Marine engine data programming permission monitoring method and system
Patent Information
- Application Number
- CN202411611213.8
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-11-12
- Publication Date
- 2025-02-18
Smart Images
Figure CN119475319A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of engine electronic control technology, and in particular to a method and system for monitoring the burning authority of marine engine data. Background Art
[0002] With the upgrading of regulatory requirements, the electronic control technology of marine engines has developed rapidly. However, due to fierce market competition and the diversified competition of new green fuel technologies, some manufacturers illegally change the sensitive data of the engine after ship inspection and certification. Summary of the invention
[0003] In view of the deficiencies of the above-mentioned related technologies, the purpose of the present application is to provide a method and system for monitoring the burning authority of marine engine data to prevent the sensitive characteristic data of the engine from being illegally changed.
[0004] The present application provides a method for monitoring the burning authority of marine engine data, the steps comprising: (S1) The marine engine control module generates a Seed variable; wherein the Seed variable is obtained by concatenating and encrypting the controller factory serial number stored in the marine engine control module and the data version number of the last burn, and then concatenating with the value of the current burn counter; the data version number indicates the software version of the marine engine control module; (S2) The Seed variable is obtained through a burning tool and sent to an authentication unit, the authentication unit parses the Seed variable, decrypts the Seed variable to obtain a first plaintext, and verifies whether the format of the first plaintext satisfies the first format; if so, it indicates that the verification is passed, and the author digital number, the current time and the data version number of the current burning are encrypted to obtain a digital signature, and then continue to execute step (S3); otherwise, it is prompted that the verification has not passed, and the process ends; wherein the author digital number refers to the unique license authorization code compiled by the authentication unit for the computer; (S3) The burning tool obtains the digital signature and sends it to the marine engine control module to initiate a burning request; (S4) The marine engine control module decrypts the digital signature to obtain a second plaintext, verifies whether the format of the second plaintext satisfies the second format, and if so, writes the author digital number, current time and the version number of the data to be burned into a preset storage area of the marine engine control module, and proceeds to execution step (S5); otherwise, it indicates that the verification fails and the process ends; (S5) Obtaining the current data version number and the previous data version number, and comparing the previous data version number and the current data version number to see whether they are increasing in sequence and continuous. If so, the marine engine control module allows the burning tool to burn; otherwise, rejecting the burning request and prompting that the authentication fails.
[0005] Optionally, the authentication unit parses the Seed variable, and decrypts the Seed variable to obtain the first plaintext, including the following steps: The authentication unit divides the Seed variable, and combines the fixed key group with the value of the burn-in counter in the Seed variable into a first key for decryption; The first key is used to decrypt the controller factory serial number and the last data version number encrypted in the Seed variable to obtain the first plaintext.
[0006] Optionally, the second format includes the author's digital number in the first number of characters, the year, month, day, hour and minute date in the second number of characters, and the data version number in the third number of characters; the first format is the control model in the fourth number of characters, the control code in the fifth number of characters, the factory year and month in the sixth number of characters, and the version number in the seventh number of characters; the controller factory number includes the control model and the control code.
[0007] Optionally, the fourth number of characters is 2 characters, the fifth number of characters is 5 characters, the sixth number of characters is 4 characters, and the seventh number of characters is 4 characters; The first number of characters is 8 characters, the second number of characters is 12 characters, and the third number of characters is 4 characters.
[0008] Optionally, when running for the first time, the following steps are performed: the developer performs real-name registration authentication and generates an activation code or activation code file; Input the activation code or activation code file into the authentication unit to activate the authentication unit, collect the developer information and the hardware information of the computer to be burned, and bind the developer information with the hardware information of the computer.
[0009] Optionally, generating an activation code or an activation code file includes performing the following steps: The authentication unit collects the hardware information of the computer and encrypts the hardware information of the computer with a first public key to generate a registration code; The registration code is decrypted using the first private key paired with the first public key, and after associating the user information and the authorization period, the activation code is encrypted with the second private key to generate an activation code or an activation code file presented in a file form.
[0010] Optionally, the marine engine control module decrypts the digital signature to obtain a second plaintext, comprising executing the following steps: the marine engine control module uses a burn counter as a second key to decrypt the digital signature to obtain a second plaintext.
[0011] Optionally, the receiving the data to be programmed and completing the programming includes executing the following steps: Initialize the data buffer and receive the data to be burned; Parse the target address of the data and erase the sector; Write the data to be burned, and return the burning success message after completion, waiting for restart to take effect.
[0012] The present invention also provides a system for monitoring the burning authority of marine engine data, which is used to execute the steps of the method for monitoring the burning authority of marine engine data, including: The authentication unit is used to parse and decrypt the Seed variable and verify the decrypted plain text format, as well as to create a digital signature; A burning tool, used for burning, obtaining the Seed variable of the marine engine control module, and inputting the Seed variable into the authentication unit; The engine control module is used to generate Seed variables, record burning logs, decrypt digital signatures, and determine burning permissions; The burning tool is connected to the authentication unit and the engine control module respectively.
[0013] Optionally, it also includes a real-name authentication unit, which is used for developers to perform real-name registration authentication and generate an activation code or an activation code file; the real-name authentication unit is connected to the authentication unit.
[0014] The present invention has the following advantages: The method and system for monitoring the burning authority of marine engine data of the present invention realizes strict supervision and control of sensitive characteristic parameters of marine engines by introducing an authentication unit and a developer real-name authentication unit. The beneficial effects thereof are mainly reflected in the following aspects: Enhanced data security: This method and system effectively prevents the illegal change of sensitive data of the engine after ship inspection and certification, ensuring the integrity and accuracy of the data. Through the activation and identification mechanism of the authentication unit, only legally authenticated developers can perform sensitive data burning operations on their designated computers with known hardware characteristics, thereby greatly improving data security.
[0015] Improve regulatory compliance: Since the sensitive characteristic parameters of marine engines are directly related to the performance and safety of the ship, changes in their data must strictly comply with relevant laws and regulations. The present invention ensures that changes in engine data comply with laws and regulations by real-time monitoring and controlling the burning permissions, avoiding legal risks and compliance issues caused by illegal changes in data.
[0016] Convenient for developer management: Through the developer real-name authentication unit, the system can accurately identify legitimate operators and generate a unique activation code to activate the authentication unit. This design not only facilitates developer management, but also improves the reliability and security of the system. At the same time, the system also binds the developer information to its permission management hardware tools as a feature identifier for developer behavior supervision, further enhancing the security and controllability of the system.
[0017] Improve system stability: When the computer's core hardware is replaced, the operating system is changed or restored, or the system time is modified, the authentication unit will automatically be deactivated regardless of whether the computer is connected to the Internet. This design effectively prevents potential security risks caused by changes in the computer environment and improves the stability and reliability of the system. At the same time, it also provides developers with an effective means to promptly detect and handle abnormal changes in the computer environment.
[0018] In summary, the method and system for monitoring the burning authority of marine engine data of the present invention have significant beneficial effects, which not only enhance the security of data and improve regulatory compliance, but also facilitate management by developers and improve the stability of the system. These beneficial effects make the method and system have broad application prospects and important practical value in the field of marine engine data management and monitoring. BRIEF DESCRIPTION OF THE DRAWINGS
[0019] Figure 1 A flowchart of a method for monitoring the burning authority of marine engine data is provided for an embodiment of the present application; Figure 2 A schematic diagram of a system for monitoring the burning authority of marine engine data provided in an embodiment of the present application; Figure 3 This is a flowchart of the steps that need to be executed for the first run in the embodiments of the present application.
[0020] Description of reference numerals: 1- Marine engine control module; 2- Authentication unit; 3- Burning tool; 4- Real-name authentication unit. DETAILED DESCRIPTION
[0021] In order to facilitate the understanding of the present application, the present application will be described more fully below with reference to the relevant drawings. The preferred embodiments of the present application are given in the drawings. However, the present application can be implemented in many different forms and is not limited to the embodiments described herein. On the contrary, the purpose of providing these embodiments is to make the disclosure of the present application more thoroughly and comprehensively understood.
[0022] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art to which this application belongs. The terms used herein in the specification of this application are only for the purpose of describing specific embodiments and are not intended to limit this application.
[0023] In the description of the present application, the terms "first", "second", etc. are used to distinguish different objects rather than to describe a specific order. In addition, the terms "upper", "lower", "inner", "outer", etc. indicate directions or positional relationships based on the directions or positional relationships shown in the accompanying drawings. They are only for the convenience of describing the present application and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific direction, be constructed and operated in a specific direction. Therefore, they should not be understood as limitations on the present application.
[0024] It should be noted that the illustrations provided in the embodiments of the present application are only used to illustrate the basic concept of the present application in a schematic manner. The illustrations only show the components related to the present application rather than being drawn according to the number, shape and size of the components in actual implementation. In actual implementation, the type, quantity and proportion of each component may be changed arbitrarily, and the component layout may also be more complicated.
[0025] The specific implementation of the present application will be further described below in conjunction with the accompanying drawings.
[0026] See also Figure 1 and Figure 2 As shown, the embodiment of the present invention discloses a method for monitoring the burning authority of marine engine data, the steps comprising: (S1) The marine engine control module 1 generates a Seed variable; wherein the Seed variable is obtained by concatenating and encrypting the controller factory serial number stored in the marine engine control module 1 and the data version number of the last burn, and then concatenating the encrypted data with the value of the current burn counter; the data version number indicates the software version of the marine engine control module 1; The marine engine control module 1 (ECU) needs to be inserted with codes including burning log records, generating Seed scalars, identifying digital signatures, burning control and other specific functions to cooperate in realizing data burning process control. Among them, the burning record information includes the author's digital number, current time and data version number. Specifically, the burning tool 3 accesses the ECU's specified memory address to obtain the Seed variable. This burning tool 3 can be a special burning tool developed based on the engine controller calibration system and method based on syntax configuration function disclosed in the invention CN116540675A, or it can be a commercial burning tool 3CANape or other burning tools, which are not limited here and can be selected according to actual needs. For example, the burning tool can obtain the Seed variable value of the ECU after connecting to the ECU using a CAN card.
[0027] In this embodiment, the marine engine control module 1 (ECU) generates a Seed variable, and the calculated value of the Seed variable is never repeated, thereby ensuring that the digital signature made by the authentication unit 2 using the value is only valid once. Exemplarily, the method uses an encryption key of A+B, where A is fixed to Hj65; B is a burn-in counter, whose value changes dynamically. Assuming that the current value of the programming counter is 00012, to apply for programming permission, the controller factory number "EC510922409" and the data version number of the last programming need to be read from the memory. The plain text that needs to be encrypted is EC510922409.17A. After encryption, the Seed is U2FsdGVkX18lIa1X / IoogwTB8ym9JIGW / d9RXWhFfow=. At the same time, the dynamic key "00012" is spliced after the Seed, and the final Seed is "U2FsdGVkX18lIa1X / IoogwTB8ym9JIGW / d9RXWhFfow=00012". The plain text to be encrypted is encrypted using AES. In some embodiments, DES encryption, 3DES encryption, RC2 encryption, RC4 encryption, RSA encryption, BLOWFISH encryption or other encryption methods may also be used, which are not limited here. (S2) The Seed variable is obtained through the burning tool 3 and sent to the authentication unit 2. The authentication unit 2 parses the Seed variable, decrypts the Seed variable to obtain the first plaintext, and verifies whether the format of the first plaintext satisfies the first format; if so, it indicates that the verification is passed, and the author digital number, the current time and the data version number to be burned this time are encrypted to obtain a digital signature, and then continue to execute step (S3); otherwise, it is prompted that the verification has not passed, and the process ends; wherein, the author digital number refers to the unique license authorization code compiled by the authentication unit 2 for the computer; Among them, the decryption and encryption methods here are mathematical methods agreed upon in advance by the ECU and the authentication unit to realize the conversion between "plain text" and "cipher text". The authentication unit 2 can use the digital signature tool software developed in C++ to provide an input box for the Seed variable and a digital signature output box, as well as a set of other information input boxes and a signature calculation function button. The function of the signature function button is to decrypt the collected value of the Seed variable using the decryption private key provided by the ECU, and then compare the plain text with the agreed value; after the comparison is passed, the user information of this computer and other information are encrypted using another set of public keys provided by the ECU to obtain a digital signature, and finally displayed on the output control.
[0028] In this embodiment, the first format is a control model number of fourth characters, a control code of fifth characters, a production year and month of sixth characters, and a data version number of seventh characters; the controller production number includes the control model number and the control code.
[0029] For example, the last 5 bits of the Seed variable, i.e., the value of the burn counter "00012", are combined with the fixed key group "Hj65" to form the decryption key "Hj6500012", and the remaining string, i.e., the previously encrypted burn record information "U2FsdGVkX18lIa1X / IoogwTB8ym9JIGW / d9RXWhFfow=" in the Seed variable, is decrypted to obtain the first plain text "EC510922409.17A", and the first plain text is obtained according to the format "fourth number of characters control model + fifth number of characters control code + sixth number of characters control code". The digital signature "U2FsdGVkX1 / / 5cuwMmxbbEzXVYTZilBZ1qO5jF57jXqbHm9pdXnlOeiYzpWzx6Mx" is encrypted with the dynamic key, that is, the value of the burn counter "00012", to obtain the digital signature "U2FsdGVkX1 / / 5cuwMmxbbEzXVYTZilBZ1qO5jF57jXqbHm9pdXnlOeiYzpWzx6Mx". The digital signature is unique to each computer and is activated when the software is registered.
[0030] (S3) The burning tool 3 obtains the digital signature and sends it to the marine engine control module 1 to initiate a burning request; (S4) The marine engine control module 1 decrypts the digital signature to obtain a second plaintext, and verifies whether the format of the second plaintext satisfies the second format. If so, the author digital number, the current time and the data version number to be burned this time are written into the preset storage area of the marine engine control module 1, and the process goes to step (S5); otherwise, it is prompted that the verification fails and the process ends; In this embodiment, the second format includes the author's digital number of the first number of characters, the year, month, day, hour, minute, date of the second number of characters, and the data version number of the third number of characters. For example, the ECU obtains the digital signature "U2FsdGVkX1 / / 5cuwMmxbbEzXVYTZilBZ1qO5jF57jXqbHm9pdXnlOeiYzpWzx6Mx" through the burning tool 3, and uses the current value of the burning counter to perform key alignment decryption to obtain the second plaintext "1200051P202409211026.17B", and performs format verification "first number of characters author's digital number + second number of characters year, month, day, hour, minute, date + third number of characters software version".
[0031] (S5) Obtaining the current data version number and the previous data version number, and comparing the previous data version number and the current data version number to see whether they are increasing in sequence and continuous. If so, the marine engine control module 1 allows the burning tool 3 to burn; otherwise, rejecting the burning request and prompting that the authentication fails.
[0032] In this embodiment, the data to be burned includes characteristic parameters of the engine. The characteristic parameters of the engine include sensitive characteristic parameters and other non-sensitive characteristic parameters of the engine, and the sensitive characteristic parameters of the engine include at least one of power control parameters and emission control parameters. The sensitive characteristic parameters of the engine may also include other categories of sensitive characteristic parameters, which are not limited here.
[0033] A storage space is opened in the EEPROM space of the ECU to store four array variables: burn counter, operation content, author information, and date. Every time the ECU is powered on or reset, the burn counter variable value needs to be increased by 1. The "operation content", "author information", and "date" need to be updated every time the burn is performed. A storage space is opened in the RAM space of the ECU to store variable values such as ECU version information, identity verification results, and burn cache.
[0034] In step (S4), the key stored in the ECU is called to decrypt the digital signature sent by the burning tool 3. If the authentication fails, the identity verification result value is set to false, and if the authentication succeeds, the identity verification result value is set to true. When starting to burn, first check whether the record of the last burn reaches the bottom of the array. If so, the current burn information is recorded in an overwritten form from the top.
[0035] In this embodiment, the authentication unit 2 parses the Seed variable and decrypts the Seed variable to obtain the first plaintext, including the following steps: The authentication unit 2 divides the Seed variable, and combines the fixed key group with the value of the burn-in counter in the Seed variable into a first key for decryption; The first key is used to decrypt the controller factory serial number and the last data version number encrypted in the Seed variable to obtain the first plaintext.
[0036] In this embodiment, the fourth number of characters is 2 characters, the fifth number of characters is 5 characters, the sixth number of characters is 4 characters, and the seventh number of characters is 4 characters; The first number of characters is 8 characters, the second number of characters is 12 characters, and the third number of characters is 4 characters.
[0037] See also Figure 3 , in this embodiment, when running for the first time, the following steps are performed: the developer performs real-name registration authentication and generates an activation code or activation code file; Input the activation code or activation code file to the authentication unit 2 to activate the authentication unit 2, collect the developer information and the hardware information of the computer to be burned, and bind the developer information to the hardware information of the computer. The hardware information of the computer corresponds to the author digital number one by one.
[0038] In this embodiment, the real-name registration and authentication information includes the developer's name, developer ID number, developer phone number and company social credit code. This real-name registration and authentication information is encrypted and stored reliably, credibly and permanently in a computer storage medium.
[0039] The developer is an enterprise or individual who has certain engine control technical skills and provides products or services of marine engine control module 1 (ECU) to enable the normal operation or restoration of the engine. The developer information is bound to the hardware information of the computer and used as a characteristic identifier for the supervision of the developer's behavior. The authentication unit 2 is a software that generates permissions and binds identity, and binds the developer information and the hardware information of the computer on which the data is burned. The developer information is recorded in the above-mentioned registration and authentication process. When the authentication unit 2 is activated, the physical information of its computer is also collected and recorded, and is bound to the developer information. The activation of the authentication unit 2 is reliable. When the core hardware of the computer is replaced, the operating system is changed or restored, and the system time is modified, the authentication unit 2 will be deactivated regardless of whether the computer is connected to the Internet. The authenticator also provides its own registration and activation function. When the software is running, it first checks its own permissions. If it is not activated, the software automatically pops up the registration and activation page and deactivates other functions at the same time; in the registration page, the physical feature data such as the MAC address collected and calculated by the software is presented and can be encrypted using the RSA public key. The activation code and activation code file are unique.
[0040] In this embodiment, generating an activation code or an activation code file includes performing the following steps: The authentication unit 2 collects the hardware information of the computer and encrypts the hardware information of the computer with a first public key to generate a registration code; The registration code is decrypted using the first private key paired with the first public key, and after associating the user information and the authorization period, the activation code is encrypted with the second private key to generate an activation code or an activation code file presented in a file form. The activation code file can be provided to the developer by downloading, so as to facilitate importing the activation code file into the authentication unit 2; the activation code can be directly entered manually or entered into the authentication unit 2 by copying and pasting. In actual applications, the page presenting the authentication unit 2 also provides an activation code input box and an activation file import button, supporting developers to directly paste the activation code or import the activation file; the activation button on the page decrypts the collected activation code with the second RSA public key paired with the second RSA private key, and writes it into the calculated registry after verification is completed, so that it can be consulted when determining whether to activate before the software is started.
[0041] In this embodiment, the first public key and the first private key paired with it and the second public key and the second private key paired with it all adopt the RSA encryption algorithm. In other embodiments, the DES encryption algorithm or the 3DES encryption algorithm or the RC2 encryption algorithm or the RC4 encryption algorithm or the RSA encryption algorithm or the BLOWFISH encryption algorithm or other encryption methods may also be used, without limitation here.
[0042] In this embodiment, the marine engine control module 1 decrypts the digital signature to obtain the second plaintext, including executing the following steps: the marine engine control module 1 uses the burn counter as the second key to decrypt the digital signature to obtain the second plaintext.
[0043] In this embodiment, the receiving of the data to be programmed and the completion of programming include performing the following steps: Initialize the data buffer and receive the data to be burned; Parse the target address of the data and erase the sector; Write the data to be burned, and return the burning success message after completion, waiting for restart to take effect.
[0044] See also Figure 1 and Figure 2 As shown, the embodiment of the present invention discloses a system for monitoring the burning authority of marine engine data, which is used to execute the steps of the above-mentioned method for monitoring the burning authority of marine engine data, including: Authentication unit 2, used to parse and decrypt the Seed variable and verify the decrypted plain text format, and to create a digital signature; A burning tool 3, used for burning, obtaining the Seed variable of the marine engine control module 1, and inputting the Seed variable into the authentication unit 2; The engine control module is used to generate Seed variables, record burning logs, decrypt digital signatures, and determine burning permissions; The burning tool 3 is connected to the authentication unit 2 and the engine control module respectively.
[0045] In this embodiment, a real-name authentication unit 4 is also included, which is used for developers to perform real-name registration authentication and generate an activation code or an activation code file; the real-name authentication unit 4 is connected to the authentication unit 2. The real-name authentication unit 4 is a BS-structured network service system software, which provides real-name registration authentication services for developers through a TCP / IP network, and provides activation authentication services for the authentication unit 2. The system mainly stores and manages user information data. The authentication unit 2 is a CS-structured computer software, and its function is to implement the above-mentioned identity authentication and identity identification and the collaborative control logic between them.
[0046] The method and system for monitoring the burning authority of marine engine data of the present invention are used to supervise and control the sensitive characteristic parameters of marine engines, increase the authentication unit and the marine engine control module to identify the burning request, and prevent the sensitive data of the engine from being illegally changed after the ship inspection and certification, thereby preventing the situation that does not comply with laws and regulations; setting a developer real-name authentication unit is conducive to identifying legal operators, and can also generate a unique activation code to activate the authentication unit; the activation of the authentication unit is reliable, and when the core hardware of the computer is replaced, the operating system is changed or restored, the system time is modified, etc., the authentication unit will be deactivated regardless of whether the computer is connected to the Internet.
[0047] When the computer's core hardware is replaced, the operating system is changed or restored, the system time is modified, etc., the authentication unit will be deactivated regardless of whether the computer is connected to the Internet. The specific reasons are: First, the core goal of the monitoring method and system is to ensure that the sensitive characteristic parameters of the marine engine are not illegally changed, especially after the ship inspection and certification. In order to achieve this goal, the system is designed with multiple security mechanisms, among which the authentication unit is a crucial link.
[0048] The activation process of the authentication unit depends on the "authenticator" permission monitoring software installed by the developer on the computer where he is developing and debugging. When it is run for the first time, the "authenticator" will collect the computer's hardware information and generate a registration code file. This step is the key to establishing the association between the computer's hardware characteristics and the developer's identity.
[0049] Next, the developer provides the registration code file to the system, and the system generates a unique activation code through a complex calculation process. The developer uses this activation code to activate the "authenticator", and the system also binds the developer information to its permission management hardware tool. This step ensures that only developers who have passed the real-name authentication and are on computers designated by them with known hardware characteristics can perform sensitive data burning operations.
[0050] However, if the core hardware of the computer is replaced, the operating system is changed or restored, or the system time is modified, these changes will affect the hardware information originally collected by the "authenticator" and used to generate the registration code file. This means that even if the developer tries to use the original activation code to activate the "authenticator", the authentication process will fail due to the mismatch of hardware information.
[0051] It should be understood that the application of the present application is not limited to the above examples. For ordinary technicians in this field, improvements or changes can be made based on the above description. All these improvements and changes should fall within the scope of protection of the claims attached to this application.
Claims
1. A method for monitoring the burning authority of marine engine data, characterized in that the steps include: (S1) The marine engine control module generates a Seed variable; wherein the Seed variable is obtained by concatenating and encrypting the controller factory serial number stored in the marine engine control module and the data version number of the last burn, and then concatenating with the value of the current burn counter; the data version number indicates the software version of the marine engine control module; (S2) The Seed variable is obtained through a burning tool and sent to an authentication unit, the authentication unit parses the Seed variable, decrypts the Seed variable to obtain a first plaintext, and verifies whether the format of the first plaintext satisfies the first format; if so, it indicates that the verification is passed, and the author digital number, the current time and the data version number to be burned this time are encrypted to obtain a digital signature, and then continue to execute step (S3); otherwise, it is prompted that the verification has not passed, and the process ends; wherein the author digital number refers to the unique license authorization code compiled by the authentication unit for the computer; (S3) The burning tool obtains the digital signature and sends it to the marine engine control module to initiate a burning request; (S4) The marine engine control module decrypts the digital signature to obtain a second plaintext, verifies whether the format of the second plaintext satisfies the second format, and if so, writes the author digital number, current time and the version number of the data to be burned into a preset storage area of the marine engine control module, and proceeds to execution step (S5); otherwise, it indicates that the verification fails and the process ends; (S5) Obtaining the current data version number and the previous data version number, and comparing the previous data version number with the current data version number to see whether they are increasing in sequence and continuous; if so, the marine engine control module allows the burning tool to burn; otherwise, rejecting the burning request and prompting that the authentication failed.
2. The method for monitoring the burning authority of marine engine data according to claim 1, characterized in that: The authentication unit parses the Seed variable and decrypts the Seed variable to obtain a first plaintext, including the following steps: The authentication unit divides the Seed variable, and combines the fixed key group with the value of the burn-in counter in the Seed variable into a first key for decryption; The first key is used to decrypt the controller factory serial number and the last data version number encrypted in the Seed variable to obtain the first plaintext.
3. The method for monitoring the burning authority of marine engine data according to claim 1, characterized in that: The second format includes a first number of characters for the author's digital number, a second number of characters for the year, month, day, hour, minute, date, and a third number of characters for the data version number; The first format is a control model number of fourth characters, a control code of fifth characters, a production year and month of sixth characters, and a data version number of seventh characters; the controller production number includes the control model number and the control code.
4. The method for monitoring the burning authority of marine engine data according to claim 3, characterized in that: The fourth number of characters is 2 characters, the fifth number of characters is 5 characters, the sixth number of characters is 4 characters, and the seventh number of characters is 4 characters; The first number of characters is 8 characters, the second number of characters is 12 characters, and the third number of characters is 4 characters.
5. The method for monitoring the burning authority of marine engine data according to claim 1, characterized in that: When running for the first time, the following steps are performed: the developer performs real-name registration authentication and generates an activation code or activation code file; An activation code or an activation code file is input into the authentication unit to activate the authentication unit, and the developer information and the hardware information of the computer are collected, and the developer information is bound to the hardware information of the computer.
6. The method for monitoring the burning authority of marine engine data according to claim 5, characterized in that: The generating of the activation code or activation code file comprises performing the following steps: The authentication unit collects the hardware information of the computer and encrypts the hardware information of the computer with a first public key to generate a registration code; The registration code is decrypted using the first private key paired with the first public key, and after associating the user information and the authorization period, the activation code is encrypted with the second private key to generate an activation code or an activation code file presented in a file form.
7. The method for monitoring the burning authority of marine engine data according to claim 1, characterized in that: The marine engine control module decrypts the digital signature to obtain a second plaintext, including executing the following steps: the marine engine control module uses a burn counter as a second key to decrypt the digital signature to obtain a second plaintext.
8. The method for monitoring the burning authority of marine engine data according to claim 1, characterized in that: The receiving of data to be programmed and completing programming comprises executing the following steps: Initialize the data buffer and receive the data to be burned; Parse the target address of the data and erase the sector; Write the data to be burned, and return the burning success message after completion, waiting for restart to take effect.
9. A system for monitoring the burning authority of marine engine data, used for executing the steps of the method for monitoring the burning authority of marine engine data as claimed in any one of claims 1 to 8, characterized in that: include: The authentication unit is used to parse and decrypt the Seed variable and verify the decrypted plain text format, as well as to create a digital signature; A burning tool, used for burning, obtaining the Seed variable of the marine engine control module, and inputting the Seed variable into the authentication unit; The engine control module is used to generate Seed variables, record burning logs, decrypt digital signatures, and determine burning permissions; The burning tool is connected to the authentication unit and the engine control module respectively.
10. The marine engine data writing authority monitoring system according to claim 9, characterized in that: It also includes a real-name authentication unit, which is used for developers to perform real-name registration authentication and generate an activation code or an activation code file; the real-name authentication unit is connected to the authentication unit.