A terminal data uplink method, device and related equipment
By establishing a communication connection between the SIM card, the terminal, and the blockchain platform, the problem of high risk of terminal communication information leakage is solved, and a secure and reliable process for uploading business data to the blockchain is achieved, reducing the cost and complexity of the transformation.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- CHINA MOBILE M2M
- Filing Date
- 2021-09-27
- Publication Date
- 2026-05-26
Smart Images
Figure CN115884185B_ABST
Abstract
Description
Technical Field
[0001] The embodiments of the present invention relate to the field of wireless communication technology, specifically to a terminal data uplink method, apparatus, and related equipment. Background Technology
[0002] Blockchain technology is a widely used communication technology for recording terminal business data on the blockchain. In existing technologies, blockchain applications typically control terminals, using communication modules to connect the SIM (Subscriber Identity Module) card to the internet for information exchange. However, in current technologies, terminal communication relies on internet access through a communication module, which carries the risk of the access address stored within the module being modified. This could allow the SIM card to connect to a counterfeit node platform, resulting in a high risk of information leakage.
[0003] It is evident that existing technologies pose a high risk of terminal communication information leakage. Summary of the Invention
[0004] This invention provides a method, apparatus, and related equipment for uploading terminal data to the blockchain, in order to solve the problem of high risk of leakage of terminal communication information in the prior art.
[0005] To solve the above problems, the present invention is implemented as follows:
[0006] In a first aspect, embodiments of the present invention provide a terminal data uploading method, executed by a SIM card, the method comprising:
[0007] Receive a service data upload request, wherein the service data upload request is a request sent by the terminal to the SIM card after receiving the first operation;
[0008] In response to the request to upload business data to the blockchain, a first command is sent to the terminal based on the data transmission protocol, wherein the first command is used to establish a communication connection between the SIM card, the terminal and the blockchain platform.
[0009] Secondly, embodiments of the present invention also provide a terminal data uploading method, executed by a terminal, the method comprising:
[0010] Sending a service data upload request to the SIM card, wherein the service data upload request is a request sent by the terminal to the SIM card in response to the received first operation;
[0011] The system receives a first command, which is the SIM card responding to the request to upload service data to the blockchain and sending the first command to the terminal based on the data transmission protocol. The first command is used to establish a communication connection between the SIM card, the terminal, and the blockchain platform.
[0012] Based on the first command, a communication connection is established between the SIM card, the terminal, and the blockchain platform according to the data transmission protocol.
[0013] Thirdly, embodiments of the present invention also provide a method for uploading terminal data to the blockchain, executed by a blockchain platform, the method comprising:
[0014] Receive a second command, wherein the second command is a command sent by the terminal to the node address, and the second command is used to request the blockchain platform to establish a communication connection with the terminal;
[0015] In response to the received second command, a communication connection between the terminal and the blockchain platform is established based on a preset protocol adaptation system and terminal communication transmission protocol.
[0016] Fourthly, embodiments of the present invention also provide a terminal data uplink device, comprising:
[0017] The first receiving module is used to receive a service data uplink request, wherein the service data uplink request is a request sent by the terminal to the SIM card after receiving the first operation;
[0018] The first sending module is used to respond to the request to upload business data to the blockchain and send a first command to the terminal based on the data transmission protocol. The first command is used to establish a communication connection between the SIM card, the terminal and the blockchain platform.
[0019] Fifthly, embodiments of the present invention also provide another terminal data uplink device, comprising:
[0020] The first sending module is used to send a service data uplink request to the SIM card, wherein the service data uplink request is a request sent by the terminal to the SIM card in response to the received first operation;
[0021] The first receiving module is used to receive a first command, which is the SIM card responding to the service data uploading request and sending a first command to the terminal based on the data transmission protocol. The first command is used to establish a communication connection between the SIM card, the terminal and the blockchain platform.
[0022] The first communication module is used to establish a communication connection between the SIM card, the terminal, and the blockchain platform based on the first command and a data transmission protocol.
[0023] Sixthly, embodiments of the present invention also provide another terminal data uplink device, comprising:
[0024] The first receiving module is used to receive the second command, wherein the second command is a command sent by the terminal to the node address, and the second command is used to request the blockchain platform to establish a communication connection with the terminal;
[0025] The first communication module is used to respond to the received second command and establish a communication connection between the terminal and the blockchain platform based on a preset protocol adaptation system and terminal communication transmission protocol.
[0026] In a seventh aspect, embodiments of the present invention also provide a communication device, comprising: a transceiver, a memory, a processor, and a program stored in the memory and executable on the processor; characterized in that the processor is configured to read the program in the memory to implement the steps in the method described in the first aspect; or, to implement the steps in the method described in the second aspect; or, to implement the steps in the method described in the third aspect.
[0027] Eighthly, embodiments of the present invention also provide a readable storage medium for storing a program, which, when executed by a processor, implements the steps of the method described in the first aspect above; or, implements the steps of the method described in the second aspect above; or, implements the steps of the method described in the third aspect above.
[0028] In this embodiment of the invention, a communication connection between the terminal, the SIM card, and the blockchain platform is established by sending a first command to the terminal using a SIM card. This avoids the terminal device directly establishing a communication connection with the blockchain platform, effectively reducing the complexity of connecting and applying blockchain application control terminal business data on the chain, reducing the modification costs and R&D investment of terminal solution providers and modules, and enabling the control terminal's hardware and software to be modified with zero or minimal modifications, realizing a complete business data on-chain process, while also reducing the risk of terminal communication information leakage. Attached Figure Description
[0029] To more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the description of the embodiments of the present invention will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.
[0030] Figure 1This is one of the flowcharts of a terminal data uplink method performed by a SIM card according to an embodiment of the present invention;
[0031] Figure 2 This is the second flowchart of a terminal data uplink method performed by a SIM card according to an embodiment of the present invention;
[0032] Figure 3 This is one of the flowcharts of a terminal data uploading method provided by an embodiment of the present invention;
[0033] Figure 4 This is the second flowchart of a terminal data uploading method provided in an embodiment of the present invention;
[0034] Figure 5 This is one of the flowcharts of a terminal data uploading method executed by a blockchain platform according to an embodiment of the present invention;
[0035] Figure 6 This is the second flowchart of a terminal data uploading method executed by a blockchain platform according to an embodiment of the present invention;
[0036] Figure 7 This is a schematic diagram of a terminal data uplink method provided in an embodiment of the present invention;
[0037] Figure 8 This is a schematic diagram of the structure of one of the terminal data uplink devices provided in this invention;
[0038] Figure 9 This is a schematic diagram of the structure of a second terminal data uplink device provided in this invention.
[0039] Figure 10 This is a schematic diagram of the structure of another terminal data uplink device provided in this invention;
[0040] Figure 11 This is a schematic diagram of another terminal data uplink device provided in this invention.
[0041] Figure 12 This is a schematic diagram of the structure of another terminal data uplink device provided in this invention;
[0042] Figure 13 This is a schematic diagram of another terminal data uplink device provided in this invention.
[0043] Figure 14 This is a communication device for a terminal data uplink device provided in an embodiment of the present invention. Detailed Implementation
[0044] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.
[0045] Please see Figure 1 , Figure 1 This is one of the flowcharts of a terminal data uplink method performed by a SIM card according to an embodiment of the present invention. The method includes:
[0046] S101. Receive a service data upload request, wherein the service data upload request is a request sent by the terminal to the SIM card after receiving the first operation;
[0047] In this context, terminals are mostly control and execution devices or sensing units in the Internet of Things (IoT) field. They are responsible for initiating the business data processing flow in the entire system and providing raw data services to the target linked objects. Terminals can be mobile phones, tablet personal computers, laptop computers, personal digital assistants (PDAs), mobile internet devices (MIDs), wearable devices, or in-vehicle devices, etc.
[0048] The first operation is a business operation performed by the user or operator on the terminal, such as performing a transaction. In this case, if the first operation is a transaction completed by the user or operator on the terminal, the terminal responds to the first operation by sending the transaction content to the SIM card through a business data on-chain request.
[0049] SIM, or User Identity Module, essentially refers to a UICC card (Universal Integrated Circuit Card). Its main function is to provide identification information and store data when mobile terminal devices communicate with the network, and to complete the entire process of identity authentication and information exchange under secure conditions, namely, when the Personal Identification Number (PIN) and authentication key are correct.
[0050] Among them, the SIM card is a special application of the security chip, which usually requires the ability to protect against hardware attacks. The security level is required to reach EAL4+ (the assessment level of the "Information Technology Security Assessment Criteria", which is divided into 7 levels, and EAL4+ is the security level of EAL4 and above). This can effectively protect the security of the data stored on the SIM card and prevent it from being maliciously tampered with.
[0051] S102. In response to the request to upload the business data to the blockchain, a first command is sent to the terminal based on the data transmission protocol, wherein the first command is used to establish a communication connection between the SIM card, the terminal and the blockchain platform.
[0052] The first command, implemented using the SIM card's proactive command function, is a command sent to the terminal based on a data transmission protocol, requesting the cellular communication module to establish basic network communication services with the blockchain platform. For example, after receiving a request to upload service data to the blockchain, the SIM card, in response, sends the first command to the terminal using the proactive command function based on the data transmission protocol, enabling the terminal to establish a communication connection with the blockchain platform through the first command.
[0053] The cellular communication module provides the terminal with cellular network connectivity and enables basic data communication services. It receives command requests from the control terminal, initiates business processes such as secure processing of business data, and sends data packets to the target linked object.
[0054] Blockchain is a public, distributed, shared database characterized by decentralization, immutability, auditability, anonymity, and independence. Utilizing consensus mechanisms, smart contracts, and asymmetric encryption, blockchain enables tamper-proofing, forgery prevention, and traceability of information during storage and sharing. Its architecture comprises a data layer, network layer, consensus layer, smart contract layer, and application layer.
[0055] In this embodiment, a communication connection between the terminal, the SIM card, and the blockchain platform is established by sending a first command to the terminal using the SIM card. This avoids the terminal device directly establishing a communication connection with the blockchain platform, thereby reducing the risk of leakage of terminal communication information.
[0056] Specifically, the SIM card sends a first command to the terminal's cellular communication module. Upon receiving the first command, the cellular communication module establishes a communication connection with the blockchain platform, enabling cellular network access and authentication functions. This ensures that the terminal can legally access cellular base stations and provide reliable internet communication services.
[0057] As an optional implementation, please refer to Figure 2 , Figure 2 This is a second flowchart of a terminal data uplink method performed by a SIM card according to an embodiment of the present invention. After sending the first command to the terminal based on the data transmission protocol, the method includes:
[0058] S103. Based on a preset blockchain application, the business data upload request is calculated and its format is converted to obtain a secure message;
[0059] The blockchain application is a module embedded in the SIM card that provides encryption services. By leveraging the high-security hardware and storage / computing environment of the SIM card, the risk of hardware attacks and data leaks during encryption is reduced. In this way, the secure environment of the SIM card provides encryption services for the blockchain application, and business implementations based on these encryption services establish secure and reliable communication connections, ensuring the confidentiality and legitimacy of data transmission.
[0060] S104. Based on the data transmission protocol, send the security message to the blockchain platform according to the communication connection relationship.
[0061] In this implementation, by using blockchain applications and leveraging the high-security hardware and storage / computing environment of the SIM card, the risk of hardware attacks and data leaks can be effectively reduced, enabling the terminal to establish a secure and reliable communication connection with the blockchain platform.
[0062] As an optional implementation, the blockchain application includes a security algorithm, a random number generator, a replay prevention factor counter, and a data processing algorithm.
[0063] The blockchain application, based on a preset mechanism, calculates and converts the format of the business data upload request to obtain a secure message, including:
[0064] Based on the random number and the anti-replay factor counter, the data processing algorithm is used to convert the data format of the business data on-chain request to obtain the first intermediate data.
[0065] The first intermediate data is processed based on the security algorithm to obtain the second intermediate data;
[0066] Based on the random number, the anti-replay factor counter uses the data processing algorithm to process the second intermediate data to obtain the security message.
[0067] In this implementation, the use of random numbers and anti-replay factor counters enables the blockchain platform to identify replay attacks and prevent unauthorized devices from deceiving the system to obtain data.
[0068] In this process, after the blockchain platform receives security messages sent by multiple SIM cards, for example, after the blockchain platform receives a first message and a second message with the same content, it obtains a random number and an anti-replay factor counter by parsing the first message and the second message. When the random number and anti-replay factor counter of the first message are the same as those of the second message, the first message and the second message are considered to be the same message, and the terminal that sent the second message cannot be identified as a legitimate device. Therefore, the second message is not processed or stored in any other way.
[0069] The random number and anti-replay factor counter are generated by the SIM card itself. By using a hash function based on the random number and anti-replay factor counter, the SIM card performs two processing steps and format conversions on the business data upload request, thereby enhancing data security. Similarly, the blockchain platform receiving the security message needs to perform two processing steps and format conversions on the security message to obtain the random number and anti-replay factor counter, preventing data leakage after the terminal connects to other blockchain platforms.
[0070] As an optional implementation, the security algorithm includes key negotiation, key distribution, encryption algorithm and signature algorithm, and the second intermediate data includes encrypted data, signature data and anti-replay factor;
[0071] The step of processing the first intermediate data based on the security algorithm to obtain the second intermediate data includes:
[0072] The first intermediate data is processed based on the key negotiation, the key distribution, and the signature algorithm to obtain the signature data;
[0073] The first intermediate data is processed based on the encryption algorithm to obtain the encrypted data;
[0074] The anti-replay factor is obtained based on the random number and the anti-replay factor counter.
[0075] In this implementation, relying on the secure key storage and computing environment of the SIM card, the security and reliability of the entire business data processing and reporting process can be guaranteed, preventing attackers from sniffing and impersonating the data; by encrypting the data, the information protected by the security message can be effectively prevented from being stolen after the security message is leaked.
[0076] The signature data is the signature key, which is a non-forgeable digital string generated by the SIM card and can prove the authenticity of the sent information. Because the integrity of the signature key is easily verified, the security and reliability of business data can be guaranteed through the signature key.
[0077] The signature key calculation supports, but is not limited to, international or national cryptographic algorithms, symmetric or asymmetric keys, and PKI (Public Key Infrastructure) certificate services. The specific signature key used can be negotiated and selected with the blockchain platform. By performing signature key calculations within the secure hardware and storage computing environment of the SIM card, the security of the signature key stored on the SIM card and the business data processing flow computed on the SIM card can be effectively guaranteed.
[0078] Please see Figure 3 , Figure 3This is one of the flowcharts of a terminal data uploading method provided by an embodiment of the present invention, the method comprising:
[0079] S201. Send a service data upload request to the SIM card, wherein the service data upload request is a request sent by the terminal to the SIM card in response to the received first operation;
[0080] S202. Receive a first command, wherein the first command is sent by the SIM card to the terminal in response to the service data uploading request, based on the data transmission protocol, wherein the first command is used to establish a communication connection between the SIM card, the terminal and the blockchain platform;
[0081] S203. Based on the first command, establish a communication connection between the SIM card, the terminal, and the blockchain platform according to the data transmission protocol.
[0082] In this implementation, the terminal establishes a communication connection between the SIM card, the terminal, and the blockchain platform through a first command sent by the SIM card. This avoids the terminal directly establishing a communication connection with the blockchain platform, preventing the terminal from being attacked and accessing an illegal blockchain platform, and reducing the risk of information leakage.
[0083] The data transmission protocols of the terminal, SIM card, and blockchain platform are consistent, enabling the establishment of a communication connection between the SIM card, terminal, and blockchain platform based on the first command sent by the SIM card.
[0084] As an optional implementation, the data transmission protocol is a Bearer Independent protocol (BIP). The step of establishing a communication connection between the terminal and the blockchain platform based on the data transmission protocol according to the first command includes:
[0085] A communication connection with the SIM card is established based on an independent bearer protocol;
[0086] Parse the first command to obtain the node address of the blockchain platform;
[0087] Send a second command to the node address, wherein the second command is used to request the blockchain platform to establish a communication connection with the terminal;
[0088] Based on the independent bearer protocol and the protocol adaptation system preset by the blockchain platform, a communication connection is established between the SIM card, the terminal, and the blockchain platform.
[0089] In this implementation, since the SIM card needs to actively send commands to establish a communication connection, BIP technology is adopted. BIP technology adds a new active operation capability to the SIM card on the basis of the original passive operation mode of the SIM card, that is, it allows the applications and services in the SIM card to actively interact with the cellular terminal.
[0090] In traditional technology, the relationship between the terminal and the SIM card is asymmetrical, with the SIM card passively receiving and executing instructions from the phone, while the phone maintains absolute control. Any action can only be initiated by the phone and completed by the SIM card. However, BIP technology allows the SIM card to transmit data with a remote server via the TCP / IP protocol (Transmission Control Protocol / Internet Protocol).
[0091] The BIP technology supports five active commands: OPEN CHANNEL, CLOSE CHANNEL, GET CHANNEL STATUS, RECEIVE DATA, and SEND DATA. In this embodiment, the first command sent by the SIM card to the terminal is the OPEN CHANNEL command. After receiving the OPEN CHANNEL command, the terminal can establish a communication connection between itself and the blockchain platform based on the BIP. After the communication connection is established between the terminal and the blockchain platform, the SIM card can send secure messages to the blockchain platform through the communication connection.
[0092] The second command is a connection opening command. After the terminal sends the second command to the blockchain platform, the blockchain platform adapts the BIP technology according to the protocol adaptation system, and then establishes a communication connection between the terminal and the blockchain platform based on the second command.
[0093] In addition, BIP technology can improve the transmission efficiency and stability between terminals and blockchain platforms, which is conducive to the transmission of high-speed mobile data services, making the transmission of various business data easier and faster.
[0094] In addition, for different terminals, the terminal can quickly access the blockchain node platform by replacing the SIM card with one that supports blockchain applications. This effectively reduces the complexity of connecting and applying the business data of the control terminal to the blockchain, reduces the transformation costs and R&D investment of terminal solution providers and modules, and allows the control terminal's hardware and software to be modified with zero or very little modification, realizing a complete business data on-chain process.
[0095] As an optional implementation, please refer to Figure 4 , Figure 4 This is a second flowchart of a terminal data uploading method provided by an embodiment of the present invention. After establishing the communication connection between the user identification module card, the terminal, and the blockchain platform based on the data transmission protocol, the method includes:
[0096] S204. Receive a security message based on the communication connection relationship, wherein the security message is data obtained by the SIM card in response to receiving the service data uplink request, and by performing calculations and format conversions on the service data uplink request;
[0097] S205. Send the security message to the blockchain platform.
[0098] In this implementation, the SIM card sends a security message to the blockchain platform through the communication connection between the terminal and the blockchain platform. The security message is an active command for sending data. After receiving the security message, the blockchain platform responds by sending a command to the SIM card to receive data, thus completing the information transmission process.
[0099] Please see Figure 5 , Figure 5 This is one of the flowcharts of a terminal data uploading method executed by a blockchain platform according to an embodiment of the present invention. The method includes:
[0100] S301. Receive a second command, wherein the second command is a command sent by the terminal to the node address, and the second command is used to request the blockchain platform to establish a communication connection with the terminal;
[0101] S302. In response to the received second command, establish a communication connection between the terminal and the blockchain platform based on a preset protocol adaptation system and terminal communication transmission protocol.
[0102] In this implementation, a communication connection between the terminal and the blockchain platform is established through the blockchain platform's protocol adaptation system, thereby realizing the communication connection between the blockchain platform and the terminal.
[0103] The blockchain platform's protocol adaptation system provides business services based on lightweight underlying communication data protocols for secure on-chain business data, including but not limited to TCP (Transmission Control Protocol), UDP (User Datagram Protocol), and CoAP (Constrained Application Protocol). In this embodiment, BIP technology is used to establish a communication connection between the terminal and the blockchain platform, completing the secure on-chain process for business data. This avoids the terminal directly establishing a connection with the blockchain platform, thereby reducing the risk of information leakage.
[0104] Compared to existing technologies, the protocol adaptation system transforms complex HTTP protocol services to communicate with business platforms, reducing data traffic, system response latency, system power consumption, and hardware resource consumption throughout the entire process.
[0105] As an optional implementation, please refer to Figure 6 , Figure 6 This is a second flowchart of a terminal data uploading method executed by a blockchain platform according to an embodiment of the present invention. After establishing a communication connection between the terminal and the blockchain platform, the method further includes:
[0106] S303. Receive a security message according to the communication connection relationship, wherein the security message is obtained by the SIM card calculating and converting the format of the service data upload request based on a preset blockchain application;
[0107] S304. Based on the preset security service system, the security message is parsed to obtain a random number, an anti-replay factor counter, a signature key, and decryption data;
[0108] S305. Determine whether the security message comes from legitimate terminal data based on the signature key;
[0109] S306. If the security message comes from legitimate terminal data, process and store the random number, the anti-replay factor counter, and the decrypted data.
[0110] In this implementation, since the security message is obtained by performing two data conversion and calculation processes in the SIM card, the security message also needs to be parsed and converted in the blockchain platform to obtain the random number, anti-replay factor counter, signature key and decryption data.
[0111] The security service system provides key management and security authentication services to verify the security and trustworthiness of business data uploaded to the blockchain. To prevent unauthorized devices from connecting to the blockchain platform and obtaining data, the security service system uses signature keys to determine whether security messages originate from legitimate devices. Thus, relying on the SIM's secure key storage and computing environment, the security and trustworthiness of the entire business data processing and reporting process can be guaranteed, preventing the blockchain platform from being attacked or counterfeited.
[0112] As an optional implementation, the processing and storage of the random number, the anti-replay factor counter, and the decrypted data based on the preset data processing and storage system includes:
[0113] Based on the random number and the anti-replay factor counter, it is determined whether the security message is a duplicate message;
[0114] If the security message is not a duplicate message, the decrypted data is processed and stored based on a preset data processing and storage system.
[0115] In this implementation, replay attacks can be prevented by using random numbers and anti-replay factor counters. Furthermore, the decrypted data from non-replay attacks is processed and stored by a data processing and storage system, thereby reducing the risk of information leakage.
[0116] The data processing and storage system provides the data processing and storage workflow for verified business data after it is uploaded to the blockchain, including but not limited to data packaging, consensus completion, and contract processing. This system enables the reliable acquisition of business data, such as the reliable acquisition of transaction data on a blockchain platform.
[0117] Please see Figure 7 , Figure 7 This is a schematic diagram of a terminal data uploading method provided in an embodiment of the present invention. The data uploading method provided in this embodiment of the present invention is similar to... Figure 7 The diagram shown Figure 1 To.
[0118] Please see Figure 8 , Figure 8 This is a schematic diagram of one of the terminal data uplink devices 400 provided in this invention. The terminal data uplink device 400 includes:
[0119] The first receiving module 401 is used to receive a service data uplink request, wherein the service data uplink request is a request sent by the terminal to the user identification module card after receiving the first operation.
[0120] The first sending module 402 is used to respond to the business data uploading request by sending a first command to the terminal based on the data transmission protocol, wherein the first command is used to establish a communication connection between the user identification module card, the terminal and the blockchain platform.
[0121] As an optional implementation, see [link to implementation details]. Figure 9 , Figure 9 This is a schematic diagram of a second terminal data uplink device 400 provided in this embodiment of the invention. The terminal data uplink device 400 further includes:
[0122] The first processing module 403 is used to calculate and convert the business data on-chain request based on a preset blockchain application to obtain a secure message.
[0123] The second sending module 404 is used to send the security message to the blockchain platform based on the data transmission protocol and the communication connection relationship.
[0124] As an optional implementation, the blockchain application includes a security algorithm, a random number generator, a replay prevention factor counter, and a data processing algorithm.
[0125] The first processing module includes:
[0126] The first processing unit is used to perform data format conversion on the business data uplink request based on the random number and the anti-replay factor counter, and to obtain the first intermediate data by using the data processing algorithm.
[0127] The second processing unit is used to process the first intermediate data based on the security algorithm to obtain the second intermediate data.
[0128] The third processing unit is used to process the second intermediate data based on the random number and the anti-replay factor counter, using the data processing algorithm, to obtain the security message.
[0129] As an optional implementation, the security algorithm includes key negotiation, key distribution, encryption algorithm and signature algorithm, and the second intermediate data includes encrypted data, signature data and anti-replay factor;
[0130] The second processing unit includes:
[0131] The fourth processing unit is used to process the first intermediate data based on the key negotiation, the key distribution, and the signature algorithm to obtain the signature data;
[0132] The fifth processing unit is used to process the first intermediate data based on the encryption algorithm to obtain the encrypted data;
[0133] The sixth processing unit is used to obtain the anti-replay factor based on the random number and the anti-replay factor counter.
[0134] The aforementioned terminal data uplink device 400 can implement the various processes executed by the SIM card in the above method embodiments and achieve the same technical effect. To avoid repetition, it will not be described again here.
[0135] Please see Figure 10 , Figure 10 This is a schematic diagram of one embodiment of the terminal data uplink device 500 provided by the present invention. The terminal data uplink device 500 includes:
[0136] The first sending module 501 is used to send a service data uplink request to the user identification module card, wherein the service data uplink request is a request sent by the terminal to the user identification module card in response to the received first operation.
[0137] The first receiving module 502 is used to receive a first command, wherein the first command is sent by the user identification module card to the terminal in response to the request for business data to be uploaded to the blockchain, based on the data transmission protocol. The first command is used to establish a communication connection between the user identification module card, the terminal and the blockchain platform.
[0138] The first communication module 503 is used to establish a communication connection between the user identification module card, the terminal, and the blockchain platform based on the first command and a data transmission protocol.
[0139] As an optional implementation, the data transmission protocol is an independent bearer protocol, and the first communication module includes:
[0140] The first communication unit is used to establish a communication connection with the user identification module card based on the independent bearer protocol;
[0141] The second communication unit is used to parse the first command and obtain the node address of the blockchain platform;
[0142] The third communication unit is used to send a second command to the node address, wherein the second command is used to request the blockchain platform to establish a communication connection with the terminal;
[0143] The fourth communication unit is used to establish a communication connection between the SIM card, the terminal, and the blockchain platform based on the independent bearer protocol and the protocol adaptation system preset by the blockchain platform.
[0144] As an optional implementation, see [link to implementation details]. Figure 11 , Figure 11This is a schematic diagram of another terminal data uplink device 500 provided in this embodiment of the invention, wherein the terminal data uplink device 500 further includes:
[0145] The second receiving module 504 is used to receive a security message based on the communication connection relationship, wherein the security message is data obtained by the user identification module card in response to receiving the service data uplink request, and by performing calculation and format conversion on the service data uplink request;
[0146] The second sending module 505 is used to send the security message to the blockchain platform.
[0147] The aforementioned terminal data uplink device 500 can implement the various processes executed by the terminal in the above method embodiments and achieve the same technical effect. To avoid repetition, it will not be described again here.
[0148] Please refer to Figure 12. Figure 12 This is a schematic diagram of one embodiment of the terminal data uplink device 600 provided by the present invention. The terminal data uplink device 600 includes:
[0149] The first receiving module 601 is used to receive a second command, wherein the second command is a command sent by the terminal to the node address, and the second command is used to request the blockchain platform to establish a communication connection with the terminal;
[0150] The first communication module 602 is used to respond to the received second command and establish a communication connection between the terminal and the blockchain platform based on a preset protocol adaptation system and terminal communication transmission protocol.
[0151] As an optional implementation, see [link to implementation details]. Figure 13 , Figure 13 This is a schematic diagram of another terminal data uplink device 600 provided in this embodiment of the invention. The terminal data uplink device 600 further includes:
[0152] The second receiving module 603 is used to receive a security message according to the communication connection relationship, wherein the security message is obtained by the user identification module card through calculation and format conversion of the business data on-chain request based on a preset blockchain application;
[0153] The first processing module 604 is used to parse the security message based on a preset security service system to obtain a random number, an anti-replay factor counter, a signature key, and decryption data.
[0154] The determination module 605 is used to determine whether the security message comes from legitimate terminal data based on the signature key;
[0155] The second processing module 606 is used to process and store the decrypted data based on a preset data processing and storage system when the security message comes from legitimate terminal data.
[0156] As an optional implementation, the second processing module includes:
[0157] The sixth processing unit is used to determine whether the security message is a duplicate message based on the random number and the anti-replay factor counter.
[0158] The seventh processing unit is used to process and store the decrypted data based on a preset data processing and storage system when the security message is not a duplicate message.
[0159] The aforementioned terminal data uploading device 600 can realize the various processes executed by the blockchain network in the above method embodiments and achieve the same technical effect. To avoid repetition, it will not be described in detail here.
[0160] Please see Figure 14 This invention also provides a communication device. Please refer to [link to relevant documentation]. Figure 14 The communication device may include a bus 701, a transceiver 702, an antenna 703, a bus interface 704, a processor 705, and a memory 706, wherein:
[0161] When the communication device is a SIM card, the program can implement any step executed by the SIM card in the above method embodiment and achieve the same beneficial effect when executed by the processor 701, which will not be elaborated here;
[0162] When the communication device is a terminal, the program can implement any step executed by the terminal in the above method embodiment and achieve the same beneficial effect when executed by the processor 701, which will not be elaborated here.
[0163] When the communication device is a blockchain platform, the program can be executed by the processor 701 to achieve any of the steps executed by the blockchain platform in the above method embodiments and to achieve the same beneficial effects, which will not be elaborated here.
[0164] exist Figure 14In this document, a bus architecture (represented by bus 701) is used. Bus 701 can include any number of interconnected buses and bridges, linking various circuits including one or more processors represented by processor 705 and memory represented by memory 706. Bus 701 can also link various other circuits such as peripheral devices, voltage regulators, and power management circuits, which are well known in the art and therefore will not be described further herein. Bus interface 704 provides an interface between bus 701 and transceiver 702. Transceiver 702 can be a single element or multiple elements, such as multiple receivers and transmitters, providing a unit for communicating with various other devices over a transmission medium. Data processed by processor 705 is transmitted over a wireless medium via antenna 703, which further receives data and transmits data to processor 705.
[0165] Processor 705 manages bus 701 and general processing, and also provides various functions, including timing, peripheral interface, voltage regulation, power management, and other control functions. Memory 706 can be used to store data used by processor 705 during operation.
[0166] Optionally, the processor 705 can be a CPU, ASIC, FPGA, or CPLD.
[0167] Those skilled in the art will understand that all or part of the steps of the methods described in the above embodiments can be implemented by hardware related to program instructions, and the program can be stored in a readable medium. The present invention also provides a readable storage medium storing a computer program, which, when executed by a processor, can implement the above-described methods. Figure 1 or Figure 2 Any step in the corresponding method embodiment; or, implementing the above. Figure 3 or Figure 4 Any step in the corresponding method embodiment; or, implementing the above. Figure 5 or Figure 6 Any step in the corresponding method embodiment can achieve the same technical effect, and will not be repeated here to avoid repetition.
[0168] The storage medium may be a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk.
[0169] It should be noted that, in this document, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Unless otherwise specified, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes that element.
[0170] Through the above description of the embodiments, those skilled in the art can clearly understand that the methods of the above embodiments can be implemented by means of software plus necessary general-purpose hardware platforms. Of course, they can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk) and includes several instructions to cause a terminal (which may be a mobile phone, computer, server, air conditioner, or second terminal device, etc.) to execute the methods described in the various embodiments of this application.
[0171] The embodiments of this application have been described above with reference to the accompanying drawings. However, this application is not limited to the specific embodiments described above. The specific embodiments described above are merely illustrative and not restrictive. Those skilled in the art can make many other forms under the guidance of this application without departing from the spirit and scope of the claims, and all of these forms are within the protection scope of this application.
Claims
1. A terminal data uplink method, executed by a SIM card, characterized in that, The method includes: Receive a service data upload request, wherein the service data upload request is a request sent by the terminal to the SIM card after receiving a first operation, and the first operation is a service operation performed by the user or operator on the terminal; In response to the request to upload business data to the blockchain, a first command is sent to the terminal based on a data transmission protocol. This first command establishes a communication connection between the SIM card, the terminal, and the blockchain platform. This connection is established through an independent bearer protocol and a pre-defined protocol adaptation system of the blockchain platform. The independent bearer protocol establishes a communication connection between the terminal and the SIM card. In response to the received second command, the blockchain platform establishes a communication connection between the terminal and the blockchain platform based on the pre-defined protocol adaptation system and the terminal's communication transmission protocol. The second command is a command sent by the terminal to a node address on the blockchain platform, obtained by parsing the first command.
2. The method according to claim 1, characterized in that, After sending the first command to the terminal based on the data transmission protocol, the method further includes: Based on a pre-defined blockchain application, the request to upload the business data to the blockchain is calculated and its format is converted to obtain a secure message. Based on the data transmission protocol, the security message is sent to the blockchain platform according to the communication connection relationship.
3. The method according to claim 2, characterized in that, The blockchain application includes security algorithms, random numbers, anti-replay factor counters, and data processing algorithms; The blockchain application, based on a preset mechanism, calculates and converts the format of the business data upload request to obtain a secure message, including: Based on the random number and the anti-replay factor counter, the data processing algorithm is used to convert the data format of the business data on-chain request to obtain the first intermediate data. The first intermediate data is processed based on the security algorithm to obtain the second intermediate data; Based on the random number, the anti-replay factor counter uses the data processing algorithm to process the second intermediate data to obtain the security message.
4. The method according to claim 3, characterized in that, The security algorithm includes key negotiation, key distribution, encryption algorithm and signature algorithm, and the second intermediate data includes encrypted data, signature data and anti-replay factor; The step of processing the first intermediate data based on the security algorithm to obtain the second intermediate data includes: The first intermediate data is processed based on the key negotiation, the key distribution, and the signature algorithm to obtain the signature data; The first intermediate data is processed based on the encryption algorithm to obtain the encrypted data; The anti-replay factor is obtained based on the random number and the anti-replay factor counter.
5. A method for uploading terminal data to the blockchain, executed by the terminal, characterized in that, The method includes: Sending a service data upload request to the SIM card, wherein the service data upload request is a request sent by the terminal to the SIM card after receiving a first operation, the first operation being a service operation performed by the user or operator on the terminal; The system receives a first command, which is a response from the SIM card to the service data upload request. The first command is sent to the terminal based on the data transmission protocol. The first command is used to establish a communication connection between the SIM card, the terminal, and the blockchain platform. Based on the first command, a communication connection is established between the SIM card, the terminal, and the blockchain platform according to the data transmission protocol; The data transmission protocol is an independent bearer protocol. The step of establishing a communication connection with the blockchain platform based on the data transmission protocol according to the first command includes: A communication connection with the SIM card is established based on an independent bearer protocol; Parse the first command to obtain the node address of the blockchain platform; Send a second command to the node address, wherein the second command is used to request the blockchain platform to establish a communication connection with the terminal; Based on the independent bearer protocol and the protocol adaptation system preset by the blockchain platform, a communication connection is established between the SIM card, the terminal, and the blockchain platform.
6. The method according to claim 5, characterized in that, After establishing the communication connection between the SIM card, the terminal, and the blockchain platform based on the data transmission protocol, the method includes: Based on the communication connection relationship, a security message is received, wherein the security message is data obtained by the SIM card in response to receiving the service data uplink request, and by performing calculations and format conversions on the service data uplink request; Send the security message to the blockchain platform.
7. A method for uploading terminal data to the blockchain, executed by a blockchain platform, characterized in that, The method includes: Receive a second command, wherein the second command is a command sent by the terminal to the node address, the second command is used to request the blockchain platform to establish a communication connection with the terminal, the node address is obtained by parsing the first command, the first command is a command sent by the SIM card to the terminal based on the data transmission protocol in response to the request for service data to be uploaded to the blockchain, and the terminal is used to establish a communication connection with the SIM card based on the independent bearer protocol; In response to the received second command, a communication connection between the terminal and the blockchain platform is established based on a preset protocol adaptation system and the terminal's communication transmission protocol. The terminal is used to establish a communication connection between the SIM card, the terminal, and the blockchain platform based on the independent bearer protocol and the blockchain platform's preset protocol adaptation system.
8. The method according to claim 7, characterized in that, After establishing the communication connection between the terminal and the blockchain platform, the method further includes: The security message is received according to the communication connection relationship, wherein the security message is obtained by the SIM card through calculation and format conversion of the business data on-chain request based on a preset blockchain application; The security message is parsed based on a preset security service system to obtain a random number, an anti-replay factor counter, signature data, and decryption data. Based on the signature data, it is determined whether the security message originates from legitimate terminal data; When the security message originates from legitimate terminal data, the random number, the anti-replay factor counter, and the decrypted data are processed and stored.
9. The method according to claim 8, characterized in that, The processing and storage of the random number, the anti-replay factor counter, and the decrypted data by the preset data processing and storage system includes: Based on the random number and the anti-replay factor counter, it is determined whether the security message is a duplicate message; If the security message is not a duplicate message, the decrypted data is processed and stored based on a preset data processing and storage system.
10. A terminal data uplink device, characterized in that, include: The first receiving module is used to receive a service data uplink request, wherein the service data uplink request is a request sent by the terminal to the SIM card after receiving the first operation, and the first operation is a service operation performed by the user or operator on the terminal. A first sending module is configured to respond to the service data upload request by sending a first command to the terminal based on a data transmission protocol. The first command establishes a communication connection between the SIM card, the terminal, and the blockchain platform. This connection is established through an independent bearer protocol and a pre-defined protocol adaptation system of the blockchain platform. The independent bearer protocol establishes a communication connection between the terminal and the SIM card. The blockchain platform, in response to a received second command, establishes a communication connection between the terminal and the blockchain platform based on the pre-defined protocol adaptation system and the terminal's communication transmission protocol. The second command is a command sent by the terminal to a node address on the blockchain platform, obtained by parsing the first command.
11. The apparatus according to claim 10, characterized in that, The device further includes: The first processing module is used to calculate and convert the business data upload request based on a preset blockchain application to obtain a secure message. The second sending module is used to send the security message to the blockchain platform based on the data transmission protocol and the communication connection relationship.
12. The apparatus according to claim 11, characterized in that, The blockchain application includes security algorithms, random numbers, anti-replay factor counters, and data processing algorithms; The first processing module includes: The first processing unit is used to perform data format conversion on the business data uplink request based on the random number and the anti-replay factor counter, and to obtain the first intermediate data using the data processing algorithm. The second processing unit is used to process the first intermediate data based on the security algorithm to obtain the second intermediate data. The third processing unit is used to process the second intermediate data based on the random number and the anti-replay factor counter, using the data processing algorithm, to obtain the security message.
13. The apparatus according to claim 12, characterized in that, The security algorithm includes key negotiation, key distribution, encryption algorithm and signature algorithm, and the second intermediate data includes encrypted data, signature data and anti-replay factor; The second processing unit includes: The fourth processing unit is used to process the first intermediate data based on the key negotiation, the key distribution, and the signature algorithm to obtain the signature data; The fifth processing unit is used to process the first intermediate data based on the encryption algorithm to obtain the encrypted data; The sixth processing unit is used to obtain the anti-replay factor based on the random number and the anti-replay factor counter.
14. A terminal on-chain device, characterized in that, include: The first sending module is used to send a service data uplink request to the SIM card, wherein the service data uplink request is a request sent by the terminal to the SIM card in response to a received first operation, and the first operation is a service operation performed by the user or operator on the terminal. The first receiving module is used to receive a first command, which is the SIM card responding to the service data uploading request and sending a first command to the terminal based on the data transmission protocol. The first command is used to establish a communication connection between the SIM card, the terminal and the blockchain platform. The first communication module is used to establish a communication connection between the SIM card, the terminal, and the blockchain platform based on the first command and a data transmission protocol. The data transmission protocol is an independent bearer protocol, and the first communication module includes: The first communication unit is used to establish a communication connection with the SIM card based on the independent bearer protocol; The second communication unit is used to parse the first command and obtain the node address of the blockchain platform; The third communication unit is used to send a second command to the node address, wherein the second command is used to request the blockchain platform to establish a communication connection with the terminal; The fourth communication unit is used to establish a communication connection between the SIM card, the terminal, and the blockchain platform based on the independent bearer protocol and the protocol adaptation system preset by the blockchain platform.
15. The apparatus according to claim 14, characterized in that, The device further includes: The second receiving module is used to receive a security message based on the communication connection relationship, wherein the security message is data obtained by the SIM card in response to receiving the service data uplink request, and by performing calculations and format conversions on the service data uplink request; The second sending module is used to send the security message to the blockchain platform.
16. A terminal on-chain device, characterized in that, include: The first receiving module is used to receive a second command, wherein the second command is a command sent by the terminal to the node address, and the second command is used to request the blockchain platform to establish a communication connection with the terminal. The node address is obtained by parsing the first command. The first command is a command sent by the SIM card to the terminal based on the data transmission protocol in response to the request for service data to be uploaded to the blockchain. The terminal is used to establish a communication connection with the SIM card based on the independent bearer protocol. The first communication module is used to respond to the received second command and establish a communication connection between the terminal and the blockchain platform based on a preset protocol adaptation system and a communication transmission protocol between the terminal. The terminal is used to establish a communication connection between the SIM card, the terminal and the blockchain platform based on the independent bearer protocol and the preset protocol adaptation system of the blockchain platform.
17. The apparatus according to claim 16, characterized in that, The device further includes: The second receiving module is used to receive security messages according to the communication connection relationship, wherein the security messages are obtained by the SIM card calculating and converting the format of the business data upload request based on a preset blockchain application; The first processing module is used to parse the security message based on a preset security service system to obtain a random number, an anti-replay factor counter, signature data, and decryption data. The determination module is used to determine whether the security message comes from legitimate terminal data based on the signature data; The second processing module is used to process and store the decrypted data based on a preset data processing and storage system when the security message comes from legitimate terminal data.
18. The apparatus according to claim 17, characterized in that, The second processing module includes: The sixth processing unit is used to determine whether the security message is a duplicate message based on the random number and the anti-replay factor counter. The seventh processing unit is used to process and store the decrypted data based on a preset data processing and storage system when the security message is not a duplicate message.
19. A communication device, comprising: A transceiver, a memory, a processor, and a program stored in the memory and executable on the processor; characterized in that the processor is configured to read the program in the memory to implement the steps of the terminal data uplink method as described in any one of claims 1 to 4; or, to implement the steps of the terminal data uplink method as described in any one of claims 5 to 6; or, to implement the steps of the terminal data uplink method as described in any one of claims 7 to 9.
20. A readable storage medium for storing a program, characterized in that, When the program is executed by the processor, it implements the steps of the terminal data uplink method as described in any one of claims 1 to 4; or, implements the steps of the terminal data uplink method as described in any one of claims 5 to 6; or, implements the steps of the terminal data uplink method as described in any one of claims 7 to 9.