Remote control system and method adopting national secret algorithm

Abstract

The invention belongs to the technical field of equipment communication control, and particularly relates to a remote control system and method adopting a national secret algorithm. The system comprises a server which is used for forwarding communication data of a security controller and a user terminal and decrypting and verifying data uploaded by the security controller; the user terminal is used for receiving an operation command input by a user and sending a remote control command to the safety controller through the server; the Bluetooth UKEY is internally provided with a digital certificate for providing encryption and decryption of a communication process and digital signature and signature verification processing of communication data; the security controller is internally provided with a digital certificate for receiving the remote control command forwarded by the verification server, and an encryption chip for providing encryption and decryption in a communication process and digital signature and signature verification processing of communication data; encryption and decryption in the communication process use an SM4 symmetric encryption algorithm, and digital signature verification uses a national cryptographic SM2 asymmetric encryption algorithm. According to the method, the key security in the whole process can be ensured, and attacks such as tampering and forgery of intermediate links to data are avoided.

Description

Technical Field

[0001] The present invention belongs to the technical field of equipment communication control, and in particular relates to a remote control system and method using a national secret algorithm. Background Art

[0002] In the information age of the Internet of Things, remote control applications for equipment are becoming more and more widespread, such as remote start and stop of equipment, remote monitoring of equipment status, remote modification of equipment parameters, and remote maintenance. Remote control brings efficiency and convenience, but also brings security risks. Existing systems rely on technical means such as firewalls, account password authorization, and server encrypted communication to prevent various network attacks. However, with the changes in the network environment and the development of network technology, these means can no longer guarantee the security of remote control. Account passwords may be leaked or cracked, and servers may be hijacked, leading to attackers implementing illegal remote control. Summary of the invention

[0003] The technical problem to be solved by the present invention is to overcome the defects of the remote control security solution in the prior art, and to provide a remote control system and method using a national secret algorithm in an untrusted network environment to achieve safe, reliable, efficient and convenient remote control.

[0004] The remote control system using the national secret algorithm provided by the present invention includes a user terminal, a Bluetooth UKEY, a server, and a security controller; wherein:

[0005] The server is used to forward the communication data between the security controller and the user terminal, and is also used to receive the data actively uploaded by the security controller, decrypt and verify the uploaded data, and process the uploaded data after the verification;

[0006] The user terminal is used to receive the operation command input by the user, send the remote control command to the security controller through the server with the cooperation of Bluetooth UKEY, and receive the return data of the security controller;

[0007] Bluetooth UKEY has a digital certificate inside, which is used to provide encryption and decryption of the communication process and digital signature and verification of communication data; the encryption and decryption of the communication process uses the SM4 symmetric encryption algorithm, and the digital signature verification uses the national secret SM2 asymmetric encryption algorithm; the key of the symmetric encryption algorithm is imported after being encrypted by the public key from the outside, and the Bluetooth UKEY is decrypted by the private key and stored internally; the Bluetooth UKEY is connected to the user terminal; the Bluetooth UKEY can be independent of the user terminal or built into the user terminal;

[0008] The safety controller has a digital certificate inside, which is used to receive remote control commands forwarded by the verification server. After verification, it controls the on-site equipment, modifies parameters and returns data according to the command; the safety controller also provides communication data uploaded to the server;

[0009] There is also an MCU inside the security controller, which is responsible for data interaction with the outside world and information processing;

[0010] There is also an encryption chip inside the security controller; the encryption chip contains an encryption algorithm, which is used to provide encryption and decryption of the communication process and digital signature and signature verification of communication data; the encryption chip uses its own private key to sign the data sent to the user terminal, and uses the public key of Bluetooth UKEY to verify the signature of the received user terminal data; the encryption chip uses the communication key to encrypt the data sent to the user terminal and decrypt the received user terminal data; when actively uploading server data, the uploaded data is encrypted; the security controller and the user terminal exchange and record each other's digital certificates.

[0011] The encryption chip also contains the key for generating communication with the user terminal. Specifically, after the security controller receives the Bluetooth UKEY certificate sent by the user terminal, it generates a key for communicating with the user terminal inside the encryption chip; different Bluetooth UKEY certificates generate different keys; the communication key generated by the encryption chip is stored confidentially and cannot be read. It is encrypted using the Bluetooth UKEY public key and then transmitted.

[0012] Furthermore, the encryption algorithm adopts but is not limited to the national secret SM4 symmetric encryption algorithm and the national secret SM2 asymmetric encryption algorithm; the encryption and decryption of the communication process uses the national secret SM4 symmetric encryption algorithm, and the digital signature verification uses the national secret SM2 asymmetric encryption algorithm.

[0013] Further:

[0014] After the key transfer is completed, the data communication between the security controller and the user terminal is encrypted.

[0015] The key data fields of the communication between the security controller and the user terminal are all digitally signed. The key data fields containing digital signatures cannot be split. All intermediate links including the server can only forward the key data fields and cannot be tampered with or forged, otherwise the signature verification at the receiving end will fail.

[0016] The key data fields for communication between the security controller and the user terminal contain random numbers to avoid replay attacks.

[0017] The key data domain for communication between the safety controller and the user terminal carries a data source identifier. One safety controller supports the control of multiple user terminals, and one user terminal supports the control of multiple safety controllers.

[0018] The security controller generates data that is actively uploaded to the server, and all actively uploaded data is transmitted in encrypted form.

[0019] The security controller actively uploads the communication with the server with sampling time and verification code to avoid tampering, forgery and replay attacks.

[0020] The present invention also provides a remote control method using a national secret algorithm, which is divided into two scenarios, and each scenario is divided into two stages.

[0021] The first scenario is remote control initiated by the user terminal, which is divided into the authentication stage and the remote control stage.

[0022] (I) During the authentication phase, the user terminal digital certificate and communication key are synchronized, as well as the security controller digital certificate. The digital certificate contains the asymmetric encrypted public key and identity information. The steps of the authentication phase are as follows:

[0023] (1) The user terminal sends the digital certificate 1 stored in the Bluetooth UKEY to the security controller; the security controller stores the digital certificate 1 after verification; each security controller can store multiple user terminal certificates that meet the requirements, so that the security controller can support remote control of multiple user terminals;

[0024] (2) For different user terminals, the encryption chip of the security controller generates different encryption keys, which are encrypted with the public key in the digital certificate 1 and then transmitted to the Bluetooth UKEY; the Bluetooth UKEY decrypts and stores the key; the key plaintext only appears inside the encryption chip and the Bluetooth UKEY, and is invisible in the transmission link. The transmission link only has the key ciphertext to prevent the key from being eavesdropped and leaked; the encryption key between the communication link composed of a security controller and a Bluetooth UKEY is dedicated to prevent the key from being stolen;

[0025] (3) The security controller encrypts its own digital certificate 2 and transmits it to the user terminal; the user terminal decrypts and verifies the certificate and stores it; each user terminal can store multiple controller certificates that meet the requirements, enabling the user terminal to control multiple security controllers.

[0026] (ii) In the remote control stage, the user terminal sends the remote control command to the security controller according to the user operation, and the security controller returns the result to the user terminal after processing; the steps of the remote control stage are as follows:

[0027] (1) The encryption chip in the security controller generates random number 1, and the Bluetooth UKEY generates random number 2; the user terminal combines random number 1, random number 2, and remote control command to form key data;

[0028] (2) Bluetooth UKEY uses its own private key to sign the key data, and the user terminal transmits the key data and its signature as the key data field; before transmission, Bluetooth UKEY uses the symmetric key to encrypt the communication data and generate a ciphertext command;

[0029] (3) The encryption chip of the security controller uses the symmetric key to decrypt the ciphertext command and uses the public key of the Bluetooth UKEY to verify the signature. After the verification is passed, the security controller compares the random number 1 in the command, checks the remote control command and the identity authority of the command, and executes it after the verification is passed;

[0030] (4) The encryption chip uses its own private key to sign the random number 2 and the execution result; uses the symmetric key to encrypt the above data and signature to generate a ciphertext response;

[0031] (5) Bluetooth UKEY uses the symmetric key to decrypt the ciphertext response and uses the public key of the security controller to verify the signature. The user terminal checks the signature verification result and random number 2, and processes the response after verification.

[0032] The second scenario is that the security controller actively uploads data to the server, which is divided into the authentication stage and the upload stage.

[0033] (I) During the authentication phase, the server digital certificate and communication key are synchronized; the steps of the authentication phase are as follows:

[0034] (1) The server sends its digital certificate 3 to the security controller; the security controller stores the digital certificate after verification;

[0035] (2) The security controller generates an encryption key, encrypts it using the public key in digital certificate 3, and transmits it to the server; the server decrypts and stores the key.

[0036] (ii) During the active upload phase, the encryption chip of the security controller uses a symmetric key to encrypt the uploaded data including the current time and its checksum to generate ciphertext data;

[0037] The server uses the symmetric key to decrypt the ciphertext data, verify the time in the data, check the checksum, and verify that the uploaded data has been accepted and processed.

[0038] The present invention has the following technical characteristics and performance advantages:

[0039] (1) The communication encryption key based on the symmetric encryption algorithm does not need to be issued in advance. It is encrypted and transmitted using an asymmetric encryption algorithm, and the key will not be leaked during transmission. The communication encryption key is stored and used inside the Bluetooth UKEY and encryption chip, and has no contact with the outside, ensuring the key security of the entire process.

[0040] (2) During remote control, communication encryption and data signature are used to turn remote commands, signatures and encryption into an inseparable data entity. At the same time, the user terminals and security controllers at both ends of the communication directly verify the data, thus avoiding various attacks such as tampering and forgery of data in the middle. The communication data contains non-repetitive data features, such as random numbers and current time, which makes the data non-copyable and avoids replay attacks.

[0041] (3) When actively uploading, the authenticity and reliability of the data transmitted to the server on site are guaranteed through communication encryption, time verification, and check code verification. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] Figure 1 It is a schematic diagram of the remote control system of the present invention.

[0043] Figure 2 It is a flow chart of synchronization between user terminal digital certificate and communication key.

[0044] Figure 3 It is the flow chart of the synchronization of digital certificates of the security controller.

[0045] Figure 4 It is a flowchart of remote control of user terminal.

[0046] Figure 5 It is a flow chart of synchronization between server digital certificate and communication key.

[0047] Figure 6 The safety controller actively uploads the flow chart. DETAILED DESCRIPTION

[0048] The remote control system using the national secret algorithm provided by the present invention is Figure 1 As shown. The system includes a user terminal, a Bluetooth UKEY, a server, and a security controller. Among them:

[0049] (I) Server, used to forward communication data between the security controller and the user terminal. It is also used to receive data actively uploaded by the security controller, decrypt and verify the uploaded data, and process the uploaded data after verification. The server can be a local computer, in the local network environment with the security controller and the user terminal; it can also be deployed in the cloud and connected to the security controller and the user terminal through the Internet.

[0050] (ii) User terminal, used to receive operation commands input by the user, the user terminal is connected to the Bluetooth UKEY via wireless or wired. The user terminal has the function of accessing the communication network, and controls the Bluetooth UKEY to complete random number acquisition, signature, signature verification, encryption and decryption, key calculation and storage according to the user's operation, and transfers the processed user operation data to the security controller through the server, and receives the security controller data forwarded by the server. The user terminal can be in various forms such as mobile phones, computers, tablets, etc.

[0051] (III) Bluetooth UKEY, which has a digital certificate inside. The digital certificate is issued by a preset certificate and is used to provide encryption and decryption of the communication process and digital signature and verification of communication data. The encryption and decryption of the communication process uses the SM4 symmetric encryption algorithm, and the digital signature verification uses the national secret SM2 asymmetric encryption algorithm. It is connected to the user terminal by wireless or wired means. The public key of Bluetooth UKEY is provided in the form of a digital certificate. The digital certificate contains identity authority information. Bluetooth UKEY uses its own private key to sign the data sent to the security controller, and uses the public key of the security controller to verify the received security controller data. Bluetooth UKEY can add confirmation operations by pressing buttons and other methods when signing data, further improving operational security. Bluetooth UKEY can be a separate component or built into the user terminal. It has the characteristics of being non-replicable and internally undetectable. The issuance and storage of private keys are processed inside Bluetooth UKEY. The private key cannot be accessed from the outside, and the private key is effectively protected. At the same time, Bluetooth UKEY uses the communication key ciphertext of the received security controller, decrypts it with the private key to obtain the communication key, uses the communication key to encrypt the data sent to the security controller, and decrypts the received security controller data. The plaintext of the communication key is also only calculated and stored inside the Bluetooth UKEY. Only the ciphertext of the communication key can be seen from the outside. The ciphertext of the communication key is encrypted using the SM2 algorithm. Under the condition that the SM2 private key is effectively protected, the plaintext cannot be obtained from the ciphertext of the communication key, and the communication key is effectively protected.

[0052] (iv) Safety controller, which contains a digital certificate issued by a preset certificate and is used to receive remote control commands forwarded by the verification server. After verification, it controls the on-site equipment, modifies parameters and returns data according to the command. The safety controller also provides communication data uploaded to the server;

[0053] There is also an MCU inside the security controller, which is responsible for data interaction with the outside world and information processing.

[0054] There is also an encryption chip inside the security controller;

[0055] The encryption chip contains the national secret SM4 symmetric encryption algorithm and the national secret SM2 asymmetric encryption algorithm, which are used to provide encryption and decryption of the communication process and digital signature and verification of communication data. The encryption and decryption of the communication process uses the national secret SM4 symmetric encryption algorithm, and the digital signature verification uses the national secret SM2 asymmetric encryption algorithm. The encryption chip uses its own private key to sign the data sent to the user terminal, and uses the public key of Bluetooth UKEY to verify the signature of the received user terminal data. The encryption chip uses the communication key to encrypt the data sent to the user terminal and decrypt the received user terminal data. When actively uploading server data, the uploaded data is encrypted. The security controller and the user terminal pass each other's digital certificates to record each other.

[0056] The encryption chip also contains the key for generating and communicating with the user terminal. Specifically, after the security controller receives the Bluetooth UKEY certificate sent by the user terminal, it generates the key for communicating with the user terminal inside the encryption chip. Different Bluetooth UKEY certificates generate different keys. The communication key generated by the encryption chip is stored confidentially and cannot be read. It is encrypted using the Bluetooth UKEY public key and then transmitted.

[0057] In the present invention, the encryption chip is a special hardware device with the characteristics of being non-copyable and internally undetectable. The communication key is randomly generated inside the encryption chip, encrypted using the SM2 algorithm and then transmitted to the outside. Under the condition that the SM2 private key is effectively protected, the plain text cannot be obtained from the communication key ciphertext, and the communication key is effectively protected.

[0058] After receiving the communication key ciphertext, the user terminal sends it to the Bluetooth UKEY, which is decrypted by the private key and stored internally. The stored key cannot be read. After the key transfer is completed, the data communication between the security controller and the user terminal is transmitted using SM4 symmetric encryption.

[0059] The communication data between the security controller and the user terminal are all digitally signed with the SM2 algorithm. Key data fields including the signature are transparently transmitted between the security controller and the user terminal, and all intermediate links including the server cannot be tampered with or forged.

[0060] The key data fields for communication between the security controller and the user terminal contain random numbers to avoid replay attacks.

[0061] The key data fields for communication between the safety controller and the user terminal carry source identification. One safety controller supports the control of multiple user terminals, and one user terminal supports the control of multiple safety controllers. The source identification of the user terminal data can be the digital certificate number of the user terminal. The source identification of the safety controller data can be the safety controller certificate number.

[0062] After the security controller receives the server digital certificate, it generates a communication key for actively uploading to the server inside the encryption chip. Different security controllers generate different keys. The communication key generated by the encryption chip is stored confidentially and cannot be read. The communication key is encrypted with the server's public key and transmitted. After receiving it, the server uses the private key to decrypt and store it. After the key transfer is completed, the data actively uploaded by the security controller is encrypted and transmitted, and the encryption algorithm uses the SM4 symmetric encryption algorithm.

[0063] The security controller actively uploads the communication with the server with sampling time and data verification code to avoid tampering, forgery and replay attacks.

[0064] The second aspect of the present invention provides a remote control method using a national secret algorithm. The method specifically comprises:

[0065] (i) During the authentication phase of the user terminal, the digital certificate and communication encryption key are synchronized.

[0066] (1) First synchronize the user terminal digital certificate and communication key, see Figure 2 As shown; the user terminal sends the digital certificate 1 stored in the Bluetooth UKEY to the security controller, and the digital certificate 1 contains identity information and operation permissions; the security controller MCU uses the preset certificate to verify the digital certificate 1 and check whether the digital certificate 1 has the permission to operate the current controller; after the verification check is passed, the security controller stores the certificate 1, and the MCU sends the information of the certificate 1 to the encryption chip;

[0067] For the Bluetooth UKEY of each user terminal, the encryption chip uses random numbers to generate a dedicated encryption key, and stores the key and certificate 1 information; the encryption chip uses the public key of certificate 1 to perform SM2 asymmetric encryption on the key to obtain the key ciphertext; the security controller sends the controller identifier and key ciphertext to the user terminal, and the user terminal controls the Bluetooth UKEY to use the private key to decrypt and obtain the key plaintext. The Bluetooth UKEY stores the controller identifier and key for use in the remote control stage; during the entire process, the key plaintext is only stored and used inside the encryption chip and Bluetooth UKEY, and the plaintext is not transmitted and cannot be read out; the encryption key between the communication link composed of a security controller and a Bluetooth UKEY is dedicated to avoid the risk of key leakage.

[0068] (2) Then the security controller digital certificate is synchronized, see Figure 3As shown; the user terminal initiates a query controller certificate command, the Bluetooth UKEY uses the private key to sign the command, uses the symmetric key to encrypt the command and signature, and sends the ciphertext to the security controller; the encryption chip in the security controller uses the symmetric key to decrypt the ciphertext, and uses the Bluetooth UKEY public key to verify the signature; the security controller MCU checks the signature verification result, and returns the digital certificate 2 of the security controller to the user terminal after the verification is passed; when returning, the encryption chip uses the symmetric key to encrypt the digital certificate 2 of the security controller, and the ciphertext is transmitted to the user terminal. The user terminal controls the Bluetooth UKEY to decrypt the ciphertext to obtain the plaintext of the digital certificate 2, and the user terminal uses the preset certificate to verify the digital certificate 2, and the digital certificate 2 is stored after the verification is passed.

[0069] (ii) Remote control stage of user terminal: the user terminal sends remote control commands to the security controller and receives return data from the security controller, see Figure 4 shown; specifically:

[0070] (1) The encryption chip in the security controller generates a random number 1, and the Bluetooth UKEY generates a random number 2. The user terminal generates a command using random number 1, random number 2, remote control command, and Bluetooth UKEY certificate identifier, controls Bluetooth UKEY to sign the command with a private key, and uses a symmetric key to encrypt the command and signature to obtain a ciphertext; the ciphertext is sent to the security controller; the encryption chip of the security controller uses a symmetric key to decrypt and uses the public key of UKEY to verify the signature; after the signature verification is passed, the security controller compares the random number 1 in the command with the random number 1 generated by the security controller at the beginning to see if they are the same, checks whether the certificate identity corresponding to the certificate identifier has the authority to execute the command, and checks whether the internal state of the security controller meets the command execution conditions; the command is executed only when the random number comparison results are the same, the certificate identity has the authority, and the internal state of the controller meets the execution conditions, otherwise the command is rejected.

[0071] (2) The security controller uses the execution result and random number 2 as the command response. The encryption chip signs the response with a private key, encrypts the response and signature with a symmetric key, obtains the ciphertext, and sends the ciphertext to the user terminal. The user terminal lets Bluetooth UKEY decrypt with a symmetric key and uses the public key of the security controller to verify the signature. The user terminal checks the signature verification result and checks whether the random number 2 in the response is the same as the random number 2 initially generated by Bluetooth UKEY. If the signature verification passes and the random numbers are the same, the remote command communication is considered successful. The user terminal accepts the command response and processes the result according to the response. If they are different, the remote command communication is considered to have failed.

[0072] (III) During the authentication phase of the security controller actively uploading data, the server digital certificate and communication key are synchronized. Figure 5As shown; specifically, the server sends its own digital certificate 3 to the security controller, and the security controller MCU uses the preset certificate to verify the digital certificate 3 and check whether the digital certificate 3 has the authority to access the current controller; after the verification check is passed, the security controller MCU sends the information of certificate 3 to the encryption chip; the encryption chip uses random numbers to generate a symmetric encryption key for communication with certificate 3, and stores the key and certificate 3 information; the encryption chip uses the public key of certificate 3 to perform SM2 asymmetric encryption on the key to obtain the key ciphertext; the security controller sends the controller identification and key ciphertext to the server, and the server uses the private key to decrypt to obtain the key plaintext, and the server stores the controller identification and key for use in subsequent stages; during the entire process, the key plaintext is only stored and used inside the encryption chip and the server, and is not transmitted, to avoid the risk of key leakage.

[0073] (IV) Safety controller upload stage, see Figure 6 As shown; specifically, the MCU calculates the check code according to the current time and internal data, and composes the upload data with the current time, internal data and check code, and the encryption chip encrypts the upload data using the symmetric key; the security controller sends the controller identification and the uploaded data ciphertext to the server; the server finds the symmetric key according to the controller identification, decrypts it using the symmetric key, verifies the upload time, checks the check code, and verifies that the uploaded data has been accepted and processed.

[0074] In summary, the remote control system and method using the national secret algorithm provided by the present invention, the data transmission encryption key between the user terminal and the security controller is generated by the system's internal encryption chip, and the key plaintext only appears and is used inside the high-security Bluetooth UKEY and encryption chip, ensuring the security of the key; the user terminal and the security controller both directly authenticate each other for each remote command, not relying on the security of the intermediate transmission link, and the sending of each remote command is accompanied by a random number and a calculated signature, and each remote command received is checked for random number and signature verification, ensuring the legality of the instruction and the security of the data. The security controller provides the device status to the user terminal by actively uploading data. The encryption key during active uploading is generated by the system's internal security component. The actively uploaded data is encrypted and transmitted after the current time and the check code are attached, ensuring the authenticity and confidentiality of the uploaded data, thereby ensuring that the device status obtained by the user terminal before remote operation is authentic and reliable, and making reasonable judgments to issue remote commands.

[0075] The above description is only a description of the preferred embodiments of the present invention, and does not limit the scope of the present invention. Any changes and modifications made by ordinary technicians in the field of the present invention based on the above disclosure are within the scope of protection of the claims.

Claims

1. A remote control system using a national secret algorithm, characterized in that: It includes user terminal, Bluetooth UKEY, server and security controller; among which: The server is used to forward the communication data between the security controller and the user terminal, and is also used to receive the data actively uploaded by the security controller, decrypt and verify the uploaded data, and process the uploaded data after the verification; The user terminal is used to receive the operation command input by the user, send the remote control command to the security controller through the server with the cooperation of Bluetooth UKEY, and receive the return data of the security controller; Bluetooth UKEY has a digital certificate inside, which is used to provide encryption and decryption of the communication process and digital signature and verification of communication data; the encryption and decryption of the communication process uses the SM4 symmetric encryption algorithm, and the digital signature verification uses the national secret SM2 asymmetric encryption algorithm; the key of the symmetric encryption algorithm is imported after being encrypted by the public key from the outside, and the Bluetooth UKEY is decrypted by the private key and stored internally; the Bluetooth UKEY is connected to the user terminal; the Bluetooth UKEY is independent of the user terminal, or built into the user terminal; The safety controller has a digital certificate inside, which is used to receive remote control commands forwarded by the verification server. After verification, it controls the on-site equipment, modifies parameters and returns data according to the command; the safety controller also provides communication data uploaded to the server; There is also an MCU inside the security controller, which is responsible for data interaction with the outside world and information processing; There is also an encryption chip inside the security controller; The encryption chip contains an encryption algorithm, which is used to provide encryption and decryption of the communication process and digital signature and signature verification of communication data; the encryption chip uses its own private key to sign the data sent to the user terminal, and uses the public key of Bluetooth UKEY to verify the signature of the received user terminal data; the encryption chip uses the communication key to encrypt the data sent to the user terminal and decrypt the received user terminal data; when actively uploading server data, the uploaded data is encrypted; the security controller and the user terminal mutually transmit and record each other's digital certificates; The encryption chip also contains the key for generating communication with the user terminal. Specifically, after the security controller receives the Bluetooth UKEY certificate sent by the user terminal, it generates a key for communicating with the user terminal inside the encryption chip; different Bluetooth UKEY certificates generate different keys; the communication key generated by the encryption chip is stored confidentially and cannot be read. It is encrypted using the Bluetooth UKEY public key and then transmitted.

2. The remote control system using the national secret algorithm according to claim 1 is characterized in that: The encryption algorithms include the national secret SM4 symmetric encryption algorithm and the national secret SM2 asymmetric encryption algorithm; the encryption and decryption of the communication process uses the national secret SM4 symmetric encryption algorithm, and the digital signature verification uses the national secret SM2 asymmetric encryption algorithm.

3. The remote control system using the national secret algorithm according to claim 1 is characterized in that: After the key transfer is completed, the data communication between the security controller and the user terminal is encrypted; The key data fields of the communication between the security controller and the user terminal are all digitally signed; the key data fields containing digital signatures cannot be split, and all intermediate links including the server can only forward the key data fields, and cannot be tampered with or forged, otherwise the signature verification at the receiving end will fail; The key data fields for communication between the security controller and the user terminal contain random numbers to avoid replay attacks; The key data domain for communication between the safety controller and the user terminal carries a data source identifier. One safety controller supports the control of multiple user terminals, and one user terminal supports the control of multiple safety controllers. The security controller generates data that is actively uploaded to the server, and all actively uploaded data is encrypted for transmission; The security controller actively uploads the communication with the server with sampling time and verification code to avoid tampering, forgery and replay attacks.

4. A remote control method using a national secret algorithm based on the remote control system of claim 1, 2 or 3, characterized in that: It is divided into two scenarios, and each scenario is divided into two stages; specifically: The first scenario is remote control initiated by the user terminal, which is divided into the authentication phase and the remote control phase; (I) During the authentication phase, the user terminal digital certificate and communication key are synchronized, as well as the security controller digital certificate; the digital certificate contains the asymmetric encrypted public key and identity information; the specific steps are as follows: (1) The user terminal sends the digital certificate 1 stored in the Bluetooth UKEY to the security controller; the security controller stores the digital certificate 1 after verification; each security controller can store multiple user terminal certificates that meet the requirements, so that the security controller can support remote control of multiple user terminals; (2) For different user terminals, the encryption chip of the security controller generates different encryption keys, encrypts them using the public key in the digital certificate 1, and transmits them to the Bluetooth UKEY; the Bluetooth UKEY decrypts and stores the key; The key plaintext only appears inside the encryption chip and Bluetooth UKEY, and is invisible during the transmission process. Only the key ciphertext is transmitted during the transmission process to prevent the key from being eavesdropped and leaked; the encryption key between the communication link composed of a security controller and a Bluetooth UKEY is dedicated to prevent the key from being stolen; (3) The security controller encrypts its own digital certificate 2 and transmits it to the user terminal; The user terminal decrypts and verifies the certificate and stores it; Each user terminal can store multiple controller certificates that meet the requirements, enabling the user terminal to control multiple security controllers; (ii) In the remote control stage, the user terminal sends the remote control command to the security controller according to the user operation, and the security controller returns the result to the user terminal after processing; the specific steps are as follows: (1) The encryption chip in the security controller generates random number 1, and the Bluetooth UKEY generates random number 2; the user terminal combines random number 1, random number 2, and remote control command to form key data; (2) Bluetooth UKEY uses its own private key to sign the key data, and the user terminal transmits the key data and its signature as the key data field; before transmission, Bluetooth UKEY uses the symmetric key to encrypt the communication data and generate a ciphertext command; (3) The encryption chip of the security controller uses the symmetric key to decrypt the ciphertext command and uses the public key of the Bluetooth UKEY to verify the signature. After the verification is passed, the security controller compares the random number 1 in the command, checks the remote control command and the identity authority of the command, and executes it after the verification is passed; (4) The encryption chip uses its own private key to sign the random number 2 and the execution result; uses the symmetric key to encrypt the above data and signature to generate a ciphertext response; (5) Bluetooth UKEY uses the symmetric key to decrypt the ciphertext response and uses the public key of the security controller to verify the signature. The user terminal checks the signature verification result and the random number 2, and processes the response after verification. The second scenario is that the security controller actively uploads data to the server, which is divided into the authentication phase and the upload phase; (I) During the authentication phase, the server digital certificate and communication key are synchronized; the specific steps are as follows: (1) The server sends its digital certificate 3 to the security controller; the security controller stores the digital certificate 3 after verification; (2) The security controller generates an encryption key, encrypts it using the public key in digital certificate 3, and transmits it to the server; The server decrypts and stores the key; (ii) During the active upload phase, the encryption chip of the security controller uses a symmetric key to encrypt the uploaded data including the current time and its checksum to generate ciphertext data; The server uses the symmetric key to decrypt the ciphertext data, verify the time in the data, check the checksum, and verify that the uploaded data has been accepted and processed.

Images