A reliable safety device

Abstract

The present disclosure discloses a credible security device, including: a main control module, a human-computer interaction module, an encryption module, an Ethernet module, a power supply module, a gyroscope module, an electric control sucker, and an alarm module; wherein the electric control sucker is used to make the security device adsorbed on the object protected by the security device; the main control module is used to establish an association between the security device and the blockchain server; the main control module is also used to monitor whether the suction force of the electric control sucker is abnormal or whether the power supply is abnormal, and if abnormal, the alarm module is triggered; the gyroscope module monitors the moving speed of the security device and records it as the second information in the encryption module; and when the moving speed of the security device is greater than the first threshold, such as 1m / s, the main control module will lock the security device and trigger the alarm module. As a result, the present disclosure gives credible security capabilities to many traditional lockers or other security objects.

Description

Technical Field

[0001] The present disclosure belongs to the field of security, and in particular relates to a trust-based security device. Background Art

[0002] Safes are often used in the financial field or other fields for storing sensitive items. However, safes have the following main problems: they are too heavy and can be easily destroyed even if stolen. In the wider field of lockers, the cost is lower than that of safes.

[0003] The problem is that traditional lockers do not have any information and traceability capabilities. How to use external devices to reliably monitor and prevent loss without modifying them? How to use the latest information technology to further improve the security of traditional lockers has always been an urgent problem to be solved in low-cost storage of items. Summary of the invention

[0004] In view of this, the present disclosure discloses a reliable security device, including:

[0005] Main control module, human-computer interaction module, encryption module, Ethernet module, power supply module, gyroscope module, electric control sucker, and alarm module; among them,

[0006] The electrically controlled suction cup is used to allow the safety device to be attached to an object protected by the safety device;

[0007] The power supply module supplies power to the remaining modules of the safety device via the main control module;

[0008] The main control module is used to generate a public key and a private key according to an encryption algorithm, and save the public key and the private key in the encryption module;

[0009] The main control module is further used to establish communication with a CA authentication server outside the security device through an Ethernet module and an encryption module storing the public key and the private key, so that the CA authentication server issues a digital certificate for the security device; wherein the digital certificate is stored in the encryption module;

[0010] The main control module is further used to establish communication with a blockchain server outside the security device through an Ethernet module and an encryption module that stores the public key, the private key and the digital certificate, and send the user's access to the human-computer interaction module as the first information to the blockchain server, so that the blockchain server records the first information in the blockchain account book;

[0011] The main control module is also used to monitor whether the suction force of the electric control suction cup is abnormal or whether the power supply is abnormal. If abnormal, the alarm module is triggered;

[0012] The gyroscope module monitors the moving speed of the safety device and records it as the second information in the encryption module;

[0013] Furthermore, when the moving speed of the safety device is greater than a first threshold, such as 1 m / s, the main control module will lock the safety device and trigger the alarm module.

[0014] Preferably,

[0015] The human-computer interaction module includes a biometric feature recognition unit.

[0016] Preferably,

[0017] The human-computer interaction module includes any one of the following or a combination thereof: a fingerprint recognition unit and an iris recognition unit.

[0018] Preferably,

[0019] The information is also saved to the encryption module.

[0020] Preferably,

[0021] The encryption algorithm includes a national encryption algorithm, such as the SM2 algorithm.

[0022] Preferably,

[0023] The second information is recorded in the blockchain ledger by a blockchain server outside the security device via the main control module, the encryption module and the Ethernet module.

[0024] Preferably,

[0025] The security device starts the blockchain registration process by the following method:

[0026] S100, the main control module checks whether the encryption module has a public key, a private key and a digital certificate, and if not, performs blockchain registration;

[0027] S200, the main control module generates a public key and a private key of the security device according to the encryption algorithm and saves them;

[0028] S300, the main control module calculates the unique code of the security device and the intermediate hash value of the public key, and then signs the intermediate hash value with the private key;

[0029] S400, the main control module sends the unique code, public key and signature of the security device to a CA authentication server outside the security device via the Ethernet module;

[0030] S500, the CA authentication server outside the security device decrypts the signature using the received public key to obtain a first hash value, and then calculates the hash value according to the unique code and the public key to obtain a second hash value. If the first hash value is equal to the second hash value, the signature verification is successful, and,

[0031] The CA authentication server generates a digital certificate and calculates the hash value of the certificate, and then signs the hash value of the certificate with the private key of the CA authentication server to obtain the signature of the certificate;

[0032] The CA authentication server returns the digital certificate and the certificate signature, as well as the public key of the CA authentication server;

[0033] S600, the main control module uses the public key of the CA authentication server to decrypt the signature of the certificate to obtain a third hash value, and: obtain a fourth hash value by calculating the hash value of the digital certificate, if the third hash value is equal to the fourth hash value, it means that the digital certificate is valid;

[0034] S700, the main control module saves the valid digital certificate into the encryption module.

[0035] Preferably,

[0036] Any of the following codes is used as the unique code of the security device: a unique code of a main control module, a unique code of an encryption module, a unique code of a human-computer interaction module, and a unique code of an Ethernet module.

[0037] Preferably,

[0038] When the human-machine interaction module of the security device detects the user's biometric information through the fingerprint unit or iris unit, the user information is uploaded to the chain as follows:

[0039] S10, extracting biometric information of the user currently accessing the security device;

[0040] S20, calculating the hash value of the current user according to the biometric information and time;

[0041] S30, using the private key of the security device to sign the hash value of the current user;

[0042] S40, putting biometric information, time and signature on the chain;

[0043] S50. After the blockchain server outside the security device verifies the signature, the biometric information and time are recorded in the account book.

[0044] Through the above solution, the present disclosure significantly improves the safety and reliability of traditional lockers and other products during use. DETAILED DESCRIPTION

[0045] In order to make those skilled in the art understand the technical solutions disclosed in the present disclosure, the technical solutions of various embodiments will be described below in conjunction with the embodiments, and the described embodiments are part of the embodiments of the present disclosure, rather than all of the embodiments. The terms "first", "second", etc. adopted in the present disclosure are used to distinguish different objects, rather than to describe a specific order. In addition, "including" and "having" and any of their variations are intended to cover and not exclusively include. For example, a process, or method, or system, or product or device comprising a series of steps or units is not limited to the listed steps or units, but optionally also includes steps or units that are not listed, or optionally also includes other steps or units inherent to these processes, methods, systems, products or devices.

[0046] Reference to "embodiments" herein means that a particular feature, structure, or characteristic described in conjunction with the embodiments may be included in at least one embodiment of the present disclosure. The appearance of the phrase in various locations in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment that is mutually exclusive with other embodiments. It will be understood by those skilled in the art that the embodiments described herein may be combined with other embodiments.

[0047] In one embodiment, the present disclosure discloses a trusted security device, comprising:

[0048] Main control module, human-computer interaction module, encryption module, Ethernet module, power supply module, gyroscope module, electric control sucker, and alarm module; among them,

[0049] The electrically controlled suction cup is used to allow the safety device to be attached to an object protected by the safety device;

[0050] The power supply module supplies power to the remaining modules of the safety device via the main control module;

[0051] The main control module is used to generate a public key and a private key according to an encryption algorithm, and save the public key and the private key in the encryption module;

[0052] The main control module is further used to establish communication with a CA authentication server outside the security device through an Ethernet module and an encryption module storing the public key and the private key, so that the CA authentication server issues a digital certificate for the security device; wherein the digital certificate is stored in the encryption module;

[0053] The main control module is further used to establish communication with a blockchain server outside the security device through an Ethernet module and an encryption module that stores the public key, the private key and the digital certificate, and send the user's access to the human-computer interaction module as the first information to the blockchain server, so that the blockchain server records the first information in the blockchain account book;

[0054] The main control module is also used to monitor whether the suction force of the electric control suction cup is abnormal or whether the power supply is abnormal. If abnormal, the alarm module is triggered;

[0055] The gyroscope module monitors the moving speed of the safety device and records it as the second information in the encryption module;

[0056] Furthermore, when the moving speed of the safety device is greater than a first threshold, such as 1 m / s, the main control module will lock the safety device and trigger the alarm module.

[0057] Thus, through the above embodiments, the present disclosure implements a solution that combines blockchain technology with electric-controlled suction cups and traditional lockers, thereby improving the security and credibility of lockers through blockchain technology. This means that any operation and use traces of the device can be further verified through blockchain. In addition, since the encryption module stores the certificate, the security device can be used in a variety of other security interaction occasions. Considering that the security device is associated with the chain, this embodiment implements a safe and reliable blockchain-based security device.

[0058] It should be noted that the security device referred to in the present disclosure is not limited to household or commercial safes that are adsorbed on objects with touchable properties, but also includes: traditional lockers, and even all objects that can be adsorbed by the electric suction cup. In particular, when the electric suction cup is further miniaturized and miniaturized, it will be very convenient to adsorb it on any object that needs to be secured and prevent the object from being illegally moved. When the alarm module is working, it can send an alarm signal to the alarm platform through the Ethernet module.

[0059] In another embodiment,

[0060] The power supply module is used to convert AC power from the mains into DC power (e.g., convert 220V AC power into 3.3V DC power) to power the safety device system; when the external power supply is interrupted, it automatically switches to the internal battery or UPS power supply. It can be understood that when it is a miniaturized safety device, the power supply module itself can be implemented as a battery.

[0061] In another embodiment,

[0062] The security device can be connected to the human-computer interaction module through an Ethernet module by any external system or external interface of the security device, and the security device can be managed accordingly. For example, when the external interface is the corresponding interface of various Web Services, the security device can be used for various Web Services through the trusted and secure operation of the human-computer interaction module, thereby greatly improving the security of the security device and effectively managing the information of its users when interacting with the human-computer interaction module, including: biometric identification information, user ID information, etc. In order to further enhance the security in this situation, at this time, this management can be limited to the management of certain low-level risks, but cannot access items or information stored in the security device. Generally, it is not allowed to remotely set which users can move or disassemble the security device at this time. Typically, this remote management can be used for remote diagnosis of security devices, etc.

[0063] It can be understood that this helps to carry out hierarchical management of different personnel. No matter what type of user, they can interact with the safety device through the human-computer interaction module. However, remote interaction can only manage certain low-level risks.

[0064] In another embodiment,

[0065] The human-computer interaction module includes a biometric feature recognition unit.

[0066] In another embodiment,

[0067] The human-computer interaction module includes any one of the following or a combination thereof: a fingerprint recognition unit and an iris recognition unit.

[0068] In another embodiment,

[0069] The information is also saved to the encryption module.

[0070] In another embodiment,

[0071] The encryption algorithm includes a national encryption algorithm, such as the SM2 algorithm.

[0072] It can be understood that in addition to the SM2 algorithm, it can also be other national secret algorithms (such as SM3, SM4) or any other algorithms, etc.;

[0073] Furthermore, the second information can be further uploaded to the chain to enhance security, credibility and traceability. In another embodiment,

[0074] The second information is recorded in the blockchain ledger by a blockchain server outside the security device via the main control module, the encryption module and the Ethernet module.

[0075] In another embodiment,

[0076] The security device starts the blockchain registration process by the following method:

[0077] S100, the main control module checks whether the encryption module has a public key, a private key and a digital certificate, and if not, performs blockchain registration;

[0078] S200, the main control module generates a public key and a private key of the security device according to the encryption algorithm and saves them;

[0079] S300, the main control module calculates the unique code of the security device and the intermediate hash value of the public key, and then signs the intermediate hash value with the private key;

[0080] S400, the main control module sends the unique code, public key and signature of the security device to a CA authentication server outside the security device via the Ethernet module;

[0081] S500, the CA authentication server outside the security device decrypts the signature using the received public key to obtain a first hash value, and then calculates the hash value according to the unique code and the public key to obtain a second hash value. If the first hash value is equal to the second hash value, the signature verification is successful, and,

[0082] The CA authentication server generates a digital certificate and calculates the hash value of the certificate, and then signs the hash value of the certificate with the private key of the CA authentication server to obtain the signature of the certificate;

[0083] The CA authentication server returns the digital certificate and the certificate signature, as well as the public key of the CA authentication server;

[0084] S600, the main control module uses the public key of the CA authentication server to decrypt the signature of the certificate to obtain a third hash value, and: obtain a fourth hash value by calculating the hash value of the digital certificate, if the third hash value is equal to the fourth hash value, it means that the digital certificate is valid;

[0085] S700, the main control module saves the valid digital certificate into the encryption module.

[0086] In another embodiment,

[0087] Any of the following codes is used as the unique code of the security device: a unique code of a main control module, a unique code of an encryption module, a unique code of a human-computer interaction module, and a unique code of an Ethernet module.

[0088] In another embodiment,

[0089] When the human-machine interaction module of the security device detects the user's biometric information through the fingerprint unit or iris unit, the user information is uploaded to the chain as follows:

[0090] S10, extracting biometric information of the user currently accessing the security device;

[0091] S20, calculating the hash value of the current user according to the biometric information and time;

[0092] S30, using the private key of the security device to sign the hash value of the current user;

[0093] S40, putting biometric information, time and signature on the chain;

[0094] S50. After the blockchain server outside the security device verifies the signature, the biometric information and time are recorded in the account book.

[0095] It can be understood that the user's biometric information or its biometric information is mapped to another encrypted information or mapped to a user ID, which can be stored in advance in the encryption module or on the blockchain. Then, when the biometric information extracted from the human-computer interaction module matches the biometric information pre-stored in the encryption module or on the blockchain, or the other encrypted information or ID, and this meets the whitelist user, the security device allows disassembly and movement through the electric control suction cup, and allows the object adsorbed by the security device to be moved.

[0096] In another embodiment,

[0097] If a user ID is involved, the above step S20 can further calculate the hash value of the current user based on the biometric information, time and user ID; or, the above step S20 is replaced by: calculating the hash value of the current user based on time and user ID.

[0098] It can be understood that the former is more secure because the hash value is calculated based on biometric information, time, and user ID, while the latter sacrifices some security because the hash value is calculated based on time and user ID.

[0099] Those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions, modules, and units involved are not necessarily required for the present invention.

[0100] In the above embodiments, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0101] In several embodiments provided in the present disclosure, it should be understood that the disclosed security device, when it is a memory for storing digital information, can be implemented as a corresponding functional unit, a processor or even a system, wherein the various parts of the system can be located in one place or distributed on multiple network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the scheme of this embodiment. In addition, each functional unit can be integrated in a processing unit, or each unit can exist separately, or two or more units can be integrated in one unit. The above-mentioned integrated unit can be implemented in the form of hardware or in the form of a software functional unit. If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on such an understanding, the technical solution of the present disclosure is essentially or partly contributed to the prior art or all or part of the technical solution can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions to enable a computer device (which can be a smart phone, a personal digital assistant, a wearable device, a laptop, a tablet computer) to perform all or part of the steps of the method described in each embodiment of the present disclosure. The aforementioned storage media include: U disk, read-only memory (ROM), random access memory (RAM), mobile hard disk, magnetic disk or CD-ROM and other media that can store program code, and are not limited to different interfaces or transmission methods such as USB, Bluetooth or audio.

[0102] As described above, the above embodiments are only used to illustrate the technical solutions of the present disclosure, rather than to limit them. Although the present disclosure has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the scope of the technical solutions of the embodiments of the present disclosure.

Claims

1. A reliable security device, comprising: Main control module, human-computer interaction module, encryption module, Ethernet module, power supply module, gyroscope module, electric control sucker, and alarm module; among them, The electrically controlled suction cup is used to allow the safety device to be attached to an object protected by the safety device; The main control module is used to establish an association between the security device and the blockchain server; The main control module is also used to monitor whether the suction force of the electric control suction cup is abnormal or whether the power supply is abnormal. If abnormal, the alarm module is triggered; The gyroscope module monitors the moving speed of the safety device and records it as the second information in the encryption module; Furthermore, when the moving speed of the safety device is greater than the first threshold, the main control module will lock the safety device and trigger the alarm module; in, The security device starts the blockchain registration process by the following method: S100, the main control module checks whether the encryption module has a public key, a private key and a digital certificate, and if not, performs blockchain registration; S200, the main control module generates a public key and a private key of the security device according to the encryption algorithm and saves them; S300, the main control module calculates the unique code of the security device and the intermediate hash value of the public key, and then signs the intermediate hash value with the private key; S400, the main control module sends the unique code, public key and signature of the security device to a CA authentication server outside the security device via the Ethernet module; S500, the CA authentication server outside the security device decrypts the signature using the received public key to obtain a first hash value, and then calculates the hash value according to the unique code and the public key to obtain a second hash value. If the first hash value is equal to the second hash value, the signature verification is successful, and, The CA authentication server generates a digital certificate and calculates the hash value of the certificate, and then signs the hash value of the certificate with the private key of the CA authentication server to obtain the signature of the certificate; The CA authentication server returns the digital certificate and the certificate signature, as well as the public key of the CA authentication server; S600, the main control module uses the public key of the CA authentication server to decrypt the signature of the certificate to obtain a third hash value, and: obtain a fourth hash value by calculating the hash value of the digital certificate, if the third hash value is equal to the fourth hash value, it means that the digital certificate is valid; S700, the main control module saves the valid digital certificate into the encryption module; in, The human-computer interaction module includes: a fingerprint recognition unit and an iris recognition unit; When the human-machine interaction module of the security device detects the user's biometric information through the fingerprint recognition unit or the iris recognition unit, the user information is uploaded to the chain as follows: S10, extracting biometric information of the user currently accessing the security device; S20, calculating the hash value of the current user according to the biometric information and time; S30, using the private key of the security device to sign the hash value of the current user; S40, putting biometric information, time and signature on the chain; S50, after the blockchain server outside the security device verifies the signature, the biometric information and time are recorded in the account book; in, The user information is also stored in the encryption module; The encryption algorithm includes a national encryption algorithm.