A quantity value traceability method, apparatus, device, and storage medium

Abstract

The application discloses a quantity value traceability method, device, equipment and storage medium, and the method comprises the steps of obtaining calibration information and corresponding encoding information, date information and regional information of the calibration information, obtaining a digital certificate corresponding to the calibration information according to the date information and the regional information, establishing a calibration model file corresponding to the calibration information according to the calibration information, the encoding information and the digital certificate, and sending the calibration model file. In this way, the authenticity, integrity and non-repudiation of the calibration result in the quantity value traceability process can be ensured, and the effective date and effective regional range of the calibration result can be embodied.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of metrological verification, in particular to a quantity value traceability method, device, equipment and storage medium. BACKGROUND

[0002] At present, the main process of the quantity value traceability system in China is that the subordinate metrological institutions send sensors and their data processing units to the superior metrological institutions for verification or calibration, the superior metrological institutions issue metrological verification certificates with legal effect and give each parameter calibration value, and the subordinate metrological institutions send for inspection according to the verification results to calibrate and correct each parameter of the data processing unit, so as to realize the calibration of the sensor. However, most metrological institutions currently use the manual input of calibration parameters by metrological verification personnel to calibrate, and in the process of quantity value transmission and calibration data import, there are problems of distorted and unreliable metrological results caused by human negligence, tampering in the transmission process and the like, and the subordinate metrological institutions cannot verify the authenticity, integrity and irrefutability of the verification results issued by the superior metrological institutions. SUMMARY

[0003] The quantity value traceability method, device, equipment and storage medium provided by the embodiments of the present application can guarantee the authenticity, integrity and irrefutability of the calibration results in the quantity value traceability process, and can also reflect the effective date and effective geographical range of the calibration results.

[0004] In one aspect, the embodiments of the present application provide a quantity value traceability method, which comprises:

[0005] obtaining calibration information and encoding information, date information and geographical information corresponding to the calibration information; the digital certificate comprises date information, geographical information and a second key;

[0006] obtaining a digital certificate corresponding to the calibration information according to the date information and the geographical information;

[0007] establishing a calibration model file corresponding to the calibration information according to the calibration information, the encoding information and the digital certificate; the calibration model file comprises digitally signed data and the digital certificate;

[0008] sending the calibration model file.

[0009] Further, obtaining a digital certificate corresponding to the calibration information according to the date information and the geographical information comprises:

[0010] generating a key pair corresponding to the calibration information; the key pair comprises a first key and a second key matched with each other; the calibration information is a calibration result corresponding to a sensor;

[0011] determine the certificate application file according to the second key, the date information and the region information; the date information is a valid date of the calibration information; and the region information is a valid region range of the calibration information;

[0012] send the certificate application file to a cloud platform; the cloud platform is configured to send the certificate application file to a public key infrastructure system, so as to apply for a digital certificate from the public key infrastructure system;

[0013] receive the digital certificate; the digital certificate includes certificate data and a digital signature; the certificate data includes the second key, the date information and the region information; and the digital signature is obtained by signing the certificate data by the public key infrastructure system through a third key.

[0014] Further, after obtaining the digital certificate corresponding to the calibration information according to the date information and the region information, the method further includes:

[0015] verify the second key in the digital certificate according to the first key corresponding to the calibration information;

[0016] if the first key matches the second key, it is determined that the verification is passed, and a corresponding relationship between the digital certificate and the encoding information is established;

[0017] the encoding information is a serial number corresponding to the sensor.

[0018] Further, a calibration model file of the calibration information is established according to the calibration information, the encoding information and the digital certificate, and the method includes:

[0019] determine a data text of the calibration model file according to the calibration information and the encoding information;

[0020] digitally sign the data text through the first key corresponding to the calibration information to obtain a digitally signed data text;

[0021] establish the calibration model file corresponding to the calibration information according to the digitally signed data text and the digital certificate.

[0022] Further, the digitally signed data text is obtained by digitally signing the data text through the first key corresponding to the calibration information, and the method includes:

[0023] perform a hash operation on the data text to obtain a hash value of the data text;

[0024] encrypt the hash value of the data text through the first key corresponding to the calibration information to obtain the digitally signed data text.

[0025] On the other hand, the embodiment of the application provides a quantity value traceability method, and the method includes:

[0026] receive the calibration model file;

[0027] The second key of the digital certificate in the calibration model file is verified by the preset root certificate;

[0028] If the second key verification is passed, the digitally signed data message is verified by the second key;

[0029] If the digitally signed data message verification is passed, the date information and the regional information in the digital signature are verified;

[0030] If the current date is within the date information, and the geographical information and the regional information of the institution corresponding to the calibration information match, it is determined that the date information and the regional information verification is passed, and the calibration information is imported.

[0031] Further, the second key of the digital certificate in the calibration model file is verified by the preset root certificate, comprising:

[0032] The certificate data in the digital certificate is subjected to a hash operation to obtain a first operation value;

[0033] The digital signature is decrypted by the fourth key in the root certificate to obtain a second operation value; the fourth key matches the third key;

[0034] If the first operation value and the second operation value match, it is determined that the second key verification is passed.

[0035] Further, the digitally signed data message is verified by the second key, comprising:

[0036] The digitally signed data message is subjected to a hash operation to obtain a third operation value;

[0037] The digitally signed data message is decrypted by the second key to obtain a fourth operation value;

[0038] If the third operation value and the fourth operation value match, it is determined that the digitally signed data message verification is passed.

[0039] On the other hand, the application embodiment provides a quantity value traceability device, which comprises:

[0040] An information acquisition module is configured to acquire calibration information and encoding information, date information and regional information corresponding to the calibration information;

[0041] A digital certificate establishment module is configured to establish a digital certificate corresponding to the calibration information according to the date information and the regional information;

[0042] A calibration model file establishment module is configured to establish a calibration model file corresponding to the calibration information according to the calibration information, the encoding information and the digital certificate;

[0043] A calibration model file sending module is configured to send the calibration model file.

[0044] Further, the apparatus further comprises:

[0045] The digital certificate establishing module is further configured to generate a key pair corresponding to the calibration information, wherein the key pair comprises a first key and a second key matched with each other, and the calibration information is a calibration result corresponding to the sensor;

[0046] determine a certificate application file according to the second key, date information, and region information, wherein the date information is a valid date of the calibration information, and the region information is a valid region range of the calibration information;

[0047] send the certificate application file to a cloud platform, and the cloud platform is configured to send the certificate application file to a public key infrastructure system, so as to apply for a digital certificate from the public key infrastructure system;

[0048] receive a digital certificate, wherein the digital certificate comprises certificate data and a digital signature, the certificate data comprises the second key, the date information, and the region information, and the digital signature is obtained by the public key infrastructure system by signing the certificate data with a third key.

[0049] Further, the apparatus further comprises:

[0050] The digital certificate verifying module is configured to verify the second key in the digital certificate according to the first key corresponding to the calibration information, and if the first key matches the second key, determine that the verification is passed, and establish a corresponding relationship between the digital certificate and the encoding information, wherein the encoding information is a serial number corresponding to the sensor.

[0051] Further, the apparatus further comprises:

[0052] The calibration model file establishing module is further configured to determine a data text of the calibration model file according to the calibration information and the encoding information;

[0053] digitally sign the data text with the first key corresponding to the calibration information to obtain a digitally signed data text;

[0054] establish the calibration model file corresponding to the calibration information according to the digitally signed data text and the digital certificate.

[0055] Further, the apparatus further comprises:

[0056] The calibration model file establishing module is further configured to perform a hash operation on the data text to obtain a hash value of the data text;

[0057] encrypt the hash value of the data text with the first key corresponding to the calibration information to obtain the digitally signed data text.

[0058] In another aspect, an embodiment of the present application provides a quantity value traceability apparatus, which comprises:

[0059] a file receiving module configured to receive a calibration model file;

[0060] a first verification module configured to verify a second key of a digital certificate in the calibration model file by using a preset root certificate;

[0061] a second verification module configured to verify the data message after digital signature by using the second key if the second key is verified;

[0062] a third verification module configured to verify date information and region information in the digital signature if the data message after digital signature is verified;

[0063] a calibration information importing module configured to import the calibration information if the current date is within the date information and the geographical information and the region information of the institution corresponding to the calibration information are matched.

[0064] Further, the device further comprises:

[0065] The first verification module is further configured to perform a hash operation on certificate data in the digital certificate to obtain a first operation value;

[0066] decrypt the digital signature by using a fourth key in the root certificate to obtain a second operation value; the fourth key is matched with the third key;

[0067] if the first operation value and the second operation value are matched, it is determined that the second key is verified.

[0068] Further, the device further comprises:

[0069] The second verification module is further configured to perform a hash operation on the data message after digital signature to obtain a third operation value;

[0070] decrypt the data message after digital signature by using the second key to obtain a fourth operation value;

[0071] if the third operation value and the fourth operation value are matched, it is determined that the data message after digital signature is verified.

[0072] On the other hand, an embodiment of the present application provides an electronic device, which comprises a processor and a memory, the memory stores at least one instruction or at least one program, the at least one instruction or at least one program is loaded and executed by the processor to perform the magnitude traceability method as described above.

[0073] In another aspect, an embodiment of the present application provides a computer storage medium, and the computer storage medium stores at least one instruction or at least one program, and the at least one instruction or the at least one program is loaded and executed by a processor to implement the magnitude traceability method as described above.

[0074] The magnitude traceability method, device, equipment and storage medium provided by the embodiments of the present application have the following technical effects:

[0075] The calibration information, the encoding information corresponding to the calibration information, the date information and the regional information are obtained, the digital certificate corresponding to the calibration information is obtained according to the date information and the regional information, the calibration model file corresponding to the calibration information is established according to the calibration information, the encoding information and the digital certificate, and the calibration model file is sent. In this way, the authenticity, integrity and non-repudiation of the calibration result in the magnitude traceability process can be ensured, and the effective date and the effective regional range of the calibration result can be embodied. BRIEF DESCRIPTION OF DRAWINGS

[0076] In order to more clearly illustrate the technical solutions and advantages of the embodiments of the present application or the prior art, the drawings needed in the embodiment or the prior art description will be briefly introduced. Obviously, the drawings in the following description are only some embodiments of the present application, and other drawings can be obtained by those skilled in the art without creative labor.

[0077] Figure 1 is a schematic diagram of an application environment provided by an embodiment of the present application;

[0078] Figure 2 is a flowchart of a magnitude traceability method provided by an embodiment of the present application;

[0079] Figure 3 is a flowchart of a magnitude traceability method provided by an embodiment of the present application;

[0080] Figure 4 is a flowchart of a magnitude traceability method provided by an embodiment of the present application;

[0081] Figure 5 is a flowchart of a magnitude traceability method provided by an embodiment of the present application;

[0082] Figure 6 is a structural schematic diagram of a magnitude traceability device provided by an embodiment of the present application;

[0083] Figure 7 is a structural schematic diagram of a magnitude traceability device provided by an embodiment of the present application;

[0084] Figure 8is a hardware structure block diagram of a server of a quantity value traceability method provided by an embodiment of the present application. DETAILED DESCRIPTION

[0085] The technical solutions in the embodiments of the present application will be clearly and completely described in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by a person of ordinary skill in the art without creative work are within the scope of protection of the present application.

[0086] It should be noted that the terms "first", "second", and the like in the specification and claims of the present application and the above-described drawings are used to distinguish similar objects, and do not necessarily indicate a specific order or a chronological sequence. It should be understood that the data thus used can be interchanged under appropriate circumstances, so that the embodiments of the present application described herein can be implemented in an order other than that illustrated or described herein. In addition, the terms "include" and "have" and any variations thereof are intended to cover non-exclusive inclusion, for example, a process, method, system, product, or server including a series of steps or units does not have to be limited to only those steps or units clearly listed, but can include other steps or units not clearly listed or inherent to the process, method, product, or device.

[0087] Please refer to Figure 1 , Figure 1 is a schematic diagram of an application environment provided by an embodiment of the present application, comprising a higher-level metrological institution 101, a lower-level metrological institution 102, and a quantity value traceability system 103. The higher-level metrological institution 101 is configured to calibrate and verify the sensor and its data processing unit sent by the lower-level metrological institution, and obtain a calibration result. The lower-level metrological institution 102 is configured to import the calibration result, and correct the parameters of the sensor and its data processing unit according to the calibration result, thereby completing the calibration of the sensor. The quantity value traceability system 103 is arranged in the higher-level metrological institution 101 and the lower-level metrological institution 102 respectively, or the higher-level metrological institution 101 and the lower-level metrological institution 102 are connected with the quantity value traceability system 103. The higher-level metrological institution 101 establishes a calibration model file corresponding to the calibration result through the quantity value traceability system 103. The lower-level metrological institution 102 verifies the calibration model file received, and imports the calibration result corresponding to the calibration model file if the verification is passed.

[0088] Specifically, the higher-level metrological institution 101 obtains calibration information and code information, date information, and region information corresponding to the calibration information, obtains a digital certificate corresponding to the calibration information according to the date information and the region information, establishes a calibration model file corresponding to the calibration information according to the calibration information, the code information, and the digital certificate, and sends the calibration model file.

[0089] Specifically, the subordinate metrological institution 102 receives the calibration model file, verifies the first key of the digital certificate in the calibration model file through the preset root certificate, verifies the data message after digital signature through the first key if the first key verification is passed, verifies the date information and the regional information in the digital signature, and if the current date is within the date information and the geographical information and the regional information corresponding to the calibration information match, determines that the date information and the regional information verification is passed, and imports the calibration information.

[0090] In the embodiments of the present application, there can be multiple superior metrological institutions 101 and multiple subordinate metrological institutions 102, and a superior metrological institution relative to the multiple superior metrological institutions 101 and a subordinate metrological institution relative to the multiple subordinate metrological institutions 102, which can form one or more metrological chains and metrological systems, thereby forming one or more value traceability systems.

[0091] In the embodiments of the present application, the value traceability system 103 can be an application program or a software built in a computer or a server, or a special computer or server for executing the value traceability method.

[0092] The following introduces a specific embodiment of a value traceability method of the present application, Figure 2 is a flowchart of a value traceability method provided by the embodiments of the present application, and the present specification provides method operation steps as in the embodiments or flowcharts, but more or fewer operation steps can be included based on conventional or non-creative labor. The order of steps listed in the embodiments is only one of the many execution orders of the steps, and does not represent the only execution order. In actual system or server product execution, the method order shown in the embodiments or the drawings can be executed in sequence or in parallel (for example, in a parallel processor or multi-thread processing environment). Specifically, as shown in Figure 2 The method can include:

[0093] S201: Obtain calibration information and encoding information, date information and regional information corresponding to the calibration information.

[0094] In the embodiments of the present application, the current institution as a superior institution calibrates the sensor that needs to be calibrated, obtains the calibration information of the sensor, and obtains the encoding information, date information and regional information corresponding to the calibration information.

[0095] In the embodiment of the present application, the encoding information is a serial number or an identification number of the sensor corresponding to the calibration information, and the sensor corresponding to the calibration information is uniquely defined by the encoding information. Optionally, the serial number or the identification number can be a unique serial number corresponding to each sensor device, or can be a serial number agreed by the current organization and the organization corresponding to the sensor, and the serial number will not conflict with the serial numbers of other sensors of the current organization and the organization corresponding to the sensor.

[0096] In the embodiment of the present application, the date information is a valid date of the calibration information, and the use time limit of the calibration information is defined by the date information. For each calibration information, there is a valid date, and within the valid date, the calibration information is valid, and beyond the valid date, the calibration information is invalid, and needs to be recalibrated to obtain new calibration information.

[0097] In the embodiment of the present application, the region information is a valid region range of the calibration information, and the use region range of the calibration information is defined by the region information. For each calibration information, there is a valid region range, and within the valid region range, the calibration information is valid, and beyond the valid region range, the calibration information is invalid, and needs to be recalibrated to obtain new calibration information.

[0098] S203: Obtain a digital certificate corresponding to the calibration information according to the date information and the region information.

[0099] In the embodiment of the present application, the validity period of the digital certificate is defined by the date information, and the region range of the digital certificate is defined by the region information, and thus the digital certificate obtained can reflect the date information and the region information corresponding to the calibration information.

[0100] Specifically, Figure 3 A flowchart of a value traceability method provided by the embodiment of the present application is shown in FIG. 1. Figure 3 As shown in FIG. 1, the digital certificate corresponding to the calibration information is obtained according to the date information and the region information, and includes the following steps:

[0101] S301: Generate a key pair corresponding to the calibration information.

[0102] In the embodiment of the present application, the key pair includes a first key and a second key matched with each other, and a third key and a fourth key matched with each other. Optionally, the first key is a private key stored locally in the current organization, and the second key is a public key written in the digital certificate.

[0103] In the embodiment of the present application, a key pair corresponding to each calibration information is generated. As an optional implementation, after generating the key pair, the current organization can establish a correspondence between the calibration information and / or the encoding information and the key pair, to prevent errors in subsequent calls to the key pair, and to call mismatched key pairs.

[0104] As an optional implementation, the key pair corresponding to each calibration information is different, and the key pair of other calibration information cannot decrypt or tamper the digital certificate of the calibration information, thereby ensuring the information security of each calibration information and its digital certificate and improving the reliability of the calibration information and the digital certificate.

[0105] As an optional implementation, the key pair corresponding to each calibration information can be the same. Optionally, a key pair library can be preset, and a key pair is extracted from the key pair library each time a calibration information is obtained. The extraction manner can be extraction according to a certain order or rule, or random extraction. The key pair is limited by the key pair library, and when the calibration information of the current institution is large, the data storage amount of the current institution can be reduced.

[0106] S303: Determine a certificate application file according to the second key, the date information, and the region information.

[0107] In the embodiment of the application, the second key is used as the public key of the digital certificate, the date information is used as the validity period of the digital certificate, and the region information is used as the region range of the digital certificate to determine the certificate application file.

[0108] S305: Send the certificate application file to the cloud platform.

[0109] In the embodiment of the application, due to the mandatory provision of the public key infrastructure (PKI) system, the digital certificate applicant cannot directly establish a connection with the public key infrastructure (PKI) system to apply for a digital certificate, but needs to establish an intermediate connection through a cloud platform, and apply for a digital certificate from the public key infrastructure (PKI) system through the cloud platform.

[0110] In the embodiment of the application, the cloud platform can be a cloud platform dedicated to the current institution, or a cloud platform shared by all institutions using the value traceability method of the application.

[0111] In the embodiment of the application, the current institution pre-establishes a certificate chain with other institutions and the cloud platform. Optionally, the other institution can be the institution corresponding to the sensor, or all institutions using the value traceability method of the application. The certificate chain is used to establish a secure and reliable data transmission chain with other institutions and the cloud platform. Each institution or cloud platform of the certificate chain can pre-store a common certificate and a root certificate. The common certificate is used to connect the institution corresponding to the common certificate to other institutions in the certificate chain. The root certificate is used to verify the data sent by other institutions or the cloud platform. The root certificate includes a fourth key, the fourth key is the public key of the public key infrastructure (PKI) system corresponding to the certificate chain, the fourth key matches the third key, and the third key is the private key of the public key infrastructure (PKI) system.

[0112] In the embodiments of the present application, the current institution sends the determined certificate application file to the cloud platform, and obtains the digital certificate through the cloud platform. Optionally, the certificate application file can be a P10 request.

[0113] As an optional implementation, the public key infrastructure (PKI) system can be a system capable of directly identifying the P10 request. After receiving the certificate application file, the cloud platform directly forwards the certificate application file to the public key infrastructure (PKI) system.

[0114] As an optional implementation, the public key infrastructure (PKI) system can be a system incapable of directly identifying the P10 request. After receiving the certificate application file, the cloud platform converts the certificate application file into a format that can be recognized by the corresponding public key infrastructure (PKI) system, and then sends the converted certificate application file to the public key infrastructure (PKI) system.

[0115] S307: Receive the digital certificate.

[0116] In the embodiments of the present application, the digital certificate includes certificate data and a digital signature. The certificate data includes a second key, date information and regional information, and the digital signature is obtained by the public key infrastructure (PKI) system signing the certificate data by using a third key. After receiving the certificate application file, the public key infrastructure (PKI) system obtains the second key, date information and regional information in the certificate application file, i.e., the certificate data, performs a hash operation on the certificate data to obtain a hash value corresponding to the certificate data, and encrypts the hash value by using the third key, thereby completing the signature of the certificate data and obtaining the digital signature. Specifically, the certificate authority (CA) of the public key infrastructure (PKI) system completes the signature of the certificate data to generate the digital certificate, and correspondingly, the third key is the private key of the certificate authority (CA).

[0117] As an optional implementation, after the public key infrastructure (PKI) system generates the corresponding digital certificate according to the certificate application file, the public key infrastructure (PKI) system can publish the digital certificate to a lightweight directory access protocol (LDAP) server for subsequent verification of whether the digital certificate is revoked.

[0118] As an optional implementation, if one or more of the following situations exist, the digital certificate of the calibration information can be revoked:

[0119] The first situation is that the current institution finds that the calibration information result is incorrect;

[0120] The second situation is that the current institution is determined to be unqualified or incorrect during internal review;

[0121] The third situation is that the current institution is no longer responsible for the calibration information;

[0122] The fourth case is that the superior organization of the current organization withdraws the calibration information.

[0123] Optionally, the value traceability method provided by the embodiments of the present application can include but is not limited to the above four cases, and in these cases, the digital certificate of the calibration information can be revoked.

[0124] As an optional implementation, after obtaining the digital certificate corresponding to the calibration information according to the date information and the region information, the second key in the digital certificate can be verified according to the first key corresponding to the calibration information, which not only prevents the digital certificate from being tampered with in the process of being sent to the current organization, but also prevents the corresponding relationship between the digital certificate and the calibration information from being wrong when the current organization simultaneously obtains multiple digital certificates corresponding to the calibration information.

[0125] If the first key matches the second key, it is determined that the verification is passed, the corresponding relationship between the digital certificate and the encoded information is established, and the digital certificate is stored locally to facilitate subsequent calling of the corresponding digital certificate when establishing the calibration model file corresponding to the calibration information.

[0126] The digital certificate corresponding to the calibration information is obtained by the above method, the validity period and the regional range of the digital certificate and other standardized information are connected with the value traceability method, the date information and the region information are constrained in the value traceability process through the digital certificate, and the use of the calibration information after exceeding the use range of the date information and the region information is prevented, so that the calibration result is prevented from being deviated.

[0127] S205: Establishing a calibration model file corresponding to the calibration information according to the calibration information, the encoded information and the digital certificate.

[0128] Specifically, Figure 4 A flowchart of a value traceability method provided by the embodiments of the present application is shown, as shown in Figure 4 The calibration model file corresponding to the calibration information is established according to the calibration information, the encoded information and the digital certificate, and includes:

[0129] S401: Determining the data message of the calibration model file according to the calibration information and the encoded information.

[0130] In the embodiments of the present application, the data message is composed of the calibration information and the encoded information corresponding to the calibration information.

[0131] As an optional implementation, the data message can also include sensor name, sensor model and other information. Specifically, Table 1 is a corresponding table of the data message content of the value traceability method provided by the embodiments of the present application, the first row of Table 1 represents the content of the data message, whether the content is necessary, and the meaning corresponding to the content.

[0132] Table 1

[0133]

[0134]

[0135] As an optional implementation, the date information and the region information can also be included in the data message, forming redundancy, and in subsequent verification of the date information and the region information, whether the date information and the region information in the digital certificate are reliable is further verified.

[0136] S403: digitally signing the data message by the first key corresponding to the calibration information to obtain a digitally signed data message.

[0137] In the embodiment of the application, the data message is subjected to a hash operation to obtain a hash value of the data message, and then the hash value of the data message is encrypted by the first key corresponding to the calibration information to obtain the digitally signed data message.

[0138] The digitally signed data message hash value can only be decrypted by the second key corresponding to the first key to obtain the correct data message, and the first key is stored in the local of the issuing agency and cannot be obtained by others, thereby ensuring that the data message is generated by the specified client and has not been tampered with.

[0139] S405: establishing a calibration model file corresponding to the calibration information according to the digitally signed data message and the digital certificate.

[0140] The calibration model file corresponding to the calibration information is suggested by the above method, not only the calibration result originally transmitted through the paper document with the measurement verification seal is electronicized through the carrier, but also the data message is digitally signed through the digital certificate, ensuring the information security in the value traceability process, thereby ensuring the authenticity, integrity and non-repudiation of the calibration result.

[0141] S207: sending the calibration model file.

[0142] In the embodiment of the application, after the current agency establishes the calibration model file corresponding to the calibration information, the calibration model file is sent to the agency corresponding to the calibration information, i.e. the using agency of the sensor.

[0143] Optionally, the calibration model file can be burned into a CD, copied to a U disk, or written into other solid storage carriers, and the CD, the U disk or other fixed storage carriers are sent to the agency corresponding to the calibration information in an offline manner, preventing the calibration model file from being stolen or tampered with in the network transmission process and improving the security in the transmission process. Optionally, the calibration model file can also be transmitted to the agency corresponding to the calibration information through the network, so that the transmission of the calibration model file is faster and more convenient.

[0144] By the method, the calibration information in the model calibration file is signed by the digital certificate, so that the authenticity, integrity and non-repudiation of the calibration result in the value traceability process are ensured, and the digital signature corresponding to the calibration information is placed in the model calibration file, so that the effective date and effective geographical range of the calibration result are embodied.

[0145] Figure 5 A value traceability method is shown, which comprises the following steps: Figure 5

[0146] S501: receiving a calibration model file.

[0147] In the embodiment, the calibration information corresponding agency receives the calibration model file of the calibration information.

[0148] Optionally, the calibration information corresponding agency can receive the corresponding calibration model file in the form of a CD, a U disk or other fixed storage carriers, so as to prevent the calibration model file from being stolen or tampered with in the network transmission process and improve the security in the transmission process. Optionally, the calibration information corresponding agency can also receive the calibration model file through network transmission, so that the transmission of the calibration model file is faster and more convenient.

[0149] S503: verifying the second key of the digital certificate in the calibration model file by the preset root certificate.

[0150] In the embodiment, the certificate data in the digital certificate is subjected to a hash operation to obtain a first operation value. The digital signature is decrypted by the fourth key in the root certificate to obtain a second operation value. If the first operation value and the second operation value match, it is determined that the second key verification is passed.

[0151] As an optional implementation, if the public key infrastructure (PKI) system publishes the digital certificate to the lightweight directory access protocol (LDAP) server after generating the corresponding digital certificate according to the certificate application file, the calibration information corresponding agency can determine whether the digital certificate is revoked according to the online certificate status protocol (OCSP) to the public key infrastructure (PKI) system.

[0152] By verifying the second key, it is determined whether the corresponding digital certificate is legal, i.e., whether the digital certificate is generated by the public key infrastructure (PKI) system in the certificate chain where the calibration information corresponding agency is located, whether the digital certificate is tampered with in the transmission process, and the reliability of the digital certificate is ensured.

[0153] S505: if the second key verification is passed, the data message after the digital signature is verified by the second key. ​

[0154] In the embodiment of the present application, the data message after digital signature is subjected to hash operation to obtain a third operation value. The data message after digital signature is decrypted by the second key to obtain a fourth operation value. If the third operation value and the fourth operation value match, it is determined that the data message after digital signature is verified.

[0155] Through the verification of the data message after digital signature, it is determined whether the data message is tampered in the transmission process, thereby ensuring the reliability of the data message.

[0156] S507: If the data message after digital signature is verified, the date information and the region information in the digital signature are verified.

[0157] In the embodiment of the present application, it is verified whether the current date is within the date information in the digital signature, and whether the geographic information of the institution corresponding to the calibration information matches the region information in the digital signature, thereby ensuring that the data message is used within the effective date and the effective region.

[0158] S509: If the current date is within the date information, and the geographic information of the institution corresponding to the calibration information matches the region information, it is determined that the date information and the region information are verified, and the calibration information is imported.

[0159] Through the above method, the second key, the data message after digital signature, the date information and the region information are verified in sequence, thereby ensuring the reliability of the calibration information finally imported.

[0160] The embodiment of the present application also provides a quantity value traceability device, Figure 6 is a structure diagram of a quantity value traceability device provided by the embodiment of the present application, as Figure 6 shown, the device comprises:

[0161] On the other hand, the embodiment of the present application provides a quantity value traceability device, the device comprises:

[0162] The information acquisition module 601 is configured to acquire calibration information and encoding information corresponding to the calibration information, date information and region information.

[0163] The digital certificate establishment module 602 is configured to establish a digital certificate corresponding to the calibration information according to the date information and the region information.

[0164] The calibration model file establishment module 603 is configured to establish a calibration model file corresponding to the calibration information according to the calibration information, the encoding information and the digital certificate.

[0165] The calibration model file sending module 604 is configured to send the calibration model file.

[0166] As an optional implementation, the device further comprises:

[0167] The digital certificate establishing module 602 is further configured to generate a key pair corresponding to the calibration information, the key pair comprising a first key and a second key matched with each other, the calibration information being a calibration result corresponding to the sensor, and determine a certificate application file according to the second key, date information and region information, the date information being a valid date of the calibration information, and the region information being a valid region range of the calibration information, and send the certificate application file to a cloud platform, the cloud platform being configured to send the certificate application file to a public key infrastructure system, so as to apply for a digital certificate from the public key infrastructure system, and receive the digital certificate, the digital certificate comprising certificate data and a digital signature, the certificate data comprising the second key, the date information and the region information, and the digital signature being obtained by the public key infrastructure system by signing the certificate data with a third key.

[0168] As an optional implementation, the apparatus further comprises:

[0169] The digital certificate verifying module 605 is configured to verify the second key in the digital certificate according to the first key corresponding to the calibration information, and if the first key matches the second key, determine that the verification is passed, and establish a corresponding relationship between the digital certificate and the encoding information, the encoding information being a serial number corresponding to the sensor.

[0170] As an optional implementation, the apparatus further comprises:

[0171] The calibration model file establishing module 603 is further configured to determine a data message of the calibration model file according to the calibration information and the encoding information, sign the data message with the first key corresponding to the calibration information to obtain a digitally signed data message, and establish the calibration model file corresponding to the calibration information according to the digitally signed data message and the digital certificate.

[0172] As an optional implementation, the apparatus further comprises:

[0173] The calibration model file establishing module 603 is further configured to perform a hash operation on the data message to obtain a hash value of the data message, and encrypt the hash value of the data message with the first key corresponding to the calibration information to obtain the digitally signed data message.

[0174] As an optional implementation, the present embodiment further provides a quantity value traceability apparatus, Figure 7 is a structural schematic diagram of a quantity value traceability apparatus provided by the present embodiment, as shown in Figure 7 The apparatus comprises:

[0175] The file receiving module 701 is configured to receive the calibration model file.

[0176] The first verification module 702 is configured to verify the second key of the digital certificate in the calibration model file by using the preset root certificate.

[0177] The second verification module 703 is configured to verify the digitally signed data message by using the second key if the verification of the second key is passed.

[0178] The third verification module 704 is configured to verify the date information and the region information in the digital signature if the verification of the digitally signed data message is passed.

[0179] The calibration information import module 705 is configured to determine that the verification of the date information and the region information is passed, and import the calibration information if the current date is within the date information and the geographical information and the region information of the institution corresponding to the calibration information are matched.

[0180] As an optional implementation, the apparatus further comprises:

[0181] The first verification module 702 is further configured to perform a hash operation on the certificate data in the digital certificate to obtain a first operation value, decrypt the digital signature by using a fourth key in the root certificate to obtain a second operation value, and determine that the verification of the second key is passed if the first operation value and the second operation value are matched, wherein the fourth key is matched with the third key.

[0182] As an optional implementation, the apparatus further comprises:

[0183] The second verification module 703 is further configured to perform a hash operation on the digitally signed data message to obtain a third operation value, decrypt the digitally signed data message by using the second key to obtain a fourth operation value, and determine that the verification of the digitally signed data message is passed if the third operation value and the fourth operation value are matched.

[0184] The apparatus in the apparatus embodiment and the method embodiment are based on the same application idea.

[0185] The method embodiments provided in the embodiments of the application can be executed in a mobile terminal, a computer terminal, a server or a similar computing apparatus. Taking the case of running on a server as an example, Figure 8 FIG. 1 is a hardware structure block diagram of a server of a rain amount determination method according to an embodiment of the application. As shown in FIG. 1, the server comprises a processor 1001, a memory 1002 and a communication interface 1003. Figure 8As shown, the server 800 can vary greatly in configuration and performance, and can include one or more Central Processing Units (CPU) 810 (processor 810 can include, but is not limited to, a microprocessor, an Application-Specific Integrated Circuit (ASIC), a Field-Programmable Gate Array (FPGA), etc.), a memory 830 for storing data, one or more storage media 820 (e.g., one or more mass storage devices) for storing applications 823 or data 822. The memory 830 and the storage media 820 can be of any type of volatile or non-volatile storage, including, but not limited to, magnetic, optical, or semiconductor-based storage. The storage media 820 can store programs, modules, and data which the server 800 can access, for example, read from, and / or write to the storage media 820. The storage media 820 can comprise one or more storage devices, such as magnetic, optical, or semiconductor-based storage. The storage media 820 can also have volatile or non-volatile storage. The storage media 820 can be removable from the server 800. The server 800 can also include one or more power supplies 860, one or more wired or wireless network interfaces 850, one or more input / output interfaces 840, and / or one or more operating systems 821, such as Windows Server™, Mac OS X™, Unix™, Linux™, FreeBSD™, etc.

[0186] The input / output interface 840 can be configured to receive or transmit data via a network. Examples of the network can include a wireless network provided by a communication provider of the server 800. In one example, the input / output interface 840 includes a Network Interface Controller (NIC) that can connect to other network devices through a base station to communicate with the Internet. In one example, the input / output interface 840 can be a Radio Frequency (RF) module that can communicate with the Internet through a wireless manner.

[0187] Those skilled in the art can understand that, Figure 8 The structure shown is merely illustrative, and does not limit the structure of the electronic device described above. For example, the server 800 can include more or fewer components than those shown, or have a different configuration of components than those shown. Figure 8 The server 800 can include more or fewer components than those shown, or have a different configuration of components than those shown. Figure 8 The server 800 can include more or fewer components than those shown, or have a different configuration of components than those shown.

[0188] The embodiments of the present application also provide a quantity value traceability device, the device comprising a processor and a memory, the memory storing at least one instruction, at least one program, a code set or an instruction set, the at least one instruction, the at least one program, the code set or the instruction set being loaded and executed by the processor to implement the rainfall determination method.

[0189] The embodiment of the present application also provides a storage medium which can be arranged in a server to save at least one instruction, at least one program, a code set or an instruction set related to the value determination method in the method embodiment, and the at least one instruction, the at least one program, the code set or the instruction set are loaded and executed by the processor to realize the value traceability method provided by the above method embodiment.

[0190] Optionally, in the embodiment, the storage medium can be arranged in at least one of the network servers in the computer network. Optionally, in the embodiment, the storage medium can include but is not limited to a U disk, a read-only memory (ROM), a random access memory (RAM), a mobile hard disk, a magnetic disk or an optical disk and various media capable of storing program codes.

[0191] As can be seen from the above embodiments of the value traceability method, device, equipment and storage medium provided by the present application, the calibration information and the corresponding encoding information, date information and regional information are acquired, the digital certificate corresponding to the calibration information is acquired according to the date information and the regional information, the calibration model file corresponding to the calibration information is established according to the calibration information, the encoding information and the digital certificate, and the calibration model file is sent, so that the authenticity, integrity and non-repudiation of the calibration result in the value traceability process can be ensured, and the effective date and the effective regional range of the calibration result can be embodied.

[0192] It should be noted that the above-mentioned order of the embodiments of the present application is only for description, and does not represent the advantages and disadvantages of the embodiments. The above-mentioned embodiments of the present application are described. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recorded in the claims can be executed in an order different from that in the embodiments and still achieve the desired results. In addition, the processes depicted in the drawings do not necessarily require the specific order or continuous order shown to achieve the desired results. In some embodiments, multi-task processing and parallel processing are possible or can be advantageous.

[0193] Each of the embodiments in the present specification is described in a progressive manner, and the same or similar parts of each of the embodiments can be referred to each other. Each of the embodiments mainly describes the differences from other embodiments. Especially, the device embodiments are described simply because they are basically similar to the method embodiments, and the relevant parts can be referred to the part of the description of the method embodiments.

[0194] Those skilled in the art can understand that all or part of the steps of the above-mentioned embodiments can be completed by hardware, or can be instructed by programs to complete the related hardware, and the programs can be stored in a computer readable storage medium. The storage medium mentioned above can be a read-only memory, a magnetic disk or an optical disk, etc.

[0195] The above is only a preferred embodiment of the present application, and is not used to limit the present application. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application shall be included in the protection scope of the present application.

Claims

1. A method of magnitude traceability, characterized in that, The method comprises: obtaining calibration information and encoding information, date information and regional information corresponding to the calibration information; obtaining a digital certificate corresponding to the calibration information according to the date information and the regional information; the digital certificate comprises the date information, the regional information and a second key; the step of obtaining the digital certificate corresponding to the calibration information according to the date information and the regional information comprises: generating a key pair corresponding to the calibration information; the key pair comprises a first key and the second key which match each other; the calibration information is a calibration result corresponding to a sensor; determining a certificate application file according to the second key, the date information and the regional information; the date information is a valid date of the calibration information; the regional information is a valid regional range of the calibration information; sending the certificate application file to a cloud platform; the cloud platform is configured to send the certificate application file to a public key infrastructure system, thereby applying for the digital certificate from the public key infrastructure system; receiving the digital certificate; the digital certificate comprises certificate data and a digital signature; the certificate data comprises the second key, the date information and the regional information; the digital signature is obtained by signing the certificate data by a third key by the public key infrastructure system; establishing a calibration model file corresponding to the calibration information according to the calibration information, the encoding information and the digital certificate; the calibration model file comprises digitally signed data and the digital certificate; sending the calibration model file.

2. The magnitude traceability method of claim 1, wherein, after the step of obtaining the digital certificate corresponding to the calibration information according to the date information and the regional information, the method further comprises: verifying the second key in the digital certificate according to the first key corresponding to the calibration information; if the first key matches the second key, determining that the verification is passed, and establishing a corresponding relationship between the digital certificate and the encoding information; the encoding information is a serial number corresponding to the sensor.

3. The magnitude traceability method of claim 1, wherein, the step of establishing the calibration model file of the calibration information according to the calibration information, the encoding information and the digital certificate comprises: determining data of the calibration model file according to the calibration information and the encoding information; digitally signing the data by the first key corresponding to the calibration information to obtain the digitally signed data; establishing the calibration model file corresponding to the calibration information according to the digitally signed data and the digital certificate.

4. The magnitude traceability method of claim 3, wherein, the step of digitally signing the data by the first key corresponding to the calibration information to obtain the digitally signed data comprises: performing a hash operation on the data to obtain a hash value of the data; encrypting the hash value of the data by the second key corresponding to the calibration information to obtain the digitally signed data.

5. A method of magnitude traceability, characterized in that, the method comprises: receiving a calibration model file; verifying a second key of a digital certificate in the calibration model file by a preset root certificate; the step of verifying the second key of the digital certificate in the calibration model file by the preset root certificate comprises: Hashing the certificate data in the digital certificate to obtain a first operation value; Decrypting the digital signature through a fourth key in the root certificate to obtain a second operation value; the fourth key matches the third key; If the first operation value and the second operation value match, it is determined that the second key passes the verification; If the second key passes the verification, the data message after the digital signature is verified through the second key; If the current date is within the date information, and the geographical information of the institution corresponding to the calibration information matches the region information, it is determined that the date information and the region information pass the verification, and the calibration information is imported. The verification of the data message after the digital signature through the second key includes:

6. The magnitude traceability method of claim 5, wherein, Hashing the data message after the digital signature to obtain a third operation value; Decrypting the data message after the digital signature through the second key to obtain a fourth operation value; If the third operation value and the fourth operation value match, it is determined that the data message after the digital signature passes the verification. The device includes:

7. A quantity value traceability device, characterized in that, An information acquisition module for acquiring calibration information and encoding information, date information and region information corresponding to the calibration information; A digital certificate establishment module for establishing a digital certificate corresponding to the calibration information according to the date information and the region information; The digital certificate establishment module is also used to generate a key pair corresponding to the calibration information; the key pair includes a first key and a second key that match each other; the calibration information is a calibration result corresponding to a sensor; a certificate application file is determined according to the second key, the date information and the region information; the date information is the valid date of the calibration information; the region information is the effective region range of the calibration information; the certificate application file is sent to a cloud platform; the cloud platform is used to send the certificate application file to a public key infrastructure system, thereby applying for the digital certificate from the public key infrastructure system; the digital certificate is received; the digital certificate includes certificate data and a digital signature; the certificate data includes the second key, the date information and the region information; the digital signature is obtained by signing the certificate data through a third key by the public key infrastructure system; A calibration model file establishment module for establishing a calibration model file corresponding to the calibration information according to the calibration information, the encoding information and the digital certificate; A calibration model file sending module for sending the calibration model file. The device includes:

8. A quantity value traceability apparatus, characterized in that, A file receiving module for receiving a calibration model file; A first verification module for verifying the second key of the digital certificate in the calibration model file through a preset root certificate; ​ The first verification module is further configured to perform a hash operation on certificate data in the digital certificate to obtain a first operation value, and decrypt a digital signature by using a fourth key in the root certificate to obtain a second operation value, wherein the fourth key matches the third key; and if the first operation value matches the second operation value, it is determined that the second key passes the verification. The second verification module is configured to, if the second key passes the verification, verify the data message after the digital signature by using the second key. The third verification module is configured to, if the data message after the digital signature passes the verification, verify date information and region information in the digital signature. The calibration information import module is configured to, if a current date is within the date information and geographical information of an institution corresponding to the calibration information matches the region information, determine that the date information and the region information pass the verification, and import the calibration information.

9. An electronic device, comprising: The electronic device includes a processor and a memory, and the memory stores at least one instruction or at least one program, and the at least one instruction or the at least one program is loaded and executed by the processor to implement the magnitude traceability method according to any one of claims 1-4 or 5-6.

10. A computer storage medium, characterized in that, The computer storage medium stores at least one instruction or at least one program, and the at least one instruction or the at least one program is loaded and executed by the processor to implement the magnitude traceability method according to any one of claims 1-4 or 5-6.

Images