Authorization management method and system

Abstract

The embodiment of the invention provides an authorization management method and system. A hardware client side is additionally arranged; after being received at the hardware client side, an encryptedplatform hardware ID sent by an authorization client side is decrypted; furthermore, an authorization code is obtained by calculation according to the decrypted platform hardware ID; the authorizationcode is encrypted, so that a ciphertext is obtained; furthermore, the ciphertext is sent to the authorization client side; after decrypting the ciphertext, the authorization client side obtains the authorization code, and sends the authorization code to an embedded platform; the embedded platform stores the authorization code in a storage device; after the embedded platform is re-started, a verification authorization code is generated, so that the stored authorization code is verified; and, after verification is passed, a static library file in the embedded platform can work normally. According to the authorization management scheme, the interaction information is encrypted through additional arrangement of the hardware client side; therefore, the risk that the authorization information is cracked can be reduced; and furthermore, the disadvantage that the management cost is increased due to external connection of the IC in the prior art can be avoided.

Description

technical field [0001] The invention relates to the technical field of embedded system development, in particular to an authorization management method and system. Background technique [0002] In the development of embedded systems, to realize a function, it is necessary to write source code files (.c and .h files, the file language is a computer programming language, which can be read) to control the embedded system and its peripherals, and realize the corresponding functions. In order to protect the code written by the author, a static link library (.a or .lib) can be generated through tool compilation. In this way, you only need to provide the .h index header file and the static library file to get the support of this function. This method can ensure that the developer and his organization can make it available to other people or organizations without disclosing the source code. However, simply providing a static link library cannot guarantee whether the other party ha...

AI Technical Summary

Problems solved by technology

However, simply providing a static link library cannot guarantee whether the other party has legal authority, so authorization management of static library files is also necessary

In the prior art, an external IC or an encryption algorithm is often used to verify the authorization, but the way of external IC increases the management cost, and the encryption method commonly used in the prior art is relatively difficult to crack, and the security is poor

Images