A data interaction method and system for a platen status monitoring module

Abstract

The present invention discloses a data interaction method and system for a platen status monitoring module, including: issuing security chips in the platen status monitoring module and the convergence terminal, determining the platen status monitoring module ID, session establishment root key Key1, and session interaction root key Key2; establishing a session between the platen status monitoring module and the convergence terminal based on the platen status monitoring module ID and session establishment root key Key1; when the session is successfully established, the platen status monitoring module determines the session interaction key based on the session interaction root key Key2; the platen status monitoring module encrypts the reported data based on the session interaction key, and sends the encrypted reported data ciphertext to the convergence terminal. The present invention implements end-to-end communication identity authentication and data encryption between the platen status monitoring device and the wireless convergence node, reduces the risk of platen information being attacked or tampered with during transmission, and solves the information security problem of the platen status monitoring module accessing the convergence terminal through wireless communication.

Description

Technical Field

[0001] The present invention relates to the field of information and communication technology, and more particularly, to a data interaction method and system for a pressure plate status monitoring module. Background Art

[0002] The substation hard pressure plate is a manual disconnecting and closing device. It is the bridge and link between the substation relay protection and safety automatic devices and the external secondary circuit wiring. The operation and maintenance operators need to put the hard pressure plate in or out of operation according to the actual operation needs. Due to the multiple work procedures and excessive reliance on manual judgment, the pressure plate may be mis-engaged or missed, which directly affects the function of the device and whether the action outlet can operate normally, posing a safety hazard to the power grid equipment. For this reason, the operating unit deploys a pressure plate status monitoring system in the substation.

[0003] The pressure plate online monitoring system, deployed within the substation, provides online monitoring of the hard pressure plate status. It consists of a pressure plate status monitoring module, a pressure plate status monitoring convergence terminal, and a management unit. To ensure the legality of device access and data transmission security, a security chip is built into the pressure plate monitoring module and convergence terminal.

[0004] However, how to achieve safe and efficient data interaction between the platen status monitoring module and the aggregation terminal is an urgent problem to be solved. Summary of the Invention

[0005] The present invention proposes a data interaction method and system for a platen status monitoring module to solve the problem of how to safely and efficiently implement the interaction between the platen status monitoring module and a convergence terminal.

[0006] In order to solve the above problem, according to one aspect of the present invention, a data interaction method of a platen status monitoring module is provided, the method comprising:

[0007] Issue the security chips in the platen status monitoring module and the convergence terminal, and determine the platen status monitoring module ID, session establishment root key Key1, and session interaction root key Key2;

[0008] Establishing a session between the platen status monitoring module and the aggregation terminal based on the platen status monitoring module ID and the session establishment root key Key1;

[0009] When the session is successfully established, the platen status monitoring module determines the session interaction key based on the session interaction root key Key2;

[0010] The pressure plate status monitoring module encrypts the reported data based on the session interaction key, and sends the encrypted ciphertext of the reported data to the convergence terminal.

[0011] Preferably, the establishing of a session between the platen status monitoring module and the convergence terminal based on the platen status monitoring module ID and the session establishment root key Key1 includes:

[0012] The convergence terminal obtains the platen status monitoring module ID, and disperses the session establishment root key Key1 based on the platen status monitoring module ID to obtain the dispersed session establishment key Key1′;

[0013] The convergence terminal generates a session factor R1, encrypts the session factor R1 based on the session establishment key Key1′, obtains first encrypted data, and sends it to the pressure plate monitoring module;

[0014] The platen status monitoring module decrypts the root key Key1 established based on the session to obtain the session factor R1;

[0015] The platen status monitoring module randomly generates a session factor R2, and encrypts R2+R1 based on the session establishment key Key1, obtains the second encrypted data, and sends it to the convergence terminal;

[0016] The convergence terminal decrypts the second encrypted data based on the session establishment key Key1′ to obtain R1′+R2′;

[0017] The convergence terminal verifies whether R1′ is consistent with R1, and when the verification result is consistent, the session is successfully established.

[0018] Preferably, when the session is successfully established, the platen status monitoring module determines the session interaction key based on the session interaction root key Key2, including:

[0019] The convergence terminal encrypts the convergence terminal session interaction root key Key2 using the session factor R2+R1, obtains the third encrypted data, and sends it to the pressure plate status monitoring module;

[0020] The pressure plate status monitoring module receives the third encrypted data, and uses the session factor R2+R1 to decrypt the third encrypted data to obtain the session interaction root key Key2, and uses the pressure plate monitoring module ID to disperse the session interaction root key Key2 to obtain the dispersed session interaction key Key2′.

[0021] Preferably, the platen status monitoring module encrypts the reported data based on the session interaction key and sends the encrypted reported data ciphertext to the convergence terminal, including:

[0022] The platen status monitoring module uses the dispersed session interaction key Key2′ to encrypt the reported data and perform MAC calculation, and sends the encrypted ciphertext of the reported data to the aggregation terminal.

[0023] Preferably, the method further comprises:

[0024] The convergence terminal uses the pressure plate monitoring module ID to disperse the session interaction root key Key2, obtains the dispersed session interaction key Key2′, and after receiving the reported data ciphertext, decrypts the reported data ciphertext based on the session interaction key Key2′ to obtain the reported data plaintext.

[0025] According to another aspect of the present invention, a data interaction system for a platen status monitoring module is provided, the system comprising:

[0026] Issuing unit, used to enable the security chip in the pressure plate status monitoring module and the convergence terminal to issue, determine the pressure plate status monitoring module ID, session establishment root key Key1 and session interaction root key Key2;

[0027] A session establishing unit, configured to establish a session between the platen status monitoring module and the convergence terminal based on the platen status monitoring module ID and the session establishment root key Key1;

[0028] a session interaction key determining unit, configured to enable the platen status monitoring module to determine the session interaction key based on the session interaction root key Key2 when the session is successfully established;

[0029] The data interaction unit is used to enable the pressure plate status monitoring module to encrypt the reported data based on the session interaction key, and send the encrypted ciphertext of the reported data to the convergence terminal.

[0030] Preferably, the session establishing unit establishes a session between the platen status monitoring module and the convergence terminal based on the platen status monitoring module ID and the session establishment root key Key1, including:

[0031] The convergence terminal obtains the platen status monitoring module ID, and disperses the session establishment root key Key1 based on the platen status monitoring module ID to obtain the dispersed session establishment key Key1′;

[0032] The convergence terminal generates a session factor R1, encrypts the session factor R1 based on the session establishment key Key1′, obtains first encrypted data, and sends it to the pressure plate monitoring module;

[0033] The platen status monitoring module decrypts the root key Key1 established based on the session to obtain the session factor R1;

[0034] The platen status monitoring module randomly generates a session factor R2, and encrypts R2+R1 based on the session establishment key Key1, obtains the second encrypted data, and sends it to the convergence terminal;

[0035] The convergence terminal decrypts the second encrypted data based on the session establishment key Key1′ to obtain R1′+R2′;

[0036] The convergence terminal verifies whether R1′ is consistent with R1, and when the verification result is consistent, the session is successfully established.

[0037] Preferably, the session interaction key determination unit, when the session is successfully established, enables the platen status monitoring module to determine the session interaction key based on the session interaction root key Key2, including:

[0038] The platen status monitoring module receives the third encrypted data, decrypts the third encrypted data using the session factor R2+R1 to obtain the session interaction root key Key2, and disperses the session interaction root key Key2 using the platen monitoring module ID to obtain the dispersed session interaction key Key2′;

[0039] The convergence terminal encrypts the convergence terminal session interaction root key Key2 using the session factor R2+R1, obtains third encrypted data, and sends the third encrypted data to the pressure plate status monitoring module.

[0040] Preferably, the data interaction unit enables the platen status monitoring module to encrypt the reported data based on the session interaction key and sends the encrypted reported data ciphertext to the convergence terminal, including:

[0041] The platen status monitoring module uses the dispersed session interaction key Key2′ to encrypt the reported data and perform MAC calculation, and sends the encrypted ciphertext of the reported data to the aggregation terminal.

[0042] Preferably, the system further comprises:

[0043] The decryption unit is used to enable the aggregation terminal to use the pressure plate monitoring module ID to disperse the session interaction root key Key2, obtain the dispersed session interaction key Key2′, and after receiving the reported data ciphertext, decrypt the reported data ciphertext based on the session interaction key Key2′ to obtain the reported data plaintext.

[0044] The present invention provides a data interaction method and system for a platen status monitoring module, including: issuing security chips in the platen status monitoring module and the convergence terminal, determining the platen status monitoring module ID, session establishment root key Key1, and session interaction root key Key2; establishing a session between the platen status monitoring module and the convergence terminal based on the platen status monitoring module ID and session establishment root key Key1; when the session is successfully established, the platen status monitoring module determines the session interaction key based on the session interaction root key Key2; the platen status monitoring module encrypts and reports data based on the session interaction key, and sends the encrypted ciphertext of the reported data to the convergence terminal. By embedding a security chip with a cryptographic algorithm approved by the national cryptography administration in the platen status monitoring module and the convergence terminal, the present invention implements end-to-end communication identity authentication between the platen status monitoring device and the wireless convergence node, as well as encryption and decryption functions for wireless data transmission, reducing the risk of platen information being attacked or tampered with during transmission, and solving the current information security issues associated with the platen status monitoring module accessing the convergence terminal via wireless. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] A more complete understanding of exemplary embodiments of the present invention may be obtained by referring to the following drawings:

[0046] Figure 1 Flowchart of a data interaction method 100 of a platen status monitoring module according to an embodiment of the present invention;

[0047] Figure 2 2. It is an architecture diagram of a platen status online monitoring system according to an embodiment of the present invention;

[0048] Figure 3 This is a flow chart of authentication and encryption between a pressure plate status monitoring module and a convergence terminal according to an embodiment of the present invention;

[0049] Figure 4 Schematic diagram of the structure of the data interaction system 400 of the platen status monitoring module according to an embodiment of the present invention. DETAILED DESCRIPTION

[0050] Exemplary embodiments of the present invention will now be described with reference to the accompanying drawings. However, the present invention may be embodied in many different forms and is not limited to the embodiments described herein. These embodiments are provided to provide a thorough and complete disclosure of the present invention and to fully convey the scope of the present invention to those skilled in the art. The terminology used in the exemplary embodiments shown in the accompanying drawings is not intended to limit the present invention. In the accompanying drawings, identical elements are denoted by the same reference numerals.

[0051] Unless otherwise specified, the terms used herein (including technical terms) have the meanings commonly understood by those skilled in the art. In addition, it is understood that terms defined in commonly used dictionaries should be understood to have the same meanings as those in the context of the relevant fields, and should not be understood as idealized or overly formal meanings.

[0052] The technical problem to be solved by the present invention is how to achieve adaptive data interaction within the platen status monitoring module, achieving communication authentication and encryption by embedding a security chip in the platen monitoring device and the convergence terminal. To solve this technical problem, the present invention implements the following technical solution: the convergence terminal establishes a session with a designated platen monitoring module. After the session is established, the convergence terminal encrypts the convergence terminal's session interaction key using a session factor and sends it to the designated platen monitoring module. The platen monitoring module decrypts the session interaction key and then uses the session interaction key to encrypt and protect the data. The convergence terminal then sends the collected data from the platen monitoring module to a management unit.

[0053] Figure 1 FIG. 1 is a flow chart of a data interaction method 100 of a platen status monitoring module according to an embodiment of the present invention. Figure 1 As shown, the data interaction method for the platen status monitoring module provided by the embodiment of the present invention realizes end-to-end communication identity authentication between the platen status monitoring device and the wireless aggregation node, as well as encryption and decryption functions for wireless data transmission, by embedding a security chip with a cryptographic algorithm approved by the national cryptographic management department in the platen status monitoring module and the aggregation terminal. This reduces the risk of platen information being attacked or tampered with during transmission, and solves the current information security problem of the platen status monitoring module accessing the aggregation terminal through wireless. The data interaction method 100 for the platen status monitoring module provided by the embodiment of the present invention starts at step 101. In step 101, the security chips in the platen status monitoring module and the aggregation terminal are issued to determine the platen status monitoring module ID, the session establishment root key Key1, and the session interaction root key Key2.

[0054] like Figure 2 As shown in the figure, in the present invention, the substation pressure plate status monitoring system consists of a management unit, a wireless convergence node (convergence terminal), and a pressure plate status monitoring module. Among them, (1) the wireless convergence node and the pressure plate status monitoring module use wireless communication; (2) the wireless convergence node and the pressure plate status monitoring module transmit encrypted messages; (3) the wireless convergence node and the pressure plate status monitoring module have built-in security chips; (4) the identity authentication key is stored in the security chip.

[0055] In this invention, the platen monitoring module and the security chip in the convergence terminal of the substation platen status monitoring system are first personalized. The platen monitoring module requires personalized data: the platen monitoring module ID and the session establishment key. The convergence terminal requires personalized data: the session establishment root key and the session interaction root key.

[0056] In step 102, a session is established between the platen status monitoring module and the convergence terminal based on the platen status monitoring module ID and the session establishment root key Key1.

[0057] Preferably, the establishing of a session between the platen status monitoring module and the convergence terminal based on the platen status monitoring module ID and the session establishment root key Key1 includes:

[0058] The convergence terminal obtains the platen status monitoring module ID, and disperses the session establishment root key Key1 based on the platen status monitoring module ID to obtain the dispersed session establishment key Key1′;

[0059] The convergence terminal generates a session factor R1, encrypts the session factor R1 based on the session establishment key Key1′, obtains first encrypted data, and sends it to the pressure plate monitoring module;

[0060] The platen status monitoring module decrypts the root key Key1 established based on the session to obtain the session factor R1;

[0061] The platen status monitoring module randomly generates a session factor R2, and encrypts R2+R1 based on the session establishment key Key1, obtains the second encrypted data, and sends it to the convergence terminal;

[0062] The convergence terminal decrypts the second encrypted data based on the session establishment key Key1′ to obtain R1′+R2′;

[0063] The convergence terminal verifies whether R1′ is consistent with R1, and when the verification result is consistent, the session is successfully established.

[0064] In the present invention, after completing the personalized issuance, the pressure plate monitoring module of the substation pressure plate status monitoring system establishes a session with the convergence terminal. Figure 3 As shown in the figure, the process of establishing a session includes:

[0065] 1) The convergence terminal obtains the pressure plate monitoring module ID, and uses the pressure plate monitoring module ID to disperse the session establishment root key to obtain the dispersed session establishment key.

[0066] 2) The aggregation terminal generates and saves the session factor R1;

[0067] 3) The aggregation terminal uses the decentralized session establishment key to encrypt the session factor R1 and sends the ciphertext to the platen status monitoring module;

[0068] 4) After receiving the ciphertext, the platen status monitoring module uses the session establishment key to decrypt it, obtains the session factor R1 and saves it;

[0069] 5) The platen status monitoring module generates a session factor R2, encrypts R2+R1 using the session establishment key, and sends the ciphertext to the aggregation terminal;

[0070] 6) After receiving the ciphertext, the aggregation terminal uses the distributed session establishment key to decrypt the ciphertext to obtain R2+R1;

[0071] 7) The convergence terminal verifies whether the session factors R1 sent and received are consistent. If the verification is passed, the access to the pressure plate status monitoring module is completed and the session is established.

[0072] In step 103 , when the session is successfully established, the platen status monitoring module determines the session interaction key based on the session interaction root key Key2 .

[0073] Preferably, when the session is successfully established, the platen status monitoring module determines the session interaction key based on the session interaction root key Key2, including:

[0074] The convergence terminal encrypts the convergence terminal session interaction root key Key2 using the session factor R2+R1, obtains the third encrypted data, and sends it to the pressure plate status monitoring module;

[0075] The pressure plate status monitoring module receives the third encrypted data, and uses the session factor R2+R1 to decrypt the third encrypted data to obtain the session interaction root key Key2, and uses the pressure plate monitoring module ID to disperse the session interaction root key Key2 to obtain the dispersed session interaction key Key2′.

[0076] In the present invention, after the convergence terminal successfully establishes a session with the pressure plate status monitoring module, the session interaction key needs to be updated. Figure 3 As shown in the figure, the process of updating the session interaction key includes:

[0077] 1) The aggregation terminal uses the session factor R2+R1 to encrypt the aggregation terminal session interaction root key and sends it to the pressure plate status monitoring module;

[0078] 2) After receiving the ciphertext, the pressure plate status monitoring module uses the session factor R2+R1 to decrypt the ciphertext to obtain the session interaction root key, uses the pressure plate monitoring module ID to disperse the session interaction root key, obtains the dispersed session interaction key, and saves and updates it.

[0079] In step 104, the platen status monitoring module encrypts the reported data based on the session interaction key, and sends the encrypted ciphertext of the reported data to the convergence terminal.

[0080] Preferably, the platen status monitoring module encrypts the reported data based on the session interaction key and sends the encrypted reported data ciphertext to the convergence terminal, including:

[0081] The platen status monitoring module uses the dispersed session interaction key Key2′ to encrypt the reported data and perform MAC calculation, and sends the encrypted ciphertext of the reported data to the aggregation terminal.

[0082] Preferably, the method further comprises:

[0083] The convergence terminal uses the pressure plate monitoring module ID to disperse the session interaction root key Key2, obtains the dispersed session interaction key Key2′, and after receiving the reported data ciphertext, decrypts the reported data ciphertext based on the session interaction key Key2′ to obtain the reported data plaintext.

[0084] In the present invention, after the session interaction key of the pressure plate monitoring module is successfully updated, the session interaction key is used to encrypt and protect the data, and the data is exchanged with the convergence terminal, thereby realizing the access authentication and data encryption transmission of the pressure plate status monitoring module. Figure 3 As shown in the figure, the data interaction process includes:

[0085] 1) The platen status monitoring module uses the decentralized session interaction key to encrypt the reported data and perform MAC calculations, and sends the ciphertext to the aggregation terminal;

[0086] 2) The aggregation terminal uses the pressure plate monitoring module ID to disperse the session interaction root key to obtain the dispersed session interaction key;

[0087] 3) After receiving the ciphertext, the aggregation terminal uses the dispersed session interaction key to decrypt the ciphertext to obtain the plaintext of the reported data.

[0088] The present invention's adaptive data interaction method for a platen status monitoring module is designed to enhance the security of substation platen status information transmission. By embedding a security chip using a cryptographic algorithm approved by the national cryptography administration in the platen status monitoring module and wireless aggregation node, the present invention proposes an identity authentication method based on a symmetric algorithm. This method enables end-to-end communication identity authentication between the platen status monitoring device and the wireless aggregation node, as well as encryption and decryption for wireless data transmission, reducing the risk of attack or tampering with platen information during transmission.

[0089] Figure 4 FIG. 4 is a structural diagram of a data interaction system 400 of a platen status monitoring module according to an embodiment of the present invention. Figure 4 As shown, the data interaction system 400 of the platen status monitoring module provided by the embodiment of the present invention includes: an issuing unit 401 , a session establishing unit 402 , a session interaction key determining unit 403 and a data interaction unit 404 .

[0090] Preferably, the issuing unit 401 is used to enable the platen status monitoring module and the security chip in the convergence terminal to issue and determine the platen status monitoring module ID, the session establishment root key Key1 and the session interaction root key Key2.

[0091] Preferably, the session establishing unit 402 is configured to establish a session between the platen status monitoring module and the convergence terminal based on the platen status monitoring module ID and the session establishment root key Key1.

[0092] Preferably, the session establishing unit 402 establishes a session between the platen status monitoring module and the convergence terminal based on the platen status monitoring module ID and the session establishment root key Key1, including:

[0093] The convergence terminal obtains the platen status monitoring module ID, and disperses the session establishment root key Key1 based on the platen status monitoring module ID to obtain the dispersed session establishment key Key1′;

[0094] The convergence terminal generates a session factor R1, encrypts the session factor R1 based on the session establishment key Key1′, obtains first encrypted data, and sends it to the pressure plate monitoring module;

[0095] The platen status monitoring module decrypts the root key Key1 established based on the session to obtain the session factor R1;

[0096] The platen status monitoring module randomly generates a session factor R2, and encrypts R2+R1 based on the session establishment key Key1, obtains the second encrypted data, and sends it to the convergence terminal;

[0097] The convergence terminal decrypts the second encrypted data based on the session establishment key Key1′ to obtain R1′+R2′;

[0098] The convergence terminal verifies whether R1′ is consistent with R1, and when the verification result is consistent, the session is successfully established.

[0099] Preferably, the session interaction key determining unit 403 is configured to enable the platen status monitoring module to determine the session interaction key based on the session interaction root key Key2 when the session is successfully established.

[0100] Preferably, when the session is successfully established, the session interaction key determining unit 403 enables the platen status monitoring module to determine the session interaction key based on the session interaction root key Key2, including:

[0101] The platen status monitoring module receives the third encrypted data, decrypts the third encrypted data using the session factor R2+R1 to obtain the session interaction root key Key2, and disperses the session interaction root key Key2 using the platen monitoring module ID to obtain the dispersed session interaction key Key2′;

[0102] The convergence terminal encrypts the convergence terminal session interaction root key Key2 using the session factor R2+R1, obtains third encrypted data, and sends the third encrypted data to the pressure plate status monitoring module.

[0103] Preferably, the data interaction unit 404 is configured to enable the platen status monitoring module to encrypt the reported data based on the session interaction key, and send the encrypted ciphertext of the reported data to the convergence terminal.

[0104] Preferably, the data interaction unit 404 enables the platen status monitoring module to encrypt the reported data based on the session interaction key and sends the encrypted reported data ciphertext to the convergence terminal, including:

[0105] The platen status monitoring module uses the dispersed session interaction key Key2′ to encrypt the reported data and perform MAC calculation, and sends the encrypted ciphertext of the reported data to the aggregation terminal.

[0106] Preferably, the system further comprises:

[0107] The decryption unit is used to enable the aggregation terminal to use the pressure plate monitoring module ID to disperse the session interaction root key Key2, obtain the dispersed session interaction key Key2′, and after receiving the reported data ciphertext, decrypt the reported data ciphertext based on the session interaction key Key2′ to obtain the reported data plaintext.

[0108] The data interaction system 400 of the platen status monitoring module of the embodiment of the present invention corresponds to the data interaction method 100 of the platen status monitoring module of another embodiment of the present invention, and will not be described in detail here.

[0109] The invention has been described above with reference to a few embodiments. However, it is readily apparent to a person skilled in the art that other embodiments than the ones disclosed above are equally within the scope of the invention, as defined by the appended patent claims.

[0110] Generally, all terms used in the claims are to be interpreted according to their ordinary meaning in the technical field, unless explicitly defined otherwise herein. All references to "a / the [means, component, etc.]" are to be interpreted openly as referring to at least one instance of the means, component, etc., unless explicitly stated otherwise. The steps of any method disclosed herein do not necessarily need to be performed in the exact order disclosed, unless explicitly stated otherwise.

[0111] It will be understood by those skilled in the art that embodiments of the present invention may be provided as methods, systems, or computer program products. Thus, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware. Furthermore, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to magnetic disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0112] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowcharts and / or block diagrams, as well as combinations of processes and / or blocks in the flowcharts and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowcharts and / or block diagrams. Figure 1 a process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0113] These computer program instructions may also be stored in a computer readable memory that can direct a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 a process or multiple processes and / or boxes Figure 1 The function specified in one or more boxes.

[0114] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operational steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing the instructions executed on the computer or other programmable device for implementing the process. Figure 1 a process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0115] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and not to limit it. Although the present invention has been described in detail with reference to the above embodiments, ordinary technicians in the field should understand that the specific implementation methods of the present invention can still be modified or replaced by equivalents. Any modification or equivalent replacement that does not depart from the spirit and scope of the present invention should be covered by the scope of protection of the claims of the present invention.

Claims

1. A data interaction method for a platen status monitoring module, characterized in that: The method comprises: Issue the security chips in the pressure plate status monitoring module and the aggregation terminal, and determine the pressure plate status monitoring module ID, session establishment root key Key1 and session interaction root key Key2; Establishing a session between the platen status monitoring module and the aggregation terminal based on the platen status monitoring module ID and the session establishment root key Key1; When the session is successfully established, the platen status monitoring module determines the session interaction key based on the session interaction root key Key2; The platen status monitoring module encrypts the reported data based on the session interaction key and sends the encrypted reported data ciphertext to the convergence terminal; The process of establishing a session between the platen status monitoring module and the convergence terminal based on the platen status monitoring module ID and the session establishment root key Key1 includes: The convergence terminal obtains the platen status monitoring module ID, and disperses the session establishment root key Key1 based on the platen monitoring module ID, and obtains the dispersed session establishment key Key1 ′ ; The aggregation terminal generates a session factor R1 and establishes a key Key1 based on the session ′ Encrypt the session factor R1, obtain the first encrypted data and send it to the pressure plate monitoring module; The platen status monitoring module decrypts the root key Key1 established based on the session to obtain the session factor R1; The platen status monitoring module randomly generates a session factor R2, and encrypts R2+R1 based on the session establishment key Key1, obtains the second encrypted data, and sends it to the convergence terminal; The aggregation terminal establishes the key Key1 based on the session ′ Decrypt the second encrypted data to obtain R1 ′ +R2 ′ ; The aggregation terminal verifies the R1 ′ If the verification result is consistent with R1, the session is successfully established.

2. The method according to claim 1, characterized in that When the session is successfully established, the platen status monitoring module determines the session interaction key based on the session interaction root key Key2, including: The convergence terminal encrypts the convergence terminal session interaction root key Key2 using the session factor R2+R1, obtains the third encrypted data, and sends it to the pressure plate status monitoring module; The pressure plate status monitoring module receives the third encrypted data, and uses the session factor R2+R1 to decrypt the third encrypted data to obtain the session interaction root key Key2, and uses the pressure plate monitoring module ID to disperse the session interaction root key Key2 to obtain the dispersed session interaction key Key2 ′ .

3. The method according to claim 1, characterized in that The platen status monitoring module encrypts the reported data based on the session interaction key and sends the encrypted reported data ciphertext to the convergence terminal, including: The platen status monitoring module uses the decentralized session interaction key Key2 ′ The reported data is encrypted and MAC calculated, and the encrypted ciphertext of the reported data is sent to the aggregation terminal.

4. The method according to claim 1, wherein The method further comprises: The aggregation terminal uses the pressure plate monitoring module ID to disperse the session interaction root key Key2 and obtain the dispersed session interaction key Key2 ′ , and after receiving the reported data ciphertext, based on the session interaction key Key2 ′ The reported data ciphertext is decrypted to obtain the reported data plaintext.

5. A data interaction system for a platen status monitoring module, characterized in that: The system comprises: Issuing unit, used to enable the security chip in the pressure plate status monitoring module and the convergence terminal to issue, determine the pressure plate status monitoring module ID, session establishment root key Key1 and session interaction root key Key2; A session establishing unit, configured to establish a session between the platen status monitoring module and the convergence terminal based on the platen status monitoring module ID and the session establishment root key Key1; a session interaction key determining unit, configured to enable the platen status monitoring module to determine the session interaction key based on the session interaction root key Key2 when the session is successfully established; A data interaction unit, configured to enable the platen status monitoring module to encrypt the reported data based on the session interaction key, and to send the encrypted ciphertext of the reported data to the convergence terminal; The session establishing unit establishes a session between the platen status monitoring module and the convergence terminal based on the platen status monitoring module ID and the session establishment root key Key1, including: The convergence terminal obtains the platen status monitoring module ID, and disperses the session establishment root key Key1 based on the platen monitoring module ID, and obtains the dispersed session establishment key Key1 ′ ; The aggregation terminal generates a session factor R1 and establishes a key Key1 based on the session ′ Encrypt the session factor R1, obtain the first encrypted data and send it to the pressure plate monitoring module; The platen status monitoring module decrypts the root key Key1 established based on the session to obtain the session factor R1; The platen status monitoring module randomly generates a session factor R2, and encrypts R2+R1 based on the session establishment key Key1, obtains the second encrypted data, and sends it to the convergence terminal; The aggregation terminal establishes the key Key1 based on the session ′ Decrypt the second encrypted data to obtain R1 ′ +R2 ′ ; The aggregation terminal verifies the R1 ′ If the verification result is consistent with R1, the session is successfully established.

6. The system according to claim 5, characterized in that The session interaction key determination unit, when the session is successfully established, causes the platen status monitoring module to determine the session interaction key based on the session interaction root key Key2, including: The pressure plate status monitoring module receives the third encrypted data, and uses the session factor R2+R1 to decrypt the third encrypted data to obtain the session interaction root key Key2, and uses the pressure plate monitoring module ID to disperse the session interaction root key Key2 to obtain the dispersed session interaction key Key2 ′ ; The convergence terminal encrypts the convergence terminal session interaction root key Key2 using the session factor R2+R1, obtains third encrypted data, and sends the third encrypted data to the pressure plate status monitoring module.

7. The system according to claim 5, characterized in that The data interaction unit enables the platen status monitoring module to encrypt the reported data based on the session interaction key and sends the encrypted reported data ciphertext to the convergence terminal, including: The platen status monitoring module uses the decentralized session interaction key Key2 ′ The reported data is encrypted and MAC calculated, and the encrypted ciphertext of the reported data is sent to the aggregation terminal.

8. The system according to claim 5, wherein: The system further comprises: The decryption unit is used to enable the convergence terminal to use the pressure plate monitoring module ID to disperse the session interaction root key Key2 and obtain the dispersed session interaction key Key2 ′ , and after receiving the reported data ciphertext, based on the session interaction key Key2 ′ The reported data ciphertext is decrypted to obtain the reported data plaintext.

Images