Digital certificate filling method and system for parts, and storage medium

Abstract

The invention provides a digital certificate filling method and system for parts and a storage medium, and relates to the technical field of digital certificate management.The method comprises the steps that a production equipment identification number, a root certificate file and a certificate application file of an initial part are uploaded to a PKI service platform in advance through a supplier part management platform; the PKI service platform completes the generation of the digital certificate before the initial part is filled, and the main engine plant production platform only needs to directly obtain the digital certificate of the to-be-filled part in the filling link and write the digital certificate into the to-be-filled part, so that the time delay caused by waiting for the generation of the digital certificate in the filling process is avoided; and the filling efficiency of the digital certificate is greatly improved.

Description

Technical Field

[0001] The present application relates to the technical field of digital certificate management, and in particular to a method, system, and storage medium for filling digital certificates of components. Background Art

[0002] In the automotive industry, the importance of equipping each component with a digital certificate is reflected in the following points: First, digital certificates can verify the authenticity of the component, ensure its origin and quality, and prevent the use of counterfeit and substandard products. Second, they provide security, ensuring the confidentiality and integrity of data transmission during vehicle operation, reducing the risk of cyber attacks. Third, digital certificates support traceability, making it easy to track the history and responsibility of specific components in the event of a failure, thereby improving overall vehicle safety and reliability and enhancing consumer trust.

[0003] At present, the common method of filling digital certificates for parts is usually to complete the entire filling process on the vehicle production line. This leads to the problem that if one link in the entire filling process fails, the entire production line will be suspended, making the filling efficiency of digital certificates low.

[0004] Therefore, a new method for filling digital certificates of components is urgently needed. Summary of the invention

[0005] In view of the above problems, the embodiments of the present application provide a method, system, and storage medium for filling digital certificates of components, so as to overcome the above problems or at least partially solve the above problems.

[0006] In a first aspect of the present application, a method for filling a digital certificate for a component is provided, which is applied to a certificate filling system. The certificate filling system includes a supplier component management platform, a host factory production platform, and a PKI service platform. The method includes: The supplier parts management platform fills the production equipment identification number and the root certificate file for the initial parts respectively, and generates the certificate application file of the initial parts based on the production equipment identification number and the root certificate file of the initial parts; The supplier parts management platform packages the certificate application documents, production equipment identification number and root certificate files of the initial parts and uploads them to the PKI service platform; The PKI service platform generates a digital certificate for the initial component based on the certificate application document and the production equipment identification number of the initial component; The OEM production platform obtains the digital certificate of the initial component from the PKI service platform, and verifies the production equipment identification number of the component to be filled and the filling status of the root certificate file, and writes the digital certificate into the component to be filled if both the production equipment identification number and the filling status of the root certificate file of the component to be filled are verified. There are multiple initial components, and the component to be filled is any one of the multiple initial components.

[0007] Optionally, the PKI service platform generates a digital certificate for the initial component according to the certificate application document and the production equipment identification number of the initial component, including: The PKI service platform verifies the legitimacy of the production equipment identification number of the initial component and the legitimacy of the certificate application document of the initial component respectively according to the root certificate file of the initial component; When the production equipment identification number and the certificate application document of the initial component are verified to be legal, a digital certificate of the initial component is generated.

[0008] Optionally, the PKI service platform verifies the legitimacy of the production equipment identification number of the initial component and the legitimacy of the certificate application file of the initial component respectively according to the root certificate file of the initial component, including: The PKI service platform obtains the first public key of the root certificate file of the initial component and the character format of the root certificate file of the initial component respectively; Verifying the digital signature of the certificate application file of the initial component by using the first public key of the root certificate file of the initial component to verify the legitimacy of the certificate application file of the initial component; The character format of the production equipment identification number of the initial component is verified through the character format of the root certificate file of the initial component to verify the legitimacy of the production equipment identification number of the initial component.

[0009] Optionally, the OEM production platform includes: production electrical inspection equipment; when the verification of the production equipment identification number of the component to be filled fails and the verification of the filling status of the root certificate file of the component to be filled passes, the method further includes: The OEM production platform obtains the certificate application document of the component to be filled from the PKI service platform through the production electrical inspection equipment; Determining the digital certificate of the component to be filled through the certificate application document of the component to be filled; The digital certificate of the component to be filled is written into the component to be filled, and the component to be filled is restarted to enable the digital certificate of the component to be filled.

[0010] Optionally, the method further comprises: The OEM production platform will isolate the component to be filled offline if both the production equipment identification number and the filling status of the root certificate file of the component to be filled fail to be verified.

[0011] Optionally, the method further comprises: The OEM production platform periodically obtains purchase orders; According to the purchase order, obtaining in batches from the PKI service platform the digital certificate of each of the initial components in the purchase order; The digital certificate of each of the initial components and the production equipment identification number corresponding to each of the initial components are packaged and stored in the main engine factory production platform.

[0012] Optionally, verifying the production equipment identification number of the component to be filled includes: Read the production equipment identification number of the component to be filled; The read production equipment identification number of the component to be filled is compared with the production equipment identification number stored in the main engine factory production platform to verify the production equipment identification number of the component to be filled.

[0013] Optionally, after writing the digital certificate into the component to be filled, the method further includes: The OEM production platform obtains the second public key and effective date of the root certificate file of the component to be filled, and the private key and current date of the digital certificate of the component to be filled; Verifying the validity status of the digital certificate of the component to be filled according to the second public key and the private key of the digital certificate of the component to be filled; Verifying the validity status of the digital certificate of the component to be filled according to the effective date and the current date; When the validity status of the digital certificate of the component to be filled and the effectiveness status of the digital certificate of the component to be filled are both verified, it is determined that the digital certificate of the component to be filled is filled successfully.

[0014] In a second aspect of the present application, a system for the digital certificate filling method of the parts described in the first aspect of the present application is provided, the system comprising: a supplier parts management platform, a main engine factory production platform, and a PKI service platform; The supplier parts management platform is used to fill the production equipment identification number and the root certificate file for the initial parts respectively, and generate the certificate application file of the initial parts based on the production equipment identification number and the root certificate file of the initial parts; The supplier parts management platform is also used to package the certificate application documents, production equipment identification number and root certificate files of the initial parts and upload them to the PKI service platform; The PKI service platform is used to generate a digital certificate for the initial component according to the certificate application document and the production equipment identification number of the initial component; The OEM production platform is used to obtain the digital certificate of the initial component from the PKI service platform, and to verify the production equipment identification number and the filling status of the root certificate file of the component to be filled, and write the digital certificate into the component when both the production equipment identification number and the filling status of the root certificate file of the component to be filled are verified. There are multiple initial components, and the component to be filled is any one of the multiple initial components.

[0015] In a third aspect of the present application, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the certificate filling method as described in the first aspect of the present application is implemented.

[0016] Beneficial effects of this application: The present application provides a method for filling digital certificates for parts, which uses a supplier's parts management platform to fill the initial parts with production equipment identification numbers and root certificate files, and generates a certificate application file for the initial parts based on the production equipment identification number and root certificate file of the initial parts; and packages the certificate application file, production equipment identification number and root certificate file of the initial parts and uploads them to a PKI service platform; then the PKI service platform generates a digital certificate for the initial parts based on the certificate application file and production equipment identification number of the initial parts; then, the OEM production platform obtains the digital certificate of the initial parts from the PKI service platform, and verifies the filling status of the production equipment identification number and root certificate file of the parts to be filled, and writes the digital certificate into the parts to be filled when the filling status of the production equipment identification number and root certificate file of the parts to be filled are both verified. There are multiple initial parts, and the part to be filled is any one of the multiple initial parts.

[0017] This application uploads the production equipment identification number, root certificate file and certificate application file of the initial parts to the PKI service platform in advance through the supplier's parts management platform. The PKI service platform completes the generation of the digital certificate before the initial parts are filled. The OEM production platform only needs to directly obtain the digital certificate of the parts to be filled during the filling process and write it into the parts to be filled, thereby avoiding the time delay caused by waiting for the digital certificate to be generated during the filling process, and greatly improving the filling efficiency of the digital certificate. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the description of the embodiments of the present application will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0019] Figure 1 This is a schematic diagram of the steps of a method for filling a digital certificate of a component provided in an embodiment of the present application; Figure 2 This is a schematic diagram of a digital certificate generation process provided by an embodiment of the present application; Figure 3 This is a schematic diagram of the filling steps of a digital certificate on a production line provided by an embodiment of the present application; Figure 4 This is a flowchart of a filling process of a digital certificate on a production line provided by an embodiment of the present application; Figure 5 It is a schematic diagram of a digital certificate filling system for a component provided in an embodiment of the present application. DETAILED DESCRIPTION

[0020] The exemplary embodiments of the present application will be described in more detail below in conjunction with the accompanying drawings in the embodiments of the present application. Although the exemplary embodiments of the present application are shown in the accompanying drawings, it should be understood that the present application can be implemented in various forms and should not be limited by the embodiments set forth herein. On the contrary, these embodiments are provided in order to enable a more thorough understanding of the present application and to enable the scope of the present application to be fully communicated to those skilled in the art.

[0021] Based on the above problems, in a first aspect, an embodiment of the present application provides a method for filling a digital certificate for a component, which is applied to a certificate filling system. The certificate filling system includes a supplier component management platform, an OEM production platform, and a PKI service platform.

[0022] In this application, the certificate filling system provided consists of three main components: the supplier parts management platform, the OEM production platform and the PKI service platform. Among them, the supplier parts management platform can assign a unique production equipment identification number to each part and generate a corresponding root certificate file. The platform generates a certificate application document and ensures the accuracy and completeness of all information. The PKI service platform can ensure the validity and security of the generated digital certificate by verifying the certificate application document and the production equipment identification number. In addition, it can store all relevant digital certificate information to provide support for subsequent certificate revocation, update and verification. The OEM production platform obtains the digital certificate from the PKI service platform and writes the digital certificate to the parts after the filling status is verified, ensuring that each part has a legitimate digital identity. In addition, by verifying the production equipment identification number and the root certificate, it ensures that only parts that meet the standards can obtain digital certificates, thereby improving the overall quality management level.

[0023] The three components of the certificate filling system provided in this application realize the efficient flow of data through a secure network connection. The supplier management platform generates and uploads the certificate application file, the PKI (Public Key Infrastructure) service platform performs verification and digital certificate generation, and the OEM production platform is responsible for obtaining and writing digital certificates. This systematic architecture not only improves the filling efficiency of digital certificates, but also ensures the safety and reliability of parts during production and subsequent use.

[0024] The digital certificate filling method of the parts provided in this application is as follows Figure 1 As shown, specifically including: Step S101, the supplier parts management platform fills the production equipment identification number and root certificate file for the initial parts respectively, and generates the certificate application file of the initial parts based on the production equipment identification number and root certificate file of the initial parts.

[0025] In this step, for the supplier parts management platform, the supplier first assigns a unique production equipment identification number to each initial part through the supplier parts management platform, which is an important identifier for identifying and tracking parts. At the same time, a root certificate file is generated for each initial part. The root certificate file contains the public key information of a trusted certificate authority, providing a trust basis for subsequent digital certificates.

[0026] Using the production equipment identification number and root certificate file of the initial component, the supplier component management platform will generate a certificate application file for the initial component. This file usually contains the production equipment identification number of the initial component, detailed information of the root certificate file, and other necessary certification data.

[0027] Step S102, the supplier parts management platform packages the certificate application documents, production equipment identification number and root certificate files of the initial parts and uploads them to the PKI service platform.

[0028] In this step, after generating the certificate application file for the initial component, the supplier parts management platform packages the generated certificate application file, production equipment identification number and root certificate file into a data package. The data package is uploaded to the PKI service platform through a secure network connection. This step ensures that all information is centrally managed for subsequent processing and verification. It should be noted that for each initial component, the production equipment identification number, root certificate file and certificate application file of the initial component will be packaged into a data package. For multiple initial components, the production equipment identification number, root certificate file and certificate application file of each initial component will be separately packaged into a data package.

[0029] Step S103, the PKI service platform generates a digital certificate for the initial component according to the certificate application document and production equipment identification number of the initial component.

[0030] In this step, after receiving the uploaded data packet, the PKI service platform generates a corresponding digital certificate based on the certificate application document of the initial component and the production equipment identification number.

[0031] like Figure 2 The figure shows a schematic diagram of the digital certificate generation process provided by the present application. First, the supplier parts management platform fills the initial parts with the production equipment identification number and the root certificate file. Then, the certificate application file is generated according to the production equipment identification number and the root certificate file. Next, the PKI service platform generates a digital certificate according to the certificate application file and the production equipment identification number. The OEM production platform obtains the generated digital certificate from the PKI service platform.

[0032] Step S104, the OEM production platform obtains the digital certificate of the initial component from the PKI service platform, and verifies the production equipment identification number of the component to be filled and the filling status of the root certificate file, and writes the digital certificate into the component to be filled when both the production equipment identification number and the filling status of the root certificate file of the component to be filled are verified. There are multiple initial components, and the component to be filled is any one of the multiple initial components.

[0033] In this step, the OEM production platform obtains the digital certificate of the generated initial parts from the PKI service platform. The digital certificate here refers to the digital certificates of multiple parts in the PKI service platform. Before writing the digital certificate, the OEM production platform needs to verify whether the production equipment identification number of the parts to be filled and the filling status of the root certificate file are both passed. This verification process ensures that only parts to be filled that meet the standards can obtain digital certificates. If the verification passes, the OEM production platform will write the digital certificate to the parts to be filled. At this point, the parts to be filled have a securely authenticated digital identity, and identity authentication and data encryption can be performed in subsequent use.

[0034] When filling parts with digital certificates, this application separates the digital certificate generation and filling processes so that different platforms can work in parallel. When problems occur on the production line, the generation of digital certificates no longer depends on the status of the filling equipment. This allows certificate applications to be processed in a timely manner, avoiding production line shutdowns due to certificate filling failures, thereby reducing the waiting time of the entire process and improving filling efficiency.

[0035] In one embodiment, the PKI service platform generates a digital certificate for the initial component according to the certificate application document and the production equipment identification number of the initial component, including: The PKI service platform verifies the legitimacy of the production equipment identification number of the initial component and the legitimacy of the certificate application document of the initial component respectively according to the root certificate file of the initial component; When the production equipment identification number and the certificate application document of the initial component are verified to be legal, a digital certificate of the initial component is generated.

[0036] In this embodiment, the PKI service platform first relies on the root certificate file of the initial component for verification to ensure the credibility and integrity of the file. This provides a secure foundation for the subsequent verification process. Among them, the PKI service platform will verify the legitimacy of the production equipment identification number of the uploaded initial component. This process ensures that the production equipment identification number is valid and authorized to prevent the use of forged or erroneous identification numbers. At the same time, the PKI service platform will also verify the legitimacy of the certificate application file of the initial component. This process ensures that the file complies with the predetermined format and content specifications and has not been tampered with.

[0037] Furthermore, the PKI service platform will only generate the digital certificate for the initial component if both the production equipment identification number and the certificate application document are verified to be legitimate. This double verification mechanism ensures that only applications that meet the requirements can obtain certificates, improving the security and credibility of the system.

[0038] In one embodiment, the PKI service platform verifies the legitimacy of the production equipment identification number of the initial component and the legitimacy of the certificate application file of the initial component respectively according to the root certificate file of the initial component, including: The PKI service platform obtains the first public key of the root certificate file of the initial component and the character format of the root certificate file of the initial component respectively; Verifying the digital signature of the certificate application file of the initial component by using the first public key of the root certificate file of the initial component to verify the legitimacy of the certificate application file of the initial component; The character format of the production equipment identification number of the initial component is verified through the character format of the root certificate file of the initial component to verify the legitimacy of the production equipment identification number of the initial component.

[0039] In this embodiment, the PKI service platform extracts the first public key from the root certificate file of the initial component. The first public key is used for subsequent digital signature verification and is the basis for ensuring the security of data transmission. At the same time, the PKI service platform also extracts the character format of the root certificate file of the initial component. This information is used to verify the incoming production equipment identification number to ensure that its format meets the predetermined standard.

[0040] Furthermore, the PKI service platform uses the first public key obtained to verify the digital signature of the certificate application file of the initial component. This step can confirm that the application file is indeed generated by a trusted issuing authority and has not been tampered with or forged. If the verification is successful, the PKI service platform will regard the certificate application file as legal and can continue to process it; if the verification fails, the application will be rejected to prevent non-compliant files from obtaining certificates. The PKI service platform performs a format check on the received production equipment identification number based on the character format of the root certificate file of the initial component. This process ensures that the production equipment identification number conforms to the system preset format specifications, such as character length, character type, etc. The production equipment identification number can only be considered legal if the character format check passes. If the check fails, the PKI service platform will record an error message and refuse to use the identification number.

[0041] This embodiment adopts a double verification mechanism, which not only verifies the authenticity of the certificate application documents, but also ensures the compliance of the production equipment identification number. This mechanism greatly reduces potential security risks and ensures that only applications that have been strictly reviewed can obtain digital certificates. In addition, through the verification of digital signatures and the verification of character formats, forgery and tampering can be effectively prevented, improving the security and reliability of the entire digital filling process.

[0042] In one embodiment, the OEM production platform includes: production electrical inspection equipment; when the production equipment identification number of the component to be filled fails to be verified, and the filling status verification of the root certificate file of the component to be filled passes, the method further includes: The OEM production platform obtains the certificate application document of the component to be filled from the PKI service platform through the production electrical inspection equipment; Determining the digital certificate of the component to be filled through the certificate application document of the component to be filled; The digital certificate of the component to be filled is written into the component to be filled, and the component to be filled is restarted to enable the digital certificate of the component to be filled.

[0043] In this embodiment, the OEM production platform includes production electrical inspection equipment, wherein the production electrical inspection equipment is responsible for verifying the relevant information of the parts to be filled, including the production equipment identification number of the parts to be filled and the filling status of the root certificate file. The production electrical inspection equipment is a key component of the OEM production platform, ensuring the smooth progress of the entire filling process.

[0044] In this embodiment, before the digital certificate is filled, the production equipment identification number of the component to be filled and the filling status of the root certificate file need to be verified.

[0045] Among them, if the verification of the production equipment identification number fails, it means that there may be problems with the production equipment identification number, such as incorrect format or non-compliance with the authorization standard. At the same time, if the filling status verification of the root certificate file passes, the OEM production platform establishes a secure connection with the PKI service platform through the production electrical inspection equipment to obtain the certificate application file of the parts to be filled. This step ensures that even if the production equipment identification number fails to pass the verification, the necessary information for subsequent processing can still be obtained.

[0046] Through the obtained certificate application documents, the OEM production platform analyzes the file content and extracts relevant data to determine the required digital certificate. This process involves interaction with the PKI service platform to ensure that the obtained certificate information is the latest and meets the requirements of the current parts to be filled.

[0047] After confirming the digital certificate, the OEM production platform writes it into the corresponding parts to be filled. This step ensures that the parts to be filled have legal identity information and provides security for subsequent use. After writing the digital certificate, the OEM production platform will restart the parts to be filled. This process ensures that the newly written digital certificate can take effect, so that the parts to be filled can be authenticated and data encrypted, thereby achieving safe operation.

[0048] This embodiment can effectively obtain the certificate application document even if the production equipment identification number fails to pass the verification, ensuring the filling and activation of the digital certificate. Even if there is a problem with the production equipment identification number of a component, safe operations can still be performed through a legal digital certificate, thereby improving the compliance and security of the entire digital certificate filling process, while also ensuring the flexibility and continuity of the entire production process.

[0049] In one embodiment, the OEM production platform, when both the production equipment identification number of the component to be filled and the filling status of the root certificate file of the component to be filled fail to be verified, isolates the component to be filled offline.

[0050] In this embodiment, when the production equipment identification number and the filling status of the root certificate file of the component to be filled fail to be verified, the OEM production platform takes measures to isolate the unqualified component to be filled offline, specifically: The fact that both the production equipment identification number and the filling status of the root certificate file of the part to be filled have not been verified means that there are problems with the identity information and security of the part to be filled. This double verification failure indicates that the part to be filled cannot meet the quality and safety standards and may affect the reliability of the overall system. The OEM production platform will remove the unqualified part to be filled from the production line and perform isolation operations. This means that the unqualified part to be filled will no longer participate in the subsequent production, assembly or testing process to prevent it from entering the market or affecting the use of other qualified parts. In practical applications, the unqualified part to be filled can be transferred to a special isolation area for further inspection or processing to ensure that its problem is resolved. In addition, while isolating the parts, the reasons for the verification failure of the unqualified part to be filled are recorded for subsequent analysis and rectification. This process helps to improve the level of quality management and reduce the occurrence of similar problems in the future.

[0051] In this embodiment, by isolating the unqualified parts to be filled, the OEM production platform effectively prevents potential safety risks and protects consumers and brand reputation. This measure reflects a strict quality control process, ensuring that each component is rigorously verified before entering the market, and enhancing the quality reliability of the overall product.

[0052] In one embodiment, after writing the digital certificate into the component to be filled, the method further comprises: The OEM production platform obtains the second public key and effective date of the root certificate file of the component to be filled, and the private key and current date of the digital certificate of the component to be filled; Verifying the validity status of the digital certificate of the component to be filled according to the second public key and the private key of the digital certificate of the component to be filled; Verifying the validity status of the digital certificate of the component to be filled according to the effective date and the current date; When the validity status of the digital certificate of the component to be filled and the effectiveness status of the digital certificate of the component to be filled are both verified, it is determined that the digital certificate of the component to be filled is filled successfully.

[0053] In this embodiment, after the digital certificate is written into the component, the OEM production platform performs a series of verification steps to ensure the validity and effectiveness of the digital certificate. The specific process is as follows: The OEM production platform first obtains the second public key and the effective date in the root certificate file of the component to be filled, as well as the private key and the current date of the digital certificate of the component to be filled.

[0054] The OEM production platform verifies the digital certificate of the component to be filled through the second public key in the root certificate file of the component to be filled. This process involves checking the signature of the digital certificate to confirm that it has not been tampered with and the source is legitimate. If the signature verification is successful, the validity status of the digital certificate is considered to have passed; if the signature verification fails, it indicates that the digital certificate may have been forged or tampered with.

[0055] The OEM production platform will then compare the effective date of the digital certificate of the part to be filled with the current date. The digital certificate is considered valid only if the current date is within the effective date. If the current date meets the effective requirements, the effective status verification passes; otherwise, the digital certificate will be considered invalid.

[0056] In this embodiment, when the validity and effectiveness status of the digital certificate of the component to be filled are both verified, the OEM production platform confirms that the digital certificate of the component to be filled is successfully filled. By double-verifying the validity and effectiveness status of the digital certificate, security is significantly improved and potential risks caused by certificate problems are reduced.

[0057] In one embodiment, there is provided a Figure 3 The digital certificate filling process flow diagram on the production line is shown in Figure 3 As shown: Step S201: writing a digital certificate into the component to be filled.

[0058] The verified digital certificate is written into the parts to be filled. This step ensures that the parts have a legitimate digital identity, providing a basis for subsequent safe operations.

[0059] Step S202: Read the writing result.

[0060] After the writing operation is completed, the writing result will be read immediately to confirm whether the digital certificate has been successfully written to the component. This step provides feedback information for subsequent operations to ensure the effectiveness of the writing process.

[0061] Step S203, when the reading and writing result is successful, restart the components to be filled.

[0062] When the reading result shows that the writing is successful, the parts to be filled will be restarted. The restart operation helps to ensure that the newly written digital certificate is effective so that the parts can be used normally in subsequent operations.

[0063] Step S204, reading the validity and effectiveness status of the digital certificate.

[0064] The validity and effective status of the written digital certificate will be checked. This process involves verifying the legitimacy of the digital certificate's signature and comparing the current date with the effective date to ensure that the digital certificate is valid.

[0065] Step S205: When the digital certificate is valid and has taken effect, it is determined that the filling process is successful.

[0066] If the digital certificate is deemed valid and validated, the filling process is confirmed to be successful. This step ensures that the parts have legitimate identity and security before they are put into use.

[0067] In one embodiment, the OEM production platform periodically obtains purchase orders; According to the purchase order, the digital certificate of each of the initial components in the purchase order is obtained in batches from the PKI service platform; the digital certificate of each of the initial components and the production equipment identification number corresponding to each of the initial components are packaged and stored in the OEM production platform.

[0068] In this embodiment, the OEM production platform sets a time period (such as daily, weekly, etc.) to regularly obtain new purchase orders from the procurement system. This mechanism ensures that the platform always keeps pace with market demand and supply chain.

[0069] Furthermore, based on the obtained purchase order, the OEM production platform will send a request to the PKI service platform to batch obtain the digital certificate of each of the initial parts in the order. This operation reduces the time for a single certificate request and improves efficiency. Through the automated interface, the OEM production platform can quickly process large quantities of certificate requests, ensuring that the digital certificate of each initial part is obtained in a timely manner, thereby avoiding production delays caused by missing certificates.

[0070] Furthermore, the digital certificates of each of the initial components and the production equipment identification numbers corresponding to each of the initial components are packaged and stored in the OEM production platform. This process ensures that the digital certificates are integrated with the information of the corresponding components to facilitate subsequent use and management.

[0071] In this embodiment, by periodically obtaining purchase orders and digital certificates in batches, the OEM production platform significantly improves the management efficiency of digital certificates and reduces the workload of manual processing. In addition, it ensures that all parts have legal digital certificates before production, which improves the safety and compliance of the production process. The digital certificate is packaged and stored with the production equipment identification number to facilitate subsequent traceability and management, ensuring that each component can be managed safely and effectively throughout its life cycle. At the same time, by obtaining digital certificates locally in advance, the time for temporarily applying for digital certificates on the PKI service platform during production on the production line is reduced, as well as the risk of being unable to obtain digital certificates due to network anomalies.

[0072] In one embodiment, verifying the production equipment identification number of the component to be filled includes: Read the production equipment identification number of the component to be filled; The read production equipment identification number of the component to be filled is compared with the production equipment identification number stored in the main engine factory production platform to verify the production equipment identification number of the component to be filled.

[0073] In this embodiment, the process of verifying the production equipment identification number of the component to be filled specifically includes: First, the production equipment identification number of the part to be filled is read from the production electrical inspection equipment. Then, the stored production equipment identification number is retrieved from the database of the OEM production platform. The database contains all verified identification numbers as the basis for validity verification. The read production equipment identification number of the part to be filled is compared with the production equipment identification number stored in the OEM production platform.

[0074] If the read production equipment identification number is consistent with the stored production equipment identification number, it can be confirmed that the production equipment identification number of the part to be filled is valid, indicating that the part to be filled is authorized and can continue with subsequent operations. If the production equipment identification number is inconsistent, the use of the part to be filled will be rejected, and a warning may be issued to indicate potential safety risks or compliance issues.

[0075] This embodiment verifies the production equipment identification number of the parts to be filled, thereby ensuring the legality and safety of the parts to be filled. This process not only improves the safety of the production process, but also provides necessary support for subsequent quality control, ensuring the compliance and reliability of the entire automobile production chain.

[0076] The present application provides a method for filling digital certificates for parts, which includes filling the production equipment identification number and root certificate file for the initial parts respectively through the supplier's parts management platform, and generating the certificate application file of the initial parts based on the production equipment identification number and root certificate file of the initial parts; and packaging the certificate application file, production equipment identification number and root certificate file of the initial parts and uploading them to a PKI service platform; then the PKI service platform generates a digital certificate for the initial parts according to the certificate application file and production equipment identification number of the initial parts; then, the OEM production platform obtains the digital certificate of the initial parts from the PKI service platform, and verifies the filling status of the production equipment identification number and root certificate file of the parts to be filled, and writes the digital certificate into the parts to be filled when the filling status of the production equipment identification number and root certificate file of the parts to be filled are both verified. There are multiple initial parts, and the part to be filled is any one of the multiple initial parts. This application uploads the production equipment identification number, root certificate file and certificate application file of the initial parts to the PKI service platform in advance through the supplier's parts management platform. The PKI service platform completes the generation of the digital certificate before the initial parts are filled. The OEM production platform only needs to directly obtain the digital certificate of the parts to be filled during the filling process and write it into the parts to be filled, thereby avoiding the time delay caused by waiting for the digital certificate to be generated during the filling process, and greatly improving the filling efficiency of the digital certificate.

[0077] In one embodiment, the present application provides a flowchart of a filling process of a digital certificate on a production line, such as Figure 4 As shown, the production equipment identification number and root certificate filling status of the parts to be filled are obtained through the production electrical inspection equipment, and uploaded to the main engine factory production platform. The main engine factory production platform verifies the production equipment identification number and the root certificate file filling status. If the verification is successful, the corresponding digital certificate is sent to the production electrical inspection equipment, and the production electrical inspection equipment fills the digital certificate into the parts to be filled; if the production equipment identification number verification fails, and the root certificate file filling status verification is successful, the digital certificate corresponding to the component is obtained from the PKI system, and the digital certificate is sent to the production electrical inspection equipment, and the production electrical inspection equipment fills the digital certificate into the parts to be filled.

[0078] Based on the same inventive concept, the second aspect of the present application provides a system for the digital certificate filling method of the parts described in the first aspect of the present application. The system is as follows: Figure 5 As shown, it includes: supplier parts management platform, OEM production platform, and PKI service platform; The supplier parts management platform is used to fill the production equipment identification number and the root certificate file for the initial parts respectively, and generate the certificate application file of the initial parts based on the production equipment identification number and the root certificate file of the initial parts; The supplier parts management platform is also used to package the certificate application documents, production equipment identification number and root certificate files of the initial parts and upload them to the PKI service platform; The PKI service platform is used to generate a digital certificate for the initial component based on the certificate application document and the production equipment identification number of the initial component; The OEM production platform is used to obtain the digital certificate of the initial component from the PKI service platform, and to verify the production equipment identification number of the component to be filled and the filling status of the root certificate file, and to write the digital certificate into the component to be filled if both the production equipment identification number and the filling status of the root certificate file of the component to be filled are verified. There are multiple initial components, and the component to be filled is any one of the multiple initial components.

[0079] like Figure 5 As shown, it is a schematic diagram of a digital certificate filling system for parts provided by the present application, and the system includes: a supplier parts management platform, a main engine factory production platform, and a PKI service platform; Among them, the supplier parts management platform is responsible for filling the production equipment identification number and root certificate file for each initial part to ensure that each initial part has a unique identification and security basis, and based on the production equipment identification number and root certificate file of each initial part, generate the corresponding certificate application file for each initial part, package the generated certificate application file, production equipment identification number and root certificate file, and upload it to the PKI service platform.

[0080] The PKI service platform is responsible for the generation and management of digital certificates. Based on the certificate application documents and production equipment identification numbers of the initial components received, the PKI service platform verifies the legitimacy and generates the corresponding digital certificates to ensure the authenticity and validity of the certificates.

[0081] The OEM production platform is responsible for obtaining the digital certificate of each initial component from the PKI service platform and performing the filling operation. The OEM production platform will download the digital certificate of the component to be filled from the PKI service platform, and write the digital certificate to the component to be filled after verifying that the production equipment identification number and the filling status of the root certificate file of the component to be filled have passed, thereby ensuring that the identity information of each component to be filled is effectively authenticated.

[0082] In a third aspect of the present application, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the certificate filling method as described in the first aspect of the present application is implemented.

[0083] Each embodiment in this specification focuses on the differences from other embodiments, and the same or similar parts between the embodiments can be referenced to each other.

[0084] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, devices, or computer program products. Therefore, the embodiments of the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the embodiments of the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

[0085] The embodiments of the present application are described with reference to the flowcharts and / or block diagrams of the methods, terminal devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing terminal device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing terminal device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0086] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing terminal device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0087] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal device so that a series of operating steps are executed on the computer or other programmable terminal device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable terminal device to implement the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0088] Although the preferred embodiments of the present application have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present application.

[0089] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or terminal device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or terminal device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or terminal device including the elements.

[0090] The digital certificate filling method, system, and storage medium for a component provided are introduced in detail above. Specific examples are used in this article to illustrate the principles and implementation methods of the present application. The description of the above embodiments is only used to help understand the method of the present application and its core idea; at the same time, for general technical personnel in this field, according to the idea of ​​the present application, there will be changes in the specific implementation method and application scope. In summary, the content of this specification should not be understood as a limitation on the present application.

Claims

1. A method for filling digital certificates of parts, characterized in that: Applied to a certificate filling system, the certificate filling system includes a supplier parts management platform, a host factory production platform, and a PKI service platform. The method includes: The supplier parts management platform fills the production equipment identification number and the root certificate file for the initial parts respectively, and generates the certificate application file of the initial parts based on the production equipment identification number and the root certificate file of the initial parts; The supplier parts management platform packages the certificate application documents, production equipment identification number and root certificate files of the initial parts and uploads them to the PKI service platform; The PKI service platform generates a digital certificate for the initial component based on the certificate application document and the production equipment identification number of the initial component; The OEM production platform obtains the digital certificate of the initial component from the PKI service platform, and verifies the production equipment identification number of the component to be filled and the filling status of the root certificate file, and writes the digital certificate into the component to be filled if both the production equipment identification number and the filling status of the root certificate file of the component to be filled are verified. There are multiple initial components, and the component to be filled is any one of the multiple initial components.

2. The method for filling digital certificates of parts according to claim 1, characterized in that: The PKI service platform generates a digital certificate for the initial component according to the certificate application document and the production equipment identification number of the initial component, including: The PKI service platform verifies the legitimacy of the production equipment identification number of the initial component and the legitimacy of the certificate application document of the initial component respectively according to the root certificate file of the initial component; When the production equipment identification number and the certificate application document of the initial component are verified to be legal, a digital certificate of the initial component is generated.

3. The method for filling digital certificates of parts according to claim 2, characterized in that: The PKI service platform verifies the legitimacy of the production equipment identification number of the initial component and the legitimacy of the certificate application file of the initial component respectively according to the root certificate file of the initial component, including: The PKI service platform obtains the first public key of the root certificate file of the initial component and the character format of the root certificate file of the initial component respectively; Verifying the digital signature of the certificate application file of the initial component by using the first public key of the root certificate file of the initial component to verify the legitimacy of the certificate application file of the initial component; The character format of the production equipment identification number of the initial component is verified through the character format of the root certificate file of the initial component to verify the legitimacy of the production equipment identification number of the initial component.

4. The method for filling digital certificates of parts according to claim 1, characterized in that: The OEM production platform includes: production electrical inspection equipment; when the verification of the production equipment identification number of the component to be filled fails and the filling status verification of the root certificate file of the component to be filled passes, the method further includes: The OEM production platform obtains the certificate application document of the component to be filled from the PKI service platform through the production electrical inspection equipment; Determining the digital certificate of the component to be filled through the certificate application document of the component to be filled; The digital certificate of the component to be filled is written into the component to be filled, and the component to be filled is restarted to enable the digital certificate of the component to be filled.

5. The method for filling digital certificates of parts according to claim 1, characterized in that: The method further comprises: The OEM production platform will isolate the component to be filled offline if both the production equipment identification number and the filling status of the root certificate file of the component to be filled fail to be verified.

6. The method for filling digital certificates of parts according to claim 1, characterized in that: The method further comprises: The OEM production platform periodically obtains purchase orders; According to the purchase order, obtaining in batches from the PKI service platform the digital certificate of each of the initial components in the purchase order; The digital certificate of each of the initial components and the production equipment identification number corresponding to each of the initial components are packaged and stored in the main engine factory production platform.

7. The method for filling digital certificates of parts according to claim 6, characterized in that: Verify the production equipment identification number of the parts to be filled, including: Read the production equipment identification number of the component to be filled; The read production equipment identification number of the component to be filled is compared with the production equipment identification number stored in the main engine factory production platform to verify the production equipment identification number of the component to be filled.

8. The method for filling a component with a digital certificate according to any one of claims 1 to 7, characterized in that: After writing the digital certificate into the component to be filled, the method further includes: The OEM production platform obtains the second public key and effective date of the root certificate file of the component to be filled, and the private key and current date of the digital certificate of the component to be filled; Verifying the validity status of the digital certificate of the component to be filled according to the second public key and the private key of the digital certificate of the component to be filled; Verifying the validity status of the digital certificate of the component to be filled according to the effective date and the current date; When the validity status of the digital certificate of the component to be filled and the effectiveness status of the digital certificate of the component to be filled are both verified, it is determined that the digital certificate of the component to be filled is filled successfully.

9. A system for the digital certificate filling method of a component as claimed in any one of claims 1 to 8, characterized in that: The system includes: supplier parts management platform, OEM production platform, PKI service platform; The supplier parts management platform is used to fill the production equipment identification number and the root certificate file for the initial parts respectively, and generate the certificate application file of the initial parts based on the production equipment identification number and the root certificate file of the initial parts; The supplier parts management platform is also used to package the certificate application documents, production equipment identification number and root certificate files of the initial parts and upload them to the PKI service platform; The PKI service platform is used to generate a digital certificate for the initial component according to the certificate application document and the production equipment identification number of the initial component; The OEM production platform is used to obtain the digital certificate of the initial component from the PKI service platform, and to verify the production equipment identification number of the component to be filled and the filling status of the root certificate file, and to write the digital certificate into the component to be filled if both the production equipment identification number and the filling status of the root certificate file of the component to be filled are verified. There are multiple initial components, and the component to be filled is any one of the multiple initial components.

10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the certificate filling method according to any one of claims 1 to 8 is implemented.

Images