Certificate distribution method, communication module, device and medium

Abstract

The invention provides a certificate distribution method, a communication module, a device and a medium, and relates to the technical field of communication, and the method comprises the steps that the communication module is connected with a production line certificate distribution MCU to form a temporary terminal, and the temporary terminal is connected with a production line certificate distribution server; the communication module receives a certificate storage address and a certificate from the production line certificate distribution MCU, the certificate storage address is calculated by the production line certificate distribution MCU according to the IMEI of the communication module, and the certificate is acquired by the production line certificate distribution MCU from a production line certificate distribution server according to the IMEI of the communication module; and the communication module stores the certificate through a preset software development kit SDK according to the certificate storage address. The certificate distribution MCU is arranged on the production line to form the temporary terminal with the communication module, the certificate distribution of the communication module is realized through the temporary terminal, the certificate setting address is calculated through the IMEI, and the certificate is set into the corresponding address of the communication module through the preset unified SDK, so that the efficient and safe distribution of the certificate is realized.

Description

Technical Field

[0001] The present disclosure at least relates to the field of communication technology, and in particular to a certificate distribution method, a communication module, a production line certificate distribution device, and a computer-readable storage medium. Background Art

[0002] Currently, the method of embedding certificates in communication modules is mostly to use a single burning method because each communication module needs to embed different certificates. This method has low embedding efficiency and is not suitable for large-scale production of communication modules. Summary of the invention

[0003] The technical problem to be solved by the present disclosure is to provide a certificate distribution method, a communication module, a production line certificate distribution device and a computer-readable storage medium in view of the above-mentioned shortcomings, so as to solve the problem of how to efficiently distribute communication module certificates.

[0004] In a first aspect, the present disclosure provides a certificate distribution method, which is applied to a communication module and includes:

[0005] The communication module is connected to the production line certificate distribution microcontroller unit MCU to form a temporary terminal, and the temporary terminal is connected to the production line certificate distribution server;

[0006] The communication module receives the certificate storage address and certificate from the production line certificate distribution MCU. The certificate storage address is calculated by the production line certificate distribution MCU based on the international mobile equipment identity code IMEI of the communication module. The certificate is obtained by the production line certificate distribution MCU from the production line certificate distribution server based on the IMEI of the communication module.

[0007] The communication module saves the certificate according to the certificate saving address through the preset software development kit SDK.

[0008] Furthermore, the communication module is connected to the production line certificate distribution microcontroller unit MCU to form a temporary terminal, and the temporary terminal is connected to the production line certificate distribution server, specifically including:

[0009] The communication module is connected to the production line certificate distribution MCU through the modem command language AT interface to form a temporary terminal with the production line certificate distribution MCU. The production line certificate distribution MCU in the temporary terminal calls the SDK of the communication module through the AT interface command;

[0010] The communication module obtains the Internet Protocol IP address and connects the temporary terminal to the production line certificate distribution server through the IP address.

[0011] Furthermore, before the communication module receives the certificate storage address and the certificate from the production line certificate distribution MCU, the method further includes:

[0012] The communication module receives the IMEI query instruction from the production line certificate distribution MCU through the SDK. The SDK queries the communication module to obtain the IMEI of the communication module. The SDK sends the IMEI of the communication module to the production line certificate distribution MCU, so that the production line certificate distribution MCU calculates the certificate storage address according to the received IMEI.

[0013] The communication module receives the public key query instruction from the production line certificate distribution MCU through the SDK. The SDK sends the pre-stored public key to the production line certificate distribution MCU, so that the production line certificate distribution MCU encrypts the IMEI according to the received public key to form a certificate request ciphertext, and sends the certificate request ciphertext to the production line certificate distribution server, so that the production line certificate distribution server uses the pre-stored private key to decrypt the certificate request ciphertext, and sends the certificate to the production line certificate distribution MCU according to the IMEI obtained by decryption.

[0014] Furthermore, the communication module receives the certificate storage address and certificate from the production line certificate distribution MCU, including:

[0015] The communication module receives the certificate storage address encapsulated by the AT interface command from the production line certificate distribution MCU through the SDK, and the certificate storage address is the flash memory FLASH address calculated by the production line certificate distribution MCU according to the IMEI of the communication module;

[0016] The communication module receives the certificate encapsulated by the AT interface command from the production line certificate distribution MCU through the SDK, and the certificate has been verified as valid by the production line certificate distribution MCU.

[0017] Furthermore, the communication module saves the certificate according to the certificate saving address through the preset software development kit SDK, specifically including:

[0018] The SDK saves the certificate to the FLASH address range corresponding to the certificate save address;

[0019] The SDK obtains the saved certificate according to the certificate storage address and connects to the IoT platform through the certificate to test the certificate availability;

[0020] In response to the test result that the certificate is available, the SDK sends a message that the certificate has been successfully saved to the production line certificate distribution MCU, so that the production line certificate distribution MCU sends a message that the received certificate has been successfully saved to the production line certificate distribution server, so that the production line certificate distribution server records the certificate distribution time.

[0021] Furthermore, after the SDK saves the certificate to the FLASH address segment range corresponding to the certificate saving address, the method further includes:

[0022] In response to receiving an AT interface command for modifying / deleting a certificate from the production line certificate distribution MCU through the SDK, the SDK calls a pre-packaged application programming interface API for modifying / deleting a certificate to modify / delete the certificate stored in the FLASH address segment range corresponding to the certificate storage address.

[0023] In a second aspect, the present disclosure provides a certificate distribution method, which is applied to a production line certificate distribution device, the production line certificate distribution device includes a production line certificate distribution micro control unit MCU and a production line certificate distribution server, and the method includes:

[0024] The production line certificate distribution MCU is connected to the communication module to form a temporary terminal, and the temporary terminal is connected to the production line certificate distribution server;

[0025] The production line certificate distribution MCU calculates the certificate storage address according to the international mobile equipment identity code IMEI of the communication module, and obtains the certificate from the production line certificate distribution server according to the IMEI of the communication module;

[0026] The production line certificate distribution MCU sends the certificate storage address and the certificate to the communication module, so that the communication module saves the certificate according to the certificate storage address through the preset software development kit SDK.

[0027] Furthermore, the production line certificate distribution MCU is connected to the communication module to form a temporary terminal, and the temporary terminal is connected to the production line certificate distribution server, specifically including:

[0028] The production line certificate distribution MCU is connected to the communication module through the modem command language AT interface to form a temporary terminal with the communication module. In the temporary terminal: the production line certificate distribution MCU calls the SDK of the communication module through the AT interface command, the communication module obtains the Internet interconnection protocol IP address, and connects the temporary terminal to the production line certificate distribution server through the IP address.

[0029] Furthermore, the production line certificate distribution MCU calculates the certificate storage address according to the international mobile equipment identity code IMEI of the communication module, and obtains the certificate from the production line certificate distribution server according to the IMEI of the communication module, specifically including:

[0030] The production line certificate distribution MCU sends an IMEI query instruction to the SDK of the communication module, so that the SDK queries the communication module to obtain the IMEI of the communication module, and sends the IMEI to the production line certificate distribution MCU. The production line certificate distribution MCU calculates the certificate storage address according to the received IMEI;

[0031] The production line certificate distribution MCU sends a public key query instruction to the SDK of the communication module, so that the SDK sends the pre-stored public key to the production line certificate distribution MCU. The production line certificate distribution MCU encrypts the IMEI according to the received public key to form a certificate request ciphertext, and sends the certificate request ciphertext to the production line certificate distribution server, so that the production line certificate distribution server uses the pre-stored private key to decrypt the certificate request ciphertext, and sends the certificate to the production line certificate distribution MCU according to the IMEI obtained by decryption.

[0032] Furthermore, the production line certificate distribution MCU calculates the certificate storage address according to the received IMEI, specifically including:

[0033] The production line certificate distribution MCU converts the IMEI of the communication module through code conversion, redundancy check, hash processing and address offset to obtain the flash memory FLASH address as the certificate storage address.

[0034] Furthermore, the production line certificate distribution MCU sends the certificate storage address and certificate to the communication module, including:

[0035] The production line certificate distribution MCU sends the certificate storage address encapsulated by AT interface commands to the SDK of the communication module;

[0036] The production line certificate distribution MCU verifies the validity of the certificate from the production line certificate distribution server, and sends the verified valid certificate encapsulated by AT interface commands to the SDK of the communication module.

[0037] Furthermore, after the production line certificate distribution MCU sends the certificate storage address and the certificate to the communication module, the method further includes:

[0038] The production line certificate distribution MCU receives the certificate saving success message from the SDK of the communication module, and sends the received certificate saving success message to the production line certificate distribution server, so that the production line certificate distribution server records the certificate distribution time.

[0039] Further, after sending a message that the received certificate has been successfully saved to the production line certificate distribution server, the method further includes:

[0040] In response to receiving a modify / delete certificate instruction from the production line certificate distribution server, an AT interface command for modifying / deleting the certificate is sent to the SDK of the communication module, so that the SDK calls the pre-packaged modify / delete certificate application programming interface API to modify / delete the certificate stored in the FLASH address segment range corresponding to the certificate storage address.

[0041] In a third aspect, the present disclosure provides a communication module, in which a software development kit SDK is pre-installed, and includes:

[0042] A first connection module is used to connect with the production line certificate distribution micro control unit MCU to form a temporary terminal, and the temporary terminal is connected to the production line certificate distribution server;

[0043] A first transceiver module is connected to the first connection module and is used to receive a certificate storage address and a certificate from the production line certificate distribution MCU. The certificate storage address is calculated by the production line certificate distribution MCU according to the international mobile equipment identity code IMEI of the communication module. The certificate is obtained by the production line certificate distribution MCU from the production line certificate distribution server according to the IMEI of the communication module;

[0044] The first saving module is connected to the first transceiver module and is used to save the certificate according to the certificate saving address through the SDK.

[0045] In a fourth aspect, the present disclosure provides a production line certificate distribution device, the production line certificate distribution device includes a production line certificate distribution micro control unit MCU and a production line certificate distribution server, and the production line certificate distribution MCU includes:

[0046] A second connection module is used to connect with the communication module to form a temporary terminal, and the temporary terminal is connected to the production line certificate distribution server;

[0047] A second acquisition module, connected to the second connection module, is used to calculate the certificate storage address according to the international mobile equipment identity code IMEI of the communication module, and obtain the certificate from the production line certificate distribution server according to the IMEI of the communication module;

[0048] The second transceiver module is connected to the second acquisition module and is used to send the certificate storage address and the certificate to the communication module, so that the communication module saves the certificate according to the certificate storage address through a preset software development kit SDK.

[0049] In a fifth aspect, the present disclosure provides a computer-readable storage medium, wherein a computer program is stored in the computer-readable storage medium. When the computer program is executed by a processor, the certificate distribution method as described above is implemented.

[0050] The present invention provides a certificate distribution method, a communication module, a production line certificate distribution device and a computer-readable storage medium. A certificate distribution MCU is set on the production line to form a temporary terminal with the communication module. The certificate distribution of the communication module is realized by connecting the temporary terminal to the production line certificate distribution server. At the same time, the address of the communication module written by the certificate is calculated by IMEI. The certificate is written to the communication module according to the certificate storage address by presetting a unified SDK. The unified module SDK can realize the rapid and automatic distribution of a unique certificate to the module. The certificate storage address associated with the IMEI can prevent the stored certificate from being unintentionally tampered with or cracked, thereby realizing efficient and secure certificate distribution. BRIEF DESCRIPTION OF THE DRAWINGS

[0051] Figure 1 is a flow chart of a certificate distribution method according to an embodiment of the present disclosure;

[0052] Figure 2 is a structural schematic diagram of a temporary terminal according to an embodiment of the present disclosure;

[0053] Figure 3 is an interactive schematic diagram of a terminal verification process according to an embodiment of the present disclosure;

[0054] Figure 4 is an interactive schematic diagram of a certificate distribution process according to an embodiment of the present disclosure;

[0055] Figure 5 is a flow chart of another certificate distribution method according to an embodiment of the present disclosure;

[0056] Figure 6 is a structural schematic diagram of a communication module according to an embodiment of the present disclosure;

[0057] Figure 7 It is a structural diagram of a production line certificate distribution MCU in an embodiment of the present disclosure. DETAILED DESCRIPTION

[0058] In order to enable those skilled in the art to better understand the technical solution of the present disclosure, the embodiments of the present disclosure will be further described in detail below with reference to the accompanying drawings.

[0059] It should be understood that the specific embodiments and drawings described herein are only used to explain the present disclosure rather than to limit the present disclosure.

[0060] It can be understood that, in the absence of conflict, the various embodiments of the present disclosure and the various features in the embodiments can be combined with each other.

[0061] It can be understood that, for the convenience of description, the drawings of the present disclosure only show parts related to the present disclosure, while parts irrelevant to the present disclosure are not shown in the drawings.

[0062] It can be understood that each unit and module involved in the embodiments of the present disclosure may correspond to only one physical structure, or may be composed of multiple physical structures, or multiple units and modules may be integrated into one physical structure.

[0063] It will be understood that, in the absence of conflict, the functions and steps marked in the flowcharts and block diagrams of the present disclosure may occur in an order different from that marked in the drawings.

[0064] It is understood that the flowcharts and block diagrams of the present disclosure illustrate the possible architectures, functions, and operations of the systems, devices, equipment, and methods according to the various embodiments of the present disclosure. Each box in the flowchart or block diagram may represent a unit, module, program segment, or code, which contains executable instructions for implementing the specified functions. Moreover, each box or combination of boxes in the block diagram and flowchart may be implemented by a hardware-based system that implements the specified functions, or may be implemented by a combination of hardware and computer instructions.

[0065] It can be understood that the units and modules involved in the embodiments of the present disclosure can be implemented by software or hardware, for example, the units and modules can be located in a processor.

[0066] In order to facilitate the understanding of the present disclosure, the main inventive concept of the present disclosure is first introduced in conjunction with a specific application of the present disclosure.

[0067] The device certificate consists of ProductKey (product unique identifier), ProductSecret (product key), and DeviceKey (unique identifier of the device within the product). After the device carries the certificate, it can go to the IoT platform to obtain the corresponding DeviceSecret (device secret key issued by the platform to the device) to realize device registration.

[0068] China Unicom has developed the Yanfei 5G (fifth generation mobile communication technology) module and DMP (Data Management Platform) IoT platform for IoT industry expansion. The Yanfei 5G module needs a corresponding certificate to register the DMP IoT platform. In the past, the certificates of the Yanfei 5G module were mainly manually inserted through SDK (Software Development Kit).

[0069] There are currently two ways to insert certificates:

[0070] 1) After applying for and obtaining the certificate, use the programmer to burn the certificate to the module. This method requires the deployment of a programmer and is only suitable for burning one by one, not in parallel. It requires manual intervention and switching, which is inefficient.

[0071] 2) The certificate is manually preset in the SDK. Since each module requires a different certificate, a different SDK is burned for each module. This process takes a lot of time. At the same time, the manual modification of the preset method is only suitable for small-scale production and cannot be applied to large-scale production. It lacks flexibility.

[0072] Therefore, the present disclosure designs a certificate distribution method, which only needs to pre-install a unified SDK in the 5G communication module to quickly and flexibly burn certificates in large quantities, which can be applied to large-scale production, changing the existing inefficient 5G module production model. It should be noted that the above description of the placement of the Unicom Yanfei 5G module certificate does not mean that the applicant recognizes it as prior art. The relevant technology of the original Unicom Yanfei 5G module still belongs to the applicant's innovative technology if it has not been disclosed by other means.

[0073] Embodiment 1:

[0074] like Figure 1 As shown, the present disclosure provides a certificate distribution method, which is applied to a communication module and includes:

[0075] S11, the communication module is connected to the production line certificate distribution micro control unit MCU to form a temporary terminal, and the temporary terminal is connected to the production line certificate distribution server;

[0076] S12, the communication module receives the certificate storage address and certificate from the production line certificate distribution MCU. The certificate storage address is calculated by the production line certificate distribution MCU according to the international mobile equipment identity code IMEI of the communication module. The certificate is obtained by the production line certificate distribution MCU from the production line certificate distribution server according to the IMEI of the communication module.

[0077] S13. The communication module saves the certificate according to the certificate saving address through a preset software development kit SDK.

[0078] In this embodiment, a certificate distribution MCU is set on the production line to form a temporary terminal with the communication module. The certificate distribution of the communication module is realized by connecting the production line certificate distribution server through the temporary terminal. At the same time, the address of the communication module written by the certificate is calculated by IMEI. The certificate is written to the communication module according to the certificate storage address by pre-setting a unified SDK. The unified module SDK can realize the fast and automatic distribution of unique certificates to the module. The certificate storage address associated with IMEI can prevent the stored certificate from being unintentionally tampered with or cracked, thereby realizing efficient and secure certificate distribution.

[0079] Specifically, if Figure 2-4As shown, this embodiment designs a certificate distribution production line. On the production line, a temporary terminal is composed of "MCU (Microcontroller Unit) + communication module". The MCU is located on the production line. When the production line distributes certificates, the 5G module is replaced, but the MCU is not replaced. A certificate distribution server is started on the production line, and the corresponding server program and terminal program are developed to realize certificate distribution. By pre-installing a unified SDK in the 5G communication module, the use of a unified module SDK can realize the rapid and automatic distribution of a unique certificate to the module. In order to avoid unintentional tampering or cracking of the stored certificate, the certificate storage address is calculated through the module IMEI. The certificate storage address of each module is different. The MCU built-in algorithm is responsible for the calculation. The SDK operates on a specific address segment. There is no conflict in the distribution of certificates between different modules, no manual intervention is required, and the security of the certificate can be guaranteed.

[0080] In one embodiment, S11, the communication module is connected to the production line certificate distribution micro control unit MCU to form a temporary terminal, and the temporary terminal is connected to the production line certificate distribution server, specifically including:

[0081] The communication module is connected to the production line certificate distribution MCU through the modem command language AT interface to form a temporary terminal with the production line certificate distribution MCU. The production line certificate distribution MCU in the temporary terminal calls the SDK of the communication module through the AT interface command;

[0082] The communication module obtains the Internet Protocol IP address and connects the temporary terminal to the production line certificate distribution server through the IP address.

[0083] In this embodiment, if Figure 2-4 As shown in the figure, module users can use the AT (Atendencies, a modem command language) interface to call the SDK in the "MCU+communication module" architecture. The 5G communication module can automatically obtain an IP (Internet Protocol) address, connect to the certificate distribution server, and automatically connect to China Unicom's PAAS (Platform as a Service) platform.

[0084] In one embodiment, before the communication module receives the certificate storage address and certificate from the production line certificate distribution MCU in S12, the method further includes:

[0085] The communication module receives the IMEI query instruction from the production line certificate distribution MCU through the SDK. The SDK queries the communication module to obtain the IMEI of the communication module. The SDK sends the IMEI of the communication module to the production line certificate distribution MCU, so that the production line certificate distribution MCU calculates the certificate storage address according to the received IMEI.

[0086] The communication module receives the public key query instruction from the production line certificate distribution MCU through the SDK. The SDK sends the pre-stored public key to the production line certificate distribution MCU, so that the production line certificate distribution MCU encrypts the IMEI according to the received public key to form a certificate request ciphertext, and sends the certificate request ciphertext to the production line certificate distribution server, so that the production line certificate distribution server uses the pre-stored private key to decrypt the certificate request ciphertext, and sends the certificate to the production line certificate distribution MCU according to the IMEI obtained by decryption.

[0087] In this embodiment, if Figure 2-4 As shown, before starting the certificate distribution process, first pre-install the program firmware in the terminal, connect the production line certificate distribution server to the public network, and then create a device information data table, leaving the certificate column blank. After that, each time the terminal applies for a certificate from the certificate distribution server, the certificate distribution server calls the IoT platform API (Application Programming Interface) to register and obtain the certificate, and then saves the certificate to the device information data table. Next, the certificate distribution process can begin. The designed information data table includes but is not limited to the following contents in Table 1:

[0088] Table 1 Information data table example

[0089] Fields illustrate IMEI Unique identification of equipment on the production line: IMEI, primary key distributeTime Equipment distribution time ProductKey ProductKey issued by the IoT platform, part of the certificate DeviceKey DeviceKey issued by the IoT platform, part of the certificate DeviceSecret DeviceSecret issued by the IoT platform, part of the certificate

[0090] like Figure 3 As shown in the figure, each module has an IMEI, and each unified module SDK has a public key. The IMEI and public key can be obtained through AT commands, which are used for the server to verify the module. The public key is used for the production line encryption and decryption calls. The encryption and decryption algorithms exist in both the production line MCU and the certificate distribution server. The certificate distribution server has a private key corresponding to the public key. After the terminal is powered on, the 5G communication module is in a state where it can receive external AT commands. The MCU sends two AT commands to query and obtain the module's IMEI (International Mobile Equipment Identity) and public key 1, and uses public key 1 to encrypt the IMEI into ciphertext 1; after the certificate distribution server and the terminal are connected through a network such as WiFi (WIreless Fidelity), the IMEI is sent to the certificate distribution server together with the IMEI; the certificate distribution server uses private key 1 to decrypt ciphertext 1 and compares it with the received IMEI. If they are consistent, it indicates that the terminal is trustworthy. Otherwise, it is considered that there is a problem with the terminal or module, and an error code is sent back to the terminal.

[0091] For example, the two AT commands may be:

[0092] 1)AT+UNIYFPUB_KEY?

[0093] Successful return +UNIYFKEY:<public_key> OK

[0094] 2) AT+CGSN=1

[0095] Successful return + CGSN: <imei>OK

[0096] In one implementation, the communication module in S12 receives the certificate storage address and certificate from the production line certificate distribution MCU, specifically including:

[0097] The communication module receives the certificate storage address encapsulated by the AT interface command from the production line certificate distribution MCU through the SDK, and the certificate storage address is the flash memory FLASH address calculated by the production line certificate distribution MCU according to the IMEI of the communication module;

[0098] The communication module receives the certificate encapsulated by the AT interface command from the production line certificate distribution MCU through the SDK, and the certificate has been verified as valid by the production line certificate distribution MCU.

[0099] In this embodiment, if Figure 2-4 As shown, in order to avoid unintentional tampering or cracking of the stored certificates, the FLASH (flash memory) certificate storage address designed here is different for each module, and the FLASH address is calculated by the module IMEI. The calculation method of calculating the FLASH certificate storage address based on IMEI can be: first convert the IMEI into an ASCII (American Standard Code for Information Interchange) value, then use CRC32 (cyclic redundancy check) for hash processing, intercept the last 2 bits of the hash value as the address offset, and map it to the FLASH address segment range.

[0100] like Figure 4 As shown, the process of distributing certificates includes:

[0101] 1) The terminal starts applying for a device certificate from the certificate distribution server;

[0102] 2) When the certificate distribution server receives a certificate acquisition request from a device, it queries the device information data table according to the IMEI in the request, and performs the following subsequent operations based on the query results:

[0103] 2-1) If the IMEI identifier passed by the terminal is not found, an illegal device error is returned;

[0104] 2-2) If there is a corresponding IMEI identifier and a device certificate already exists, the device certificate is returned;

[0105] 2-3) If there is a corresponding IMEI identification but no device certificate, call the IoT (China Unicom PAAS) platform API to register the device, obtain the certificate, and then send it to the terminal.

[0106] After the terminal receives the returned valid certificate normally (such as after verification, the certificate length meets the requirements, etc.), the certificate is transferred to the module through the AT command. Since the FLASH address is calculated by the production line MCU through the IMEI of the 5G module, the certificate is saved in the internal FLASH associated with the IMEI.

[0107] In one implementation, S13, the communication module saves the certificate according to the certificate storage address through a preset software development kit SDK, specifically including:

[0108] The SDK saves the certificate to the FLASH address range corresponding to the certificate save address;

[0109] The SDK obtains the saved certificate according to the certificate storage address and connects to the IoT platform through the certificate to test the certificate availability;

[0110] In response to the test result that the certificate is available, the SDK sends a message that the certificate has been successfully saved to the production line certificate distribution MCU, so that the production line certificate distribution MCU sends a message that the received certificate has been successfully saved to the production line certificate distribution server, so that the production line certificate distribution server records the certificate distribution time.

[0111] In this embodiment, it can be determined whether to use the certificate to connect to the IoT platform to test the availability of the certificate according to the actual situation, which will increase the distribution time of a single unit on the production line. The situations in which the test is increased include: for customers of 5G modules, it is very important to confirm whether they can connect to China Unicom PAAS, the delivery time of a batch of 5G modules can allow the availability of the production line test certificates, and the revenue of a batch of 5G modules can cover the increased testing costs, etc. If the terminal does not receive a valid certificate, the local alarm notifies the operator to confirm whether the IMEI and other information are normal. After the 5G module obtains a valid certificate, it returns a success message to the distribution server through the terminal, and after the certificate distribution server receives the success message, it writes the device distribution time into the database, indicating that the certificate has been successfully distributed; if the certificate distribution server does not receive a message within a period of time, it will notify the terminal to confirm whether the module has obtained a valid certificate; if a failure message is received, the certificate distribution server will not record the device distribution time, and then the certificate distribution server will decide whether the current certificate should be redistributed based on the cause of the failure.

[0112] In one embodiment, after the SDK saves the certificate to the FLASH address segment range corresponding to the certificate storage address, the method further includes:

[0113] In response to receiving an AT interface command for modifying / deleting a certificate from the production line certificate distribution MCU through the SDK, the SDK calls a pre-packaged application programming interface API for modifying / deleting a certificate to modify / delete the certificate stored in the FLASH address segment range corresponding to the certificate storage address.

[0114] In this embodiment, the AT command for transferring the certificate to the module is:

[0115] AT+UNIYFKEY=" <productkey> "，" <devicekey> "," <productsecret> "," <devicesecret>"[,<cert_name> ,<cert_size> ]

[0116] Successful return: +UNIYFKEY:OK

[0117] Failure return: +UNIYFKEY:<err_code>

[0118] in<cert_name> : Reserved, string type, the name of the certificate or private key to be added;

[0119] <cert_size> : Reserved, integer, the length of the certificate or private key to be added.

[0120] The terminal sends an AT command to query whether the module FLASH specified address has a device certificate. The AT command is:

[0121] AT+UNIYFFCHKCERT= <address>, <length>

[0122] Successful return: +UNIYFFCHKCERT:OK

[0123] Failure return: +UNIYFFCHKCERT:NOT FOUND

[0124] in <address>The start of the FLASH address segment. <length>Minus 1 from the address offset.

[0125] Users can directly add / modify certificates through AT commands. After writing the certificate, the certificate flag bit at the specified address of the FLASH in the module becomes 1. Users can also set the flag bit to 0 through AT commands and clear the certificate at the same time. The difference between modifying a certificate and adding a new certificate is that the flag bit is 0 when adding a new certificate and the flag bit is 1 when modifying a certificate. When adding a new certificate, if it is available (the flag bit is 1), it means that the module has completed the certificate distribution process, and you can send AT commands to start the normal device management platform authentication process and jump out of the certificate distribution process; if it is not available (the flag bit is 0), it will enter the certificate distribution process.

[0126] This embodiment 1 designs an offline terminal verification and certificate distribution method for 5G communication modules by transforming the production line. Using a unified module SDK, it is possible to quickly and automatically distribute unique certificates to modules. Certificates distributed between different modules do not conflict through address calculation, without manual intervention, and can ensure the security of certificates. The entire process includes information data table design, terminal verification, and certificate distribution, modification and storage. The 5G module can be replaced with a CAT.1 module or a 4G module.

[0127] Embodiment 2:

[0128] like Figure 5 As shown, the present disclosure provides a certificate distribution method, which is applied to a production line certificate distribution device, the production line certificate distribution device includes a production line certificate distribution micro control unit MCU and a production line certificate distribution server, and the method includes:

[0129] S21, the production line certificate distribution MCU is connected to the communication module to form a temporary terminal, and the temporary terminal is connected to the production line certificate distribution server;

[0130] S22, the production line certificate distribution MCU calculates the certificate storage address according to the international mobile equipment identity code IMEI of the communication module, and obtains the certificate from the production line certificate distribution server according to the IMEI of the communication module;

[0131] S23, the production line certificate distribution MCU sends the certificate storage address and the certificate to the communication module, so that the communication module saves the certificate according to the certificate storage address through the preset software development kit SDK.

[0132] In one embodiment, S21, the production line certificate distribution MCU is connected to the communication module to form a temporary terminal, and the temporary terminal is connected to the production line certificate distribution server, specifically including:

[0133] The production line certificate distribution MCU is connected to the communication module through the modem command language AT interface to form a temporary terminal with the communication module. In the temporary terminal: the production line certificate distribution MCU calls the SDK of the communication module through the AT interface command, the communication module obtains the Internet interconnection protocol IP address, and connects the temporary terminal to the production line certificate distribution server through the IP address.

[0134] In one embodiment, S22, the production line certificate distribution MCU calculates the certificate storage address according to the international mobile equipment identity code IMEI of the communication module, and obtains the certificate from the production line certificate distribution server according to the IMEI of the communication module, specifically including:

[0135] The production line certificate distribution MCU sends an IMEI query instruction to the SDK of the communication module, so that the SDK queries the communication module to obtain the IMEI of the communication module, and sends the IMEI to the production line certificate distribution MCU. The production line certificate distribution MCU calculates the certificate storage address according to the received IMEI;

[0136] The production line certificate distribution MCU sends a public key query instruction to the SDK of the communication module, so that the SDK sends the pre-stored public key to the production line certificate distribution MCU. The production line certificate distribution MCU encrypts the IMEI according to the received public key to form a certificate request ciphertext, and sends the certificate request ciphertext to the production line certificate distribution server, so that the production line certificate distribution server uses the pre-stored private key to decrypt the certificate request ciphertext, and sends the certificate to the production line certificate distribution MCU according to the IMEI obtained by decryption.

[0137] In one implementation, the production line certificate distribution MCU calculates the certificate storage address according to the received IMEI, specifically including:

[0138] The production line certificate distribution MCU converts the IMEI of the communication module through code conversion, redundancy check, hash processing and address offset to obtain the flash memory FLASH address as the certificate storage address.

[0139] In one implementation, in S23, the production line certificate distribution MCU sends the certificate storage address and the certificate to the communication module, specifically including:

[0140] The production line certificate distribution MCU sends the certificate storage address encapsulated by AT interface commands to the SDK of the communication module;

[0141] The production line certificate distribution MCU verifies the validity of the certificate from the production line certificate distribution server, and sends the verified valid certificate encapsulated by AT interface commands to the SDK of the communication module.

[0142] In one embodiment, after the production line certificate distribution MCU sends the certificate storage address and the certificate to the communication module in S23, the method further includes:

[0143] The production line certificate distribution MCU receives the certificate saving success message from the SDK of the communication module, and sends the received certificate saving success message to the production line certificate distribution server, so that the production line certificate distribution server records the certificate distribution time.

[0144] In one embodiment, after sending a message to the production line certificate distribution server indicating that the received certificate has been successfully saved, the method further includes:

[0145] In response to receiving a modify / delete certificate instruction from the production line certificate distribution server, an AT interface command for modifying / deleting the certificate is sent to the SDK of the communication module, so that the SDK calls the pre-packaged modify / delete certificate application programming interface API to modify / delete the certificate stored in the FLASH address segment range corresponding to the certificate storage address.

[0146] Embodiment 3:

[0147] like Figure 2 As shown, the present disclosure provides a communication module, in which a software development kit SDK is pre-installed, and includes:

[0148] The first connection module 11 is used to connect with the production line certificate distribution micro control unit MCU to form a temporary terminal, and the temporary terminal is connected to the production line certificate distribution server;

[0149] The first transceiver module 12 is connected to the first connection module 11, and is used to receive the certificate storage address and certificate from the production line certificate distribution MCU. The certificate storage address is calculated by the production line certificate distribution MCU according to the international mobile equipment identity code IMEI of the communication module, and the certificate is obtained by the production line certificate distribution MCU from the production line certificate distribution server according to the IMEI of the communication module;

[0150] The first saving module 13 is connected to the first transceiver module 12, and is used to save the certificate according to the certificate saving address through the SDK.

[0151] In one implementation, the first connection module 11 specifically includes:

[0152] The first AT connection unit is used to connect with the production line certificate distribution MCU through the modem command language AT interface, so that the communication module and the production line certificate distribution MCU form a temporary terminal, and the production line certificate distribution MCU in the temporary terminal calls the SDK of the communication module through the AT interface command;

[0153] The first IP connection unit is connected to the first AT connection unit and is used to form a temporary terminal. The communication module obtains an Internet Protocol IP address and connects the temporary terminal to the production line certificate distribution server through the IP address.

[0154] In one embodiment, the first transceiver module 12 further includes:

[0155] The first IMEI transceiver unit is used for the communication module to receive the IMEI query instruction from the production line certificate distribution MCU through the SDK, the SDK queries the communication module to obtain the IMEI of the communication module, and the SDK sends the IMEI of the communication module to the production line certificate distribution MCU, so that the production line certificate distribution MCU calculates the certificate storage address according to the received IMEI;

[0156] The first public key transceiver unit is used for the communication module to receive the public key query instruction from the production line certificate distribution MCU through the SDK. The SDK sends the pre-stored public key to the production line certificate distribution MCU, so that the production line certificate distribution MCU encrypts the IMEI according to the received public key to form a certificate request ciphertext, and sends the certificate request ciphertext to the production line certificate distribution server, so that the production line certificate distribution server uses the pre-stored private key to decrypt the certificate request ciphertext, and sends the certificate to the production line certificate distribution MCU according to the IMEI obtained by decryption.

[0157] In one implementation, the first transceiver module 12 specifically includes:

[0158] The first address receiving unit is used for the communication module to receive the certificate storage address encapsulated by the AT interface command from the production line certificate distribution MCU through the SDK, and the certificate storage address is the flash memory FLASH address calculated by the production line certificate distribution MCU according to the IMEI of the communication module;

[0159] The first certificate receiving unit is used for the communication module to receive a certificate encapsulated by the production line certificate distribution MCU using an AT interface command through the SDK, and the certificate has been verified as valid by the production line certificate distribution MCU.

[0160] In one implementation, the first storage module 13 specifically includes:

[0161] The first storage unit is used for the SDK to save the certificate to the FLASH address segment range corresponding to the certificate storage address;

[0162] The first test unit is used for the SDK to obtain the saved certificate according to the certificate saving address, and connect to the IoT platform through the certificate to test the certificate availability;

[0163] The first success message sending unit is used to respond to the test result that the certificate is available, and the SDK sends a message that the certificate is saved successfully to the production line certificate distribution MCU, so that the production line certificate distribution MCU sends a message that the received certificate is saved successfully to the production line certificate distribution server, so that the production line certificate distribution server records the certificate distribution time.

[0164] In one embodiment, the first storage module 13 further includes:

[0165] The first deletion unit is used to respond to the AT interface command for modifying / deleting the certificate received from the production line certificate distribution MCU through the SDK, and the SDK calls the pre-packaged application programming interface API for modifying / deleting the certificate to modify / delete the certificate stored in the FLASH address segment range corresponding to the certificate storage address.

[0166] Embodiment 4:

[0167] like Figure 7 As shown, the present disclosure provides a production line certificate distribution device, which includes a production line certificate distribution micro control unit MCU and a production line certificate distribution server, and the production line certificate distribution MCU includes:

[0168] The second connection module 21 is used to connect with the communication module to form a temporary terminal, and the temporary terminal is connected to the production line certificate distribution server;

[0169] The second acquisition module 22 is connected to the second connection module 21, and is used to calculate the certificate storage address according to the international mobile equipment identity code IMEI of the communication module, and obtain the certificate from the production line certificate distribution server according to the IMEI of the communication module;

[0170] The second transceiver module 23 is connected to the second acquisition module 22, and is used to send the certificate storage address and the certificate to the communication module, so that the communication module saves the certificate according to the certificate storage address through a preset software development kit SDK.

[0171] In one embodiment, the second connection module 21 specifically includes:

[0172] The second AT connection unit is used to connect to the communication module through the modem command language AT interface, so that the production line certificate distribution MCU and the communication module form a temporary terminal. In the temporary terminal: the production line certificate distribution MCU calls the SDK of the communication module through the AT interface command, the communication module obtains the Internet interconnection protocol IP address, and connects the temporary terminal to the production line certificate distribution server through the IP address.

[0173] In one implementation, the second acquisition module 22 specifically includes:

[0174] The second address acquisition unit is used for the production line certificate distribution MCU to send an IMEI query instruction to the SDK of the communication module, so that the SDK queries the communication module to obtain the IMEI of the communication module, and sends the IMEI to the production line certificate distribution MCU, and the production line certificate distribution MCU calculates the certificate storage address according to the received IMEI;

[0175] The second certificate acquisition unit is used for the production line certificate distribution MCU to send a public key query instruction to the SDK of the communication module, so that the SDK sends the pre-stored public key to the production line certificate distribution MCU, and the production line certificate distribution MCU encrypts the IMEI according to the received public key to form a certificate request ciphertext, and sends the certificate request ciphertext to the production line certificate distribution server, so that the production line certificate distribution server uses the pre-stored private key to decrypt the certificate request ciphertext, and sends the certificate to the production line certificate distribution MCU according to the IMEI obtained by decryption.

[0176] In one implementation, the second address obtaining unit specifically includes:

[0177] The address calculation unit is used for the production line certificate distribution MCU to convert the IMEI of the communication module through code conversion, redundancy check, hash processing and address offset to obtain the flash memory FLASH address as the certificate storage address.

[0178] In one implementation, the second transceiver module 23 specifically includes:

[0179] The second address sending unit is used for the production line certificate distribution MCU to send the certificate storage address encapsulated by the AT interface command to the SDK of the communication module;

[0180] The second certificate sending unit is used for the production line certificate distribution MCU to verify the validity of the certificate from the production line certificate distribution server, and to send the verified valid certificate encapsulated by AT interface commands to the SDK of the communication module.

[0181] In one embodiment, the second transceiver module 23 further includes:

[0182] The second success message receiving and sending unit is used for the production line certificate distribution MCU to receive the certificate saving success message from the SDK of the communication module, and send the received certificate saving success message to the production line certificate distribution server, so that the production line certificate distribution server records the certificate distribution time.

[0183] In one embodiment, the second transceiver module 23 further includes:

[0184] The second deletion and modification information receiving and sending unit is used to send an AT interface command for modifying / deleting the certificate to the SDK of the communication module in response to receiving a modification / deletion certificate instruction from the production line certificate distribution server, so that the SDK calls a pre-packaged application programming interface API for modifying / deleting the certificate to modify / delete the certificate stored in the FLASH address segment range corresponding to the certificate storage address.

[0185] Embodiment 5:

[0186] Embodiment 5 of the present disclosure provides a computer-readable storage medium, in which a computer program is stored. When the computer program is executed by a processor, the certificate distribution method as described in Embodiment 1 is implemented, or the communication module as described in Embodiment 2 or the production line certificate distribution device as described in Embodiment 3 is implemented.

[0187] The computer-readable storage medium includes volatile or non-volatile, removable or non-removable media implemented in any method or technology for storing information (such as computer-readable instructions, data structures, computer program modules or other data). Computer-readable storage media include, but are not limited to, RAM (Random Access Memory), ROM (Read-Only Memory), EEPROM (Electrically Erasable Programmable read only memory), flash memory or other memory technology, CD-ROM (Compact Disc Read-Only Memory), digital versatile disk (DVD) or other optical disk storage, magnetic cassettes, magnetic tapes, magnetic disk storage or other magnetic storage devices, or any other medium that can be used to store the desired information and can be accessed by a computer.

[0188] In addition, the present disclosure may also provide a computer device, including a memory and a processor, wherein a computer program is stored in the memory. When the processor runs the computer program stored in the memory, the processor executes the certificate distribution method as described in Example 1. The computer device may be a communication module as described in Example 2 or a production line certificate distribution device as described in Example 3.

[0189] The memory is connected to the processor, the memory may be a flash memory or a read-only memory or other memory, and the processor may be a central processing unit or a single-chip microcomputer.

[0190] Embodiments 1-5 of the present disclosure provide a certificate distribution method, a communication module, a production line certificate distribution device, and a computer-readable storage medium. A certificate distribution MCU is set on the production line to form a temporary terminal with the communication module, and the certificate distribution of the communication module is realized by connecting the temporary terminal to the production line certificate distribution server. At the same time, the address of the communication module written by the certificate is calculated by IMEI, and the certificate is written to the communication module according to the certificate storage address by pre-setting a unified SDK. The unified module SDK can realize the fast and automatic distribution of unique certificates to the module. The certificate storage address associated with IMEI can prevent the stored certificate from being unintentionally tampered with or cracked, thereby realizing efficient and secure certificate distribution.

[0191] It is to be understood that the above embodiments are merely exemplary embodiments used to illustrate the principles of the present disclosure, but the present disclosure is not limited thereto. For those of ordinary skill in the art, various modifications and improvements can be made without departing from the spirit and substance of the present disclosure, and these modifications and improvements are also considered to be within the scope of protection of the present disclosure.< / length> < / address> < / length> < / address> < / devicesecret> < / productsecret> < / devicekey> < / productkey> < / imei>

Claims

1. A certificate distribution method, characterized in that: The method is applied to a communication module and includes: The communication module is connected to the production line certificate distribution microcontroller unit MCU to form a temporary terminal, and the temporary terminal is connected to the production line certificate distribution server; The communication module receives the certificate storage address and certificate from the production line certificate distribution MCU. The certificate storage address is calculated by the production line certificate distribution MCU based on the international mobile equipment identity code IMEI of the communication module. The certificate is obtained by the production line certificate distribution MCU from the production line certificate distribution server based on the IMEI of the communication module. The communication module saves the certificate according to the certificate saving address through the preset software development kit SDK.

2. The method according to claim 1, characterized in that The communication module is connected to the production line certificate distribution microcontroller unit MCU to form a temporary terminal, which is connected to the production line certificate distribution server, specifically including: The communication module is connected to the production line certificate distribution MCU through the modem command language AT interface to form a temporary terminal with the production line certificate distribution MCU. The production line certificate distribution MCU in the temporary terminal calls the SDK of the communication module through the AT interface command; The communication module obtains the Internet Protocol IP address and connects the temporary terminal to the production line certificate distribution server through the IP address.

3. The method according to claim 1 or 2, characterized in that: Before the communication module receives the certificate storage address and the certificate from the production line certificate distribution MCU, the method further includes: The communication module receives the IMEI query instruction from the production line certificate distribution MCU through the SDK. The SDK queries the communication module to obtain the IMEI of the communication module. The SDK sends the IMEI of the communication module to the production line certificate distribution MCU, so that the production line certificate distribution MCU calculates the certificate storage address according to the received IMEI. The communication module receives the public key query instruction from the production line certificate distribution MCU through the SDK. The SDK sends the pre-stored public key to the production line certificate distribution MCU, so that the production line certificate distribution MCU encrypts the IMEI according to the received public key to form a certificate request ciphertext, and sends the certificate request ciphertext to the production line certificate distribution server, so that the production line certificate distribution server uses the pre-stored private key to decrypt the certificate request ciphertext, and sends the certificate to the production line certificate distribution MCU according to the IMEI obtained by decryption.

4. The method according to claim 1 or 2, characterized in that: The communication module receives the certificate storage address and certificate from the production line certificate distribution MCU, including: The communication module receives the certificate storage address encapsulated by the AT interface command from the production line certificate distribution MCU through the SDK, and the certificate storage address is the flash memory FLASH address calculated by the production line certificate distribution MCU according to the IMEI of the communication module; The communication module receives the certificate encapsulated by the AT interface command from the production line certificate distribution MCU through the SDK, and the certificate has been verified as valid by the production line certificate distribution MCU.

5. The method according to claim 4, characterized in that The communication module saves the certificate according to the certificate storage address through the preset software development kit SDK, including: The SDK saves the certificate to the FLASH address range corresponding to the certificate save address; The SDK obtains the saved certificate according to the certificate storage address and connects to the IoT platform through the certificate to test the certificate availability; In response to the test result that the certificate is available, the SDK sends a message that the certificate has been successfully saved to the production line certificate distribution MCU, so that the production line certificate distribution MCU sends a message that the received certificate has been successfully saved to the production line certificate distribution server, so that the production line certificate distribution server records the certificate distribution time.

6. The method according to claim 5, characterized in that After the SDK saves the certificate to the FLASH address segment range corresponding to the certificate saving address, the method further includes: In response to receiving an AT interface command for modifying / deleting a certificate from the production line certificate distribution MCU through the SDK, the SDK calls a pre-packaged application programming interface API for modifying / deleting a certificate to modify / delete the certificate stored in the FLASH address segment range corresponding to the certificate storage address.

7. A certificate distribution method, characterized in that: The method is applied to a production line certificate distribution device, the production line certificate distribution device includes a production line certificate distribution micro control unit MCU and a production line certificate distribution server, and the method includes: The production line certificate distribution MCU is connected to the communication module to form a temporary terminal, and the temporary terminal is connected to the production line certificate distribution server; The production line certificate distribution MCU calculates the certificate storage address according to the international mobile equipment identity code IMEI of the communication module, and obtains the certificate from the production line certificate distribution server according to the IMEI of the communication module; The production line certificate distribution MCU sends the certificate storage address and the certificate to the communication module, so that the communication module saves the certificate according to the certificate storage address through the preset software development kit SDK.

8. The method according to claim 7, characterized in that The production line certificate distribution MCU is connected to the communication module to form a temporary terminal, which is connected to the production line certificate distribution server, including: The production line certificate distribution MCU is connected to the communication module through the modem command language AT interface to form a temporary terminal with the communication module. In the temporary terminal: the production line certificate distribution MCU calls the SDK of the communication module through the AT interface command, the communication module obtains the Internet interconnection protocol IP address, and connects the temporary terminal to the production line certificate distribution server through the IP address.

9. The method according to claim 8 or 7, characterized in that: The production line certificate distribution MCU calculates the certificate storage address according to the international mobile equipment identity code IMEI of the communication module, and obtains the certificate from the production line certificate distribution server according to the IMEI of the communication module, including: The production line certificate distribution MCU sends an IMEI query instruction to the SDK of the communication module, so that the SDK queries the communication module to obtain the IMEI of the communication module, and sends the IMEI to the production line certificate distribution MCU. The production line certificate distribution MCU calculates the certificate storage address according to the received IMEI; The production line certificate distribution MCU sends a public key query instruction to the SDK of the communication module, so that the SDK sends the pre-stored public key to the production line certificate distribution MCU. The production line certificate distribution MCU encrypts the IMEI according to the received public key to form a certificate request ciphertext, and sends the certificate request ciphertext to the production line certificate distribution server, so that the production line certificate distribution server uses the pre-stored private key to decrypt the certificate request ciphertext, and sends the certificate to the production line certificate distribution MCU according to the IMEI obtained by decryption.

10. The method according to claim 9, characterized in that The production line certificate distribution MCU calculates the certificate storage address based on the received IMEI, including: The production line certificate distribution MCU converts the IMEI of the communication module through code conversion, redundancy check, hash processing and address offset to obtain the flash memory FLASH address as the certificate storage address.

11. The method according to claim 10, characterized in that The production line certificate distribution MCU sends the certificate storage address and certificate to the communication module, including: The production line certificate distribution MCU sends the certificate storage address encapsulated by AT interface commands to the SDK of the communication module; The production line certificate distribution MCU verifies the validity of the certificate from the production line certificate distribution server, and sends the verified valid certificate encapsulated by AT interface commands to the SDK of the communication module.

12. The method according to claim 11, characterized in that After the production line certificate distribution MCU sends the certificate storage address and the certificate to the communication module, the method further includes: The production line certificate distribution MCU receives the certificate saving success message from the SDK of the communication module, and sends the received certificate saving success message to the production line certificate distribution server, so that the production line certificate distribution server records the certificate distribution time.

13. The method according to claim 12, characterized in that After sending a message that the received certificate has been successfully saved to the production line certificate distribution server, the method further includes: In response to receiving a modify / delete certificate instruction from the production line certificate distribution server, an AT interface command for modifying / deleting the certificate is sent to the SDK of the communication module, so that the SDK calls the pre-packaged modify / delete certificate application programming interface API to modify / delete the certificate stored in the FLASH address segment range corresponding to the certificate storage address.

14. A communication module, characterized in that: The communication module comes with a pre-installed software development kit (SDK), which includes: A first connection module is used to connect with the production line certificate distribution micro control unit MCU to form a temporary terminal, and the temporary terminal is connected to the production line certificate distribution server; A first transceiver module is connected to the first connection module and is used to receive a certificate storage address and a certificate from the production line certificate distribution MCU. The certificate storage address is calculated by the production line certificate distribution MCU according to the international mobile equipment identity code IMEI of the communication module. The certificate is obtained by the production line certificate distribution MCU from the production line certificate distribution server according to the IMEI of the communication module; The first saving module is connected to the first transceiver module and is used to save the certificate according to the certificate saving address through the SDK.

15. A production line certificate distribution device, characterized in that: The production line certificate distribution device includes a production line certificate distribution micro control unit MCU and a production line certificate distribution server, and the production line certificate distribution MCU includes: A second connection module is used to connect with the communication module to form a temporary terminal, and the temporary terminal is connected to the production line certificate distribution server; A second acquisition module, connected to the second connection module, is used to calculate the certificate storage address according to the international mobile equipment identity code IMEI of the communication module, and obtain the certificate from the production line certificate distribution server according to the IMEI of the communication module; The second transceiver module is connected to the second acquisition module and is used to send the certificate storage address and the certificate to the communication module, so that the communication module saves the certificate according to the certificate storage address through a preset software development kit SDK.

16. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the certificate distribution method according to any one of claims 1 to 6 or 7 to 13 is implemented.

Images