Intelligent measurement system identity authentication method and system based on SM9 algorithm

Abstract

The invention relates to the technical field of intelligent measurement systems, in particular to an intelligent measurement system identity authentication method and system based on an SM9 algorithm. The method comprises the following steps: firstly, acquiring identity data of intelligent measurement terminal equipment, extracting identity related features, and determining a current equipment state based on the extracted features; secondly, for each authentication mode in the authentication action space based on the SM9 algorithm, predicting corresponding security and efficiency values in combination with the current state; dynamically determining a target authentication mode according to the security efficiency value; and finally, performing identity authentication on the terminal equipment according to the determined mode. According to the method, the identity feature, the operation state and the selectable authentication action space of the terminal equipment are comprehensively considered, the authentication mode with the optimal balance between safety and efficiency is selected for different state scenes, high adaptability and flexibility of the identity authentication process are achieved, meanwhile, based on the SM9 algorithm, key management and an authentication center are not needed, and the authentication efficiency is improved. And the authentication complexity is reduced.

Description

Technical Field

[0001] The present application relates to the technical field of intelligent measurement systems, and in particular to an identity authentication method and system for an intelligent measurement system based on an SM9 algorithm. Background Art

[0002] Smart grid is a huge IoT system involving a large number of intelligent measurement terminal devices. Ensuring the security and reliability of communication and data transmission between these devices and the system is crucial to the safe and efficient operation of the entire power grid. Therefore, implementing reliable identity authentication for intelligent measurement terminal devices has become a key foundation for the smooth operation of smart grids.

[0003] At present, the PKI / CA-based identity authentication mechanism is widely used in the smart grid field, using digital certificates to authenticate the identity of communication entities to ensure the security and integrity of data transmission. However, as the scale of smart grids continues to expand, the number of connected terminal devices has increased exponentially, causing a sharp increase in the workload of key management and maintenance of the PKI / CA-based authentication system.

[0004] The traditional authentication mechanism based on PKI / CA has a heavy burden on the authentication system due to the rapid increase in the complexity of key management and maintenance in the smart grid scenario. At the same time, the authentication process is relatively rigid and difficult to dynamically adjust according to different scenario states, lacking flexibility. This situation needs to be further improved. Summary of the invention

[0005] In order to solve the problem of high complexity and lack of flexibility of the existing authentication mechanism, this application provides an intelligent measurement system identity authentication method and system based on the SM9 algorithm, which adopts the following technical solutions: In a first aspect, the present application provides an identity authentication method for an intelligent measurement system based on an SM9 algorithm, comprising the following steps: obtaining identity-related data of an intelligent measurement terminal device, and extracting identity-related features based on the identity-related data; Determining a current device state of the intelligent measurement terminal device based on the extracted identity-related features; For each authentication method in the identity authentication action space based on the SM9 identification cryptographic algorithm, combined with the current device state, predict the security and efficiency values ​​corresponding to executing each authentication method in the current device state; Determine the target identity authentication method based on the security and efficiency values ​​corresponding to each authentication method; According to the target identity authentication method, identity recognition and authentication are performed on the intelligent measurement terminal device.

[0006] By adopting the above-mentioned technical scheme, the present application first obtains the identity data of the intelligent measurement terminal device, extracts identity-related features, and determines the current device state based on the extracted features; then, for each authentication method in the authentication action space based on the SM9 algorithm, predicts its corresponding security and efficiency values ​​in combination with the current state; dynamically determines the target authentication method according to the security efficiency value; finally, performs identity authentication on the terminal device in a determined manner; comprehensively considers the identity characteristics, operating status and optional authentication action space of the terminal device, and selects the authentication method with the optimal balance between security and efficiency for different state scenarios, thereby achieving high adaptability and flexibility of the identity authentication process. At the same time, based on the SM9 algorithm, no key management and authentication center are required, which reduces the complexity of authentication.

[0007] Optionally, obtaining identity-related data of the intelligent measurement terminal device and extracting identity-related features based on the identity-related data specifically includes the following steps: Read the identity ID and SM9 private key from the intelligent measurement terminal device; Calculate the identity feature vector according to the identity identifier ID and the SM9 private key; Obtaining the hardware parameters and software version of the intelligent measurement terminal device; A comprehensive identity feature is obtained according to the identity feature vector, hardware parameters and software version.

[0008] By adopting the above technical solution, this application first reads the basic identity ID and SM9 private key from the intelligent measurement terminal as the basis of the identity characteristics; secondly, obtains auxiliary information such as the hardware parameters and software version of the device; finally, the basic identity characteristics are combined with the auxiliary information to generate a comprehensive integrated identity feature, which can comprehensively characterize the identity characteristics of the intelligent measurement terminal device and accurately judge the current status of the terminal.

[0009] Optionally, determining the current device state of the intelligent measurement terminal device based on the extracted identity-related features specifically includes the following steps: Obtaining runtime data of the intelligent measurement terminal device; Inputting the comprehensive identity feature and the runtime data into a pre-trained state judgment model; According to the output of the state judgment model, the current device state level of the intelligent measurement terminal device is determined.

[0010] By adopting the above-mentioned technical solution, this application combines the comprehensive identity characteristics of the terminal device with the runtime data, inputs a pre-trained status judgment model, and the model intelligently analyzes and outputs the current device status level, thereby improving the intelligence level and adaptability, being able to comprehensively consider influencing factors, and dynamically adjust the judgment strategy according to the model training results, making accurate judgments on different device status scenarios, and having strong robustness.

[0011] Optionally, for each authentication method in the identity authentication action space based on the SM9 identification cryptographic algorithm, combined with the current device state, predicting the security and efficiency values ​​that can be obtained by executing the authentication method in the current device state specifically includes the following steps: Get the authentication method set in the identity authentication action space based on the SM9 identification cryptographic algorithm; Based on the current device state level of the intelligent measurement terminal device, construct a state-behavior pair for each authentication method in the authentication method set; Each state-behavior pair is input into the pre-trained reward function model to obtain the predicted security and efficiency values ​​of each authentication method at the current device state level.

[0012] By adopting the above technical solution, since different authentication methods can achieve different security and efficiency under specific device states, this application first obtains all optional authentication methods based on the SM9 algorithm; then, based on the current device state, a state-behavior pair is constructed for each authentication method; then, these state-behavior pairs are input into the pre-trained reward function model, and the model intelligently predicts the security and efficiency values ​​that can be achieved by executing each authentication method in the current state, and intelligently evaluates the security and efficiency indicators of each authentication method under different scenario states, providing a basis for subsequent method selection.

[0013] Optionally, based on the security and efficiency values ​​corresponding to each authentication method, determining a target identity authentication method specifically includes the following steps: Determining weight parameters of safety and efficiency values ​​based on the current device status level of the intelligent measurement terminal device; The predicted security and efficiency values ​​corresponding to each authentication method are weighted and summed to obtain the comprehensive reward value; Determine the target identity authentication method based on the comprehensive reward value corresponding to each authentication method.

[0014] By adopting the above technical solution, the present application first determines the weight parameters of security and efficiency according to the current device status; then performs weighted summation on the predicted security and efficiency values ​​of each authentication method to obtain a comprehensive reward value; finally, based on the size of the comprehensive reward value, dynamically determines the target identity authentication method, and can flexibly adjust the preference for the two dimensions of security and efficiency according to the actual status scenario, thereby selecting the authentication method with the best performance in the scenario, effectively improving the adaptability of the authentication process and the rationality of decision-making.

[0015] Optionally, according to the target identity authentication method, identity recognition and authentication are performed on the intelligent measurement terminal device, specifically including the following steps: Instruct the intelligent measurement terminal device to generate an authentication request according to the target identity authentication method, and use the SM9 private key to sign the authentication request; Receiving a signature-carrying authentication request sent by the intelligent measurement terminal device; Verifying the legitimacy of the signature; Querying the current device status level of the intelligent measurement terminal device according to the identity identifier in the authentication request; Based on the queried current device status level, determine whether the target identity authentication method meets the security requirements. If it does, perform an authentication pass operation; otherwise, perform an authentication fail operation.

[0016] By adopting the above technical solution, after determining the target authentication method, the terminal device constructs an authentication request according to the target authentication method and signs it with the SM9 private key. After receiving the request, the authentication system first verifies the legitimacy of the signature, then queries the current device status level based on the identity, and finally compares it with the security requirements of the target method to determine the authentication result, thereby ensuring the integrity and security of the authentication process and preventing security risks such as man-in-the-middle attacks.

[0017] Optionally, based on the current device status level of the intelligent measurement terminal device, determining weight parameters of the safety and efficiency values ​​specifically includes the following steps: Based on the current device status level of the intelligent measurement terminal device, determine the security weight parameter W a , W a =1 / (1+e (-k(S-0.5)) ), where S is the current device status level and k is a preset constant parameter; Based on the weight parameter of security, determine the weight parameter W of efficiency value e , W e =1-W a .

[0018] By adopting the above technical solution, since there are differences in the preference for security and efficiency under different device states, in order to achieve dynamic trade-off adjustment, the present application calculates the security weight through a deterministic function based on the current device state level and preset constants. The size of the weight can be dynamically adjusted as the device state level changes. When the state level is low, the security weight is small and the efficiency weight is large; when the state level is high, the security weight gradually increases and the efficiency weight gradually decreases, which can adaptively achieve a match between the state level and the weight.

[0019] In a second aspect, the present application provides an identity authentication system for an intelligent measurement system based on the SM9 algorithm, comprising: an identity-related feature acquisition module, for acquiring identity-related data of an intelligent measurement terminal device, and extracting identity-related features based on the identity-related data; A current device state determination module, used to determine the current device state of the intelligent measurement terminal device based on the extracted identity-related features; A security and efficiency value prediction module, for predicting the security and efficiency values ​​corresponding to executing each authentication method in the identity authentication action space based on the SM9 identification cryptographic algorithm in combination with the current device state; A target identity authentication method determination module is used to determine a target identity authentication method based on the security and efficiency values ​​corresponding to each authentication method; The identity recognition and authentication module is used to perform identity recognition and authentication on the intelligent measurement terminal device according to the target identity authentication method.

[0020] In a third aspect, the present application provides an electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the steps of the above-mentioned intelligent measurement system identity authentication method based on the SM9 algorithm when executing the computer program.

[0021] In a fourth aspect, the present application provides a computer-readable storage medium having a computer program stored thereon, and when the computer program is executed by a processor, the steps of the above-mentioned intelligent measurement system identity authentication method based on the SM9 algorithm are implemented.

[0022] In summary, the present application includes at least one of the following beneficial technical effects: 1. This application first obtains the identity data of the intelligent measurement terminal device, extracts identity-related features, and determines the current device state based on the extracted features; then, for each authentication method in the authentication action space based on the SM9 algorithm, predicts its corresponding security and efficiency values ​​in combination with the current state; dynamically determines the target authentication method according to the security efficiency value; finally, performs identity authentication on the terminal device in the determined manner; comprehensively considers the identity features, operating status, and optional authentication action space of the terminal device, and selects the authentication method with the best balance between security and efficiency for different state scenarios, thereby achieving high adaptability and flexibility of the identity authentication process. At the same time, based on the SM9 algorithm, no key management and authentication center are required, which reduces the complexity of authentication; 2. This application first reads the basic identity ID and SM9 private key from the smart measurement terminal as the basis of the identity features; secondly, it obtains auxiliary information such as the hardware parameters and software version of the device; finally, it combines the basic identity features with the auxiliary information to generate a comprehensive integrated identity feature, which can comprehensively characterize the identity features of the smart measurement terminal device and accurately judge the current status of the terminal; 3. This application combines the comprehensive identity features of the terminal device with the runtime data, inputs a pre-trained status judgment model, and the model intelligently analyzes and outputs the current device status level, which improves the intelligence level and adaptability, can comprehensively consider the influencing factors, and dynamically adjust the judgment strategy according to the model training results, make accurate judgments on different device status scenarios, and has strong robustness. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] Figure 1 It is a flowchart of an identity authentication method for an intelligent measurement system based on the SM9 algorithm according to an embodiment of the present application; Figure 2 It is a flowchart of step S10 in an identity authentication method of an intelligent measurement system based on the SM9 algorithm in an embodiment of the present application; Figure 3 It is a flowchart of step S20 in an identity authentication method of an intelligent measurement system based on the SM9 algorithm in an embodiment of the present application; Figure 4 It is a flowchart of step S30 in an identity authentication method of an intelligent measurement system based on the SM9 algorithm in an embodiment of the present application; Figure 5 It is a flowchart of step S40 in an identity authentication method of an intelligent measurement system based on the SM9 algorithm in an embodiment of the present application; Figure 6 It is a flowchart of step S50 in an identity authentication method of an intelligent measurement system based on the SM9 algorithm according to an embodiment of the present application; Figure 7It is a module schematic diagram of an intelligent measurement system identity authentication system based on the SM9 algorithm in an embodiment of the present application; Figure 8 It is a diagram of the internal structure of an electronic device according to an embodiment of the present application. DETAILED DESCRIPTION

[0024] The terms used in the following embodiments of the present application are only for the purpose of describing specific embodiments, and are not intended to be used as limitations to the present application. As used in the specification and appended claims of the present application, the singular expressions "one", "a kind of", "said", "above", "the" and "this" are intended to also include plural expressions, unless there is a clear indication to the contrary in the context. It should also be understood that the term "and / or" used in the present application refers to any or all possible combinations comprising one or more listed items.

[0025] In the following, the terms "first" and "second" are used for descriptive purposes only and are not to be understood as suggesting or implying relative importance or implicitly indicating the number of the indicated technical features. Thus, a feature defined as "first" or "second" may explicitly or implicitly include one or more of the features, and in the description of the embodiments of the present application, unless otherwise specified, "plurality" means two or more.

[0026] The embodiments of the present application are further described in detail below in conjunction with the drawings in the specification.

[0027] In the first aspect, the present application provides an identity authentication method for an intelligent measurement system based on the SM9 algorithm, referring to Figure 1 , including the following steps: S10. Acquire identity-related data of the intelligent measurement terminal device, and extract identity-related features based on the identity-related data.

[0028] In this embodiment, the identity-related data of the terminal device includes information such as identity ID, SM9 private key, hardware parameters and software version.

[0029] Specifically, the identity ID and SM9 private key are read from the terminal storage medium, and the SM9 cryptographic algorithm instance is initialized using the configured elliptic curve parameters. The identity ID is first hashed to obtain a fixed-length output, the output is regarded as a large integer, and the integer is mapped to coordinates on the elliptic curve as part of the identity feature vector, which is then spliced ​​with the SM9 private key to form a complete vector; at the same time, hardware parameters such as CPU model and memory size, as well as software information such as operating system version number and application software version are read and integrated to obtain comprehensive identity features.

[0030] S20: Determine the current device state of the intelligent measurement terminal device based on the extracted identity-related features.

[0031] In this embodiment, the identity features and the runtime data of the terminal are integrated, a pre-trained machine learning state judgment model is input, and the current device state level is output.

[0032] Specifically, the terminal's runtime data such as CPU utilization, memory usage, network throughput, etc. are obtained, and these data are input into the pre-trained state judgment model together with the comprehensive identity features obtained previously, and the current state level is intelligently analyzed. The state levels include normal, sub-healthy, abnormal, etc.

[0033] S30. For each authentication method in the identity authentication action space based on the SM9 identification cryptographic algorithm, combined with the current device state, predict the security and efficiency values ​​corresponding to executing each authentication method under the current device state.

[0034] In this embodiment, a set of optional SM9 authentication methods is obtained, a "current state-authentication method" pair is constructed as input, and a reward function model is input to predict the security and efficiency values ​​of each method in the current state.

[0035] Specifically, all optional methods are obtained from the system's preset SM9 algorithm authentication method library, such as SM9 full version identity authentication, SM9 lightweight authentication, SM9 auxiliary data authentication, etc., and then the currently determined state level is corresponded to each authentication method to form a state-behavior pair, which is input into the reward function model based on reinforcement learning training. The model will output the predicted security value and efficiency value of each authentication method in this state.

[0036] Among them, SM9 full version identity authentication refers to a comprehensive and strict identity authentication mechanism designed for smart measurement terminal devices. It adopts SM9 identification cryptographic algorithm, combined with complete key generation, certificate management, identity authentication and signature verification process to ensure the identity authenticity and communication security of smart measurement terminal devices. It is suitable for smart measurement terminal devices with extremely high security requirements in smart grids, such as power monitoring equipment at key nodes. SM9 lightweight authentication is aimed at smart measurement terminal devices with limited resources or high real-time requirements in smart grids. By optimizing the implementation of SM9 algorithm, it reduces the computational complexity and resource consumption, while maintaining a certain degree of security to meet the rapid authentication requirements of smart measurement terminal devices. It is suitable for widely distributed and resource-limited smart measurement terminal devices in smart grids, such as a large number of deployed smart meters. SM9 auxiliary data authentication is an enhanced identity authentication method based on SM9 identification cryptographic algorithm, combined with specific auxiliary data of smart measurement terminal devices such as device serial number, geographic location, operating parameters, etc. It is suitable for smart measurement terminal devices in smart grids that need to further improve the accuracy and security of identity authentication, such as terminal devices participating in advanced metering architecture.

[0037] S40: Determine a target identity authentication method based on the security and efficiency values ​​corresponding to each authentication method.

[0038] In this embodiment, the weight parameters of security and efficiency are determined according to the current state level, the predicted security efficiency value of each authentication method is weighted and summed to obtain a comprehensive reward value, and the authentication method with the largest comprehensive reward value is selected as the target authentication method.

[0039] S50: Perform identity recognition and authentication on the intelligent measurement terminal device according to the target identity authentication method.

[0040] Specifically, the terminal device constructs an authentication request and signs it according to the target authentication method. After verifying the signature, the authentication system queries the current status level based on the identity to determine whether the target method meets the security requirements in this state. If so, the authentication is successful.

[0041] In one embodiment, referring to Figure 2 In step S10, identity-related data of the intelligent measurement terminal device is obtained, and identity-related features are extracted based on the identity-related data, which specifically includes the following steps: S11. Read the identity ID and SM9 private key from the intelligent measurement terminal device.

[0042] S12. Calculate the identity feature vector based on the identity ID and the SM9 private key.

[0043] In this embodiment, an injective encoding method that meets the requirements of the SM9 standard is selected to map the identity ID code to point coordinates on an elliptic curve as an identity feature vector.

[0044] Specifically, the identity ID is first hashed to obtain a fixed-length output, the output is regarded as a large integer, and then the integer is mapped to coordinates (x, y) on the elliptic curve as part of the identity feature vector, which is then spliced ​​with the SM9 private key to form a complete vector.

[0045] S13. Obtain hardware parameters and software version of the intelligent measurement terminal device.

[0046] Specifically, read the terminal CPU model, memory capacity, network card address and other hardware parameters, as well as operating system release version, kernel version, main application software version and other software information.

[0047] S14. Obtain comprehensive identity features according to the identity feature vector, hardware parameters and software version.

[0048] In this embodiment, the identity vector is fused with the hardware and software information through a feature fusion function to obtain a comprehensive identity feature.

[0049] Specifically, a nonlinear fusion function such as a hash function is used to take the identity feature vector, hardware parameters and software version information as input to obtain a comprehensive identity feature vector with a fixed dimension as the comprehensive identity feature output of the intelligent measurement terminal device.

[0050] In one embodiment, referring to Figure 3 In step S20, based on the extracted identity-related features, the current device state of the intelligent measurement terminal device is determined, which specifically includes the following steps: S21. Obtain runtime data of the intelligent measurement terminal device.

[0051] In this embodiment, the runtime data of the intelligent measurement terminal device includes real-time status information of both hardware and software.

[0052] Specifically, the real-time usage status of hardware resources such as CPU utilization, memory usage, and hard disk IO throughput is obtained through the system API; at the same time, software running status information such as network sending and receiving traffic, running process list, system log, etc. is obtained, reflecting the current real-time running status of the terminal.

[0053] S22. Input the comprehensive identity features and runtime data into the pre-trained state judgment model.

[0054] In this embodiment, the state judgment model is a machine learning model that is pre-trained on a large amount of historical data.

[0055] Specifically, a recursive neural network is used, with the comprehensive identity features as the first time step of the input, and multiple time points of the runtime data as the subsequent time steps. The model makes state judgments by capturing the temporal dynamic features of the input sequence.

[0056] S23. Determine the current device status level of the intelligent measurement terminal device according to the output of the status judgment model.

[0057] In this embodiment, the output of the state judgment model is the confidence scores corresponding to multiple state levels, and the level with the highest confidence is taken as the current state.

[0058] Specifically, by setting multiple discrete state levels such as normal, sub-healthy, and abnormal, the state judgment model outputs the confidence score for each level, normalizes these scores to obtain probability values, and takes the level with the largest probability value as the current device state level of the terminal.

[0059] In one embodiment, referring to Figure 4 In step S30, for each authentication method in the identity authentication action space based on the SM9 identification cryptographic algorithm, combined with the current device state, the security and efficiency values ​​that can be obtained by executing the authentication method in the current device state are predicted, specifically including the following steps: S31. Obtain a set of authentication methods in an identity authentication action space based on the SM9 identification cryptographic algorithm.

[0060] In this embodiment, the system predefines and stores a set of optional authentication methods based on SM9 identity authentication.

[0061] Specifically, multiple authentication modes are preset, such as SM9 full version identity authentication, SM9 lightweight authentication, SM9 auxiliary data authentication, etc., and their detailed parameters, calculation steps, security performance and other information are stored in the system's authentication method library.

[0062] S32. Based on the current device status level of the intelligent measurement terminal device, a state-behavior pair is constructed for each authentication method in the authentication method set.

[0063] In this embodiment, the prior knowledge of selecting a certain authentication method under different device states is described in the form of state-behavior pairs.

[0064] Specifically, for each device status level, a set of authentication method preferences matching the status is manually designed, and each status is matched with its preferred authentication method to form a state-behavior pair for storage, such as normal status, SM9 complete identity authentication, etc.

[0065] S33. Input each state behavior pair into the pre-trained reward function model to obtain the predicted security and efficiency values ​​of each authentication method at the current device state level.

[0066] In this embodiment, the reward function model realizes the mapping of states and behaviors to safety and efficiency values.

[0067] Specifically, a rule table is manually defined in advance, and corresponding security and efficiency scores are assigned to each possible state-behavior pair to construct a lookup table. According to the current device state and optional authentication method, the corresponding row is searched in the rule table, and the security and efficiency scores given in the row are directly read as output.

[0068] In one embodiment, referring to Figure 5 In step S40, based on the security and efficiency values ​​corresponding to each authentication method, a target identity authentication method is determined, which specifically includes the following steps: S41. Determine weight parameters of security and efficiency values ​​based on the current device status level of the intelligent measurement terminal device.

[0069] Specifically, in step S41, firstly, based on the current device status level of the intelligent measurement terminal device, a security weight parameter W is determined. a , W a =1 / (1+e (-k(S-0.5))), where S is the current equipment status level and k is a preset constant parameter; then based on the weight parameter of security, the weight parameter W of the efficiency value is determined e , W e =1-W a .

[0070] S42. Perform weighted summation on the predicted security and efficiency values ​​corresponding to each authentication method to obtain a comprehensive reward value.

[0071] S43. Determine the target identity authentication method according to the comprehensive reward value corresponding to each authentication method.

[0072] In one embodiment, referring to Figure 6 In step S50, identity recognition and authentication are performed on the intelligent measurement terminal device according to the target identity authentication method, which specifically includes the following steps: S51, instructing the intelligent measurement terminal device to generate an authentication request according to the target identity authentication method, and use the SM9 private key to sign the authentication request.

[0073] S52: Receive a signature-carrying authentication request sent by the intelligent measurement terminal device.

[0074] S53. Verify the legitimacy of the signature.

[0075] S54: query the current device status level of the intelligent measurement terminal device according to the identity identifier in the authentication request.

[0076] Specifically, by deploying a status query proxy service interconnected with the intelligent measurement terminal, the proxy service maintains a status cache based on the terminal ID, periodically pulls the latest status from each terminal and caches it. Therefore, the authentication service only needs to query the local proxy service and obtain the current device status level of the terminal according to the ID in the authentication request.

[0077] S55. Based on the queried current device status level, determine whether the target identity authentication method meets the security requirements. If it does, perform an authentication pass operation; otherwise, perform an authentication fail operation.

[0078] Specifically, in this embodiment, full authentication and lightweight authentication are acceptable in normal state; full authentication is required in sub-health state; all authentications are rejected in abnormal state, etc. After the server obtains the current state level, it checks whether the target authentication method in this state is within the acceptable range. If it is within the acceptable range, the subsequent authentication process will continue and the authentication will eventually pass; otherwise, the authentication will be directly rejected and a failure result will be returned.

[0079] It should be understood that the size of the serial numbers of the steps in the above embodiments does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0080] In the second aspect, the present application provides an intelligent measurement system identity authentication system based on the SM9 algorithm. The intelligent measurement system identity authentication system based on the SM9 algorithm of the present application is described below in combination with the above-mentioned intelligent measurement system identity authentication method based on the SM9 algorithm.

[0081] Reference Figure 7 , an intelligent measurement system identity authentication system based on SM9 algorithm, comprising: An identity-related feature acquisition module is used to acquire identity-related data of the intelligent measurement terminal device and extract identity-related features based on the identity-related data; A current device state determination module, used to determine the current device state of the intelligent measurement terminal device based on the extracted identity-related features; The security and efficiency value prediction module is used to predict the security and efficiency values ​​corresponding to executing each authentication method in the identity authentication action space based on the SM9 identification cryptographic algorithm in the current device state in combination with the current device state; A target identity authentication method determination module is used to determine a target identity authentication method based on the security and efficiency values ​​corresponding to each authentication method; The identity recognition and authentication module is used to perform identity recognition and authentication on the intelligent measurement terminal device according to the target identity authentication method.

[0082] In one embodiment, the identity-related feature acquisition module includes: An information reading unit, used to read the identity ID and SM9 private key from the intelligent measurement terminal device; A feature vector calculation unit, used to calculate an identity feature vector according to the identity identifier ID and the SM9 private key; A parameter version acquisition unit, used to acquire hardware parameters and software versions of intelligent measurement terminal equipment; The identity feature acquisition unit is used to obtain comprehensive identity features according to the identity feature vector, hardware parameters and software version.

[0083] In one embodiment, the current device state determination module includes: A runtime data acquisition unit, used to acquire runtime data of the intelligent measurement terminal device; A model input unit, used to input the comprehensive identity features and runtime data into a pre-trained state judgment model; The current device state determination unit is used to determine the current device state level of the intelligent measurement terminal device according to the output of the state judgment model.

[0084] In one embodiment, the safety and efficiency value prediction module includes: An authentication method set acquisition unit, used to acquire an authentication method set in an identity authentication action space based on an SM9 identification cryptographic algorithm; A state-behavior pair building unit, used to build a state-behavior pair for each authentication method in the authentication method set based on the current device state level of the intelligent measurement terminal device; The security and efficiency value prediction unit is used to input each state behavior pair into the pre-trained reward function model to obtain the predicted security and efficiency value of each authentication method at the current device state level.

[0085] In one embodiment, the target identity authentication method determination module includes: The weight parameter determination unit is used to determine the weight parameters of the safety and efficiency values ​​based on the current device status level of the intelligent measurement terminal device.

[0086] Specifically, firstly, based on the current device status level of the intelligent measurement terminal device, the security weight parameter W is determined. a , W a =1 / (1+e (-k(S-0.5)) ), where S is the current equipment status level and k is a preset constant parameter; then based on the weight parameter of security, the weight parameter W of the efficiency value is determined e , W e =1-W a .

[0087] A weighted summation unit is used to perform weighted summation on the predicted security and efficiency values ​​corresponding to each authentication method to obtain a comprehensive reward value; The target identity authentication method determination unit is used to determine the target identity authentication method according to the comprehensive reward value corresponding to each authentication method.

[0088] In one embodiment, the identity recognition and authentication module includes: The signature unit is used to instruct the intelligent measurement terminal device to generate an authentication request according to the target identity authentication method and sign the authentication request using the SM9 private key; A request receiving unit, used to receive a signature-carrying authentication request sent by an intelligent measurement terminal device; Signature verification unit, used to verify the legitimacy of the signature; A status level query unit, used to query the current device status level of the intelligent measurement terminal device according to the identity identifier in the authentication request; The authentication execution unit is used to determine whether the target identity authentication method meets the security requirements based on the queried current device status level. If it does, the authentication pass operation is executed; otherwise, the authentication fail operation is executed.

[0089] In one embodiment, the present application provides an electronic device, which may be a server, and its internal structure diagram may be as follows: Figure 8 As shown. The electronic device includes a processor, a memory and a network interface connected through a system bus. Among them, the processor of the electronic device is used to provide computing and control capabilities. The memory of the electronic device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the electronic device is used to store data. The network interface of the electronic device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, an intelligent measurement system identity authentication method based on the SM9 algorithm is implemented.

[0090] Those skilled in the art will understand that Figure 8 The structure shown in the figure is merely a block diagram of a partial structure related to the scheme of the present application, and does not constitute a limitation on the electronic device to which the scheme of the present application is applied. The specific electronic device may include more or fewer components than shown in the figure, or combine certain components, or have a different arrangement of components.

[0091] In one embodiment, an electronic device is further provided, including a memory and a processor, wherein a computer program is stored in the memory, and the processor implements the steps in the above method embodiments when executing the computer program.

[0092] Those of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the above-mentioned computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided in the present application can include at least one of non-volatile and volatile memory. Non-volatile memory may include read-only memory (ROM), magnetic tape, floppy disk, flash memory or optical memory, etc. Volatile memory may include random access memory (RAM) or external cache memory. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM).

[0093] The above are all preferred embodiments of the present application, and the protection scope of the present application is not limited thereto. Therefore, any equivalent changes made according to the structure, shape, and principle of the present application should be included in the protection scope of the present application.

Claims

1. An identity authentication method for an intelligent measurement system based on the SM9 algorithm, characterized in that: The steps include: Acquire identity-related data of the intelligent measurement terminal device, and extract identity-related features based on the identity-related data; Determining a current device state of the intelligent measurement terminal device based on the extracted identity-related features; For each authentication method in the identity authentication action space based on the SM9 identification cryptographic algorithm, combined with the current device state, predict the security and efficiency values ​​corresponding to executing each authentication method in the current device state; Determine the target identity authentication method based on the security and efficiency values ​​corresponding to each authentication method; According to the target identity authentication method, identity recognition and authentication are performed on the intelligent measurement terminal device.

2. The identity authentication method of the intelligent measurement system based on the SM9 algorithm according to claim 1 is characterized in that: Acquiring identity-related data of the intelligent measurement terminal device and extracting identity-related features based on the identity-related data specifically includes the following steps: Read the identity ID and SM9 private key from the intelligent measurement terminal device; Calculate the identity feature vector according to the identity identifier ID and the SM9 private key; Obtaining the hardware parameters and software version of the intelligent measurement terminal device; A comprehensive identity feature is obtained according to the identity feature vector, hardware parameters and software version.

3. The identity authentication method of the intelligent measurement system based on the SM9 algorithm according to claim 2 is characterized in that: Determining the current device state of the intelligent measurement terminal device based on the extracted identity-related features specifically includes the following steps: acquiring runtime data of the intelligent measurement terminal device; Inputting the comprehensive identity feature and the runtime data into a pre-trained state judgment model; According to the output of the state judgment model, the current device state level of the intelligent measurement terminal device is determined.

4. The identity authentication method of the intelligent measurement system based on the SM9 algorithm according to claim 3 is characterized in that: For each authentication method in the identity authentication action space based on the SM9 identification cryptographic algorithm, combined with the current device state, predicting the security and efficiency values ​​that can be obtained by executing the authentication method in the current device state specifically includes the following steps: Get the authentication method set in the identity authentication action space based on the SM9 identification cryptographic algorithm; Based on the current device state level of the intelligent measurement terminal device, construct a state-behavior pair for each authentication method in the authentication method set; Each state-behavior pair is input into the pre-trained reward function model to obtain the predicted security and efficiency values ​​of each authentication method at the current device state level.

5. The identity authentication method of the intelligent measurement system based on the SM9 algorithm according to claim 4 is characterized in that: Based on the security and efficiency values ​​corresponding to each authentication method, the target identity authentication method is determined, which specifically includes the following steps: Determining weight parameters of safety and efficiency values ​​based on the current device status level of the intelligent measurement terminal device; The predicted security and efficiency values ​​corresponding to each authentication method are weighted and summed to obtain the comprehensive reward value; Determine the target identity authentication method based on the comprehensive reward value corresponding to each authentication method.

6. The identity authentication method of the intelligent measurement system based on the SM9 algorithm according to claim 5 is characterized in that: According to the target identity authentication method, identity recognition and authentication are performed on the intelligent measurement terminal device, which specifically includes the following steps: Instruct the intelligent measurement terminal device to generate an authentication request according to the target identity authentication method, and use the SM9 private key to sign the authentication request; Receiving a signature-carrying authentication request sent by the intelligent measurement terminal device; Verifying the legitimacy of the signature; Querying the current device status level of the intelligent measurement terminal device according to the identity identifier in the authentication request; Based on the queried current device status level, determine whether the target identity authentication method meets the security requirements. If it does, perform an authentication pass operation; otherwise, perform an authentication fail operation.

7. The identity authentication method of the intelligent measurement system based on the SM9 algorithm according to claim 5 is characterized in that: Based on the current device status level of the intelligent measurement terminal device, determining the weight parameters of the safety and efficiency values ​​specifically includes the following steps: Based on the current device status level of the intelligent measurement terminal device, determine the security weight parameter W a , W a =1 / (1+e (-k(S-0.5)) ), where S is the current device status level and k is a preset constant parameter; Based on the weight parameter of security, determine the weight parameter W of efficiency value e , IN e =1-W a 。 8. An intelligent measurement system identity authentication system based on SM9 algorithm, characterized in that: include: An identity-related feature acquisition module, used to acquire identity-related data of an intelligent measurement terminal device, and extract identity-related features based on the identity-related data; A current device state determination module, used to determine the current device state of the intelligent measurement terminal device based on the extracted identity-related features; A security and efficiency value prediction module, for predicting the security and efficiency values ​​corresponding to executing each authentication method in the identity authentication action space based on the SM9 identification cryptographic algorithm in combination with the current device state; A target identity authentication method determination module is used to determine a target identity authentication method based on the security and efficiency values ​​corresponding to each authentication method; The identity recognition and authentication module is used to perform identity recognition and authentication on the intelligent measurement terminal device according to the target identity authentication method.

9. An electronic device, characterized in that: The method comprises a memory, a processor and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, the steps of the identity authentication method of the intelligent measurement system based on the SM9 algorithm described in any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the intelligent measurement system identity authentication method based on the SM9 algorithm described in any one of claims 1 to 7 are implemented.

Images