Wisdom agricultural cloud platform based on thing networkingTechnical Field
The invention relates to the technical field of agricultural management, in particular to an intelligent agricultural cloud platform based on the Internet of things.
Background
Agricultural production is more and more emphasized by the nation, the agricultural production is gradually scientific, and good ecological environment is an indispensable essential condition for agricultural production and human life. The intelligent agriculture fully applies modern information technology achievements, integrates and applies computer and network technology, internet of things technology, audio and video technology, 3S technology, wireless communication technology and expert intelligence and knowledge, achieves intelligent management of agricultural visual remote diagnosis, remote control, catastrophe early warning and the like, achieves intelligent perception, intelligent early warning, intelligent decision making, intelligent analysis and expert online guidance of agricultural production environment by means of various sensing nodes (environment temperature and humidity, soil moisture, carbon dioxide, images and the like) deployed on an agricultural production site and a wireless communication network, and provides accurate planting, visual management and intelligent decision making for agricultural production.
Although the existing agricultural management system utilizes the Internet of things to form functions such as intelligent sensing, intelligent early warning, intelligent decision, intelligent analysis, expert online guidance and the like, the safety of the system is greatly tested due to network connection control and remote influence, the scale of Internet of things equipment is large, and more Internet of things equipment faces safety risks.
Disclosure of Invention
The invention aims to provide an intelligent agricultural cloud platform based on the Internet of things, which effectively prevents hardware, software and related data of equipment of the Internet of things in a system from being damaged, changed and leaked due to functions of the hardware, the software and the related data or malicious infringement, so that misjudgment ends are caused, and adverse effects are generated on the system.
The invention provides the following technical scheme:
an intelligent agriculture cloud platform based on the internet of things, comprising:
the field layer comprises a high-definition camera, an environment monitoring sensor, field equipment and a display device, wherein the environment monitoring sensor is connected with an environment monitoring terminal, and the field equipment is connected with a control terminal; the transmission layer comprises an internet of things transmission terminal, the environment monitoring terminal and the control terminal are respectively connected to a cloud platform through the internet of things transmission terminal, the high-definition camera and the display device are connected with the cloud platform, and the cloud platform is connected with a monitoring management center and a remote management center;
the cloud platform receives a registration request from an environment Internet of things transmission terminal, authenticates the legality of the registration request, and transmits corresponding data after the authentication is passed;
meanwhile, the environment monitoring terminal and the control terminal authenticate the instruction issued by the transmission terminal of the Internet of things, and the corresponding instruction is executed after the authentication is passed;
and respectively setting registration request authentication between the environment monitoring sensor and the environment monitoring terminal and between the field device and the control terminal, issuing identification authentication between the environment monitoring terminal and the control terminal, and after the authentication is passed, carrying out data transmission and management.
Preferably, the cloud platform encrypts a management instruction according to a working key to obtain ciphertext management data, and sends the ciphertext management data to the environment monitoring terminal and the control terminal; performing bidirectional authentication and key agreement with the environment monitoring terminal and the control terminal, encrypting service management data, and decrypting data reported by the transmission terminal of the internet of things; and the environment monitoring terminal and the control terminal decrypt the ciphertext management data according to the working key to obtain the management instruction, execute the management instruction, and encrypt an execution result by using the working key to send the execution result to the monitoring management center.
Preferably, the environment monitoring terminal and the control terminal sign the equipment number by using a private key of a user identification card, and send the field equipment number and signature data thereof to the cloud platform; the cloud platform uses the public key of the user identification card to check the signature, and after the validity of the equipment is confirmed, the cloud platform and the field equipment complete bidirectional authentication and key agreement.
Preferably, when the cloud platform detects that the authentication failure initiated by the user identity identification card reaches or exceeds a preset number, the cloud platform locks and prohibits further authentication operation initiated by the user identity identification card; and when the user identity identification card detects that the authentication failure initiated by the platform reaches or exceeds a preset number, the user identity identification card locks and forbids further authentication operation initiated by the platform.
Preferably, the field device further uploads the control terminal of the address protocol, the control terminal uploads the address protocol to the cloud platform, the cloud platform identifies the device address to judge whether the device address is a common device address, and if the device address is an unusual device address, the data transmission of the device is terminated.
The invention has the beneficial effects that: by establishing the transition terminal between the cloud platform and the equipment, the safety and the reliability of data transmission are ensured, and meanwhile, the expansion controllability is improved; the registration authentication is adopted between the equipment and the cloud platform, so that the hardware, software and related data of the Internet of things equipment in the system are effectively prevented from being damaged, changed and leaked due to self functions or malicious infringement, and the misjudgment end is caused, so that the system is not influenced.
Drawings
The accompanying drawings, which are included to provide a further understanding of the invention and are incorporated in and constitute a part of this specification, illustrate embodiments of the invention and together with the description serve to explain the principles of the invention and not to limit the invention. In the drawings:
FIG. 1 is a schematic diagram of the present invention.
Detailed Description
As shown in fig. 1, an internet of things-based smart agriculture cloud platform includes:
the field layer comprises a high-definition camera, an environment monitoring sensor, field equipment and a display device, wherein the environment monitoring sensor is connected with an environment monitoring terminal, and the field equipment is connected with a control terminal; the transmission layer comprises an internet of things transmission terminal, the environment monitoring terminal and the control terminal are respectively connected to a cloud platform through the internet of things transmission terminal, the high-definition camera and the display device are connected with the cloud platform, and the cloud platform is connected with a monitoring management center and a remote management center;
the cloud platform receives a registration request from an environment Internet of things transmission terminal, authenticates the legality of the registration request, and transmits corresponding data after the authentication is passed;
meanwhile, the environment monitoring terminal and the control terminal authenticate the instruction issued by the transmission terminal of the Internet of things, and the corresponding instruction is executed after the authentication is passed;
and respectively setting registration request authentication between the environment monitoring sensor and the environment monitoring terminal and between the field device and the control terminal, issuing identification authentication between the environment monitoring terminal and the control terminal, and after the authentication is passed, carrying out data transmission and management.
As a preferred embodiment, the cloud platform encrypts a management instruction according to a working key to obtain ciphertext management data, and sends the ciphertext management data to the environment monitoring terminal and the control terminal; performing bidirectional authentication and key agreement with the environment monitoring terminal and the control terminal, encrypting service management data, and decrypting data reported by the transmission terminal of the internet of things; and the environment monitoring terminal and the control terminal decrypt the ciphertext management data according to the working key to obtain the management instruction, execute the management instruction, and encrypt an execution result by using the working key to send the execution result to the monitoring management center. The environment monitoring terminal and the control terminal sign the equipment number by using a private key of a user identity card, and send the field equipment number and signature data thereof to the cloud platform; the cloud platform uses the public key of the user identification card to check the signature, and after the validity of the equipment is confirmed, the cloud platform and the field equipment complete bidirectional authentication and key agreement. When the cloud platform detects that the authentication failure initiated by the user identity identification card reaches or exceeds a preset number, the cloud platform locks and forbids further authentication operation initiated by the user identity identification card; and when the user identity identification card detects that the authentication failure initiated by the platform reaches or exceeds a preset number, the user identity identification card locks and forbids further authentication operation initiated by the platform.
As a preferred embodiment, the field device further uploads the control terminal of the address protocol, the control terminal uploads the address protocol to the cloud platform, the cloud platform identifies the device address to determine whether the device address is a common device address, and if the device address is an unusual device address, the reception of the data transmission of the device is terminated. Whether the field device is normally used or not is judged through the common address, and the influence on the system safety or malicious infringement caused by access of an abnormal device or an unauthorized device is avoided.
According to the intelligent agriculture cloud platform based on the Internet of things, the transition terminal is established between the cloud platform and equipment, so that the safety and reliability of data transmission are guaranteed, and meanwhile, the expansion controllability is improved; the registration authentication is adopted between the equipment and the cloud platform, so that the hardware, software and related data of the Internet of things equipment in the system are effectively prevented from being damaged, changed and leaked due to self functions or malicious infringement, and the misjudgment end is caused, so that the system is not influenced.
Although the present invention has been described in detail with reference to the foregoing embodiments, it will be apparent to those skilled in the art that changes may be made in the embodiments and/or equivalents thereof without departing from the spirit and scope of the invention. Any modification, equivalent replacement, or improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.