A method and system for secure transmission of data streams for production testing

Abstract

The application belongs to the technical field of communication, and discloses a data stream safety transmission method for production test, which comprises the following steps: a plurality of groups of to-be-tested solid state disks store to-be-authenticated safety data; a group of test benches obtains the to-be-authenticated safety data from the groups of to-be-tested solid state disks; a group of transfer servers receives the to-be-authenticated safety data sent by the group of test benches, and sends the to-be-authenticated safety data to a remote safety authentication server; the remote safety authentication server verifies the to-be-authenticated safety data, and issues digital signature safety data; wherein each test bench corresponds to a main transfer server and a standby transfer server of the group of transfer servers; the test bench sends the to-be-authenticated safety data to the corresponding main transfer server, and returns the digital signature safety data if the main transfer server is verified.

Description

Technical Field

[0001] This invention relates to the field of communication technology, and in particular to a method and system for secure data stream transmission in production testing. Background Technology

[0002] During production testing of solid-state drives (SSDs), certain products require secure locking / unlocking operations. The unlocking process necessitates interaction with a remote key server at the customer's location to obtain the necessary digital signature file. At a functional testing site in the production process, each SSD needs to retrieve secure encrypted data from the remote key server. However, the connection to the key server is an international VPN connection, and occasional network instability can cause failures in obtaining secure data, leading to production test interruptions.

[0003] Typically, secure data transmission architectures utilize a single network. To avoid network congestion caused by multiple machines concurrently accessing a remote secure data authentication server, multiple SSDs on a single machine sequentially exchange secure data. Considering that obtaining a digital signature from a single SSD might fail (e.g., exceeding time limits or containing incorrect data), a cyclical retry mechanism is employed. If the first attempt to obtain signature data fails, the test machine will resend an interaction request to the remote secure data authentication server (the number of attempts is configurable). The drawback of this approach is that in the event of network anomalies, the sequential attempts by multiple SSDs on the test machine to connect to the remote secure data authentication server significantly increase testing time. Furthermore, once the set number of attempts is reached, the test is considered a failure, severely reducing the product's test yield. Summary of the Invention

[0004] The purpose of this invention is to provide a secure data stream transmission method and system for production testing, thereby solving the aforementioned problems.

[0005] The technical solution provided by this invention is as follows:

[0006] In some embodiments, the present invention provides a secure data stream transmission system for production testing, comprising:

[0007] Multiple groups of solid-state drives to be tested, each group of solid-state drives to be tested includes multiple solid-state drives to be tested, and each solid-state drive to be tested stores security data to be authenticated;

[0008] A test bench group includes multiple test benches, each of which is connected to one of the solid-state drives under test (SSDs) for obtaining the security data to be certified from the SSDs under test.

[0009] The relay server group includes multiple relay servers, which are used to receive the security data to be authenticated from the test equipment and send the security data to be authenticated to a remote security authentication server.

[0010] The remote security authentication server is used to verify the security data to be authenticated and to issue digital signature security data.

[0011] Each of the test machines corresponds to one main relay server and one backup relay server in the relay server group;

[0012] The testing machine sends the security data to be authenticated to the corresponding main relay server, and verifies the main relay server, returning the digital signature security data.

[0013] In some implementation methods:

[0014] The test machine can acquire the authentication security data sent in parallel by each solid-state drive under test in the solid-state drive group connected to the test machine, and synchronously send the authentication security data to the main relay server to wait for the digital signature security data.

[0015] In some implementation methods:

[0016] The test equipment is also used to verify the validity of the digital signature security data after it has been acquired.

[0017] Once the digital signature security data is verified, the test machine unlocks the corresponding solid-state drive under test.

[0018] If the digital signature security data fails verification, the test machine retrieves the security data to be authenticated from the solid-state drive under test again and sends the security data to be authenticated to the corresponding main relay server.

[0019] In some implementation methods:

[0020] Once the digital signature security data is verified, the test machine also generates a key file based on the digital signature security data and uses the key file to unlock the corresponding solid-state drive under test.

[0021] In some implementation methods:

[0022] When the test machine fails to connect to the main relay server, the test machine switches to connect to the backup relay server.

[0023] When the test machine successfully connects to the backup relay server and the digital signature security data obtained from the backup relay server passes verification, the test machine updates the backup relay server to the primary relay server.

[0024] When the test machine fails to connect to the backup relay server, it switches to connect to the main relay server. This process is repeated until the number of connection failures exceeds a preset number of cycles, at which point the test machine issues a network error alert.

[0025] In some embodiments, the present invention provides a method for secure data stream transmission for production testing, comprising:

[0026] The test equipment group acquires the security data to be certified from the solid-state drives under test;

[0027] The relay server group receives the security data to be authenticated sent by the test machine and sends the security data to be authenticated to the remote security authentication server;

[0028] The remote security authentication server verifies the security data to be authenticated and sends digital signature security data to the test machine;

[0029] The test machine verifies the digital signature security data returned by the main relay server; wherein, the solid-state drive group under test has multiple solid-state drives under test, and each solid-state drive under test stores security data to be authenticated;

[0030] Each test bench corresponds to a set of SSDs under test and a relay server set, consisting of a primary relay server and a backup relay server.

[0031] In some implementation methods:

[0032] Each SSD in the same group of SSDs under test sends security data to be certified to the test machine in parallel.

[0033] The testing machine synchronously sends the security data to be authenticated to the corresponding main relay server in order to wait for the digital signature security data.

[0034] In some implementation methods:

[0035] After acquiring the digital signature security data, the testing equipment verifies the validity of the digital signature security data.

[0036] Once the digital signature security data is verified, the test machine unlocks the corresponding solid-state drive under test.

[0037] If the digital signature security data fails verification, the test machine retrieves the security data to be authenticated from the solid-state drive under test again and sends the security data to be authenticated to the corresponding main relay server.

[0038] In some implementation methods:

[0039] Once the digital signature security data is verified, the test machine generates a key file based on the digital signature security data and uses the key file to unlock the corresponding solid-state drive under test.

[0040] In some implementation methods:

[0041] When the test machine fails to connect to the main relay server, the test machine switches to connect to the backup relay server.

[0042] When the test machine successfully connects to the backup relay server and the digital signature security data obtained from the backup relay server passes verification, the test machine updates the backup relay server to the primary relay server.

[0043] If the test machine fails to connect to the backup relay server, it switches to connect to the primary relay server, and repeats this process until the number of connection failures exceeds a preset number of cycles. At this point, the test machine issues a network error alert. 。

[0044] Compared with the prior art, the beneficial effects of the data stream secure transmission method and system for production testing of the present invention are as follows:

[0045] (i) This invention greatly improves the robustness of SSD testing systems in acquiring security data and reduces the workload of testers.

[0046] (ii) This invention improves the testing yield of SSD products and ensures product quality.

[0047] (III) This invention significantly reduces the increase in testing time caused by network anomalies and improves testing efficiency.

[0048] (iv) This invention provides an effective solution for secure and reliable data transmission, effectively enhancing the company's competitiveness. Attached Figure Description

[0049] The preferred embodiments will be described below in a clear and easy-to-understand manner, with reference to the accompanying drawings, to further explain the above-mentioned characteristics, technical features, advantages, and implementation methods of a data stream secure transmission method and system for production testing.

[0050] Figure 1This is a schematic diagram of an embodiment of the secure data stream transmission method for production testing in this invention;

[0051] Figure 2 This is a schematic diagram of an embodiment of the secure data stream transmission system for production testing in this invention;

[0052] Figure 3 This is a schematic diagram of an embodiment of the secure data stream transmission method for production testing in this invention;

[0053] Figure 4 This is a schematic diagram of an embodiment of the secure data stream transmission method for production testing in this invention;

[0054] Figure 5 This is a schematic diagram of the parallel unlocking mode of multiple SSDs in this invention. Detailed Implementation

[0055] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the specific implementation methods of the present invention will be described below with reference to the accompanying drawings. Obviously, the drawings described below are merely some embodiments of the present invention. For those skilled in the art, other drawings and other implementation methods can be obtained based on these drawings without any creative effort.

[0056] To keep the drawings concise, only the parts relevant to the invention are shown schematically in each figure, and they do not represent the actual structure of the product. Furthermore, for ease of understanding, in some figures, only one of components with the same structure or function is shown schematically, or only one is labeled. In this document, "one" can mean not only "only one" but also "more than one".

[0057] In one embodiment, such as Figure 2 As shown, the first group of solid-state drives under test (SSDs) connected to the first test bench (Tester1) includes multiple SSDs SSD1 to SSDn. The second group of SSDs under test connected to the second test bench (Tester2) also includes multiple SSDs SSD1 to SSDn.

[0058] In this embodiment, during the production testing of the solid-state drive (SSD), when performing security encryption or unlocking operations on the SSD under test, it is necessary to interact with the customer's remote key server to obtain the digital signature file required for encryption or unlocking. This security data to be authenticated serves as request data for obtaining digital signature security data from the customer's remote key server.

[0059] The test bench group includes multiple test benches Tester1 to Testern, each of which is connected to one of the solid-state drives under test (SSD1 to SSDn) and obtains security data to be certified from each connected solid-state drive under test.

[0060] In this embodiment, the test bench group includes multiple test benches Tester1 to Testern. The solid-state drives SSD1 to SSDn connected to each test bench transmit the security data to be certified in a concurrent manner. Compared with the previous serial transmission of security data to be certified, the data transmission efficiency is improved, thereby greatly improving the efficiency of product production testing.

[0061] The relay server group includes multiple relay servers (Server) for receiving the security data to be authenticated from the test equipment and sending the security data to be authenticated to the remote security authentication server (RemoteServer).

[0062] The RemoteServer is used to verify the received security data to be authenticated and to issue digitally signed security data.

[0063] Each test machine corresponds to a main relay server and a backup relay server in the relay server group.

[0064] like Figure 2 In the test, Tester1 can connect to Server#1 and Server#2. When Tester1 connects to Server#1, Server#1 acts as the MainServer, while Server#2 acts as a backup relay server.

[0065] In this embodiment, the test machine Tester1 sends the security data to be authenticated to the corresponding main relay server Server#1 and verifies the validity of the digital signature security data returned by the main relay server.

[0066] Once the digital signature security data is verified, Tester1 unlocks the corresponding solid-state drives under test, SSD1 to SSDn.

[0067] When the digital signature security data expires due to timeout or other reasons and fails verification, the test machine Tester1 re-obtains the security data to be authenticated from the solid-state drives SSD1 to SSDn connected to it, and sends the received security data to be authenticated to the corresponding main relay server.

[0068] Once the digital signature security data is verified, Tester1 generates a key file based on the digital signature security data and uses the key file to unlock the corresponding solid-state drives SSD1 to SSDn under test.

[0069] In another embodiment, when Tester1 fails to connect to the current primary relay server Server#1, Tester1 switches to connect to the backup relay server Server#2.

[0070] When Tester1 successfully connects to the backup relay server Server#2, and the digital signature security data obtained from the backup relay server Server#2 passes verification, Tester1 updates the backup relay server Server#2 to the main relay server MainServer.

[0071] In another embodiment, if Tester1 fails to connect to the backup relay server Server#2, it will attempt to switch back to the primary relay server Server#1. If the connection is successful, Tester1 will send the security data to be authenticated to the primary relay server Server#1 and verify the validity of the digital signature security data returned by the primary relay server Server#1.

[0072] If Tester1 fails to connect to the current primary relay server Server#1 again, Tester1 will switch to connecting to the backup relay server Server#2.

[0073] This process is repeated until the number of failed connections exceeds the preset number of cycles, at which point the test machine Tester1 issues a network error alert. 。

[0074] This invention establishes a reliable and secure data flow implementation system for production testing. Utilizing a dual-channel redundancy mechanism, it effectively ensures the security and integrity of data transmission even under abnormal international VPN connection conditions, particularly intermittent interruptions, thereby maximizing test yield and production efficiency.

[0075] In one embodiment, the test equipment can acquire the authentication security data sent in parallel by each solid-state drive under test in the solid-state drive group connected to the test equipment, and synchronously send the authentication security data to the main relay server to wait for the digital signature security data.

[0076] For example, after Tester1 obtains the keydata (security data to be authenticated) from the connected SSDs SSD1 to SSDn, Tester1 sends this keydata to the remote security authentication server (RemoteServer) through one of the relay servers, Server#1 or #2. If the communication with this relay server is normal, the tester1 will obtain the digitally signed security data from the remote security authentication server and send it back to the test program. Tester1 will check the validity of this digitally signed security data; if an error is returned, it will try to send the keydata again.

[0077] In one embodiment, such as Figure 1 , 3 As shown in Figures 4 and 5, the present invention provides a method for secure data stream transmission in production testing, comprising:

[0078] The S101 test suite obtains security data to be certified from the solid-state drive group under test;

[0079] The S102 relay server group receives the security data to be authenticated sent by the test machine and sends the security data to be authenticated to the remote security authentication server.

[0080] The remote security authentication server described in S103 verifies the security data to be authenticated and issues digital signature security data.

[0081] The test equipment described in S104 verifies the digital signature security data returned by the main relay server;

[0082] The test solid-state drive group has multiple test solid-state drives, each of which stores security data to be certified; each test machine corresponds to a test solid-state drive group and a relay server group, with one main relay server and one backup relay server.

[0083] In one embodiment, each SSD in the same group of SSDs under test sends security data to be certified to the connected test equipment in parallel.

[0084] The testing equipment synchronously sends the security data to be authenticated to the corresponding main relay server in order to wait for the digital signature security data.

[0085] In one embodiment, after acquiring the digital signature security data, the test machine verifies the validity of the digital signature security data.

[0086] Once the digital signature security data is verified, the test machine unlocks the corresponding solid-state drive under test.

[0087] If the digital signature security data fails verification, the test machine retrieves the security data to be authenticated from the solid-state drive under test again and sends the security data to be authenticated to the corresponding main relay server.

[0088] In one embodiment, after the digital signature security data is verified, the test machine generates a key file based on the digital signature security data and uses the key file to unlock the corresponding solid-state drive under test.

[0089] In one embodiment, based on the above embodiments, the present invention provides a method for secure data stream transmission in production testing, which further includes:

[0090] When the test machine fails to connect to the main relay server, the test machine switches to connect to the backup relay server.

[0091] Once the test machine successfully connects to the backup relay server and the digital signature security data obtained from the backup relay server passes verification, the test machine will update the backup relay server to the primary relay server.

[0092] When the test machine fails to connect to the backup relay server, it switches to connect to the main relay server; this process is repeated until the number of connection failures exceeds the preset number of cycles, at which point the test machine issues a network error alert.

[0093] This invention proposes a method for implementing reliable and secure data flow in production testing. Utilizing a dual-channel redundancy mechanism, it effectively ensures the security and integrity of data transmission even under abnormal international VPN connection conditions, particularly intermittent interruptions, thereby maximizing test yield and production efficiency.

[0094] The secure data transmission architecture of this invention employs a dual data network mechanism, with each of the two servers using an international VPN line. These two international VPN connections are essentially completely independent. When one network fails, the connection will automatically switch to the other server's network connection.

[0095] Meanwhile, the serial attempts to secure data connections for a single machine's SSD were changed to concurrent attempts, maximizing the bandwidth allowed by the normal operation of the two networks and significantly reducing the time spent on abnormal attempts. Combined with a cyclical retry method, testing can continue as soon as one network connection is restored, greatly improving the efficiency of production testing.

[0096] The original implementation of this invention's system used a single-path network mechanism, and the SSD secure data authentication process was as follows: Figure 3 As shown:

[0097] (1) The test program retrieves keydata (security data to be authenticated) from the SSD;

[0098] (2) The test program sends keydata to the relay server and obtains the digitally signed security data from the remote security authentication server;

[0099] (3) Check the validity of the digital signature's security data. If an error is returned, start over from step (1).

[0100] (4) The test program uses digitally signed security data to generate a key file for unlocking;

[0101] (5) The test program uses a key file to unlock the SSD.

[0102] In step (3), if the set number of loop attempts is reached and the returned result is consistently an error, the test program will prompt the operator that there is a network error and will continue to loop and attempt to connect to the remote security authentication server until the set maximum number of loops or the maximum allowed time is reached, at which point the current test will be interrupted. During the connection attempt, other SSDs under test are in a waiting state.

[0103] Current implementation of the system of the present invention

[0104] In the current solution, one test machine can connect to two relay servers. If the default relay server Server#1 is the Main Server, then the relay server Server#2 is the backup server (which can be configured in the configuration file). These two relay servers use different VPN international networks. This invention employs a two-tier secure data VPN network mechanism. If one network fails, the test program immediately switches to the other relay server's network for testing.

[0105] The unlocking logic currently implemented in this invention is as follows: Figure 4 As shown:

[0106] (1) The test program retrieves keydata (security data to be authenticated) from the SSD;

[0107] (2) The test program connects to the main relay server Server1. After successful connection, the test program sends keydata to the relay server Server1. The relay server Server1 obtains digital signature security data from the remote security authentication server.

[0108] (3) The test program checks the validity of the secure data of the digital signature;

[0109] If the check returns an error, start over from step (1);

[0110] If the check returns a valid result, try again and obtain a valid digital signature, then proceed to step (4). If multiple attempts still fail, prompt the operator with a network error and continue looping from step (1) to try again. If it is impossible to continue for an extended period of time, the operator may choose to interrupt the attempt and stop the test;

[0111] (4) The test program uses digitally signed security data to generate a key file for unlocking;

[0112] (5) The test program uses the key file to unlock the SSD.

[0113] In step (2), when the test program fails to connect to the main relay server Server1, the test program switches to connect to the backup relay server Server2.

[0114] Once the test program connects successfully with the backup relay server Server2, proceed to step (3);

[0115] As in step (3), the digital signature security data obtained from the backup relay server Server2 is checked and returned as valid. The step also includes: the test program updates the backup relay server Server2 to the main relay server MainServer.

[0116] In step (2), if the test program fails to connect to the backup relay server Server#2, the test program will attempt to switch to the main relay server Server1. If the connection is successful, the test program will send the security data to be authenticated to the main relay server Server1 and verify the validity of the digital signature security data returned by the main relay server Server1.

[0117] If the test program fails to connect to the current primary relay server Server1 again, the test program will switch to connecting to the backup relay server Server2.

[0118] This process is repeated until the number of failed connections exceeds the preset number of cycles, at which point the test machine issues a network error alert.

[0119] MainServer is the current working server. Its update principle is: if the test program fails to connect to the current server, but another server on a different line can connect normally, the replacement server is set as MainServer. The purpose of updating MainServer is to ensure that the next SSD test can directly use the verified and working MainServer, avoiding entering a cycle of continuous attempts.

[0120] In this embodiment, the present invention provides a network anomaly early warning mechanism. When the test program fails to obtain the correct digital signature security data from both connection lines for a period of time (which can be set), a warning message will pop up to remind the operator to promptly resolve the secure network connection problem in order to ensure the smooth progress of production line testing.

[0121] 1) For secure data transmission for obtaining digital signatures, a redundancy mechanism is used to greatly reduce the risk of test interruption due to network anomalies, avoid SSD test failure due to test timeouts or interruptions, and significantly improve SSD test yield and production efficiency.

[0122] 2) A loop-based trial mechanism was designed to address the situation where both network paths are abnormal. The test program will repeatedly attempt to access the two relay servers according to the set access time interval. When the secure data connection of either path is restored, the SSD can be securely unlocked without manual intervention, which effectively ensures the continuity of the test and greatly reduces the burden on test engineers.

[0123] 3) A real-time MainServer update mechanism was designed. When one of the servers experiences a network failure, the program will update the other normal server as the MainServer. At the start of the next test, queries will begin directly from the verified MainServer to obtain the digitally signed security data, avoiding the process of repeatedly trying from the abnormal server and effectively saving testing time.

[0124] 4) Optimize the serial unlocking mode of multiple SSDs to a parallel unlocking mode (e.g., Figure 5 As shown in the figure, by making full use of the bandwidth under normal network conditions, the success rate of secure data interaction is greatly improved, and the efficiency of testing is maximized.

[0125] It should be noted that the above embodiments can be freely combined as needed. The above description is only a preferred embodiment of the present invention. It should be pointed out that for those skilled in the art, several improvements and modifications can be made without departing from the principle of the present invention, and these improvements and modifications should also be considered within the scope of protection of the present invention.

Claims

1. A secure data stream transmission system for production testing, characterized in that, include: Multiple groups of solid-state drives to be tested, each group of solid-state drives to be tested includes multiple solid-state drives to be tested, and each solid-state drive to be tested stores security data to be authenticated; A test bench group includes multiple test benches, each of which is connected to one of the solid-state drives under test (SSDs) for obtaining the security data to be certified from the SSDs under test. The relay server group includes multiple relay servers, which are used to receive the security data to be authenticated from the test equipment and send the security data to be authenticated to a remote security authentication server. The remote security authentication server is used to verify the security data to be authenticated and to issue digital signature security data. Each of the test machines corresponds to one main relay server and one backup relay server in the relay server group; Each SSD in the same group of SSDs under test sends authentication security data to the connected test machine in parallel; the test machine synchronously sends the authentication security data to the corresponding main relay server and verifies the digital signature security data returned by the main relay server. When the test machine fails to connect to the main relay server, the test machine switches to connect to the backup relay server. When the test machine successfully connects to the backup relay server and the digital signature security data obtained from the backup relay server passes verification, the test machine updates the backup relay server to the primary relay server.

2. The secure data stream transmission system for production testing as described in claim 1, characterized in that: The test machine can acquire the authentication security data sent in parallel by each solid-state drive under test in the solid-state drive group connected to the test machine, and synchronously send the authentication security data to the main relay server to wait for the digital signature security data.

3. The secure data stream transmission system for production testing as described in claim 1, characterized in that: The test equipment is also used to verify the validity of the digital signature security data after it has been acquired. Once the digital signature security data is verified, the test machine unlocks the corresponding solid-state drive under test. If the digital signature security data fails verification, the test machine retrieves the security data to be authenticated from the solid-state drive under test again and sends the security data to be authenticated to the corresponding main relay server.

4. The secure data stream transmission system for production testing as described in claim 3, characterized in that: Once the digital signature security data is verified, the test machine also generates a key file based on the digital signature security data and uses the key file to unlock the corresponding solid-state drive under test.

5. The secure data stream transmission system for production testing as described in claim 1, characterized in that: When the test machine fails to connect to the backup relay server, it switches to connect to the main relay server. This process is repeated until the number of connection failures exceeds a preset number of cycles, at which point the test machine issues a network error alert.

6. A method for secure data stream transmission in production testing, characterized in that, include: The test equipment group acquires the security data to be certified from the solid-state drives under test; The relay server group receives the security data to be authenticated sent by the test machine and sends the security data to be authenticated to the remote security authentication server; The remote security authentication server verifies the security data to be authenticated and sends digital signature security data to the test machine; The test machine verifies the digital signature security data returned by the main relay server; wherein, the solid-state drive group under test has multiple solid-state drives under test, and each solid-state drive under test stores security data to be authenticated; each solid-state drive under test in the same solid-state drive group under test sends the security data to be authenticated to the connected test machine in parallel; Each test unit corresponds to a set of solid-state drives under test and a relay server set, with one main relay server and one backup relay server; the test unit synchronously sends the security data to be certified to the corresponding main relay server; when the test unit fails to connect to the main relay server, the test unit switches to connect to the backup relay server; When the test machine successfully connects to the backup relay server and the digital signature security data obtained from the backup relay server passes verification, the test machine updates the backup relay server to the primary relay server.

7. The secure data stream transmission method for production testing as described in claim 6, characterized in that: Each SSD in the same group of SSDs under test sends security data to be certified to the test machine in parallel. The testing machine synchronously sends the security data to be authenticated to the corresponding main relay server in order to wait for the digital signature security data.

8. The secure data stream transmission method for production testing as described in claim 6, characterized in that: After acquiring the digital signature security data, the testing equipment verifies the validity of the digital signature security data. Once the digital signature security data is verified, the test machine unlocks the corresponding solid-state drive under test. If the digital signature security data fails verification, the test machine retrieves the security data to be authenticated from the solid-state drive under test again and sends the security data to be authenticated to the corresponding main relay server.

9. The secure data stream transmission method for production testing as described in claim 8, characterized in that: Once the digital signature security data is verified, the test machine generates a key file based on the digital signature security data and uses the key file to unlock the corresponding solid-state drive under test.

10. The secure data stream transmission method for production testing as described in claim 6, characterized in that: When the test machine fails to connect to the backup relay server, it switches to connect to the main relay server. This process is repeated until the number of connection failures exceeds a preset number of cycles, at which point the test machine issues a network error alert.

Images