A method for increasing the number of encrypted communication accesses

Abstract

The application discloses a method for improving the number of encrypted communication accesses, and relates to the field of encrypted communication, which comprises the following steps: a central office device establishes a connection with a first terminal device; the central office device stores the device information of the first terminal device into an ID-KEY-soft table; the ID-KEY table is checked, and if the ID-KEY table is not full, the device information of the first terminal device is stored into the ID-KEY table; when the central office device and the first terminal device perform data interaction, if the device information of the first terminal device exists in the ID-KEY table, a first data interaction operation is performed; if the device information of the first terminal device does not exist in the ID-KEY table, the device information of a terminal device in the ID-KEY table is replaced with the device information of the first terminal device in the ID-KEY-soft table, and it is marked in the ID-KEY-soft table that the device information of the first terminal device has been stored into the ID-KEY table and the device information of the replaced terminal device has not been stored into the ID-KEY table, and then a second data interaction operation is performed. The application can improve the number of terminal devices connected to the central office device.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of encrypted communication technology, and more particularly, to a method for increasing the number of encrypted communication access. BACKGROUND

[0002] In point-to-multipoint encrypted communication, a central office device and each access terminal device use different keys to encrypt the transmitted data, and the terminal device cannot decrypt the data that does not belong to itself, thereby achieving the security of data transmission. For the central office device, in order to ensure the real-time of encrypted and decrypted data, an ID-KEY chip is generally used for encryption and decryption operation. According to the ID of the terminal device, the ID-KEY chip looks up the corresponding key KEY and performs encryption or decryption operation, and returns the encrypted or decrypted data to the CPU. The ID-KEY chip needs to store the ID and KEY of the terminal device, and its capacity is limited. If the number of access terminal devices exceeds the capacity of the ID-KEY chip, the terminal devices exceeding the capacity cannot access the network. SUMMARY

[0003] The present application aims to solve the problem in the prior art that if the number of access terminal devices exceeds the capacity of the ID-KEY chip, the terminal devices exceeding the capacity cannot access the central office device, and provides a method for increasing the number of encrypted communication access, which can increase the number of terminal devices accessing the central office device.

[0004] To achieve the above-mentioned purpose of the present application, the technical solution adopted is as follows:

[0005] A method for increasing the number of encrypted communication access, the method comprising the following steps:

[0006] The central office device establishes a connection with a first terminal device;

[0007] The central office device stores the device information of the first terminal device into an ID-KEY-soft table;

[0008] The central office device checks the ID-KEY table, and if the ID-KEY table is not full, stores the device information of the first terminal device into the ID-KEY table, and marks in the ID-KEY-soft table that the device information of the first terminal device has been stored into the ID-KEY table;

[0009] If the ID-KEY table is full, mark in the ID-KEY-soft table that the device information of the first terminal device has not been stored into the ID-KEY table;

[0010] When the central office device interacts with the first terminal device, if the device information of the first terminal device exists in the ID-KEY table, a first data interaction operation is performed; if the device information of the first terminal device does not exist in the ID-KEY table, the device information of one terminal device in the ID-KEY table is replaced by the device information of the first terminal device in the ID-KEY-soft table, and it is marked in the ID-KEY-soft table that the device information of the first terminal device has been stored in the ID-KEY table, and it is marked in the ID-KEY-soft table that the device information of the replaced terminal device has not been stored in the ID-KEY table, and then a second data interaction operation is performed.

[0011] Preferably, the device information includes an identification number ID and a key KEY.

[0012] Preferably, the central office device interacts with the first terminal device, including the following:

[0013] The central office device sends data to the first terminal device;

[0014] The central office device receives data of the first terminal device.

[0015] Preferably, when the central office device interacts with the first terminal device, if the device information of the first terminal device exists in the ID-KEY table, a first data interaction operation is performed, including the following:

[0016] When the central office device sends data to the first terminal device, if the device information of the first terminal device exists in the ID-KEY table, the data to be sent is encrypted according to the key KEY of the first terminal device, and the encrypted data is sent to the first terminal device;

[0017] When the central office device receives data of the first terminal device, if the device information of the first terminal device exists in the ID-KEY table, the received data is decrypted according to the key KEY of the first terminal device, and the decrypted data is sent to the CPU for processing.

[0018] Preferably, the second data interaction operation is performed again, including:

[0019] When the central office device sends data to the first terminal device, the data to be sent is encrypted again according to the key KEY of the first terminal device, and the encrypted data is sent to the first terminal device;

[0020] When the central office device receives data of the first terminal device, the received data is decrypted again according to the key KEY of the first terminal device, and the decrypted data is sent to the CPU for processing.

[0021] Preferably, the replacing the device information of one terminal device in the ID-KEY table with the device information of the first terminal device in the ID-KEY-soft table comprises: replacing the device information of one terminal device in the ID-KEY table which has not been used for the longest time with the device information of the first terminal device in the ID-KEY-soft table.

[0022] Preferably, the number of entries in the ID-KEY table is less than the number of entries in the ID-KEY-soft table.

[0023] Preferably, the method further comprises: dividing the ID-KEY table into several groups, and the ratio of the number of entries in different groups to the number of corresponding terminal devices is different.

[0024] Preferably, the method further comprises: when the first terminal device is disconnected from the central office device, deleting the device information of the first terminal device in the ID-KEY table and the ID-KEY-soft table.

[0025] Preferably, the ID-KEY table is stored in an ID-KEY chip of the central office device.

[0026] The beneficial effects of the present application are as follows:

[0027] In view of the problem in the prior art that if the number of access terminal devices exceeds the capacity of the ID-KEY chip, the terminal devices exceeding the capacity cannot access the central office device, the present application sets an ID-KEY-soft table, which can also store device information and replace the device information in the ID-KEY table, and the present application can increase the number of terminal devices accessing the central office device. BRIEF DESCRIPTION OF DRAWINGS

[0028] In order to make the purpose, technical solutions of the present application more clear, the present application provides the following drawings and makes the following description:

[0029] Figure 1 The overall flowchart of the present application. DETAILED DESCRIPTION

[0030] The embodiments of the present application will be described below with reference to the drawings and preferred embodiments, and those skilled in the art can easily understand other advantages and effects of the present application from the content disclosed in the present specification. The present application can also be implemented or applied by different specific embodiments, and the details in the present specification can be modified or changed based on different views and applications without departing from the spirit of the present application. It should be understood that the preferred embodiments are only for illustrating the present application, and are not intended to limit the protection scope of the present application.

[0031] Embodiment 1

[0032] As Figure 1 shown in the figure, a method for increasing the number of encrypted communication accesses, the method comprising the steps as follows:

[0033] The central office device establishes a connection with the first terminal device;

[0034] The central office device stores the device information of the first terminal device into the ID-KEY-soft table;

[0035] The central office device checks the ID-KEY table, if the ID-KEY table is not full, stores the device information of the first terminal device into the ID-KEY table, and marks in the ID-KEY-soft table that the device information of the first terminal device has been stored into the ID-KEY table;

[0036] If the ID-KEY table is full, mark in the ID-KEY-soft table that the device information of the first terminal device has not been stored into the ID-KEY table;

[0037] When the central office device and the first terminal device perform data interaction, if the device information of the first terminal device exists in the ID-KEY table, execute the first data interaction operation; if the device information of the first terminal device does not exist in the ID-KEY table, replace the device information of one terminal device in the ID-KEY table with the device information of the first terminal device in the ID-KEY-soft table, mark in the ID-KEY-soft table that the device information of the first terminal device has been stored into the ID-KEY table, mark in the ID-KEY-soft table that the device information of the replaced terminal device has not been stored into the ID-KEY table, and then execute the second data interaction operation.

[0038] Preferably, the device information comprises an identification number ID and a key KEY.

[0039] Preferably, the data interaction between the central office device and the first terminal device comprises the following:

[0040] The central office device sends data to the first terminal device;

[0041] The central office device receives data from the first terminal device.

[0042] Preferably, when the central office device and the first terminal device perform data interaction, if the device information of the first terminal device exists in the ID-KEY table, execute the first data interaction operation, which comprises the following:

[0043] When the central office device sends data to the first terminal device, if the device information of the first terminal device exists in the ID-KEY table, encrypt the data to be sent according to the key KEY of the first terminal device, and send the encrypted data to the first terminal device;

[0044] When the central office device receives data of the first terminal device, if the device information of the first terminal device exists in the ID-KEY table, the received data is decrypted according to the key KEY of the first terminal device, and the decrypted data is sent to the CPU for processing.

[0045] Preferably, the re-executing the second data interaction operation comprises:

[0046] When the central office device sends data to the first terminal device, the to-be-sent data is encrypted according to the key KEY of the first terminal device, and the encrypted data is sent to the first terminal device.

[0047] When the central office device receives data of the first terminal device, the received data is decrypted according to the key KEY of the first terminal device, and the decrypted data is sent to the CPU for processing.

[0048] Preferably, the replacing the device information of one terminal device in the ID-KEY table with the device information of the first terminal device in the ID-KEY-soft table comprises: replacing the device information of one terminal device in the ID-KEY table which has not been used for the longest time with the device information of the first terminal device in the ID-KEY-soft table.

[0049] Preferably, the number of entries in the ID-KEY table is less than the number of entries in the ID-KEY-soft table.

[0050] In a specific embodiment, the number of entries in the ID-KEY table is 64.

[0051] Preferably, the method further comprises dividing the ID-KEY table into a plurality of groups, and the number of entries in different groups is different from the ratio of the corresponding number of terminal devices.

[0052] In a specific embodiment, the greater the ratio of the number of entries in a group to the corresponding number of terminal devices, the higher the communication quality of the corresponding terminal device.

[0053] Preferably, the method further comprises deleting the device information of the first terminal device in the ID-KEY table and the ID-KEY-soft table when the first terminal device is disconnected from the central office device.

[0054] Preferably, the ID-KEY table is stored in an ID-KEY chip of the central office device.

[0055] The application increases the access quantity by the ID-KEY-soft table without increasing the hardware cost of the central office equipment; in order to ensure the real-time and reliability of the communication, the application also provides a grouping, which can distinguish the different terminal equipment, ensures the real-time and reliability, and achieves the purpose of expansion.

[0056] Embodiment 2

[0057] The method for increasing the access quantity of the encrypted communication of embodiment 1, the working principle, comprising the following:

[0058] The central office equipment establishes the connection with the first terminal equipment;

[0059] The central office equipment stores the equipment information of the first terminal equipment into the ID-KEY-soft table; the equipment information includes the identification number ID and the key KEY;

[0060] The central office equipment checks the ID-KEY table, if the ID-KEY table is not full, stores the equipment information of the first terminal equipment into the ID-KEY table, and marks in the ID-KEY-soft table that the equipment information of the first terminal equipment has been stored into the ID-KEY table;

[0061] If the ID-KEY table is full, marks in the ID-KEY-soft table that the equipment information of the first terminal equipment is not stored into the ID-KEY table;

[0062] When the central office equipment sends the data to the first terminal equipment, if the equipment information of the first terminal equipment exists in the ID-KEY table, encrypts the to-be-sent data according to the key KEY of the first terminal equipment, sends the encrypted data to the first terminal equipment;

[0063] If the equipment information of the first terminal equipment does not exist in the ID-KEY table, replaces the equipment information of the terminal equipment which has not been used for the longest time in the ID-KEY table with the equipment information of the first terminal equipment in the ID-KEY-soft table, marks in the ID-KEY-soft table that the equipment information of the first terminal equipment has been stored into the ID-KEY table, marks in the ID-KEY-soft table that the equipment information of the replaced terminal equipment is not stored into the ID-KEY table, and then encrypts the to-be-sent data according to the key KEY of the first terminal equipment, and sends the encrypted data to the first terminal equipment;

[0064] When the central office equipment receives the data of the first terminal equipment, if the equipment information of the first terminal equipment exists in the ID-KEY table, decrypts the received data according to the key KEY of the first terminal equipment, and sends the decrypted data to the CPU for processing;

[0065] If the device information of the first terminal device does not exist in the ID-KEY table, the received data is sent to the CPU for processing, if the CPU judges that the received data needs to be decrypted, the device information of the terminal device which has not been used for the longest time in the ID-KEY table is replaced by the device information of the first terminal device in the ID-KEY-soft table, and it is marked in the ID-KEY-soft table that the device information of the first terminal device has been stored to the ID-KEY table, it is marked in the ID-KEY-soft table that the device information of the replaced terminal device has not been stored to the ID-KEY table, and the received data is decrypted according to the key KEY of the first terminal device, and the decrypted data is sent to the CPU for processing;

[0066] When the first terminal device is disconnected from the central office device, the device information of the first terminal device in the ID-KEY table and the ID-KEY-soft table is deleted.

[0067] Embodiment 3

[0068] The method for increasing the number of encrypted communication accesses in Embodiment 1, the working principle, includes the following:

[0069] The central office device establishes a connection with the second terminal device and the third terminal device respectively;

[0070] The central office device stores the device information of the second terminal device and the third terminal device to the ID-KEY-soft table;

[0071] The device information of the second terminal device includes an identification number ID2 and a key KEY2, and the device information of the third terminal device includes an identification number ID3 and a key KEY3;

[0072] The ID-KEY table is divided into a T2 group and a T3 group, the ratio of the number of table entries in the T2 group to the corresponding number of terminal devices is 1:1, and the ratio of the number of table entries in the T3 group to the corresponding number of terminal devices is 1:2;

[0073] The device information of the second terminal device is stored to the T2 group, and it is marked in the ID-KEY-soft table that the device information of the second terminal device has been stored to the T2 group;

[0074] When the central office device sends data to the second terminal device, the to-be-sent data is encrypted according to the key KEY2 of the second terminal device in the T2 group, and the encrypted data is sent to the second terminal device;

[0075] When the central office device receives data of the second terminal device, the received data is decrypted according to the key KEY2 of the second terminal device in the T2 group, and the decrypted data is sent to the CPU for processing;

[0076] When the second terminal device is disconnected from the central office device, the device information of the second terminal device in the T2 group and the ID-KEY-soft table is deleted;

[0077] The central office device checks the T3 group, if the T3 group is not full, the device information of the third terminal device is stored in the T3 group, and the ID-KEY-soft table is marked that the device information of the third terminal device has been stored in the T3 group;

[0078] If the T3 group is full, the ID-KEY-soft table is marked that the device information of the third terminal device is not stored in the T3 group;

[0079] When the central office device sends data to the third terminal device, if the device information of the third terminal device exists in the T3 group, the data to be sent is encrypted according to the key KEY3 of the third terminal device, and the encrypted data is sent to the third terminal device;

[0080] If the device information of the third terminal device does not exist in the T3 group, the device information of a terminal device which has not been used for the longest time in the T3 group is replaced by the device information of the third terminal device in the ID-KEY-soft table, the ID-KEY-soft table is marked that the device information of the third terminal device has been stored in the T3 group, the ID-KEY-soft table is marked that the device information of the replaced terminal device is not stored in the T3 group, the data to be sent is encrypted according to the key KEY3 of the third terminal device, and the encrypted data is sent to the third terminal device;

[0081] When the central office device receives data of the third terminal device, if the device information of the third terminal device exists in the T3 group, the received data is decrypted according to the key KEY3 of the third terminal device, and the decrypted data is sent to the CPU for processing;

[0082] If the device information of the third terminal device does not exist in the T3 group, the received data is sent to the CPU for processing, if the CPU judges that the received data needs to be decrypted, the device information of a terminal device which has not been used for the longest time in the T3 group is replaced by the device information of the third terminal device in the ID-KEY-soft table, the ID-KEY-soft table is marked that the device information of the third terminal device has been stored in the T3 group, the ID-KEY-soft table is marked that the device information of the replaced terminal device is not stored in the T3 group, the received data is decrypted according to the key KEY3 of the third terminal device, and the decrypted data is sent to the CPU for processing;

[0083] When the third terminal device is disconnected from the central office device, the device information of the third terminal device in the T3 packet and the ID-KEY-soft table is deleted.

[0084] Obviously, the above-mentioned embodiments of the present application are only examples for clearly illustrating the present application, but not limitation on the embodiments of the present application. Any modification, equivalent replacement and improvement etc. within the spirit and principle of the present application should be included in the protection scope of the claims of the present application.

Claims

1. A method for increasing the number of encrypted communication accesses, characterized in that: The method includes the following steps: The central office equipment establishes a connection with the first terminal equipment; The central office equipment stores the device information of the first terminal device in the ID-KEY-soft table; The central office checks the ID-KEY table. If the ID-KEY table is not full, the equipment information of the first terminal device is stored in the ID-KEY table, and the equipment information of the first terminal device is marked in the ID-KEY-soft table. If the ID-KEY table is full, then mark the first terminal device's device information in the ID-KEY-soft table as not stored in the ID-KEY table; When the central office equipment interacts with the first terminal equipment, if the device information of the first terminal equipment exists in the ID-KEY table, the first data interaction operation is executed. If the device information of the first terminal device does not exist in the ID-KEY table, then the device information of a terminal device in the ID-KEY table is replaced with the device information of the first terminal device in the ID-KEY-soft table. The device information of the first terminal device is marked in the ID-KEY-soft table and the device information of the replaced terminal device is marked in the ID-KEY-soft table. Then the second data interaction operation is performed. When the central office equipment interacts with the first terminal equipment, if the device information of the first terminal equipment exists in the ID-KEY table, the first data interaction operation is performed, including the following: When the central office equipment sends data to the first terminal equipment, if the device information of the first terminal equipment exists in the ID-KEY table, the data to be sent is encrypted according to the key of the first terminal equipment, and the encrypted data is sent to the first terminal equipment. When the central office equipment receives data from the first terminal device, if the device information of the first terminal device exists in the ID-KEY table, the received data is decrypted according to the key KEY of the first terminal device, and the decrypted data is sent to the CPU for processing. The second data interaction operation includes: When the central office equipment sends data to the first terminal equipment, it encrypts the data to be sent according to the key of the first terminal equipment and sends the encrypted data to the first terminal equipment. When the central office equipment receives data from the first terminal equipment, it decrypts the received data according to the key of the first terminal equipment and sends the decrypted data to the CPU for processing.

2. The method for increasing the number of encrypted communication accesses according to claim 1, characterized in that: The device information includes an ID and a key.

3. The method for increasing the number of encrypted communication accesses according to claim 1, characterized in that: The central office equipment and the first terminal equipment interact with each other by data, including the following: The central office equipment sends data to the first terminal equipment; The central office equipment receives data from the first terminal equipment.

4. The method for increasing the number of encrypted communication accesses according to claim 1, characterized in that: The step of replacing the device information of a terminal device in the ID-KEY table with the device information of the first terminal device in the ID-KEY-soft table includes: replacing the device information of the terminal device in the ID-KEY table that has not been used for the longest time with the device information of the first terminal device in the ID-KEY-soft table.

5. The method for increasing the number of encrypted communication accesses according to claim 1, characterized in that: The number of entries in the ID-KEY table is less than the number of entries in the ID-KEY-soft table.

6. The method for increasing the number of encrypted communication accesses according to claim 1, characterized in that: The method further includes dividing the ID-KEY table into several groups, with different ratios of the number of entries to the corresponding number of terminal devices in different groups.

7. The method for increasing the number of encrypted communication accesses according to claim 1, characterized in that: The method further includes deleting the device information of the first terminal device from the ID-KEY table and the ID-KEY-soft table when the first terminal device disconnects from the central office equipment.

8. The method for increasing the number of encrypted communication accesses according to claim 1, characterized in that: The ID-KEY table is stored in the ID-KEY chip of the central office equipment.

Images