A product authorization management method, device, equipment and medium

Abstract

The embodiment of the present invention discloses a product authorization management method, device, equipment and medium. The method is applied to a first node, including: using a public key to decrypt an encrypted product to obtain a target product, and generating first product registration information when performing the installation operation of the target product; obtaining the second product registration information of the target node; using a public key to encrypt the first product registration information to determine the encrypted registration information, and sending the encrypted registration information to the second node; if the encrypted authorization information sent by the second node is received, the encrypted authorization information is decrypted using the public key to obtain the authorization information; according to the authorization information and the second product registration information, the cluster authorization result of the target product in the cluster is determined, and the cluster authorization result is sent to the second node. By implementing this solution, the product authorization process can be controlled, the users who use the product can be traced, and the entire life cycle of the product can be efficiently managed.

Description

Technical Field

[0001] Embodiments of the present invention relate to the technical field of big data products, and in particular, to a product authorization management method, device, equipment and medium. Background Art

[0002] Big data is an important foundation of the digital economy, with huge potential value, and provides the possibility to explore new laws of the objective world and reduce the influence of subjective factors in strategic decision-making. The big data platform provides computing and storage capabilities for big data, which makes massive static data "active" and releases its own value.

[0003] In the related technology, in the sales process of big data products, big data products need to go through many intermediate links before reaching the end users, which makes the entire process have too many intermediate nodes, resulting in the manufacturer company not knowing when the big data products reach the end customers, resulting in the problem of being unable to efficiently and uniformly manage big data products after the products are sold. Summary of the invention

[0004] The embodiments of the present invention provide a product authorization management method, device, equipment and medium, which can realize the control of the product authorization process, can trace the users who use the product, and efficiently manage the entire life cycle of the product.

[0005] In a first aspect, an embodiment of the present invention provides a product authorization management method, which is applied to a first node, comprising: if an encrypted product and a public key sent by a second node are received, decrypting the encrypted product using the public key to obtain a target product, and generating first product registration information when performing an installation operation of the target product; wherein the target product is an installation package;

[0006] If the installation operation of the target product on the target node is detected, the second product registration information of the target node is obtained; wherein the number of the target nodes is at least one; the first node and each of the target nodes are in the same cluster, and each of the target nodes is managed through the first node;

[0007] Using the public key to encrypt the first product registration information to determine the encrypted registration information, and sending the encrypted registration information to the second node, so that the second node uses the private key to decrypt the encrypted registration information to determine the first product registration information, and generates authorization information according to the first product registration information, uses the private key to encrypt the authorization information to obtain encrypted authorization information, and sends the encrypted authorization information to the first node;

[0008] If the encrypted authorization information sent by the second node is received, decrypting the encrypted authorization information using the public key to obtain the authorization information;

[0009] A cluster authorization result of the target product in the cluster is determined according to the authorization information and the second product registration information, and the cluster authorization result is sent to the second node, so that the second node updates the cluster state according to the cluster authorization result.

[0010] In a second aspect, an embodiment of the present invention further provides a product authorization management method, which is executed by a second node, and the method includes: using a private key in a key pair to encrypt a target product to obtain an encrypted product, and sending the encrypted product and a public key in the key pair to a first node, so that the first node generates encrypted registration information according to the encrypted product and the public key, and sends the encrypted registration information to the second node; wherein the target product is determined according to an order request of a user;

[0011] If the encrypted registration information sent by the first node is received, decrypting the encrypted registration information using the private key to obtain the first product registration information, and generating authorization information according to the first product registration information;

[0012] The authorization information is encrypted using the private key to obtain encrypted authorization information, and the encrypted authorization information is sent to the first node, so that the first node determines the authorization information according to the encrypted authorization information and the public key, determines a cluster authorization result of the target product in the cluster according to the authorization information and the second product registration information, and sends the cluster authorization result to the second node;

[0013] If the cluster authorization result sent by the first node is received, the cluster authorization state is updated according to the cluster authorization result.

[0014] In a third aspect, an embodiment of the present invention further provides a product authorization management device, which is configured at a first node, and includes: a first product registration information generation module, which is used to, if an encrypted product and a public key sent by a second node are received, use the public key to decrypt the encrypted product to obtain a target product, and generate first product registration information when performing an installation operation of the target product; wherein the target product is an installation package;

[0015] A second product registration information acquisition module, configured to acquire the second product registration information of the target node if an installation operation of the target product on the target node is detected; wherein the number of target nodes is at least one; the first node and each of the target nodes are in the same cluster, and each of the target nodes is managed through the first node;

[0016] an encrypted registration information determination module, configured to use the public key to encrypt the first product registration information to determine the encrypted registration information, and send the encrypted registration information to the second node, so that the second node uses the private key to decrypt the encrypted registration information to determine the first product registration information, and generates authorization information according to the first product registration information, uses the private key to encrypt the authorization information to obtain encrypted authorization information, and sends the encrypted authorization information to the first node;

[0017] an authorization information determination module, configured to, upon receiving the encrypted authorization information sent by the second node, decrypt the encrypted authorization information using the public key to obtain the authorization information;

[0018] The cluster authorization result determination module is used to determine the cluster authorization result of the target product in the cluster according to the authorization information and the second product registration information, and send the cluster authorization result to the second node so that the second node updates the cluster state according to the cluster authorization result.

[0019] In a fourth aspect, an embodiment of the present invention further provides a product authorization management device, which is configured at a second node, and includes:

[0020] an encrypted product determination module, configured to encrypt a target product using a private key in a key pair to obtain an encrypted product, and send the encrypted product and a public key in the key pair to a first node, so that the first node generates encrypted registration information according to the encrypted product and the public key, and sends the encrypted registration information to the second node; wherein the target product is determined according to an order request of a user;

[0021] a first product registration information determination module, configured to, upon receiving the encrypted registration information sent by the first node, decrypt the encrypted registration information using the private key to obtain the first product registration information, and generate authorization information according to the first product registration information;

[0022] an encrypted authorization information determination module, configured to encrypt the authorization information with the private key to obtain encrypted authorization information, and send the encrypted authorization information to the first node, so that the first node determines the authorization information according to the encrypted authorization information and the public key, determines a cluster authorization result of the target product in the cluster according to the authorization information and the second product registration information, and sends the cluster authorization result to the second node;

[0023] The cluster authorization status updating module is configured to update the cluster authorization status according to the cluster authorization result if the cluster authorization result sent by the first node is received.

[0024] In a fifth aspect, an embodiment of the present invention further provides an electronic device, the device comprising:

[0025] one or more processors;

[0026] a storage device for storing one or more programs,

[0027] When the one or more programs are executed by the one or more processors, the one or more processors implement the product authorization management method executed by the first node as described in any one of the embodiments of the present invention, or the product authorization management method executed by the second node as described in any one of the embodiments of the present invention.

[0028] In a sixth aspect, an embodiment of the present invention further provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements a product authorization management method executed by a first node as described in any one of the embodiments of the present invention, or a product authorization management method executed by a second node as described in any one of the embodiments of the present invention.

[0029] The technical solution provided by the embodiment of the present invention is executed by the first node. If the encrypted product and the public key sent by the second node are received, the encrypted product is decrypted by the public key to obtain the target product, and the first product registration information is generated when the installation operation of the target product is performed; wherein the target product is an installation package; if the installation operation of the target product on the target node is detected, the second product registration information of the target node is obtained; wherein the number of the target nodes is at least one; the first node and each target node are in the same cluster, and each target node is managed by the first node; the first product registration information is encrypted by the public key to determine the encrypted registration information, and the encrypted registration information is sent to the second node, so that the second node uses the private key to decrypt the encrypted registration information to determine the first product registration information, and generates authorization information according to the first product registration information, encrypts the authorization information by the private key to obtain the encrypted authorization information, and sends the encrypted authorization information to the first node; if the encrypted authorization information sent by the second node is received, the encrypted authorization information is decrypted by the public key to obtain the authorization information; the cluster authorization result of the target product in the cluster is determined according to the authorization information and the second product registration information, and the cluster authorization result is sent to the second node, so that the second node updates the cluster state according to the cluster authorization result. By implementing the technical solution provided by the embodiment of the present invention, it is possible to control the product authorization process, trace the users of the product, and efficiently manage the entire life cycle of the product. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] Figure 1 is a flowchart of a product authorization management method performed by a first node according to an embodiment of the present invention;

[0031] Figure 2 is a flowchart of another product authorization management method performed by a first node provided by an embodiment of the present invention;

[0032] Figure 3 is a flow chart of a product authorization management method performed by a second node provided by an embodiment of the present invention;

[0033] Figure 4 is a flow chart of another product authorization management method performed by a second node provided by an embodiment of the present invention;

[0034] Figure 5 It is a structural diagram of a product authorization management device configured at a first node provided by an embodiment of the present invention;

[0035] Figure 6 is a structural diagram of a product authorization management device configured at a second node provided by an embodiment of the present invention;

[0036] Figure 7 It is a schematic diagram of the structure of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0037] The present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments. It is to be understood that the specific embodiments described herein are only used to explain the present invention, rather than to limit the present invention. It should also be noted that, for ease of description, only parts related to the present invention, rather than all structures, are shown in the accompanying drawings.

[0038] Figure 1 This is a flowchart of a product authorization management method performed by a first node according to an embodiment of the present invention. The method can be performed by a product authorization management device. The device can be implemented by software and / or hardware. The device can be configured in an electronic device such as a server. The method is applied to the scenario of authorization management of big data products. Figure 1 As shown, the technical solution provided by the embodiment of the present invention specifically includes:

[0039] S110: If the encrypted product and the public key sent by the second node are received, the encrypted product is decrypted using the public key to obtain the target product, and first product registration information is generated when the installation operation of the target product is performed.

[0040] Wherein, the target product is an installation package.

[0041] Among them, the first node can be the master node of the big data cluster, which is the node with the highest management authority in the cluster and can obtain the information of all master and slave nodes in the cluster. The product can be a big data application, which is stored in a CD in the form of a software installation package for use by each node of the big data cluster, and each CD carries a product batch number. The target product is a product that the user orders from the second node through an order request. The target product can be, for example, a big data management platform, or a software communication platform, and the target product can be set according to actual needs. The second node can be a server of a big data product supplier. The second node can use an encryption algorithm to generate a key pair, keep the private key in the key pair locally, and encrypt the content to be sent to the node in the cluster for the first time with the private key and send it to other nodes together with the public key in the key pair, so that other nodes save the public key. The communication process between the first node and the second node must be encrypted. Among them, the first node uses the public key to encrypt or decrypt, and the second node uses the private key to decrypt or encrypt. The encrypted product can be a product obtained by encrypting the product by the second node using the private key. The first product registration information may be the hardware information of all nodes in the cluster, the first product registration information may be the software information of the software installed on all nodes in the cluster, and the first product registration information may be set according to actual needs. In this solution, if the encrypted product and the public key sent by the second node are received, the encrypted product may be decrypted using the public key to obtain the target product, and the first product registration information is generated when the first node performs the installation operation of the target product.

[0042] S120: If the installation operation of the target product on the target node is detected, the second product registration information of the target node is obtained.

[0043] There is at least one target node; the first node and each of the target nodes are in the same cluster, and each of the target nodes is managed by the first node.

[0044] Specifically, the target node can be a slave node in a big data cluster. The target node can receive the encrypted product and public key sent by the second node, and use the public key to decrypt the encrypted product to obtain the target product. The second product registration information can be the hardware information of the target node, and the second product registration information can also be the software information of the software installed on the target node. The second product registration information can be set according to actual needs. If this solution detects the installation operation of the target product on the target node, the second product registration information of the target node can be obtained. The first node manages at least one target node in its cluster.

[0045] S130: Use the public key to encrypt the first product registration information to determine the encrypted registration information, and send the encrypted registration information to the second node, so that the second node uses the private key to decrypt the encrypted registration information to determine the first product registration information, and generates authorization information based on the first product registration information, uses the private key to encrypt the authorization information to obtain encrypted authorization information, and sends the encrypted authorization information to the first node.

[0046] Among them, this scheme can use the public key sent by the second node to encrypt the first product registration information to determine the encrypted registration information, and send the encrypted registration information to the second node. The second node can use the private key to decrypt the encrypted registration information sent by the first node to determine the first product registration information, and generate authorization information based on the first product registration information, use the private key to encrypt the authorization information to obtain encrypted authorization information, and send the encrypted authorization information to the first node. Among them, the authorization information may include information such as the authorization time of the target product, the authorization period of the target product, the batch code of the target product, and the software and hardware information of each node in the cluster. The authorization information may include information of multiple clusters. A part of the authorization information is encrypted by the private key and sent to the first node, and another part of the authorization information is encrypted by the private key and can be sent to the target node. The authorization information can be information to verify whether the target product is successfully authorized on the big data cluster.

[0047] S140: If the encrypted authorization information sent by the second node is received, the encrypted authorization information is decrypted using the public key to obtain the authorization information.

[0048] If the encrypted authorization information sent by the second node is received in this solution, the encrypted authorization information can be decrypted using the public key to obtain the authorization information, so that the authorization verification of the target product on the cluster can be performed according to the authorization information.

[0049] S150: Determine a cluster authorization result of the target product in the cluster according to the authorization information and the second product registration information, and send the cluster authorization result to the second node, so that the second node updates the cluster state according to the cluster authorization result.

[0050] Exemplarily, the cluster authorization result may be authorization success or authorization failure. This solution can determine the cluster authorization result of the target product in the cluster by comparing the authorization time and authorization period in the authorization information with the actual authorization time of each node of the target product in the cluster in the second product registration information. This solution can also determine the cluster authorization result of the target product in the cluster by comparing the cluster information in the authorization information with the software and hardware information of each node of the second product registration information. This solution can also determine the cluster authorization result of the target product in the cluster by verifying whether the product batch code in the authorization information is consistent with the product registration code in the second product registration information. This solution can also determine the cluster authorization result of the target product in the cluster by verifying whether the number of authorized nodes in the authorization information is consistent with the number of target nodes in the second product registration information. After determining the cluster authorization result, this solution can feed back the cluster authorization result to the second node, so that the second node updates the authorization status of the target product in the cluster according to the cluster authorization result, thereby realizing the management of the entire life cycle of the target product.

[0051] The technical solution provided by the embodiment of the present invention is executed by the first node. If the encrypted product and the public key sent by the second node are received, the encrypted product is decrypted by the public key to obtain the target product, and the first product registration information is generated when the installation operation of the target product is performed; wherein the target product is an installation package; if the installation operation of the target product on the target node is detected, the second product registration information of the target node is obtained; wherein the number of the target nodes is at least one; the first node and each target node are in the same cluster, and each target node is managed by the first node; the first product registration information is encrypted by the public key to determine the encrypted registration information, and the encrypted registration information is sent to the second node, so that the second node uses the private key to decrypt the encrypted registration information to determine the first product registration information, and generates authorization information according to the first product registration information, encrypts the authorization information by the private key to obtain the encrypted authorization information, and sends the encrypted authorization information to the first node; if the encrypted authorization information sent by the second node is received, the encrypted authorization information is decrypted by the public key to obtain the authorization information; the cluster authorization result of the target product in the cluster is determined according to the authorization information and the second product registration information, and the cluster authorization result is sent to the second node, so that the second node updates the cluster state according to the cluster authorization result. By implementing the technical solution provided by the embodiment of the present invention, it is possible to control the product authorization process, trace the users of the product, and efficiently manage the entire life cycle of the product.

[0052] Figure 2 1 is a flowchart of a product authorization management method performed by a first node according to an embodiment of the present invention. This embodiment is optimized based on the above embodiment. Figure 2 As shown, the product authorization management method in the embodiment of the present invention may include:

[0053] S210: If the encrypted product and the public key sent by the second node are received, the encrypted product is decrypted using the public key to obtain the target product, and first product registration information is generated when the installation operation of the target product is performed.

[0054] S220: If the installation operation of the target product on the target node is detected, the second product registration information of the target node is obtained.

[0055] In a feasible implementation, optionally, the process of determining the second product registration information includes: determining at least one target node on which the target product is installed; determining the hardware information of each of the target nodes, and using the hardware information of each of the target nodes as the second product registration information.

[0056] Specifically, this solution can determine at least one target node where the target product is installed. And this solution can obtain the software information and hardware information of the target node where the target product is located. The hardware information can be the motherboard information, CPU information and memory information of the target node. The software information can be the software information running on the target node corresponding to the motherboard identification number, such as the software name and software version number.

[0057] Therefore, by determining at least one target node where the target product is installed; determining the hardware information of each target node, and using the hardware information of each target node as the second product registration information, it is possible to obtain the node information where the target product is installed, and to trace users and manage the life cycle of the target product.

[0058] S230: Use the public key to encrypt the first product registration information to determine the encrypted registration information, and send the encrypted registration information to the second node, so that the second node uses the private key to decrypt the encrypted registration information to determine the first product registration information, and generates authorization information based on the first product registration information, uses the private key to encrypt the authorization information to obtain encrypted authorization information, and sends the encrypted authorization information to the first node.

[0059] S240: If the encrypted authorization information sent by the second node is received, the encrypted authorization information is decrypted using the public key to obtain the authorization information.

[0060] S250: Determine a cluster authorization result of the target product in the cluster according to the authorization information and the second product registration information, and send the cluster authorization result to the second node, so that the second node updates the cluster state according to the cluster authorization result.

[0061] The introduction of each step is detailed in the above embodiment.

[0062] In another feasible implementation, optionally, determining a cluster authorization result of the target product in the cluster based on the authorization information and the second product registration information includes: obtaining a product batch code in the target product; determining a product registration code based on the second product registration information; if it is determined that the product batch code is the same as the product registration code, and the authorization information includes the product batch code, determining that the target product is authorized successfully.

[0063] Among them, the target product is bound to the product batch code of the target product, so this solution can determine the product batch code of the target product based on the target product. The second product registration information includes the product registration code. If this solution determines that the product batch code is the same as the product registration code, and the product registration code in the authorization information is the same as the product batch code, then it is determined that the authorization of the target product is successful.

[0064] Therefore, by obtaining the product batch code of the target product and determining the product registration code according to the second product registration information, if the product batch code is determined to be the same as the product registration code and the authorization information includes the product batch code, then the target product is determined to be authorized successfully. The authorization result of the target product on the cluster can be determined according to the product batch code and the product registration code, the user of the product can be traced, and the product life cycle can be managed.

[0065] In another feasible implementation, optionally, the cluster authorization result of the target product in the cluster is determined based on the authorization information and the second product registration information, including: obtaining a first encrypted authorization time from the authorization information, and obtaining a second encrypted authorization time from the second product registration information; using the public key to decrypt the first encrypted authorization time and the second encrypted authorization time respectively to determine the first authorization time and the second authorization time; if the second authorization time and the first authorization time meet preset constraints, it is determined that the authorization of the target product is successful.

[0066] Specifically, the first encrypted authorization time may be the time information after the first authorization time is encrypted. The first authorization time may be the authorization time and authorization period specified when the target product leaves the factory. For example, if the target product is required to be activated within 5 years from the date of production and can be used for 6 years, it means that the activation time of the target product must be within 5 years, and the interval from the activation date to the current system time shall not exceed 6 years. The second encrypted authorization time is the time information after the second authorization time is encrypted. The second authorization time may be the actual activation time of the target product and the time the target product has been used after being activated. In this scheme, the first encrypted authorization time and the second encrypted authorization time may be decrypted by the public key to determine the first authorization time and the second authorization time. The preset constraint condition may be that the activation time in the first authorization time is later than the actual activation time in the second authorization time, or the preset constraint condition may be that the product use time in the first authorization time is greater than the time the target product has been used after being activated in the second authorization time. The preset constraint condition may be set according to actual needs. If the scheme determines that the second authorization time and the first authorization time meet the preset constraint condition, the authorization of the target product is determined to be successful.

[0067] Therefore, by obtaining the first encrypted authorization time from the authorization information and the second encrypted authorization time from the second product registration information; using the public key to decrypt the first encrypted authorization time and the second encrypted authorization time respectively, the first authorization time and the second authorization time are determined; if the second authorization time and the first authorization time meet the preset constraint conditions, it is determined that the authorization of the target product is successful. It is possible to determine the authorization result of the target product on the cluster based on the theoretical authorization time and the actual authorization time of the product, to trace the users of the product, and to manage the product life cycle.

[0068] In this embodiment, optionally, the authorization result of the target product in the cluster is determined based on the authorization information and the second product registration information, including: obtaining the target cluster information and the hardware information of the target nodes associated with the target cluster from the authorization information; if the hardware information of each target node in the target cluster is respectively consistent with the hardware information of each target node in the second product registration information, it is determined that the authorization of the target product is successful.

[0069] The target cluster may be a cluster where the target product is installed. The authorization information includes hardware information of each target node in the target cluster, for example, the hardware information of the target node may be motherboard information, CPU information, and memory information of the target node. In addition, the second product registration information includes hardware information of the target node where the target product is installed. If the hardware information of each target node in the target cluster is consistent with the hardware information of each target node in the second product registration information, it indicates that the target node is a node in the target cluster, and the authorization of the target product is determined to be successful.

[0070] Thus, by obtaining the target cluster information and the hardware information of the target nodes associated with the target cluster from the authorization information; if the hardware information of each target node in the target cluster is consistent with the hardware information of each target node in the second product registration information, it is determined that the authorization of the target product is successful. It is possible to determine the authorization result of the target product on the cluster based on the hardware information of the cluster, to trace the users of the product, and to manage the life cycle of the product.

[0071] S260: Update the status information of each target node according to the cluster authorization result.

[0072] The status information may be the installation status of the target product on the target node. If the cluster authorization result is authorization success, it means that all target nodes in the cluster have successfully installed the target product. This solution may update the status information of the target product on the target node accordingly, such as installation success. Conversely, if the cluster authorization result is authorization failure, it means that all target nodes in the cluster have not successfully installed the target product. This solution may update the status information of the target product on the target node accordingly, such as installation failure.

[0073] The technical solution provided by the embodiment of the present invention, when executed by the first node, if the encrypted product and the public key sent by the second node are received, the encrypted product is decrypted by the public key to obtain the target product, and the first product registration information is generated when the installation operation of the target product is performed; if the installation operation of the target product on the target node is detected, the second product registration information of the target node is obtained; the first product registration information is encrypted by the public key to determine the encrypted registration information, and the encrypted registration information is sent to the second node, so that the second node uses the private key to decrypt the encrypted registration information to determine the first product registration information, and generates authorization information according to the first product registration information, encrypts the authorization information by the private key to obtain the encrypted authorization information, and sends the encrypted authorization information to the first node; if the encrypted authorization information sent by the second node is received, the encrypted authorization information is decrypted by the public key to obtain the authorization information; the cluster authorization result of the target product in the cluster is determined according to the authorization information and the second product registration information, and the cluster authorization result is sent to the second node, so that the second node updates the cluster status according to the cluster authorization result; according to the cluster authorization result, the status information of each target node is updated. By implementing the technical solution provided by the embodiment of the present invention, it is possible to control the product authorization process, trace the users of the product, and efficiently manage the entire life cycle of the product.

[0074] Figure 3This is a flowchart of a product authorization management method performed by a second node according to an embodiment of the present invention. The method can be performed by a product authorization management device. The device can be implemented by software and / or hardware. The device can be configured in an electronic device such as a server. The method is applied to the scenario of authorization management of big data products. Figure 3 As shown, the technical solution provided by the embodiment of the present invention specifically includes:

[0075] S310: Use the private key in the key pair to encrypt the target product to obtain an encrypted product, and send the encrypted product and the public key in the key pair to the first node, so that the first node generates encrypted registration information based on the encrypted product and the public key, and sends it to the second node.

[0076] The target product is determined according to the user's order request.

[0077] Specifically, the order request may include product information that the user needs to use, such as product name, product type, etc. This solution can determine the target product based on the user's order request. The product can be a big data application, which is stored in a CD in the form of a software installation package for use by each node of the big data cluster. Each CD carries a product batch number. The target product can be, for example, a big data management platform, or a software communication platform. The target product can be set according to actual needs. The second node can be a server of a big data product supplier. The second node can use an encryption algorithm to generate a key pair, keep the private key in the key pair locally, and encrypt the content to be sent to the node in the cluster for the first time with the private key and send it to the recipient together with the public key in the key pair, so that the recipient saves the public key. The first node can generate encrypted registration information based on the encrypted product and the public key, and send it to the second node. The specific implementation process is detailed in the above embodiment.

[0078] S320: If the encrypted registration information sent by the first node is received, the encrypted registration information is decrypted using the private key to obtain the first product registration information, and authorization information is generated according to the first product registration information.

[0079] Specifically, the second node may use the private key to decrypt the encrypted registration information sent by the first node to determine the first product registration information, and generate authorization information based on the first product registration information. The authorization information may include information such as the authorization time of the target product, the authorization period of the target product, the batch code of the target product, and the software and hardware information of each node in the cluster. The authorization information may also include information such as signature binary information, authorization file ciphertext, and public key file. The authorization information may include information of multiple clusters.

[0080] S330: Use the private key to encrypt the authorization information to obtain encrypted authorization information, and send the encrypted authorization information to the first node, so that the first node determines the authorization information according to the encrypted authorization information and the public key, determines the cluster authorization result of the target product in the cluster according to the authorization information and the second product registration information, and sends the cluster authorization result to the second node.

[0081] Among them, this scheme can use a private key to encrypt the authorization information to obtain encrypted authorization information, and send the encrypted authorization information to the first node. The first node receives the encrypted authorization information sent by the second node, and can use the public key to decrypt the encrypted authorization information to obtain authorization information, so that the authorization verification of the target product on the cluster can be performed based on the authorization information and the second product registration information, and the cluster authorization result of the target product in the cluster can be determined, and the cluster authorization result can be sent to the second node. Among them, the specific determination process of the cluster authorization result is described in detail in the above embodiment.

[0082] S340: If the cluster authorization result sent by the first node is received, update the cluster authorization state according to the cluster authorization result.

[0083] If the solution receives the cluster authorization result sent by the first node, the authorization status of the target product in the cluster can be updated according to the cluster authorization result. For example, if the cluster authorization result is authorization success, the authorization status of the target product in the cluster is updated to authorization success. If the cluster authorization result is authorization failure, the authorization status of the target product in the cluster is updated to authorization failure. This achieves the management of the entire life cycle of the target product.

[0084] The technical solution provided by the embodiment of the present invention uses the private key in the key pair to encrypt the target product to obtain the encrypted product, and sends the encrypted product and the public key in the key pair to the first node, so that the first node generates encrypted registration information according to the encrypted product and the public key, and sends it to the second node; wherein the target product is determined according to the user's order request; if the encrypted registration information sent by the first node is received, the encrypted registration information is decrypted by the private key to obtain the first product registration information, and the authorization information is generated according to the first product registration information; the authorization information is encrypted by the private key to obtain the encrypted authorization information, and the encrypted authorization information is sent to the first node, so that the first node determines the authorization information according to the encrypted authorization information and the public key, determines the cluster authorization result of the target product in the cluster according to the authorization information and the second product registration information, and sends the cluster authorization result to the second node; if the cluster authorization result sent by the first node is received, the cluster authorization status is updated according to the cluster authorization result. By executing the technical solution provided by the embodiment of the present invention, it is possible to control the product authorization process, trace the users who use the product, and efficiently manage the entire life cycle of the product.

[0085] Figure 4 1 is a flowchart of a product authorization management method performed by a second node according to an embodiment of the present invention. This embodiment is optimized based on the above embodiment. Figure 4 As shown, the product authorization management method in the embodiment of the present invention may include:

[0086] S410: Generate a key pair based on an asymmetric encryption algorithm.

[0087] The key pair includes a private key and a public key.

[0088] Exemplarily, this solution can generate a key pair corresponding to the product batch code by using the Java default asymmetric encryption algorithm, and the key length is 2048. The key pair includes a public key and a private key, and the private key is left in the second node. The content to be sent to the node in the cluster for the first time is encrypted by the private key and then sent to other nodes together with the public key in the key pair, so that it can save the public key. This can protect the privacy information involved in the communication process between nodes and improve the security of information transmission.

[0089] S420: Use the private key in the key pair to encrypt the target product to obtain an encrypted product, and send the encrypted product and the public key in the key pair to the first node, so that the first node generates encrypted registration information based on the encrypted product and the public key, and sends it to the second node.

[0090] In this embodiment, optionally, the target product is encrypted using a private key in a key pair to obtain an encrypted product, including: encrypting the target product using the private key, and encoding the encrypted target product using Base64 to obtain the encrypted product.

[0091] Among them, since the information encoding obtained by encrypting the target product with a private key is relatively complex and too long, the encrypted information is simply encoded by BASE64 before transmission to obtain an encrypted product and then sent to the first node. Correspondingly, after receiving the encrypted product, the first node first decodes the encrypted product with BASE64, and then uses the public key to decrypt the decoded information to obtain the target product.

[0092] Thus, by using a private key to encrypt the target product and using Base64 to encode the encrypted target product to obtain an encrypted product, data transmission between nodes can be achieved to avoid errors in the transmission content.

[0093] S430: If the encrypted registration information sent by the first node is received, the encrypted registration information is decrypted using the private key to obtain the first product registration information, and authorization information is generated according to the first product registration information.

[0094] S440: Use the private key to encrypt the authorization information to obtain encrypted authorization information, and send the encrypted authorization information to the first node, so that the first node determines the authorization information according to the encrypted authorization information and the public key, determines the cluster authorization result of the target product in the cluster according to the authorization information and the second product registration information, and sends the cluster authorization result to the second node.

[0095] S450: If the cluster authorization result sent by the first node is received, update the cluster authorization state according to the cluster authorization result.

[0096] The specific introduction of each step is detailed in the above embodiment.

[0097] The technical solution provided by the embodiment of the present invention generates a key pair based on an asymmetric encryption algorithm; uses the private key in the key pair to encrypt the target product to obtain an encrypted product, and sends the encrypted product and the public key in the key pair to the first node, so that the first node generates encrypted registration information according to the encrypted product and the public key, and sends it to the second node; if the encrypted registration information sent by the first node is received, the encrypted registration information is decrypted by the private key to obtain the first product registration information, and the authorization information is generated according to the first product registration information; the authorization information is encrypted by the private key to obtain the encrypted authorization information, and the encrypted authorization information is sent to the first node, so that the first node determines the authorization information according to the encrypted authorization information and the public key, determines the cluster authorization result of the target product in the cluster according to the authorization information and the second product registration information, and sends the cluster authorization result to the second node; if the cluster authorization result sent by the first node is received, the cluster authorization status is updated according to the cluster authorization result. By executing the technical solution provided by the embodiment of the present invention, it is possible to control the product authorization process, trace the users who use the product, and efficiently manage the entire life cycle of the product.

[0098] Figure 5 FIG. 1 is a schematic diagram of the structure of a product authorization management device configured at a first node according to an embodiment of the present invention. The device may be configured in an electronic device such as a server. Figure 5 As shown, the device comprises:

[0099] The first product registration information generating module 510 is configured to, upon receiving the encrypted product and the public key sent by the second node, decrypt the encrypted product using the public key to obtain the target product, and generate the first product registration information when performing the installation operation of the target product; wherein the target product is an installation package;

[0100] The second product registration information acquisition module 520 is used to acquire the second product registration information of the target node if the installation operation of the target product on the target node is detected; wherein the number of target nodes is at least one; the first node and each of the target nodes are in the same cluster, and each of the target nodes is managed by the first node;

[0101] The encrypted registration information determining module 530 is configured to encrypt the first product registration information with the public key to determine the encrypted registration information, and send the encrypted registration information to the second node, so that the second node uses the private key to decrypt the encrypted registration information to determine the first product registration information, and generates authorization information according to the first product registration information, encrypts the authorization information with the private key to obtain encrypted authorization information, and sends the encrypted authorization information to the first node;

[0102] The authorization information determination module 540 is configured to, if the encrypted authorization information sent by the second node is received, decrypt the encrypted authorization information using the public key to obtain the authorization information;

[0103] The cluster authorization result determination module 550 is used to determine the cluster authorization result of the target product in the cluster according to the authorization information and the second product registration information, and send the cluster authorization result to the second node so that the second node updates the cluster status according to the cluster authorization result.

[0104] Optionally, the process of determining the second product registration information includes: determining at least one target node on which the target product is installed; determining hardware information of each of the target nodes, and using the hardware information of each of the target nodes as the second product registration information.

[0105] Optionally, the cluster authorization result determination module 550 is specifically used to obtain the product batch code in the target product; determine the product registration code according to the second product registration information; if it is determined that the product batch code is the same as the product registration code, and the authorization information includes the product batch code, then it is determined that the target product is authorized successfully.

[0106] Optionally, the cluster authorization result determination module 550 is specifically used to obtain a first encrypted authorization time from the authorization information, and to obtain a second encrypted authorization time from the second product registration information; to use the public key to decrypt the first encrypted authorization time and the second encrypted authorization time respectively, to determine the first authorization time and the second authorization time; if the second authorization time and the first authorization time meet the preset constraints, it is determined that the target product is authorized successfully.

[0107] Optionally, the device further includes a node status information updating module, configured to update the status information of each target node according to the cluster authorization result.

[0108] Optionally, the cluster authorization result determination module 550 is specifically used to obtain the target cluster information and the hardware information of the target nodes associated with the target cluster from the authorization information; if the hardware information of each target node in the target cluster is consistent with the hardware information of each target node in the second product registration information, it is determined that the target product is authorized successfully.

[0109] The device provided in the above embodiment can execute the product authorization management method provided by any embodiment of the present invention and executed by the first node, and has the corresponding functional modules and beneficial effects of the execution method.

[0110] Figure 6FIG. 1 is a schematic diagram of the structure of a product authorization management device configured at a second node according to an embodiment of the present invention. The device may be configured in an electronic device such as a server. Figure 6 As shown, the device comprises:

[0111] The encrypted product determination module 610 is used to encrypt the target product using the private key in the key pair to obtain the encrypted product, and send the encrypted product and the public key in the key pair to the first node, so that the first node generates encrypted registration information according to the encrypted product and the public key, and sends it to the second node; wherein the target product is determined according to the user's order request;

[0112] A first product registration information determination module 620 is configured to, upon receiving the encrypted registration information sent by the first node, decrypt the encrypted registration information using the private key to obtain the first product registration information, and generate authorization information according to the first product registration information;

[0113] an encrypted authorization information determination module 630, configured to encrypt the authorization information with the private key to obtain encrypted authorization information, and send the encrypted authorization information to the first node, so that the first node determines the authorization information according to the encrypted authorization information and the public key, determines the cluster authorization result of the target product in the cluster according to the authorization information and the second product registration information, and sends the cluster authorization result to the second node;

[0114] The cluster authorization status updating module 640 is configured to update the cluster authorization status according to the cluster authorization result if a cluster authorization result sent by the first node is received.

[0115] Optionally, the encrypted product determination module 610 is specifically configured to encrypt the target product using the private key, and encode the encrypted target product using Base64 to obtain the encrypted product.

[0116] Optionally, the device also includes a key pair generation module, which is used to generate a key pair based on an asymmetric encryption algorithm before using a private key in the key pair to encrypt the target product to obtain an encrypted product; wherein the key pair includes a private key and a public key.

[0117] The device provided in the above embodiment can execute the product authorization management method provided by any embodiment of the present invention and executed by the second node, and has the corresponding functional modules and beneficial effects of the execution method.

[0118] Figure 7 is a schematic diagram of the structure of an electronic device provided by an embodiment of the present invention, such as Figure 7 As shown, the device includes:

[0119] one or more processors 710, Figure 7 A processor 710 is taken as an example;

[0120] Memory 720;

[0121] The device may further include: an input device 730 and an output device 740 .

[0122] The processor 710, memory 720, input device 730 and output device 740 in the device may be connected via a bus or other means. Figure 7 The example of connecting through bus is taken in the following.

[0123] The memory 720, as a non-transitory computer-readable storage medium, can be used to store software programs, computer executable programs and modules, such as program instructions / modules corresponding to a product authorization management method in an embodiment of the present invention. The processor 710 executes various functional applications and data processing of the computer device by running the software programs, instructions and modules stored in the memory 720, that is, a product authorization management method executed by the first node in the above method embodiment is implemented, namely:

[0124] If the encrypted product and the public key sent by the second node are received, the encrypted product is decrypted using the public key to obtain the target product, and first product registration information is generated when the installation operation of the target product is performed; wherein the target product is an installation package;

[0125] If the installation operation of the target product on the target node is detected, the second product registration information of the target node is obtained; wherein the number of the target nodes is at least one; the first node and each of the target nodes are in the same cluster, and each of the target nodes is managed through the first node;

[0126] Using the public key to encrypt the first product registration information to determine the encrypted registration information, and sending the encrypted registration information to the second node, so that the second node uses the private key to decrypt the encrypted registration information to determine the first product registration information, and generates authorization information according to the first product registration information, uses the private key to encrypt the authorization information to obtain encrypted authorization information, and sends the encrypted authorization information to the first node;

[0127] If the encrypted authorization information sent by the second node is received, decrypting the encrypted authorization information using the public key to obtain the authorization information;

[0128] A cluster authorization result of the target product in the cluster is determined according to the authorization information and the second product registration information, and the cluster authorization result is sent to the second node, so that the second node updates the cluster state according to the cluster authorization result.

[0129] Or implement a product authorization management method performed by the second node as provided in an embodiment of the present invention, that is:

[0130] The target product is encrypted using the private key in the key pair to obtain an encrypted product, and the encrypted product and the public key in the key pair are sent to the first node, so that the first node generates encrypted registration information according to the encrypted product and the public key, and sends the encrypted registration information to the second node; wherein the target product is determined according to the user's order request;

[0131] If the encrypted registration information sent by the first node is received, decrypting the encrypted registration information using the private key to obtain the first product registration information, and generating authorization information according to the first product registration information;

[0132] The authorization information is encrypted using the private key to obtain encrypted authorization information, and the encrypted authorization information is sent to the first node, so that the first node determines the authorization information according to the encrypted authorization information and the public key, determines a cluster authorization result of the target product in the cluster according to the authorization information and the second product registration information, and sends the cluster authorization result to the second node;

[0133] If the cluster authorization result sent by the first node is received, the cluster authorization state is updated according to the cluster authorization result.

[0134] The memory 720 may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function; the data storage area may store data created according to the use of the computer device, etc. In addition, the memory 720 may include a high-speed random access memory, and may also include a non-transitory memory, such as at least one disk storage device, a flash memory device, or other non-transitory solid-state storage device. In some embodiments, the memory 720 may optionally include a memory remotely arranged relative to the processor 710, and these remote memories may be connected to the terminal device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0135] The input device 730 may be used to receive input digital or character information and generate key signal input related to user settings and function control of the computer device. The output device 740 may include a display device such as a display screen.

[0136] An embodiment of the present invention provides a computer-readable storage medium having a computer program stored thereon. When the program is executed by a processor, a product authorization management method performed by a first node as provided in an embodiment of the present invention is implemented, namely:

[0137] If the encrypted product and the public key sent by the second node are received, the encrypted product is decrypted using the public key to obtain the target product, and first product registration information is generated when the installation operation of the target product is performed; wherein the target product is an installation package;

[0138] If the installation operation of the target product on the target node is detected, the second product registration information of the target node is obtained; wherein the number of the target nodes is at least one; the first node and each of the target nodes are in the same cluster, and each of the target nodes is managed through the first node;

[0139] Using the public key to encrypt the first product registration information to determine the encrypted registration information, and sending the encrypted registration information to the second node, so that the second node uses the private key to decrypt the encrypted registration information to determine the first product registration information, and generates authorization information according to the first product registration information, uses the private key to encrypt the authorization information to obtain encrypted authorization information, and sends the encrypted authorization information to the first node;

[0140] If the encrypted authorization information sent by the second node is received, decrypting the encrypted authorization information using the public key to obtain the authorization information;

[0141] A cluster authorization result of the target product in the cluster is determined according to the authorization information and the second product registration information, and the cluster authorization result is sent to the second node, so that the second node updates the cluster state according to the cluster authorization result.

[0142] Alternatively, a product authorization management method performed by a second node as provided in an embodiment of the present invention is implemented, that is:

[0143] The target product is encrypted using the private key in the key pair to obtain an encrypted product, and the encrypted product and the public key in the key pair are sent to the first node, so that the first node generates encrypted registration information according to the encrypted product and the public key, and sends the encrypted registration information to the second node; wherein the target product is determined according to the user's order request;

[0144] If the encrypted registration information sent by the first node is received, decrypting the encrypted registration information using the private key to obtain the first product registration information, and generating authorization information according to the first product registration information;

[0145] The authorization information is encrypted using the private key to obtain encrypted authorization information, and the encrypted authorization information is sent to the first node, so that the first node determines the authorization information according to the encrypted authorization information and the public key, determines a cluster authorization result of the target product in the cluster according to the authorization information and the second product registration information, and sends the cluster authorization result to the second node;

[0146] If the cluster authorization result sent by the first node is received, the cluster authorization state is updated according to the cluster authorization result.

[0147] Any combination of one or more computer-readable media may be used. A computer-readable medium may be a computer-readable signal medium or a computer-readable storage medium. A computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination thereof. More specific examples (a non-exhaustive list) of computer-readable storage media include: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In this document, a computer-readable storage medium may be any tangible medium containing or storing a program that may be used by or in conjunction with an instruction execution system, device, or device.

[0148] Computer-readable signal media may include a data signal propagated in baseband or as part of a carrier wave, which carries a computer-readable program code. Such propagated data signals may take a variety of forms, including, but not limited to, electromagnetic signals, optical signals, or any suitable combination of the above. Computer-readable signal media may also be any computer-readable medium other than a computer-readable storage medium, which may send, propagate, or transmit a program for use by or in conjunction with an instruction execution system, apparatus, or device.

[0149] Program code embodied on a computer readable medium may be transmitted using any appropriate medium, including but not limited to wireless, wireline, optical fiber cable, RF, etc., or any suitable combination of the foregoing.

[0150] Computer program code for performing the operations of the present invention may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0151] Note that the above are only preferred embodiments of the present invention and the technical principles used. Those skilled in the art will understand that the present invention is not limited to the specific embodiments described herein, and that various obvious changes, readjustments and substitutions can be made by those skilled in the art without departing from the scope of protection of the present invention. Therefore, although the present invention has been described in more detail through the above embodiments, the present invention is not limited to the above embodiments, and may include more other equivalent embodiments without departing from the concept of the present invention, and the scope of the present invention is determined by the scope of the appended claims.

Claims

1. A product authorization management method, executed by a first node, characterized in that: include: If the encrypted product and the public key sent by the second node are received, the encrypted product is decrypted using the public key to obtain the target product, and first product registration information is generated when the installation operation of the target product is performed; wherein the target product is an installation package; If the installation operation of the target product on the target node is detected, the second product registration information of the target node is obtained; wherein the number of the target nodes is at least one; the first node and each of the target nodes are in the same cluster, and each of the target nodes is managed through the first node; Using the public key to encrypt the first product registration information to determine the encrypted registration information, and sending the encrypted registration information to the second node, so that the second node uses the private key to decrypt the encrypted registration information to determine the first product registration information, and generates authorization information according to the first product registration information, uses the private key to encrypt the authorization information to obtain encrypted authorization information, and sends the encrypted authorization information to the first node; If the encrypted authorization information sent by the second node is received, decrypting the encrypted authorization information using the public key to obtain the authorization information; A cluster authorization result of the target product in the cluster is determined according to the authorization information and the second product registration information, and the cluster authorization result is sent to the second node, so that the second node updates the cluster state according to the cluster authorization result.

2. The method according to claim 1, characterized in that The process of determining the second product registration information includes: Determine at least one target node having a target product installed thereon; The hardware information of each of the target nodes is determined, and the hardware information of each of the target nodes is used as the second product registration information.

3. The method according to claim 1, characterized in that Determining a cluster authorization result of the target product in the cluster according to the authorization information and the second product registration information includes: Get the product batch code of the target product; determining a product registration code according to the second product registration information; If it is determined that the product batch code is the same as the product registration code, and the authorization information includes the product batch code, it is determined that the target product is authorized successfully.

4. The method according to claim 1, characterized in that: Determining a cluster authorization result of the target product in the cluster according to the authorization information and the second product registration information includes: Obtaining a first encrypted authorization time from the authorization information, and obtaining a second encrypted authorization time from the second product registration information; Decrypt the first encrypted authorization time and the second encrypted authorization time respectively using the public key to determine the first authorization time and the second authorization time; If the second authorization time and the first authorization time satisfy the preset constraint condition, it is determined that the target product is authorized successfully.

5. The method according to claim 1, characterized in that: The method further comprises: According to the cluster authorization result, the status information of each target node is updated.

6. The method according to claim 2, characterized in that Determining an authorization result of the target product in the cluster according to the authorization information and the second product registration information includes: Acquire target cluster information and hardware information of a target node associated with the target cluster from the authorization information; If the hardware information of each of the target nodes in the target cluster is respectively consistent with the hardware information of each of the target nodes in the second product registration information, it is determined that the target product is authorized successfully.

7. A product authorization management method, executed by a second node, characterized in that: include: The target product is encrypted using the private key in the key pair to obtain an encrypted product, and the encrypted product and the public key in the key pair are sent to the first node, so that the first node generates encrypted registration information according to the encrypted product and the public key, and sends the encrypted registration information to the second node; wherein the target product is determined according to the user's order request; If the encrypted registration information sent by the first node is received, decrypting the encrypted registration information using the private key to obtain the first product registration information, and generating authorization information according to the first product registration information; The authorization information is encrypted using the private key to obtain encrypted authorization information, and the encrypted authorization information is sent to the first node, so that the first node determines the authorization information according to the encrypted authorization information and the public key, determines a cluster authorization result of the target product in the cluster according to the authorization information and the second product registration information, and sends the cluster authorization result to the second node; If the cluster authorization result sent by the first node is received, the cluster authorization state is updated according to the cluster authorization result.

8. The method according to claim 7, characterized in that The target product is encrypted using the private key in the key pair to obtain an encrypted product, including: The target product is encrypted using the private key, and the encrypted target product is encoded using Base64 to obtain the encrypted product.

9. The method according to claim 7, characterized in that: Before the target product is encrypted using the private key in the key pair to obtain the encrypted product, the following steps are also included: A key pair is generated based on an asymmetric encryption algorithm; wherein the key pair includes a private key and a public key.

10. A product authorization management device, configured at a first node, characterized in that: include: A first product registration information generating module, configured to, upon receiving the encrypted product and the public key sent by the second node, decrypt the encrypted product using the public key to obtain the target product, and generate first product registration information when performing the installation operation of the target product; wherein the target product is an installation package; A second product registration information acquisition module, configured to acquire the second product registration information of the target node if an installation operation of the target product on the target node is detected; wherein the number of target nodes is at least one; the first node and each of the target nodes are in the same cluster, and each of the target nodes is managed through the first node; an encrypted registration information determination module, configured to use the public key to encrypt the first product registration information to determine the encrypted registration information, and send the encrypted registration information to the second node, so that the second node uses the private key to decrypt the encrypted registration information to determine the first product registration information, and generates authorization information according to the first product registration information, uses the private key to encrypt the authorization information to obtain encrypted authorization information, and sends the encrypted authorization information to the first node; an authorization information determination module, configured to, upon receiving the encrypted authorization information sent by the second node, decrypt the encrypted authorization information using the public key to obtain the authorization information; The cluster authorization result determination module is used to determine the cluster authorization result of the target product in the cluster according to the authorization information and the second product registration information, and send the cluster authorization result to the second node so that the second node updates the cluster state according to the cluster authorization result.

11. A product authorization management device, configured at a second node, characterized in that: include: an encrypted product determination module, configured to encrypt a target product using a private key in a key pair to obtain an encrypted product, and send the encrypted product and a public key in the key pair to a first node, so that the first node generates encrypted registration information according to the encrypted product and the public key, and sends the encrypted registration information to the second node; wherein the target product is determined according to an order request of a user; a first product registration information determination module, configured to, upon receiving the encrypted registration information sent by the first node, decrypt the encrypted registration information using the private key to obtain the first product registration information, and generate authorization information according to the first product registration information; an encrypted authorization information determination module, configured to encrypt the authorization information with the private key to obtain encrypted authorization information, and send the encrypted authorization information to the first node, so that the first node determines the authorization information according to the encrypted authorization information and the public key, determines the cluster authorization result of the target product in the cluster according to the authorization information and the second product registration information, and sends the cluster authorization result to the second node; The cluster authorization status updating module is configured to update the cluster authorization status according to the cluster authorization result if the cluster authorization result sent by the first node is received.

12. An electronic device, characterized in that: include: one or more processors; a storage device for storing one or more programs, When the one or more programs are executed by the one or more processors, the one or more processors implement a product authorization management method executed by the first node as described in any one of claims 1-6, or a product authorization management method executed by the second node as described in any one of claims 7-9.

13. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, it implements a product authorization management method executed by a first node as described in any one of claims 1-6, or a product authorization management method executed by a second node as described in any one of claims 7-9.

Images