Head-end device verification method

Abstract

The present invention discloses a head-end device verification method, comprising: using a time-based verification algorithm to verify a gateway device, if the verification is passed, the device is kept online, and if the verification is not passed, the device is offline; when the gateway device leaves the factory, an initial block of a blockchain is preset, and the initial block is written into a read-only partition, which cannot be changed, and contains the identity information of all head-end devices authenticated by the operator when the gateway device is produced; establishing a distributed storage network: the operator starts a block publishing server as a node and waits for other gateway devices to join the node network; when the gateway device joins the distributed network, the blockchain data of the existing distributed network is learned through the Paxos algorithm, and after obtaining the latest data, it is determined according to the data in the blockchain whether the currently connected head-end device is the device of the operator to which it belongs, and if not, it is automatically offline; the present invention can effectively prevent the problem of gateway devices being misappropriated by other operators.

Description

Technical Field

[0001] The present invention relates to the technical field of network security, and in particular to a head-end device verification method. Background Art

[0002] With the opening of the market, users can choose the service provider's current gateway equipment among multiple network operators. When users change operators, as long as other operators enter the device's MAC or other authentication methods into their own systems, the network access equipment will be misappropriated by other operators, resulting in property losses for the original operator, which becomes an urgent problem that needs to be solved. Summary of the invention

[0003] In order to solve the problems existing in the prior art, the purpose of the present invention is to provide a head-end device verification method, which can effectively prevent the gateway device from being misappropriated by other operators.

[0004] To achieve the above object, the technical solution adopted by the present invention is: a head-end device verification method, comprising the following steps:

[0005] Step 1: Use a time-based verification algorithm to verify the gateway device. If the verification passes, it will remain online. If the verification fails, it will go offline.

[0006] Step 2: The initial block of the blockchain is preset when the gateway device leaves the factory. The initial block is written into the read-only partition and cannot be changed. It contains the identity information of all the head-end devices authenticated by the operator when the gateway device is produced;

[0007] Step 3: Establish a distributed storage network: The operator starts the block publishing server as a node and waits for other gateway devices to join the node network;

[0008] Step 4: After the gateway device joins the distributed network, it uses the Paxos algorithm to learn the blockchain data of the existing distributed network. After obtaining the latest data, it determines whether the currently connected headend device is the device of the operator based on the data in the blockchain. If not, it automatically goes offline.

[0009] As a further improvement of the present invention, in step 1, the time-based verification algorithm is specifically as follows:

[0010] The management platform holds the key. When the device connects to the management platform, the management platform generates a password based on its own time and sends the password together with the current system time to the gateway device. The gateway device is preset with the same key as the management platform when it leaves the factory. After receiving the password and time sent by the management platform, it generates a password based on the time sent by the management platform and compares it with the password of the management platform. If the passwords are the same, it stays online; if the passwords are different, it goes offline.

[0011] As a further improvement of the present invention, it also includes: if the gateway device does not receive the password and time sent by the management platform within a certain period of time after being online, it will automatically go offline.

[0012] As a further improvement of the present invention, the management platform is a TR069 protocol system or a SNMP protocol system.

[0013] As a further improvement of the present invention, in step 3, if the gateway device successfully goes online and obtains the ability to access the Internet, the gateway device maintains the routing between nodes and searches for other node devices through the Kademlia algorithm, and establishes a distributed storage network with other node devices; if the gateway device cannot search for other node devices within a certain period of time, the gateway device actively goes offline.

[0014] As a further improvement of the present invention, the following steps are also included:

[0015] When the operator's head-end equipment needs to be added or replaced, the block publishing server will submit the information of the head-end equipment that needs to be added or replaced to the blockchain network in the form of a proposal, and the gateway device will make a decision. If the gateway device detects that the information in the proposal matches the information in the blockchain, the proposal will be passed, and all gateway devices and block publishing servers will store the latest blockchain data.

[0016] As a further improvement of the present invention, if the gateway device is misappropriated by other operators and the other operators pass the time-based verification algorithm in step 1; when the gateway device is successfully online, if it is not added to the distributed network, it will automatically go offline; if it is added to the distributed network, the blockchain information will be verified to detect whether the existing head-end device is an authenticated head-end device, and if not, it will automatically go offline.

[0017] The beneficial effects of the present invention are:

[0018] The present invention is based on a time-based verification algorithm and blockchain technology, combined with the advantages of a large number of gateway devices, to form a distributed network. Through the form of blockchain, the operator's head-end device is authenticated. If it is found that the head-end device is not the device of the operator itself, it is directly taken offline, effectively preventing the gateway device from being misappropriated by other operators. The present invention has extremely high advancement and application promotion value. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] Figure 1 A schematic diagram of a time-based verification algorithm in an embodiment of the present invention;

[0020] Figure 2 The figure is a schematic diagram of the network in the embodiment of the present invention. DETAILED DESCRIPTION

[0021] The embodiments of the present invention are described in detail below with reference to the accompanying drawings.

[0022] Example

[0023] A head-end device verification method, this embodiment combines the advantages of a large number of gateway devices to form a distributed network, and uses blockchain technology to authenticate the operator's head-end device; specifically includes:

[0024] 1. If Figure 1 As shown, the time-based verification algorithm:

[0025] The management platform (such as TR069, SNMP) holds the key. When the device connects to the management platform, the management platform generates a 6-digit password based on its own time and sends the password and the current system time to the gateway device. The gateway device is preset with the same key as the management platform when it leaves the factory. After receiving the password and time sent by the management platform, it generates a password based on the time sent by the management platform and compares it with the password of the management platform. If the passwords are the same, it stays online, and if the passwords are different, it goes offline. If the gateway device does not receive the password and time sent by the management platform within a certain period of time after being online, it will automatically go offline. This method can avoid the problem of gateway devices being misappropriated to a certain extent.

[0026] 2. If Figure 2 As shown in the figure, the head-end device verification mechanism based on blockchain technology:

[0027] The initial block of the blockchain is preset when the gateway device leaves the factory. This block is written to the read-only partition and cannot be changed. This block contains the identity information (MAC, UUID, etc.) of all head-end devices that have been authenticated by the customer operator when the device is produced.

[0028] The Paxos algorithm is used to maintain the consistency of blockchain data. There are three roles in the algorithm: proposer, decision maker, and decision learner:

[0029] Proposer: Proposes a proposal, including the proposal number and the proposed value.

[0030] Decision makers: Participate in decision making and respond to the proposer's proposal. After receiving the proposal, they can accept it. If the proposal is accepted by the majority of decision makers, it is said to be approved.

[0031] Decision learner: does not participate in decision making, but learns the latest consensus proposals from proposers or decision makers.

[0032] There are two types of node devices on the network: decision maker and decision learner device (gateway device), proposer and decision learner device (block publishing server). The proposer learner device is a device stored inside the operator. The device can store and verify blockchain information and has the ability to publish new blocks. The decision maker learner device refers to the gateway device, which has the ability to verify and store blockchain, but cannot publish blocks.

[0033] Establish a distributed storage network: The operator starts the block publishing server as a node and waits for other devices to join the node network. If the gateway device (decision maker learner device) is successfully online on the authentication device and obtains the ability to access the Internet, the gateway device maintains the routing between nodes through the Kademlia algorithm, searches for other node devices, and establishes a distributed storage network with other node devices. If the gateway device cannot search for other node devices within a certain period of time, the gateway device will take the initiative to go offline.

[0034] When the gateway device joins the distributed network, it first learns the blockchain data of the existing distributed network as a decision learner through the Paxos algorithm. After obtaining the latest data, it determines whether the currently connected headend device is the device of the operator according to the data in the blockchain. If not, it automatically goes offline.

[0035] When the operator's head-end equipment needs to be added or replaced, the block publishing server will submit the information of the head-end equipment that needs to be added or replaced to the blockchain network in the form of a proposal, and the gateway device will make a decision. If the gateway device detects that the information in the proposal matches the information in the blockchain, the proposal will be passed, and all gateway devices and block publishing servers will store the latest blockchain data.

[0036] If the gateway device is misappropriated by other operators, and other operators find ways to pass the verification of the time algorithm. After the gateway device is successfully online, if it is not added to the distributed network, it will automatically go offline. If it is added to the distributed network, the blockchain information will be verified to detect whether the existing head end is an authenticated head end device. If not, it will automatically go offline. Due to the decentralization of distributed storage and the security of the Paxos algorithm, and the gateway device does not have the proposed authority, this authentication method is not easy to be tampered with. It has good security.

[0037] The above-mentioned embodiments only express the specific implementation of the present invention, and the description thereof is relatively specific and detailed, but it cannot be understood as limiting the scope of the present invention. It should be pointed out that, for ordinary technicians in this field, several variations and improvements can be made without departing from the concept of the present invention, which all belong to the protection scope of the present invention.

Claims

1. A head-end device verification method, characterized in that: The following steps are involved: Step 1: Use a time-based verification algorithm to verify the gateway device. If the verification passes, it will remain online. If the verification fails, it will go offline. In step 1, the time-based verification algorithm is as follows: The management platform holds the key. When the device connects to the management platform, the management platform generates a password based on its own time and sends the password and the current system time to the gateway device. The gateway device is preset with the same key as the management platform when it leaves the factory. After receiving the password and time sent by the management platform, it generates a password based on the time sent by the management platform and compares it with the password of the management platform. If the passwords are the same, it stays online; if the passwords are different, it goes offline. Step 2: The initial block of the blockchain is preset when the gateway device leaves the factory. The initial block is written into the read-only partition and cannot be changed. It contains the identity information of all the head-end devices authenticated by the operator when the gateway device is produced; Step 3: Establish a distributed storage network: The operator starts the block publishing server as a node and waits for other gateway devices to join the node network; Step 4: After the gateway device joins the distributed network, it uses the Paxos algorithm to learn the blockchain data of the existing distributed network. After obtaining the latest data, it detects whether the existing head-end device is an authenticated head-end device based on the data in the blockchain and determines whether the currently connected head-end device is the device of the operator. If not, it automatically goes offline.

2. The head-end device verification method according to claim 1, characterized in that: Also includes: If the gateway device does not receive the password and time sent by the management platform within a certain period of time after being online, it will automatically go offline.

3. The head-end device verification method according to claim 2, characterized in that: The management platform is a TR069 protocol system or a SNMP protocol system.

4. The head-end device verification method according to claim 1, 2 or 3, characterized in that: In step 3, if the gateway device successfully goes online and obtains the ability to access the Internet, the gateway device uses the Kademlia algorithm to maintain the routing between nodes, search for other node devices, and establish a distributed storage network with other node devices; If the gateway device cannot search for other node devices within a certain period of time, the gateway device will automatically go offline.

5. The head-end device verification method according to claim 4, characterized in that: The following steps are also included: When the operator's head-end equipment needs to be added or replaced, the block publishing server will submit the information of the head-end equipment that needs to be added or replaced to the blockchain network in the form of a proposal, and the gateway device will make a decision. If the gateway device detects that the information in the proposal matches the information in the blockchain, the proposal will be passed, and all gateway devices and block publishing servers will store the latest blockchain data.

6. The head-end device verification method according to claim 5, characterized in that: If the gateway device is misappropriated by other operators, and the other operators pass the time-based verification algorithm in step 1; when the gateway device is successfully online, if it has not been added to the distributed network, it will automatically go offline; if it has been added to the distributed network, the blockchain information will be verified to detect whether the existing head-end device is an authenticated head-end device, if not, it will automatically go offline.

Images