Multi-stage safety encryption control algorithm of electronic detonator

Abstract

This invention discloses a multi-level security encryption control algorithm for electronic detonators. The core adopts a three-level progressive linkage encryption architecture, which consists of a first-level device identity key encryption, a second-level dynamic encryption of detonation commands, and a third-level data closed-loop verification encryption. It is equipped with a dedicated two-way identity verification formula, a dynamic key iteration formula, and a closed-loop verification judgment formula to achieve two-way identity authentication between the control terminal and the electronic detonator, dynamic encryption of detonation commands, and prevention of tampering and replay of transmitted data.

Description

Technical Field

[0001] This invention belongs to the field of safety management and control of civilian explosives and communication encryption technology of digital electronic detonators, specifically involving a multi-level security encryption control algorithm for electronic detonators. Background Technology

[0002] As a core piece of equipment in modern blasting engineering, the security of digital electronic detonators in terms of detonation command transmission, identification, and parameter configuration directly determines the overall safety of blasting operations. Encryption algorithms are the core technological support for preventing illegal detonation, command tampering, and signal hijacking in electronic detonators. Existing encryption technologies for electronic detonators have many fatal flaws and can no longer meet the high standards of safety supervision and blasting accident prevention requirements of the civil explosives industry, specifically as follows: First, existing technologies mostly use a single fixed encryption method, which only achieves protection through simple CRC check, fixed key symmetric encryption or basic serial port encryption. The encryption level is single and the logic is simple, making it extremely easy to be illegally cracked, signals copied and instructions tampered with, posing a major safety hazard of unauthorized detonation and accidental detonation. Second, the key adopts a static, fixed design without a dynamic iteration and update mechanism. The same key is reused for a long time, and once the key is leaked, all electronic detonators can be illegally controlled, resulting in a zero security fault tolerance rate. Third, there is a lack of a two-way authentication mechanism, which only realizes one-way verification of the electronic detonator by the detonator. This cannot prevent illegal detonators and counterfeit control terminals from accessing the system, and the threshold for device access is extremely low. Fourth, there is no linkage verification mechanism to prevent replay attacks and data tampering. Illegal devices can intercept historical detonation commands and send them repeatedly to achieve unauthorized detonation. Moreover, there is no multi-level verification closed loop during data transmission, and it is impossible to quickly lock the system when data anomalies occur. Fifth, the existing encryption algorithm is not deeply linked with the detonation control logic of the electronic detonator. It only realizes simple data encryption and does not form an integrated control logic of "encryption verification - command verification - detonation locking". It belongs to fragmented encryption rather than systematic security control.

[0003] In response to the multiple inherent defects of existing electronic detonator encryption technology, such as single encryption, static keys, lack of two-way authentication, and lack of closed-loop verification, existing improvement solutions in the industry can only make local optimizations for single defects, either by optimizing the key form or by supplementing basic verification. They have not formed a systematic encryption control approach with hierarchical linkage and closed-loop protection, nor have they formed a complete technical solution that deeply binds identity authentication encryption, dynamic command encryption, and verification anti-tampering encryption at three levels, and is equipped with a dedicated dynamic key iteration and quantitative verification formula. Summary of the Invention

[0004] The purpose of this invention is to address the shortcomings of existing electronic detonator encryption technologies, such as single-level encryption, static key fixation, lack of two-way authentication, and susceptibility to cracking and hijacking. It provides a multi-level security encryption control algorithm for electronic detonators, constructing a three-level progressive encryption protection closed loop. Combined with dynamic key iteration formulas and multi-level verification operations, it achieves two-way identity verification between the electronic detonator and control equipment, dynamic encryption of detonation commands, and prevention of tampering and replay of transmitted data. This fundamentally eliminates the risks of illegal detonation, command tampering, and signal hijacking. Furthermore, it is adaptable to wired / wireless communication scenarios for electronic detonators, boasting high computational efficiency and low resource consumption, fully meeting the security encryption requirements of the civilian blasting industry.

[0005] To achieve the above-mentioned objectives, the technical solution adopted by this invention is as follows: A multi-level security encryption control algorithm for electronic detonators adopts a three-level progressive linkage encryption architecture. The encryption execution order is fixed as follows: Level 1 device identity key encryption, Level 2 dynamic encryption of detonation command, and Level 3 data closed-loop verification encryption. The three levels of encryption logic are mutually bound, dependent on each other, and verified sequentially. If any encryption level fails verification, the hardware interlock of the electronic detonator's built-in detonation circuit is immediately triggered, completely prohibiting any detonation action. The algorithm incorporates three core formulas: dedicated dynamic key iteration, two-way identity verification, and closed-loop verification judgment. All encryption operations are executed synchronously offline in the electronic detonator's built-in encryption chip and the control terminal's encryption module. There is no plaintext transmission during the entire communication process. All interactive data is transmitted in encrypted form, eliminating the risk of data theft and tampering at the source. Core technical details and parameter limitations are further refined in the subordinate technical solutions.

[0006] 1. Level 1 device identity key encryption (basic access encryption) This layer is for system access encryption, enabling two-way authentication between the control terminal (detonator / integrated control system) and the electronic detonator, preventing unauthorized device access. The core encryption logic combines an asymmetric base key with a dynamic identity verification code. The base key is pre-programmed into the electronic detonator encryption chip and the control terminal encryption module. The verification code is generated dynamically. The core identity verification formula is: In the formula: It is a two-way identity verification code; The basic asymmetric key, with a fixed length of 128 bits, is pre-programmed into the electronic detonator encryption chip and the control terminal encryption module and cannot be modified arbitrarily. Millisecond-level timestamps are generated in real time for identity verification actions, eliminating static verification vulnerabilities. Each detonator has a unique hardware ID, which is independent and cannot be tampered with, thus achieving unique binding of the device. For bitwise XOR encryption operation; the two-way devices synchronously operate to generate a check code. If the check codes are completely consistent, the first-level encryption verification is passed and the device is allowed to enter the next encryption stage. Otherwise, it is directly judged as an unauthorized access device, the communication interface is immediately blocked, and subsequent data interaction is refused.

[0007] 2. Dynamic encryption of secondary detonation commands (core commands encrypted) This layer is the core encryption for detonation commands. It dynamically encrypts core control commands such as detonation commands, delay parameters, and charging commands, using a dynamic iterative key instead of a static key. The key is updated in real-time based on the number of communications and timestamps, eliminating the risk of key reuse and leakage. The core dynamic key iteration formula is: K n =K n-1 ×λ+T current mod2 128 In the formula: The dynamic key generated for the current iteration; The initial state uses a derived value from the base key, which is the historical key from the previous communication iteration. The key iteration coefficient takes the value of a fixed prime number 131071 to ensure that the key iteration is irregular and cannot be reversed. Sends millisecond-level timestamps to commands, bound to the command; mod2 128 The modulo operation is performed on 128 bits to ensure that the key length is constant at 128 bits. The iterative key is valid only once and is immediately invalidated after a single instruction is executed. A completely new key needs to be generated again for the next communication, thus completely eliminating the risk of key reuse and leakage.

[0008] The encryption formula for detonation commands based on dynamic keys is: In the formula: This is the encrypted ciphertext of the instructions; This is the original detonation command in plaintext; Encryption of matrix dot product operation; It is a 16-bit cyclic checksum of the original instruction, which is used to bind the instruction content to prevent tampering.

[0009] 3. Three-level data closed-loop verification and encryption (ultimate protection encryption) This layer provides ultimate security encryption, constructing a closed-loop verification logic of "send-receive-return-verify" to prevent replay attacks, data tampering, and command loss. The core verification formula is: In the formula: This is the comprehensive deviation value for closed-loop verification; The encrypted original instructions sent by the control terminal; This is the verification ciphertext transmitted back after being received by the electronic detonator; To prevent replay attacks, a threshold of ≤50ms is set for the time difference between command transmission and response; the algorithm's judgment rule is: when and If the data is found to be complete, unaltered, and unreplayable, and the verification is successful, subsequent detonation actions are allowed; otherwise, it is directly determined to be a data tampering or replay attack, immediately triggering hardware interlocking and interrupting the entire communication process.

[0010] Algorithm overall execution flow This algorithm follows the core logic of "step-by-step verification and no skipping of levels." The complete execution process proceeds in the order of initialization, first-level verification, second-level iteration, instruction transmission, third-level verification, and permission unlocking. The specific steps are as follows: System initialization: After the electronic detonator is powered on, the encryption chip automatically loads the pre-programmed basic key and waits for the access request from the control terminal; Level 1 encryption verification: The control terminal sends an identity verification request, and both parties simultaneously calculate the identity verification code. If the two-way comparison matches, the process proceeds to the next step; otherwise, communication is blocked. Second-level key iteration: After the first-level verification is passed, both parties simultaneously perform dynamic key iteration calculation to generate the current single-use valid dynamic key; Command Encryption Transmission: The control terminal converts the original detonation command into ciphertext using a two-level encryption formula and sends it to the electronic detonator; Three-level closed-loop verification: After receiving the ciphertext, the electronic detonator decrypts and verifies it, and then sends the ciphertext back to the control terminal. The deviation value is calculated by the three-level verification formula to determine the integrity and timeliness of the data. Detonation permission unlock: If all three levels of encryption are verified, the electronic detonator unlocks the detonation control circuit, allowing the execution of compliant detonation commands; if any step fails verification, the current communication is permanently blocked until reinitialization.

[0011] The beneficial effects of this invention are: 1. Breaking through the technical bias of single encryption, it pioneered a three-level progressive linkage encryption architecture, which deeply binds identity access, command encryption, and closed-loop verification, rather than simply superimposing existing encryption technologies, to form a closed-loop protection throughout the entire process; 2. It features a unique dynamic key iteration algorithm that abandons static keys and uses a dedicated iteration formula to ensure that keys are valid only once and updated in real time, thus completely solving the industry pain point of key reuse and leakage. The encryption strength is greatly improved compared to existing single encryption methods. 3. Dual protection of two-way identity authentication and closed-loop verification simultaneously prevents unauthorized access, command tampering and replay attacks. Combined with quantitative verification formula, it achieves accurate anomaly detection with an anomaly response time of ≤10ms and zero delay in locking action. The security protection accuracy is far superior to existing technologies. 4. The algorithm is highly adaptable and efficient, requiring no hardware upgrades for electronic detonators. It is implemented solely through encryption chip software algorithms, resulting in low resource consumption. It is compatible with wired RS485 and wireless LoRa / 4G communication across all scenarios, making it extremely versatile. It can be directly adapted to existing mainstream digital electronic detonators and detonation devices, demonstrating high practical value and widespread applicability. Attached Figure Description

[0012] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on the structures shown in these drawings without creative effort.

[0013] Figure 1 Flowchart of the overall execution process of the multi-level security encryption control algorithm of this invention; Figure 2 Internal logic diagram of the three-level encryption module of this invention; Figure 3 The flowchart of the dynamic key iteration and instruction encryption operation of this invention.

[0014] The realization of the objective, functional features and advantages of the present invention will be further explained in conjunction with the embodiments and with reference to the accompanying drawings. Detailed Implementation

[0015] The following section elaborates on the complete execution flow, parameter settings, formula calculations, verification logic, and anomaly locking mechanism of the multi-level security encryption control algorithm of this invention, taking into account the actual application scenario of digital electronic detonators in open-pit mining operations. This embodiment completely corresponds to all the technical solutions described in claims 1-9, and the parameter values ​​and calculation logic are completely consistent with the claims. Only the standardized parameters are solidified for conventional civil blasting scenarios. The core encryption architecture, algorithm formulas, and step-by-step verification rules are not modified. Those skilled in the art can refer to this embodiment and directly adapt the algorithm to other civil blasting scenarios such as tunnel excavation and urban controlled blasting without any creative effort.

[0016] Example: Application of multi-level encrypted control of electronic detonators in open-pit mine blasting (refer to...) Figures 1 to 3 ) I. Implementation Hardware and Environmental Infrastructure This embodiment uses a mainstream digital electronic detonator in the civil explosives industry, with a built-in 128-bit dedicated encryption chip, supporting wired RS485 and wireless LoRa dual-mode communication. The unique hardware ID of the electronic detonator is: =DET-2026-0318-0017 (Unalterable, factory-fixed); The supporting control terminal is an intrinsically safe detonator for mining, with a built-in multi-level encryption algorithm module that matches the detonator. The communication method is wireless LoRa (communication distance 300m, suitable for open-pit mining operations). The operating environment is a standard open-pit mining blasting condition with no strong electromagnetic interference and an ambient temperature of -10℃ to 40℃, meeting the operating specifications for civil explosive materials.

[0017] II. Solidification of Core Algorithm Parameters In this embodiment, the algorithm parameters strictly adhere to the values ​​defined in the claims. All parameters are pre-fixed to the electronic detonator encryption chip and the detonator control terminal, ensuring complete consistency between the two sets of parameters with no deviation. The specific parameters are as follows: Level 1 identity encryption parameters: 128-bit basic asymmetric key =6FF2-8A7D-3C09-E5B1-4D82-71AF-0E36-B954, the identity verification timestamp precision is in milliseconds, and the bitwise XOR operation rules are fixed; Secondary dynamic encryption parameters: key iteration coefficient =131071 (a fixed prime number), key length 128 bits, modulo operation The matrix dot product encryption operation rules are fixed, and the 16-bit CRC check rule is enabled by default. Level 3 verification parameters: Overall deviation value passing threshold Command transmission and reception time difference threshold The closed-loop verification adopts the full-process logic of "sending-receiving-returning-verification"; General rules: three-level encryption with step-by-step verification, prohibiting skipping levels, two-way identity verification, dynamic keys are valid only once, abnormal response time ≤10ms, and hardware interlocking is irreversible instantaneous interlocking.

[0018] III. Complete Algorithm Execution Steps This embodiment strictly follows the core architecture of "three-level progressive linkage encryption and step-by-step verification," and the execution process is completely consistent with the overall algorithm process in the invention. The specific steps are as follows: Step 1: System initialization and primary device identity key encryption verification After the electronic detonator is powered on, the built-in encryption chip automatically loads the pre-programmed 128-bit basic key. Upon entering standby verification mode, the detonator control terminal initiates an identity verification request, carrying the current millisecond-level timestamp. =20260318102345789, both parties simultaneously initiate two-way identity verification calculations, strictly following the formula. implement: Calculation process: The control terminal and the electronic detonator are respectively substituted with parameters, and after a bitwise XOR operation, the two-way identity verification codes generated by both parties are... =7A2C-914F-D602-E89B, the verification codes are completely consistent, and the rule is "if the verification codes are consistent, the first-level verification passes"; at the same time, two-way mutual verification is completed, which realizes both the identity verification of the detonator to the detonator and the reverse verification of the detonator to the detonator, confirming that the detonator is a legally authorized device with no risk of illegal access. The first-level encryption verification passes, and the device is allowed to enter the second-level encryption stage. If the verification codes are inconsistent, the hardware lockout is immediately executed, and subsequent communication is rejected.

[0019] Step 2: Secondary dynamic key iteration and detonation command encryption After the first-level verification is passed, both parties simultaneously execute the dynamic key iteration formula to generate a single-use valid dynamic key. The formula is as follows: K n =K n-1 ×λ+T current mod2 128 Operation process: Initialize the key from the previous round Using the derived value of the basic key, substitute it into the iteration coefficients. =131071, instruction sending timestamp =20260318102347123, after a 128-bit modulo operation, generates the current dynamic key. =3B7F-2D9C-8E1A-5460, this key conforms to the rule of "128-bit constant length, synchronous operation without transmission", is valid only once, and is immediately invalidated after the detonation command is executed, thus preventing key reuse and leakage.

[0020] Subsequently, the control terminal encrypts the original detonation command according to the aforementioned encryption formula: Original delayed detonation command plaintext =DELAY-500MS (delay of 500 milliseconds), encryption formula After matrix multiplication and 16-bit CRC check, random ciphertext is generated. =9C7E-1A3F-8B2D-6540-2918, no plaintext is transmitted throughout the process, and the encrypted text is sent to the electronic detonator.

[0021] Step 3: Three-level data closed-loop verification and encryption After receiving the ciphertext, the electronic detonator first decrypts and verifies the compliance of the instruction. Then, following the closed-loop logic of "sending-receiving-returning-verifying," it sends the received ciphertext back to the detonator control terminal. The control terminal then initiates the closed-loop verification and judgment formula: .

[0022] Operation process: The control terminal sends encrypted text =9C7E-1A3F-8B2D-6540-2918, Electronic detonator backhaul ciphertext =9C7E-1A3F-8B2D-6540-2918, the ciphertext is completely identical, the ciphertext deviation value is 0; the time difference between command transmission and return transmission. =22ms, and ≤50ms threshold; substitute into the formula to calculate the comprehensive deviation value. ,satisfy" and "Qualification criteria, passed three-level verification."

[0023] This step simultaneously achieves "anti-replay and anti-tampering" functions. Millisecond-level timestamps prevent the replay of historical instructions, ciphertext deviation value judgment intercepts data tampering, and the algorithm's abnormal response time is 8ms, with a limit of ≤10ms. The response speed meets the requirements for civil explosives safety management.

[0024] Step 4: Unlocking Detonation Permissions and Executing Abnormal Lockouts All three levels of encryption have passed verification, strictly adhering to the rule of "no skipping levels of verification, passing level by level". The electronic detonator unlocks the detonation control circuit and authorizes the execution of the detonation command with a 500ms delay. After the command is executed, the current dynamic key is immediately invalidated, and a new key needs to be generated iteratively for the next communication.

[0025] IV. Abnormal Operating Condition Simulation Test To verify the security interlocking performance of the algorithm, this embodiment simulates three types of illegal operating conditions. The test results fully comply with the rule of "if any verification fails, hardware interlocking will occur immediately." The specific tests are as follows: Unauthorized device access test: The verification request was initiated using an unauthorized ordinary detonator, and no pre-fixed basic key was found. If the identity verification code does not match, the first-level verification will fail immediately, the communication interface will be locked instantly, and any data interaction will be refused. Command tampering test: Manually tampering with detonation ciphertext After the ciphertext was sent back, the deviation value increased sharply. The overall deviation value was calculated. >0.01, Level 3 verification fails, hardware interlock is immediately triggered, and the detonation command is invalidated; Skipping the first-level identity verification and directly sending the second-level encryption command will result in the algorithm directly determining it as invalid due to the lack of a "skipping the first-level verification channel," and refusing to execute key iteration and command processing.

[0026] V. Implementation Results and Compliance Verification In this embodiment, the algorithm's entire execution time is 72ms, demonstrating high computational efficiency and not affecting the blasting operation sequence. Three-level encryption and linkage protection fully achieve all the technical effects described in the claims, eliminating risks of unauthorized access, instruction tampering, and replay attacks. The dynamic key is valid only once, eliminating the risk of leakage and reuse. Dual protection through two-way identity verification and closed-loop verification achieves a security level reaching military-grade encryption standards, fully complying with the "Regulations on the Safety Management of Civil Explosives" and electronic detonator industry standards. It is compatible with existing mainstream electronic detonators and initiation equipment, requiring no hardware modification and possessing strong practicality and scalability.

[0027] The above description is merely a preferred embodiment of the present invention and does not limit the patent scope of the present invention. Any equivalent structural transformations made using the contents of the present invention's specification and drawings under the inventive concept of the present invention, or direct / indirect applications in other related technical fields, are included within the patent protection scope of the present invention.

Claims

1. A multi-level security encryption control algorithm for an electronic detonator, characterized in that, A three-level progressive linkage encryption architecture is adopted, consisting of first-level device identity key encryption, second-level dynamic encryption of detonation command, and third-level data closed-loop verification encryption. The three-level encryption logic depends on and verifies each other in turn. If the verification of any encryption level fails, the hardware interlock of the electronic detonator detonation circuit is immediately triggered. The algorithm has built-in bidirectional identity verification formula, dynamic key iteration formula, and closed-loop verification judgment formula. All encryption operations are executed synchronously in the encryption chip built into the electronic detonator and the encryption module of the control terminal. Communication data is transmitted in encrypted form throughout the entire process, with no plaintext transmission.

2. The multi-level security encryption control algorithm for electronic detonators according to claim 1, characterized in that, The encryption of the primary device identity key is a two-way authentication encryption, and the core two-way identity verification formula is: In the formula: It is a two-way identity verification code. A 128-bit pre-programmed basic asymmetric key, For identity verification, millisecond-level timestamps This is a unique and unalterable hardware ID for the electronic detonator. It performs a bitwise XOR operation; the two-way device synchronously calculates the checksum. If the checksums match, the first-level verification passes; otherwise, it is determined to be an illegal device and the communication interface is blocked.

3. The multi-level security encryption control algorithm for electronic detonators according to claim 1, characterized in that, The dynamic encryption of the secondary detonation command adopts a dynamic key single-use mechanism, and the core dynamic key iteration formula is as follows: K n =K n-1 ×λ+T current mod2 128 In the formula: This is the current dynamic key. The key for the previous iteration. The iteration coefficient is a fixed prime number of 131071. The timestamp for command transmission is used; the iterative key is immediately invalidated after command execution. The encryption formula for the detonation command based on this dynamic key is: In the formula: To encrypt ciphertext, The original instruction in plaintext. This refers to the matrix dot product operation. This is the 16-bit cyclic checksum of the original instruction.

4. The multi-level security encryption control algorithm for electronic detonators according to claim 1, characterized in that, The three-level data closed-loop verification and encryption adopts a "send-receive-return-verify" closed-loop logic, and the core verification judgment formula is: In the formula: This is the overall deviation value. To control the sending of encrypted messages by the terminal, For electronic detonators to transmit encrypted messages, The time difference between instruction transmission and reception; the algorithm sets a qualified threshold as follows: and If the threshold is met, the three-level verification is successful, and the detonation permission is unlocked.

5. The multi-level security encryption control algorithm for electronic detonators according to claim 1, characterized in that, The three-level encryption has no bypass verification channel. Only after the first-level identity verification is passed can the second-level dynamic key iteration and command encryption be initiated; only after the second-level encryption command verification is passed can the third-level closed-loop verification be initiated, forming a closed-loop encryption protection system for the entire process.

6. The multi-level security encryption control algorithm for electronic detonators according to claim 2, characterized in that, The primary device identity key encryption enables two-way mutual verification, including both the control terminal's verification of the electronic detonator's identity and the electronic detonator's reverse verification of the control terminal, completely eliminating the possibility of illegal detonators and counterfeit control terminals accessing the system.

7. The multi-level security encryption control algorithm for electronic detonators according to claim 3, characterized in that, The key generated by the secondary dynamic key iteration formula is a constant 128-bit key. The iteration process does not require external key transmission. Both devices synchronously calculate and generate a consistent key, avoiding the risk of key transmission leakage.

8. The multi-level security encryption control algorithm for electronic detonators according to claim 4, characterized in that, The three-level data closed-loop verification encryption has both anti-replay attack and anti-data tampering functions. It intercepts illegal command calls and data tampering behavior through dual judgment of millisecond-level timestamp and ciphertext deviation value. The algorithm's abnormal response time is ≤10ms.

9. The multi-level security encryption control algorithm for electronic detonators according to claim 1, characterized in that, The algorithm is compatible with wired RS485 and wireless LoRa / 4G communication in all scenarios. It does not require modification of electronic detonator hardware and is implemented only through encryption chip software calculation. It is compatible with existing mainstream digital electronic detonators and detonation control equipment.

Images