IoT METHOD AND SYSTEM OF AUTHORIZING/MANAGING IOT DEVICE BASED ON OWNER'S AUTHORIZATION SERVER

摘要

In an Internet of Things (IoT) device authorization management method based on an owner authentication server, an IoT device transmits a registration request message to the owner authentication server based on a request from an owner terminal when the IoT device is not registered to the owner authentication server. The owner authentication server verifies the IoT device, issues a certificate, registers hosting resources, and registered the IoT device to the owner authentication server. The owner authentication server sets access control policies regarding the IoT device and user terminals. The IoT device checks whether tokens are submitted from the user terminals with the resource request messages. When the tokens are not submitted, the user terminals transmit token issuing request messages to the owner authentication server. The owner authentication server issues the tokens based on the access control policies and property information of the user terminals. When the tokens are submitted, the IoT device authenticates the tokens and executes a target operation.