Active identification control method and system

Abstract

The present invention discloses an active identification management and control method and system. The method configures a corresponding identification for each channel on a web side, encrypts the identification, writes the encrypted identification into a device system under the corresponding channel for storage; and, a system service on the device system side reads the encrypted identification therefrom and actively uploads it to the center of the industrial Internet, thereby effectively ensuring the uniqueness and confidentiality of the active identification, which cannot be decompiled by other users, and effectively preventing cracking.

Description

Technical Field

[0001] The present invention relates to the field of identification control technology, and in particular to an active identification control method and system. Background Art

[0002] In order to distinguish products and equipment from different channels, customers add special product and equipment identification to distinguish products and equipment from different channels. The channels refer to online, offline, e-commerce and agent channels. Products and equipment from different channels enjoy different services. There are many ways to control the existing unique identification, such as through model and SN management, but these identification schemes have no security guarantee and can be changed at will. In addition, any product and equipment has many agents, and each agent has other different channels. The existing identification scheme cannot meet the authority control requirements of different channels of the same agent. Summary of the invention

[0003] The technical problem to be solved by the present invention is to provide an active identification control method and system for at least one defect in the prior art.

[0004] The technical solution adopted by the present invention to solve the technical problem is: constructing an active identification control method, including performing the following steps on the web side:

[0005] S11: configure corresponding identifiers for each channel;

[0006] S12: Encrypt the identifier;

[0007] S13: writing the encrypted identifier into the device system under the corresponding channel for storage;

[0008] And, including performing the following steps on the device system side:

[0009] S21: The system service reads the encrypted identifier and actively uploads it to the center of the industrial Internet.

[0010] Preferably, in the active identification control method of the present invention, before step S11, the following steps are further included:

[0011] S10: Customize at least one channel and device services under each channel.

[0012] Preferably, in the active identification control method of the present invention, step S21 includes:

[0013] S211: Perform RSA operation on the identifier;

[0014] S212: performing SM3 operation on the digest generated after the RSA operation;

[0015] S213: Encrypt the summary generated after the SM3 operation using a public key.

[0016] Preferably, in the active identification control method of the present invention, step S13 includes:

[0017] The encrypted identifier is written into the OEM partition of the device system side under the corresponding channel through the system interface for storage;

[0018] Step S21 includes:

[0019] The system service reads the encrypted identifier from the OEM partition and actively uploads it to the center of the Industrial Internet.

[0020] Preferably, in the active identification control method of the present invention, the web terminal further performs the following steps:

[0021] S14: Obtain the encrypted identifier written into the current device system, and decrypt and display it;

[0022] S15: Determine whether the decrypted content matches the identifier of the channel to which the current device belongs. If so, display the current device as a compliant device; if not, display the current device as a non-compliant device.

[0023] Preferably, in the active identification control method of the present invention, step S14 includes:

[0024] Get the encrypted identifier written into the current device system, decrypt it using the private key, and write the decrypted content into the display properties of the web end for display;

[0025] Step S15 includes:

[0026] Determine whether the decrypted content matches the digest generated after RSA and SM3 operations of the identifier of the channel to which the current device belongs. If so, the current device is displayed as a compliant device; if not, the current device is displayed as a non-compliant device.

[0027] The present invention also constructs an active identification management and control system, including a web end and a device system end;

[0028] The web terminal includes:

[0029] Configuration module, used to configure corresponding identifiers for each channel;

[0030] An encryption module, used for encrypting the identification;

[0031] A writing module is used to write the encrypted identification into the device system under the corresponding channel for storage;

[0032] The device system end includes:

[0033] A reading module is used for system services to read the encrypted identifier;

[0034] The upload module is used to actively upload the encrypted identifier to the center of the industrial Internet.

[0035] Preferably, in the active identification management and control system described in the present invention, the encryption module is further used to perform RSA operation on the identification, perform SM3 operation on the summary generated after the RSA operation, and encrypt the summary generated after the SM3 operation by a public key.

[0036] Preferably, in the active identification control system of the present invention, the web terminal further includes:

[0037] An acquisition module is used to acquire the encrypted identifier written into the current device system;

[0038] A decryption module, used to decrypt the obtained encrypted identifier;

[0039] A display module, used to display the decrypted content, and to display the current device as a compliant device when the judgment module determines that it is a compliant device, or to display a non-compliant device when the judgment module determines that it is a non-compliant device;

[0040] The judgment module is used to judge whether the decrypted identifier matches the identifier of the channel to which the current device belongs.

[0041] Preferably, in the active identification control system of the present invention,

[0042] The decryption module is further used to decrypt the acquired encrypted identifier using a private key;

[0043] The display module is further used to write the decrypted content into the display properties of the web terminal for display;

[0044] The judgment module is further used to judge whether the decrypted content matches the digest generated after RSA and SM3 operations on the identifier of the channel to which the current device belongs.

[0045] By implementing the present invention, the following beneficial effects are achieved:

[0046] The present invention configures a corresponding identifier for each channel on the web side, encrypts the identifier, writes the encrypted identifier into the device system under the corresponding channel for storage; and the system service on the device system side reads the encrypted identifier therefrom and actively uploads it to the center of the industrial Internet, thereby effectively ensuring the uniqueness and confidentiality of the active identifier, which cannot be decompiled by other users, and effectively preventing cracking. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] The present invention will be further described below with reference to the accompanying drawings and embodiments, in which:

[0048] Figure 1 is a flow chart of the active identification control method of the present invention;

[0049] Figure 2 It is a module block diagram of the active identification control system of the present invention. DETAILED DESCRIPTION

[0050] In order to have a clearer understanding of the technical features, purposes and effects of the present invention, specific embodiments of the present invention are now described in detail with reference to the accompanying drawings.

[0051] It should be noted that the flowcharts shown in the accompanying drawings are only exemplary and do not necessarily include all the contents and operations / steps, nor do they have to be executed in the order described. For example, some operations / steps can be decomposed, while some operations / steps can be combined or partially combined, so the actual execution order may change according to actual conditions.

[0052] The block diagrams shown in the accompanying drawings are merely functional entities and do not necessarily correspond to physically independent entities. That is, these functional entities may be implemented in software form, or in one or more hardware modules or integrated circuits, or in different networks and / or processor devices and / or microcontroller devices.

[0053] like Figure 1 As shown, the present invention discloses an active identification management method, including performing the following steps on a web side:

[0054] Step S11: configuring corresponding identifiers for each channel;

[0055] Step S12: encrypting the identifier;

[0056] Step S13: writing the encrypted identifier into the device system under the corresponding channel for storage;

[0057] And, including performing the following steps on the device system side:

[0058] Step S21: The system service reads the encrypted identifier and actively uploads it to the center of the industrial Internet.

[0059] Among them, the active identification management and control method can be applied to manufacturers or intermediate users, such as intermediate agents. As long as the web interface and system interface are provided to the agents, the permission management requirements of different channels of the same agent can be met.

[0060] In this embodiment, before step S11, the following steps are also included:

[0061] Step S10: Customize at least one channel and the device services under each channel. Channels refer to online, offline, e-commerce, agent channels, etc. The services or value-added services enjoyed by the devices under each channel are different. Therefore, different channel devices can be distinguished by identification, and then the devices can obtain and enjoy corresponding services according to the identification. In some embodiments, at least one channel and the device services under each channel customized by the manufacturer or the intermediate user can be received, and the identification corresponding to each channel input by the manufacturer or the intermediate user can also be received, so as to configure the corresponding identification for each channel.

[0062] In some other embodiments, the manufacturer may define some authority identifiers to facilitate the implementation of value-added services through identification identifiers. In addition, the corresponding OTA upgrade service may be specified by identifying a unique identifier.

[0063] In this embodiment, the written identification number cannot be counterfeited through the system interface in other devices that are not in the channel, so the written identification number is required to be irreversible. Once the identification number is written, it cannot be erased by restoring the factory settings, and the written plain text cannot be read after writing. Only the writing party (manufacturer or intermediate user) holding the private key can identify the meaning of the written identification, thereby effectively ensuring the uniqueness and confidentiality of the identification. Therefore, before writing into the OEM partition, the written plain text is firstly subjected to an irreversible hash operation, so step S12 includes:

[0064] Step S121: performing RSA operation on the identifier;

[0065] Step S122: performing SM3 operation on the digest generated after RSA operation;

[0066] Step S123: Encrypt the summary generated after the SM3 operation using the public key.

[0067] This embodiment generates an encrypted identifier on the web, which cannot be decompiled and effectively prevents cracking. The manufacturer or intermediate user needs to manage the identification number and cannot disclose it, so that other people cannot generate the same identifier.

[0068] In this embodiment, step S13 includes: writing the encrypted identifier into the OEM partition of the device system under the corresponding channel through the system interface for storage, specifically, storing it into the Channel Number segment of the OEM partition.

[0069] Correspondingly, step S21 includes: the system service reads the encrypted identifier from the OEM partition and actively uploads it to the center of the industrial Internet.

[0070] In this embodiment, the web terminal further performs the following steps:

[0071] Step S14: Obtain the encrypted identifier written into the current device system, and decrypt and display it;

[0072] Step S15: Determine whether the decrypted content matches the identifier of the channel to which the current device belongs. If so, the current device is displayed as a compliant device and the current device enjoys the corresponding service; if not, the current device is displayed as a non-compliant device.

[0073] Specifically, step S14 includes:

[0074] Get the encrypted identifier written into the current device system, decrypt it with the private key, and write the decrypted content (the summary generated after SM3 operation) into the display attribute (ro.channel.number) of the web end for display. Among them, the private key is also controlled by the manufacturer or the intermediate user.

[0075] Step S15 includes:

[0076] Determine whether the decrypted content matches the digest generated after RSA and SM3 operations of the identifier of the channel to which the current device belongs. If so, the current device is displayed as a compliant device and the current device enjoys the corresponding service; if not, the current device is displayed as a non-compliant device.

[0077] Moreover, barcodes are passive identifiers, which means that there is no way to actively tell the center of the Industrial Internet which channel the device is from, what it is, and what services it enjoys. The active identification solution means that the system service actively identifies the identifier and tells the center of the Industrial Internet which channel the device is from, what it is, and what services it enjoys.

[0078] like Figure 2 As shown, the present invention also discloses an active identification management and control system, including a web end and a device system end;

[0079] The web version includes:

[0080] Configuration module, used to configure corresponding identifiers for each channel;

[0081] An encryption module, used for encrypting the identification;

[0082] A writing module is used to write the encrypted identification into the device system under the corresponding channel for storage;

[0083] The equipment system includes:

[0084] A reading module is used for system services to read the encrypted identifier;

[0085] The upload module is used to actively upload the encrypted identifier to the center of the industrial Internet.

[0086] Among them, the active identification management and control method can be applied to manufacturers or intermediate users, such as intermediate agents. As long as the web interface and system interface are provided to the agents, the permission management requirements of different channels of the same agent can be met.

[0087] In this embodiment, the web terminal also includes a customization module for customizing at least one channel and the device services under each of the channels. Among them, the channel refers to online, offline, e-commerce, agent channels, etc. The services or value-added services enjoyed by the devices under each channel are different, so different channel devices can be distinguished by identification, and then the device can obtain and enjoy the corresponding services according to the identification. In some embodiments, at least one channel and the device services under each of the channels customized by the manufacturer or the intermediate user can be received, and the identification corresponding to each channel input by the manufacturer or the intermediate user can also be received, so as to configure the corresponding identification for each channel.

[0088] In some other embodiments, the manufacturer may define some authority identifiers to facilitate the implementation of value-added services through identification identifiers. In addition, the corresponding OTA upgrade service may be specified by identifying a unique identifier.

[0089] In this embodiment, the written identification number cannot be counterfeited through the system interface in other devices that are not from this channel. Therefore, the written identification number is required to be irreversible. Once the identification number is written, it cannot be erased by restoring the factory settings, and the written plaintext cannot be read after writing. Only the writing party (manufacturer or intermediate user) who holds the private key can identify the meaning of the written identification, thereby effectively ensuring the uniqueness and confidentiality of the identification. Therefore, before writing to the OEM partition, the written plaintext is first subjected to an irreversible hash operation. Therefore, the encryption module is further used to perform RSA operation on the identification, perform SM3 operation on the summary generated after the RSA operation, and encrypt the summary generated after the SM3 operation by the public key.

[0090] This embodiment generates an encrypted identifier on the web, which cannot be decompiled and effectively prevents cracking. The manufacturer or intermediate user needs to manage the identification number and cannot disclose it, so that other people cannot generate the same identifier.

[0091] In this embodiment, the writing module is further used to write the encrypted identifier into the OEM partition of the device system end under the corresponding channel through the system interface for storage. Specifically, it is stored in the Channel Number segment of the OEM partition.

[0092] Correspondingly, the reading module is further used for the system service to read the encrypted identifier from the OEM partition.

[0093] In this embodiment, the web terminal also includes:

[0094] An acquisition module is used to acquire the encrypted identifier written into the current device system;

[0095] A decryption module, used to decrypt the obtained encrypted identifier;

[0096] A display module, used to display the decrypted content, and to display the current device as a compliant device when the judgment module determines that it is a compliant device, or to display a non-compliant device when the judgment module determines that it is a non-compliant device;

[0097] The judgment module is used to judge whether the decrypted identifier matches the identifier of the channel to which the current device belongs.

[0098] Specifically, the decryption module is further used to decrypt the acquired encrypted identification using a private key, wherein the private key is also controlled by the manufacturer or the intermediate user.

[0099] The display module is further used to write the decrypted content (the summary generated after the SM3 operation) into the display attribute (ro.channel.number) of the web end for display;

[0100] The judgment module is further used to judge whether the decrypted content matches the digest generated after RSA and SM3 operations of the identifier of the channel to which the current device belongs.

[0101] Moreover, barcodes are passive identifiers, which means that there is no way to actively tell the center of the Industrial Internet which channel the device is from, what it is, and what services it enjoys. The active identification solution means that the system service actively identifies the identifier and tells the center of the Industrial Internet which channel the device is from, what it is, and what services it enjoys.

[0102] By implementing the present invention, the following beneficial effects are achieved:

[0103] The present invention configures a corresponding identifier for each channel on the web side, encrypts the identifier, writes the encrypted identifier into the device system under the corresponding channel for storage; and the system service on the device system side reads the encrypted identifier therefrom and actively uploads it to the center of the industrial Internet, thereby effectively ensuring the uniqueness and confidentiality of the active identifier, which cannot be decompiled by other users, and effectively preventing cracking.

[0104] It can be understood that the above embodiments only express the preferred implementation modes of the present invention, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the patent scope of the present invention. It should be pointed out that, for ordinary technicians in this field, the above technical features can be freely combined without departing from the concept of the present invention, and several deformations and improvements can be made, which all belong to the protection scope of the present invention. Therefore, all equivalent changes and modifications made to the scope of the claims of the present invention should belong to the coverage of the claims of the present invention.

Claims

1. An active identification control method, characterized in that: The manufacturer or the intermediate user performs the following steps on the web: S10: Customizing at least one channel and device services for product devices under each channel; S11: configure corresponding identifiers for each channel; S12: Encrypt the identifier; S13: writing the encrypted identifier into the ChannelNumber segment of the device system OEM partition under the corresponding channel through the system interface for storage; S14: Obtain the encrypted identifier written into the current device system, decrypt it using the private key, and write the decrypted content into the display properties of the web end for display; S15: Determine whether the decrypted content matches the identifier of the channel to which the current device belongs. If so, display the current device as a compliant device; if not, display the current device as a non-compliant device; And, including performing the following steps on the device system side: S21: The system service reads the encrypted identifier and actively uploads it to the center of the industrial Internet.

2. The active identification control method according to claim 1, characterized in that: Step S12 includes: S121: Perform RSA operation on the identifier; S122: performing SM3 operation on the digest generated after the RSA operation; S123: Encrypt the summary generated after the SM3 operation using a public key.

3. The active identification control method according to claim 1, characterized in that: Step S21 includes: The system service reads the encrypted identifier from the OEM partition and actively uploads it to the center of the Industrial Internet.

4. The active identification control method according to claim 1, characterized in that: Step S15 includes: Determine whether the decrypted content matches the digest generated after RSA and SM3 operations of the identifier of the channel to which the current device belongs. If so, the current device is displayed as a compliant device; if not, the current device is displayed as a non-compliant device.

5. An active identification control system, characterized in that: Including web side and device system side; The web terminal for manufacturers or intermediate users includes: A customization module, used to customize at least one channel and device services of product devices under each of the channels; Configuration module, used to configure corresponding identifiers for each channel; An encryption module, used for encrypting the identification; The writing module is used to write the encrypted identifier into the Channel Number segment of the device system OEM partition under the corresponding channel through the system interface for storage; An acquisition module is used to acquire the encrypted identifier written into the current device system; A decryption module, used to decrypt the obtained encrypted identifier using a private key; A display module, used to write the decrypted content into the display properties of the web end for display, and to display the current device as a compliant device when the judgment module judges that it is a compliant device, or display a non-compliant device when it is a non-compliant device; A judgment module, used to judge whether the decrypted identifier matches the identifier of the channel to which the current device belongs; The device system end includes: A reading module is used for system services to read the encrypted identifier; The upload module is used to actively upload the encrypted identifier to the center of the industrial Internet.

6. The active identification control system according to claim 5, characterized in that: The encryption module is further used to perform RSA operation on the identifier, perform SM3 operation on the summary generated after the RSA operation, and encrypt the summary generated after the SM3 operation using a public key.

7. The active identification control system according to claim 5, characterized in that: The judgment module is further used to judge whether the decrypted content matches the digest generated after RSA and SM3 operations on the identifier of the channel to which the current device belongs.

Images