A traceability management method, device, equipment and medium of a Beidou module product

Abstract

The present application belongs to the technical field of data processing, and particularly relates to a Beidou module product traceability management method, device, equipment and medium. The present application generates an encrypted license for the Beidou module based on the unique module identifier of each Beidou module and a symmetric encryption algorithm, and stores the encrypted license in the module. Then, the encrypted license of the module is read and decrypted, and compared with the unique module identifier of the module to confirm the module identity, so that the use compliance of the Beidou module can be verified efficiently and with high quality when the Beidou module is applied on a large scale.

Description

Technical Field

[0001] The present invention belongs to the field of data processing technology, and specifically relates to a traceability management method, device, equipment and medium for Beidou module products. Background Art

[0002] Symmetric key encryption, also known as single-key encryption, refers to an encryption method that uses the same key for both encryption and decryption. The sender uses a key to convert plaintext into ciphertext, and the receiver uses the same key to convert ciphertext back into plaintext. The greatest advantage of symmetric encryption is its high encryption speed, making it suitable for encrypting large amounts of data. Its processing speed is much faster than asymmetric encryption, and its implementation is simple, effectively conserving computing resources. Symmetric encryption is widely used in network transmission, file encryption, database encryption, and other fields, especially in environments requiring high-speed data processing. Due to its efficiency and practicality, symmetric key technology has gained widespread application in the data encryption field.

[0003] Asymmetric key technology, also known as public-key cryptography, is a method for encryption and decryption that utilizes a pair of keys: a public key and a private key. The public key is publicly accessible, while the private key must be kept strictly confidential. The principle behind this technology is that data encrypted with the public key can only be decrypted with the corresponding private key, and vice versa. Asymmetric key technology is crucial in network security because it solves key distribution issues and provides digital signature functionality. Generally speaking, using a key length with comparable confidentiality, asymmetric ciphers are only a few hundredths as fast as symmetric ciphers. Therefore, asymmetric ciphers are not suitable for encrypting long messages or for frequent encryption, and cannot meet the frequent writing requirements of ID modules.

[0004] As the Beidou satellite navigation system is increasingly used in the industry, the requirements for the accuracy and reliability of Beidou terminals are becoming increasingly higher. Summary of the Invention

[0005] The purpose of the present invention is to provide a traceability management method, device, equipment and medium for Beidou module products to solve the problem in the existing technology that it is impossible to efficiently confirm the key performance technical parameters of the positioning modules used by Beidou terminals in the industry and trace the supply chain.

[0006] In order to achieve the above object, the present invention adopts the following technical solutions:

[0007] In a first aspect, the present invention provides a traceability management method for Beidou module products, comprising:

[0008] Obtain key information corresponding to the Beidou module product and store the key information in the corresponding Beidou module product; wherein the key information includes module manufacturer information, module model and software version number, and a module unique identifier representing the identity of each Beidou module product;

[0009] Generate plaintext bit string data based on the key information of the Beidou module product;

[0010] Performing symmetric encryption processing based on the plaintext bit string data to obtain encrypted ciphertext data;

[0011] Performing a MAC operation on the encrypted ciphertext data to obtain a MAC check value;

[0012] Concatenate the encrypted ciphertext data and the MAC check value to obtain an encrypted license;

[0013] For Beidou module products that have been integrated into Beidou terminals, read the encryption license in the Beidou module product and obtain the module manufacturer information, module model, software version number, and module unique identifier contained in the encryption license;

[0014] The module manufacturer information, module model, software version number and module unique identifier contained in the encryption license are compared with the key information stored in the Beidou module product; if the comparison results are consistent, the Beidou module product passes the authentication; if the comparison results are inconsistent, the Beidou module product authentication fails.

[0015] Furthermore, the key information corresponding to the Beidou module product is obtained and the key information is stored in the corresponding Beidou module product; wherein the key information is replaced by codes in the form of numbers and / or English letters, and a mapping relationship between the key information and the corresponding code is established; the corresponding code is saved in the corresponding Beidou module product.

[0016] Furthermore, the module manufacturer information, module model and software version number are respectively replaced by two ASCII characters, and the module unique identifier is replaced by ten ASCII characters.

[0017] Furthermore, plaintext bit string data is generated based on the key information of the Beidou module product, including:

[0018] Convert the two ASCII characters corresponding to the module manufacturer information, the two ASCII characters corresponding to the module model, the two ASCII characters corresponding to the software version number, and the ten ASCII characters corresponding to the module unique identifier into a bit string to obtain 16 bytes of plaintext bit string data.

[0019] Furthermore, symmetric encryption processing is performed based on the plaintext bit string data to obtain encrypted ciphertext data, including:

[0020] Filling the plaintext bit string data to obtain plaintext bit string filling data that meets the block multiple of the grouping algorithm;

[0021] Symmetric encryption is performed based on the plaintext bit string padding data to obtain encrypted ciphertext data.

[0022] Furthermore, for Beidou module products that have been integrated into Beidou terminals, read the encryption license in the Beidou module product to obtain the module manufacturer information, module model, software version number, and module unique identifier contained in the encryption license, including:

[0023] Split the encrypted license to obtain the encrypted ciphertext data and MAC check value;

[0024] Perform MAC verification based on the encrypted ciphertext data and the MAC check value; if the MAC verification fails, it means that the encryption license has been modified and an error is returned; if the MAC verification succeeds, symmetric decryption is performed based on the encrypted ciphertext data to obtain the decrypted plaintext data;

[0025] De-filling is performed based on the decrypted plaintext data. If de-filling is successful, the de-filling result is obtained, which includes the module manufacturer information, module model, software version number and module unique identifier contained in the encrypted license. If de-filling fails, an error is returned and the system exits.

[0026] Furthermore, the module manufacturer information, module model, software version number, and module unique identifier contained in the encryption license are compared with the key information stored in the Beidou module product. If the comparison results are consistent, the Beidou module product passes the authentication. If the comparison results are inconsistent, the Beidou module product fails the authentication, including:

[0027] Module manufacturer information comparison: Take the first two digits of the decompression result and compare them with the module manufacturer information. If the comparison fails, the program returns an error and exits. If the comparison passes, the program proceeds to compare the module model.

[0028] Module model comparison: The third and fourth digits of the decompression result are compared with the module model. If the comparison fails, an error is returned and the system exits. If the comparison passes, the software version number is compared.

[0029] Software version number comparison: Take the fifth and sixth digits of the decompression result and compare them with the software version number. If the comparison fails, the program returns an error and exits. If the comparison passes, the program performs a module unique identifier comparison.

[0030] Module unique identification comparison: the last ten codes of the filling result are compared with the module unique identification, if the comparison fails, an error is returned and the program exits; if the comparison succeeds, the current Beidou module product authentication is successful.

[0031] In a second aspect, the application provides a Beidou module product traceability management device, comprising:

[0032] A data acquisition module is configured to acquire key information corresponding to the Beidou module product and store the key information in the corresponding Beidou module product; wherein the key information includes module manufacturer information, module model and software version number, and a module unique identification representing the identity of each Beidou module product;

[0033] A first data processing module is configured to generate a plaintext bit string data based on the key information of the Beidou module product;

[0034] A second data processing module is configured to perform symmetric encryption processing based on the plaintext bit string data to obtain encrypted ciphertext data;

[0035] The second data processing module is configured to perform MAC operation on the encrypted ciphertext data to obtain a MAC check value;

[0036] A fourth data processing module is configured to splice the encrypted ciphertext data and the MAC check value to obtain an encrypted license;

[0037] A fifth data processing module is configured to read the encrypted license in the Beidou module product and acquire the module manufacturer information, module model, software version number and module unique identification contained in the encrypted license for the Beidou module product that has been integrated into a Beidou terminal;

[0038] A data authentication module is configured to compare the module manufacturer information, module model, software version number and module unique identification contained in the encrypted license with the key information stored in the Beidou module product; if the comparison result is consistent, the Beidou module product passes the authentication; if the comparison result is inconsistent, the Beidou module product fails the authentication.

[0039] In a third aspect, the application provides an electronic device comprising a processor and a memory, wherein the processor is configured to execute a computer program stored in the memory to implement the Beidou module product traceability management method as described above.

[0040] In a fourth aspect, the application provides a computer readable storage medium, wherein the computer readable storage medium stores at least one instruction, and the at least one instruction is executed by a processor to implement the Beidou module product traceability management method as described above.

[0041] Compared with the prior art, the application has the following advantages:

[0042] The present invention provides a traceability management method for Beidou module products. Based on each Beidou module's unique module identifier and a symmetric encryption algorithm, an encrypted license is generated for the Beidou module and stored within the module. The module's encrypted license is then read and decrypted, and compared with the module's unique module identifier to confirm the module's identity. This ensures efficient and high-quality verification of Beidou module compliance during large-scale application. The present invention also addresses the issues raised in the background technology section, including the traceability management device, electronic device, and computer-readable storage medium for Beidou module products.

[0043] This solution utilizes module encryption licenses to assist testing organizations in quickly inspecting Beidou equipment to determine whether the equipment's positioning performance meets industry requirements. When industry users inspect Beidou equipment upon arrival, they can also verify the Beidou module encryption license within the device to quickly inspect batches of equipment and achieve efficient equipment acceptance. When industry users calculate the online rate and compliance rate of Beidou equipment within the industry, they can also verify the encryption license of the Beidou module within the device to achieve efficient and real-time data verification. When Beidou equipment is connected to a business system, it can also verify the module license within the device to ensure the compliance and credibility of the connected device. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] The accompanying drawings, which constitute part of this application, are intended to provide a further understanding of the present invention. The exemplary embodiments of the present invention and their descriptions are intended to explain the present invention and do not constitute an undue limitation of the present invention. In the accompanying drawings:

[0045] Figure 1 This is a flow chart of a traceability management method for Beidou module products according to an embodiment of the present invention;

[0046] Figure 2 This is a structural block diagram of a traceability management device for a Beidou module product according to an embodiment of the present invention;

[0047] Figure 3 The figure is a structural block diagram of an electronic device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0048] The present invention will be described in detail below with reference to the accompanying drawings and in combination with embodiments. It should be noted that, unless there is a conflict, the embodiments and features in the embodiments of the present application can be combined with each other.

[0049] The following detailed description is an exemplary description, which is intended to provide further detailed description of the present invention. Unless otherwise indicated, all technical terms used in the present invention have the same meaning as those generally understood by those skilled in the art. The terms used in the present invention are only for describing specific embodiments, and are not intended to limit the exemplary embodiments according to the present invention.

[0050] Example 1

[0051] MAC: (message authentication code) Message authentication code, also known as message authentication code, is the output of the message authentication algorithm.

[0052] ASCII: American Standard Code for Information Interchange. A computer coding system based on the Latin alphabet. It is the most commonly used standard for information exchange.

[0053] like Figure 1 As shown, an embodiment of the present invention provides a traceability management method for Beidou module products, including:

[0054] S1. Obtain key information corresponding to a Beidou module product and store the key information in the corresponding Beidou module product; wherein the key information includes module manufacturer information, module model and software version number, and a module unique identifier representing the identity of each Beidou module product.

[0055] S2. Generate plaintext bit string data based on the key information of the Beidou module product.

[0056] S3. Perform symmetric encryption processing based on the plaintext bit string data to obtain encrypted ciphertext data.

[0057] S4. Perform a MAC operation on the encrypted ciphertext data to obtain a MAC check value.

[0058] S5. Concatenate the encrypted ciphertext data and the MAC check value to obtain an encrypted license.

[0059] S6. For the Beidou module product that has been integrated into the Beidou terminal, read the encryption license in the Beidou module product to obtain the module manufacturer information, module model, software version number, and module unique identifier contained in the encryption license.

[0060] S7. Compare the module manufacturer information, module model, software version number, and module unique identifier contained in the encryption license with the key information stored in the Beidou module product. If the comparison results are consistent, the Beidou module product passes the authentication. If the comparison results are inconsistent, the Beidou module product fails the authentication.

[0061] This solution provides a method for generating and authenticating Beidou module product encryption licenses, facilitating the management of Beidou terminals within the industry. Only licensed modules can be integrated into Beidou terminals, preventing the use of substandard Beidou modules and effectively managing the supply chain from the source. This solution enables real-time information sharing across all links, improving transparency and collaboration efficiency. It also builds a trusted foundational support system for Beidou upper-layer applications within the industry, thereby enhancing the security and reliability of Beidou terminals across the industry and ensuring enterprise information security and business stability.

[0062] In an optional embodiment, the present invention further provides a traceability management method for Beidou module products, comprising:

[0063] Step 1: Test the key performance parameters of the module samples provided by the module manufacturer. The test objects include module hardware and supporting software.

[0064] Step 2: Replace the manufacturer information, module model, and software version number of the qualified module with a numeric or alphabetic code, establish a mapping relationship, and save it in the database. In subsequent production processes, the codes corresponding to the manufacturer information, module model, and software version number must be stored in the module and can be read.

[0065] Step 3: For each module product in the inventory, generate an encryption license based on the National Secret 4 algorithm by reading the manufacturer information, module model, software version number, and the unique identifier representing each module product. The encryption license is stored in the module and can be read and cannot be overwritten.

[0066] Step 4: For modules integrated into BeiDou terminals, the module manufacturer, model, software version, and unique identifier are obtained by reading and decoding the encrypted license contained in the module. These information is then compared with the information directly read from the module. If they match, the module product passes certification.

[0067] Specifically, this method includes the following steps:

[0068] S100, obtaining key information corresponding to a Beidou module product, and storing the key information in the corresponding Beidou module product; wherein the key information includes module manufacturer information, module model and software version number, and a module unique identifier representing the identity of each Beidou module product.

[0069] In a preferred embodiment, before the step of obtaining key information corresponding to a Beidou module product, the method further includes a step of quality testing the Beidou module product, specifically including:

[0070] Detecting the key performance parameters of the Beidou module sample provided by the module manufacturer, and storing the key information and key performance parameters of the Beidou module product corresponding to the Beidou module sample whose detection result is passed.

[0071] Wherein the detection object includes module hardware and supporting software.

[0072] In an optional embodiment, the key information corresponding to the Beidou module product is obtained, and the key information is stored in the corresponding Beidou module product; wherein the key information is replaced by a code in the form of a number and / or an English letter, and a mapping relationship between the key information and the corresponding code is established; the corresponding code is saved in the corresponding Beidou module product.

[0073] As a specific example, the module manufacturer information, module model and software version number are replaced by two ASCII code characters respectively, and the module unique identifier is replaced by ten ASCII code characters.

[0074] S200, generating a plaintext bit string data based on the key information of the Beidou module product.

[0075] In an optional embodiment, the plaintext bit string data is generated based on the key information of the Beidou module product, including: converting the two ASCII code characters corresponding to the module manufacturer information, the two ASCII code characters corresponding to the module model, the two ASCII code characters corresponding to the software version number, and the ten ASCII code characters corresponding to the module unique identifier into a bit string, to obtain a 16-byte plaintext bit string data.

[0076] S300, performing symmetric encryption processing based on the plaintext bit string data to obtain encrypted ciphertext data.

[0077] In an optional embodiment, the symmetric encryption processing is performed based on the plaintext bit string data to obtain encrypted ciphertext data, including: padding the plaintext bit string data to obtain plaintext bit string padding data conforming to the block multiple of the grouping algorithm; performing symmetric encryption based on the plaintext bit string padding data to obtain encrypted ciphertext data.

[0078] As a specific example, based on the pre-encryption preprocessing of the plaintext bit string data, the plaintext bit string data is padded, and the 16-byte plaintext bit string data is used to obtain 32-byte plaintext bit string padded data that meets the block multiple of the grouping algorithm; based on the 32-byte plaintext bit string padded data, symmetric encryption is performed using the National Secret 4 algorithm to obtain 32-byte encrypted ciphertext data.

[0079] S400: Perform a MAC operation on the encrypted ciphertext data to obtain a MAC check value.

[0080] In an optional embodiment, based on the encrypted ciphertext data, a MAC operation is performed on the encrypted ciphertext using the National Secret 4 algorithm to obtain a 16-byte MAC check value.

[0081] S500: Concatenate the encrypted ciphertext data and the MAC check value to obtain an encrypted license.

[0082] In an optional embodiment, the 32-byte encrypted ciphertext data is concatenated with the 16-byte MAC check value to obtain 48-byte data as the module encryption license data.

[0083] S600: For a Beidou module product that has been integrated into a Beidou terminal, read the encryption license in the Beidou module product to obtain the module manufacturer information, module model, software version number, and module unique identifier contained in the encryption license.

[0084] In an optional embodiment, for a Beidou module product that has been integrated into a Beidou terminal, the encryption license in the Beidou module product is read to obtain the module manufacturer information, module model, software version number, and module unique identifier contained in the encryption license, including:

[0085] 1) Split the encrypted license to obtain the encrypted ciphertext data and MAC check value;

[0086] As a specific example, when splitting the data, the 48-byte module encryption license data is split to obtain 32-byte encrypted ciphertext data and 16-byte MAC check value data, which are then input into the authentication process.

[0087] 2) Perform MAC verification based on the encrypted ciphertext data and the MAC check value; if the MAC verification fails, it means that the encryption license has been modified and an error is returned; if the MAC verification succeeds, symmetric decryption is performed based on the encrypted ciphertext data to obtain the decrypted plaintext data;

[0088] As a specific example, based on the encrypted ciphertext data and MAC check value data, the MAC check operation is performed using the National Secret 4 algorithm. If the check fails, it means that the encryption license has been modified and an error is returned and exited. Otherwise, the process continues. Based on the 32-byte encrypted ciphertext data, the National Secret 4 algorithm is used to perform symmetric decryption to obtain 32 bytes of decrypted plaintext data.

[0089] 3) De-filling is performed based on the decrypted plaintext data; after successful de-filling, a de-filling result is obtained, which includes the module manufacturer information, module model, software version number and module unique identifier contained in the encrypted license; if de-filling fails, an error is returned and exited.

[0090] As a specific example, destuffing is performed based on 32 bytes of decrypted plaintext data to obtain a 16-byte destuffing result. If destuffing fails, it means that the encrypted license data comes from an illegal source, and an error is returned to exit. Otherwise, the process continues.

[0091] S700. Compare the module manufacturer information, module model, software version number, and module unique identifier contained in the encryption license with the key information stored in the Beidou module product; if the comparison results are consistent, the Beidou module product passes the authentication; if the comparison results are inconsistent, the Beidou module product fails the authentication.

[0092] In an optional embodiment, the module manufacturer information, module model, software version number, and module unique identifier contained in the encryption license are compared with the key information stored in the Beidou module product; if the comparison results are consistent, the Beidou module product passes the authentication; if the comparison results are inconsistent, the Beidou module product fails the authentication, including:

[0093] 1) Module manufacturer information comparison: Take the first two digits of the decompression result and compare them with the module manufacturer information. If the comparison fails, return an error and exit; if the comparison passes, proceed to module model comparison;

[0094] 2) Module model comparison: The third and fourth digits of the decompression result are compared with the module model. If the comparison fails, an error is returned and the system exits. If the comparison passes, the software version number is compared.

[0095] 3) Software version number comparison: Take the fifth and sixth digits of the decompression result and compare them with the software version number. If the comparison fails, return an error and exit; if the comparison passes, perform module unique identification comparison;

[0096] 4) Module unique identifier comparison: The last ten digits of the decrypted and filled result are compared with the module unique identifier. If the comparison fails, an error is returned and the system exits. If the comparison passes, the current Beidou module product is successfully authenticated.

[0097] As a specific example, based on the 16-byte destuffing result, data is taken in sequence for comparison:

[0098] Take the first two ASCII characters of the decompressed padding result and compare them with the module manufacturer information. If they are different, the module manufacturer information is inconsistent and the program returns an error and exits. Otherwise, the program continues.

[0099] Extract the third and fourth ASCII characters of the decompressed result and compare them with the module model. If they are different, the module model is inconsistent. Return an error and exit. Otherwise, continue.

[0100] Take the fifth and sixth ASCII characters of the decompressed result and compare them with the software version number. If they are different, the software version numbers are inconsistent. Return an error and exit. Otherwise, continue.

[0101] Take the last ten ASCII characters of the decompressed and padded result and compare them with the module's unique identifier. If they are different, the module's unique identifier is inconsistent and the program returns an error and exits. Otherwise, the program continues.

[0102] The above data comparisons are all successful, indicating that the module encryption license has passed the authentication.

[0103] Example 2

[0104] like Figure 2 As shown, based on the same inventive concept as the above embodiment, the present invention also provides a traceability management device for Beidou module products, including:

[0105] A data acquisition module is used to obtain key information corresponding to Beidou module products and store the key information in the corresponding Beidou module products; wherein the key information includes module manufacturer information, module model and software version number, and a module unique identifier representing the identity of each Beidou module product;

[0106] A first data processing module is configured to generate plaintext bit string data based on the key information of the Beidou module product;

[0107] A second data processing module is used to perform symmetric encryption processing based on the plaintext bit string data to obtain encrypted ciphertext data;

[0108] A second data processing module is used to perform a MAC operation on the encrypted ciphertext data to obtain a MAC check value;

[0109] a fourth data processing module, configured to concatenate the encrypted ciphertext data and the MAC check value to obtain an encrypted license;

[0110] The fifth data processing module is configured to read the encrypted license in the Beidou module product, and obtain the module manufacturer information, the module model, the software version number and the module unique identification contained in the encrypted license for the Beidou module product integrated into the Beidou terminal.

[0111] The data authentication module is configured to compare the module manufacturer information, the module model, the software version number and the module unique identification contained in the encrypted license with the key information stored in the Beidou module product; when the comparison result is consistent, the Beidou module product passes the authentication; and when the comparison result is inconsistent, the Beidou module product fails the authentication.

[0112] Embodiment 3

[0113] As shown in Figure 3 The present application also provides an electronic device 100 for implementing the traceability management method of the Beidou module product.

[0114] The electronic device 100 comprises a memory 101, at least one processor 102, a computer program 103 stored in the memory 101 and executable on the at least one processor 102, and at least one communication bus 104.

[0115] The memory 101 can be used to store the computer program 103, and the processor 102 can realize the steps of the traceability management method of the Beidou module product in embodiment 1 by running or executing the computer program stored in the memory 101 and calling the data stored in the memory 101.

[0116] The memory 101 can mainly comprise a program storage area and a data storage area, wherein the program storage area can store an operating system, at least one application required by a function (such as a sound playing function, an image playing function, etc.), and the like; and the data storage area can store data (such as audio data) created according to the use of the electronic device 100, etc. In addition, the memory 101 can comprise a non-volatile memory, such as a hard disk, a memory, a plug-in hard disk, a smart media card (SMC), a secure digital (SD) card, a flash card, at least one disk storage device, a flash memory device, or other non-volatile solid-state storage device.

[0117] The at least one processor 102 can be a central processing unit (CPU), and can also be other general-purpose processors, a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field-programmable gate array (FPGA) or other programmable logic device, discrete gate or transistor logic device, discrete hardware component, etc. The processor 102 can be a microprocessor or the processor 102 can also be any conventional processor and the like, and the processor 102 is a control center of the electronic device 100, and connects all parts of the electronic device 100 through various interfaces and lines.

[0118] The memory 101 in the electronic device 100 stores a plurality of instructions to implement a Beidou module product traceability management method, and the processor 102 can execute the plurality of instructions to implement:

[0119] Obtaining key information corresponding to a Beidou module product, and storing the key information in the corresponding Beidou module product; wherein the key information includes module manufacturer information, module model and software version number, and a module unique identifier representing the identity of each piece of Beidou module product;

[0120] Generating a plaintext bit string data based on the key information of the Beidou module product;

[0121] Performing symmetric encryption processing based on the plaintext bit string data to obtain encrypted ciphertext data;

[0122] Performing MAC operation on the encrypted ciphertext data to obtain a MAC check value;

[0123] Splicing the encrypted ciphertext data and the MAC check value to obtain an encrypted license;

[0124] For a Beidou module product that has been integrated into a Beidou terminal, reading the encrypted license in the Beidou module product, and obtaining the module manufacturer information, module model, software version number and module unique identifier contained in the encrypted license;

[0125] Comparing the module manufacturer information, module model, software version number and module unique identifier contained in the encrypted license with the key information stored in the Beidou module product; when the comparison result is consistent, the Beidou module product passes the authentication; and when the comparison result is inconsistent, the Beidou module product fails the authentication.

[0126] Embodiment 4

[0127] If the module / unit integrated in the electronic device 100 is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the present invention implements all or part of the process in the above-mentioned embodiment method, and can also be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a computer-readable storage medium, and the computer program can implement the steps of the above-mentioned method embodiments when executed by the processor. Among them, the computer program includes computer program code, and the computer program code can be in source code form, object code form, executable file or some intermediate form, etc. Computer-readable media may include: any entity or device that can carry computer program code, recording medium, U disk, mobile hard disk, magnetic disk, optical disk, computer memory and read-only memory (ROM, Read-Only Memory).

[0128] It will be understood by those skilled in the art that embodiments of the present invention may be provided as methods, systems, or computer program products. Thus, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware. Furthermore, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to magnetic disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0129] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowcharts and / or block diagrams, as well as combinations of processes and / or blocks in the flowcharts and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowcharts and / or block diagrams. Figure 1 a process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0130] These computer program instructions may also be stored in a computer readable memory that can direct a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 a process or multiple processes and / or boxes Figure 1 The function specified in one or more boxes.

[0131] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operational steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing the instructions executed on the computer or other programmable device for implementing the process. Figure 1 a process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0132] Throughout this specification, references to terms such as "one embodiment," "example," or "specific example" indicate that the specific features, structures, materials, or characteristics described in conjunction with that embodiment or example are included in at least one embodiment or example of the present invention. In this specification, schematic representations of these terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in any one or more embodiments or examples.

[0133] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and not to limit it. Although the present invention has been described in detail with reference to the above embodiments, ordinary technicians in the field should understand that the specific implementation methods of the present invention can still be modified or replaced by equivalents. Any modification or equivalent replacement that does not depart from the spirit and scope of the present invention should be covered by the scope of protection of the claims of the present invention.

Claims

1. A traceability management method for Beidou module products, characterized in that: include: Obtain key information corresponding to the Beidou module product and store the key information in the corresponding Beidou module product; wherein the key information includes module manufacturer information, module model and software version number, and a module unique identifier representing the identity of each Beidou module product; Generate plaintext bit string data based on the key information of the Beidou module product; Performing symmetric encryption processing based on the plaintext bit string data to obtain encrypted ciphertext data; Performing a MAC operation on the encrypted ciphertext data to obtain a MAC check value; Concatenate the encrypted ciphertext data and the MAC check value to obtain an encrypted license; For Beidou module products that have been integrated into Beidou terminals, read the encryption license in the Beidou module product and obtain the module manufacturer information, module model, software version number and module unique identifier contained in the encryption license, including: splitting the encryption license to obtain encrypted ciphertext data and MAC check value; performing MAC check operation based on the encrypted ciphertext data and MAC check value; if the MAC check fails, it means that the encryption license has been modified, and an error is returned and exited; if the MAC check succeeds, symmetric decryption is performed based on the encrypted ciphertext data to obtain decrypted plaintext data; destuffing is performed based on the decrypted plaintext data; after successful destuffing, a destuffing result is obtained, which includes the module manufacturer information, module model, software version number and module unique identifier contained in the encryption license; if destuffing fails, an error is returned and exited; The module manufacturer information, module model, software version number and module unique identifier contained in the encryption license are compared with the key information stored in the Beidou module product; if the comparison results are consistent, the Beidou module product passes the authentication; if the comparison results are inconsistent, the Beidou module product authentication fails.

2. The traceability management method according to claim 1, characterized in that: Obtain key information corresponding to the Beidou module product and store the key information in the corresponding Beidou module product; wherein the key information is replaced by codes in the form of numbers and / or English letters, and a mapping relationship between the key information and the corresponding code is established; and the corresponding code is stored in the corresponding Beidou module product.

3. The traceability management method according to claim 2, characterized in that: The module manufacturer information, module model and software version number are respectively replaced by two ASCII characters, and the module unique identifier is replaced by ten ASCII characters.

4. The traceability management method according to claim 3, characterized in that: Generate plaintext bit string data based on the key information of the Beidou module product, including: Convert the two ASCII characters corresponding to the module manufacturer information, the two ASCII characters corresponding to the module model, the two ASCII characters corresponding to the software version number, and the ten ASCII characters corresponding to the module unique identifier into a bit string to obtain 16 bytes of plaintext bit string data.

5. The traceability management method according to claim 1, characterized in that: Performing symmetric encryption processing based on the plaintext bit string data to obtain encrypted ciphertext data includes: Filling the plaintext bit string data to obtain plaintext bit string filling data that meets the block multiple of the grouping algorithm; Symmetric encryption is performed based on the plaintext bit string padding data to obtain encrypted ciphertext data.

6. The traceability management method according to claim 1, characterized in that: Compare the module manufacturer information, module model, software version number, and module unique identifier contained in the encrypted license with the key information stored in the Beidou module product. If the comparison results are consistent, the Beidou module product passes the authentication. If the comparison results are inconsistent, the Beidou module product authentication fails, including: Module manufacturer information comparison: Take the first two digits of the decompression result and compare them with the module manufacturer information. If the comparison fails, the program returns an error and exits. If the comparison passes, the program proceeds to compare the module model. Module model comparison: The third and fourth digits of the decompression result are compared with the module model. If the comparison fails, an error is returned and the system exits. If the comparison passes, the software version number is compared. Software version number comparison: Take the fifth and sixth digits of the decompression result and compare them with the software version number. If the comparison fails, the program returns an error and exits. If the comparison passes, the program performs a module unique identifier comparison. Module unique identifier comparison: The last ten digits of the decrypted and filled result are compared with the module unique identifier. If the comparison fails, the function returns an error and exits. If the comparison passes, the current Beidou module product is successfully authenticated.

7. A traceability management device for Beidou module products, characterized in that: include: A data acquisition module is used to obtain key information corresponding to Beidou module products and store the key information in the corresponding Beidou module products; wherein the key information includes module manufacturer information, module model and software version number, and a module unique identifier representing the identity of each Beidou module product; A first data processing module is configured to generate plaintext bit string data based on the key information of the Beidou module product; A second data processing module is used to perform symmetric encryption processing based on the plaintext bit string data to obtain encrypted ciphertext data; A second data processing module is used to perform a MAC operation on the encrypted ciphertext data to obtain a MAC check value; a fourth data processing module, configured to concatenate the encrypted ciphertext data and the MAC check value to obtain an encrypted license; The fifth data processing module is used to read the encryption license in the Beidou module product that has been integrated into the Beidou terminal, and obtain the module manufacturer information, module model, software version number and module unique identifier contained in the encryption license, including: splitting the encryption license to obtain encrypted ciphertext data and MAC check value; performing MAC check operation based on the encrypted ciphertext data and the MAC check value; if the MAC check fails, it means that the encryption license has been modified, and an error is returned and exited; if the MAC check succeeds, symmetric decryption is performed based on the encrypted ciphertext data to obtain decrypted plaintext data; destuffing is performed based on the decrypted plaintext data; after destuffing is successful, a destuffing result is obtained, and the destuffing result includes the module manufacturer information, module model, software version number and module unique identifier contained in the encryption license; if destuffing fails, an error is returned and exited; The data authentication module is used to compare the module manufacturer information, module model, software version number and module unique identifier contained in the encryption license with the key information stored in the Beidou module product. If the comparison results are consistent, the Beidou module product passes the authentication; if the comparison results are inconsistent, the Beidou module product authentication fails.

8. An electronic device, characterized in that: It includes a processor and a memory, and the processor is used to execute the computer program stored in the memory to implement the traceability management method of the Beidou module product as described in any one of claims 1 to 6.

9. A computer-readable storage medium, characterized in that The computer-readable storage medium stores at least one instruction, and when the at least one instruction is executed by the processor, the traceability management method for the Beidou module product according to any one of claims 1 to 7 is implemented.

Images