A method and system for node seismic permit control

Abstract

This invention proposes a nodal seismograph license control method and system, relating to the field of tunnel advanced geological prediction technology. It includes: a gateway and multiple nodes pre-store their respective unique identification codes and license information; a host computer sends instructions to the gateway and nodes to query the gateway or node identification codes, receives encrypted identification codes returned by the gateway or nodes, and parses them; the host computer sends instructions to the gateway and nodes to query the gateway or node license information, receives encrypted license information returned by the gateway or nodes, parses it, and, based on the recent running time, expiration time, and host computer time in the license information, determines whether the host computer time is later than the recent running time and earlier than the expiration time. If so, the license verification is successful, and the recent running time of the gateway or node is updated using the host computer time. This invention not only has an effective anti-cracking license management mechanism but also a secure and convenient license update mechanism.

Description

Technical Field

[0001] This invention belongs to the field of tunnel advanced geological prediction, and in particular relates to a nodal seismograph permission control method and system. Background Technology

[0002] Nodal seismographs used in tunnel advanced geological prediction typically consist of one host computer, one gateway, and multiple acquisition nodes. When used in tunnels, these nodal seismographs often lack internet access and the ability to acquire external time (such as GPS time). Integrating RTC time into the nodes themselves is neither accurate nor necessary.

[0003] Seismograph licensing refers to authorizing a user to use a specific seismograph for a certain period of time. Licensing control refers to the management and renewal of seismograph licenses.

[0004] Existing licensing control methods generally include:

[0005] Online licensing: When the instrument is running, it first connects to the supplier's licensing server via the internet to obtain a license. This method requires the instrument to be connected to the internet.

[0006] Dongle License: License information is stored in the dongle. The device can only operate after connecting to the dongle. The license information in this method cannot be updated.

[0007] Key authorization: Authorization information is stored on the host computer, and the instrument verifies the key before operation. This method is very easy to crack. Summary of the Invention

[0008] To overcome the shortcomings of the prior art, the present invention provides a nodal seismograph license control method and system, which not only has an effective anti-hacking license management mechanism, but also a secure and convenient license update mechanism.

[0009] To achieve the above objectives, one or more embodiments of the present invention provide the following technical solutions:

[0010] The first aspect of the present invention provides a permission control method for a nodal seismograph.

[0011] A method for controlling the permission of a nodal seismograph includes the following steps:

[0012] The gateway and multiple nodes each pre-store their own unique identification code and license information, which includes the manufacturing date, the most recent running time, and the expiration date.

[0013] The host computer sends instructions to the gateway and nodes to query the gateway or node identification code, receives the encrypted identification code returned by the gateway or node, and parses it.

[0014] The host computer sends instructions to the gateway and nodes to query the license information of the gateway or node, receives the encrypted license information returned by the gateway or node, parses it, and determines whether the host computer time is later than the recent running time and earlier than the expiration time based on the recent running time, expiration time and host computer time in the license information. If so, the license verification is successful, and the recent running time of the gateway or node is updated using the host computer time.

[0015] Optionally, if the host computer time is later than the most recent running time, it is determined that the host computer time has been modified and needs to be corrected before running.

[0016] If the host computer time is later than the most recent running time, but also later than the expiration time, the license has expired and needs to be renewed before running.

[0017] Optionally, the host computer, gateway, and nodes store the same key, which is a byte array Key. The length of Key, Lkey, is greater than the length of each data frame. When the host computer interacts with the gateway and nodes, all three parties need to encrypt the data. The encryption process is as follows:

[0018] The sender generates a random number r;

[0019] If the length of the message Osignle to be sent is Lsignle, then the range of r is [0, Lkey-Lsignle].

[0020] Starting with r, extract a data value of length Lsignle, Kvalue, from the key data Key as the encryption key for the message Osignle to be sent. The encrypted message is:

[0021] Fsignle = Osignle + Kvalue;

[0022] Fsignle, Osignle, and Kvalue are all byte arrays. In the case of overflow when adding two bytes, the carry is discarded.

[0023] Optionally, the decryption process is the reverse of the encryption process:

[0024] Osignle = Fsignle + Kvalue.

[0025] Optionally, if the host computer's time is later than the expiration time, the license information is considered invalid.

[0026] Further determine if the gateway is invalid. If so, lock the seismograph and update the license information to unlock it.

[0027] If not, the current node will be locked, and the node needs to be unlocked by updating the permission information.

[0028] Optionally, after the seismograph license expires and is locked, the host computer needs to obtain the license serial number to unlock the seismograph. The license serial number encryption process is as follows:

[0029] The encryption key is the same as the key stored in the executable file on the host computer, and is a byte array Key;

[0030] The encryption program generates a random number r. The length of the information to be encrypted, Olic, is Llic. Then the range of r is [0, Lkey-Llic].

[0031] Starting with r, extract a data of length Llic Klic from the key data Key and use it as the encryption key for the message Osignle to be sent this time. Then the encrypted message will be...

[0032] Flic = Olic + Klic;

[0033] Flic, Olic, and Klic are all byte arrays. If the addition of two bytes overflows, the carry is discarded.

[0034] Flic is cyclically shifted with a shift length of n to generate Flicm;

[0035] Flicm is divided by 26, and the quotient and remainder are both increased by 65 and stored as two adjacent bytes to generate Flicd. The length of the Flicd array is twice the length of the Flicm array.

[0036] Convert the bytes in Flicd to strings represented in ASCII code.

[0037] Optionally, the host computer can parse the license serial number, obtain the expiration date, and then write it into the gateway or node via an encrypted data stream to unlock the seismograph or node.

[0038] A second aspect of the present invention provides a nodal seismograph permission control system.

[0039] A nodal seismograph permission control system, comprising:

[0040] The pre-storage module is configured such that the gateway and multiple nodes pre-store their respective unique identification codes and license information, the license information including the manufacturing date, the most recent running time, and the expiration date.

[0041] The identification code encryption and parsing module is configured to: send instructions from the host computer to the gateway and nodes to query the identification code of the gateway or node, receive the encrypted identification code returned by the gateway or node, and parse it;

[0042] The license information encryption and parsing module is configured as follows: the host computer sends instructions to the gateway and nodes to query the license information of the gateway or node, receives the encrypted license information returned by the gateway or node, parses it, and determines whether the host computer time is later than the recent running time and earlier than the expiration time based on the recent running time, expiration time and host computer time in the license information. If so, the license verification is successful, and the recent running time of the gateway or node is updated using the host computer time.

[0043] A third aspect of the invention provides a computer-readable storage medium having a program stored thereon that, when executed by a processor, implements the steps of the nodal seismograph permission control method as described in the first aspect of the invention.

[0044] A fourth aspect of the present invention provides an electronic device including a memory, a processor, and a program stored in the memory and executable on the processor, wherein the processor, when executing the program, implements the steps of the nodal seismograph permission control method as described in the first aspect of the present invention.

[0045] The above one or more technical solutions have the following beneficial effects:

[0046] 1. This invention provides a nodal seismograph license control method and system. Each time the nodal seismograph runs, it updates the most recent running time, which is stored in the gateway or node. This can effectively prevent the license from being cracked by changing the host computer time, reinstalling the software, or reinstalling the system.

[0047] 2. This invention encrypts the information flow, which can prevent third-party software from hijacking the information flow and tampering with the license information.

[0048] 3. The three parts of the license information verification in this invention complement each other, so that the license information verification runs through the entire process of using the seismograph, and eliminates the possibility of cracking the license by changing nodes or other means.

[0049] 4. The information contained in the encrypted license of this invention avoids the situation of multiple uses of a single license and long-term validity, thereby improving the security of license management.

[0050] Advantages of additional aspects of the invention will be set forth in part in the description which follows, and in part will be obvious from the description, or may be learned by practice of the invention. Attached Figure Description

[0051] The accompanying drawings, which form part of this invention, are used to provide a further understanding of the invention. The illustrative embodiments of the invention and their descriptions are used to explain the invention and do not constitute an improper limitation of the invention.

[0052] Figure 1 This is a flowchart of the permission control method for nodal seismographs.

[0053] Figure 2 This is a flowchart for verifying license information. Detailed Implementation

[0054] It should be noted that the following detailed descriptions are exemplary and intended to provide further illustration of the invention. Unless otherwise specified, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this invention pertains.

[0055] It should be noted that the terminology used herein is for the purpose of describing particular implementations only and is not intended to limit the exemplary implementations of the present invention.

[0056] Where there is no conflict, the embodiments and features in the embodiments of the present invention can be combined with each other.

[0057] The overall concept proposed in this invention is as follows:

[0058] In this invention, the gateway and nodes constituting the nodal seismograph have unique identification codes, and their licensing information consists of three parts: manufacturing date, most recent operating time, and expiration date. After the identification code and licensing information are encrypted, they are exchanged between the host computer and the gateway or node. The identification code, licensing information, and encryption mechanism work together to ensure the effectiveness of licensing control.

[0059] Once a node seismograph expires and is locked, users can unlock it by purchasing a new authorized serial number. The serial number is unique and time-sensitive, ensuring the security of the license control.

[0060] Example 1

[0061] This embodiment discloses a permission control method for nodal seismographs.

[0062] like Figure 1 , Figure 2 As shown, a permission control method for a nodal seismograph includes the following steps:

[0063] The gateway and multiple nodes each pre-store their own unique identification code and license information, which includes the manufacturing date, the most recent running time, and the expiration date.

[0064] The host computer sends instructions to the gateway and nodes to query the gateway or node identification code, receives the encrypted identification code returned by the gateway or node, and parses it.

[0065] The host computer sends instructions to the gateway and nodes to query the license information of the gateway or node, receives the encrypted license information returned by the gateway or node, parses it, and determines whether the host computer time is later than the recent running time and earlier than the expiration time based on the recent running time, expiration time and host computer time in the license information. If so, the license verification is successful, and the recent running time of the gateway or node is updated using the host computer time.

[0066] To address the technical problems mentioned above, this embodiment provides a nodal seismograph license control method, which not only has an effective anti-hacking license management mechanism but also a secure and convenient license update mechanism.

[0067] The first aspect of this embodiment provides licensing information and its verification mechanism.

[0068] The host computer is directly connected to the gateway, and the host computer communicates with the nodes through the gateway.

[0069] Both the gateway and the node have a unique identifier, which is stored in their respective memory, written at the factory, and cannot be changed.

[0070] The gateway and nodes store their respective permission information in their memory.

[0071] The above licensing information consists of three sets of time data.

[0072] Table 1. License Information Structure

[0073] Manufacturing time Recent runtime Date of Expiry

[0074] The manufacturing time is written at the factory and cannot be changed.

[0075] The most recent run time is written at the factory and is consistent with the factory time. Each time the instrument runs, it checks whether the computer time is between the most recent run time and the expiration time. If the result is true, the host computer writes the computer time into the gateway or node to update its most recent run time.

[0076] The expiration date is written at the factory, determining the initial license expiration time. Each time the instrument runs, it checks if the computer time has exceeded the expiration date. If the check is true, the license has expired, and the instrument is prohibited from use. The instrument can only be used again after the license is renewed.

[0077] The second aspect is information flow encryption.

[0078] This invention provides an information flow encryption mechanism for encrypting the information flow between a host computer and a gateway or node.

[0079] The host computer, gateway, and nodes store the same key, which is a byte array Key, and the length of Key, Lkey, is much larger than the length of each frame of data.

[0080] The host computer's key is written in the executable file, while the gateway and node keys are written in the embedded program.

[0081] Furthermore, the message sender generates a random number r.

[0082] If the length of the message Osignle to be sent is Lsignle, then the range of r is [0, Lkey-Lsignle].

[0083] Furthermore, starting with r, a data value of length Lsignle, Kvalue, is extracted from the key data Key and used as the encryption key for the message Osignle to be sent this time. The encrypted message will then be...

[0084] Fsignle = Osignle + Kvalue;

[0085] Fsignle, Osignle, and Kvalue are all byte arrays. In the case of overflow when adding two bytes, the carry is discarded.

[0086] Decryption is the reverse of encryption.

[0087] Osignle = Fsignle + Kvalue;

[0088] The third aspect provides a license information verification process.

[0089] This invention designs a data frame for communication.

[0090] Table 2. Structure of Encrypted Data Frames

[0091]

[0092] License information verification consists of three parts:

[0093] First, the license information is verified during the initial operation of the instrument;

[0094] Second, verify license information during critical command interactions (such as setting parameters);

[0095] Third, verify the license information if the timeout period (e.g., 5 minutes) is exceeded.

[0096] The verification process for license information is the same for all three parts, as follows:

[0097] 1. The host computer issues a command to query the gateway or node identification code;

[0098] 2. The gateway or node returns an encrypted identification code, which is then parsed by the host computer and stored in its running memory;

[0099] 3. The host computer issues a command to query the gateway or node permission information;

[0100] 4. The gateway or node returns encrypted license information, which is then parsed by the host computer.

[0101] 5. Determine if the license information is valid. If valid, continue to verify the license information of the next node; if invalid, proceed to step 6.

[0102] 6. Determine if it is a gateway. If so, lock the seismograph and update the permission information to unlock it. If not, lock the current node and update the permission information to unlock it. Proceed to step 7.

[0103] 7. Continue to verify the license information for the next node.

[0104] The fourth aspect provides a method for updating license information.

[0105] Once a seismograph license expires and is locked, the user can purchase a new license serial number from the supplier to unlock the seismograph.

[0106] The license serial number mentioned above is an encrypted string. This serial number contains the following information.

[0107] Table 3 License Serial Number Information

[0108]

[0109] The identification code restricts the serial number to be valid only for a specific gateway or node;

[0110] The expiration date is the main information carried by the serial number;

[0111] The generation date and expiration date of the serial number together determine the expiration date of the serial number, indicating that the serial number is only valid for a certain period of time.

[0112] The serial number encryption process is as follows:

[0113] The encryption key is the same as the key stored in the executable file on the host computer, which is a byte array Key.

[0114] Furthermore, the encryption program generates a random number r. The length of the information to be encrypted, Olic, is Llic. Therefore, the value range of r is [0, Lkey - Llic].

[0115] Furthermore, starting with r, a data segment of length Llic, Klic, is extracted from the key data Key and used as the encryption key for the message Osignle sent this time. The encrypted message will then be...

[0116] Flic = Olic + Klic;

[0117] Flic, Olic, and Klic are all byte arrays. If the addition of two bytes overflows, the carry is discarded.

[0118] Furthermore, Flic is cyclically shifted with a shift length of n to generate Flicm;

[0119] Furthermore, Flicm is divided by 26, and the quotient and remainder are both increased by 65 and stored as two adjacent bytes to generate Flicd. The length of the Flicd array is twice the length of the Flicm array.

[0120] Furthermore, the bytes in Flicd are converted into strings represented in ASCII code.

[0121] The decryption process is the reverse of the encryption process.

[0122] The host computer parses the license, obtains the expiration date, and then writes it into the gateway or node via an encrypted data stream, thereby unlocking the seismograph or node.

[0123] Example 2

[0124] This embodiment discloses a nodal seismograph permission control system.

[0125] A nodal seismograph permission control system, comprising:

[0126] The pre-storage module is configured such that the gateway and multiple nodes pre-store their respective unique identification codes and license information, the license information including the manufacturing date, the most recent running time, and the expiration date.

[0127] The identification code encryption and parsing module is configured to: send instructions from the host computer to the gateway and nodes to query the identification code of the gateway or node, receive the encrypted identification code returned by the gateway or node, and parse it;

[0128] The license information encryption and parsing module is configured as follows: the host computer sends instructions to the gateway and nodes to query the license information of the gateway or node, receives the encrypted license information returned by the gateway or node, parses it, and determines whether the host computer time is later than the recent running time and earlier than the expiration time based on the recent running time, expiration time and host computer time in the license information. If so, the license verification is successful, and the recent running time of the gateway or node is updated using the host computer time.

[0129] Example 3

[0130] The purpose of this embodiment is to provide a computer-readable storage medium.

[0131] A computer-readable storage medium having a computer program stored thereon that, when executed by a processor, implements the steps of the nodal seismograph permission control method as described in Embodiment 1 of this disclosure.

[0132] Example 4

[0133] The purpose of this embodiment is to provide an electronic device.

[0134] An electronic device includes a memory, a processor, and a program stored in the memory and executable on the processor, wherein the processor, when executing the program, implements the steps in the nodal seismograph permission control method as described in Embodiment 1 of this disclosure.

[0135] The steps and methods involved in the apparatuses of Embodiments 2, 3, and 4 above correspond to those in Embodiment 1. For specific implementation details, please refer to the relevant description section of Embodiment 1. The term "computer-readable storage medium" should be understood as a single medium or multiple media including one or more instruction sets; it should also be understood as including any medium capable of storing, encoding, or carrying an instruction set for execution by a processor and enabling the processor to perform any of the methods in this invention.

[0136] Those skilled in the art will understand that the modules or steps of the present invention described above can be implemented using general-purpose computer devices. Optionally, they can be implemented using computer-executable program code, thereby allowing them to be stored in a storage device for execution by a computer device, or they can be fabricated as separate integrated circuit modules, or multiple modules or steps can be fabricated as a single integrated circuit module. The present invention is not limited to any particular combination of hardware and software.

[0137] While the specific embodiments of the present invention have been described above in conjunction with the accompanying drawings, this is not intended to limit the scope of protection of the present invention. Those skilled in the art should understand that various modifications or variations that can be made by those skilled in the art without creative effort based on the technical solutions of the present invention are still within the scope of protection of the present invention.

Claims

1. A permission control method for a nodal seismograph, characterized in that, Includes the following steps: The gateway and multiple nodes each pre-store their own unique identification code and license information, which includes the manufacturing date, the most recent running time, and the expiration date. The host computer sends instructions to the gateway and nodes to query the gateway or node identification code, receives the encrypted identification code returned by the gateway or node, and parses it. The host computer sends instructions to the gateway and nodes to query the permission information of the gateway or node, receives the encrypted permission information returned by the gateway or node, parses it, and determines whether the host computer time is later than the recent running time and earlier than the expiration time based on the recent running time, expiration time and host computer time in the permission information. If so, the permission verification is successful, and the recent running time of the gateway or node is updated using the host computer time. If the host computer's time is later than the expiration time, the license information is deemed invalid. Further determine if the gateway is invalid. If so, lock the seismograph and update the license information to unlock it. If not, the current node will be locked, and the node needs to be unlocked by updating the permission information; After the seismograph license expires and is locked, the host computer needs to obtain the license serial number to unlock the seismograph. The license serial number encryption process is as follows: The encryption key is the same as the key stored in the executable file on the host computer. It is a byte array Key with a length of Lkey. The encryption program generates a random number r. The length of the information to be encrypted, Olic, is Llic. Then the range of r is [0, Lkey-Llic]. Starting with r, extract a data of length Llic Klic from the key data Key and use it as the encryption key for the message Osignle to be sent this time. Then the encrypted message will be... Flic = Olic + Klic; Flic, Olic, and Klic are all byte arrays. If the addition of two bytes overflows, the carry is discarded. Flic is cyclically shifted with a shift length of n to generate Flicm; Flicm is divided by 26, and the quotient and remainder are both increased by 65 and stored as two adjacent bytes to generate Flicd. The length of the Flicd array is twice the length of the Flicm array. Convert the bytes in Flicd to strings represented in ASCII.

2. The nodal seismograph permission control method as described in claim 1, characterized in that: If the host computer time is earlier than the most recent running time, it is determined that the host computer time has been modified and needs to be corrected before running. If the host computer time is later than the most recent running time, but also later than the expiration time, the license has expired and needs to be renewed before running.

3. The nodal seismograph permission control method as described in claim 1, characterized in that, The host computer, gateway, and nodes store the same key, which is a byte array Key. The length of Key, Lkey, is greater than the length of each data frame. When the host computer interacts with the gateway and nodes, all three parties need to encrypt the data. The encryption process is as follows: The sender generates a random number r; If the length of the message Osignle to be sent is Lsignle, then the range of r is [0, Lkey-Lsignle]. Starting with r, extract a data value of length Lsignle, Kvalue, from the key data Key as the encryption key for the message Osignle to be sent. The encrypted message is: Fsignle = Osignle + Kvalue; Fsignle, Osignle, and Kvalue are all byte arrays. In the case of overflow when adding two bytes, the carry is discarded.

4. The nodal seismograph permission control method as described in claim 3, characterized in that, The decryption process is the reverse of the encryption process: Osignle = Fsignle - Kvalue.

5. The nodal seismograph permission control method as described in claim 1, characterized in that, The host computer parses the license serial number, obtains the expiration date, and then writes it into the gateway or node via an encrypted data stream, thereby unlocking the seismograph or node.

6. A nodal seismograph permission control system, characterized in that, The nodal seismograph permission control method according to any one of claims 1-5 includes: The pre-storage module is configured such that the gateway and multiple nodes pre-store their respective unique identification codes and license information, the license information including the manufacturing date, the most recent running time, and the expiration date. The identification code encryption and parsing module is configured to: send instructions from the host computer to the gateway and nodes to query the identification code of the gateway or node, receive the encrypted identification code returned by the gateway or node, and parse it; The license information encryption and parsing module is configured as follows: the host computer sends instructions to the gateway and nodes to query the license information of the gateway or node, receives the encrypted license information returned by the gateway or node, parses it, and determines whether the host computer time is later than the recent running time and earlier than the expiration time based on the recent running time, expiration time and host computer time in the license information. If so, the license verification is successful, and the recent running time of the gateway or node is updated using the host computer time.

7. A computer-readable storage medium having a program stored thereon, characterized in that, When executed by the processor, the program implements the steps in the nodal seismograph permission control method as described in any one of claims 1-5.

8. An electronic device, comprising a memory, a processor, and a program stored in the memory and executable on the processor, characterized in that, When the processor executes the program, it implements the steps in the nodal seismograph permission control method as described in any one of claims 1-5.

Images