CN104717225B - A kind of things-internet gateway access authentication method and system - Google Patents

Abstract

The present invention provides an Internet of Things gateway access authentication method and system; the method includes: S110, after the Internet of Things device is turned on, scans the wireless channel of the corresponding access mode according to its own wireless access mode, and selects a wireless channel that meets predetermined conditions, According to predetermined rules, generate a dedicated access password for the Internet of Things to access the selected wireless channel, connect to the Internet of Things gateway, and upload device description information; S120. After the Internet of Things gateway detects that an Internet of Things device is connected, block the Internet of Things device from sending The communication of other devices or networks is authenticated according to the device description information uploaded by the IoT device. If the authentication is successful, the IoT device is allowed to access, and the data communication between the IoT device and other devices or networks is opened. The invention can facilitate the realization of plug-and-play access authentication of the Internet of things equipment.

Description

A method and system for access authentication of an internet of things gateway

technical field

The invention relates to the field of the Internet of Things, in particular to a method and system for access authentication of an Internet of Things gateway.

Background technique

With the rapid development of the Internet of Things, there may be a large number of Internet of Things devices in users' homes in the future. In order to improve the user experience, on the one hand, these IoT devices need to be easily connected to the IoT gateway to achieve plug-and-play; Therefore, it is necessary to perform access authentication for IoT devices.

At present, the research on plug-and-play of IoT devices is relatively weak. The plug-and-play of IoT devices is mainly based on a framework similar to UPnP (Universal Plug and Play) protocol; Access to the wireless channel provided by the IoT gateway, and then realize the access authentication and discovery of the IoT device through the process of service discovery and service request and response to the IoT gateway. Service discovery is mainly that the IoT device monitors the service broadcast message of the IoT gateway, and at the same time, the IoT device can also actively broadcast its own service broadcast information to the surrounding; the service request and response is mainly that the IoT device makes a service request to the gateway, and the service request It will carry its own device information, and the gateway will authenticate the device and respond to the service request, providing gateway services for IoT devices.

There are two main types of problems in realizing the access of IoT devices based on the plug-and-play technology similar to the UPnP framework: 1) Before accessing, the user needs to configure the wireless channel for the IoT device in advance, and manually set the authentication information for wireless access. There is a threshold for users to access the wireless channel provided by the IoT gateway through wireless access authentication; but if the authentication information is not set, the security will be reduced; 2) UPnP protocol is a peer-to-peer structure protocol, Its protocol and accompanying authentication process are too complex for sensor-type IoT devices with weak computing and storage capabilities.

Contents of the invention

The technical problem to be solved by the present invention is how to facilitate the realization of plug-and-play access authentication for Internet of Things devices.

In order to solve the above problems, the present invention provides a method for access authentication of an Internet of Things gateway, including:

S110. After the Internet of Things device is turned on, scan the wireless channel of the corresponding access method according to its own wireless access method, select a wireless channel that meets the predetermined conditions, generate an Internet of Things special access password according to the predetermined rule to access the selected wireless channel, and connect IoT gateway, upload device description information;

S120. After the IoT gateway detects that an IoT device is connected, it blocks the communication of the IoT device to other devices or networks, performs authentication according to the device description information uploaded by the IoT device, and allows the IoT device if the authentication is successful. Device access, and open data communication between the IoT device and other devices or networks.

Optionally, before the step S110, it also includes:

The Internet of Things gateway configures the wireless channel under the supported wireless access mode, uses the Internet of Things special wireless access identification in a predetermined format as the identification of the wireless channel, and generates the Internet of Things special access password according to predetermined rules. Access password of the wireless channel mentioned above.

Optionally, the predetermined conditions include:

The format of the identification of the wireless channel conforms to a predetermined format;

Or the identification of the wireless channel is the same as the pre-stored identification;

The step of generating a dedicated access password for the Internet of Things according to predetermined rules includes any of the following methods:

Using the preset password corresponding to the format of the identification of the wireless channel as the dedicated access password for the Internet of Things;

Using characters at one or more predetermined positions in the selected wireless channel identifier as the IoT-specific access password;

The identification of the selected wireless channel is processed in a predetermined manner, and the processing result is used as the special access password for the Internet of Things.

Optionally, after the step S120, it also includes:

If the authentication is unsuccessful, the IoT gateway pushes the device description generated according to the device description information to the IoT gateway application of the user terminal bound to the IoT gateway;

The IoT gateway receives the setting information returned by the IoT gateway application according to the user operation; if the setting information indicates that the IoT device is allowed to access, then add the device description of the IoT device to the local device library and open the data communication between the IoT device and other devices or networks; if the setting information indicates that the IoT device is not allowed to access, close the connection of the IoT device.

Optionally, the setting information also includes access permissions; the access permissions include permissions for other devices or networks to access the IoT device, and/or permissions for the IoT device to access other devices or networks;

The steps of opening the data communication between the IoT device and other devices or networks include:

Open the data communication between the IoT device and other devices or networks according to the access authority in the setting information.

The present invention also provides an Internet of Things gateway access authentication system, comprising:

The access module is set in the IoT device, and is used to scan the wireless channel of the corresponding access mode according to its own wireless access mode after the IoT device is turned on, select the wireless channel that meets the predetermined conditions, and generate the dedicated network of the Internet of Things according to the predetermined rules. Access the password to access the selected wireless channel, connect to the IoT gateway, and upload device description information;

The authentication module is set in the Internet of Things gateway, and is used to block the communication of the Internet of Things device to other devices or networks after detecting that an Internet of Things device is connected to the Internet of Things gateway. According to the device description uploaded by the Internet of Things device If the authentication is successful, the IoT device is allowed to access, and the data communication between the IoT device and other devices or networks is opened.

Optionally, the system also includes:

The configuration module is set in the Internet of Things gateway, and is used to configure the wireless channel under the supported wireless access mode, use the Internet of Things special wireless access identification in a predetermined format as the identification of the wireless channel, and follow the predetermined rules Generate the Internet of Things special access password as the access password of the wireless channel.

Optionally, the predetermined conditions include:

The format of the identification of the wireless channel conforms to a predetermined format;

Or the identification of the wireless channel is the same as the pre-stored identification;

The access module generating the Internet of Things-specific access password according to predetermined rules refers to any of the following methods:

The access module uses the preset password corresponding to the format of the identification of the wireless channel as the dedicated access password for the Internet of Things;:

The access module uses characters at one or more predetermined positions in the selected wireless channel identifier as the IoT-specific access password;

The access module processes the identifier of the selected wireless channel in a predetermined manner, and uses the processing result as the IoT-specific access password.

Optionally, the system also includes:

The control module is used to push the device description generated according to the device description information to the Internet of Things gateway application of the user terminal bound to the Internet of Things gateway when the authentication is unsuccessful; Operate the returned setting information; if the setting information indicates that the IoT device is allowed to access, add the device description of the IoT device to the local device library, and open the connection between the IoT device and other devices or networks Data communication; if the setting information indicates that the Internet of Things device is not allowed to access, then close the connection of the Internet of Things device.

Optionally, the setting information also includes access permissions; the access permissions include permissions for other devices or networks to access the IoT device, and/or permissions for the IoT device to access other devices or networks;

The control module opening the data communication between the IoT device and other devices or networks refers to:

The control module enables data communication between the IoT device and other devices or networks according to the access authority in the setting information.

The solution of the present invention can conveniently realize the plug-and-play access authentication of the IoT device. In this solution, on the one hand, a dedicated IoT wireless access identifier is used to facilitate automatic wireless access of IoT devices without user participation; on the other hand, the IoT gateway listens to the device description information uploaded by IoT devices on a dedicated channel port After extracting the intercepted device description information and pushing it to the gateway application on the user terminal, the user confirms the access authentication of the device, and the IoT gateway registers and manages the authenticated IoT device according to its device information. The IoT device only needs to store device description information, and the management of most UPnP-like protocols can be proxied by the IoT gateway.

Description of drawings

FIG. 1 is a schematic flow diagram of an Internet of Things gateway access authentication method in Embodiment 1;

FIG. 2 is a schematic flow chart of an example of Embodiment 1.

Detailed ways

The technical solution of the present invention will be described in more detail below with reference to the drawings and embodiments.

It should be noted that, if there is no conflict, the embodiments of the present invention and various features in the embodiments can be combined with each other, and all are within the protection scope of the present invention. In addition, although a logical order is shown in the flowcharts, in some cases the steps shown or described may be performed in an order different from that shown or described herein.

Embodiment 1. An Internet of Things gateway access authentication method, as shown in FIG. 1 , includes:

S110. After the Internet of Things device is turned on, scan the wireless channel of the corresponding access method according to its own wireless access method, select a wireless channel that meets the predetermined conditions, generate an Internet of Things special access password according to the predetermined rule to access the selected wireless channel, and connect IoT gateway, upload device description information;

S120. After the IoT gateway detects that an IoT device is connected, it blocks the communication of the IoT device to other devices or networks, performs authentication according to the device description information uploaded by the IoT device, and allows the IoT device if the authentication is successful. Device access, and open data communication between the IoT device and other devices or networks.

This embodiment can allow the Internet of Things device to automatically access the Internet of Things gateway under the premise of retaining the Internet of Things gateway access authentication, avoiding the user's operation; especially for some without input devices (such as keyboards), output devices (such as It is especially convenient for IoT devices with screens).

In an implementation manner of this embodiment, the predetermined conditions include:

The format of the identification of the wireless channel conforms to a predetermined format;

Or the identification of the wireless channel is the same as the pre-stored identification;

The step of generating a dedicated access password for the Internet of Things according to predetermined rules includes any of the following methods:

The preset password corresponding to the format of the identification of the wireless channel is used as the dedicated access password for the Internet of Things; that is, a preset fixed password is used according to the identification format;

Use the characters at one or more predetermined positions in the identification of the selected wireless channel as the Internet of Things-specific access password; for example, use the last 6 digits of the identification as the Internet of Things-specific access password;

The identification of the selected wireless channel is processed in a predetermined manner, and the processing result is used as the special access password for the Internet of Things; for example, each character in the identification is converted into a binary number, and the conversion result is used as the special access password for the Internet of Things.

Certainly, the IoT-specific access password may also be pre-stored in the IoT device.

When there are multiple wireless networks satisfying the predetermined condition, the one with the strongest signal may be selected.

In an implementation manner of this embodiment, before the step S110, it may further include:

The Internet of Things gateway configures the wireless channel under the supported wireless access mode, uses the Internet of Things special wireless access identification in a predetermined format as the identification of the wireless channel, and generates the Internet of Things special access password according to predetermined rules. Access password of the wireless channel mentioned above.

The predetermined rule for generating the Internet of Things-specific access password by the Internet of Things gateway is the same as the predetermined rule used by the Internet of Things device.

The wireless channel above can be set to be exclusively used by IoT devices, which is also referred to as a dedicated wireless channel for IoT hereinafter.

In an implementation manner of this embodiment, the step of authenticating according to the device description information uploaded by the IoT device includes:

Analyzing the device description according to the device description information uploaded by the IoT device; the device description includes the manufacturer, device name and device type of the IoT device;

Match the device description with the device description in the local device library. If the match is successful, the IoT device authentication is successful.

In this embodiment, after the step S120, it may further include:

If the authentication is unsuccessful, the IoT gateway pushes the device description generated according to the device description information to the IoT gateway application of the user terminal bound to the IoT gateway;

The IoT gateway receives the setting information returned by the IoT gateway application according to the user operation; if the setting information indicates that the IoT device is allowed to access, then add the device description of the IoT device to the local device library and open the data communication between the IoT device and other devices or networks; if the setting information indicates that the IoT device is not allowed to access, close the connection of the IoT device.

In this embodiment, the setting information may also include access permissions; the access permissions include permissions for other devices or networks to access the IoT device, and/or permissions for the IoT device to access other devices or networks;

The steps of opening the data communication between the IoT device and other devices or networks include:

Open the data communication between the IoT device and other devices or networks according to the access authority in the setting information.

A specific example of IoT gateway access authentication is given below, as shown in Figure 2, the process includes steps 201-208:

201. The Internet of Things gateway configures the Internet of Things dedicated wireless channel under the supported wireless access method according to the wireless access method it supports, and uses the Internet of Things dedicated wireless access identifier corresponding to the corresponding wireless access method as the IoT The identification of the dedicated wireless channel for networking, and use the corresponding dedicated access password for the Internet of Things as the access password for the dedicated wireless channel for the Internet of Things.

Both the format of the Internet of Things-specific wireless access identifier and the generation rule of the Internet-of-things-specific access password can be predetermined, and the identifier formats and password generation rules corresponding to different wireless access modes can be different from each other or the same.

The IoT gateway can then wait for the IoT device to connect.

202. After the Internet of Things device is turned on, according to its own wireless access mode, actively scan the corresponding wireless channel with the highest signal strength (that is, the dedicated Internet of Things wireless access channel), and use the corresponding wireless channel The Internet of Things special access password of the access mode is used to access the wireless channel, and the Internet of Things device is connected to the Internet of Things gateway after access.

203. After the IoT device is connected to the IoT gateway, upload device description information.

204. After the IoT gateway detects that an IoT device is connected through the IoT dedicated wireless channel, it blocks the communication of the IoT device to other devices or networks, and monitors the device description information uploaded by the IoT device.

205. The IoT gateway forms a device description based on the device description information uploaded by the IoT device, and matches the device description with the information in the local device library. If there is matching information, the IoT device is allowed to access, and the IoT device and Data communication of other devices or networks, otherwise go to step 206;

206. The IoT gateway pushes the device description to the user terminal IoT gateway application bound to the IoT gateway;

207. The user determines whether to allow the Internet of Things device to access according to the push prompt of the user terminal Internet of Things gateway application, and can set the permission of other devices or networks to access the Internet of Things device, and/or the Internet of Things device to access other devices or networks permissions; the app returns the user's choice to the IoT Gateway.

208. If the user allows access, the IoT gateway adds the IoT device to the local device library according to the device description information, performs device registration, configures access rights according to user settings, and opens the IoT device and other devices or networks data communication;

If the user does not allow access, the IoT gateway closes the connection of the IoT device.

The following uses examples in two specific application scenarios to further illustrate this embodiment.

(1) WIFI wireless scene

The Internet of Things gateway A opens the WIFI network, and configures the predetermined IoT-specific wireless access identifier IoT_WIFI as the SSID (Service Set Identifier) of the WIFI network, and the SSID can be hidden for safety. Set the access password of the WIFI network as a predetermined Internet of Things dedicated access password (such as IoT_access).

IoT device B scans the WIFI network after starting up, requests to access the WIFI network whose SSID is IoT_WIFI, uses the IoT-specific access password IoT_access corresponding to WIFI to access the network, and connects to IoT gateway A.

After the IoT device B establishes the connection, it uploads its device description information to the IoT gateway A, such as the XML device description file:

<Device Description>

<DeviceType>Temperature Sensor</DeviceType>

<DeviceManufactor>XXX</DeviceManufactor>

<DeviceID>12345678</DeviceID>

<DeviceModel>H-113</DeviceModel>

</DeviceDescription>

The IoT device B can upload the device description file by sending a data packet to the designated port of the WIFI gateway IP address.

After the IoT gateway A detects the connection of the IoT device B, it blocks the communication of the IoT device B to other non-gateway IP addresses, and monitors the device description information uploaded by the IoT device B on the designated port. IoT gateway A matches the device description information of IoT device B with the device information in the local device library, and finds that there is no matching information. IoT gateway A pushes a notification of new device access to application C bound to this IoT gateway And push the information of the new device according to the application format, such as:

"The temperature sensor produced by the existing manufacturer XXX is connected, the type is H-113, is it connected?"

After the application C on the user terminal receives the prompt, the user confirms to allow the access of the IoT device B (that is, the temperature sensor), and configures the air conditioner type device to access the IoT device B. After the IoT gateway A receives the confirmation information from the application C, it adds the information of the IoT device B to the local device library, and registers the IoT device B (for example, adding the IoT device B to the IoT devices managed by the IoT gateway In the resource pool), configure the access permission to be accessible to air conditioner devices, and allow IoT device B to communicate with other IP addresses.

(2) Bluetooth wireless scene

The Internet of Things gateway A turns on Bluetooth, and configures the predetermined Internet of Things special wireless access identifier IoT_Bluetooth_GW as the name of the Internet of Things gateway, and sets the access adaptation code as the predetermined Internet of Things special access password (such as 123).

IoT device B scans the Bluetooth connection after starting up, finds a device named IoT_Bluetooth_GW, uses the predetermined IoT-specific access password 123 as an adaptation code to access the network, and connects to IoT gateway A.

After the IoT device B establishes the connection, it uploads its device description information to the IoT gateway A, such as the XML device description file:

<Device Description>

<DeviceType>Temperature Sensor</DeviceType>

<DeviceManufactor>XXX</DeviceManufactor>

<DeviceID>12345678</DeviceID>

<DeviceModel>H-113</DeviceModel>

</DeviceDescription>

The IoT device B can upload the device description file by sending a data packet to the designated Bluetooth port.

After the IoT gateway A detects the connection of the IoT device B, it blocks the communication of the IoT device B to other devices, and monitors the device description information uploaded by the IoT device B on the designated Bluetooth port. The IoT gateway A matches the device description information of the IoT device B with the device information in the local device library, and finds that there is no matching information, and the IoT gateway A pushes a prompt for new device access to the application C bound to the IoT gateway And push the information of the new device according to the application format, such as:

"The temperature sensor produced by the existing manufacturer XXX is connected, the type is H-113, is it connected?"

After the application C on the user terminal receives the prompt, the user clicks confirmation to allow the Internet of Things device B (ie, the temperature sensor) to access. After IoT gateway A receives the confirmation information from application C, it adds the information of IoT device B to the local device library, and registers IoT device B, such as adding device B to the connected IoT device resource pool and opening it to related applications and allow IoT device B to communicate.

Embodiment 2, an Internet of Things gateway access authentication system, comprising:

The access module is set in the IoT device, and is used to scan the wireless channel of the corresponding access mode according to its own wireless access mode after the IoT device is turned on, select the wireless channel that meets the predetermined conditions, and generate the dedicated network of the Internet of Things according to the predetermined rules. Access the password to access the selected wireless channel, connect to the IoT gateway, and upload device description information;

The authentication module is set in the Internet of Things gateway, and is used to block the communication of the Internet of Things device to other devices or networks after detecting that an Internet of Things device is connected to the Internet of Things gateway. According to the device description uploaded by the Internet of Things device If the authentication is successful, the IoT device is allowed to access, and the data communication between the IoT device and other devices or networks is opened.

In an implementation manner of this embodiment, the system may further include:

The configuration module is set in the Internet of Things gateway, and is used to configure the wireless channel under the supported wireless access mode, using the Internet of Things special wireless access identification in a predetermined format as the identification of the wireless channel, and according to the predetermined rules Generate the Internet of Things special access password as the access password of the wireless channel.

In an implementation manner of this embodiment, the predetermined conditions may include:

The format of the identification of the wireless channel conforms to a predetermined format;

Or the identification of the wireless channel is the same as the pre-stored identification;

The access module generating the Internet of Things-specific access password according to predetermined rules refers to any of the following methods:

The access module uses the preset password corresponding to the format of the identification of the wireless channel as the dedicated access password for the Internet of Things;:

The access module uses characters at one or more predetermined positions in the selected wireless channel identifier as the IoT-specific access password;

The access module processes the identifier of the selected wireless channel in a predetermined manner, and uses the processing result as the IoT-specific access password.

In an implementation manner of this embodiment, the system may further include:

The control module is used to push the device description generated according to the device description information to the Internet of Things gateway application of the user terminal bound to the Internet of Things gateway when the authentication is unsuccessful; Operate the returned setting information; if the setting information indicates that the IoT device is allowed to access, add the device description of the IoT device to the local device library, and open the connection between the IoT device and other devices or networks Data communication; if the setting information indicates that the Internet of Things device is not allowed to access, then close the connection of the Internet of Things device.

In this embodiment, the setting information may also include access permissions; the access permissions may include permissions for other devices or networks to access the IoT device, and/or permissions for the IoT device to access other devices or networks;

The control module opening the data communication between the IoT device and other devices or networks may specifically refer to:

The control module enables data communication between the IoT device and other devices or networks according to the access authority in the setting information.

Those skilled in the art can understand that all or part of the steps in the above method can be completed by instructing relevant hardware through a program, and the program can be stored in a computer-readable storage medium, such as a read-only memory, a magnetic disk or an optical disk, and the like. Optionally, all or part of the steps in the foregoing embodiments may also be implemented using one or more integrated circuits. Correspondingly, each module/unit in the foregoing embodiments may be implemented in the form of hardware, or may be implemented in the form of software function modules. The present invention is not limited to any specific combination of hardware and software.

Of course, the present invention can also have other various embodiments, and those skilled in the art can make various corresponding changes and deformations according to the present invention without departing from the spirit and essence of the present invention, but these corresponding Changes and deformations should all belong to the protection scope of the claims of the present invention.

Claims (10)

1. An Internet of Things gateway access authentication method, comprising: S110. After the Internet of Things device is turned on, scan the wireless channel of the corresponding access method according to its own wireless access method, select a wireless channel that meets the predetermined conditions, generate an Internet of Things special access password according to the predetermined rule to access the selected wireless channel, and connect IoT gateway, upload device description information; S120. After the IoT gateway detects that an IoT device is connected, it blocks the communication of the IoT device to other devices or networks, performs authentication according to the device description information uploaded by the IoT device, and allows the IoT device if the authentication is successful. Device access, and open data communication between the IoT device and other devices or networks. 2. The method according to claim 1, characterized in that, before the step S110, it also comprises: The Internet of Things gateway configures the wireless channel under the supported wireless access mode, uses the Internet of Things special wireless access identification in a predetermined format as the identification of the wireless channel, and generates the Internet of Things special access password according to predetermined rules. Access password of the wireless channel mentioned above. 3. The method according to claim 1 or 2, wherein the predetermined conditions include: The format of the identification of the wireless channel conforms to a predetermined format; Or the identification of the wireless channel is the same as the pre-stored identification; The step of generating a dedicated access password for the Internet of Things according to predetermined rules includes any of the following methods: Using the preset password corresponding to the format of the identification of the wireless channel as the dedicated access password for the Internet of Things; Using characters at one or more predetermined positions in the selected wireless channel identifier as the IoT-specific access password; The identification of the selected wireless channel is processed in a predetermined manner, and the processing result is used as the special access password for the Internet of Things. 4. The method according to claim 1, further comprising: after the step S120: If the authentication is unsuccessful, the IoT gateway pushes the device description generated according to the device description information to the IoT gateway application of the user terminal bound to the IoT gateway; The IoT gateway receives the setting information returned by the IoT gateway application according to the user operation; if the setting information indicates that the IoT device is allowed to access, then add the device description of the IoT device to the local device library and open the data communication between the IoT device and other devices or networks; if the setting information indicates that the IoT device is not allowed to access, close the connection of the IoT device. 5. The method according to claim 4, wherein the setting information also includes access rights; the access rights include the rights of other devices or networks to access the IoT device, and/or the IoT device access permissions on other devices or networks; The steps of opening the data communication between the IoT device and other devices or networks include: Open the data communication between the IoT device and other devices or networks according to the access authority in the setting information. 6. An Internet of Things gateway access authentication system, characterized in that it comprises: The access module is set in the IoT device, and is used to scan the wireless channel of the corresponding access mode according to its own wireless access mode after the IoT device is turned on, select the wireless channel that meets the predetermined conditions, and generate the dedicated network of the Internet of Things according to the predetermined rules. Access the password to access the selected wireless channel, connect to the IoT gateway, and upload device description information; The authentication module is set in the Internet of Things gateway, and is used to block the communication of the Internet of Things device to other devices or networks after detecting that an Internet of Things device is connected to the Internet of Things gateway. According to the device description uploaded by the Internet of Things device If the authentication is successful, the IoT device is allowed to access, and the data communication between the IoT device and other devices or networks is opened. 7. The system of claim 6, further comprising: The configuration module is set in the Internet of Things gateway, and is used to configure the wireless channel under the supported wireless access mode, use the Internet of Things special wireless access identification in a predetermined format as the identification of the wireless channel, and follow the predetermined rules Generate the Internet of Things special access password as the access password of the wireless channel. 8. The system according to claim 6 or 7, wherein the predetermined conditions include: The format of the identification of the wireless channel conforms to a predetermined format; Or the identification of the wireless channel is the same as the pre-stored identification; The access module generating the Internet of Things-specific access password according to predetermined rules refers to any of the following methods: The access module uses the preset password corresponding to the format of the identification of the wireless channel as the dedicated access password for the Internet of Things;: The access module uses characters at one or more predetermined positions in the selected wireless channel identifier as the IoT-specific access password; The access module processes the identifier of the selected wireless channel in a predetermined manner, and uses the processing result as the IoT-specific access password. 9. The system of claim 6, further comprising: The control module is used to push the device description generated according to the device description information to the Internet of Things gateway application of the user terminal bound to the Internet of Things gateway when the authentication is unsuccessful; Operate the returned setting information; if the setting information indicates that the IoT device is allowed to access, add the device description of the IoT device to the local device library, and open the connection between the IoT device and other devices or networks Data communication; if the setting information indicates that the Internet of Things device is not allowed to access, then close the connection of the Internet of Things device. 10. The system according to claim 9, wherein the setting information also includes access rights; the access rights include the rights of other devices or networks to access the IoT device, and/or the IoT device access permissions on other devices or networks; The control module opening the data communication between the IoT device and other devices or networks refers to: The control module enables data communication between the IoT device and other devices or networks according to the access authority in the setting information.