHANGSHUBIAOZHUNTLSFUWUQISHENFENYANZHENGXIEYI。

  DUIYUWULIANWANGYINGYONG,WANGLUOYUGONGSIGUANGFANERSHENRUDILIANJIE,ZHEIZHONGDANXIANGRENZHENGBUZUYIQUEBAOBAOHU。LIRU,JUYOUQIZHAXINGZHENGSHUDEHEIKEKEYIJIANGZIJIBIAOSHIWEIWULIANWANGSHEBEIDEHEFAFUWUQI,ZUOWEIGENGGUANGFANGONGJIDEYIBUFEN。

  JINGUANCUNZAIFENGXIAN,DANWULIANWANGKAIFARENYUANJINGCHANGNANYISHISHITLSXIANGHUSHENFENYANZHENGXIEYI,YINWEIZHENGSHU,MIYAO,SHIYONGTLSSHIXIANKEHUDUANSHENFENYANZHENGSUOXUDERUANJIANKENENGHUICHAOCHUXUDUOWULIANWANGSHEBEIDEGONGNENG。TONGGUOHEZUO,Microchip TechnologyHEGoogleCHUANGJIANLEYIZHONGTIDAIFANGFA,JIANGATECC608AGONGNENGYUCHENGWEIJSON WebLINGPAI(JWT)DEJIANDANSHUJUJIEGOUXIANGJIEHE。JIEGUOSHIQUEBAOWULIANWANGSHEBEIYUGoogle Cloud IoTHEXINFUWUZHIJIANXIANGHUSHENFENYANZHENGDEJIANBIANFANGFA。

  JIYUJWTDESHENFENYANZHENG

彩客网  ZAIRFC 7519ZHONGZHIDING,JWTSHIXINGYEBIAOZHUNRONGQIGUANYUZHUNBEIHECHUANSHUJWTDESHITIDEXINXI,CHENGWEISUOPEI。 JWTJIEGOUBENSHENBAOHANSANGEBUFEN:

  BIAOTI,BAOKUOJSONMINGCHENG:MIMASUANFADEMINGCHENG(“alg”)DEZHIDUI(LIRU,ECDSADE“EC256”SHIYONGNIST P-256QUXIAN)YONGYUQIANSHULINGPAIHELINGPAIDELEIXING(“typ”)(ZHEIXIELINGPAIDE“JWT”)

彩客网  Payload,BAOKUOJSONMINGCHENG:MEIGESUOPEIDEZHIDUI

  QIANMING,TASHIYONGBIAOTOUZHONGZHIDINGDESUANFALAIBIANMAMIYAOYIJIBIAOTOUHESHENGMINGJI,MEIGEDANDUZHUANHUANWEIJIAMIQIANDEbase64 URLBIANMABIAOSHI

  RFC 7519WEIZAIYOUXIAOFUZAIHUOQITABUFENZHONGZHIDINGSHENGMINGTIGONGLEJIDADELINGHUOXING。GAIBIAOZHUNSHENZHIYUNXUZAIMEIYOUQIANMINGHUOJIAMIDEQINGKUANGXIACHUANGJIANDEBUANQUANJWT,ZAIZHEIZHONGQINGKUANGXIA,BIAOTOUJIANGBAOKUOSUANFADEMINGCHENG:ZHIDUI{{alg“:”none“}。DUIYUYUGoogle Cloud IoTHEXINFUWUYIQISHIYONGDEJWT,GoogleXUYAOQIANMINGBUFENYIJIBAOHANSANGEQIANGZHISHENGMINGDEYOUXIAOFUZAI,BAOKUO:

  “iat” - YIISO 8601 UTCSHIJIANCHUOGESHICHUANGJIANLINGPAISHIDE“BANFASHIJIAN”,ZI1970-01-01T00:00:00ZYILAIDEMIAOSHU(LIRU,2019NIAN6YUE30RIDE1561896000 12 :GELINWEIZHIBIAOZHUNSHIJIAN00:00 PM)

  “exp” - ZHIDINGLINGPAIDAOQISHIJIANDEUTCSHIJIANCHUO,ZUIDA24XIAOSHICHAOGUO“iat”ZHIJIASHANG10FENZHONGKUANXIANQI,YIJIEJUEBUTONGZHIJIANDEXITONGSHIZHONGPIANCHAKEHUDUANHEFUWUQI(LIRU,2019NIAN7YUE1RI1561982400,GELINWEIZHIBIAOZHUNSHIJIAN00:00 00:00)

彩客网  “aud” - BAOHANKAIFARENYUANGoogle CloudXIANGMUIDDEZIFUCHUAN

彩客网  < p> GoogleDEWULIANWANGSHEBEISHENFENYANZHENGFANGANJIANGJIYUTLSDECHANGGUIFUWUQISHENFENYANZHENGYUSHIYONGZHEIXIEXIANGDUIJIANDANDESHENGMINGCHUANGJIANDEJWTJINXINGWULIANWANGSHEBEISHENFENYANZHENGXIANGJIEHE。YAOQIDONGXINHUIHUA,IoTSHEBEIHUIDAKAIYIGEDAOFUWUQIDEANQUANTAOJIEZI,BINGSHIYONGQIANMIANMIAOSHUDEXIANGTONGTLSXIEYIDUIFUWUQIJINXINGSHENFENYANZHENG。

彩客网  CIGUOCHENGDEXIAYIBUYILAIYUGoogle IoTYUNDUIYONGYUWULIANWANGWANGLUOSHIWUDEQINGLIANGJIXIAOXIDUILIEYAOCECHUANSHU(MQTT)XIEYI。SHIYONGANQUANTAOJIEZIDAOJINGGUOSHENFENYANZHENGDEFUWUQI,IoTSHEBEISHIYONGQIWEIYIDEJWTZUOWEIDENGLUMIMA“DENGLU”DAOGAIFUWUQIDEMQTTZHUJIFUWU(QINGDAN1)。

将物联网设备连接到云端的安全解决方案

彩客网  SUIRANIoTSHEBEIFASONGYONGHUMINGZUOWEICIDENGLUXULIEDEYIBUFEN,DANYONGHUMINGBUYONGYUSHENFENYANZHENG。YINCI,CHUANSHULEYIGEXUNIYONGHUMING(QINGDAN2)。XIANGFAN,IoTSHEBEIDERENZHENGJIYUZUOWEIDENGLUMIMAFASONGDEJWTJINXING。YOUYUJWTQIANMINGSHIBIAOTOU,YOUXIAOFUZAIHESHEBEISIYAODEZUHE,YINCIGoogle Cloud IoTHEXINFUWUKEYIYANZHENGJWTSHIFOUZHENZHENGLAIZISHOUQUANSHEBEI。DUIYUCIYANZHENG,Google Cloud IoTFUWUSHIYONGYIQIANYOUIoTSHEBEIKAIFARENYUANSHIYONGXIASHUMIYAOGUANLILIUCHENGCUNCHUZAIGoogleYUNZHONGDESHEBEIGONGYAO。YUDANDUSHIYONGTLSXIANGBI,CIFANGFATONGGUOHUNHEFANGFATIGONGXIANGHUSHENFENYANZHENG,CONGERJIAKUAILIUCHENG,TONGSHIJIANGDIWULIANWANGSHEBEIZIYUANXUQIU。

将物联网设备连接到云端的安全解决方案

  GUANJIANSHINENGQI

彩客网  ATECC608AJIQIGONGYINGLIANDEGONGNENGSHICIFANGFADEGUANJIANTUIDONGYINSU。SUIRANRENHEMCUZUIZHONGDOUKEYICONGJWTBAOTOUHEYOUXIAOFUZAISHENGCHENGJIAMIJIAMIQIANMING,DANRENHEJINSHIYONGRUANJIANZHIXINGDEFANGFAZAIMEIYOUJIYUYINGJIANDEANQUANMIYAOCUNCHUDEQINGKUANGXIARENGRANRONGYISHOUDAOGONGJI。CIWAI,DUIYUXUDUOZIYUANYOUXIANDEWULIANWANGSHEBEIHUOJUYOUYANGEXIANGYINGSHIJIANYAOQIUDEYINGYONG,“JINRUANJIAN”SHIXIANSUOXUDECHULIQIFUZAIHEZHIXINGYANCHIKENENGSHIJINZHIDE。ZUIHOU,MEIYOUFENGFUDEANQUANSUANFAHEGENGGAOJIXIEYIJINGYANDEKAIFARENYUANHENNANSHIXIANSUOXUDERUANJIANGONGNENG。 MicrochipTONGGUOQICryptoAuthLibKUJIEJUELEZHEIXIEWENTI(TU2)。

将物联网设备连接到云端的安全解决方案

  TU2:YINWEICryptoAuthLibSHIYONGYINGJIANCHOUXIANGCENG(HAL)JIANGAPIHANSHUHEHEXINJIYUANYUDICENGYINGJIANFENKAI,SUOYIKAIFARENYUANKEYIDINGWEITAMENDESHIYONGYUGEZHONGZHICHISHEBEIDERUANJIAN。 (TUPIAN:Microchip Technology)

彩客网  Microchip CryptoAuthLibJIANHUALEANQUANIoTGONGNENGDESHIXIAN,LIRUGoogle JWTSHENFENYANZHENGXIEYI,JIANGFUZADEANQUANCAOZUOJIANHUAWEITONGGUOCryptoAuthLibYINGYONGCHENGXUBIANCHENGJIEKOU(API)TIGONGDEYIZUHANSHUDIAOYONG。DUIYUWULIANWANGKAIFARENYUANERYAN,ZUIZHONGYAODEKENENGSHIMicrochip CryptoAuthLibHEXINGONGNENGCHONGFENLIYONGLEZHURUATECC608AZHILEIDEMicrochipJIAMIIC,KEJIAKUAISHEJIZHONGANQUANGONGNENGDEZHIXINGSUDU。LIRU,QINGDAN1ZHONGDUIatca_jwt_finalize()DEDIAOYONGSHIYONGKEYONGDEJIAMISHEBEI(RUATECC608A)LAICHUANGJIANYONGZUOQINGDAN2ZHONGMIMADEJWT。ZAIZHEIZHONGQINGKUANGXIA,ATECC608AJIASUJWTQIANMINGDEJIAMI,DUQUSHEJIDESIYOULAIZIQIJICHENGANQUANCUNCHUDEGUANJIAN,YIWANCHENGQIANMIANMIAOSHUDEQIANMINGCHUANGJIANGUOCHENG。

  RANER,JISHISHIYONGFUZADERUANJIANHEANQUANSHEBEI,YOUYUCHUANTONGSHANGGUANLIMIYAOHEZHENGSHUSUOXUDEFANGFA,WULIANWANGSHEBEIRENGRANRONGYISHOUDAOGONGJI。GUOQU,SIYAOXUYAOZAIWAIBUSHENGCHENGBINGZAIZHIZAO,FENFASHENZHIBUSHUQIJIANJIAZAIDAOANQUANCUNCHUSHEBEIZHONG。JISHISHIYONGYINGJIANANQUANMOKUAIHEANQUANSHESHI,ZAI“XUYAOZHIDAO”TAMENDEWEIYISHEBEIZHIWAIDUANZANCUNZAIZHEIXIEMIMIDAIBIAOLEKENENGDAOZHIQIYIWAIHUOYITUBAOLUDEANQUANRUODIAN。TONGGUOLIYONGATECC608ADEGONGNENG,MicrochipHEGoogleZAIHENDACHENGDUSHANGXIAOCHULECHUANTONGDEANQUANLOUDONG。

彩客网  ZAIZHEIZHONGXINFANGFAZHONG,MicrochipSHIYONGATECC608ASHENGCHENGMIYAODUIDENENGLI,ERWUXUSIYAOLIKAISHEBEI(TU3)。RANHOU,MicrochipSHIYONGZHONGJIANZHENGSHUDUISHEBEISHENGCHENGDEGONGYAOJINXINGQIANMING,GAIZHENGSHUYOUKEHUTIGONGBINGCUNCHUZAIMicrochipANQUANSHESHINEIDEANQUANFUWUQIZHONG。ZUIHOU,MicrochipANQUANDIJIANGGONGYAOCHUANSHUDAOGoogle Cloud IoTSHEBEIGUANLIQIZHONGDEKEHUZHANGHU,GAISHEBEIGUANLIQIKEWEIMEIGESHEBEICUNCHUZUIDUOSANGEGONGYAO,YIZHICHIMIYAOLUNHUANCELVE。BUSHUHOU,IoTSHEBEIKEYISHIYONGATECC608AANQUANGONGNENGLAICHUANGJIANQIANMIANMIAOSHUDEXIANGHUSHENFENYANZHENGGUOCHENGZHONGSHIYONGDEJWT。

将物联网设备连接到云端的安全解决方案

彩客网  TU3:Microchip TechnologyHEGoogle Cloud IoTFUWUXIANGJIEHE,JIANHUALEMIYAOHEZHENGSHUDEPEIZHI,TIGONGLEYIZHONGZHIZAIJIAQIANGIoTYINGYONGANQUANXINGDESHOUBAOHUJIZHI。 (TUPIAN:GUGE)

  MicrochipHEGoogleZHIJIANDECICIHEZUORANGKAIFARENYUANKEYIWANQUANXIEZAIZHEIYIGUANJIANMIYAOGUANLILIUCHENG。DUIYUZIDINGYIYAOQIU,KAIFARENYUANKEYISHIYONGCryptoAuthLib APIHANSHUatcab_genkey()SHIXIANZIJIDEMIYAOGUANLIGUOCHENG,ZHEIHUIDAOZHIATECC608ASHENGCHENGMIYAODUI,JIANGSIYAOCUNCHUZAIQIANQUANCUNCHUZHONG,BINGFANHUIGUANLIANDEGONGYAO。/p>

彩客网  WEILETANSUOMIYAOSHENGCHENGHEQITAATECC608AANQUANGONGNENG,KAIFARENYUANKEYIKUAISUJIANLIYIGEWEIRAOMicrochip SAM D21 Xplained ProPINGGUTAOJIANGOUJIANDEZONGHEKAIFAHUANJING。JIYUMicrochip ATSAMD21J18A 32WEIArm ® Cortex ® -M0 + MCU,SAM D21 Xplained ProTAOJIANTIGONGLEMicrochipGAOJIRUANJIANKUANGJIA(ASF)ZHICHIDEWANZHENGYINGJIANPINGTAIQUDONGCHENGXUHEDAIMAMOKUAI。

彩客网  WEILEPINGGUBAOKUOATECC608AZAINEIDECryptoAuthenticationSHEBEI,KAIFARENYUANKEYIJIANDANDIJIANGCryptoAuth XPRO-BFUJIABANCHARUXplained ProBANDELIANGGEKUOZHANTOUZHIYI。 MicrochipTIGONGLEYONGYUPINGGUCryptoAuthLibYUATECC608ADEANQUANGONGNENGDESHILIRUANJIAN。GENGJINYIBU,KAIFARENYUANKEYIJIANGMicrochip ATWINC1500-XPRO Wi-FiFUJIABANCHARULINGYIGEBIAOTOU,YIYUNXINGMicrochipSHILIRUANJIAN,GAIRUANJIANYANSHILEBENWENZHONGMIAOSHUDEXIANGHURENZHENGLIUCHENG,BAOKUOTLSFUWUQIRENZHENGHEJWTSHEBEIRENZHENG。

  结论

彩客网  SUIRANWULIANWANGYINGYONGANQUANDAILAILEDUOXIANGYAOQIU,DANGUANJIANTIAOZHANTONGCHANGZAIYUWEIWULIANWANGSHEBEIHEYUNZIYUANSHISHIXIANGHUSHENFENYANZHENG。ZAIZIYUANYOUXIANDEWULIANWANGXITONGZHONG,CHUANTONGXIEYIKENENGCHAOGUOKEYONGNEICUNHECHULIZIYUAN。SHIYONGMicrochip Technology CryptoAuthLibKUHEATECC608A CryptoAuthentication IC,KAIFARENYUANKEYISHISHIJIYUJSON Web TokensDEGENGGAOXIAOFANGFA,YIBIANJIANGIoTSHEBEIANQUANDILIANJIEDAOGoogle Cloud IoTFUWU。

百度地图 google地图 360网站安全检测平台