A connectionless wireless configuration update method for a sealing device

Abstract

The application relates to the technical field of Internet of Things, in particular to a connectionless wireless configuration updating method for sealed equipment, wherein a configuration terminal broadcasts a discovery beacon, a wireless sensor polls and listens and generates a network access request; the configuration terminal responds to the network access request; both sides establish a secure pairing based on a root key to derive a session key; the configuration terminal encrypts target configuration parameters and sends the target configuration parameters to the wireless sensor; the wireless sensor decrypts and verifies the target configuration parameters, updates local configuration, and encrypts feedback results and sends the feedback results to the configuration terminal. The application realizes remote secure configuration updating in a lost state of the sealed equipment through coupling of connectionless communication independent of a TCP / IP protocol and end-to-end encryption, and significantly improves maintainability and security.

Description

Technical Field

[0001] This invention relates to the field of Internet of Things (IoT) technology, and more particularly to a connectionless wireless configuration update method for sealed devices. Background Technology

[0002] In modern Industrial Internet of Things (IIoT) systems, remote data acquisition terminals, wireless sensors, and other devices are widely deployed in complex and dispersed environments such as factory production lines, energy facilities, and environmental monitoring stations. These devices typically employ a sealed enclosure design to meet waterproof and dustproof requirements, and their operating logic and communication behavior rely on configuration parameters stored in internal Flash or EEPROM, including network access parameters, server communication parameters, and security authentication information. Although the devices are pre-configured at the factory, during their several years of field service, changes in network infrastructure, security compliance requirements, equipment migration, and reorganization frequently necessitate remote modification of these configuration parameters.

[0003] However, existing configuration modification methods have serious drawbacks when facing the above requirements. Wired programming requires physical contact with the device and disassembly of the sealed casing, which is not only costly and extremely inefficient, but also compromises the device's waterproof and dustproof rating, introducing dust and moisture that can lead to device malfunction. OTA updates based on wireless networks rely on the device having successfully connected to the router and obtained an IP address. When the parameter to be modified happens to be the Wi-Fi password or server IP address, the device becomes disconnected due to the inability to access the network, resulting in the update command failing to be delivered and creating a deadlock—the device must be connected to the network to receive new configurations, yet its networking functionality itself depends on a successful pre-configuration. Furthermore, running the TCP / IP protocol stack and application layer protocols such as HTTPS and MQTT places high demands on the microcontroller's processing power, memory, and storage resources, making it difficult to implement effectively on resource-constrained low-end processors.

[0004] Chinese Patent Publication No. CN117615367A discloses a firmware update method, apparatus, and system, comprising: transmitting probe data on a public frequency band to detect the device to be updated; handshaking with the device to be updated and switching to an idle working channel; and sending firmware update data to the device to be updated to complete the update. It is evident that while the above technical solution achieves wireless updates without disassembling the casing, its communication process still relies on traditional RF link layer address allocation and channel switching mechanisms, failing to address the configuration update problem when the device is completely disconnected due to missing network parameters. Furthermore, the solution only involves the overall replacement of the firmware program, without optimizing for refined and secure updates of configuration parameters, and lacks an end-to-end encryption protection mechanism. This results in a security risk of eavesdropping or tampering with configuration data during transmission, making it difficult to meet the dual requirements of maintainability and security for industrial IoT devices. Therefore, there is an urgent need for a method that can achieve secure configuration updates of sealed devices in a disconnected state directly based on the physical layer or data link layer without relying on the TCP / IP protocol stack, IP addresses, or routers. Summary of the Invention

[0005] To address these issues, the present invention provides a connectionless wireless configuration update method for sealed devices. This method overcomes the problems in existing technologies in remote maintenance scenarios of industrial IoT where sealed wireless sensors lose connection due to changes in WiFi passwords or server IP addresses. These problems include the need for wired programming to disassemble the sealed casing, which damages the device's protection level; the inability to update configurations when the device loses connection due to traditional OTA reliance on IP networks; and the lack of end-to-end encryption protection, which makes configuration data susceptible to eavesdropping or tampering. Consequently, these methods result in high maintenance costs, poor maintainability, and security risks for industrial IoT sealed devices.

[0006] To achieve the above objectives, the present invention provides a connectionless wireless configuration update method for sealing devices, comprising: The terminal is configured to generate a discovery beacon and periodically broadcast the discovery beacon on a preset channel; The wireless sensor polls and listens to the channel, intercepts the discovery beacon, locks the current channel, parses out the MAC address of the configuration terminal, generates a network access request, and sends it to the MAC address of the configuration terminal. The configuration terminal receives the network access request and verifies it. After successful verification, it generates a session key based on the device identifier of the wireless sensor and the locally pre-stored root key, generates a network access confirmation and sends it to the wireless sensor to establish a secure pairing. The configuration terminal encapsulates the target configuration parameters to be updated into a configuration data packet and encrypts it, then sends the encrypted configuration data packet to the wireless sensor; The wireless sensor receives, decrypts, and verifies the integrity of the configuration data packet. If it is incomplete, it discards the data packet and returns a verification error status code to the configuration terminal. The wireless sensor generates feedback information containing updated status, which is then encrypted and sent back to the configuration terminal.

[0007] Furthermore, the discovery beacon includes the MAC address, timestamp, and CRC checksum of the configured terminal.

[0008] Furthermore, the configuration terminal sequentially switches between multiple preset channels and broadcasts the discovery beacon on each preset channel at a fixed period.

[0009] Furthermore, the network access request includes the MAC address of the wireless sensor, device type, capability description, and a list of supported wireless channels.

[0010] Furthermore, the process of verifying the network access request includes verifying whether the data format of the network access request conforms to a preset format specification, and verifying whether the device identifier in the network access request exists in a preset list of legitimate devices.

[0011] Furthermore, the configuration terminal inputs the MAC address of the wireless sensor and the locally stored manufacturer root key into a preset key derivation function to generate a preset number of bytes of session key.

[0012] Furthermore, the configuration terminal adds the MAC address of the wireless sensor, the negotiated communication channel, and the session key to the list, generates a network access confirmation data packet, and sends it to the wireless sensor via unicast, so that the wireless sensor can use the same manufacturer root key stored locally and its own MAC address to calculate and generate the same session key, thus completing two-way secure pairing.

[0013] Furthermore, the configuration data packet includes target configuration parameters, instruction type identifier, instruction sequence number, and data integrity verification code; the target configuration parameters include IP address, WiFi name, WiFi password, and authentication token.

[0014] Furthermore, the configuration data packet is encrypted and its integrity is protected using a preset encryption algorithm.

[0015] Furthermore, the feedback information includes the update operation status and the verification value of the updated configuration parameters. If the update fails, a failure reason code is added to the feedback information.

[0016] Compared with existing technologies, the advantages of this invention are as follows: It achieves rapid device discovery by combining beacon broadcasting from the configuration terminal with polling from wireless sensors; it enables bidirectional secure pairing by having the wireless sensor send a network access request and the configuration terminal generate a session key based on the root key and key derivation function; it achieves encrypted transmission by having the configuration terminal encapsulate configuration data packets using the AES128CCM encryption algorithm and the wireless sensor decrypt and verify them; it achieves accurate configuration updates by having the wireless sensor parse target configuration parameters and update non-volatile memory; and it achieves closed-loop confirmation by having the wireless sensor provide encrypted feedback on update status. This invention fully covers the entire process of device discovery, security authentication, encrypted transmission, configuration updates, and result feedback without relying on the TCP / IP protocol stack, IP addresses, or routers. It enables remote secure configuration updates even when sealed devices are out of service, significantly improving the maintainability, communication security, and deployment flexibility of industrial IoT devices.

[0017] Furthermore, by configuring the terminal to periodically broadcast discovery beacons on a preset channel, and the wireless sensor to poll, listen, and lock onto the channel within a preset time window, the device can quickly complete device discovery without any network connection, improving the timeliness and reliability of device discovery.

[0018] Furthermore, by sending a network access request containing its own MAC address and capability description through a wireless sensor, and configuring the terminal to verify the legitimacy, a session key is generated based on the root key and key derivation function and sent as a network access confirmation. This enables two-way authentication and secure pairing between devices, improving the security of the communication link.

[0019] Furthermore, by configuring the terminal to use encryption algorithms to encrypt and protect the integrity of configuration data packets, and adding instruction sequence numbers, it is possible to prevent configuration data from being eavesdropped on, tampered with, or replayed during transmission, thereby improving the confidentiality and integrity of configuration data.

[0020] Furthermore, by decrypting and verifying the configuration data packet through wireless sensors, parsing the target configuration parameters, and updating the configuration parameters in the non-volatile memory, precise field-level updates of key parameters such as WiFi password, server IP, and authentication token can be achieved, improving the flexibility and accuracy of configuration updates.

[0021] Furthermore, by generating feedback information containing updated status and verification values ​​through wireless sensors and transmitting it back in encryption, the configuration terminal can obtain the update results in real time, ensuring a reliable closed loop for configuration updates and improving the maintainability and operational efficiency of the system. Attached Figure Description

[0022] Figure 1This is a flowchart illustrating a connectionless wireless configuration update method for sealing devices according to an embodiment of the present invention. Figure 2 This is a flowchart illustrating the steps involved in the device discovery process according to an embodiment of the present invention. Figure 3 This is a flowchart illustrating the secure pairing steps in an embodiment of the present invention; Figure 4 A flowchart illustrating the steps for configuring data updates in an embodiment of the present invention. Detailed Implementation

[0023] To make the objectives and advantages of the present invention clearer, the present invention will be further described below with reference to embodiments; it should be understood that the specific embodiments described herein are merely for explaining the present invention and are not intended to limit the present invention.

[0024] Preferred embodiments of the present invention will now be described with reference to the accompanying drawings. Those skilled in the art should understand that these embodiments are merely illustrative of the technical principles of the present invention and are not intended to limit the scope of protection of the present invention.

[0025] Please see Figure 1 The diagram shown is a flowchart illustrating a connectionless wireless configuration update method for sealing devices according to an embodiment of the present invention. The embodiment of the present invention provides a connectionless wireless configuration update method for sealing devices, comprising: S101: Configure the terminal to generate a discovery beacon and periodically broadcast the discovery beacon on a preset channel; S102: The wireless sensor polls and listens to the channel, intercepts the discovery beacon, locks the current channel, parses out the MAC address of the configuration terminal, generates a network access request, and sends it to the MAC address of the configuration terminal. S103: Configure the terminal to receive the network access request and perform verification. After successful verification, generate a session key based on the device identifier of the wireless sensor and the locally pre-stored root key, generate a network access confirmation and send it to the wireless sensor to establish a secure pairing. S104: The configuration terminal encapsulates the target configuration parameters to be updated into a configuration data packet and encrypts it, and sends the encrypted configuration data packet to the wireless sensor; S105: The wireless sensor receives, decrypts, and verifies the integrity of the configuration data packet. If it is incomplete, the data packet is discarded and a verification error status code is returned to the configuration terminal. S106: The wireless sensor generates feedback information containing updated status, which is then encrypted and sent back to the configuration terminal.

[0026] This invention's embodiments demonstrate how broadcast beacons can quickly wake up surrounding devices, improving the timeliness of device discovery; polling and unicast responses can accurately pinpoint target terminals, improving the reliability of network access requests; deriving session keys from root keys enables two-way secure authentication, enhancing the communication link's resistance to attacks; encrypting and encapsulating configuration parameters prevents data eavesdropping, improving the confidentiality of configuration transmission; integrity checks identify whether data has been tampered with, improving the reliability of updated data; conditional branching prevents erroneous configurations from taking effect, improving system fault tolerance; and encrypted status feedback provides closed-loop confirmation of update results, improving the traceability of operation and maintenance.

[0027] Please see Figure 2 The diagram shown is a flowchart illustrating the device discovery steps in an embodiment of the present invention. The device discovery process in this embodiment includes: Configure the terminal to generate discovery beacons and periodically broadcast the discovery beacons on a preset channel; The wireless sensor polls and listens to each channel. The wireless sensor confirms whether the legitimate discovery beacon has been intercepted; If the legitimate discovery beacon is not intercepted, continue polling and monitoring each channel; If the legitimate discovery beacon is intercepted, the current channel is locked; Wireless sensors analyze and detect beacons to obtain the MAC address of the configured terminal; The wireless sensor generates a network access request and sends it to the configuration terminal via unicast.

[0028] Specifically, after the configuration terminal starts up, it generates a discovery beacon, which contains the MAC address, timestamp, and CRC checksum of the configuration terminal.

[0029] Specifically, the terminal is configured to broadcast the discovery beacon on a preset channel at a fixed period. In this embodiment of the invention, the preset channel is the 1st, 6th, or 11th channel of the 2.4GHz band, and the fixed period is preferably 100ms.

[0030] Specifically, after the wireless sensor is powered on, it wakes up its wireless module within a preset time window, preferably 30 seconds in this embodiment of the invention; and then begins to poll and listen to each channel.

[0031] Specifically, on each channel, the wireless sensor determines whether a legitimate discovery beacon has been intercepted; if no legitimate discovery beacon has been intercepted, it continues to switch to the next channel for polling and listening; if a legitimate discovery beacon has been intercepted, it immediately locks onto the current channel and parses the discovery beacon to extract the MAC address of the configured terminal.

[0032] Specifically, the wireless sensor generates a network access request, which includes the wireless sensor's own MAC address, device type, capability description, and a list of supported wireless channels. Then, the wireless sensor sends the network access request to the MAC address of the configuration terminal via unicast, and the configuration terminal receives the network access request.

[0033] This invention improves the identifiability of beacons by generating beacons containing MAC addresses and timestamps to uniquely identify the sender; it increases the probability of device discovery by periodically broadcasting beacons to cover multiple listening cycles; it enhances the initiative of device discovery by actively searching for channels through polling; it improves the accuracy of channel selection by quickly synchronizing communication parameters by intercepting legitimate beacons to lock channels; it improves the adaptability of subsequent pairing by generating network access requests that include the device's own capabilities to report device characteristics; and it improves the directness of network access requests by unicasting requests to the terminal's MAC address to directly establish point-to-point links.

[0034] Please see Figure 3 The diagram shown is a flowchart illustrating the secure pairing steps of an embodiment of the present invention; the secure pairing process of an embodiment of the present invention includes: Configure the terminal to receive network access requests and verify the data format and legality; If the verification fails, the network access request is discarded and the process ends. If the verification is successful, the locally stored vendor root key is read and a session key is generated using the key derivation function; Configure the terminal to add the MAC address, current channel, and session key of the wireless sensor to the list; Configure the terminal to generate an encrypted network access confirmation and send it to the wireless sensor; The wireless sensor receives and verifies the network access confirmation. If the verification fails, the secure pairing will fail and the process will end. If the verification is successful, the wireless sensor will add the terminal's MAC address, current channel, and session key to the list, and the secure pairing will be successful.

[0035] Specifically, after receiving a network access request, the configuration terminal performs an integrity check on the data format of the request and verifies whether the device type in the request exists in the preset list of legitimate devices. If the verification fails, the configuration terminal discards the network access request and ends the pairing process; if the verification succeeds, the configuration terminal reads the pre-stored vendor root key in the local secure storage area and extracts the MAC address of the wireless sensor.

[0036] Specifically, the configuration terminal inputs the manufacturer's root key and the MAC address of the wireless sensor into a preset key derivation function. In this embodiment of the invention, the HMACSHA256 algorithm is used to generate a 16-byte session key. The configuration terminal then adds the MAC address of the wireless sensor, the currently locked channel, and the generated session key to its own list.

[0037] Specifically, the configuration terminal generates a network access confirmation data packet, which is encrypted and protected using an encryption algorithm. In this embodiment, the encryption algorithm used is AES128CCM, the encryption key is the session key, and it is sent to the wireless sensor via unicast.

[0038] Specifically, after receiving the encrypted network access confirmation, the wireless sensor independently calculates the session key using the same vendor root key stored locally and the MAC address of the configuration terminal, through the exact same key derivation function. The wireless sensor verifies the consistency of the calculated session key with the session key generated by the configuration terminal. If the consistency verification fails, the two-way pairing fails and the process ends; if the consistency verification succeeds, the wireless sensor adds the MAC address of the configuration terminal, the currently locked channel, and the session key to its own list.

[0039] This invention improves the security of pairing entry by filtering illegal requests through integrity checks and device type verification; it also improves system efficiency by discarding requests and terminating invalid processes promptly when verification fails; it ensures the security of the key derivation basis by reading pre-stored stub keys and sensor MAC addresses; it enhances the reliability of key generation by dynamically generating unique keys through key derivation functions; it records legitimate devices by adding peer information to a list, improving the manageability of subsequent communications; it prevents key leakage and improves pairing confidentiality by encrypting network access confirmation and unicasting; it enables bidirectional verification by independently calculating the same session key through sensors, improving the accuracy of identity authentication; and it identifies pairing status by judging key consistency, improving the robustness of secure pairing.

[0040] Please see Figure 4 The diagram shown is a flowchart illustrating the steps of updating configuration data according to an embodiment of the present invention. The process of updating configuration data according to an embodiment of the present invention includes: The terminal generates an encrypted configuration data packet and sends it to the wireless sensor; The wireless sensor receives the configuration data packet and verifies its integrity. If the verification fails, the wireless sensor discards the configuration data packet and returns a verification failure status code to the configuration terminal. If the verification is successful, the wireless sensor parses the configuration data packet and updates the data. The wireless sensor generates encrypted feedback information and sends it to the configuration terminal; Configure the terminal to parse feedback information and display update results.

[0041] Specifically, the configuration terminal generates target configuration parameters to be updated based on user input; the configuration terminal encapsulates these target configuration parameters, along with an instruction type identifier, instruction sequence number, and data integrity check code, into a configuration data packet. The target configuration parameters include an IP address, WiFi name, WiFi password, and authentication token; the configuration terminal uses a session key and the AES128CCM encryption algorithm to encrypt and protect the integrity of the entire configuration data packet; the configuration terminal sends the encrypted configuration data packet to the MAC address of the wireless sensor via unicast.

[0042] Specifically, after receiving the encrypted configuration data packet, the wireless sensor decrypts it using the same session key and verifies the integrity of the data packet. If decryption or verification fails, the wireless sensor discards the data packet and returns a verification failure status code to the configuration terminal; if verification succeeds, the target configuration parameters in the configuration data packet are parsed out.

[0043] Specifically, the wireless sensor reads the original configuration parameters currently stored in non-volatile memory based on the parsed target configuration parameters, and updates or completely overwrites specified fields. After the update is complete, the wireless sensor recalculates the global checksum for the entire configuration parameter area and writes the new checksum into the non-volatile memory to ensure the integrity of the configuration parameters after storage.

[0044] Specifically, the wireless sensor generates feedback information that includes the update operation status and the verification value of the updated configuration parameters. If the update fails, a failure reason code is added to the feedback information. The wireless sensor uses a session key to encrypt the feedback information using AES128CCM and sends the encrypted feedback information back to the MAC address of the configuration terminal.

[0045] Specifically, after the configuration terminal receives and decrypts the feedback information, it displays the update result through the user interface based on the feedback content.

[0046] This invention, through encapsulating instruction types, serial numbers, and checksums, ensures data traceability and improves the standardization of configuration packages; through session keys and AES128CCM encryption, it prevents data leakage and improves transmission confidentiality; through decryption and integrity verification, it detects whether data has been tampered with, improving the reliability of received data; by discarding data and returning a status code when verification fails, it enables timely error correction and improves system fault tolerance; by reading and updating the configuration in non-volatile memory, it ensures persistent storage and improves parameter stability; by recalculating the global checksum and writing it, it prevents storage tampering and improves data integrity; by generating encrypted feedback information and sending it back, it enables closed-loop confirmation and improves the traceability of operation and maintenance; and by decrypting and displaying the results on the terminal, it intuitively informs the user and improves the convenience of human-computer interaction.

[0047] The system involved in the embodiments of the present invention includes a configuration terminal and one or more smart idlers installed on the conveyor line.

[0048] The smart idler rollers internally house processor and sensor modules. Each roller's casing is completely sealed, achieving an IP67 waterproof and dustproof rating, preventing physical contact maintenance. The equipment is pre-installed with the manufacturer's root key and default configuration parameters, including default WiFi connection parameters, default server address, and default authentication token.

[0049] After the configuration terminal powers on, it calls the esp_now_init() function in the ESPIDF framework to initialize the ESPNOW protocol and then calls the esp_now_add_peer() function to add the peer device. Subsequently, the configuration terminal periodically broadcasts discovery beacons on channels 1, 6, and 11 of the preset 2.4GHz band. These beacons contain the configuration terminal's MAC address, timestamp, and CRC checksum.

[0050] After powering on, the smart idler roller enters a preset 30-second time window, wakes up its WiFi module, and polls and listens to various channels. Upon intercepting a legitimate discovery beacon on a certain channel, the smart idler roller locks onto the current channel, parses the MAC address of the configuration terminal, and generates a network access request data packet. The network access request includes the smart idler roller's own MAC address and the current channel, and the smart idler roller sends the network access request to the configuration terminal's MAC address via unicast.

[0051] After receiving the network access request, the configuration terminal verifies its data format and device legitimacy. Upon successful verification, the configuration terminal reads the locally stored manufacturer root key, extracts the MAC address of the smart idler, and generates a 16-byte session key using the HMACSHA256 key derivation function. The configuration terminal adds the smart idler's MAC address, current channel, and session key to its own list, generates a network access confirmation data packet, encrypts it using the session key in AES128CCM mode, and sends it to the smart idler via unicast.

[0052] After receiving the encrypted network access confirmation, the smart idler uses the same manufacturer's root key stored locally and its own MAC address to independently generate a session key using the exact same HMACSHA256 calculation method, and attempts to demodulate the network access confirmation. If decryption is successful, the pairing is confirmed, and the smart idler adds the configuration terminal's MAC address, current channel, and session key to its own list. At this point, both parties establish a bidirectional encrypted communication channel based on AES128CCM.

[0053] Users enter new configuration parameters in the user interface of the configuration terminal, including: Server IP address; WiFi name; WiFi password; Authentication Token.

[0054] The configuration terminal encapsulates the aforementioned target configuration parameters, instruction type identifier, instruction sequence number, and data integrity check code into a configuration data packet. Using the negotiated session key, the configuration terminal employs the AES128CCM algorithm to encrypt and protect the integrity of the entire configuration data packet, and then sends the encrypted configuration data packet to the MAC address of the target smart idler using the esp_now_send() function.

[0055] The smart idler receives configuration data packets by calling the `esp_now_register_recv_cb()` function, decrypts them using the same session key using AES128CCM, and verifies the integrity checksum. If verification fails, the smart idler discards the data packet and returns a verification error status code to the configuration terminal; if verification succeeds, the target configuration parameters are parsed.

[0056] The intelligent idler roller reads the original configuration parameters currently stored in the Flash non-volatile memory and updates the specified fields according to the parsed target configuration parameters. After the update is complete, the intelligent idler roller recalculates the global checksum for the entire configuration parameter area and writes the new checksum to the reserved area at the end of the Flash memory to ensure the integrity of the configuration parameters after storage.

[0057] The smart idler generates feedback information containing the update operation status and the verification value of the updated configuration parameters. If the update fails, a failure reason code is added to the feedback information. The smart idler uses a session key to encrypt the feedback information using AES128CCM and sends it back to the MAC address of the configuration terminal via esp_now_send().

[0058] The configuration terminal receives and decrypts the feedback information, and displays the update results through the user interface based on the feedback content, so that maintenance personnel can confirm whether the update is complete.

[0059] The embodiments described above are for illustrative purposes only and are not intended to limit the scope of this application. Although this application has been described in detail with reference to preferred embodiments, those skilled in the art should understand that modifications or equivalent substitutions can be made to the technical solutions of this application without departing from the spirit and scope of the technical solutions of this application, and all such modifications or substitutions should be covered within the scope of the claims of this application.

Claims

1. A connectionless wireless configuration update method for sealed devices, characterized in that, include: The terminal is configured to generate a discovery beacon and periodically broadcast the discovery beacon on a preset channel; The wireless sensor polls and listens to the channel, intercepts the discovery beacon, locks the current channel, parses out the MAC address of the configuration terminal, generates a network access request, and sends it to the MAC address of the configuration terminal. The configuration terminal receives the network access request and verifies it. After successful verification, it generates a session key based on the device identifier of the wireless sensor and the locally pre-stored root key, generates a network access confirmation and sends it to the wireless sensor to establish a secure pairing. The configuration terminal encapsulates the target configuration parameters to be updated into a configuration data packet and encrypts it, then sends the encrypted configuration data packet to the wireless sensor; The wireless sensor receives, decrypts, and verifies the integrity of the configuration data packet. If it is incomplete, it discards the data packet and returns a verification error status code to the configuration terminal. The wireless sensor generates feedback information containing updated status, which is then encrypted and sent back to the configuration terminal.

2. The connectionless wireless configuration update method for sealed devices according to claim 1, characterized in that, The discovery beacon includes the MAC address, timestamp, and CRC checksum of the configured terminal.

3. The connectionless wireless configuration update method for sealed equipment according to claim 2, characterized in that, The configuration terminal sequentially switches between multiple preset channels and broadcasts the discovery beacon on each preset channel at a fixed period.

4. The connectionless wireless configuration update method for sealed devices according to claim 3, characterized in that, The network access request includes the MAC address of the wireless sensor, device type, capability description, and a list of supported wireless channels.

5. A connectionless wireless configuration update method for sealing devices according to claim 4, characterized in that, The process of verifying the network access request includes verifying whether the data format of the network access request conforms to the preset format specification, and verifying whether the device identifier in the network access request exists in the preset list of legitimate devices.

6. A connectionless wireless configuration update method for sealed devices according to claim 5, characterized in that, The configuration terminal inputs the MAC address of the wireless sensor and the locally stored manufacturer root key into a preset key derivation function to generate a preset number of bytes of session key.

7. A connectionless wireless configuration update method for sealed equipment according to claim 6, characterized in that, The configuration terminal adds the MAC address of the wireless sensor, the negotiated communication channel, and the session key to the list, generates a network access confirmation data packet, and sends it to the wireless sensor via unicast. This enables the wireless sensor to calculate and generate the same session key using the locally stored root key of the same manufacturer and its own MAC address, thus completing the two-way secure pairing.

8. A connectionless wireless configuration update method for sealed equipment according to claim 7, characterized in that, The configuration data packet includes target configuration parameters, instruction type identifier, instruction sequence number, and data integrity verification code; the target configuration parameters include IP address, WiFi name, WiFi password, and authentication token.

9. A connectionless wireless configuration update method for sealed devices according to claim 8, characterized in that, The configuration data packet is encrypted and its integrity is protected using a preset encryption algorithm.

10. A connectionless wireless configuration update method for sealed devices according to claim 9, characterized in that, The feedback information includes the update operation status and the verification value of the updated configuration parameters. If the update fails, a failure reason code is added to the feedback information.

Images