LED system bidirectional security verification method and device, computer device and medium
Patent Information
- Application Number
- CN202210564673.4
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2022-05-23
- Publication Date
- 2026-09-15
- Estimated Expiration
- 2042-05-23
AI Technical Summary
[0003]在现有的技术中,主要是基于公私钥体系,通过客户端与服务端交换公钥证书后,使用对方公钥证书验证对方身份,建立双方设备的加密连接,但是在双方设备交换公钥证书之前并没有针对双方设备之间的安全性进行验证,不能保证交换公钥证书时双方设备的安全性,进而影响LED系统运行的安全性,存在较大的安全隐患
[0033]The aforementioned LED system bidirectional security verification method, device, computer equipment, and storage medium perform security verification before the control unit and resource module communicate. This involves acquiring a response signal from the resource module carrying first verification information and an algorithm sequence number. Then, based on the algorithm sequence number in the response signal, the corresponding algorithm is retrieved to combine pre-stored parameters, resulting in second verification information. The first and second verification information are compared, and the result is used as the final security verification result. Throughout the process, the first verification information used for verification is obtained by randomly combining multiple parameters according to the algorithm. It is evident that different algorithms and different numbers and types of combined parameters can make the first verification information highly random. Only one second verification information can correspond to the first verification information, increasing the difficulty of cracking or forging the received verification information, thereby improving the overall security of the LED system.
Smart Images

Figure CN117155587B_ABST
Abstract
Description
Technical Field
[0001] This application relates to the field of LED (Light-Emitting Diode) system security technology, and in particular to a two-way verification security method, device, computer equipment, and storage medium for LED systems. Background Technology
[0002] With the continuous development of LED technology, the security requirements for LED systems are becoming increasingly stringent. An LED control system mainly includes a control unit module, an image segmentation module, a transmitting module, an LED display module, a power supply module, and a resource module. The control unit module controls the resource module to send image or video resources to the image segmentation module. The image segmentation module segments the image and sends each segmented image to the transmitting module. The transmitting module then drives the LED display module to display the corresponding segmented images. The power supply module supplies power to the image segmentation module and the LED display module. The transmitting module has its own independent power supply or receives power from the LED display module. To prevent the resource module or control unit from being forged during the image or video resource transmission process, thereby intruding into or damaging the system, it is crucial to study how to improve the security of the LED system and verify the identities of the resource module and control unit to avoid the loss of resource data in the system.
[0003] In existing technologies, the main approach is based on a public-private key system. After the client and server exchange public key certificates, the client uses the other party's public key certificate to verify the other party's identity and establish an encrypted connection between the two devices. However, the security between the two devices is not verified before the exchange of public key certificates, which cannot guarantee the security of the two devices when exchanging public key certificates. This affects the security of the LED system and poses a significant security risk.
[0004] It is evident that the aforementioned existing technologies suffer from low security. Summary of the Invention
[0005] Therefore, it is necessary to provide a two-way security verification method, apparatus, computer equipment, and computer-readable storage medium for LED systems that can improve the security of LED systems, in order to address the above-mentioned technical problems.
[0006] In a first aspect, this application provides a two-way security verification method for an LED system, applied to the control unit of an LED system, the method comprising:
[0007] Send a security verification request to the resource module in the LED system;
[0008] Obtain the response signal returned by the resource module in response to the security verification request. The response signal carries the first verification information and the algorithm sequence number. The first verification information is obtained by randomly combining multiple parameters according to the algorithm. The multiple parameters include at least one resource module parameter and at least one target parameter. The target parameter comes from the resource module or the control unit.
[0009] Based on the first verification information, obtain the pre-stored parameters corresponding to multiple parameters;
[0010] Based on the algorithm sequence number, the algorithm corresponding to the algorithm sequence number is retrieved and the pre-stored parameters are combined to obtain the second verification information;
[0011] If the first verification information matches the second verification information, the security verification is successful.
[0012] In one embodiment, the first verification information is obtained by the resource module receiving a security verification request sent by the control unit, retrieving an algorithm and multiple parameters according to the security verification request, randomly combining the multiple parameters according to the algorithm to obtain combined verification data, extracting the first part of the combined verification data as a verification code, and converting the verification code into binary to obtain the final verification information.
[0013] In one embodiment, the LED system two-way security verification method further includes:
[0014] When the two-way security authentication is successful, a key configuration request is sent to the resource module;
[0015] Receive configuration information from the resource module in response to the key configuration request;
[0016] Based on the configuration information, establish an encrypted communication link with the resource module.
[0017] Secondly, this application also provides a two-way security verification device for an LED system, applied to the control unit of an LED system, the device comprising:
[0018] The first query response module is used to send a security verification request to the resource module in the LED system; and to obtain the response signal returned by the resource module, wherein the response signal carries the first verification information and the algorithm sequence number. The first verification information is obtained by randomly combining multiple parameters according to the algorithm. The multiple parameters include at least one resource module parameter and at least one target parameter. The target parameter comes from the resource module or the control unit.
[0019] The first data acquisition module is used to acquire pre-stored parameters corresponding to multiple parameters based on the first verification information;
[0020] The first security verification module is used to retrieve the pre-stored parameters corresponding to the algorithm sequence number and combine them to obtain the second verification information; if the first verification information is consistent with the second verification information, the security verification is successful.
[0021] Thirdly, this application also provides a computer device. The computer device includes a memory and a processor, the memory storing a computer program, and the processor executing the computer program to perform the following steps:
[0022] Send a security verification request to the resource module in the LED system;
[0023] Obtain the response signal returned by the resource module in response to the security verification request. The response signal carries the first verification information and the algorithm sequence number. The first verification information is obtained by randomly combining multiple parameters according to the algorithm. The multiple parameters include at least one resource module parameter and at least one target parameter. The target parameter comes from the resource module or the control unit.
[0024] Based on the first verification information, obtain the pre-stored parameters corresponding to multiple parameters;
[0025] Based on the algorithm sequence number, the algorithm corresponding to the algorithm sequence number is retrieved and the pre-stored parameters are combined to obtain the second verification information;
[0026] If the first verification information matches the second verification information, the security verification is successful.
[0027] Fourthly, this application also provides a computer-readable storage medium. The computer-readable storage medium stores a computer program thereon, which, when executed by a processor, performs the following steps:
[0028] Send a security verification request to the resource module in the LED system;
[0029] Obtain the response signal returned by the resource module in response to the security verification request. The response signal carries the first verification information and the algorithm sequence number. The first verification information is obtained by randomly combining multiple parameters according to the algorithm. The multiple parameters include at least one resource module parameter and at least one target parameter. The target parameter comes from the resource module or the control unit.
[0030] Based on the first verification information, obtain the pre-stored parameters corresponding to multiple parameters;
[0031] Based on the algorithm sequence number, the algorithm corresponding to the algorithm sequence number is retrieved and the pre-stored parameters are combined to obtain the second verification information;
[0032] If the first verification information matches the second verification information, the security verification is successful.
[0033] The aforementioned LED system bidirectional security verification method, device, computer equipment, and storage medium perform security verification before the control unit and resource module communicate. This involves acquiring a response signal from the resource module carrying first verification information and an algorithm sequence number. Then, based on the algorithm sequence number in the response signal, the corresponding algorithm is retrieved to combine pre-stored parameters, resulting in second verification information. The first and second verification information are compared, and the result is used as the final security verification result. Throughout the process, the first verification information used for verification is obtained by randomly combining multiple parameters according to the algorithm. It is evident that different algorithms and different numbers and types of combined parameters can make the first verification information highly random. Only one second verification information can correspond to the first verification information, increasing the difficulty of cracking or forging the received verification information, thereby improving the overall security of the LED system.
[0034] In addition, another method, apparatus, computer equipment, and computer-readable storage medium for two-way security verification of LED systems are also provided.
[0035] In a first aspect, this application provides a two-way security verification method for an LED system, applied to the resource module of an LED system, the method comprising:
[0036] Send a security verification request to the control unit in the LED system;
[0037] Obtain the response signal returned by the control unit in response to the security verification request. The response signal carries third verification information and algorithm sequence number. The third verification information is obtained by randomly combining multiple parameters according to the algorithm. The multiple parameters include at least one control unit parameter and at least one target parameter. The target parameter comes from the control unit or resource module.
[0038] Based on the third verification information, obtain the pre-stored parameters corresponding to multiple parameters;
[0039] Based on the algorithm sequence number, the algorithm corresponding to the algorithm sequence number is retrieved and the pre-stored parameters are combined to obtain the fourth verification information;
[0040] If the third verification information matches the fourth verification information, the security verification is successful.
[0041] In one embodiment, the third verification information is obtained by the control unit receiving a security verification request sent by the resource module, retrieving an algorithm and multiple parameters according to the security verification request, randomly combining the multiple parameters according to the algorithm to obtain combined verification data, extracting the first part of the combined verification data to obtain a verification code, and converting the verification code into binary to obtain the verification code.
[0042] In one embodiment, the LED system two-way security verification method further includes:
[0043] When the two-way security authentication is successful, a key configuration request is sent to the control unit;
[0044] Receive configuration information from the control unit in response to the key configuration request;
[0045] Based on the configuration information, establish an encrypted communication link with the resource module.
[0046] Secondly, this application also provides a two-way security verification device for an LED system, applied to the resource module of an LED system, the device comprising:
[0047] The second query response module is used to send a security verification request to the control unit in the LED system; obtain the response signal returned by the control unit, wherein the response signal carries the third verification information and the algorithm sequence number. The third verification information is obtained by randomly combining multiple parameters according to the algorithm. The multiple parameters include at least one control unit parameter and at least one target parameter. The target parameter comes from the control unit or the resource module.
[0048] The second data acquisition module is used to acquire pre-stored parameters corresponding to multiple parameters based on the third verification information;
[0049] The second security verification module is used to retrieve the pre-stored parameters corresponding to the algorithm sequence number and combine them to obtain the second verification information; if the third verification information is consistent with the fourth verification information, the security verification is successful.
[0050] Thirdly, this application also provides a computer device. The computer device includes a memory and a processor, the memory storing a computer program, and the processor executing the computer program to perform the following steps:
[0051] Send a security verification request to the control unit in the LED system;
[0052] Obtain the response signal returned by the control unit in response to the security verification request. The response signal carries third verification information and algorithm sequence number. The third verification information is obtained by randomly combining multiple parameters according to the algorithm. The multiple parameters include at least one control unit parameter and at least one target parameter. The target parameter comes from the control unit or resource module.
[0053] Based on the third verification information, obtain the pre-stored parameters corresponding to multiple parameters;
[0054] Based on the algorithm sequence number, the algorithm corresponding to the algorithm sequence number is retrieved and the pre-stored parameters are combined to obtain the fourth verification information;
[0055] If the third verification information matches the fourth verification information, the security verification is successful.
[0056] Fourthly, this application also provides a computer-readable storage medium. The computer-readable storage medium stores a computer program thereon, which, when executed by a processor, performs the following steps:
[0057] Send a security verification request to the control unit in the LED system;
[0058] Obtain the response signal returned by the control unit in response to the security verification request. The response signal carries third verification information and algorithm sequence number. The third verification information is obtained by randomly combining multiple parameters according to the algorithm. The multiple parameters include at least one control unit parameter and at least one target parameter. The target parameter comes from the control unit or resource module.
[0059] Based on the third verification information, obtain the pre-stored parameters corresponding to multiple parameters;
[0060] Based on the algorithm sequence number, the algorithm corresponding to the algorithm sequence number is retrieved and the pre-stored parameters are combined to obtain the fourth verification information;
[0061] If the third verification information matches the fourth verification information, the security verification is successful.
[0062] The aforementioned LED system bidirectional security verification method, device, computer equipment, and storage medium perform security verification before the control unit and resource module communicate. This involves acquiring a response signal from the control unit carrying third verification information and an algorithm sequence number. Then, based on the algorithm sequence number in the response signal, the corresponding algorithm is retrieved to combine pre-stored parameters, resulting in fourth verification information. The comparison between the third and fourth verification information is used as the final security verification result. The third verification information used for verification is obtained by randomly combining multiple parameters according to the algorithm. It is evident that different algorithms and different numbers and types of combined parameters can make the third verification information highly random. Only one fourth verification information can correspond to the third verification information, increasing the difficulty of cracking or forging the received verification information, thereby improving the overall security of the LED system. Attached Figure Description
[0063] Figure 1 This is an application environment diagram of the two-way security verification method for an LED system in one embodiment;
[0064] Figure 2 This is a flowchart illustrating a two-way security verification method for an LED system in one embodiment;
[0065] Figure 3 This is a schematic diagram of the process for establishing an encrypted communication link in one embodiment;
[0066] Figure 4This is a flowchart illustrating another embodiment of a two-way security verification method for an LED system;
[0067] Figure 5 This is a schematic diagram illustrating the process of establishing an encrypted communication link in another embodiment;
[0068] Figure 6 This is a structural block diagram of a two-way security verification device for an LED system in one embodiment;
[0069] Figure 7 This is a structural block diagram of the LED system bidirectional security verification device in another embodiment;
[0070] Figure 8 This is an internal structural diagram of a computer device in one embodiment;
[0071] Figure 9 This is a diagram of the internal structure of a computer device in another embodiment. Detailed Implementation
[0072] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application.
[0073] The two-way security verification method for LED systems provided in this application embodiment can be applied to, for example... Figure 1In the application environment shown, the control unit 102 and resource module 104 in the LED system perform mutual security verification. When the LED system bidirectional security verification method is applied to the control unit 102, the control unit 102 sends a security verification request to the resource module 104, and then obtains the response signal returned by the resource module 104 in response to the security verification request. The response signal carries first verification information and an algorithm sequence number. The first verification information is obtained by randomly combining multiple parameters according to the algorithm. The multiple parameters include at least one resource module parameter and at least one target parameter. The target parameter comes from the resource module or the control unit. According to the first verification information, the control unit 102 obtains the pre-stored parameters corresponding to the multiple parameters. According to the algorithm sequence number, it calls the algorithm corresponding to the algorithm sequence number to combine the pre-stored parameters to obtain the second verification information. If the first verification information and the second verification information are consistent, the control unit 102 passes the security verification of the resource module 104. In addition, this application also provides a two-way security verification method for an LED system applied to a resource module 104. The resource module 104 sends a security verification request to the control unit 102, and then obtains the response signal returned by the control unit 102 in response to the security verification request. The response signal carries third verification information and an algorithm sequence number. The third verification information is obtained by randomly combining multiple parameters according to the algorithm. The multiple parameters include at least one control unit parameter and at least one target parameter. The target parameter comes from the control unit or the resource module. According to the third verification information, the resource module 104 obtains the pre-stored parameters corresponding to the multiple parameters. According to the algorithm sequence number, it calls the algorithm corresponding to the algorithm sequence number to combine the pre-stored parameters to obtain fourth verification information. If the third verification information and the fourth verification information are consistent, the resource module 104 passes the security verification of the control unit 102.
[0074] In one embodiment, such as Figure 2 As shown, a two-way security verification method for an LED system is provided. When applied to a control unit in an LED system, this method includes the following steps:
[0075] S100 sends a security verification request to the resource module in the LED system.
[0076] The resource module in the LED system is used to store and transmit resource data. The security verification request is a query command sent by the control unit in the LED system to the resource module to perform security verification. Specifically, according to the query-response mechanism, the control unit in the LED system needs to send a security verification request to the resource module before performing security verification. Upon receiving the security verification request, the resource module then returns the relevant verification information required for security verification.
[0077] S200, obtain the response signal returned by the resource module in response to the security verification request, wherein the response signal carries the first verification information and the algorithm sequence number. The first verification information is obtained by randomly combining multiple parameters according to the algorithm. The multiple parameters include at least one resource module parameter and at least one target parameter. The target parameter comes from the resource module or the control unit.
[0078] The response signal is a digital or analog signal transmitted in response to an inquiry, or a radio frequency signal, or a combination of signals carrying different information content; the first verification information is information generated by the resource module to determine whether the resource module is secure; the control unit is a module in the LED system mainly used to control the resource module to transmit data.
[0079] Specifically, the control unit receives the response signal returned by the resource module in response to the security verification request. This response signal carries first verification information and an algorithm sequence number. The first verification information is obtained by randomly combining multiple parameters according to the algorithm. These multiple parameters include at least one resource module parameter and at least one target parameter. Since this can serve as the primary basis for subsequent security verification of the resource module, at least one of the multiple parameters must be a resource module parameter. The target parameter can originate from either the resource module or the control unit. Specifically, the first verification information can be obtained by combining two or more parameters from the resource module using a corresponding algorithm, or by combining at least one parameter from the resource module with at least one parameter from the control unit using a corresponding algorithm. The parameters in the control unit mainly include the control board number, control board serial number, and control board information number. The control board information number is a combination of numbers and letters used to describe relevant information about the control board, such as batch number and internal model number. The parameters in the resource module mainly include the resource module number, resource module installation date, resource module production date, and resource sequence list. The algorithm can be selected according to actual needs, such as subtraction, multiplication, or exponentiation. For example, the first verification information is obtained by adding the resource module number and the installation date in the resource module using an addition algorithm.
[0080] S300: Based on the first verification information, obtain the pre-stored parameters corresponding to multiple parameters.
[0081] Specifically, after the control unit receives the response signal returned by the resource module, it determines which parameters the first verification information is composed of based on the first verification information included in the response signal, and retrieves the pre-stored parameters corresponding to these parameters. The retrieval method is not limited here, but can be done in two ways: (1) directly retrieved from the control unit. In addition to storing its own parameters, the control unit also stores the relevant parameters of the resource module corresponding to the control unit; (2) retrieved from a third-party server that stores all parameter data of the control unit and the resource module. It should be noted that in some cases, due to the different models of the resource modules, it is impossible to store the parameters of all models of resource modules corresponding to the control unit in the control unit. Retrieving the required parameters from a third-party server that stores all parameter data of the control unit and the resource module is more stable, and even if the control unit is damaged, the secure storage module is still secure and will not lose data, thus improving the security of the system.
[0082] S400: Based on the algorithm sequence number, retrieve the pre-stored parameters corresponding to the algorithm sequence number and combine them to obtain the second verification information.
[0083] Specifically, since the response signal returned by the resource module includes an algorithm sequence number after the first verification information, that is, the sequence number of the algorithm used to generate the first verification information, the algorithm corresponding to the algorithm sequence number is retrieved according to the algorithm sequence number in the response signal, and the obtained pre-stored parameters are combined according to the same algorithm to obtain the second verification information.
[0084] S500: If the first verification information matches the second verification information, the security verification is successful.
[0085] Specifically, the first verification information in the response signal returned by the resource module is compared with the second verification information generated by the control unit using the same algorithm based on the pre-stored parameters. If the verification information generated by the control unit is consistent with the verification information generated by the resource module, it means that the control unit has passed the security verification of the resource module and the resource module has not been disguised or hacked.
[0086] The aforementioned two-way security verification method for LED systems performs security verification before the control unit communicates with the resource module. This involves obtaining a response signal from the resource module carrying first verification information and an algorithm sequence number. Then, based on the algorithm sequence number in the response signal, the corresponding algorithm is retrieved to combine pre-stored parameters, resulting in second verification information. The first and second verification information are compared, and the result is used as the final security verification result. Throughout the process, the first verification information used for verification is obtained by randomly combining multiple parameters according to the algorithm. It is evident that different algorithms and different numbers and types of combined parameters can make the first verification information highly random. Only one second verification information can correspond to the first verification information, increasing the difficulty of cracking or forging the received verification information, thereby improving the overall security of the LED system.
[0087] In one embodiment, the first verification information is obtained by the resource module receiving a security verification request sent by the control unit, retrieving an algorithm and multiple parameters according to the security verification request, randomly combining the multiple parameters according to the algorithm to obtain combined verification data, extracting the first part of the combined verification data as a verification code, and converting the verification code into binary to obtain the final verification information.
[0088] Specifically, the first verification information used for security verification of the resource module is obtained by the resource module receiving the security verification request sent by the control unit, retrieving the algorithm in the resource module and randomly combining multiple parameters to obtain a combined verification data. Considering that the length of the combined verification data is too long, which will reduce the efficiency of the entire verification process, after obtaining the combined verification data, the first part of the combined verification data is extracted as the verification code, and the verification code is obtained by binary conversion.
[0089] In this embodiment, the first part of the combined verification data obtained by randomly combining the algorithm with multiple parameters is taken as the verification code to prevent the efficiency of security verification from being reduced due to the excessive length of the combined verification data. Then, the verification code is converted into binary form so that the first verification information is in binary form, so as to speed up the information processing process, thereby improving the efficiency of the entire security verification, quickly obtaining accurate security verification results, and facilitating timely measures to deal with any abnormal situations, thereby improving the security of the LED system.
[0090] In one embodiment, such as Figure 3 As shown, the LED bidirectional safety verification method also includes:
[0091] S120: When the two-way security authentication is successful, a key configuration request is sent to the resource module.
[0092] S140, Receive configuration information from the resource module in response to the key configuration request;
[0093] S160 establishes an encrypted communication link with the resource module based on the configuration information.
[0094] Specifically, after the control unit passes the security verification of the resource module, it sends a key configuration request to the resource module, receives the configuration information returned by the resource module in response to the key configuration request, establishes an encrypted communication link between the control unit and the resource module based on the configuration information returned by the resource module, encrypts the data transmitted between the control unit and the resource module, ensures the security of data transmission, and thus ensures the security of the LED system.
[0095] In this embodiment, after the control unit passes the security verification of the resource module, an encrypted communication link is established between the control unit and the resource module to ensure the security of data transmission between the control unit and the resource module, prevent data from being stolen or impersonated, and improve the security of the LED system.
[0096] In another embodiment, such as Figure 4 As shown, another two-way security verification method for LEDs is provided, applied to the resource module of an LED system, including:
[0097] S220 sends a security verification request to the control unit in the LED system.
[0098] In this system, the control unit is the module used to control the transmission of resource data by the resource module. The security verification request is an interrogation command sent by the resource module in the LED system to the control unit for security verification. Specifically, according to the interrogation-response mechanism, to perform security verification on the control unit through the resource module in the LED system, a security verification request must first be sent to the control unit, so that the control unit returns the relevant verification information required for security verification after receiving the security verification request.
[0099] S240, obtain the response signal returned by the control unit in response to the security verification request, wherein the response signal carries third verification information and algorithm sequence number, the third verification information is obtained by randomly combining multiple parameters according to the algorithm, the multiple parameters include at least one control unit parameter and at least one target parameter, the target parameter comes from the control unit or resource module.
[0100] Among them, the response signal is a radio frequency signal or a combination of signals transmitted in response to an inquiry; the third verification information is a type of information generated by the resource module to determine whether the resource module is secure; and the control unit is a module in the LED system mainly used to control the resource module to transmit data.
[0101] Specifically, the resource module receives the response signal returned by the control unit in response to the security verification request. This response signal carries third verification information and an algorithm sequence number. The third verification information is obtained by randomly combining multiple parameters according to the algorithm. These multiple parameters include at least one control unit parameter and at least one target parameter. To serve as the primary basis for subsequent security verification of the control unit, at least one of the multiple parameters must be a control unit parameter. The target parameter can originate from either the control unit or the resource module. That is, two or more parameters from the control unit can be combined using a corresponding algorithm to obtain the third verification information, or at least one parameter from the control unit and at least one parameter from the resource module can be combined using a corresponding algorithm to obtain the third verification information. The parameters in the control unit mainly include the control board number, control board serial number, and control board information number. The control board information number is a combination of numbers and letters used to describe relevant information about the control board, such as batch number and internal model number. The parameters in the resource module mainly include the resource module number, resource module installation date, resource module production date, and resource sequence list. The algorithm can be selected according to actual needs, such as subtraction, multiplication, or exponentiation. For example, the third verification information is obtained by combining the control board number and resource module number in the control unit using an exponentiation algorithm.
[0102] S260, based on the third verification information, obtain the pre-stored parameters corresponding to multiple parameters.
[0103] Specifically, after the resource module receives the response signal returned by the control unit, it determines which parameters the third verification information is composed of based on the third verification information included in the response signal, and retrieves the pre-stored parameters corresponding to these parameters. The retrieval method is not limited here, but can be done in two main ways: (1) Retrieve directly from the resource module. In addition to storing its own parameters, the resource module also stores the relevant parameters of the control unit corresponding to the resource module; (2) Retrieve from a third-party server that stores all parameter data of the control unit and the resource module. It should be noted that in some cases, due to the different models of the control units, it is impossible to store the parameters of all models of control units corresponding to the resource module in the resource module. Retrieving the required parameters from a third-party server that stores all parameter data of the control unit and the resource module is more stable, and even if the resource module is damaged, the secure storage module is still secure and will not lose data, thus improving the security of the system.
[0104] S280, based on the algorithm sequence number, retrieve the pre-stored parameters corresponding to the algorithm sequence number and combine them to obtain the fourth verification information.
[0105] Specifically, since the response signal returned by the control unit includes not only the third verification information but also the algorithm sequence number, that is, the sequence number of the algorithm used to generate the third verification information, the algorithm corresponding to the algorithm sequence number is retrieved according to the algorithm sequence number in the response signal, and the obtained pre-stored parameters are combined according to the same algorithm to obtain the fourth verification information.
[0106] S290, if the third verification information matches the fourth verification information, then the security verification is successful.
[0107] Specifically, the third verification information in the response signal returned by the control unit is compared with the fourth verification information generated by the resource module using the same algorithm based on the pre-stored parameters. If the verification information generated by the resource module is consistent with the verification information generated by the control unit, it means that the resource module has passed the security verification of the control unit and the control unit has not been disguised or hacked.
[0108] In this embodiment, the response signal carrying the third verification information and the algorithm sequence number returned by the control unit is obtained. Then, the corresponding algorithm is retrieved according to the algorithm sequence number included in the response signal to combine the pre-stored parameters to obtain the fourth verification information. The result of comparing the third verification information and the fourth verification information is used as the final security verification result. The third verification information used for verification in the whole process is obtained by randomly combining multiple parameters according to the algorithm. It can be seen that different algorithms and different numbers and types of combined parameters can make the third verification information highly random. Only one fourth verification information can correspond to the third verification information, which increases the difficulty of the received verification information being cracked or forged, thereby improving the overall security of the LED system.
[0109] In one embodiment, the third verification information is obtained by the control unit receiving a security verification request sent by the resource module, retrieving an algorithm and multiple parameters according to the security verification request, randomly combining the multiple parameters according to the algorithm to obtain combined verification data, extracting the first part of the combined verification data to obtain a verification code, and converting the verification code into binary to obtain the final verification information.
[0110] Specifically, the third verification information used to verify the security of the control unit is obtained by the control unit receiving the security verification request sent by the resource module, retrieving the algorithm in the control unit and randomly combining multiple parameters to obtain a combined verification data. Considering that the length of the combined verification data is too long, which will reduce the efficiency of the entire verification process, after obtaining the combined verification data, the first part of the combined verification data is extracted as the verification code, and the verification code is converted into binary form to obtain the verification information.
[0111] In this embodiment, the first part of the combined verification data obtained by randomly combining the algorithm with multiple parameters is taken as the verification code to prevent the efficiency of security verification from being reduced due to the excessive length of the combined verification data. Then, the verification code is converted into binary form so that the obtained third verification information is in binary form, which can speed up the process of subsequent verification information processing, thereby improving the efficiency of the entire security verification. Quickly obtaining accurate security verification results also facilitates timely measures to be taken for any abnormal situations, thereby improving the security of the LED system.
[0112] In one embodiment, such as Figure 5 As shown, a two-way LED security verification method also includes:
[0113] S320 sends a key configuration request to the control unit when the two-way security authentication is successful;
[0114] S340, receives configuration information from the control unit in response to the key configuration request;
[0115] S360 establishes an encrypted communication link with the control unit based on the configuration information.
[0116] Specifically, after the resource module passes the security verification of the control unit, it sends a key configuration request to the control unit, receives the configuration information returned by the control unit in response to the key configuration request, establishes an encrypted communication link between the resource module and the control unit based on the configuration information returned by the control unit, encrypts the data transmitted between the control unit and the resource module, ensures the security of data transmission, and thus ensures the security of the LED system.
[0117] In this embodiment, after the resource module passes the security verification of the control unit, an encrypted communication link is established between the resource module and the control unit to ensure the security of data transmission between the control unit and the resource module, prevent data from being stolen or impersonated, and improve the security of the LED system.
[0118] In one embodiment, an LED bidirectional security verification method further includes:
[0119] Step 1: When the two-way security authentication is successful, send a key configuration request to the third-party security module;
[0120] Step 2: Receive the third-party feedback configuration information from the third-party security module in response to the key configuration request;
[0121] Step 3: Based on the configuration information provided by the third party, establish an encrypted communication link with the control unit.
[0122] Specifically, after the resource module passes the security verification of the control unit, it sends a key configuration request to the third-party security module, receives the third-party feedback configuration information returned by the third-party security module, establishes an encrypted communication link between the resource module and the control unit based on the third-party feedback configuration information returned by the third-party security module, encrypts the data transmitted between the control unit and the resource module, ensures the security of data transmission, and thus ensures the security of the LED system.
[0123] In one embodiment, after receiving the key configuration request, the third-party security module also needs to verify whether it has received verification success information from the control unit. The verification success information sent by the control unit includes the identity information of the resource module that has passed the two-way security verification, or it may also include the time when the resource module passed the two-way security verification, or it may also include the protocol information used by the control unit when communicating with the resource module.
[0124] It should be noted that the identification information of a resource module includes at least one of the following: the resource module's serial number, factory number, and model number. The quantity and content of the resource module's identification information can be selected according to actual needs, as long as it can distinguish different resource modules.
[0125] In one embodiment, a third-party security module is set up in a cloud server, allowing the third-party security module to respond to multiple resource modules.
[0126] In one embodiment, the third-party security module is located within the control unit, and the third-party security module is independent of the control unit. This facilitates communication between the third-party security module and the resource module or security unit, improving the response speed between them. Furthermore, delegating key configuration to the third-party security module avoids key information loss should the control unit be compromised, thereby enhancing system security. Specifically, the third-party security module located within the control unit can be independently replaced.
[0127] It should be understood that although the steps in the flowcharts of the above embodiments are shown sequentially according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the flowcharts of the above embodiments may include multiple steps or multiple stages. These steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these steps or stages is not necessarily sequential, but can be performed alternately or in turn with other steps or at least some of the steps or stages of other steps.
[0128] Based on the same inventive concept, this application also provides an LED system bidirectional security verification device for implementing the aforementioned LED system bidirectional security verification method. The solution provided by this device is similar to the solution described in the above method; therefore, the specific limitations in one or more embodiments of the LED system bidirectional security verification device provided below can be found in the limitations of the LED system bidirectional security verification method described above, and will not be repeated here.
[0129] In one embodiment, such as Figure 6 As shown, a two-way security verification device for an LED system is provided, applied to the control unit of an LED system, including: a first query response module 100, a first data acquisition module 200, and a first security verification module 300, wherein:
[0130] The first query response module 100 is used to send a security verification request to the resource module in the LED system; and to obtain the response signal returned by the resource module, wherein the response signal carries first verification information and an algorithm sequence number. The first verification information is obtained by randomly combining multiple parameters according to the algorithm. The multiple parameters include at least one resource module parameter and at least one target parameter. The target parameter comes from the resource module or the control unit.
[0131] The first data acquisition module 200 is used to acquire pre-stored parameters corresponding to multiple parameters based on the first verification information;
[0132] The first security verification module 300 is used to retrieve the pre-stored parameters corresponding to the algorithm sequence number according to the algorithm sequence number, combine them to obtain the second verification information, and compare the first verification information with the second verification information. If the first verification information and the second verification information are consistent, the security verification is passed.
[0133] The aforementioned two-way security verification device for LED systems obtains a response signal from a resource module carrying first verification information and an algorithm sequence number. Then, based on the algorithm sequence number included in the response signal, it retrieves the corresponding algorithm to combine pre-stored parameters to obtain second verification information. The result of comparing the first and second verification information is used as the final security verification result. The first verification information used for verification in the entire process is obtained by randomly combining multiple parameters according to the algorithm. It can be seen that different algorithms and different numbers and types of combined parameters can make the first verification information highly random. Only one second verification information can correspond to the first verification information, which increases the difficulty of the received verification information being cracked or forged, thereby improving the overall security of the LED system.
[0134] In one embodiment, the first security verification module 300 is further configured to send a key configuration request to the resource module when the two-way security verification is successful; receive configuration information fed back by the resource module in response to the key configuration request; and establish an encrypted communication link with the resource module according to the configuration information.
[0135] In another embodiment, such as Figure 7 As shown, another two-way security verification device for LED systems is also provided. The resource modules applied to the LED system include: a second query response module 400, a second data acquisition module 500, and a second security verification module 600, wherein:
[0136] The second query response module 400 is used to send a security verification request to the control unit in the LED system; and to obtain the response signal returned by the control unit in response to the security verification request, wherein the response signal carries third verification information and an algorithm sequence number. The third verification information is obtained by randomly combining multiple parameters according to the algorithm. The multiple parameters include at least one control unit parameter and at least one target parameter. The target parameter comes from the control unit or the resource module.
[0137] The second data acquisition module 500 is used to acquire pre-stored parameters corresponding to multiple parameters based on the third verification information;
[0138] The second security verification module 600 is used to retrieve the pre-stored parameters corresponding to the algorithm sequence number according to the algorithm sequence number and combine them to obtain the fourth verification information; if the third verification information and the fourth verification information are consistent, the security verification is passed.
[0139] In one embodiment, the second security verification module 600 is further configured to send a key configuration request to the control unit when the two-way security verification is successful; receive configuration information fed back by the control unit in response to the key configuration request; and establish an encrypted communication link with the resource module based on the configuration information.
[0140] Each module in the aforementioned two-way security verification device for the LED system can be implemented entirely or partially through software, hardware, or a combination thereof. These modules can be embedded in or independent of the processor in a computer device, or stored in the memory of a computer device as software, so that the processor can call and execute the corresponding operations of each module.
[0141] In one embodiment, a computer device is provided, which may be a server, and its internal structure diagram may be as follows: Figure 8As shown, the computer device includes a processor, memory, and a network interface connected via a system bus. The processor provides computing and control capabilities. The memory includes non-volatile storage media and internal memory. The non-volatile storage media stores the operating system, computer programs, and a database. The internal memory provides an environment for the operation of the operating system and computer programs in the non-volatile storage media. The database stores bidirectional security verification data for the LED system. The network interface communicates with external terminals via a network connection. When the computer program is executed by the processor, it implements a bidirectional security verification method for an LED system.
[0142] In one embodiment, a computer device is provided, which may be a terminal, and its internal structure diagram may be as follows: Figure 9 As shown, the computer device includes a processor, memory, communication interface, display screen, and input devices connected via a system bus. The processor provides computing and control capabilities. The memory includes non-volatile storage media and internal memory. The non-volatile storage media stores the operating system and computer programs. The internal memory provides an environment for the operation of the operating system and computer programs stored in the non-volatile storage media. The communication interface is used for wired or wireless communication with external terminals; wireless communication can be achieved through Wi-Fi, mobile cellular networks, NFC (Near Field Communication), or other technologies. When the computer program is executed by the processor, it implements a two-way security authentication method for an LED system. The display screen can be an LCD screen or an e-ink display screen. The input devices can be a touch layer covering the display screen, buttons, a trackball, or a touchpad mounted on the computer device casing, or an external keyboard, touchpad, or mouse.
[0143] Those skilled in the art will understand that Figure 8 or Figure 9 The structure shown is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the computer device to which the present application is applied. Specific computer devices may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.
[0144] In one embodiment, a computer device is provided, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to perform the following steps:
[0145] A security verification request is sent to the resource module in the LED system; the response signal returned by the resource module in response to the security verification request is obtained, wherein the response signal carries first verification information and an algorithm sequence number. The first verification information is obtained by randomly combining multiple parameters according to the algorithm. The multiple parameters include at least one resource module parameter and at least one target parameter. The target parameter comes from the resource module or the control unit; based on the first verification information, the pre-stored parameters corresponding to the multiple parameters are obtained; based on the algorithm sequence number, the algorithm corresponding to the algorithm sequence number is invoked to combine the pre-stored parameters to obtain second verification information; if the first verification information and the second verification information are consistent, the security verification is passed.
[0146] In one embodiment, the processor, when executing a computer program, also performs the following steps:
[0147] When the two-way security authentication is successful, a key configuration request is sent to the resource module; the configuration information fed back by the resource module in response to the key configuration request is received; and an encrypted communication link is established between the resource module and the resource module based on the configuration information.
[0148] In one embodiment, the processor, when executing a computer program, also performs the following steps:
[0149] A security verification request is sent to the control unit in the LED system; the response signal returned by the control unit in response to the security verification request is obtained, wherein the response signal carries third verification information and an algorithm sequence number. The third verification information is obtained by randomly combining multiple parameters according to the algorithm. The multiple parameters include at least one control unit parameter and at least one target parameter. The target parameter comes from the control unit or resource module; based on the third verification information, the pre-stored parameters corresponding to the multiple parameters are obtained; based on the algorithm sequence number, the algorithm corresponding to the algorithm sequence number is invoked to combine the pre-stored parameters to obtain fourth verification information; if the third verification information and the fourth verification information are consistent, the security verification is passed.
[0150] In one embodiment, the processor, when executing a computer program, also performs the following steps:
[0151] When the two-way security authentication is successful, a key configuration request is sent to the control unit; the configuration information fed back by the control unit in response to the key configuration request is received; and an encrypted communication link is established with the resource module based on the configuration information.
[0152] In one embodiment, a computer-readable storage medium is provided having a computer program stored thereon, the computer program performing the following steps when executed by a processor:
[0153] A security verification request is sent to the resource module in the LED system; the response signal returned by the resource module in response to the security verification request is obtained, wherein the response signal carries first verification information and an algorithm sequence number. The first verification information is obtained by randomly combining multiple parameters according to the algorithm. The multiple parameters include at least one resource module parameter and at least one target parameter. The target parameter comes from the resource module or the control unit; based on the first verification information, the pre-stored parameters corresponding to the multiple parameters are obtained; based on the algorithm sequence number, the algorithm corresponding to the algorithm sequence number is invoked to combine the pre-stored parameters to obtain second verification information; if the first verification information and the second verification information are consistent, the security verification is passed.
[0154] In one embodiment, when the computer program is executed by a processor, it also performs the following steps:
[0155] When the two-way security authentication is successful, a key configuration request is sent to the resource module; the configuration information fed back by the resource module in response to the key configuration request is received; and an encrypted communication link is established between the resource module and the resource module based on the configuration information.
[0156] In one embodiment, when the computer program is executed by a processor, it also performs the following steps:
[0157] A security verification request is sent to the control unit in the LED system; the response signal returned by the control unit in response to the security verification request is obtained, wherein the response signal carries third verification information and an algorithm sequence number. The third verification information is obtained by randomly combining multiple parameters according to the algorithm. The multiple parameters include at least one control unit parameter and at least one target parameter. The target parameter comes from the control unit or resource module; based on the third verification information, the pre-stored parameters corresponding to the multiple parameters are obtained; based on the algorithm sequence number, the algorithm corresponding to the algorithm sequence number is invoked to combine the pre-stored parameters to obtain fourth verification information; if the third verification information and the fourth verification information are consistent, the security verification is passed.
[0158] In one embodiment, when the computer program is executed by a processor, it also performs the following steps:
[0159] When the two-way security authentication is successful, a key configuration request is sent to the control unit; the configuration information fed back by the control unit in response to the key configuration request is received; and an encrypted communication link is established with the resource module based on the configuration information.
[0160] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, data stored, data displayed, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties.
[0161] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium, and when executed, it can include the processes of the embodiments of the above methods. Any references to memory, databases, or other media used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM). The databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, blockchain-based distributed databases. The processors involved in the embodiments provided in this application may be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, etc., and are not limited to these.
[0162] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.
[0163] The embodiments described above are merely illustrative of several implementation methods of this application, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of this patent application. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this application should be determined by the appended claims.
Claims
1. A method for bidirectional secure verification of an LED system, characterized in that, The method includes: When applied to the control unit of an LED system, a first security verification request is sent to the resource module in the LED system; a first response signal is obtained from the resource module in response to the first security verification request, wherein the first response signal carries first verification information and a first algorithm sequence number, the first verification information is obtained by randomly combining multiple first parameters according to an algorithm, the multiple first parameters include at least one resource module parameter and at least one target parameter; based on the first verification information, a first pre-stored parameter corresponding to the multiple first parameters is obtained; based on the first algorithm sequence number, the algorithm corresponding to the first algorithm sequence number is invoked to combine the first pre-stored parameter to obtain second verification information; if the first verification information and the second verification information are consistent, the security verification is passed; When applied to a resource module in an LED system, a second security verification request is sent to the control unit in the LED system; a second response signal is obtained from the control unit in response to the second security verification request, wherein the second response signal carries third verification information and a second algorithm sequence number, the third verification information is obtained by randomly combining multiple second parameters according to an algorithm, the multiple second parameters include at least one control unit parameter and at least one target parameter; based on the third verification information, a second pre-stored parameter corresponding to the multiple second parameters is obtained; based on the second algorithm sequence number, the algorithm corresponding to the second algorithm sequence number is invoked to combine the second pre-stored parameter to obtain a fourth verification information; if the third verification information and the fourth verification information are consistent, the security verification is passed; wherein, the target parameter originates from the resource module or the control unit; the parameters in the resource module include the resource module number, the resource module installation date, the resource module production date, and the resource sequence table; the parameters in the control unit include the control board number, the control board sequence number, and the control board information number.
2. The method of claim 1, wherein, The first verification information is obtained by the resource module receiving the first security verification request sent by the control unit, retrieving the algorithm and multiple first parameters according to the first security verification request, randomly combining the multiple first parameters according to the algorithm to obtain the first combined verification data, extracting the first part of the first combined verification data as the first verification code, and converting the first verification code into binary to obtain the first verification code.
3. The method of claim 1, wherein, When applied to a control unit of an LED system, the method further includes: When the two-way security authentication is successful, a first key configuration request is sent to the resource module; Receive the first configuration information fed back by the resource module in response to the first key configuration request; Based on the first configuration information, an encrypted communication link is established with the resource module.
4. The method of claim 1, wherein, The third verification information is obtained by the control unit receiving the second security verification request sent by the resource module, retrieving the algorithm and multiple second parameters according to the second security verification request, randomly combining the multiple second parameters according to the algorithm to obtain the second combined verification data, extracting the first part of the second combined verification data to obtain the second verification code, and converting the second verification code into binary to obtain the second verification code.
5. The method of claim 1, wherein, When applied to the resource module of an LED system, the method further includes: When the two-way security authentication is successful, a second key configuration request is sent to the control unit; Receive the second configuration information fed back by the control unit in response to the second key configuration request; Based on the second configuration information, an encrypted communication link is established with the control unit.
6. A LED system bidirectional secure verification apparatus, characterized in that, The device includes: A first query-response module for a control unit of an LED system is used to send a first security verification request to a resource module in the LED system; and to obtain a first response signal returned by the resource module, wherein the first response signal carries first verification information and a first algorithm sequence number, the first verification information is obtained by randomly combining multiple first parameters according to an algorithm, the multiple first parameters include at least one resource module parameter and at least one target parameter, the target parameter being derived from the resource module or the control unit; A first data acquisition module for a control unit applied to an LED system is used to acquire a first pre-stored parameter corresponding to the plurality of first parameters based on the first verification information. A first security verification module applied to the control unit of an LED system is used to retrieve the algorithm corresponding to the first algorithm sequence number and combine the first pre-stored parameters to obtain second verification information; if the first verification information is consistent with the second verification information, the security verification is passed. A second query-response module for a resource module in an LED system is used to send a second security verification request to a control unit in the LED system; obtain a second response signal returned by the control unit, wherein the second response signal carries third verification information and a second algorithm sequence number, the third verification information being obtained by randomly combining multiple second parameters according to an algorithm, the multiple second parameters including at least one control unit parameter and at least one target parameter, the target parameter being derived from the control unit or the resource module; the parameters in the resource module include a resource module number, a resource module installation date, a resource module production date, and a resource sequence list; the parameters in the control unit include a control board number, a control board serial number, and a control board information number; A second data acquisition module applied to the resource module of an LED system is used to acquire second pre-stored parameters corresponding to the plurality of second parameters based on the third verification information; The second security verification module applied to the resource module of the LED system is used to retrieve the algorithm corresponding to the second algorithm sequence number according to the second algorithm sequence number, combine the second pre-stored parameters, and obtain the fourth verification information; if the third verification information is consistent with the fourth verification information, the security verification is passed; The parameters in the resource module include the resource module number, resource module installation date, resource module production date, and resource sequence list; the parameters in the control unit include the control board number, control board serial number, and control board information number.
7. The apparatus according to claim 6, characterized in that, The first security verification module is also used to send a first key configuration request to the resource module when the two-way security verification is successful; receive the first configuration information fed back by the resource module in response to the first key configuration request; and establish an encrypted communication link with the resource module based on the first configuration information.
8. The apparatus according to claim 6, characterized in that, The second security verification module is also used to send a second key configuration request to the control unit when the two-way security verification is successful; receive second configuration information fed back by the control unit in response to the second key configuration request; and establish an encrypted communication link with the control unit based on the second configuration information.
9. A computer device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that, When the processor executes the computer program, it implements the steps of the method according to any one of claims 1 to 5.
10. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 5.
Citation Information
Patent Citations
Identity authentication method and identity authentication device for video conferences
CN108449568A