A shield machine authorization management method and system, and a storage medium

Abstract

In the shield machine authorization management method and system and storage medium, the machine code corresponding to the shield machine industrial personal computer is generated by a machine code generation module according to the CPU hardware serial number of the shield machine industrial personal computer, then the password generated according to the machine code is obtained through a decryption module, and the password is decrypted to obtain a start time and a maximum available number of days, a timing and counting module counts down according to the start time and the maximum available number of days, when the countdown is less than a time threshold, a prompt is given by a prompt and warning module, and when the countdown is zero, a screen locking module locks the screen of the industrial personal computer. Therefore, the application reduces the labor cost and maintenance cost in the management of the shield machine. At the same time, the application generates a machine code corresponding to the industrial personal computer one by one, so that the same authorization cannot be used, and the authorization effect is improved, so that the property owner of the shield machine can effectively, conveniently and safely manage the authorization of the shield machine.

Description

Technical Field

[0001] This application relates to the field of tunnel boring machine technology, and in particular to a tunnel boring machine authorization management method, system and storage medium. Background Technology

[0002] With the development of infrastructure and the vigorous promotion of underground space development, the demand for tunnel boring machines (TBMs) has been increasing year by year. Due to the high price of TBMs and the mismatch between the construction period and the lifespan of the TBMs, the TBM leasing business model has become widely used. However, how to prevent lessees from continuing to use the TBMs after the lease expires is a problem that urgently needs to be solved.

[0003] In related technologies, the following two methods can solve the above problems:

[0004] Method 1: Manually intervene and control the core hardware. For example, dismantle the core control unit or data storage device of the tunnel boring machine, preventing the machine from starting and operating normally.

[0005] Method 2: Software intervention. For example, adding authorization time control to the PLC control unit of the tunnel boring machine's industrial control computer, locking it upon expiration.

[0006] Regarding Method 1, it requires sending personnel to the site of the tunnel boring machine, increasing additional labor costs. Regarding Method 2, the PLC control software needs to be updated each time the lease expires, requiring frequent modifications and repackaging by the PLC control software developers. Furthermore, the software is supplied by numerous vendors, potentially leading to cross-licensing and poor authorization effectiveness, while also increasing maintenance costs. Summary of the Invention

[0007] This application provides a method, system, and storage medium for the authorization management of tunnel boring machines, in order to at least solve the technical problems of high labor costs, high maintenance costs, and poor authorization effects in related technologies.

[0008] The first aspect of this application proposes a tunnel boring machine authorization management system, including:

[0009] The machine code generation module is used to generate the machine code corresponding to the shield tunneling machine industrial control computer based on the CPU hardware serial number of the shield tunneling machine industrial control computer;

[0010] The decryption module is used to obtain the password generated based on the machine code, and to decrypt the password to obtain the start time and the maximum number of days that can be used.

[0011] A timing and counting module is used to perform a countdown based on the start time and the maximum number of available days;

[0012] The reminder and warning module is used to provide a prompt when the countdown is less than a time threshold;

[0013] A screen locking module is used to lock the screen of the industrial control computer when the countdown reaches zero. A second aspect of this application proposes a tunnel boring machine authorization management method, including:

[0014] The machine code corresponding to the shield machine industrial control computer is generated based on the CPU hardware serial number of the shield machine industrial control computer;

[0015] Obtain the password generated based on the machine code, and decrypt the password to obtain the start time and the maximum number of days available;

[0016] A countdown is performed based on the stated start time and the maximum number of available days;

[0017] A prompt will be given when the countdown is less than the time threshold;

[0018] When the countdown reaches zero, the screen of the industrial control computer is locked.

[0019] The technical solutions provided by the embodiments of this application bring at least the following beneficial effects:

[0020] The shield tunneling machine (TBM) authorization management method, system, and storage medium proposed in this application utilize a machine code generation module to generate a machine code corresponding to the TBM's industrial control computer based on the CPU hardware serial number. Then, a decryption module obtains the password generated from the machine code, decrypts the password to obtain the start time and maximum available days, and a timing and counting module counts down based on the start time and maximum available days. When the countdown is less than a time threshold, a warning module issues a notification; when the countdown reaches zero, a screen locking module locks the industrial control computer's screen. Therefore, this application, through its TBM authorization management system, helps the owner prevent lessees from violating the lease agreement by using the TBM, thereby reducing labor and maintenance costs in TBM management. Furthermore, the generation of a machine code uniquely corresponding to each industrial control computer ensures that the same authorization cannot be used interchangeably, improving authorization effectiveness. This allows the TBM owner to effectively, conveniently, and securely manage the authorization of the TBM.

[0021] Additional aspects and advantages of this application will be set forth in part in the description which follows, and in part will be obvious from the description, or may be learned by practice of this application. Attached Figure Description

[0022] The above and / or additional aspects and advantages of this application will become apparent and readily understood from the following description of the embodiments taken in conjunction with the accompanying drawings, wherein:

[0023] Figure 1This is a schematic diagram of the structure of a tunnel boring machine authorization management system according to an embodiment of this application;

[0024] Figure 2 This is a flowchart illustrating a tunnel boring machine authorization management method according to an embodiment of this application. Detailed Implementation

[0025] The embodiments of this application are described in detail below. Examples of these embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals denote the same or similar elements or elements having the same or similar functions throughout. The embodiments described below with reference to the accompanying drawings are exemplary and intended to explain this application, and should not be construed as limiting this application.

[0026] The shield tunneling machine (TBM) authorization management method, system, and storage medium proposed in this application utilize a machine code generation module to generate a machine code corresponding to the TBM's industrial control computer based on the CPU hardware serial number. Then, a decryption module obtains the password generated from the machine code, decrypts the password to obtain the start time and maximum available days, and a timing and counting module counts down based on the start time and maximum available days. When the countdown is less than a time threshold, a warning module issues a notification; when the countdown reaches zero, a screen locking module locks the industrial control computer's screen. Therefore, this application, through its TBM authorization management system, helps the owner prevent lessees from violating the lease agreement by using the TBM, thereby reducing labor and maintenance costs in TBM management. Furthermore, the generation of a machine code uniquely corresponding to each industrial control computer ensures that the same authorization cannot be used interchangeably, improving authorization effectiveness. This allows the TBM owner to effectively, conveniently, and securely manage the authorization of the TBM.

[0027] The following describes a shield tunneling machine authorization management method and system according to embodiments of this application, with reference to the accompanying drawings.

[0028] Example 1

[0029] Figure 1 This is a schematic diagram of a tunnel boring machine authorization management system according to an embodiment of this application, as shown below. Figure 1 As shown, it may include:

[0030] The machine code generation module 101 is used to generate the machine code corresponding to the shield machine industrial control computer based on the CPU hardware serial number of the shield machine industrial control computer.

[0031] The decryption module 102 is used to obtain the password generated based on the machine code, and decrypt the password to obtain the start time and the maximum number of days that can be used.

[0032] The timing and counting module 103 is used to perform a countdown based on the start time and the maximum number of available days;

[0033] The reminder and warning module 104 is used to provide a prompt when the countdown is less than the time threshold;

[0034] The screen lock module 105 is used to lock the screen of the industrial control computer when the countdown reaches zero.

[0035] It should be noted that the machine code generation module is also used for:

[0036] Obtain the CPU hardware serial number of the tunnel boring machine's industrial control computer;

[0037] Calculate the MD5_32-bit hash of the CPU hardware serial number;

[0038] The above calculation results are then subjected to CRC32 calculation to obtain the machine code of the tunnel boring machine's industrial control computer.

[0039] Furthermore, in the embodiments of this disclosure, the machine code of the tunnel boring machine's industrial control computer obtained by the machine code generation module is an 8-digit hexadecimal string, and the machine code generated by each tunnel boring machine's industrial control computer is unique; therefore, the machine codes generated by different tunnel boring machine industrial control computers are not the same. Simultaneously, after the machine code generation module generates the machine code, it stores the generated machine code in the tunnel boring machine authorization management system so that it can be directly read for subsequent use without regenerating it.

[0040] Furthermore, in the embodiments of this disclosure, the password generated based on the machine code is generated by the server. Specifically, it is generated by encrypting a 10-bit string containing only uppercase letters and numbers after mixing a 58-bit binary code with the aforementioned machine code. In the embodiments of this disclosure, the 58-bit binary code includes a dongle check bit, a machine code check bit, a start time, and a maximum number of days of validity.

[0041] Specifically, in the embodiments disclosed herein, bits 1-6 of the 58-bit binary code are the dongle check bits, bits 7-12 are the machine code check bits, bits 13-30 are the start time, and bits 31-44 are the maximum usable days. Then, based on these existing 44 bits, bits 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 48, 52, and 56 (multiples of 4) of the 58-bit code are set to meaningless random bits. After the decryption module decrypts, it removes the set random bits and then verifies them against the machine code of the tunnel boring machine's industrial control computer and the dongle data. Only after successful verification can the tunnel boring machine's industrial control computer be authorized to use the code and begin a countdown for the authorization period.

[0042] In the embodiments of this disclosure, the start time in the aforementioned 58-bit binary code is the current year, month, and day when the server generated the password, totaling 18 bits. For example, assuming the server generated the password on October 1, 2019, then 20191001 - 20190000 = 1001, and then 1001 is converted to binary, padded with 0s on the left to make 18 bits, and placed in bits 13 to 30 of the 58-bit binary code. Furthermore, in the embodiments of this disclosure, the number of available days in the aforementioned 58-bit binary code is generated by converting the number of available days to binary, padded with 0s on the left to make 14 bits, and placed in bits 31 to 44 of the 58-bit binary code.

[0043] Furthermore, in the embodiments disclosed herein, the decryption module verifies the decrypted data against the machine code of the tunnel boring machine's industrial control computer and the dongle data. Specifically, the decryption module obtains the value of the dongle data storage area from the dongle identification module, and then performs 32-bit decryption on the obtained value, converting it into a 20-bit binary number, referred to as dogid. The first 1-3 bits (after removing the random bits) of the decrypted data are compared with the first 3 bits of dogid, and bits 4-6 are compared with bits 17-19 of dogid. If the comparison is successful, the machine code is verified. Otherwise, an incorrect password is entered, and authorization fails.

[0044] Furthermore, in the embodiments of this disclosure, the decryption module converts the hexadecimal machine code in the storage area into binary, abbreviated as cid. Then, it compares the 7th to 9th bits after removing the random bits with the first 3 bits of cid, and the 10th to 12th bits with the last 3 bits of cid. If the comparison is successful, the authorization is successful and the tunnel boring machine's industrial control computer can start using it. Otherwise, it directly prompts that the password input is incorrect and the authorization fails.

[0045] Furthermore, in the embodiments of this disclosure, after successful authorization, the timing and counting module can count down based on the start time and the maximum number of days available in the password, effectively preventing users from extending the authorization time by modifying the local time of the industrial control computer.

[0046] Specifically, in the embodiments disclosed herein, if authorization is successful on the start date, the timing and counting module converts the available days into minutes and starts a countdown. Every minute the tunnel boring machine authorization management system runs, the timing and counting module decrements by 1. If the user does not authorize on the start date, the timing and counting module calculates the difference between the current password input time and the start time in the decryption module, subtracts the difference from the available days to obtain the final available days, and converts them into minutes for a countdown.

[0047] For example, suppose the authorization starts on October 21, 2019, and is valid for 30 days. If the user successfully authorizes the authorization on October 21, 2019, the timer will start counting down from 30 x 24 x 60 = 43,200 minutes. If the user successfully authorizes the authorization on October 23, 2019, the timer will start counting down from (30 - (23 - 21)) x 24 x 60 = 40,320 minutes.

[0048] In one embodiment of this disclosure, the reminder / warning module will issue a notification when the countdown is less than a time threshold. Optionally, the reminder / warning module may notify the user that the authorization is about to expire when the remaining time of the countdown in the timer module is less than 100 hours. Alternatively, the reminder / warning module may notify the user that the authorization is about to expire when the remaining time of the countdown in the timer module is less than 10 days.

[0049] Furthermore, in the embodiments of this disclosure, when the countdown reaches zero, the screen locking module locks the industrial control computer's screen. In addition, information security management is enhanced while the screen is locked to prevent users from cracking the tunnel boring machine's authorization management system, thereby extending the industrial control computer's lifespan. Specifically, in the embodiments of this disclosure, keyboard hooking can be implemented, adding application-layer keyboard hooks; disabling the Alt+F4, Ctrl+Esc, and Win+Tab hotkeys; modifying the registry to disable Task Manager; background desktop processes will be restored after unlocking; and a shutdown operation entry point is reserved.

[0050] In some embodiments, the screen lock module is also used to provide a password input field and an unlock button. Furthermore, the screen lock module is also used to:

[0051] Step 1: Obtain the entered unlock password;

[0052] Step 2: Verify the unlock password;

[0053] Step 3: Once verification is successful, unlock the screen using the unlock password.

[0054] In the embodiments of this disclosure, the verification method for the unlock password can refer to the verification method for the decryption module described above, and will not be repeated here.

[0055] In some embodiments, the screen locking module can also acquire the entered temporary password. Specifically, if bits 31-36 of the decrypted 58-bit binary code are the same as bits 25-30, the temporary password is verified. Once the temporary password is verified, the screen can be unlocked for 24 hours.

[0056] In some embodiments, the screen locking module can also obtain the input universal password. Specifically, if bits 37-42 of the decrypted 58-bit binary code of the temporary password are the same as bits 25-30, the universal password verification is successful. If the universal password verification is successful, the screen can be unlocked for 24 hours.

[0057] In summary, the tunnel boring machine (TBM) authorization management system proposed in this application generates a machine code corresponding to the TBM's industrial control computer based on the CPU hardware serial number of the TBM's industrial control computer through a machine code generation module. Then, a decryption module obtains the password generated from the machine code, decrypts the password to obtain the start time and maximum available days, and a timing and counting module counts down based on the start time and maximum available days. When the countdown is less than a time threshold, a warning module issues a notification, and when the countdown reaches zero, a screen locking module locks the industrial control computer's screen. Therefore, this application can help the owner prevent the lessee from violating the lease agreement by using the TBM through the TBM authorization management system, thereby reducing labor and maintenance costs in TBM management. Furthermore, the generation of a machine code that corresponds one-to-one with the industrial control computer ensures that the same authorization cannot be used interchangeably, improving authorization effectiveness. This allows the TBM owner to manage TBM authorization effectively, conveniently, and securely.

[0058] Example 2

[0059] Figure 2 This is a flowchart illustrating a tunnel boring machine authorization management method according to an embodiment of this application, as shown below. Figure 2 As shown, the method may include:

[0060] Step 201: Generate the machine code corresponding to the shield machine's industrial control computer based on the CPU hardware serial number of the shield machine's industrial control computer;

[0061] Step 202: Obtain the password generated based on the machine code, and decrypt the password to obtain the start time and the maximum number of days available;

[0062] Step 203: Start a countdown based on the start time and the maximum number of days available;

[0063] Step 204: When the countdown is less than the time threshold, issue a prompt;

[0064] Step 205: When the countdown reaches zero, lock the screen of the industrial control computer.

[0065] The method for generating the machine code corresponding to the tunnel boring machine's industrial control computer based on the CPU hardware serial number in this embodiment may include the following steps:

[0066] Step 1: Obtain the CPU hardware serial number of the tunnel boring machine's industrial control computer;

[0067] Step 2: Calculate the MD5 hash of the CPU hardware serial number using 32-bit hashing.

[0068] Step 3: Perform CRC32 calculation on the calculation results to obtain the machine code of the tunnel boring machine's industrial control computer.

[0069] To implement the above embodiments, this disclosure also proposes a computer storage medium.

[0070] The computer storage medium provided in this embodiment stores an executable program; after the executable program is executed by a processor, it can achieve the following: Figure 1 or Figure 2 Any of the methods shown.

[0071] To implement the above embodiments, this disclosure also proposes a computer device.

[0072] The computer device provided in this disclosure includes a memory, a processor, and a computer program stored in the memory and executable on the processor; when the processor executes the program, it can achieve the following: Figure 1 or Figure 2 Any of the methods shown.

[0073] In summary, the tunnel boring machine (TBM) authorization management method, system, and storage medium proposed in this application generate a machine code corresponding to the TBM's industrial control computer based on the CPU hardware serial number. Then, it obtains and decrypts the password generated from the machine code to obtain the start time and maximum usable days. A countdown is then performed based on the start time and maximum usable days. When the countdown is less than a time threshold, a prompt is issued; when the countdown reaches zero, the industrial control computer screen is locked. Therefore, this application can help the owner prevent the lessee from violating the lease agreement by using the TBM through a TBM authorization management system, thereby reducing labor and maintenance costs in TBM management. Furthermore, the generation of a machine code that corresponds one-to-one with the industrial control computer ensures that the same authorization cannot be used interchangeably, improving authorization effectiveness. This allows the TBM owner to manage TBM authorization effectively, conveniently, and securely.

[0074] In the description of this specification, the references to terms such as "one embodiment," "some embodiments," "example," "specific example," or "some examples," etc., refer to specific features, structures, materials, or characteristics described in connection with that embodiment or example, which are included in at least one embodiment or example of this application. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in one or more embodiments or examples. Moreover, without contradiction, those skilled in the art can combine and integrate the different embodiments or examples described in this specification, as well as the features of different embodiments or examples.

[0075] Any process or method description in the flowchart or otherwise herein can be understood as representing a module, segment, or portion of code comprising one or more executable instructions for implementing custom logic functions or processes, and the scope of the preferred embodiments of this application includes additional implementations in which functions may be performed not in the order shown or discussed, including substantially simultaneously or in reverse order depending on the functions involved, as should be understood by those skilled in the art to which embodiments of this application pertain.

[0076] Although embodiments of this application have been shown and described above, it is understood that the above embodiments are exemplary and should not be construed as limiting this application. Those skilled in the art can make changes, modifications, substitutions and variations to the above embodiments within the scope of this application.

Claims

1. A tunnel boring machine authorization management system, characterized in that, The system includes: The machine code generation module is used to generate the shield code based on the CPU hardware serial number of the shield machine's industrial control computer. The machine code corresponding to the industrial control computer, wherein the machine code generated by each of the aforementioned tunnel boring machine industrial control computers is unique; The decryption module is used to obtain the password generated based on the machine code, and to decrypt the password to obtain the start time and the maximum number of days that can be used. A timing and counting module is used to perform a countdown based on the start time and the maximum number of available days; The reminder and warning module is used to provide a prompt when the countdown is less than a time threshold; A screen locking module is used to lock the screen of the industrial computer when the countdown reaches zero. The system also includes: a dongle identification module, used to obtain the value of the dongle data storage area of ​​the tunnel boring machine industrial control computer; The machine code generation module is also used for: Obtain the CPU hardware serial number of the tunnel boring machine's industrial control computer; Calculate the MD5_32-bit hash of the CPU hardware serial number; The calculation results are subjected to CRC32 calculation to obtain the machine code of the tunnel boring machine's industrial control computer; The password generated based on the machine code is produced by encrypting a 58-bit binary code with the machine code to generate a 10-bit string containing only uppercase letters and numbers. The 58-bit binary code includes a dongle check bit, a machine code check bit, a start time, and a maximum usable number of days. Specifically, bits 1-6 of the 58-bit binary code are the dongle check bit, bits 7-12 are the machine code check bit, bits 13-30 are the start time, and bits 31-44 are the maximum usable number of days. Then, based on this existing 44 bits, bits 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 48, 52, and 56 of the 58-bit code are set to meaningless random bits. After the decryption module decrypts the code, these random bits are used to decrypt the password. The process involves removing bits and then verifying the data against the machine code and dongle data of the tunnel boring machine's industrial control computer. Only after successful verification is the tunnel boring machine's industrial control computer authorized to use, and a countdown to the authorization period begins. The start time in the 58-bit binary code represents the current year, month, and day when the server generated the password, totaling 18 bits. The decryption module verifies the decrypted data against the machine code and dongle data of the tunnel boring machine's industrial control computer. The decryption module converts the hexadecimal machine code in the storage area into binary, then compares the 7-9 bits (after removing the random bits) of the decrypted data with the first 3 bits of the binary code, and the 10-12 bits with the last 3 bits of the binary code. If the comparison is successful, the tunnel boring machine's industrial control computer is authorized to use; otherwise, an error message indicating an incorrect password is displayed, and authorization fails.

2. The tunnel boring machine authorization management system according to claim 1, characterized in that, The screen lock module is also used to provide a password input box and an unlock button; The screen locking module is also used for: Get the entered unlock password; Verify the unlock password; Once verification is successful, the screen will be unlocked based on the unlock password.

3. A method for authorizing and managing tunnel boring machines, characterized in that, include: The machine code corresponding to the shield machine industrial control computer is generated based on the CPU hardware serial number of the shield machine industrial control computer, wherein the machine code generated for each shield machine industrial control computer is unique; Obtain the password generated based on the machine code, and decrypt the password to obtain the start time and the maximum number of days available; A countdown is performed based on the stated start time and the maximum number of available days; A prompt will be given when the countdown is less than the time threshold; When the countdown reaches zero, the screen of the industrial control computer is locked; It also includes: a dongle identification module, used to obtain the value of the dongle data storage area of ​​the tunnel boring machine industrial control computer; The machine code corresponding to the tunnel boring machine's industrial control computer is generated based on the CPU hardware serial number of the industrial control computer, including: Obtain the CPU hardware serial number of the tunnel boring machine's industrial control computer; Calculate the MD5_32-bit hash of the CPU hardware serial number; The calculation results are subjected to CRC32 calculation to obtain the machine code of the tunnel boring machine's industrial control computer; The password generated based on the machine code is produced by encrypting a 58-bit binary code with the machine code to generate a 10-bit string containing only uppercase letters and numbers. The 58-bit binary code includes a dongle check bit, a machine code check bit, a start time, and a maximum usable number of days. Specifically, bits 1-6 of the 58-bit binary code are the dongle check bit, bits 7-12 are the machine code check bit, bits 13-30 are the start time, and bits 31-44 are the maximum usable number of days. Then, based on this existing 44 bits, bits 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 48, 52, and 56 of the 58-bit code are set to meaningless random bits. After the decryption module decrypts the code, these random bits are used to decrypt the password. The process involves removing bits and then verifying the data against the machine code and dongle data of the tunnel boring machine's industrial control computer. Only after successful verification is the tunnel boring machine's industrial control computer authorized to use, and a countdown to the authorization period begins. The start time in the 58-bit binary code represents the current year, month, and day when the server generated the password, totaling 18 bits. The decryption module verifies the decrypted data against the machine code and dongle data of the tunnel boring machine's industrial control computer. The decryption module converts the hexadecimal machine code in the storage area into binary, then compares the 7-9 bits (after removing the random bits) of the decrypted data with the first 3 bits of the binary code, and the 10-12 bits with the last 3 bits of the binary code. If the comparison is successful, the tunnel boring machine's industrial control computer is authorized to use; otherwise, an error message indicating an incorrect password is displayed, and authorization fails.

4. A computer storage medium, wherein, The computer storage medium stores computer-executable instructions; when executed by a processor, the computer-executable instructions can implement the method described in claim 3.

5. A computer device, characterized in that, It includes a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, it implements the method as described in claim 3.

Images