设备反欺骗在Azure IoT中心中如何工作? [英] How does device anti-spoofing work in Azure IoT hub?
问题描述
摘自Azure开发指南 https://azure.microsoft. com/en-us/documentation/articles/iot-hub-devguide ，其中有一小节(如下所示)谈论设备防欺骗.对我来说还不清楚，它说IoT中心在每个消息上都标记了属性，但对我而言，设备反欺骗是指IoT中心停止接收任何欺骗设备发送的消息.请帮忙解释一下它是如何工作的?
From Azure development guide https://azure.microsoft.com/en-us/documentation/articles/iot-hub-devguide, there is a small section (shown as below) talking about device anti-spoofing. It is not clear for me, it says IoT hub stamps every message with properties, but for me device anti-spoofing is that IoT hub to stop receiving messages sent from any spoofed device. Please help to explain how does this work?
防欺骗属性
为避免设备到云消息中的设备欺骗，IoT Hub会加盖戳记 具有以下属性的所有消息:
To avoid device spoofing in device-to-cloud messages, IoT Hub stamps all messages with the following properties:
- ConnectionDeviceId
- ConnectionDeviceGenerationId
- ConnectionAuthMethod
- ConnectionDeviceId
- ConnectionDeviceGenerationId
- ConnectionAuthMethod
推荐答案
在IoT中心中，存在一个设备注册表，用于向网关授权设备.验证后，将根据注册表检查设备.
In IoT Hub there is a device registry that is used to authorize devices to the gateway. After authentication the device is checked against the registry.
在IoT中心注册设备后，该设备的身份和密钥将保存在设备注册表中.该设备和密钥是设备用来验证服务的身份.
When a device is registered with IoT Hub, the device's identity and key are saved in the device registry. This device and key is what the device uses to authenticate to the service.
世代ID也是其中的关键部分.首次向IoT中心注册设备时，会将世代ID分配给该设备.这样做的目的是区分相同设备ID(添加，删除和随后添加)的身份注册.
The generation ID is a key part of this too. When the device is first registered with IoT Hub, a generation ID is assigned to the device. The purpose of this is to distinguish between identity registrations of the same device ID (added, removed, and then later added).
如果您有兴趣深入了解IoT中心架构，请参阅Clemen的2015 Build演讲
If you're interested in a deeper dive into the IoT Hub architecture see Clemen's 2015 Build talk here.
这篇关于设备反欺骗在Azure IoT中心中如何工作?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
