A method and system for controlling operation of LED display screen module

Abstract

The present invention relates to the technical field of LED display screens, and in particular to a method and system for controlling the operation of an LED display screen module. When a single-chip microcomputer is powered on or reset, the encryption and decryption algorithm pre-cured in the boot area of ​​the single-chip microcomputer is used, combined with a key generated by negotiation with a security authentication device, to decrypt the last log file and the last lock time; multiple preliminary reference times are obtained from at least two time sources, and the reference time is determined from the preliminary reference time; the reference time is compared and verified with the log time and lock time of the decrypted log file respectively; and the LED display screen module is controlled to work in a preset mode or a corresponding security mechanism is triggered according to the comparison and verification results to prevent the LED display screen module from being illegally started or operated. The present invention solves the problem that the encryption protection technology of the LED display screen is easily cracked or bypassed by adopting advanced encryption and decryption technology, multiple time source verification mechanism and intelligent security control strategy.

Description

Technical Field

[0001] The present invention relates to the technical field of LED display screens, and in particular to an LED display screen module operation control method and system. Background Art

[0002] As an important tool for modern information dissemination and advertising display, LED display screens have been widely used in various occasions. However, in the process of selling and leasing LED display screens, there is a problem of difficulty in collecting payments. This is mainly because many customers have payment terms when purchasing LED display screens. Whether it is a fixed installation or a display screen leasing business, once the display screen is in the hands of the user, the difficulty of collecting payments often increases, and it is impossible to provide sufficient collection guarantees.

[0003] At present, a relatively encrypted method has been adopted in the market. This encryption method is implemented on the control card, and the control card is encrypted and locked mainly by presetting the time. However, this encryption scheme has obvious disadvantages. Although it may have a certain effect for ordinary non-professional customers, its decryption scheme is relatively simple. Users only need to set the computer time to before encryption, and they can use the display screen without restrictions. Even more, users can continue to use the display screen by replacing other control cards, which undoubtedly reduces the effectiveness of encryption measures.

[0004] In summary, there is a problem of difficulty in collecting payment in the process of selling and leasing LED display screens, and the existing encryption technology is difficult to provide an effective solution. Therefore, it is necessary to develop a more advanced and secure technical means to solve this problem. Summary of the invention

[0005] 1. Technical issues to be resolved

[0006] In view of the above-mentioned shortcomings and deficiencies of the prior art, the present invention provides an LED display screen module operation control method and system, which solves the technical problem that the existing LED display screen encryption protection technology is easily cracked or circumvented.

[0007] (II) Technical solution

[0008] In order to achieve the above object, the main technical solutions adopted by the present invention include:

[0009] In a first aspect, an embodiment of the present invention provides an LED display screen module operation control method, when the single chip microcomputer is powered on or reset, the following steps are performed:

[0010] The encryption and decryption algorithm pre-cured in the boot area of ​​the single-chip microcomputer is used, combined with the key generated by negotiation with the connected security authentication device, to decrypt the last stored log file and the last lock time;

[0011] Obtaining a plurality of preliminary reference times from at least two time sources, and determining the reference time by performing a consistency check between the plurality of preliminary reference times;

[0012] Compare and verify the reference time with the log time of the decrypted log file and the decrypted lock time;

[0013] According to the comparison and verification results, the LED display screen module is controlled to work in a preset mode or a corresponding safety mechanism is triggered to prevent the LED display screen module from being illegally started or operated.

[0014] Optionally, before decrypting the last stored log file and the last lock time by using the encryption and decryption algorithm pre-cured in the boot area of ​​the single-chip microcomputer and the key generated by negotiation with the connected security authentication device, the following steps are included:

[0015] Check whether the encryption and decryption algorithm program is fixed in the boot area of ​​the microcontroller;

[0016] If no encryption and decryption algorithm program is detected, an error handling mechanism including at least one of restarting the microcontroller, entering a safe mode, and reporting an error is triggered;

[0017] If it is detected that there is an encryption and decryption algorithm program, it will check whether it is connected to the security authentication device;

[0018] If the security authentication device is not connected, an error handling mechanism including at least one of restarting the microcontroller, entering a safe mode, and reporting an error is triggered;

[0019] If the security authentication device has been connected, a key acquisition request with identity information is sent to the security authentication device so that the security authentication device can perform identity authentication;

[0020] After the identity authentication is passed, a key is generated by negotiating with the security authentication device at least once;

[0021] Among them, the encryption algorithm and decryption algorithm in the encryption and decryption algorithm program are set symmetrically.

[0022] Optionally, generating a key by performing at least one negotiation with a security authentication device includes:

[0023] generating a first random number;

[0024] Sending the first random number to the security authentication device, so that the security authentication device obtains the current timestamp and the network delay measurement value when receiving the first random number, generates and returns the second random number, and then mixes the current timestamp, the network delay measurement value, the first random number and the second random number, and obtains the first preliminary shared key by subjecting the mixed value to multiple rounds of hash iterations;

[0025] Receive the second random number returned by the security authentication device, obtain the current timestamp and the network delay measurement value, mix the current timestamp, the network delay measurement value, the first random number and the second random number, and calculate the second preliminary shared key by performing multiple rounds of hash iterations on the mixed values;

[0026] Verify whether the first preliminary shared key and the second preliminary shared key are the same by performing at least one encrypted interaction with the security authentication device that carries the first preliminary shared key and / or the second preliminary shared key test signal;

[0027] If the first preliminary shared key is the same as the second preliminary shared key, split the first preliminary shared key into multiple key fragments, re-arrange the key fragments into a final encryption key according to a fragment order determined based on the re-generated third random number, and simultaneously send an encrypted key splitting request carrying the third random number to the security authentication device, so that the security authentication device splits the second preliminary shared key into multiple key fragments, and re-arranges the key fragments into a final encryption key according to a fragment order determined based on the re-generated third random number;

[0028] The final encryption key generated through negotiation is used to establish communication interaction with the security authentication device.

[0029] Optionally, using the encryption and decryption algorithm pre-cured in the boot area of ​​the single-chip microcomputer, combined with the key generated by negotiation with the connected security authentication device, the last stored log file and the last locking time are decrypted, including:

[0030] Read the encrypted data of the last log file and the last lock time stored in the storage area of ​​the microcontroller;

[0031] The key generated through negotiation, the last log file and the encrypted data of the last lock time are used as input parameters of the decryption algorithm in the decryption algorithm program in the boot area;

[0032] Based on the decryption algorithm, the encrypted data of the last log file and the last lock time are subjected to at least one decryption cycle including iterative key superposition processing restoration, column combination conversion restoration, row circular shift restoration, and byte replacement restoration, and the decrypted log file and decrypted lock time are output.

[0033] Optionally, based on the decryption algorithm, the encrypted data of the last log file and the last lock time are subjected to at least one decryption cycle process including iterative key superposition processing restoration, column combination conversion restoration, row cyclic shift restoration, and byte replacement restoration, and the decrypted log file and the decrypted lock time are outputted, including:

[0034] Based on the decryption algorithm and the negotiated key, generate the same iterative key sequence as in the encryption algorithm;

[0035] Perform iterative key superposition processing and restoration on the encrypted data of the last log file and the last lock time according to the reverse sequence of the iterative key sequence to remove the superimposed iterative key;

[0036] According to the inverse matrix of the combination matrix set by the encryption algorithm, each column of the data matrix restored after the iterative key superposition processing of the encrypted data of the last log file and the last lock time is restored by combination transformation;

[0037] According to the inverse rule of the shift rule set in the encryption algorithm, each row of the data matrix after the column combination conversion and restoration of the encrypted data of the last log file and the last lock time is cyclically shifted and restored;

[0038] Splitting the data matrices of the last log file and the last lock time of the circular shift restoration into corresponding original formats respectively based on the identified specific fields containing repeated byte sequences, specific data markers or repeated character combinations;

[0039] According to the encryption substitution table set in the encryption algorithm, the last log file and the last lock time in the original format are read by sliding single byte in a dynamic window of at least single byte, so that each encrypted byte in the last log file and the last lock time in the original format is restored at least once, and the decrypted log file content and the decrypted lock time are output.

[0040] Optionally, controlling the LED display screen module to work in a preset mode or triggering a corresponding safety mechanism to prevent the LED display screen module from being illegally started or operated according to the comparison and verification result includes:

[0041] If the reference time is earlier than the log time of the last log file, or later than the last lock time, it is determined that the log file has been tampered with, and the LED display module is controlled to enter a lock state to prevent the LED display module from being illegally started or operated;

[0042] If the reference time is not earlier than the log time of the last log file and is not later than the last lock time, it is determined that the log file has not been tampered with, and the LED display screen module is controlled to start to ensure that the LED display screen module can work according to the preset mode.

[0043] Optionally, it includes: automatically creating a new log file and dynamically adjusting the lock time, and encrypting and storing the new log file and the adjusted lock time using an encryption algorithm and a negotiated key.

[0044] Optionally, automatically creating a new log file and dynamically adjusting the lock time, and encrypting and storing the new log file and the adjusted lock time using an encryption algorithm and a negotiated key include:

[0045] Automatically create a new log file;

[0046] Dynamically adjusting the last lock time according to the reference time, including scaling the lock time in proportion to the time deviation and setting upper and lower limits of the lock time, to generate a new lock time;

[0047] The negotiated key, the new log file and the new lock time are used as input parameters of the encryption algorithm in the decryption algorithm program in the boot area;

[0048] Based on the encryption algorithm, the new log file and the new lock time are subjected to at least one encryption cycle processing including byte replacement, row circular shift, column combination conversion and iterative key superposition processing, and the encrypted log file and the encrypted lock time are output and stored.

[0049] Optionally, based on the encryption algorithm, performing at least one encryption cycle process including byte replacement, row cyclic shift, column combination conversion and iterative key superposition process on the new log file and the new lock time, and outputting and storing the encrypted log file and the encrypted lock time comprises:

[0050] According to the encryption substitution table set in the encryption algorithm, the new log file and the new lock time are read by sliding by single byte in a dynamic window of at least single byte, so that each byte in the new log file and the new lock time is replaced by the corresponding encrypted byte at least once;

[0051] Identify and count specific fields of the new log file and the new lock time byte-replaced data that contain repeated byte sequences, specific data markers, or repeated character combinations, and group the new log file and lock time data based on the specific fields to form two data matrices respectively;

[0052] According to the shift rule set in the encryption algorithm, each row in the data matrix of the new log file and the new lock time is cyclically shifted left or right by a specific number of bits;

[0053] According to the combination matrix set by the encryption algorithm, each column of the data matrix after row shifting of the new log file and the new lock time is combined and transformed;

[0054] Generate an iterative key sequence required for encrypting a new log file and a new lock time, respectively, according to the key and encryption algorithm generated through negotiation;

[0055] After each encryption cycle or after a specific number of encryption cycles, the corresponding iterative key in the iterative key sequence required for encryption is superimposed on the data matrix after the combination transformation of the new log file and the new lock time;

[0056] Until the encryption cycle reaches the predetermined number of encryption times, the data processed after all encryption times are combined, and the encrypted log file content and the encrypted lock time are output and stored.

[0057] In a second aspect, an embodiment of the present invention provides an LED display screen module operation control system, comprising: a single-chip microcomputer, configured to execute the method described above, having at least one specific pin for encryption control; a security authentication device, connected to the single-chip microcomputer, for negotiating and interacting with the single-chip microcomputer; at least two time source devices, connected to the single-chip microcomputer, for providing a reference time; and an electronic switch component, respectively connected to the LED display screen module and the specific pin, for controlling the opening and locking of the LED display screen module according to the control instructions received from the single-chip microcomputer.

[0058] (III) Beneficial effects

[0059] The beneficial effects of the present invention are as follows: the present invention effectively solves the problem of difficulty in collecting payment during the sales and leasing of LED display screens by adopting advanced encryption and decryption technology, multiple time source verification mechanisms, and intelligent security control strategies, and significantly improves the security and reliability of the display screens. This method is not only applicable to fixed-installed display screens, but also to situations where the use scenarios are frequently changed in the leasing business, providing strong technical support for the widespread application of LED display screens. BRIEF DESCRIPTION OF THE DRAWINGS

[0060] Figure 1 A schematic diagram of the flow chart of the LED display screen module operation control method provided by the present invention;

[0061] Figure 2 A specific flow chart of the steps before step S1 of the LED display screen module operation control method provided by the present invention;

[0062] Figure 3 A specific flow chart of step P4 before step S1 of the LED display screen module operation control method provided by the present invention;

[0063] Figure 4 A specific flow chart of step S1 of the LED display screen module operation control method provided by the present invention;

[0064] Figure 5 A specific flow chart of step S13 of the LED display screen module operation control method provided by the present invention;

[0065] Figure 6 A specific flow chart of step S5 of the LED display screen module operation control method provided by the present invention;

[0066] Figure 7 A specific flow chart of step S54 of the LED display screen module operation control method provided by the present invention;

[0067] Figure 8 A circuit schematic diagram of a single chip microcomputer for the LED display screen module operation control system provided by the present invention;

[0068] Fig. 9 This is a pin diagram of the 74HC245 bus driver IC of the LED display screen module operation control system provided by the present invention. DETAILED DESCRIPTION

[0069] In order to better explain the present invention and facilitate understanding, the present invention is described in detail below through specific implementation modes in conjunction with the accompanying drawings.

[0070] like Figure 1 As shown, an LED display screen module operation control method proposed in an embodiment of the present invention performs the following steps when the single-chip microcomputer is powered on or reset: using the encryption and decryption algorithm pre-cured in the single-chip microcomputer boot area, combined with the key generated by negotiation with the connected security authentication device, to decrypt the last stored log file and the last locked time; obtaining multiple preliminary reference times from at least two time sources, and determining the reference time by performing a consistency check between the multiple preliminary reference times; comparing and verifying the reference time with the log time of the decrypted log file and the decrypted locked time respectively; and controlling the LED display screen module to work in a preset mode or triggering a corresponding safety mechanism according to the comparison and verification results to prevent the LED display screen module from being illegally started or operated.

[0071] First, the present invention uses the encryption and decryption algorithm pre-cured in the boot area of ​​the single-chip microcomputer, combined with the key generated by negotiation with the connected security authentication device, to decrypt the last stored log file and the last lock time. This mechanism greatly enhances the security performance of the LED display module, ensuring that even if the device is stolen or obtained by unauthorized persons, it cannot be easily decrypted or bypassed system restrictions, effectively protecting the collection rights and interests in the sales and leasing process.

[0072] Secondly, the present invention obtains multiple preliminary reference times from at least two time sources and performs consistency checks to determine the accurate reference time. This design ensures the accuracy and reliability of the system time, avoids system time errors caused by failure or tampering of a single time source, and further enhances the security and stability of the system.

[0073] Furthermore, the present invention compares and verifies the reference time with the log time of the decrypted log file and the decrypted lock time. This step ensures the integrity and authenticity of the use record and timestamp of the LED display module, and prevents users from circumventing payment or continuing to illegally use the display by tampering with the system time or log file.

[0074] Finally, according to the comparison and verification results, the present invention can control the LED display module to work in a preset mode or trigger the corresponding safety mechanism to prevent the LED display module from being illegally started or operated. This means that once any illegal or unauthorized operation is detected, corresponding measures can be taken immediately, such as shutting down the display, locking the system, or sending an alarm, thereby effectively protecting the safety and rights of the display.

[0075] In summary, the present invention effectively solves the problem of difficulty in collecting payment during the sales and leasing of LED display screens by adopting advanced encryption and decryption technology, multiple time source verification mechanisms, and intelligent security control strategies, and significantly improves the security and reliability of the display screens. This method is not only applicable to fixed-installed display screens, but also to situations where the usage scenarios are frequently changed in the leasing business, providing strong technical support for the widespread application of LED display screens.

[0076] In order to better understand the above technical solution, exemplary embodiments of the present invention will be described in more detail below with reference to the accompanying drawings. Although exemplary embodiments of the present invention are shown in the accompanying drawings, it should be understood that the present invention can be implemented in various forms and should not be limited by the embodiments described herein. On the contrary, these embodiments are provided to enable a clearer and more thorough understanding of the present invention and to fully convey the scope of the present invention to those skilled in the art.

[0077] Specifically, an embodiment of the present invention provides an LED display screen module operation control method, when the single chip microcomputer is powered on or reset, the following steps are performed:

[0078] S1. Decrypt the last stored log file and the last lock time by using the encryption and decryption algorithm pre-cured in the boot area of ​​the single-chip microcomputer and the key generated by negotiation with the connected security authentication device.

[0079] First, you need to understand the following concepts:

[0080] Log file: It is a record file used to store the number of times the LED display module is started, the specific time of each start, and the relevant secret keys. The log file is not only used to track the use history of the LED display module, but also serves as an important basis for verifying whether the LED display module has been illegally tampered with or illegally operated. This file will be updated at each startup or important operation to record the new startup time, date, and related operation information. In addition, when the system generates or updates the key, the new key will also be added to this log file to enhance the security of the system.

[0081] Lock time: is a specific time point used to restrict the LED display module from being started or operated within a certain period of time. This time point is usually set after the module performs an important operation (such as restarting the microcontroller, updating the key, etc.), to ensure that after these operations are completed, the module can remain in a safe state for a period of time and will not be interfered with by unauthorized users or programs. During the lock time, if any attempt to start or operate the module is detected, it will be regarded as an illegal behavior and trigger the corresponding safety mechanism to prevent illegal startup or operation. It is worth noting that the lock time can be an absolute time (such as "until 2023-10-23 15:00") or a relative time (such as "locked for 24 hours from now").

[0082] In the boot area (such as BOOT area) of the MCU, a set of encryption and decryption algorithms has been pre-cured. When it is necessary to communicate with the connected security authentication device, the MCU will negotiate with the security authentication device to jointly generate a key. Preferably, the security authentication device includes a dongle, a smart card, a USB Key, etc.

[0083] Once the key is generated, the MCU will use this key, combined with the decryption algorithm in the boot area, to decrypt the last stored log file and the last lock time. This process is a key step to ensure the security and integrity of the data. Through decryption, the MCU can verify the authenticity of these data to prevent them from being tampered with or forged, making them more resistant to potential security threats, thereby ensuring the authenticity and credibility of log files and time records.

[0084] In this embodiment, the generation of the key relies on a precise and secure process, which is achieved through a negotiation mechanism between the single-chip microcomputer and the security authentication device. Each time a new key needs to be generated, the two will conduct a secure interaction process to ensure that the generated key is highly unique and random. In this way, an unpredictable key can be generated, thereby greatly improving the security of the data. In addition, the key generated after each negotiation will be saved together with the log file, which provides the necessary basis for subsequent data verification and decryption.

[0085] At the same time, during the key transmission process, for security reasons, the negotiated key will never be directly transmitted in plain text, which can effectively prevent the key from being leaked. In some highly sensitive or security-critical situations, even more stringent key exchange methods will be used, such as direct face-to-face discussions to ensure the secure exchange of keys.

[0086] It is worth mentioning that in the encryption and decryption algorithm program, the encryption algorithm and decryption algorithm are set symmetrically, which means that they use the same key for encryption and decryption operations under the same circumstances (which can be the same period, the same operation, etc.).

[0087] Further, before step S1, Figure 2 As shown, including:

[0088] P1. Check whether the encryption and decryption algorithm program is fixed in the boot area of ​​the microcontroller.

[0089] In step P1, the read boot area content is compared with the feature code or signature of the known encryption and decryption algorithm program. These feature codes or signatures can be key instruction sequences of the algorithm, specific data structures or identifiers, etc. If the boot area content contains a feature code or signature that matches the known encryption and decryption algorithm, it can be preliminarily determined that the encryption and decryption algorithm program is solidified in the boot area of ​​the single-chip microcomputer. For further confirmation, the content of the boot area can be tried to be disassembled or decoded to see if there are obvious encryption and decryption operation instructions. In addition, the encryption and decryption function of the program in the boot area can also be verified by actually running or simulating the running of the program. For example, by inputting specific encrypted data into the single-chip microcomputer and observing whether its output meets expectations, it can be judged whether the encryption and decryption algorithm program is solidified.

[0090] P2a. If no encryption / decryption algorithm program is detected, an error handling mechanism including at least one of restarting the microcontroller, entering a safe mode, and reporting an error is triggered.

[0091] After the software detects the boot area of ​​the MCU, if no encryption and decryption algorithm program is detected, a set of error handling mechanisms will be triggered. This mechanism includes but is not limited to at least one of the following operations: restarting the MCU to try to restore to normal working state; putting the MCU into safe mode to limit unauthorized access and protect the system from potential security risks; or generating and reporting error information so that technicians can locate and solve the problem in time. These measures are designed to ensure the stability and security of the system, and to respond and handle abnormal situations in time when the necessary encryption and decryption algorithm program is not detected.

[0092] P2b. If it is detected that there is a fixed encryption and decryption algorithm program, it is checked whether the security authentication device is connected.

[0093] After detecting that the encryption and decryption algorithm program is fixed, it is possible to confirm whether there is a device response by sending a specific detection signal or command. For example, it is possible to determine whether the security authentication device has been connected by sending a handshake signal and waiting for the response of the security authentication device. After sending the detection signal, the response data received from the interface is analyzed. If it is determined that the expected response is received, it can be confirmed that a security authentication device is connected and the device can communicate normally.

[0094] P3a. If the security authentication device is not connected, an error handling mechanism including at least one of restarting the microcontroller, entering a safe mode, and reporting an error is triggered.

[0095] If the security authentication device is not connected, an error handling mechanism will be triggered. This mechanism includes but is not limited to at least one of the following operations: restarting the MCU to try to restore to normal working state; putting the MCU into safe mode to limit unauthorized access and protect the system from potential security risks; or generating and reporting error information so that technicians can locate and solve the problem in time. These measures are designed to ensure the stability and security of the system, and to respond and handle abnormal situations in a timely manner when the necessary encryption and decryption algorithm programs are not detected.

[0096] P3b. If the security authentication device has been connected, a key acquisition request with identity information is sent to the security authentication device so that the security authentication device can perform identity authentication.

[0097] When it is detected that the security authentication device has been successfully connected, in order to confirm the legitimacy and authority of the device, the MCU will send a key acquisition request with identity information to the security authentication device. This request usually contains the identity information of the MCU itself (such as device ID, serial number, etc.) to enhance the security and uniqueness of the request.

[0098] After receiving the request, the security authentication device will verify the identity information in the request according to the preset verification rules or algorithms. This includes checking whether the identity information in the request matches the valid information recorded in the system, and verifying whether other additional authentication parameters meet expectations.

[0099] If the security authentication device fails to verify the identity information in the request, or other parameters in the request do not meet the requirements, it will refuse to send the key and may trigger corresponding security mechanisms, such as recording abnormal events, sending warning notifications, etc. This prevents unauthorized devices or malicious attackers from obtaining sensitive data or performing illegal operations.

[0100] P4. After identity authentication is passed, a key is generated by negotiating with the security authentication device at least once.

[0101] Furthermore, if Figure 3 As shown, P4 includes:

[0102] P41. Generate a first random number.

[0103] The first random number R1 is generated by introducing a physical random number generator (such as a random number generator based on natural phenomena such as atmospheric noise and radioactive decay).

[0104] P42. Send the first random number to the security authentication device, so that the security authentication device obtains the current timestamp and network delay measurement value when receiving the first random number, generates and returns a second random number, and then mixes the current timestamp, network delay measurement value, the first random number and the second random number, and obtains the first preliminary shared key by subjecting the mixed value to multiple rounds of hash iterations.

[0105] First, a physical random number generator is introduced on the security authentication device to generate a second random number R3. Then, the first random number R1, the second random number R2, the current timestamp T1 and the network delay measurement value N1 are mixed. The mixing operation can be concatenation, splicing or using some mathematical operation (such as XOR, bit operation) to combine these values ​​into a mixed value M1, M1 = M ix (R1, R2, T1, N1) The purpose of doing this is to combine these different information elements to form a more complex and unpredictable data structure. Then, the mixed value will be sent to the hash function for multiple rounds of iterative processing. In each round, a new shared key is generated based on the shared key of the previous round and the new random number. Multiple rounds of hash iterative processing means that the mixed value is sent to the hash function multiple times, and the output of each time is used as the input of the next time until the predetermined number of iterations is reached. This iterative processing can further increase the complexity and security of the data, making the generated key more difficult to guess or crack. Among them, the new shared key in each round is: K i =H(K i-1 ,R3,M1), H represents the hash function, K i represents the shared key of round i, K i-1 is the shared key of the previous round (for the first round, K0 can be some initial value or null).

[0106] P43. Receive the second random number returned by the security authentication device, and obtain the current timestamp and network delay measurement value, mix the current timestamp, network delay measurement value, the first random number and the second random number, and calculate the second preliminary shared key through multiple rounds of hash iterations of the mixed values.

[0107] Likewise, the same mixing operation and multiple rounds of hash iteration processing as the above security authentication device are performed on the single chip microcomputer to generate a second preliminary shared key.

[0108] P44. Verify whether the first preliminary shared key and the second preliminary shared key are the same by performing at least one encrypted interaction with the security authentication device that carries the first preliminary shared key and / or the second preliminary shared key test signal. The test signal may be a random number, a text, or any other form of data.

[0109] P45. If the first preliminary shared key is the same as the second preliminary shared key, the first preliminary shared key is divided into multiple key fragments, and the key fragments are rearranged and combined into a final encryption key according to the fragment order determined based on the re-generated third random number. At the same time, an encrypted key splitting request carrying the third random number is sent to the security authentication device, so that the security authentication device splits the second preliminary shared key into multiple key fragments, and rearranges and combines the key fragments into the final encryption key according to the fragment order determined based on the re-generated third random number.

[0110] Once it is confirmed that the first preliminary shared key is the same as or matches the second preliminary shared key, the microcontroller and the security authentication device do not directly use the key as the final encryption key. Instead, a key splitting and rearrangement strategy is adopted to generate the final encryption key.

[0111] The following processing will be performed on both the single-chip microcomputer and the security authentication device: the first preliminary shared key is divided into multiple key fragments. The size of the fragments can be fixed or divided into indefinite lengths according to the set rules. Then, a third random number is generated by introducing a physical random number generator. The third random number will be used to determine the rearrangement order of the key fragments (i.e., the fragment order). According to the third random number, the key fragments are rearranged and combined to form a new key with a more complex structure, which will be used as the final encryption key.

[0112] While the key fragments are being reassembled, the MCU sends an encrypted key split request to the security authentication device. This request contains an encrypted form of the third random number so that the security authentication device can use the same third random number to split and reassemble the second preliminary shared key. After receiving the request and decrypting it, the security authentication device will use the same splitting strategy and third random number as the MCU to split the second preliminary shared key into key fragments, and reassemble them in the order of the fragments determined by the third random number to generate the same final encryption key as the MCU.

[0113] Through this key splitting and re-arrangement strategy, even if the preliminary shared key is intercepted during transmission, the attacker cannot directly obtain the final encryption key, because the attacker also needs to know the third random number and the specific algorithm of splitting and re-arrangement. This greatly improves the security of communication. At the same time, since both the microcontroller and the security authentication device use the same third random number and splitting and re-arrangement strategy, they can generate the same final encryption key, thereby ensuring the smooth progress of subsequent encrypted communications.

[0114] P46. Use the final encryption key generated by negotiation to establish communication interaction with the security authentication device.

[0115] After the final encryption key is generated, the communicating parties can confirm that both parties have correctly generated the same final encryption key by exchanging some encrypted verification information.

[0116] At the same time, during the communication interaction process, new keys are renegotiated periodically or based on specific events, and the new keys are added to the log file. When any abnormal or suspected attack behavior is detected, the communication is immediately interrupted and the re-authentication and key negotiation process is initiated.

[0117] Furthermore, if Figure 4 As shown, step S1 includes:

[0118] S11, reading the encrypted data of the last log file and the last locking time stored in the storage area of ​​the single chip computer.

[0119] S12: Use the key generated through negotiation, the last log file, and the encrypted data of the last lock time as input parameters of the decryption algorithm in the decryption algorithm program in the boot area.

[0120] S13. Based on the decryption algorithm, the encrypted data of the last log file and the last lock time are subjected to at least one decryption cycle including iterative key superposition processing restoration, column combination conversion restoration, row circular shift restoration, and byte replacement restoration, and the decrypted log file and the decrypted lock time are output.

[0121] S14: After the decryption is completed, it is determined whether the decrypted log file conforms to a preset log file format, and whether the decrypted lock time exceeds a set lock time range.

[0122] After decryption is completed, the decrypted log file and the decrypted lock time are verified. First, determine whether the decrypted log file conforms to the preset log file format, which can be achieved by comparing the file header, separator, field length and other information. Secondly, determine whether the decrypted lock time exceeds the set lock time range, which can ensure the rationality of the time.

[0123] S15a. If at least one of the following conditions exists: the decrypted log file does not conform to the preset log file format and the decrypted lock time exceeds the set lock time range, it is determined that the log file has been tampered with or the decryption has failed, triggering an error handling mechanism including re-executing the decryption algorithm within a set number of times, reporting an error, restarting the microcontroller, or entering a safe mode.

[0124] S15b. If the decrypted log file conforms to the preset log file format and the decrypted locking time does not exceed the set locking time range, the decrypted log file and the decrypted locking time are output.

[0125] The entire process described above reflects the high attention paid to security and data integrity, and ensures the reliability of decrypted data through strict verification and error handling mechanisms.

[0126] Furthermore, if Figure 5 As shown, step S13 includes:

[0127] S131. Based on the decryption algorithm and the negotiated key, generate an iterative key sequence identical to that in the encryption algorithm.

[0128] At the beginning of decryption, the negotiated key is first used. This key is shared by both the encryption and decryption ends. Based on this key, the decryption algorithm uses the same key expansion mechanism as the encryption algorithm to generate a series of iterative keys. These iterative keys are used for each encryption process during the encryption process, and for the corresponding decryption process during the decryption process.

[0129] Since the encryption algorithm and decryption algorithm are symmetrical, when the same negotiated key is used for iterative key generation, it can be ensured that the generated iterative key sequence is exactly the same as the sequence used for encryption. This symmetry ensures the correct decryption of encrypted data, allowing the original data to be completely restored at the decryption end.

[0130] S132. Perform iterative key superposition processing and restoration on the encrypted data of the last log file and the last lock time according to the reverse sequence of the iterative key sequence to remove the superimposed iterative key.

[0131] Use the reverse sequence of the iterative key sequence (i.e., starting from the last iterative key, and using each iterative key in reverse) to restore the encrypted data of the last log file and the last lock time by iterative key superposition processing. The purpose of this step is to remove the iterative key superimposed on the data during the encryption process and restore the intermediate state containing only the original data.

[0132] S133. Perform combination transformation and restoration on each column of the data matrix restored after iterative key superposition processing of the encrypted data of the last log file and the last lock time according to the inverse matrix of the combination matrix set by the encryption algorithm.

[0133] According to the inverse matrix of the combination matrix set in the encryption algorithm, each column of the data matrix restored after iterative key superposition processing is restored by combination transformation. This is the inverse process of column transformation in the encryption algorithm, which is used to restore the column structure of the original data matrix.

[0134] S134. According to the inverse rule of the shift rule set in the encryption algorithm, perform cyclic shift restoration on each row of the data matrix restored after the column combination conversion of the encrypted data of the last log file and the last lock time.

[0135] According to the inverse rule of the shift rule set in the encryption algorithm, each row of the data matrix restored by the column combination transformation is cyclically shifted and restored. This is the inverse process of the row transformation in the encryption algorithm, which aims to restore the row structure of the original data matrix.

[0136] S135. Split the data matrices of the last log file and the last lock time restored by cyclic shift into corresponding original formats based on the identified specific fields containing repeated byte sequences, specific data tags or repeated character combinations.

[0137] The data matrix after cyclic shift restoration is split into its original format based on specific fields containing repetitive byte sequences, specific data markers or repetitive character combinations. This is to restore the original data format before decryption to make it consistent with the log file and lock time data before encryption.

[0138] S136, according to the encryption substitution table set in the encryption algorithm, the last log file and the last lock time in the original format are read by sliding in a single byte in a dynamic window of at least a single byte, so that each encrypted byte in the last log file and the last lock time in the original format is restored at least once, and the decrypted log file content and the decrypted lock time are output. Due to the design of the dynamic window, each encrypted byte may be restored at least once to ensure the correct decryption of the data.

[0139] In addition, the integrity of the decrypted log file can be verified to ensure that no errors are introduced during the decryption process.

[0140] In a specific embodiment, it is assumed that the decryption algorithm and the negotiated key can generate the same iterative key sequence {K1, K2, ..., K m}, where m is the number of encryptions.

[0141] Suppose the function of superposition processing restoration is , which accepts the data matrix and the iteration key as input and outputs the restored data matrix after the superposition process. m To K1), the iterative key superposition process of the encrypted data can be expressed as:

[0142] ;

[0143] ;

[0144] in, and The encrypted log files and the data matrix of the lock time are and It is the data matrix restored by iterative key superposition processing.

[0145] Next, let the inverse matrix of the combination matrix set in the encryption algorithm be , then the column combination transformation reduction can be expressed as:

[0146] ;

[0147] in, and They are the data matrices restored after the combined transformation of the log file and the lock time.

[0148] Let the inverse rule of the shift rule in the encryption algorithm be the function , then the row circular shift restoration can be expressed as:

[0149] ;

[0150] in, and They are the data matrices after cyclic shift restoration of the log file and the lock time respectively.

[0151] The data matrix restored by circular shift and Split into original format based on specific fields, denoted as L'' and T''.

[0152] Let the decryption substitution table be the function , which maps the encrypted bytes back to the original bytes, then the decryption substitution table can be restored as:

[0153] ;

[0154] Among them, L and T are the decrypted log file content and lock time.

[0155] The entire decryption process goes through the above steps to restore the original log file content and lock time from the encrypted data.

[0156] S2. Obtain multiple preliminary reference times from at least two time sources, and determine the reference time by performing a consistency check between the multiple preliminary reference times.

[0157] In step S2, at least two different time sources are selected, such as high-precision time sources such as a global positioning system (GPS) receiver, a network time protocol (NTP) server, an atomic clock, etc. Selecting a variety of time sources can increase the reliability and redundancy of the reference time.

[0158] Next, read the preliminary benchmark time from each selected time source. Before comparing the preliminary benchmark time, you need to ensure that the time of all time sources is synchronized, which can be achieved by converting the time of each time source to the same time standard (such as UTC) and the same time accuracy (such as microseconds, milliseconds).

[0159] Then compare the preliminary benchmark times from different time sources and calculate the differences between them. If the preliminary benchmark time provided by a time source is significantly different from that of other time sources (i.e., exceeds the threshold range), it may be considered that the time source is abnormal or faulty. In this case, the data of the time source should be excluded, and the consistency check should continue based on the remaining time sources. After excluding the outliers, select the preliminary benchmark time with the smallest consistency or difference among the remaining time sources as the candidate benchmark time. In order to further improve the accuracy of the benchmark time, the average of the candidate benchmark times can be calculated as the final benchmark time.

[0160] S3. Compare and verify the reference time with the log time of the decrypted log file and the decrypted locking time.

[0161] S4. According to the comparison and verification results, the LED display screen module is controlled to work in a preset mode or a corresponding safety mechanism is triggered to prevent the LED display screen module from being illegally started or operated.

[0162] Further, step S4 includes: if the reference time is earlier than the log time of the last log file, or later than the last locking time, it is judged that the log file has been tampered with, and the LED display screen module is controlled to enter a locked state to prevent the LED display screen module from being illegally started or operated; if the reference time is not earlier than the log time of the last log file, and is not later than the last locking time, it is judged that the log file has not been tampered with, and the LED display screen module is controlled to start to ensure that the LED display screen module can work according to the preset mode.

[0163] In this way, not only can the LED display module be ensured to operate in a legal and safe environment, but also timely measures can be taken when potential security risks are detected, thereby protecting the stability and security of the entire system.

[0164] In one embodiment, accordingly, the method of the present invention also includes: S5, automatically creating a new log file and dynamically adjusting the lock time, and using the encryption algorithm and the negotiated key to encrypt and store the adjusted lock time of the new log file.

[0165] Considering that the decryption algorithm is a process of restoring encrypted data to the original data. In the decryption algorithm, the same iterative key sequence as in the encryption algorithm is first generated based on the negotiated key and the encryption algorithm. Then, the encrypted data is restored by iterative key superposition processing according to the inverse sequence of the iterative key sequence to remove the superimposed iterative key. Next, according to the inverse matrix of the combination matrix set in the encryption algorithm, each column of the data is restored by combination transformation. After that, according to the inverse rule of the shift rule set in the encryption algorithm, each row of the data is restored by cyclic shift. Finally, according to the decryption substitution table of the encryption algorithm, each encrypted byte is restored to the original byte, and the decrypted original data is output.

[0166] The encryption algorithm is a process that converts the log file content and lock time into encrypted data. In this process, the original data will first be byte-replaced through the encryption substitution table to convert each byte into the corresponding encrypted byte. Next, the encrypted data will be grouped according to a specific number of rows to form a data matrix. Then, according to the shift rule set in the encryption algorithm, each row of the data matrix will be cyclically shifted. After that, each column of the data matrix will be combined and transformed according to the combination matrix set in the encryption algorithm. In each encryption cycle, the iterative key sequence required for encryption will be generated according to the negotiated key and encryption algorithm, and superimposed with the data matrix. This process will be repeated until the predetermined number of encryptions is reached, and the encrypted data will be output.

[0167] Furthermore, if Figure 6 As shown, step S5 includes:

[0168] S51. Automatically create a new log file.

[0169] S52 . Dynamically adjust the last lock time according to the reference time, including scaling the lock time according to the time deviation and setting upper and lower limits of the lock time, to generate a new lock time.

[0170] In this embodiment, a log management mechanism is set up to create a new log file periodically or when a specific event is triggered, and to ensure the uniqueness of the name. Dynamically adjusting the lock time means that this duration is not fixed, but is adjusted in real time or periodically according to the operation of the LED display module and the single-chip microcomputer, security policies or other factors.

[0171] When a time deviation is detected, the last lock time is scaled proportionally according to the size and direction of the deviation. This means that if the time deviation is large, the lock time may be extended or shortened accordingly to better adapt to the actual situation.

[0172] When dynamically adjusting the lock time, the rationality and safety of the lock time need to be considered. Therefore, an upper and lower limit of the lock time is usually set to ensure that the adjusted lock time is not too long or too short.

[0173] S53: Use the key generated through negotiation, the new log file, and the new lock time as input parameters of the encryption algorithm in the decryption algorithm program in the boot area.

[0174] S54. Based on the encryption algorithm, perform encryption cycle processing on the new log file and the new lock time at least once, including byte replacement, row circular shift, column combination conversion and iterative key superposition processing, and output and store the encrypted log file and the encrypted lock time.

[0175] Furthermore, if Figure 7 As shown, step S54 includes:

[0176] S541. According to the encryption substitution table set in the encryption algorithm, a new log file and a new lock time are read by sliding single byte in a dynamic window of at least single byte, so that each byte in the new log file and the new lock time is replaced with a corresponding encrypted byte at least once.

[0177] Use a dynamic window to slide read the original data (i.e., the new log file and the new lock time) in a single-byte manner, and replace the original byte with the corresponding encrypted byte in the encryption substitution table. This replacement process will be performed for each byte in the new log file and the new lock time, ensuring that each byte is replaced at least once.

[0178] S542. Identify and count the specific fields of the new log file and the new lock time data after byte replacement, which contain repeated byte sequences, specific data tags or repeated character combinations, and group the new log file and lock time data based on the specific fields to form two data matrices respectively.

[0179] In this step, the byte-replaced data is first scanned to identify and count specific patterns, such as repeated byte sequences, specific data markers, or frequently occurring character combinations. The boundaries of the groups are dynamically determined based on the frequency of occurrence of these patterns or their location in the data.

[0180] This grouping process is performed for new log files and lock time data. In this way, the data is divided into multiple logical blocks, and the data in each block has a certain similarity or correlation in content. These logical blocks are then organized into two data matrices: one for log file data and the other for lock time data.

[0181] This content-based grouping method not only improves the flexibility of data processing, but also enables subsequent operations such as row circular shift and column combination conversion to act more accurately on specific parts of the data, thereby enhancing the complexity and security of encryption.

[0182] S543. According to the shift rule set in the encryption algorithm, each row in the data matrix of the new log file and the new lock time is circularly shifted left or right by a specific number of bits.

[0183] S544. According to the combination matrix set by the encryption algorithm, the new log file and the new lock time are combined and transformed in each column of the data matrix after the row shift.

[0184] By multiplying each column of data with a specific mixing matrix, the data in a column is multiplied and summed with the elements in the matrix to obtain new column data. This step achieves the data diffusion effect, that is, the change of one byte will affect the output results of multiple bytes.

[0185] S545. Generate an iterative key sequence required for encryption of a new log file and a new lock time respectively according to the key and encryption algorithm generated through negotiation.

[0186] S546. After each encryption cycle or after a specific number of encryption cycles, the corresponding iterative key in the iterative key sequence required for encryption is superimposed on the data matrix after the combination transformation of the new log file and the new lock time.

[0187] S547, until the encryption cycle processing reaches the predetermined number of encryption times, the data processed after all encryption times are combined, and the encrypted log file content and the encrypted lock time are output and stored.

[0188] In a specific embodiment, let the new log file content be L, and the new lock time be T. Let the encryption substitution table in the encryption algorithm be function f s, which maps one byte to another byte. Then this step can be expressed as:

[0189] L' = f s (L), T' = f s (T);

[0190] Among them, L' and T' are the new log file and lock time after byte replacement respectively.

[0191] Next, let n be the number of grouping rows. The data matrix formed based on a specific field can be expressed as:

[0192] ;

[0193] Among them, M L and M T They are the data matrices of the new log file and the new lock time, respectively, and each row represents a group of bytes.

[0194] Suppose the shift rule set in the encryption algorithm is function f r , which accepts a data row and the number of shift bits as input and outputs the shifted data row. Then the row shift can be expressed as:

[0195] ;

[0196] in, and are the row-shifted data matrices of the new log file and the new lock time, respectively.

[0197] Assume that the combination matrix in the encryption algorithm is C, then the column combination transformation can be expressed as:

[0198] ;

[0199] Among them, N L and N T They are the data matrices after column combination transformation of the new log file and the new lock time.

[0200] Assume that the negotiated key is K, and the iterative key sequence generated by the encryption algorithm based on K is {K1, K2, ..., K m}.

[0201] Let the superposition processing function be f a , which accepts the data matrix and the iteration key as input and outputs the data matrix after superposition processing. The superposition process can be expressed as:

[0202] ;

[0203] in, and They are the data matrices of the log file after the i-th encryption and the lock time.

[0204] Finally, let the number of encryptions be m, then the final encrypted log file E L and lock time E T Expressed as:

[0205] .

[0206] In addition, an embodiment of the present invention further provides an LED display screen module operation control system, which includes: a single chip microcomputer, configured to execute the method described above, and having at least one specific pin for encryption control. A security authentication device, connected to the single chip microcomputer, for negotiating and interacting with the single chip microcomputer. At least two time source devices, connected to the single chip microcomputer, for providing a reference time. And an electronic switch component, respectively connected to the LED display screen module and the specific pin, for controlling the opening and locking of the LED display screen module according to the control instructions received from the single chip microcomputer.

[0207] In a specific embodiment, if Figure 8 and Fig. 9 As shown, the 8th pin (PA2) of the single-chip microcomputer is defined as a specific pin for encryption control. The 8th pin (PA2) of the single-chip microcomputer is connected to the 19th pin (EN or OE) enable terminal of the 74HC245 bus driver IC on the LED display module through the first resistor R1, the second resistor R2, the third resistor R3 and a transistor. This design is very clever because it uses the output signal of the single-chip microcomputer to control the enable terminal of the 74HC245 bus driver IC, thereby realizing the control of the LED display module signal. Therefore, the entire locking execution process is:

[0208] When the encryption lock command needs to be executed, the microcontroller (MCU) will output a low-level signal through its 8th pin (PA2). This low-level signal will cause the transistor connected to it to turn off. The transistor is used here as an electronic switch. When its base (i.e., the 8th pin of the microcontroller) receives a low-level signal, it will be disconnected and no longer conduct. When the transistor is turned off, the third resistor R3 will pull the level high, which means that the 19th pin (OE enable end) of the 74HC245 bus driver IC on the LED display module will become a high level. According to the working principle of the 74HC245 bus driver IC, its OE enable end is valid at a low level. In other words, when the OE end is at a high level, the output of the 74HC245 is invalid, that is, the off state. Since all signals on the LED display module need to pass through this 74HC245 bus driver IC, when the output of this IC is turned off, other driver ICs on the module will not receive any control signals. As a result, the LED display module cannot work properly, thus achieving the effect of a black screen lock. Under the above locking execution steps, the LED display screen module can be quickly and effectively shut down by encrypting the locking instructions to prevent unauthorized use or access.

[0209] It should be understood by those skilled in the art that embodiments of the present invention may be provided as methods, systems or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware aspects. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0210] Although the preferred embodiments of the present invention have been described, those skilled in the art may make other changes and modifications to these embodiments after knowing the basic creative concept. Therefore, the present invention should be interpreted as including the preferred embodiments and all changes and modifications falling within the scope of the present invention.

[0211] Obviously, those skilled in the art can make various modifications and variations to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention belong to the scope of the present invention and its equivalent technologies, the present invention should also include these modifications and variations.

Claims

1. A method for controlling the operation of an LED display module. It is characterized in that When the microcontroller is powered on or reset, the following steps are performed: Based on the encryption algorithm, the log file and the lock time are subjected to at least one encryption cycle processing including byte replacement, row circular shift, column combination conversion and iterative key superposition processing, and the encrypted log file and the encrypted lock time are output and stored; The encryption and decryption algorithm pre-cured in the boot area of ​​the single-chip microcomputer is used, combined with the key generated by negotiation with the connected security authentication device, to decrypt the last stored log file and the last lock time; Obtaining a plurality of preliminary reference times from at least two time sources, and determining the reference time by performing a consistency check between the plurality of preliminary reference times; Compare and verify the reference time with the log time of the decrypted log file and the decrypted lock time; According to the comparison and verification results, the LED display screen module is controlled to work in a preset mode or a corresponding safety mechanism is triggered to prevent the LED display screen module from being illegally started or operated; in, The key generated by negotiation with the connected security authentication device is obtained through the following steps: generating a first random number; Sending the first random number to the security authentication device, so that the security authentication device obtains the current timestamp and the network delay measurement value when receiving the first random number, generates and returns the second random number, and then mixes the current timestamp, the network delay measurement value, the first random number and the second random number, and obtains the first preliminary shared key by subjecting the mixed value to multiple rounds of hash iterations; Receive the second random number returned by the security authentication device, obtain the current timestamp and the network delay measurement value, mix the current timestamp, the network delay measurement value, the first random number and the second random number, and calculate the second preliminary shared key by performing multiple rounds of hash iterations on the mixed values; Verify whether the first preliminary shared key and the second preliminary shared key are the same by performing at least one encrypted interaction with the security authentication device that carries the first preliminary shared key and / or the second preliminary shared key test signal; If the first preliminary shared key is the same as the second preliminary shared key, split the first preliminary shared key into multiple key fragments, re-arrange the key fragments into a final encryption key according to a fragment order determined based on the re-generated third random number, and simultaneously send an encrypted key splitting request carrying the third random number to the security authentication device, so that the security authentication device splits the second preliminary shared key into multiple key fragments, and re-arranges the key fragments into a final encryption key according to a fragment order determined based on the re-generated third random number; The final encryption key generated through negotiation is used to establish communication interaction with the security authentication device.

2. The LED display screen module operation control method according to claim 1, It is characterized in that Using the encryption and decryption algorithm pre-cured in the microcontroller boot area, combined with the key generated by negotiation with the connected security authentication device, the last stored log file and the last lock time are decrypted, including: Check whether the encryption and decryption algorithm program is fixed in the boot area of ​​the microcontroller; If no encryption and decryption algorithm program is detected, an error handling mechanism including at least one of restarting the microcontroller, entering a safe mode, and reporting an error is triggered; If it is detected that there is an encryption and decryption algorithm program, it will check whether it is connected to the security authentication device; If the security authentication device is not connected, an error handling mechanism including at least one of restarting the microcontroller, entering a safe mode, and reporting an error is triggered; If the security authentication device has been connected, a key acquisition request with identity information is sent to the security authentication device so that the security authentication device can perform identity authentication; After the identity authentication is passed, a key is generated by negotiating with the security authentication device at least once; Among them, the encryption algorithm and decryption algorithm in the encryption and decryption algorithm program are set symmetrically.

3. The LED display screen module operation control method according to claim 2, It is characterized in that Using the encryption and decryption algorithm pre-cured in the microcontroller boot area, combined with the key generated by negotiation with the connected security authentication device, the last stored log file and the last lock time are decrypted, including: Read the encrypted data of the last log file and the last lock time stored in the storage area of ​​the microcontroller; The key generated through negotiation, the last log file and the encrypted data of the last lock time are used as input parameters of the decryption algorithm in the decryption algorithm program in the boot area; Based on the decryption algorithm, the encrypted data of the last log file and the last lock time are subjected to at least one decryption cycle including iterative key superposition processing restoration, column combination conversion restoration, row circular shift restoration, and byte replacement restoration, and the decrypted log file and decrypted lock time are output.

4. The LED display screen module operation control method according to claim 3, It is characterized in that Based on the decryption algorithm, the encrypted data of the last log file and the last lock time are subjected to at least one decryption cycle process including iterative key superposition processing restoration, column combination conversion restoration, row cyclic shift restoration, and byte replacement restoration, and the decrypted log file and decrypted lock time are outputted, including: Based on the decryption algorithm and the negotiated key, generate the same iterative key sequence as in the encryption algorithm; Perform iterative key superposition processing and restoration on the encrypted data of the last log file and the last lock time according to the reverse sequence of the iterative key sequence to remove the superimposed iterative key; According to the inverse matrix of the combination matrix set by the encryption algorithm, each column of the data matrix restored after the iterative key superposition processing of the encrypted data of the last log file and the last lock time is restored by combination transformation; According to the inverse rule of the shift rule set in the encryption algorithm, each row of the data matrix after the column combination conversion and restoration of the encrypted data of the last log file and the last lock time is cyclically shifted and restored; Splitting the data matrices of the last log file and the last lock time of the circular shift restoration into corresponding original formats respectively based on the identified specific fields containing repeated byte sequences, specific data markers or repeated character combinations; According to the encryption substitution table set in the encryption algorithm, the last log file and the last lock time in the original format are read by sliding single byte in a dynamic window of at least single byte, so that each encrypted byte in the last log file and the last lock time in the original format is restored at least once, and the decrypted log file content and the decrypted lock time are output.

5. A method for controlling the operation of an LED display screen module as claimed in claim 1, It is characterized in that According to the comparison and verification results, the LED display module is controlled to work in a preset mode or the corresponding safety mechanism is triggered to prevent the LED display module from being illegally started or operated, including: If the reference time is earlier than the log time of the last log file, or later than the last lock time, it is determined that the log file has been tampered with, and the LED display module is controlled to enter a lock state to prevent the LED display module from being illegally started or operated; If the reference time is not earlier than the log time of the last log file and is not later than the last lock time, it is determined that the log file has not been tampered with, and the LED display screen module is controlled to start to ensure that the LED display screen module can work according to the preset mode.

6. The LED display screen module operation control method according to any one of claims 2 to 5, It is characterized in that include: A new log file is automatically created and the lock time is dynamically adjusted. The new log file and the adjusted lock time are encrypted and stored using an encryption algorithm and a negotiated key.

7. The LED display screen module operation control method according to claim 6, It is characterized in that Automatically create a new log file and dynamically adjust the lock time, and use the encryption algorithm and the negotiated key to encrypt and store the new log file and the adjusted lock time, including: Automatically create a new log file; Dynamically adjusting the last lock time according to the reference time, including scaling the lock time in proportion to the time deviation and setting upper and lower limits of the lock time, to generate a new lock time; The negotiated key, the new log file and the new lock time are used as input parameters of the encryption algorithm in the decryption algorithm program in the boot area; Based on the encryption algorithm, the new log file and the new lock time are subjected to at least one encryption cycle processing including byte replacement, row circular shift, column combination conversion and iterative key superposition processing, and the encrypted log file and the encrypted lock time are output and stored.

8. The LED display screen module operation control method according to claim 7, It is characterized in that Based on the encryption algorithm, the new log file and the new lock time are subjected to at least one encryption cycle process including byte replacement, row circular shift, column combination conversion and iterative key superposition processing, and the encrypted log file and the encrypted lock time are output and stored, including: According to the encryption substitution table set in the encryption algorithm, the new log file and the new lock time are read by sliding by single byte in a dynamic window of at least single byte, so that each byte in the new log file and the new lock time is replaced by the corresponding encrypted byte at least once; Identify and count specific fields of the new log file and the new lock time byte-replaced data that contain repeated byte sequences, specific data markers, or repeated character combinations, and group the new log file and lock time data based on the specific fields to form two data matrices respectively; According to the shift rule set in the encryption algorithm, each row in the data matrix of the new log file and the new lock time is cyclically shifted left or right by a specific number of bits; According to the combination matrix set by the encryption algorithm, each column of the data matrix after row shifting of the new log file and the new lock time is combined and transformed; Generate an iterative key sequence required for encrypting a new log file and a new lock time, respectively, according to the key and encryption algorithm generated through negotiation; After each encryption cycle or after a specific number of encryption cycles, the corresponding iterative key in the iterative key sequence required for encryption is superimposed on the data matrix after the combination transformation of the new log file and the new lock time; Until the encryption cycle reaches a predetermined number of encryption times, all encrypted data are combined, and the encrypted log file content and the encrypted lock time are output and stored.

9. A LED display module operation control system, It is characterized in that include: A single chip computer, configured to execute the method according to any one of claims 1 to 8, having at least one specific pin for encryption control; A security authentication device is connected to the microcontroller and is used for negotiation and interaction with the microcontroller; At least two time source devices are connected to the single chip microcomputer and are used to provide reference time; as well as, The electronic switch component is connected to the LED display screen module and the specific pins respectively, and is used to control the opening and locking of the LED display screen module according to the control instructions received from the single-chip microcomputer.

Images