基于Emqx broker架构的物联平台设备数据安全研究

Research on Device Data Security of IOT Platform Based on Emqx broker Architecture

在电力物联网的建设中,不同种类的设备将会被大量接入,设备数据的安全尤为重要,若在物联平台建设过程中,安全性考虑不足或存在漏洞,将给设备厂商带来安全风险,所以在设备接入、设备数据上报、设备连接通道等各个环节都需要考虑安全性方案,为此该文提出在物联平台(Stariot)建设中,基于Emqx broker架构物联平台设备数据安全方案,方案以Emqx broker架构为基础,进行针对性优化改造,设计一套安全机制,数据通道使用双向传输层安全性协议(Transport Layer Security,TLS)机制进行验签,连接消息服务器时使用emqx_auth_mysql插件认证物联平台租户的用户名/密码,设计数据传输使用国密算法加解密并满足规则引擎要求,实现设备的安全接入和数据的安全传输。

In the construction of the ubiquitous power Internet of Things,different types of Intelligent devices will be accessed in large quantities,the security of equipment data is particularly important.In the process of building the IOT management platform(Stariot),insufficient security consideration or loopholes will bring security risks to equipment manufacturers.Therefore,security scheme should be considered in all sections of equipment access,equipment data reporting,equipment security channel.In order to solve this problem,this paper proposes a device data security scheme based on Emqx broker architecture in IOT platform construction.The scheme is based on Emqx broker architecture and is optimized pertinently.The data channel uses two-way Tansport Layer Security(TLS)for signature verification,and emqx_auth_mysql plug-in is used to authenticate the user name and password of IOT management platform tenants when connecting to the message server.The design of data transmission uses the encryption and decryption of national secret algorithm and meets the requirements of the rule engine to realize the safe access of equipment and the safe transmission of data.