Abstract: With the deepening of the Internet of Things (IoT) technology, the scale of the IoT and its application are becoming more and more extensive, thus the impact of security issues is also growing more and more wide. In this paper, we proposed a reference architecture of IoT security on the basis of the stateofart security and privacy protection technologies. After reviewing of the key technologies and the latest development of IoT security and privacy protection, i.e., the threats of environmental perception security, data transmission security, information privacy disclosure, and other aspects in the IoT, we aim to provide effective technical methods to solve the security and privacy protection of IoT, to provide the safety behavior criterion that should be followed when the relevant manufacturers develop and provide the corresponding products, and to provide baseline for the third party testing organizations.

摘要： 随着物联网(IoT)技术的深化发展，物联网的网络规模和应用范围越来越大，安全问题所造成的影响也越来越广泛.在梳理物联网安全和隐私保护技术现状的基础上，提出物联网安全参考架构，从应对物联网感知环境安全威胁、物联网数据传输安全威胁、物联网信息隐私泄露威胁等方面，对物联网安全和隐私保护的关键技术框架进行研究，为解决物联网安全和隐私保护提供有效的技术方法借鉴.并为相关生产厂商在开发和提供相应技术产品时，规范应遵守的安全行为准则，并为第三方检测机构提供检测依据.关键词物联网；安全威胁；安全参考模型；隐私保护；信任模型中图法分类号TP309