A method and system for automatically and safely issuing programs for numerical control machine tools
The method of generating private keys for CNC machine tools and operators through the DNC server and encrypting and decrypting verification based on public parameters is solved, and the problem of low automation and insufficient security of CNC machine tool program distribution is realized, and automatic, secure issuance and legal identity verification of programs is realized.
Patent Information
- Application Number
- CN202411479293.6
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2024-10-23
- Publication Date
- 2025-03-18
- Estimated Expiration
- 2044-10-23
AI Technical Summary
The program distribution method of existing CNC machine tools is not very automated, has poor security, is vulnerable to hackers, and lacks strict permission management and version management.
The DNC server generates a private key for each operator and CNC machine tool, and distributes public parameters. After the operator logs into the DNC server, the production program files to be issued are encrypted based on the public parameters, their own private keys and the ID of the target CNC machine tool, and the encrypted files and the ID of the operator are distributed to the target CNC machine tool. The target CNC machine tool decrypts and verifies the production program files based on the public parameters, their own private keys and the ID of the operator.
It realizes the automatic and safe issuance of CNC machine tool programs, ensuring that only legally identifiable operators can issue programs, avoiding malicious distribution of programs and hacker counterfeiting, and being able to trace the distribution records of programs at any time.
Smart Images

Figure CN119011294B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of numerical control machine tool control, and in particular to a method and system for automatically and safely issuing numerical control machine tool programs. Background Art
[0002] The basic functions of the DNC (Distributed Numerical Control, CNC equipment networking management) system include:
[0003] (1) Program writing, program transmission, program storage, program version control, program modification and machine tool status monitoring.
[0004] (2) DNC software also provides program editing function, which can edit and modify CNC machine tool programs online.
[0005] (3) DNC software can also manage the process parameters of CNC machine tools, including tool parameters, cutting parameters, etc.
[0006] The DNC system can feed back the operation data and production progress of CNC machine tools to MES (manufacturing execution system), helping the MES system to more accurately monitor the production process of CNC machine tools and make timely decisions. At the same time, the MES system can also transmit the production plan, process parameters and other information of CNC machine tools to the DNC system to ensure the smooth progress of the production process.
[0007] The main function of the DNC system is to centrally manage all CNC machine tools on the production site through a DNC server. The programmer can program on his own computer and upload it to the directory specified by the DNC server. Then the on-site equipment operator can send the "LOAD" command through the equipment CNC controller to download the required program from the DNC server. After the program is processed, it will be sent back to the DNC server through the DNC network, and the program manager or process operator will compare or archive it. This method greatly reduces the preparation time of CNC programs, eliminates the running of operators between the process room and the CNC machine tool equipment, and can fully ensure the integrity and reliability of the program, eliminating many "mistakes" caused by human factors. Most importantly, the DNC system can realize the integration of CAD / CAM and computer-aided production management systems, which is another form of mechanical processing automation.
[0008] Traditional DNC systems can only realize the function of program transmission. With the development of information technology, the current DNC system has developed into a system software that can integrate some manufacturing execution system functions. As early as the early 1990s, the American Gallup DNC system gave DNC a broader connotation: an intelligent network management system for production equipment and workstations. This is also the earliest and most mature "Internet of Things" technology in the world - the "Internet of Things" in the workshop. It can not only connect all CNC machining centers, intelligent industrial robots, automated production line PLC work centers and all other industrial equipment online, but also effectively manage production equipment, processing programs and workstation information, realize network management of workshop production equipment, and improve the management level of the enterprise.
[0009] More importantly, DNC networking makes it possible to diagnose and prevent equipment failures. Through data analysis, the operating status of equipment can be predicted, maintenance can be carried out in advance, and economic losses caused by downtime can be avoided. In addition, this networking method also provides enterprises with rich data, which facilitates lean production and continuous improvement, and promotes the intelligent and refined development of manufacturing.
[0010] Under the demand for flexible manufacturing, a CNC machine tool needs to quickly adjust and update the production program in the CNC machine tool at any time according to production needs, and ensure that the program is quickly, accurately and safely released to the CNC machine tool, so that the CNC machine tool can produce according to the updated production program. With the development of CNC of traditional machine tools, there are now many ways to release programs, and DNC networking has given CNC equipment a new life. It breaks the traditional production model, allows remote monitoring and management, and enables the production line to be dynamically adjusted according to real-time data, greatly improving production flexibility and response speed. At the same time, through cloud computing technology, DNC equipment can share resources, optimize work processes, achieve collaborative manufacturing, and reduce production costs.
[0011] However, the current program distribution process still requires human participation, including the following methods:
[0012] (1) Directly input the program number to be processed on the CNC machine tool operation panel, and the program is directly downloaded to the CNC machine tool. All operations are completed on the CNC machine tool operation panel;
[0013] (2) The program is transmitted through a scanner. A scanner is installed next to each CNC machine tool. By scanning the QR code on the part, the program is automatically transmitted from the computer to the designated CNC machine tool;
[0014] (3) Send the program to be processed directly to the corresponding CNC machine tool on the computer, and no further operation is required on the CNC machine tool.
[0015] Regardless of which of the above program distribution methods is used, it is difficult to achieve automatic and safe distribution of CNC machine tool programs due to the lack of association management between the program and the operator's identity, the lack of signing process, the lack of strict permission management and version management, and the lack of log management. At the same time, if there is a problem with the program distribution, it is impossible to trace the source. In particular, when hackers enter the production network, they may send malicious programs to CNC machine tools and disrupt normal factory production. Summary of the invention
[0016] In view of the above analysis, the embodiments of the present invention aim to provide a method and system for automatically and safely issuing programs for CNC machine tools, so as to solve the problems of low automation and poor safety in the existing program issuing methods for CNC machine tools.
[0017] In one aspect, the present invention discloses a method for automatically and safely issuing a CNC machine tool program, the method comprising:
[0018] The DNC server generates corresponding private keys according to the ID of each operator and CNC machine tool, and distributes public parameters and corresponding private keys to each operator and CNC machine tool;
[0019] After the CNC machine tool is powered on or connected to the network for the first time, configure the IP address, public parameters, ID and private key of the DNC server;
[0020] The operator logs in to the DNC server, encrypts the production program file to be issued based on the public parameters, his own private key and the ID of the target CNC machine tool, and issues the encrypted production program file to be issued and the current operator's ID to the target CNC machine tool;
[0021] The target CNC machine tool decrypts and verifies the encrypted production program file to be issued based on the public parameters, its own private key and the ID of the current operator, and obtains the verified production program file to be issued.
[0022] On the basis of the above scheme, the present invention also makes the following improvements:
[0023] Furthermore, the method further comprises:
[0024] The target CNC machine tool performs machine preparation and self-check according to the verified production program file to be issued. After passing the self-check, the Hash value of the production program file to be issued is signed with public parameters and the private key of the target CNC machine tool and sent to the DNC server for acceptance confirmation. The target CNC machine tool then activates the production program file to be issued for normal production.
[0025] Furthermore, the production program files to be issued include machine tool preparation programs, self-checking programs and process parameters;
[0026] The target CNC machine tool performs machine preparation and self-check in sequence according to the machine preparation program and self-check program in the verified production program file to be released. If both the machine preparation program and the self-check program pass, it indicates that the self-check passes. After that, the target CNC machine tool also locally archives the decrypted production program file to be released.
[0027] Furthermore, the operator encrypts the production program file to be issued based on the public parameters, his own private key and the ID of the target CNC machine tool, and executes:
[0028] The operator uses public parameters and his own private key to sign the production program file to be issued, and uses the ID of the target CNC machine tool that receives the production program file to be issued as the public key to encrypt the signed production program file.
[0029] Further, the target CNC machine tool decrypts and verifies the encrypted production program file to be issued based on the public parameters, its own private key and the ID of the current operator, and executes:
[0030] The target CNC machine tool uses public parameters and its own private key to decrypt the encrypted production program file to be issued, and then uses the operator's ID to verify the signature of the decrypted production program file to be issued. After the verification is passed, the verified production program file to be issued is obtained.
[0031] Furthermore, the DNC server generates corresponding private keys according to the ID of each operator and CNC machine tool, and executes:
[0032] The DNC server automatically generates a master key and public parameters based on the IBE algorithm; based on the master key and public parameters, it generates corresponding private keys according to the ID of each operator and CNC machine tool.
[0033] Furthermore, the DNC server distributes public parameters and corresponding private keys to each operator and CNC machine tool offline:
[0034] The DNC server generates a key USB disk for each operator and CNC machine tool, and distributes it to the corresponding operator or CNC machine tool;
[0035] The operator's key U disk stores public parameters, the corresponding operator's ID and its corresponding private key, and the CNC machine tool's key U disk stores the DNC service's IP address, public parameters, the corresponding operator's ID and its corresponding private key.
[0036] Furthermore, the DNC server distributes public parameters and corresponding private keys to each CNC machine tool online:
[0037] The CNC machine tool randomly generates a temporary public-private key pair, enters the IP address of the DNC server on the CNC machine tool, and actively sends its own temporary public key to the DNC server;
[0038] The DNC server encrypts the public parameters and the private key of the corresponding CNC machine tool through the temporary public key of the CNC machine tool, and then returns it to the corresponding CNC machine tool;
[0039] The corresponding CNC machine tool uses its own temporary private key to decrypt and obtain the public parameters and the private key of the corresponding CNC machine tool, and loads them locally.
[0040] Furthermore, after the CNC machine tool is powered on or connected to the network for the first time, the IP address, public parameters, ID and private key of the current CNC machine tool are configured; the ID of its own IP address is also sent to the IP address of the DNC server, and the DNC server establishes a mapping relationship between the IP address of the corresponding CNC machine tool and its ID.
[0041] On the other hand, the present invention also discloses a system for automatically and safely issuing programs for numerically controlled machine tools, the system comprising:
[0042] The DNC server is used to generate a corresponding private key according to the ID of each operator and CNC machine tool, and distribute public parameters and corresponding private keys to each operator and CNC machine tool; it is also used to encrypt the production program file to be issued based on the public parameters, the operator's own private key and the ID of the target CNC machine tool after the operator logs in to the DNC server, and issue the encrypted production program file to be issued and the ID of the current operator to the target CNC machine tool;
[0043] Multiple CNC machine tools are used to configure the IP address, public parameters, ID and private key of the DNC server after the first power-on or connection to the network; they are also used to decrypt and verify the encrypted production program file to be issued based on the public parameters, its own private key and the ID of the current operator when the data machine tool receives the production program file to be issued and the ID of the current operator as the target CNC machine tool to issue the target CNC machine tool, so as to obtain the production program file to be issued that has passed the verification.
[0044] Compared with the prior art, the present invention can achieve at least one of the following beneficial effects:
[0045] The method for automatically and securely issuing a CNC machine tool program provided by the present invention generates and distributes corresponding private keys according to the ID of each operator and CNC machine tool through a DNC server, so that the operator and the data machine tool obtain their own private keys. After the configuration of the CNC machine tool is completed, the operator logs in to the DNC server, and encrypts the production program file to be issued based on public parameters, its own private key and the ID of the target CNC machine tool, and issues the encrypted production program file to be issued and the ID of the current operator to the target CNC machine tool; since this step requires the use of public parameters and the operator's private key, only operators with legal identities can issue the program, avoiding malicious issuance of the program and being able to be traced back at any time. Afterwards, the target CNC machine tool decrypts and verifies the encrypted production program file to be issued based on public parameters, its own private key and the ID of the current operator, and obtains the production program file to be issued that has passed the verification. Since signature verification is used in the decryption process, the situation of hackers impersonating others is avoided. Based on the above process, the automatic and secure issuance of the CNC machine tool program can be achieved.
[0046] The automatic and safe distribution system for CNC machine tool programs provided by the present invention is implemented based on the same technical concept as the above method, and thus has the same technical effect. At the same time, the components and functions of each part in the system can be implemented in the DNC server and the CNC machine tool, so that the system can be widely used to realize the automatic and safe distribution of the programs of the CNC machine tools.
[0047] In the present invention, the above-mentioned technical solutions can also be combined with each other to achieve more preferred combination solutions. Other features and advantages of the present invention will be described in the subsequent description, and some advantages can become obvious from the description, or can be understood by practicing the present invention. The purpose and other advantages of the present invention can be realized and obtained through the contents particularly pointed out in the description and the drawings. BRIEF DESCRIPTION OF THE DRAWINGS
[0048] The accompanying drawings are only used for the purpose of illustrating specific embodiments and are not to be considered as limiting the present invention. In the entire drawings, the same reference symbols represent the same components;
[0049] Figure 1 A flowchart of a method for automatically and safely issuing a CNC machine tool program provided in Example 1 of the present invention;
[0050] Figure 2 This is a schematic diagram of the structure of the system for automatically and safely issuing programs for CNC machine tools provided in Example 2 of the present invention. DETAILED DESCRIPTION
[0051] The preferred embodiments of the present invention are described in detail below in conjunction with the accompanying drawings, wherein the accompanying drawings constitute a part of this application and are used together with the embodiments of the present invention to illustrate the principles of the present invention, but are not used to limit the scope of the present invention.
[0052] Specific embodiment 1 of the present invention discloses a method for automatically and safely issuing a CNC machine tool program, the flow chart of which is as follows: Figure 1 The specific process is described as follows.
[0053] Step S1: The DNC server generates a corresponding private key according to the ID of each operator and CNC machine tool, and distributes public parameters and the corresponding private key to each operator and CNC machine tool.
[0054] Preferably, in the specific implementation process of step S1, the DNC server automatically generates a master key and public parameters based on the IBE algorithm; based on the master key and public parameters, a corresponding private key is generated according to the ID of each operator and CNC machine tool; then, the private key and public parameters are respectively issued to the corresponding operator and CNC machine tool.
[0055] Preferably, the DNC server can distribute public parameters and corresponding private keys to each operator and CNC machine tool offline. The DNC server generates a key USB flash drive for each operator and CNC machine tool, and distributes it to the corresponding operator or CNC machine tool; the operator's key USB flash drive stores the public parameters, the corresponding operator's ID and its corresponding private key, and the CNC machine tool's key USB flash drive stores the IP address of the DNC service, public parameters, the corresponding operator's ID and its corresponding private key.
[0056] In addition, the DNC server can also distribute public parameters and corresponding private keys to each CNC machine tool online. At this time, the CNC machine tool randomly generates a temporary public-private key pair, enters the IP address of the DNC server on the CNC machine tool, and actively sends its own temporary public key to the DNC server. The DNC server encrypts the public parameters and the private key of the corresponding CNC machine tool using the temporary public key of the CNC machine tool, and then returns it to the corresponding CNC machine tool. The corresponding CNC machine tool uses its own temporary private key to decrypt and obtain the public parameters and the private key of the corresponding CNC machine tool, and loads them locally.
[0057] Step S2: After the CNC machine tool is powered on or connected to the network for the first time, configure the IP address, public parameters, ID and private key of the DNC server.
[0058] In this step, the CNC machine tool configures the IP address of the DNC server so that the two can communicate with each other, so as to subsequently receive the production program file from the DNC server.
[0059] Step S3: The operator logs in to the DNC server, encrypts the production program file to be issued based on the public parameters, his own private key and the ID of the target CNC machine tool, and issues the encrypted production program file to be issued and the current operator's ID to the target CNC machine tool.
[0060] Specifically, the operator logs in to the DNC server with his own private key. According to the MES factory order plan, the operator obtains the corresponding program to be issued, signs the production program file to be issued with public parameters and his own private key, and encrypts the signed production program file with the ID of the target CNC machine tool that receives the production program file to be issued as the public key, and issues the encrypted production program file to be issued together with the operator's ID to the target CNC machine tool. In this step, only operators with legal identities (including public parameters and private keys) can issue programs, thus avoiding malicious issuance of programs and being able to be traced back at any time.
[0061] Step S4: The target CNC machine tool decrypts and verifies the encrypted production program file to be issued based on the public parameters, its own private key and the ID of the current operator, and obtains the verified production program file to be issued.
[0062] Specifically, the target CNC machine tool uses the public parameters and its own private key to decrypt the encrypted production program file to be issued, and then uses the operator's ID to perform signature verification on the decrypted production program file to be issued. After the verification is passed, the target CNC machine tool can obtain the verified production program file to be issued. In this step, the CNC machine tool uses the operator's ID to perform signature verification on the operator who issues each program, avoiding the situation where hackers impersonate others.
[0063] In addition, the method in this embodiment further includes the following steps:
[0064] Step S5: The target CNC machine tool performs machine preparation and self-check according to the verified production program file to be issued. After the self-check is passed, the Hash value of the production program file to be issued is signed with public parameters and the private key of the target CNC machine tool and sent to the DNC server for acceptance confirmation. The target CNC machine tool then activates the production program file to be issued for normal production.
[0065] In this step, the target CNC machine tool performs machine preparation and self-check according to the verified production program file to be issued, to ensure that the production program file is compatible with the current CNC machine tool, and the CNC machine tool can use the production program file for normal production. At the same time, the Hash value of the production program file to be issued is signed with public parameters and the private key of the target CNC machine tool and then sent to the DNC server for acceptance confirmation, and the operator archives the confirmed signature, thereby establishing a mapping relationship between the operator who issued and received the program and the CNC machine tool, which is convenient for tracing the operation process.
[0066] Specific embodiment 2 of the present invention discloses an application example of the method for automatically and safely issuing CNC machine tool programs in embodiment 1, so that those skilled in the art can better understand the implementation process of the present solution, which is specifically described as follows.
[0067] (1) Key Generation
[0068] In the specific implementation process, the key can be generated by the super administrator set in the DNC server, or by a dedicated KGC. The DNC server is first initialized according to the IBE algorithm (such as the national secret SM9) and generates the master key MasterKey and public parameters PublicParas. Then, based on the master key and public parameters, the DNC server generates the corresponding private key (i.e., the private key corresponding to the CNC machine tool) according to the ID of each CNC machine tool. The ID of the CNC machine tool and its corresponding private key can be expressed as: NCbedID1 and BPrivateKey1, NCbedID2 and BPrivateKey2, .... The DNC server also generates the corresponding private key (i.e., the private key corresponding to the operator) according to the ID of each operator based on the master key and public parameters. The operator ID and its corresponding private key are expressed as: OperatorID1 and OPrivateKey1, OperatorID2 and OPrivateKey2, .... For each new operator or CNC machine tool, a corresponding private key is generated according to the ID of the operator or CNC machine tool.
[0069] (2) Key distribution
[0070] After the DNC server generates the private keys for operators and CNC machines, it can distribute the private keys to the corresponding operators and CNC machines offline. For example, a key USB flash drive is generated for each operator and CNC machine, and distributed to the corresponding operator or CNC machine. The USB flash drive includes public parameters, the ID of the corresponding operator or CNC machine, and its corresponding private key. For the USB flash drive distributed to the CNC machine, the USB flash drive should also contain the IP address of the DNC service. Insert the USB flash drive into the CNC machine to start using it.
[0071] In this step, since only operators with a legitimate USB flash drive (including a key) can issue the program, malicious issuance of the program is avoided and can be traced back at any time. The CNC machine tool also records the operator who issued each program and can verify the signature, avoiding the occurrence of hackers impersonating others and facilitating the traceability of all operation processes.
[0072] (3) Initialization of CNC machine tools after powering on for the first time
[0073] Insert the USB flash drive distributed to the CNC machine into the CNC machine. The CNC machine automatically reads the ID NCbedID1, private key BPrivateKey1, public parameters PublicParas and IP address of the DNC server from the USB flash drive (or obtains this information online). Then, send the IP address NCbedIP1 of the CNC machine and the ID (identification) NCbedID1 of the CNC machine to the IP address of the DNC server. The DNC server records the IP address IP1 of the NC machine and the ID NCbedID1 of the NC machine and makes a mapping relationship. The subsequent program to be sent to CNC machine 1 is directly sent to NCbedIP1. If the IP address of the CNC machine changes, the IP address can be automatically synchronized to the DNC server. In this way, the DNC server can automatically issue programs to the CNC machine through the IP address of the CNC machine anytime and anywhere.
[0074] (4) Program issuance
[0075] Operator 1 inserts the USB flash drive issued to him into the DNC server, and then obtains the production program file to be issued from the MES system of the intelligent engineering. The production program file to be issued includes the machine preparation program, self-test program and process parameters (tool number, tool requirements, process number, drawing model, requirements for CNC machine tools, etc.), and then obtains OperatorID1, OPrivateKey1 and public parameters PublicParas from the USB flash drive. The production program file is signed based on the IBE algorithm using OPrivateKey1 and public parameters PublicParas, and then the ID of the target CNC machine tool (such as the identifier NCbedID1 of CNC machine tool 1) is used as the public key to encrypt the signed file, and the signed and encrypted file is sent to CNC machine tool 1 together with the operator's ID.
[0076] (5) Program acceptance and activation
[0077] After receiving the encrypted file and operator ID from the DNC server, CNC machine tool 1 first uses its own private key BPrivateKey1 and public parameters to decrypt. Then, the operator's ID, such as Operator ID1 of operator 1, is used to verify the signature of the decrypted program file. After the verification is passed, the corresponding program file is obtained and handed over to the CNC machine tool. The CNC machine tool first executes the machine preparation program and self-check program in the production program in sequence (checking the tool preparation degree, whether the machine tool meets the requirements, etc.). If the machine preparation program and self-check program pass, the generated program file containing the signature and the information related to the machine tool are archived locally. At the same time, the hash value of the program to be executed and the information related to the machine tool are signed with the private key and public parameters of this CNC machine tool and sent to the DNC server for acceptance confirmation. The operator archives the confirmed signature information. The program is successfully released safely and normal production can begin.
[0078] Specific embodiment 2 of the present invention discloses a system for automatically and safely issuing programs for numerical control machine tools, the structural diagram of which is shown in FIG. Figure 2 As shown, the system includes:
[0079] The DNC server is used to generate a corresponding private key according to the ID of each operator and CNC machine tool, and distribute public parameters and corresponding private keys to each operator and CNC machine tool; it is also used to encrypt the production program file to be issued based on the public parameters, the operator's own private key and the ID of the target CNC machine tool after the operator logs in to the DNC server, and issue the encrypted production program file to be issued and the ID of the current operator to the target CNC machine tool;
[0080] Multiple CNC machine tools are used to configure the IP address, public parameters, ID and private key of the DNC server after the first power-on or connection to the network; they are also used to decrypt and verify the encrypted production program file to be issued based on the public parameters, its own private key and the ID of the current operator when the data machine tool receives the production program file to be issued and the ID of the current operator as the target CNC machine tool to issue the target CNC machine tool, so as to obtain the production program file to be issued that has passed the verification.
[0081] The specific implementation process of the system embodiment of the present invention can be referred to the above method embodiment, and this embodiment will not be repeated here. Since the principle of this system embodiment is the same as that of the above method embodiment, this system also has the corresponding technical effects of the above method embodiment.
[0082] Those skilled in the art will appreciate that all or part of the processes of the above-mentioned embodiments can be implemented by instructing related hardware through a computer program, and the program can be stored in a computer-readable storage medium, wherein the computer-readable storage medium is a disk, an optical disk, a read-only storage memory, or a random access memory, etc.
[0083] The above description is only a preferred specific implementation manner of the present invention, but the protection scope of the present invention is not limited thereto. Any changes or substitutions that can be easily conceived by any technician familiar with the technical field within the technical scope disclosed by the present invention should be covered within the protection scope of the present invention.
Claims
1. A method for automatically and safely issuing a CNC machine tool program, characterized in that: The method comprises: The DNC server generates corresponding private keys according to the ID of each operator and CNC machine tool, and distributes public parameters and corresponding private keys to each operator and CNC machine tool; After the CNC machine tool is powered on or connected to the network for the first time, configure the IP address, public parameters, ID and private key of the DNC server; The operator logs in to the DNC server, encrypts the production program file to be issued based on the public parameters, his own private key and the ID of the target CNC machine tool, and issues the encrypted production program file to be issued and the current operator's ID to the target CNC machine tool; The target CNC machine tool decrypts and verifies the encrypted production program file to be issued based on the public parameters, its own private key and the ID of the current operator, and obtains the production program file to be issued that has passed the verification; The method further comprises: The target CNC machine tool performs machine preparation and self-check according to the verified production program file to be issued. After passing the self-check, the Hash value of the production program file to be issued is signed with the public parameters and the private key of the target CNC machine tool and then sent to the DNC server for acceptance confirmation. The target CNC machine tool activates the production program file to be issued for normal production. The production program files to be issued include machine tool preparation program, self-test program and process parameters; The target CNC machine tool performs machine preparation and self-check in sequence according to the machine preparation program and self-check program in the verified production program file to be released. If both the machine preparation program and the self-check program pass, it indicates that the self-check passes. After that, the target CNC machine tool also locally archives the decrypted production program file to be released.
2. The method for automatically and safely issuing CNC machine tool programs according to claim 1, characterized in that: The operator encrypts the production program file to be issued based on the public parameters, his own private key and the ID of the target CNC machine tool, and executes: The operator uses public parameters and his own private key to sign the production program file to be issued, and uses the ID of the target CNC machine tool that receives the production program file to be issued as the public key to encrypt the signed production program file.
3. The method for automatically and safely issuing CNC machine tool programs according to claim 2, characterized in that: The target CNC machine tool decrypts and verifies the encrypted production program file to be issued based on the public parameters, its own private key and the ID of the current operator, and executes: The target CNC machine tool uses public parameters and its own private key to decrypt the encrypted production program file to be issued, and then uses the operator's ID to verify the signature of the decrypted production program file to be issued. After the verification is passed, the verified production program file to be issued is obtained.
4. The method for automatically and safely issuing CNC machine tool programs according to claim 3, characterized in that: The DNC server generates corresponding private keys according to the ID of each operator and CNC machine tool, and executes: The DNC server automatically generates a master key and public parameters based on the IBE algorithm; based on the master key and public parameters, it generates corresponding private keys according to the ID of each operator and CNC machine tool.
5. The method for automatically and safely issuing CNC machine tool programs according to claim 4, characterized in that: The DNC server distributes public parameters and corresponding private keys to each operator and CNC machine tool offline: The DNC server generates a key USB disk for each operator and CNC machine tool, and distributes it to the corresponding operator or CNC machine tool; The operator's key U disk stores public parameters, the corresponding operator's ID and its corresponding private key, and the CNC machine tool's key U disk stores the DNC service's IP address, public parameters, the corresponding operator's ID and its corresponding private key.
6. The method for automatically and safely issuing CNC machine tool programs according to claim 4, characterized in that: The DNC server distributes public parameters and corresponding private keys to each CNC machine tool online: The CNC machine tool randomly generates a temporary public-private key pair, enters the IP address of the DNC server on the CNC machine tool, and actively sends its own temporary public key to the DNC server; The DNC server encrypts the public parameters and the private key of the corresponding CNC machine tool through the temporary public key of the CNC machine tool, and then returns it to the corresponding CNC machine tool; The corresponding CNC machine tool uses its own temporary private key to decrypt and obtain the public parameters and the private key of the corresponding CNC machine tool, and loads them locally.
7. The method for automatically and safely issuing CNC machine tool programs according to claim 2, characterized in that: When the CNC machine tool is powered on or connected to the network for the first time, the IP address, public parameters, ID and private key of the DNC server are configured; the ID of its own IP address is also sent to the IP address of the DNC server, and the DNC server establishes a mapping relationship between the IP address of the corresponding CNC machine tool and its ID.
8. A CNC machine tool program automatic and safe release system, characterized in that: The system is implemented based on the method for automatically and safely issuing CNC machine tool programs according to any one of claims 1 to 7, and the system comprises: The DNC server is used to generate corresponding private keys according to the ID of each operator and CNC machine tool, and distribute public parameters and corresponding private keys to each operator and CNC machine tool; it is also used for the operator to encrypt the production program file to be issued based on the public parameters, the operator's own private key and the ID of the target CNC machine tool after the operator logs in to the DNC server, and issue the encrypted production program file to be issued and the ID of the current operator to the target CNC machine tool; Multiple CNC machine tools are used to configure the IP address, public parameters, ID and private key of the DNC server after the first power-on or connection to the network; they are also used to decrypt and verify the encrypted production program file to be issued based on the public parameters, its own private key and the ID of the current operator when the data machine tool receives the production program file to be issued and the ID of the current operator as the target CNC machine tool to issue the target CNC machine tool, so as to obtain the production program file to be issued that has passed the verification.
Citation Information
Patent Citations
Integrated identity based encryption (IBE) data encryption system
CN102932149A
Identity-based file encryption transmission method
CN103354498A