Data collection method for intelligent factory digital delivery

Abstract

The invention discloses a data collection method for intelligent factory digital delivery. The method comprises the steps that a first authentication device receives encrypted first data sent by a first production device; determining, by the first authentication device, a first random sequence based on the first location and an order in which the first authentication device sends data to the server; the first authentication device decrypts the encrypted first data by using a first random sequence to obtain decrypted first data; the first authentication device verifies the decrypted first data; if the first authentication device verifies that the decrypted first data is valid data, the first authentication device encrypts the decrypted first data by using a first random sequence to obtain re-encrypted first data; and the first authentication device sends the re-encrypted first data to the server.

Description

Technical Field

[0001] The present invention relates to the technical field of smart factories, and in particular to a data collection method for digital delivery of smart factories. Background Art

[0002] In the process of intelligent manufacturing in the boiler industry, boiler industry enterprises have gradually formed a new industrial form that integrates manufacturing and services while improving and ensuring product high quality with the help of advanced technologies such as the Internet of Things, cloud computing, big data, and mobile Internet.

[0003] Digital delivery refers to the process of delivering products or services using digital technology. The digital delivery method based on smart factory objects uses the digital twin virtual factory constructed with three-dimensional models and information data as a carrier, integrates digital engineering data and MIM (manufacturing information model) application data, and realizes a more efficient and accurate product or service delivery process. In the implementation process of digital delivery, it is necessary to collect the factory's production data so that the production process can be simulated through simulation software later. However, the current technology for collecting factory production data has certain security risks. Summary of the invention

[0004] To achieve the above object, the present invention provides a data collection method for digital delivery of smart factories, the method comprising:

[0005] Receiving, by a first authentication device, encrypted first data sent by a first production device, wherein the first authentication device and the first production device are located at a first position, wherein cyclic redundancy check (CRC) bits of the encrypted first data are scrambled by a first random sequence, wherein the first random sequence is associated with the first position, and the first random sequence is associated with an order in which the first authentication device sends data to a server;

[0006] The first authentication device determines a first random sequence based on the first position and the order in which the first authentication device sends data to the server;

[0007] The first authentication device decrypts the encrypted first data using the first random sequence to obtain the decrypted first data;

[0008] The first authentication device verifies the decrypted first data;

[0009] If the first authentication device verifies that the decrypted first data is valid data, the first authentication device encrypts the decrypted first data using the first random sequence to obtain re-encrypted first data;

[0010] The first authentication device sends the re-encrypted first data to the server.

[0011] In a preferred embodiment, determining the first random sequence by the first authentication device based on the first position and the order in which the first authentication device sends data to the server comprises the following steps:

[0012] The first authentication device reads a random sequence record table stored in the first authentication device, wherein the random sequence record table includes a plurality of random sequence record sub-tables, wherein each random sequence record sub-table corresponds to an order in which the first authentication device sends data to the server, wherein each random sequence record sub-table records a plurality of entries, wherein each entry records a position of the authentication device and a random sequence corresponding to the position of the authentication device;

[0013] The first authentication device determines the first random sequence record subtable based on the order in which the first authentication device sends data to the server, wherein the order in which the first authentication device sends data to the server is the first order;

[0014] The first authentication device determines the first random sequence based on the first position and the first random sequence record subtable.

[0015] In a preferred embodiment, the method further comprises:

[0016] The first authentication device updates the order in which the first authentication device sends data to the server from a first order to a second order;

[0017] The first authentication device notifies the first production device that the order in which the first authentication device sends data to the server has been updated to the second order;

[0018] Receiving, by the first authentication device, encrypted second data sent by the first production device, wherein CRC bits of the encrypted second data are scrambled by a second random sequence, wherein the second random sequence is associated with the first position, and the second random sequence is associated with the second order;

[0019] Determining, by the first authentication device, a second random sequence based on the first position and the second order;

[0020] The first authentication device decrypts the encrypted second data using the second random sequence to obtain the decrypted second data.

[0021] In a preferred embodiment, the method further comprises:

[0022] The first authentication device updates the order in which the first authentication device sends data to the server from the first order to the second order, and updates the first position to the second position;

[0023] The first authentication device notifies the second production device that the order in which the first authentication device sends data to the server has been updated to the second order;

[0024] receiving, by a first authentication device, encrypted third data sent by a second production device, wherein the first authentication device and the second production device are located at a second location, wherein CRC bits of the encrypted third data are scrambled by a third random sequence, wherein the third random sequence is associated with the second location, and wherein the third random sequence is associated with the second order;

[0025] Determining, by the first authentication device, a third random sequence based on the second position and the second order;

[0026] The first authentication device decrypts the encrypted third data using a third random sequence to obtain decrypted third data.

[0027] In a preferred embodiment, the method further comprises:

[0028] If the first authentication device verifies that the decrypted first data is invalid data, the first authentication device sends a retransmission instruction to the first production device, so that the first production device resends the decrypted first data to the first authentication device.

[0029] The present invention provides a data collection device for digital delivery of smart factories, characterized in that the device includes a module for performing the following operations:

[0030] Receiving, by a first authentication device, encrypted first data sent by a first production device, wherein the first authentication device and the first production device are located at a first position, wherein cyclic redundancy check (CRC) bits of the encrypted first data are scrambled by a first random sequence, wherein the first random sequence is associated with the first position, and the first random sequence is associated with an order in which the first authentication device sends data to a server;

[0031] The first authentication device determines a first random sequence based on the first position and the order in which the first authentication device sends data to the server;

[0032] The first authentication device decrypts the encrypted first data using the first random sequence to obtain the decrypted first data;

[0033] The first authentication device verifies the decrypted first data;

[0034] If the first authentication device verifies that the decrypted first data is valid data, the first authentication device encrypts the decrypted first data using the first random sequence to obtain re-encrypted first data;

[0035] The first authentication device sends the re-encrypted first data to the server.

[0036] In a preferred embodiment, determining the first random sequence by the first authentication device based on the first position and the order in which the first authentication device sends data to the server comprises the following steps:

[0037] The first authentication device reads a random sequence record table stored in the first authentication device, wherein the random sequence record table includes a plurality of random sequence record sub-tables, wherein each random sequence record sub-table corresponds to an order in which the first authentication device sends data to the server, wherein each random sequence record sub-table records a plurality of entries, wherein each entry records a position of the authentication device and a random sequence corresponding to the position of the authentication device;

[0038] The first authentication device determines the first random sequence record subtable based on the order in which the first authentication device sends data to the server, wherein the order in which the first authentication device sends data to the server is the first order;

[0039] The first authentication device determines the first random sequence based on the first position and the first random sequence record subtable.

[0040] In a preferred embodiment, the device further comprises a module for performing the following operations:

[0041] The first authentication device updates the order in which the first authentication device sends data to the server from a first order to a second order;

[0042] The first authentication device notifies the first production device that the order in which the first authentication device sends data to the server has been updated to the second order;

[0043] Receiving, by the first authentication device, encrypted second data sent by the first production device, wherein CRC bits of the encrypted second data are scrambled by a second random sequence, wherein the second random sequence is associated with the first position, and the second random sequence is associated with the second order;

[0044] Determining, by the first authentication device, a second random sequence based on the first position and the second order;

[0045] The first authentication device decrypts the encrypted second data using the second random sequence to obtain the decrypted second data.

[0046] In a preferred embodiment, the device further comprises a module for performing the following operations:

[0047] The first authentication device updates the order in which the first authentication device sends data to the server from the first order to the second order, and updates the first position to the second position;

[0048] The first authentication device notifies the second production device that the order in which the first authentication device sends data to the server has been updated to the second order;

[0049] receiving, by a first authentication device, encrypted third data sent by a second production device, wherein the first authentication device and the second production device are located at a second location, wherein CRC bits of the encrypted third data are scrambled by a third random sequence, wherein the third random sequence is associated with the second location, and wherein the third random sequence is associated with the second order;

[0050] Determining, by the first authentication device, a third random sequence based on the second position and the second order;

[0051] The first authentication device decrypts the encrypted third data using a third random sequence to obtain decrypted third data.

[0052] In a preferred embodiment, the device further comprises a module for performing the following operations:

[0053] If the first authentication device verifies that the decrypted first data is invalid data, the first authentication device sends a retransmission instruction to the first production device, so that the first production device resends the decrypted first data to the first authentication device.

[0054] Compared with the prior art, the present invention has the following advantages and beneficial effects:

[0055] The current factory data collection method of the prior art has certain security risks. At present, the general digital delivery system includes a server and the factory's production equipment (or when the production equipment itself does not have the data transmission function, it also includes a server and an electronic device that collects the production data of the factory equipment). Regardless of the system, the authentication method of the current digital delivery system is the original "account and password" authentication method, that is, any unauthorized user can use the unauthorized user's own electronic device to pass the server's authentication by entering the account and password as long as they can obtain the account and password of the relevant factory personnel. Subsequently, the unauthorized user's own electronic device can send forged production data to the server, thereby destroying the simulation process of digital delivery. If the factory cannot discover this situation in time, it will continue to arrange subsequent production plans according to the simulation results, or improve the production process, which may cause immeasurable consequences. The method provided by the present invention is an improvement on the original "account and password" authentication method. The method of the present invention can improve system security, and at the same time, the method of the present invention also avoids the disadvantages of authentication methods such as API-Key. BRIEF DESCRIPTION OF THE DRAWINGS

[0056] Figure 1 It is a schematic diagram of the system structure of an embodiment of the present invention.

[0057] Figure 2 It is a method flow chart of an embodiment of the present invention. DETAILED DESCRIPTION

[0058] The specific implementation modes of the present invention are described in detail below in conjunction with the accompanying drawings, but it should be understood that the protection scope of the present invention is not limited by the specific implementation modes.

[0059] The current existing factory data collection methods have certain security risks. At present, the general digital delivery system includes a server and the factory's production equipment (or when the production equipment itself does not have the data transmission function, it also includes a server and an electronic device that collects the production data of the factory equipment). Regardless of the system, the current authentication method of the digital delivery system is the original "account and password" authentication method, that is, any unauthorized user who can obtain the account and password of the relevant factory personnel can use the unauthorized user's own electronic device to pass the server authentication by entering the account and password. Subsequently, the unauthorized user's own electronic device can send forged production data to the server, thereby destroying the simulation process of digital delivery. If the factory cannot discover this situation in time and continues to arrange subsequent production plans or improve production processes based on the simulation results, it may cause immeasurable consequences. The current solution to this problem is to force workers to use complex passwords, but the passwords imagined by the human brain cannot be too complex, and the passwords conceived by the human brain always have some rules to follow. In addition, some workers may not obey factory orders and still use simple passwords such as "000000" or "123456", which are very easy to crack. In addition, the factory can use encryption algorithms such as API-Key to calculate a complex password, and authenticate the electronic device by means of an account, password and password. However, this method has at least three disadvantages: the complex password calculated by API-Key still needs to be entered into the dialog box, that is, the complex password calculated by API-Key still needs to be sent to each worker in an unencrypted manner, which still causes the risk of complex password leakage. In addition, this type of encryption algorithm is expensive. At present, this type of algorithm is used by some companies that specialize in selling non-physical software as their main business. These companies need to keep the software on the server confidential all year round to prevent unauthorized users from downloading paid software for free. Therefore, it is reasonable for such companies to purchase this type of algorithm service. However, the factory does not sell non-physical software as its main business, and it is obviously unreasonable to spend a high price to purchase this type of algorithm service. Third, the refresh speed of this complex password is limited. In order to ensure that the algorithm is not cracked, for example, API-Key requires that a user can only refresh one API-Key within 24 hours. If the factory needs to update the API-Key due to some special circumstances, this type of algorithm cannot meet this requirement. The method of the present invention aims to solve this technical problem.

[0060] Example 1

[0061] Figure 1It is a schematic diagram of the system structure of an embodiment of the present invention. As shown in the figure, the system of the present invention includes the first to fourth workshops. For the convenience of discussion, it is assumed that the first workshop is located at the first position referred to in the present invention (the position can be expressed as GPS coordinates or Beidou positioning coordinates), and the first workshop is located at the third position referred to in the present invention, and so on. In the present invention, an authentication device is generally placed in a workshop. It can be understood by those skilled in the art that in practice, the factory can have more workshops, or fewer workshops. It can also be understood by those skilled in the art that the premise of using the method of the present invention is that the distance between the authentication devices of the two workshops is at least greater than the GPS positioning resolution. Considering the current GPS positioning accuracy and the size of the factory workshop, as long as the position of the authentication device is reasonably arranged, this requirement can be met. It can also be understood that although the figure shows that each workshop has only one production device, there can be more production devices in each workshop. The present invention assumes that all production devices have the ability to send data to the authentication device, or the production device can send data to the authentication device with the help of a transceiver (an example of a transceiver can be a 5G-based transceiver). The authentication device can be a computer, a notebook computer, a tablet computer or even a smart phone that can perform wireless communication.

[0062] Example 2

[0063] Figure 2 1 is a method flow chart of an embodiment of the present invention. As shown in the figure, the method of the present invention includes the following steps:

[0064] Step 1: The first authentication device receives the encrypted first data sent by the first production device, wherein the first authentication device and the first production device are located at a first position, wherein the cyclic redundancy check CRC bits of the encrypted first data are scrambled by a first random sequence, wherein the first random sequence is associated with the first position, and the first random sequence is associated with the order in which the first authentication device sends data to the server; wherein the order in which the first authentication device sends data to the server refers to the order in which the first authentication device sends data to the server within a sending cycle (of course, in Example 2, those skilled in the art can understand that the "data" in the data sent by the first authentication device to the server refers to the first data that is actually sent to the server last and is re-encrypted); for example, in the present invention, each authentication device is required to send data to the server in a fixed order within a sending cycle. For example, in one example, the first authentication device is still sent in a fixed order. Figure 1For example, since there are four workshops and four authentication devices, a transmission cycle can have 4 time slots, 4 subframes, 8 time slots, 8 subframes (of course, if it is an OFDM-based system, the time length of the time slot and the subframe is related to the subcarrier spacing used by the system, which has little to do with the implementation of the present invention and is common knowledge and will not be introduced in detail), etc. For example, if a transmission cycle is 8 time slots and the fixed order of transmission is 1-2-3-4, then in the first two time slots of the 8 time slots, the authentication device of the first workshop sends first (if the first workshop has multiple production devices, multiple production devices will send data to the first authentication device, and then the first authentication device determines whether all these data can be sent to the server in the 1st and 2nd time slots. If it is determined that all these data cannot be sent to the server in the 1st and 2nd time slots, the remaining data can continue to be sent in the next transmission cycle), and then the authentication device of the second workshop sends in the 3rd and 4th time slots of the transmission cycle, and then in the The 5th and 6th time slots of the sending cycle are sent by the authentication device of the third workshop, and finally the last two time slots of the sending cycle are sent by the authentication device of the fourth workshop. In this example, the order in which the first authentication device sends data to the server is order 1; for example, if a sending cycle is 8 time slots and the fixed order of sending is 2-4-1-3, then in the first two time slots of the 8 time slots, the authentication device of the second workshop sends first, and then in the 3rd and 4th time slots of the sending cycle, the authentication device of the fourth workshop sends, and then in the 5th and 6th time slots of the sending cycle, the authentication device of the first workshop sends, and finally in the last two time slots of the sending cycle, the authentication device of the third workshop sends. In this example, the order in which the first authentication device sends data to the server is order 3; in an example, the data sent by the first production device to the authentication device in the present invention needs to be verified by a CRC algorithm. The CRC verification algorithm is an algorithm well known in the art and will not be described in detail in the present invention. As an example, the present invention can use CRC 16 algorithm is used to verify the data. The data of the present invention includes a payload (that is, the real production data) and a CRC bit attached to the payload. The scrambling algorithm used in the present invention is an "exclusive OR" operation. A simple example is used to illustrate the exclusive OR operation. For example, if a part of the CRC bit is "10000" and the corresponding part of the first random sequence is "01010", then the result of the exclusive OR operation of the two is "11010". The result obtained by the exclusive OR operation is called scrambling in the present invention.

[0065] Step 2: The first authentication device determines a first random sequence based on the first position and the order in which the first authentication device sends data to the server; the specific operation of the first authentication device determining the first random sequence is detailed in the following embodiment;

[0066] Step 3: The first authentication device decrypts the encrypted first data using the first random sequence to obtain the decrypted first data; as an example, the decryption operation is a process of descrambling the scrambled CRC bits. Continuing with the above example, a portion of the scrambled CRC bits is "11010", and the corresponding portion of the first random sequence is still "01010". The two are XORed to obtain a result of "10000", that is, a portion of the CRC bits after descrambling is "10000";

[0067] Step 4: The first authentication device verifies the decrypted first data; it should be understood that verification refers to the authentication device performing CRC calculation on the payload part of the received data, and comparing the obtained CRC bits with the CRC bits of the payload part suffix. If the CRC bits calculated by the authentication device are consistent with the CRC bits of the payload part suffix, the decrypted first data is considered to be valid data. If the CRC bits calculated by the authentication device are inconsistent with the CRC bits of the payload part suffix, the decrypted first data is considered to be invalid data. Of course, it can be understood that there are two reasons for causing the decrypted first data to be invalid data. One is that the payload part of the data sent by the first production device to the first authentication device has poor channel quality, resulting in some payload bits being transmitted incorrectly, resulting in the decrypted first data being invalid data. The other reason is that the unauthorized device cannot correctly scramble the CRC bits because it does not know the first random sequence, which will inevitably cause the authentication device to consider the decrypted first data to be invalid data after verification.

[0068] Step 5: If the first authentication device verifies that the decrypted first data is valid data, the first authentication device encrypts the decrypted first data using the first random sequence to obtain the re-encrypted first data; this step is to prevent unauthorized devices from pretending to be the authentication device and sending data to the server. For example, if the first authentication device directly sends the decrypted first data to the server, then the unauthorized device can pretend to be the first authentication device and directly send unprocessed data to the server. The form of such unprocessed data is completely consistent with the decrypted first data. Such operation will reduce the security of the system.

[0069] Step 6: The first authentication device sends the re-encrypted first data to the server.

[0070] Example 3

[0071] In Embodiment 3, determining the first random sequence by the first authentication device based on the first position and the order in which the first authentication device sends data to the server includes the following steps:

[0072] The first authentication device reads a random sequence record table stored in the first authentication device, wherein the random sequence record table includes a plurality of random sequence record sub-tables, wherein each random sequence record sub-table corresponds to an order in which the first authentication device sends data to the server, wherein each random sequence record sub-table records a plurality of entries, wherein each entry records a position of the authentication device and a random sequence corresponding to the position of the authentication device; in an example, the random sequence record table is in the following form:

[0073]

[0074]

[0075] Table 1

[0076]

[0077] Table 2

[0078]

[0079] Table 3

[0080]

[0081]

[0082] Table 4

[0083] The above set of Tables 1 to 4 is what the present invention calls a "random sequence record table" (of course, it is pre-configured before the system is run, for example, the random sequence record table can be written into the read-only memory of each device), and each of Tables 1 to 4 is a random sequence record sub-table. It can be understood that the above Tables 1 to 4 are the simplest examples of the "random sequence record table". If the factory has eight workshops, 8 random sequence record sub-tables are required, and each random sequence record sub-table needs to have 8 entries, wherein each entry records the corresponding relationship between the position and the random sequence. In order to improve security, even if the factory has only 4 workshops, 8 random sequence record subtables can be set up, and each random sequence record subtable can record 8 entries. However, for a factory with 4 workshops, 4 of the random sequence record subtables and the 4 entries in each random sequence record subtable are not used. However, unauthorized users do not know which of the 4 random sequence record subtables and the 4 entries in each random sequence record subtable are not used. Therefore, even if an unauthorized user obtains the entire "random sequence record table", he or she cannot determine the correct random sequence, which improves system security. It should also be pointed out that the random sequence of the present invention can be applied to CRC bits of any length. Assuming that the CRC bits are 10 bits, the first ten bits of the random sequence can be used to scramble the CRC bits. Assuming that the CRC bits are 32 bits, the random sequence can be used to scramble the last 16 CRC bits of the 32-bit CRC bits. It can be seen that the method provided by the present invention has strong scalability. In addition, it can be understood that all random sequences in the random sequence record table can be regenerated after being used for a period of time, which can improve the security of the system. The method for determining the random sequence by the production device and the server (the server of course needs to know the location of the authentication device and the order of sending data through a known method) is the same as the method for determining the random sequence by the authentication device, which will not be repeated.

[0084] The first authentication device determines the first random sequence record subtable based on the order in which the first authentication device sends data to the server, wherein the order in which the first authentication device sends data to the server at this time is the first order; as an example, continuing the sequence of embodiment 2, assuming that the order in which the first authentication device sends data to the server at this time is order 1, the first authentication device determines that the random sequence record subtable is table 1;

[0085] The first authentication device determines the first random sequence based on the first position and the first random sequence record subtable; as an example, continuing the previous example, the first random sequence is determined to be "101010101010101010" through the entry "first position" in Table 1.

[0086] Example 4

[0087] In embodiment 4, the method further comprises:

[0088] The first authentication device updates the order in which the first authentication device sends data to the server from the first order to the second order; in one example, the first authentication device can adjust the order in which the first authentication device sends data to the server based on the command sent by the server. For example, based on the example of Embodiment 2, the order in which the first authentication device sends data to the server is adjusted from the initial order 1 to the order 3. The purpose of this order adjustment is also to ensure system security. If the order in which data is sent is not adjusted for a long time, the first authentication device will use the first random sequence for a long time, which may cause the first random sequence to be cracked by trial and error. For example, the factory can change the order in which the first authentication device sends data to the server every hour.

[0089] The first authentication device notifies the first production device that the order in which the first authentication device sends data to the server has been updated to the second order;

[0090] The first authentication device receives the encrypted second data sent by the first production device, wherein the CRC bits of the encrypted second data are scrambled by a second random sequence, wherein the second random sequence is associated with the first position, and the second random sequence is associated with the second order; the first production device knows its own position, and knows that the sending order of the first authentication device is order 3, therefore, the first production device first calls the aforementioned Table 3 based on order 3, and then determines through the entry of the "first position" of Table 3 that the second random sequence is "0001101010101011".

[0091] Determining, by the first authentication device, a second random sequence based on the first position and the second order;

[0092] The first authentication device decrypts the encrypted second data using the second random sequence to obtain the decrypted second data.

[0093] In a preferred embodiment, the method further comprises:

[0094] The first authentication device updates the order in which the first authentication device sends data to the server from the first order to the second order, and updates the first position to the second position;

[0095] The first authentication device notifies the second production device that the order in which the first authentication device sends data to the server has been updated to the second order;

[0096] receiving, by a first authentication device, encrypted third data sent by a second production device, wherein the first authentication device and the second production device are located at a second location, wherein CRC bits of the encrypted third data are scrambled by a third random sequence, wherein the third random sequence is associated with the second location, and wherein the third random sequence is associated with the second order;

[0097] Determining, by the first authentication device, a third random sequence based on the second position and the second order;

[0098] The first authentication device decrypts the encrypted third data using a third random sequence to obtain decrypted third data.

[0099] In a preferred embodiment, the method further comprises:

[0100] If the first authentication device verifies that the decrypted first data is invalid data, the first authentication device sends a retransmission instruction to the first production device, so that the first production device resends the decrypted first data to the first authentication device.

[0101] Example 5

[0102] The present invention provides a data collection device for digital delivery of smart factories, characterized in that the device includes a module for performing the following operations:

[0103] Receiving, by a first authentication device, encrypted first data sent by a first production device, wherein the first authentication device and the first production device are located at a first position, wherein cyclic redundancy check (CRC) bits of the encrypted first data are scrambled by a first random sequence, wherein the first random sequence is associated with the first position, and the first random sequence is associated with an order in which the first authentication device sends data to a server;

[0104] The first authentication device determines a first random sequence based on the first position and the order in which the first authentication device sends data to the server;

[0105] The first authentication device decrypts the encrypted first data using the first random sequence to obtain the decrypted first data;

[0106] The first authentication device verifies the decrypted first data;

[0107] If the first authentication device verifies that the decrypted first data is valid data, the first authentication device encrypts the decrypted first data using the first random sequence to obtain re-encrypted first data;

[0108] The first authentication device sends the re-encrypted first data to the server.

[0109] In a preferred embodiment, determining the first random sequence by the first authentication device based on the first position and the order in which the first authentication device sends data to the server comprises the following steps:

[0110] The first authentication device reads a random sequence record table stored in the first authentication device, wherein the random sequence record table includes a plurality of random sequence record sub-tables, wherein each random sequence record sub-table corresponds to an order in which the first authentication device sends data to the server, wherein each random sequence record sub-table records a plurality of entries, wherein each entry records a position of the authentication device and a random sequence corresponding to the position of the authentication device;

[0111] The first authentication device determines the first random sequence record subtable based on the order in which the first authentication device sends data to the server, wherein the order in which the first authentication device sends data to the server is the first order;

[0112] The first authentication device determines the first random sequence based on the first position and the first random sequence record subtable.

[0113] In a preferred embodiment, the device further comprises a module for performing the following operations:

[0114] The first authentication device updates the order in which the first authentication device sends data to the server from a first order to a second order;

[0115] The first authentication device notifies the first production device that the order in which the first authentication device sends data to the server has been updated to the second order;

[0116] Receiving, by the first authentication device, encrypted second data sent by the first production device, wherein CRC bits of the encrypted second data are scrambled by a second random sequence, wherein the second random sequence is associated with the first position, and the second random sequence is associated with the second order;

[0117] Determining, by the first authentication device, a second random sequence based on the first position and the second order;

[0118] The first authentication device decrypts the encrypted second data using the second random sequence to obtain the decrypted second data.

[0119] In a preferred embodiment, the device further comprises a module for performing the following operations:

[0120] The first authentication device updates the order in which the first authentication device sends data to the server from the first order to the second order, and updates the first position to the second position;

[0121] The first authentication device notifies the second production device that the order in which the first authentication device sends data to the server has been updated to the second order;

[0122] receiving, by a first authentication device, encrypted third data sent by a second production device, wherein the first authentication device and the second production device are located at a second location, wherein CRC bits of the encrypted third data are scrambled by a third random sequence, wherein the third random sequence is associated with the second location, and wherein the third random sequence is associated with the second order;

[0123] Determining, by the first authentication device, a third random sequence based on the second position and the second order;

[0124] The first authentication device decrypts the encrypted third data using a third random sequence to obtain decrypted third data.

[0125] In a preferred embodiment, the device further comprises a module for performing the following operations:

[0126] If the first authentication device verifies that the decrypted first data is invalid data, the first authentication device sends a retransmission instruction to the first production device, so that the first production device resends the decrypted first data to the first authentication device.

[0127] It should be understood that the above specific embodiments of the present invention are only used to illustrate or explain the principles of the present invention, and do not constitute a limitation of the present invention. Therefore, any modifications, equivalent substitutions, improvements, etc. made without departing from the spirit and scope of the present invention should be included in the protection scope of the present invention. In addition, the appended claims of the present invention are intended to cover all changes and modifications that fall within the scope and boundaries of the appended claims, or the equivalent forms of such scope and boundaries.

Claims

1. A data collection method for digital delivery of smart factories, characterized in that: The method comprises: Receiving, by a first authentication device, encrypted first data sent by a first production device, wherein the first authentication device and the first production device are located at a first position, wherein cyclic redundancy check (CRC) bits of the encrypted first data are scrambled by a first random sequence, wherein the first random sequence is associated with the first position, and the first random sequence is associated with an order in which the first authentication device sends data to a server; The first authentication device determines the first random sequence based on the first position and the order in which the first authentication device sends data to the server; The first authentication device decrypts the encrypted first data using the first random sequence to obtain the decrypted first data; Verifying the decrypted first data by a first authentication device; If the first authentication device verifies that the decrypted first data is valid data, the first authentication device encrypts the decrypted first data using the first random sequence to obtain the re-encrypted first data; The first authentication device sends the re-encrypted first data to the server.

2. The method according to claim 1, wherein: Determining the first random sequence by the first authentication device based on the first position and the order in which the first authentication device sends data to the server comprises the following steps: The first authentication device reads a random sequence record table stored in the first authentication device, wherein the random sequence record table includes a plurality of random sequence record sub-tables, wherein each random sequence record sub-table corresponds to an order in which the first authentication device sends data to a server, wherein each random sequence record sub-table records a plurality of entries, wherein each entry records a position of the authentication device and a random sequence corresponding to the position of the authentication device; The first authentication device determines the first random sequence record subtable based on the order in which the first authentication device sends data to the server, wherein the order in which the first authentication device sends data to the server is the first order; The first random sequence is determined by a first authentication device based on the first position and the first random sequence record subtable.

3. The method according to claim 2, wherein: The method further comprises: The first authentication device updates the order in which the first authentication device sends data to the server from the first order to a second order; The first authentication device notifies the first production device that the order in which the first authentication device sends data to the server has been updated to the second order; Receiving, by the first authentication device, encrypted second data sent by the first production device, wherein CRC bits of the encrypted second data are scrambled by a second random sequence, wherein the second random sequence is associated with the first position, and the second random sequence is associated with the second order; Determining, by a first authentication device, the second random sequence based on the first position and the second sequence; The first authentication device decrypts the encrypted second data using the second random sequence to obtain decrypted second data.

4. The method according to claim 3, wherein: The method further comprises: The first authentication device updates the order in which the first authentication device sends data to the server from the first order to a second order, and updates the first position to a second position; The first authentication device notifies the second production device that the order in which the first authentication device sends data to the server has been updated to the second order; receiving, by a first authentication device, encrypted third data sent by a second production device, wherein the first authentication device and the second production device are located at the second location, wherein CRC bits of the encrypted third data are scrambled by a third random sequence, wherein the third random sequence is associated with the second location, and wherein the third random sequence is associated with the second order; Determining, by the first authentication device, the third random sequence based on the second position and the second order; The first authentication device decrypts the encrypted third data using the third random sequence to obtain decrypted third data.

5. The method according to claim 4, wherein: The method further comprises: If the first authentication device verifies that the decrypted first data is invalid data, the first authentication device sends a retransmission instruction to the first production device, so that the first production device resends the decrypted first data to the first authentication device.

6. A data collection device for digital delivery of smart factories, characterized in that: The apparatus includes modules for performing the following operations: Receiving, by a first authentication device, encrypted first data sent by a first production device, wherein the first authentication device and the first production device are located at a first position, wherein cyclic redundancy check (CRC) bits of the encrypted first data are scrambled by a first random sequence, wherein the first random sequence is associated with the first position, and the first random sequence is associated with an order in which the first authentication device sends data to a server; The first authentication device determines the first random sequence based on the first position and the order in which the first authentication device sends data to the server; The first authentication device decrypts the encrypted first data using the first random sequence to obtain the decrypted first data; Verifying the decrypted first data by a first authentication device; If the first authentication device verifies that the decrypted first data is valid data, the first authentication device encrypts the decrypted first data using the first random sequence to obtain the re-encrypted first data; The first authentication device sends the re-encrypted first data to the server.

7. The device according to claim 6, wherein: Determining the first random sequence by the first authentication device based on the first position and the order in which the first authentication device sends data to the server comprises the following steps: The first authentication device reads a random sequence record table stored in the first authentication device, wherein the random sequence record table includes a plurality of random sequence record sub-tables, wherein each random sequence record sub-table corresponds to an order in which the first authentication device sends data to a server, wherein each random sequence record sub-table records a plurality of entries, wherein each entry records a position of the authentication device and a random sequence corresponding to the position of the authentication device; The first authentication device determines the first random sequence record subtable based on the order in which the first authentication device sends data to the server, wherein the order in which the first authentication device sends data to the server is the first order; The first random sequence is determined by a first authentication device based on the first position and the first random sequence record subtable.

8. The device according to claim 7, wherein: The apparatus also includes a module for performing the following operations: The first authentication device updates the order in which the first authentication device sends data to the server from the first order to a second order; The first authentication device notifies the first production device that the order in which the first authentication device sends data to the server has been updated to the second order; Receiving, by the first authentication device, encrypted second data sent by the first production device, wherein CRC bits of the encrypted second data are scrambled by a second random sequence, wherein the second random sequence is associated with the first position, and the second random sequence is associated with the second order; Determining, by a first authentication device, the second random sequence based on the first position and the second sequence; The first authentication device decrypts the encrypted second data using the second random sequence to obtain decrypted second data.

9. The device according to claim 8, wherein: The apparatus also includes a module for performing the following operations: The first authentication device updates the order in which the first authentication device sends data to the server from the first order to a second order, and updates the first position to a second position; The first authentication device notifies the second production device that the order in which the first authentication device sends data to the server has been updated to the second order; receiving, by a first authentication device, encrypted third data sent by a second production device, wherein the first authentication device and the second production device are located at the second location, wherein CRC bits of the encrypted third data are scrambled by a third random sequence, wherein the third random sequence is associated with the second location, and wherein the third random sequence is associated with the second order; Determining, by the first authentication device, the third random sequence based on the second position and the second order; The first authentication device decrypts the encrypted third data using the third random sequence to obtain decrypted third data.

10. The device according to claim 9, wherein: The apparatus also includes a module for performing the following operations: If the first authentication device verifies that the decrypted first data is invalid data, the first authentication device sends a retransmission instruction to the first production device, so that the first production device resends the decrypted first data to the first authentication device.

Images