An authorization management method and intelligent controller based on security chip

Abstract

The present invention relates to an authorization management method and intelligent controller based on a security chip. The intelligent controller is used to independently authorize and protect the algorithms provided by algorithm suppliers, and at the same time, implement authorization protection for the programs assembled by calling the algorithms during downloading and running. The intelligent controller includes: a second area and a data area; the first area is used to store authorization information and private keys, the authorization information is information generated by each algorithm supplier and associated with the attributes of the intelligent controller, and is used to implement the authorization verification feature of the algorithm supplier; the data area is used to store the algorithms provided by the algorithm supplier and the user programs assembled by the implementer; and authorization verification is performed based on the private key and authorization information during the process of downloading / running the user program. The intelligent controller of the present invention can effectively prevent the algorithms of the user programs inside the intelligent controller from being tampered with arbitrarily, solving the technical problem in the prior art that the security of each algorithm is weak and easy to be cracked, thereby leaking the code logic.

Description

Technical Field

[0001] The present invention relates to the technical field of industrial intelligent control, and in particular to an authorization management method and an intelligent controller based on a security chip. Background Art

[0002] In the field of industrial control, the intelligent optimization control of a factory, a workshop, or a core device generally requires expert knowledge from multiple parties such as factory operation experts, research institute experts, core device manufacturers, and DCS manufacturers. Only by converting expert knowledge into software functions through coding and other means can optimal intelligent control be achieved.

[0003] Currently, intelligent optimization control generally provides C++ / Python high-level language to write optimization algorithms. Algorithms written in C++ are generally compiled into dll / so binary files. The security of the code logic can be guaranteed, but algorithm suppliers are worried that the intellectual property rights of the algorithms cannot be protected. They hope to have a mechanism to ensure that the algorithms are not stolen, and that the algorithms can only run on designated devices authorized by the provider, breaking the concerns of users who cooperate with algorithm platforms.

[0004] On the other hand, Python, as a scripting language, generally uses encryption and obfuscation for security protection, but this method is relatively weak and can be easily cracked, thereby leaking code logic. Furthermore, pure software protection alone is also somewhat insufficient.

[0005] Therefore, there is an urgent need to provide an authorization management method and authorization system based on a security chip to provide security guarantees for users of all parties involved. Summary of the Invention

[0006] (1) Technical issues to be solved

[0007] In view of the above-mentioned shortcomings and deficiencies of the prior art, the present invention provides an authorization management method and an intelligent controller based on a security chip.

[0008] (2) Technical solution

[0009] In order to achieve the above objectives, the main technical solutions adopted by the present invention include:

[0010] In a first aspect, an embodiment of the present invention provides an intelligent controller for independently authorizing and protecting algorithms provided by algorithm vendors, while also implementing authorization protection for programs assembled by calling the algorithms during downloading and execution. The intelligent controller includes: a first area and a second area;

[0011] The first area is used to store authorization information and a private key. The private key is a key generated based on the attributes of the intelligent controller and is used to decrypt algorithms provided by multiple algorithm suppliers or user programs of implementers. The authorization information is information generated by each algorithm supplier and associated with the attributes of the intelligent controller, and is used to implement the authorization verification feature of the algorithm supplier.

[0012] The second area is used as a data area to store algorithms provided by algorithm suppliers and user programs assembled by implementers;

[0013] The intelligent controller performs authorization verification based on the private key and authorization information during the process of downloading / running the user program.

[0014] Optionally, the authorization information and private key are stored as security information in an independent security chip, and the security chip is arranged in the first area; the security chip is a third-party chip of an independent algorithm supplier, hardware controller, or implementer;

[0015] And / or, the attributes of the intelligent controller include: a physical serial number of the intelligent controller.

[0016] Optionally, the authorization information includes: algorithm vendor name, algorithm name, MD5 digest, and permitted algorithm instance information;

[0017] The public key corresponding to the private key is the encryption information used by each algorithm vendor during the algorithm development process;

[0018] The algorithm developed by the algorithm supplier can be called by the algorithm calling program in the hardware controller, and the user program assembled based on the algorithm complies with the port protocol of the intelligent controller.

[0019] Optionally, the algorithm developed by the algorithm supplier is a .dll / .so binary file developed by calling SDK based on C / C++ / Python, and is encrypted and packaged into a .pcuz file using the public key;

[0020] The user program is a program assembled by the implementer based on the algorithm developed by the algorithm supplier and predefined bit numbers.

[0021] In a third aspect, an embodiment of the present invention further provides an industrial device, comprising: an intelligent controller as described in any one of the first aspects above, based on the intelligent controller, when downloading and running a user program, the intelligent controller executes the steps of a security chip-based authorization management method as described in any one of the second aspects above.

[0022] (3) Beneficial effects

[0023] The intelligent controller of the present invention can effectively prevent the algorithm required to be called by the user program inside the intelligent controller from being tampered with at will, that is, it can effectively prevent the .dll / .so binary file to which the algorithm belongs from being tampered with, thereby solving the technical problem in the prior art that the algorithms have weak security and are easily cracked, thereby leaking the code logic.

[0024] In addition, the intelligent controller of the present invention can be a hardware controller with an added security chip inside. The security chip can encrypt and store the authorization information and encryption and decryption information of multiple algorithms from multiple manufacturers (i.e., suppliers), effectively supporting the needs of multi-algorithm supplier integrated applications and providing trusted hardware-level protection.

[0025] In the authorization management method, the user program assembled by the configuration software can be verified and authorized when it is downloaded to the hardware controller. At the same time, the user program can further verify and authorize when it is running in the hardware controller, effectively ensuring security.

[0026] The security chip of this embodiment can be independently provided by a trusted third party, and the private key and authorization information are stored in the security chip to achieve independent authorization. Furthermore, the algorithm provider can use the encryption packaging tool of the SDK of the smart controller to use a symmetric encryption algorithm and MD5 summary technology to encrypt the algorithm's .dll / .so binary file and record the summary to prevent the algorithm from being tampered with and ensure security. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] Figure 1 A relationship diagram of various roles associated with an intelligent controller provided in one embodiment of the present invention;

[0028] Figure 2 A schematic diagram of the process of algorithm development by an algorithm supplier according to an embodiment of the present invention;

[0029] Figures 3 to 5 Each of them is a schematic diagram of an authorization management method based on a security chip provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0030] In order to better explain the present invention and facilitate understanding, the present invention is described in detail below through specific implementation methods in conjunction with the accompanying drawings.

[0031] In the embodiments of the present invention, the intelligent controller, hardware controller and controller all have the same meaning. For better description, different words are used in different places.

[0032] The algorithm supplier in this embodiment is the manufacturer that develops the algorithm and provides the algorithm;

[0033] The implementer / implementation engineer / implementation personnel (on-site implementation manufacturer) is an implementation engineer who purchases algorithms from different algorithm suppliers. He or she can install configuration software in his or her own equipment to assemble user programs. His or her own equipment can be any computer, and the configuration software is software developed together with the receipt of the hardware controller to achieve communication connection with the hardware controller.

[0034] The hardware controller can be developed by a single platform / platform company, and it includes the SDK, configuration software, and hardware controller for algorithm development. It is different from the manufacturer of the hardware controller's security chip, which is an independent third party, independent of the algorithm supplier, on-site implementation manufacturer, and the platform that develops the hardware controller.

[0035] Example 1

[0036] like Figures 1 to 3 As shown, this embodiment provides an intelligent controller, which can be a hardware controller. The intelligent controller is used to independently authorize and protect the algorithm provided by the algorithm supplier, and to implement authorization protection for the program assembled by calling the algorithm during downloading and running. The intelligent controller includes: a first area and a second area;

[0037] The first area is used to store authorization information and a private key. The private key is a key generated based on the attributes of the intelligent controller and is used to decrypt algorithms provided by multiple algorithm suppliers or user programs of implementers. The authorization information is information generated by each algorithm supplier and associated with the attributes of the intelligent controller, and is used to implement the authorization verification feature of the algorithm supplier.

[0038] The second area is used as a data area to store the algorithm provided by the algorithm supplier and the user program assembled by the implementer; the intelligent controller performs authorization verification based on the private key and authorization information during the process of downloading / running the user program.

[0039] In this embodiment, the authorization information and private key are stored as security information in an independent security chip, and the security chip is set in the first area; the security chip is a third-party chip of an independent algorithm supplier, hardware controller, or implementer, such as Figure 3 shown.

[0040] In this embodiment, the attributes of the intelligent controller include: the physical serial number of the intelligent controller. In practical applications, the attributes of the intelligent controller may include: the physical serial number of the intelligent controller and the physical serial number (serial number) of the security chip.

[0041] The authorization information of this embodiment may include: algorithm vendor name, algorithm name, MD5 digest, and allowed algorithm instance information.

[0042] The public key corresponding to the above private key is the encryption information used by each algorithm supplier during the algorithm development process; usually, the authorization file distributed by the algorithm manufacturer / algorithm supplier is encrypted according to the public key corresponding to the serial number of the security chip, and only the private key in this security chip can decrypt it.

[0043] The algorithm developed by the algorithm supplier can be called by the algorithm calling program in the hardware controller, and the user program assembled based on the algorithm complies with the port protocol of the intelligent controller.

[0044] In this embodiment, the algorithm developed by the algorithm supplier can be a .dll / .so binary file developed based on C / C++ / Python calling SDK, and can be packaged into a .pcuz file using symmetric encryption.

[0045] It's understood that each algorithm vendor provides an algorithm that calls the security chip's algorithm encryption information and authorization information, compiled into a .dll / .so binary file, which is then encrypted and packaged into a .pcuz file. Authorization information can be encrypted using asymmetric encryption, while the .pcuz file can be encrypted using symmetric encryption. This encryption is added by the algorithm developer during the code development process.

[0046] The user program is a program assembled by the implementer based on the algorithm developed by the algorithm supplier and predefined bit numbers.

[0047] like Figure 1 As shown in the figure, the hardware controller manufacturer, acting as the platform provider, provides an algorithm development SDK, which includes a security chip SDK provided by a trusted third-party security chip manufacturer. The hardware controller installs a security chip, which allocates storage areas for authorization information from 32 algorithm manufacturers. In practice, however, the security chip may not be limited to storing authorization information from all 32 algorithm manufacturers and may be configured based on actual needs.

[0048] The algorithm supplier first uses the SDK provided by the hardware controller manufacturer to write the algorithm. For example, based on the C / C++ / Python language, the code is compiled into .dll / .so, which is called the algorithm dynamic library, or algorithm file / algorithm executable file, and the authorization verification function of the security chip SDK is called in the code; it is compiled into a .dll / .so binary file, and then the packaging tool of the algorithm development SDK is run to encrypt and package the .pcuz file, such as Figure 2 shown.

[0049] The user program can be a user program that is assembled graphically in the configuration software installed by the implementer in his own equipment. That is, the algorithm file on the algorithm supply is imported into the configuration software and combined with the bit number to assemble it into a user program.

[0050] It is understandable that the actual intelligent controller is pre-installed with relevant auxiliary information, such as the algorithm scheduler and pre-defined interface information (this interface information is used to enable algorithm vendors to develop algorithms that comply with the interface protocol). SDK (Software Development Kit) is a software development kit that contains header files and dependent dynamic libraries. The algorithm SDK includes a security chip API. When algorithm engineers write algorithms, they call this API to determine whether the algorithm instance is authorized at runtime. The security chip SDK can be understood as: the security chip manufacturer provides authorization writing tools, authorization acquisition API, and authorization verification API.

[0051] The intelligent controller of this embodiment can implement multiple security strategies that combine software and hardware. For example, by encrypting and packaging the algorithm and installing a security chip in the controller, the user program can identify that the authorization is illegal when downloading it; even if the download function is cracked, the algorithm can communicate with the security chip during operation to efficiently identify whether the authorization is legal, thereby effectively protecting the assets of the algorithm supplier and providing security guarantees for multiple algorithm suppliers to cooperate in solving intelligent control scenarios.

[0052] Example 2

[0053] The embodiment of the present invention provides an authorization management method based on a security chip, wherein the authorization management method is a management method for the intelligent controller to download and / or run the user program stored in the intelligent controller, combined with Figures 4 and 5 As shown, the authorization management method based on the security chip of this embodiment may include the following steps:

[0054] S01. When the configuration software of the implementer assembles and downloads the user program, the user program to be downloaded is verified based on the authorization information and private key of the intelligent controller.

[0055] In this embodiment, the configuration software communicates with the intelligent controller; the configuration software is located in a device independent of the intelligent controller, which can be any device of the implementer. Typically, the configuration software is developed by the manufacturer of the hardware controller, that is, the platform company.

[0056] It is understandable that in one scenario, after the configuration software assembles the user program, it calls the authorization information and private key of the intelligent controller, verifies the user program to be downloaded based on the authorization information and private key of the called intelligent controller, and when the verification passes, initiates a download request to the intelligent controller.

[0057] In another scenario, after the configuration software assembles the user program, it initiates a download request to the intelligent controller. After the intelligent controller receives the downloaded user program, it verifies the user program based on the authorization information and private key, and stores it if the verification passes, otherwise deletes it.

[0058] S02. If the verification is passed, the download is completed and stored in the intelligent controller; if the verification is not passed, the download may not be performed.

[0059] The intelligent controller may be the intelligent controller described in Example 1. This intelligent controller can be a carrier for running user programs and algorithms, and can collect bit number data, receive downloaded user programs, and run user programs. Bit number is a well-known concept in the industrial field. It can be a switching value or an analog value, and is not described in detail in this example.

[0060] From this, we can see that when the user program is downloaded to the intelligent controller, the private key and authorization information of the security chip are used to verify whether the algorithm instance used by the user program is authorized and whether the number of algorithm instances is within the authorized range, thereby ensuring the security of the user program download.

[0061] In this embodiment, based on Figure 1 It can be seen that the algorithm supplier who develops the algorithm, the third party who provides the security chip, and the implementer who assembles the user program can all be independent of each other and do not communicate with each other; by integrating the intelligent controller of this embodiment, the security of the algorithm provided by the algorithm supplier can be achieved, and the algorithm can be effectively guaranteed not to be tampered with during the implementation process, and verification authorization can be achieved when the user program is downloaded and run to ensure the independent intellectual property rights of the algorithm.

[0062] Furthermore, the above method may further include:

[0063] S03. During the process of executing the user program stored in the intelligent controller, the algorithm scheduling program of the intelligent controller performs self-verification according to the authorization information and private key of the intelligent controller when the algorithm instance in the user program is executed. If the verification passes, the algorithm instance is executed. If the verification fails, an alarm message is issued.

[0064] It should be noted that the intelligent controller is the intelligent controller in Example 1. The intelligent controller stores a user program consisting of algorithm instances. The authorization information can be verified during the download and storage process and the algorithm instance operation process, which improves security. At the same time, the algorithm supplier can call the verification of the authorization information during the algorithm writing process, effectively protecting the intellectual property rights of the algorithm supplier.

[0065] exist Figure 4The figure shows the authorization management process for downloading algorithms in the hardware controller. When the implementer writes and downloads the user program in the configuration software, the SDK of the security chip in the hardware controller can be called to obtain the authorization content and calculate the MD5 digest of the .pcuz file to determine whether it is consistent with the MD5 digest in the authorization content. If consistent, the number of algorithm instances used by the user program is further compared with the authorization content to determine whether it exceeds the limit. If it does not exceed the limit, the algorithm code is downloaded and assembled into a user program for storage in the hardware controller.

[0066] like Figure 3 and Figure 5 As shown, for Figure 3 The hardware controller shown in the figure has an algorithm scheduler in which each algorithm instance is loaded, such as algorithm n.Calc. At this time, the security chip SDK.CheckSecurity is called for verification. If the verification passes, the calculation is performed; otherwise, the calculation is exited and an alarm may be issued.

[0067] For example, if an algorithm vendor provides an addition algorithm, the vendor should include authorization verification code before executing the addition. For example, authorization verification can be added to the algorithm initialization function. This way, verification is only triggered the first time the algorithm is called, improving performance. Authorization verification APIs are provided by the security chip manufacturer, such as the CheckSecurity() function.

[0068] In this embodiment, the optimized control implementation manufacturer purchases algorithm licenses from multiple algorithm vendors and writes the licenses into the security chip in the hardware controller. The implementer, or personnel, assembles a user program based on the algorithm and bit number and downloads the program to the controller. The configuration software first checks the MD5 digest of the .pcuz file to prevent algorithm tampering. The configuration software then verifies the algorithm license. If the algorithm instance used in the user program is unauthorized or exceeds the authorized number of instances, the download is prohibited.

[0069] When the user program runs on the hardware controller, it first calls the algorithm instance that the user program relies on, directly calling the authorization information provided by the security chip, accessing the security chip in a trusted manner. If the authorization check fails, the calculation is aborted, thus invalidating the algorithm.

[0070] In this embodiment, four security strategies, including .pcuz encryption packaging, proprietary hardware protection of authorization files, user program download protection, and controller operation process protection, effectively guarantee the security of the algorithm and ensure that the algorithm can only be run on designated devices authorized by the provider.

[0071] In particular, when the configuration software downloads the user program to the controller, it automatically calculates the algorithm summary and compares the summary with the summary in the authorization file in the security chip to prevent the algorithm from being tampered with. In addition, the number of algorithm instances used in the user program is compared with the authorization file. If it is not authorized or the number of authorized instances is exceeded, the download is prohibited.

[0072] Example 3

[0073] This embodiment provides an industrial device, comprising: an intelligent controller as described in any one of the above-mentioned embodiments 1, wherein when downloading and running a user program based on the intelligent controller, the intelligent controller executes the steps of the security chip-based authorization management method as described in any one of the above-mentioned embodiments 2.

[0074] It should be noted that, in the claims, any reference signs placed between brackets shall not be construed as limiting the claims. The word "comprising" does not exclude the presence of components or steps not listed in the claims. The word "a" or "an" preceding a component does not exclude the presence of a plurality of such components. The invention may be implemented by means of hardware comprising several different components and by means of a suitably programmed computer. In claims enumerating several means, several of these means may be embodied by one and the same hardware. The use of the words first, second, third etc. is for convenience only and does not indicate any order. These words may be understood as part of the component name.

[0075] In addition, it should be noted that, in the description of this specification, the description of the terms "one embodiment", "some embodiments", "embodiment", "example", "specific example" or "some examples" means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic expressions of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described can be combined in any one or more embodiments or examples in a suitable manner. In addition, those skilled in the art can combine and combine different embodiments or examples described in this specification and the features of different embodiments or examples, unless they are contradictory.

[0076] Although the preferred embodiments of the present invention have been described, those skilled in the art may make additional changes and modifications to these embodiments after learning the basic creative concept. Therefore, the claims should be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the present invention.

[0077] Obviously, those skilled in the art may make various modifications and variations to the present invention without departing from the spirit and scope of the present invention. Thus, if such modifications and variations fall within the scope of the claims and their equivalents, the present invention shall also include such modifications and variations.

Claims

1. An intelligent controller, characterized in that: The intelligent controller is used to independently authorize and protect the algorithms provided by the algorithm supplier, and to implement authorization protection for the user programs assembled by the algorithms during downloading and running. The intelligent controller includes: a first area and a second area; The first area is used to store authorization information and a private key. The private key is a key generated based on the attributes of the intelligent controller and is used to decrypt algorithms provided by multiple algorithm suppliers or user programs of implementers. The authorization information is information generated by each algorithm supplier and associated with the attributes of the intelligent controller, and is used to implement the authorization verification feature of the algorithm supplier. The second area is used as a data area to store algorithms provided by algorithm suppliers and user programs assembled by implementers; The intelligent controller performs authorization verification based on the private key and authorization information during the process of downloading / running the user program, including verifying the user program to be downloaded based on the authorization information and private key of the intelligent controller when the configuration software of the implementer assembles and downloads the user program; if the verification passes, the download is completed and stored in the intelligent controller; During the process of the algorithm calling program of the intelligent controller running the user program stored in the intelligent controller, based on the authorization information and private key of the intelligent controller, the algorithm instance in the user program is self-verified when it runs, and if the verification passes, it is executed; wherein, the attributes of the intelligent controller include: the physical serial number of the intelligent controller and the physical serial number of the security chip; the security chip is used to store the authorization information and private key.

2. The intelligent controller according to claim 1, characterized in that: The security chip is arranged in the first area; the security chip is a third-party chip of an independent algorithm supplier, an intelligent controller, or an implementer.

3. The intelligent controller according to claim 1, characterized in that: The authorization information includes: algorithm vendor name, algorithm name, MD5 digest, and permitted algorithm instance information; The public key corresponding to the private key is the encryption information used by each algorithm vendor during the algorithm development process; The algorithm developed by the algorithm supplier can be called by the algorithm calling program in the intelligent controller, and the user program assembled based on the algorithm complies with the port protocol of the intelligent controller.

4. The intelligent controller according to claim 3, characterized in that: The algorithm developed by the algorithm supplier is a .dll / .so binary file developed by calling SDK based on C / C++ / Python, and is packaged into a .pcuz file using symmetric encryption; The user program is a program assembled by the implementer based on the algorithm developed by the algorithm supplier and predefined bit numbers.

5. A security chip-based authorization management method, characterized in that: The authorization management method is a method for managing the downloading and / or running of a user program stored in the intelligent controller by the intelligent controller; wherein the attributes of the intelligent controller include: a physical serial number of the intelligent controller and a physical serial number of a security chip; the security chip is used to store the authorization information and a private key, and the method includes: S01. When the configuration software of the implementer assembles and downloads a user program, the user program to be downloaded is verified based on the authorization information and private key of the intelligent controller; the configuration software communicates with the intelligent controller; the configuration software is located in a device independent of the intelligent controller; S02. If the verification passes, the download is completed and stored in the intelligent controller; The intelligent controller is the intelligent controller according to any one of claims 1 to 4; S03. During the process of the algorithm calling program of the intelligent controller running the user program stored in the intelligent controller, the algorithm instance in the user program is self-verified according to the authorization information and private key of the intelligent controller. If the verification passes, the algorithm instance is executed.

6. The authorization management method according to claim 5, characterized in that: The S01 includes: After the configuration software assembles the user program, it calls the authorization information and private key of the intelligent controller, verifies the user program to be downloaded based on the called authorization information and private key of the intelligent controller, and starts a download request to the intelligent controller when the verification passes.

7. The authorization management method according to claim 5, characterized in that: The S01 includes: After the configuration software completes assembling the user program, it starts a download request to the intelligent controller. After receiving the downloaded user program, the intelligent controller verifies the user program based on the authorization information and the private key, and stores it if the verification passes, otherwise deletes it.

8. An industrial device, characterized in that: include: The intelligent controller described in any one of claims 1 to 4 above, when downloading and running a user program based on the intelligent controller, executes the steps of a security chip-based authorization management method described in any one of claims 5 to 7 above.

Images